# changelog

author: yaoxin <yao_xin001@hoperun.com> - 3.1.1-1
changelog:
  - Update to 3.1.1
    * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199
    * Issue 6172 - RFE: improve the performance of evaluation of filter component 
      when tested against a large valueset (like group members) #6173
    * Issue 6181 - RFE - Allow system to manage uid/gid at startup
    * Issue 6238 - RFE - add option to write audit log in JSON format
    * Issue 6241 - Add support for CRYPT-YESCRYPT #6242
    * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219
    * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124
    * Issue 6155 - ldap-agent fails to start because of permission error #6179
    * Issue 6170 - audit log buffering doesn’t handle large updates
    * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168
    * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208
    * Issue 6199 - unprotected search query during certificate based authentication #6205
    * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225
    * Issue 6229 - After an initial failure, subsequent online backups fail #6230
    * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255
    * Issue 6256 - nsslapd-numlisteners limit is not enforced
    * Issue 6265 - lmdb - missing entries in range searches #6266
    * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1


author: Xiong Zhou <xiongzhou4@huawei.com> - v1.0-4
changelog:
  - Type:Sync
  - ID:NA
  - SUG:NA
  - DESC:Sync patches from openeuler/A-FOT
         Add reboot action to fasten the second compilation,
         fix bugs and format codes.
  	   Reuse calcsum, delay pre-reboot operations and fixs typos.


author: li-miaomiao_zhr<mmlidc@isoftstone.com> - 1.0.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix wrong file name referenced in spec file causing build failure,remove spec file from the source package


author: yaoxin <yaoxin30@huawei.com> 2.4.3-5
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-44228 is fixed, the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> 2.4.3-6
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-45105 is fixed, the version needs to be rebuild.


author: liyuanrong<liyuanrong1@huawei.com> - 1.0.8-6
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:restart
  - DESC:add KubeOS image creation docs with ignition and fstab support


author: dongchen<dongchen20@h-partners.com> - 1.0.8-8
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:restart
  - DESC:Fix the issue of probabilistic mounting failure in fstab


author: wangkai <13474090681@163.com> - 0.22.1-1
changelog:
  - Update to 0.22.1
  - Fix CVE-2026-20884, CVE-2026-20889, CVE-2026-20911, CVE-2026-21413,
    CVE-2026-24450, CVE-2026-24660, CVE-2026-5318, CVE-2026-5342


author: panchenbo <panchenbo@kylinsec.com.cn> - 1.22.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix build error: add missing BuildRequires:pkgconfig(polkit-gobject-1)


author: liuzhilin <liuzhilin@uniontech.com> - 1:1.44.2-2
changelog:
  - add NM to support wifi6(fix dde-network-core build error)
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:Support wireless networks connecting WIFI6 encryption methods,
         so this demand is achieved in NetworkManager, KF5-NetworkManager-QT,
         DDE-Network-Core software package


author: qinxue <qinxue6@h-partners.com> - 1:1.44.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mptcp fix error handling rp_filter when kernel don't support mptcp


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.8-2
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: pkcon: Use appropriate callbacks for client / task async calls


author: lingsheng <lingsheng1@h-partners.com> - 1.2.8-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Revert PkClient: Replace the GSimpleAsyncResult with the GTask API


author: Funda Wang <fundawang@yeah.net> - 1.2.8-4
changelog:
  - move dbus interface to main package
  - split out gtk module from devel sub package
  - cleanup buildrequires


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 4.0.5-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix error log for task stop function
         fix integer overflow rish in QueryEvents
         fix potential fd leak issue
         fix the infinite loop for cleanup_thread-thread


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change os name in service desc
         delete sensitive information content


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(xalarm): fix service stop timeout and PID lock release issues


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 36.16.5-52
changelog:
  - Type:bugfix
   - ID:NA
   - SUG:NA
   - DESC:Fixed the issue of "D_isable root account" not being translated

   * Fri Feb 27 2026 zhaoyognhao <zhaoyonghao10@h-partners.com> - 36.16.5-51
   - Type:feature
   - ID:NA
   - SUG:NA
   - DESC: enable ssh login checkbox


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 36.16.5-54
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC: add kernel 64k page size and kernel options Chinese translation support

   * Mon Mar 9 2026 zhaoyonghao <zhaoyognhao10@h-partners.com> - 36.16.5-53
   - Type:requirement
   - ID:NA
   - SUG:NA
   - DESC:Port GUI kernel switcher for ARM 64k


author: yueyuankun <yueyuankun@kylinos.cn> - 36.16.5-55
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix permissions of the ssh config created by Anaconda
          fix(users): ensure SSH config directory exists before writing


author: yaoxin <yao_xin001@hoperun.com> - 2.12.0-1
changelog:
  - Update to 2.12.0
  - Bootloader Images:
      * remove unused plat_try_next_boot_source
  - Architecture:
      *Branch Record Buffer Extension (FEAT_BRBE)
      * allow RME builds with BRBE
  - Arm:
      * avoid stripping kernel trampoline
      * add DRAM memory regions that linux kernel can share
      * add optee specific mem-size attribute
      * add secure uart interrupt in device region
      * enable FEAT_MTE2
      * fix the FF-A optee manifest by adding the boot info node
      * update the memory size allocated to optee at EL1
  - Intel:
      * add cache invalidation during BL31 initialization
      * add in JTAG ID for Linux FCS
      * add in missing ECC register
      * add in watchdog for QSPI driver
      * bridge ack timing issue causing fpga config hung
      * correct macro naming
      * f2sdram bridge quick write thru failed
      * fix bridge enable and disable function
      * fix CCU for cache maintenance
      * flush L1/L2/L3/Sys cache before HPS cold reset
      * implement soc and lwsoc bridge control for burst speed
      * refactor SDMMC driver for Altera products
      * remove redundant BIT_32 macro
      * software workaround for bridge timeout
      * update Agilex5 BL2 init flow and other misc changes
      * update Agilex5 warm reset subroutines
      * update all the platforms hand-off data offset value
      * update CCU configuration for Agilex5 platform
      * update mailbox SDM printout message
      * update memcpy to memcpy_s ([e264b55]
      * update outdated code for Linux direct boot
      * update preloaded_bl33_base for legacy product
      * update sip smc config addr for agilex5
      * update the size with addition 0x8000 0000 base


author: Funda Wang <fundawang@yeah.net> - 5.3.1-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-2751 CVE-2025-3158 CVE-2025-3196
  - SUG:NA
  - DESC:fix CVE-2025-2751 CVE-2025-3158 CVE-2025-3196


author: mapengyuan <mapengyuan@xfusion.com> - 5.3.1-16
changelog:
  - Type:CVE
  - CVE:CVE-2025-2754 CVE-2025-2756 CVE-2025-5200
  - SUG:NA
  - DESC:fix CVE-2025-2754 CVE-2025-2756 CVE-2025-5200


author: majianhan <majianhan@kylinos.cn> - 5.3.1-17
changelog:
  - Type:CVE
  - CVE:CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204
  - SUG:NA
  - DESC:fix CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-healing capabilities for service


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 3.2.5-2
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: zhangpan <zhangpan103@h-partners.com> - 2.51.0-5
changelog:
  - add macros to control if need /usr/bin/xprop
  - at-spi2-core-help package provided at-spi2-atk-help


author: baizhonggui <baizhonggui@huawei.com> - 0.2.92-3
changelog:
  - Fix building error: File must begin with "/": /usr/lib/systemd/system/attest_ra_server.service
  - Add systemd in BuildRequires


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:3.1.2-12
changelog:
  - backport patches for fixing Wimplicit-function-declaration, Wbuiltin-declaration-mismatch when building with newer compilers


author: Ge Wang <wang__ge@126.com> - 1.0-0.34
changelog:
  - Replace buildrequire kde-filesystem with kde4-filesystem due to kde-filesytem updated to version 5-1


author: wangkai <wangkai385@huawei.com> - 0:4.3-23
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0:4.3-24
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: wangyuhang <wangyuhang27@huawei.com> -5.2.15-13
changelog:
  - remove the log message for failing to open cmdline,
    and ensure that the mayexec function does not modify the value of errno.


author: yixiangzhike <yixiangzhike007@163.com> - 5.2.15-16
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: yaoxin <yao_xin001@hoperun.com> - 1.17-1
changelog:
  - Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730


author: liequan che <cheliequan@inspur.com> - 1.1-4
changelog:
  - add bcache-export-cached to export CACHED_UUID and CACHED_LABEL,so that 69-bcache.rules
  udev rules can correctly create uuid and label links for bcache devices


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: tangce<tangce1@huawei.com> - 32:9.18.21-5
changelog:
  - Type:CVE
  - CVE:CVE-2025-8677,CVE-2025-40778,CVE-2025-40780
  - SUG:NA
  - DESC:fix CVE-2025-8677,CVE-2025-40778,CVE-2025-40780


author: tangce <tangce1@h-partners.com> - 32:9.20.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2026-3039,CVE-2026-3593,CVE-2026-3593,CVE-2026-5946,CVE-2026-5947
  ,CVE-2026-5950
  - SUG:NA
  - DESC:fix CVE-2026-3039,CVE-2026-3593,CVE-2026-3593,CVE-2026-5946,CVE-2026-5947,CVE-2026-5950


author: yueyuankun <yueyuankun@kylinos.cn> - 3.8.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix syntax error on SymbolKind.toString method
         fix interface syntax error


author: sunhai<sunhai10@huawei.com> - 1:3.8.2-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix expected exception type when activating devices in populor


author: Huang Yang <huangyang@loongson.cn> - 1.8.18-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolve malloc aborted error raised when executing ipmitool fru.


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-12
changelog:
  - btrfs-progs: convert: insert a dummy inode item before inode ref for ext2/4
  - btrfs-progs: convert: for ext2, fix possible tree-checker error when converting a large fs


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-17
changelog:
  - sync patch from community
    btrfs-progs: fix the wrong size from device_get_partition_size_sysfs()


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-19
changelog:
  - sync patch from community
    btrfs-progs: subvolume: fix a bug that leads to unnecessary error message


author: yaoxin <1024769339@qq.com> - 20250113-1
changelog:
  - Update to 20250113:
    * Parse unknown timezones as UTC
    * Apk (Alpine Linux) format support added
    * Implement default value in parameter expansion
    * Also support supplements that use & as "and"
    * Add workaround for skopeo's argument parser
    * add cap-htm=off on power9
    * Fixed usage of chown calls
    * Remove leading `go` from `purl` locators


author: jianmin <jianmin@iscas.ac.cn> - 1.34.1-5
changelog:
  - Type:cve
  - CVE:CVE-2024-3727 CVE-2024-24791
  - SUG:NA
  - DESC: fix CVE-2024-3727 and Rebuild to fix CVE-2024-24791


author: wangjiang <wangjiang37@h-partners.com> - 2023.2.64-2
changelog:
  - remove expired and sync new certificates
    Removing:
      Security Communication Root CA
    Adding:
      D-Trust SBR Root CA 1 2022
      D-Trust SBR Root CA 2 2022
      Telekom Security SMIME ECC Root 2021
      Telekom Security SMIME RSA Root 2023
      Telekom Security TLS ECC Root 2020
      Telekom Security TLS RSA Root 2023


author: wangjiang <app@cameyan.com> - 2023.2.64-4
changelog:
  - remove expired and sync new certificates
    Removing:
      Certificate "Explicitly Distrust DigiNotar Root CA"
      Certificate "Baltimore CyberTrust Root"
    Adding:
      Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
      Certificate "TWCA CYBER Root CA"
      Certificate "TWCA Global Root CA G2"
      Certificate "SecureSign Root CA12"
      Certificate "SecureSign Root CA14"
      Certificate "SecureSign Root CA15"
      Certificate "D-TRUST BR Root CA 2 2023"
      Certificate "D-TRUST EV Root CA 2 2023"


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1.18.0-2
changelog:
  - Type:CVE
  - ID:CVE-2025-50422
  - SUG:NA
  - DESC:Fix a NULL access in active_edges_to_traps()
         Add unlikely() to test for x == INT32_MAX for the NULL reference


author: yyjeqhc <jialin.oerv@isrc.iscas.ac.cn> - 1.0.1-6
changelog:
  - Add select local image to build.
  - Add support for setting target architecture during local builds.


author: yangyun <yangyun50@huawei.com> - 1.5.5-1
changelog:
  - update to 1.5.5 version
  	- add support of readers (see README.md)
  	- configure.ac: disable the use of --disabele-usbdropdir
  	- parse: create output.bin file
  	- udev: Disable USB-persist for CCID devices
  	- configure: fail if flex is not found
  	- some other minor improvments


author: zhoupengcheng <zhoupengcheng11@huawei.com> - 0.2.4-4
changelog:
  - packing chatglm_convert.py file
  - install python models for chatglm_convert.py int dockerfile
  - update long-term yum.repo in dockerfile


author: openeuler_bot <infra@openeuler.sh> - 0.6.2.4-1
changelog:
  - fix memory leak in ECDH-ES JWE encryption/decryption (version:0.6.2.4).
  - fix rsa_q = NULL initialization in _RSA_private_fields (version:0.6.2.4).
  - fix memory allocation check (typo) in jwk.c (version:0.6.2.4).
  - fix gcc10 errors for -Werror=ignored-qualifiers and remove unused includes (version:0.6.2.4).
  - re-generate automake/autoconf files with automake v1.17 and libtool v2.5.4 (version:0.6.2.4).


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-56
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.2
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.2


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-57
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.3
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.3


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-58
changelog:
  - update to llvm-for-oe-17.0.6-2603.0.1
  - release-note https://gitcode.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2603.0.1


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-60
changelog:
  - update to llvm-for-oe-17.0.6-2603.0.2
  - release-note https://gitcode.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2603.0.2


author: eastb233 <xiezhiheng@huawei.com> - 17.0.6-64
changelog:
  - update to llvm-for-oe-17.0.6-2606.0.1
  - release-note https://atomgit.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2606.0.1


author: dongyuzhen <dongyuzhen@h-partners.com> - 23.4.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:net/sysconfig: do not remove all existing settings of /etc/sysconfig/network
         fix: typing for rsyslog, ubuntu_pro, power_state_change


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix: Add get_connection_with_tls_context() for requests 2.32.2+


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.27.9-5
changelog:
  - Support 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/cmake-3.31.12-1.oe2403sp4.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu".


author: fuanan <fuanan3@h-partners.com> - 3.27.9-6
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: yueyuankun <yueyuankun@kylinos.cn> - 34.1-9
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Remove redundant ifarch blocks and obsolete patches
         Improve maintainability with architecture-agnostic configuration


author: lijian <lijian2@kylinos.cn> - 2:2.230.0-1
changelog:
  - Update container-selinux to v2.230.0
  - Allow containers to unmount file systems
  - Add buildah as a container_runtime_exec_t label
  - Additional rules for container_user_t
  - Add some MLS rules to policy
  - Add container_file_t and container_ro_file_t as user_home_type


author: dongyuzhen <dongyuzhen@h-partners.com> - 1.6.22-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:delete task asynchronously to avoid containerd be killed when delete is blocking


author: Yu Peng <yupeng@kylinos.cn> - 1.6.22-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix ctr snapshot mount produce invalid mount command for empty option.


author: hugel <gengqihu2@h-partners.com> - 9.4-12
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: Peng Fan <fanpeng@loongson.cn> - 12.3.1-110
changelog:
  - Type: BUGFIX
  - DESC:
  - LoongArch: sync fix from upstream.
  - Adjusting the sequence number and name of the patches


author: yixiangzhike <yixiangzhike007@163.com> - 1.17.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the failure of testcase when building with python-setuptools>=66.0.0


author: wangxiao <wangxiao184@h-partners.com> - 8.0.4-15
changelog:
  - remove the arch judgment, include all patches in the src package
  - use patch command to apply patches for consistency in context


author: lijian1 <lijian1@kylinos.cn> - 8.0.4-17
changelog:
  - fix loongarch64 support so file extension error for elf64 lack the branch while elf32 do not need.


author: lijian <lijian2@kylinos.cn> - 1.8.7-1
changelog:
  - update to 1.8.7
  - crun: new command "crun features".
  - linux: support io_priority from the OCI specs.
  - cgroup: allow setting swap to 0.
  - cgroup, systemd: set the memory limit on the system scope.


author: yixiangzhike <yixiangzhike007@163.com> - 20230614-1.git5f3458e
changelog:
  - update version to 20230614
    - DEFAULT policy drop DH<2048bits,TLS1.0,TLS1.1,SHA-1
    - Remove the CBC ciphers from DEFAULT policy in openssh
    - FIPS policy drop the CBC ciphersuites
    - Enable RSA-PSK algorithms in DEFAULT and LEGACY policies
    - Add the diffie-hellman-group14-sha256 to libssh
    - Add --check option to update-crypto-policies
    - Add AES-192 algorithms support
    - Use allowlisting config for gnutls
    - Enable SHAKE algorithms for gnutls,java and nss
    - Openssl disable SHA-1 signatures in FUTURE policy
    - Openssh add HostbasedAcceptedAlgorithms and RequiresRSASize config options


author: xinghe <xingheyd@163.com> - 4.19.3-9
changelog:
  - Type:cves
  - ID:CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408
  - SUG:NA
  - DESC:fix CVE-2026-3238 CVE-2026-3012 CVE-2026-4480 CVE-2026-4408


author: Funda Wang <fundawang@yeah.net> - 1:2.4.7-7
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: chenyanpan <chenyanpan@xfusion.com> - 1:2.4.7-13
changelog:
  - Fix CVE-2026-34979: Heap overflow in get_options()
  - Fix CVE-2026-34980: Filter control characters from option values


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         h3: fix query of concurrent streams
         noproxy: fix the IPV6 network mask pattern match
         krb5_gssapi: fix memory leak on error path
         openldap: fix memory-leak in error path
         conn: fix hostname move on connection reuse 
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes
         openssl: fix a potential memory leak of params.cert


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:urlapi: avoid null deref if setting blank host to url
         urlapi: skip appending NULL pointer query


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-26
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-28
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-29
changelog:
  - Type:CVE
  - CVE:CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168
  - SUG:NA
  - DESC:fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-30
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:http1: fix potential NULL dereference in Curl_h1_req_parse_read
         mqtt: fix EOF handling


author: senlin <xiasenlin1@huawei.com> - 1.0.0-19
changelog:
  - Type: Correction of bad behavior
  - ID: NA
  - SUG: NA
  - DESC: Specify the specific sudo commands for abuild users


author: xu_ping <xuping33@h-partners.com> - 1.0.0-20
changelog:
  - Type: fix warning
  - ID: NA
  - SUG: NA
  - DESC: fix install custom_build_tool warning due to new rpm-build not provides find-debuginfo.sh


author: wangkai <13474090681@163.com> - 1.11.23-54
changelog:
  - Add patches from fedora, improve C compatibility and fix build failures caused by higher gcc versions


author: wuyifeng <wuyifeng10@huawei.com> - 78-1
changelog:
  - upgrade to version 78:
  	-incorporate up to 6.5 kernel
  	-add new cxl commands
  	-fix some bugs detail see:github.com/pmem/ndctl


author: yaoxin <yaoxin30@huawei.com> - 3.2.15-4
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: hongjinghao <hongjinghao@huawei.com> - 1:1.14.8-3
changelog:
  - sync patch from upstream
  	backport-bus-Don-t-crash-if-bus_context_create_client_policy-.patch
  	backport-bus-When-failing-to-reload-client-policy-continue-it.patch
  	backport-test-Add-a-targeted-test-for-_dbus_unix_groups_from_.patch
  	backport-userdb-Add-proper-error-reporting-when-getting-group.patch


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: Miroslav Suchý <msuchy@redhat.com> 1.82-1
changelog:
  - move symlink of fedora-rawhide to fedora-39
  - add openEuler new key
  - update copr keys
  - add fedora 40 gpg key


author: Miroslav Suchý <msuchy@redhat.com> 1.84-1
changelog:
  - add tumbleweed key
  - Added RPM Fusion keys for Fedora 39.
  - update copr keys
  - add elastic gpg key


author: Miroslav Suchý <msuchy@redhat.com> 1.86-1
changelog:
  - update copr keys
  - Add Jenkins 2023
  - Add keys for Bacula & Baculum
  - Add keys for Google Cloud
  - Add VeraCrypt keys
  - add Element keys


author: hanhuihui <hanhuihui5@huawei.com> - 4.16.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver


author: LuWu <2398491106@qq.com> - 4.16.2-5
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: majianhan <majianhan@kylinos.cn> - 4.16.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix dnf-automatic service to apply security updates the same way as dnf tool


author: chenhaixing <chenhaixing@huawei.com> - 4.3.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: Liu Qingtao <liu.qingtao2@zte.com.cn> - 2.90-5
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Ignore Wincompatible-pointer-types error when compiling with gcc-14.3


author: luoguocui <luoguouci@h-partners.com> - 2.90-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix bounds checking in check_ia()
         Fix SEGV in Dbus code
         More fixes for DHCP ops in Dbus when DHCP not configured


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.90-9
changelog:
  - Type:CVE
  - CVE:CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893 CVE-2026-5172
  - SUG:NA
  - DESC:Fix NSEC bitmap parsing infinite loop
         Verify rdlen field in RRSIG packets
         Fix buffer overflow in helper.c with large CLIDs
         Fix broken client subnet validation
         Fix buffer overflow vulnerability in extract_addresses()


author: zhongjiawei<zhongjiawei1@huawei.com> - 2:18.09.0-347
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:delete redundant characters to prevent make failure in golang 1.24


author: jade_t<yzd50036@gmail.com> - 2:18.09.0-351
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the installation conflict between docker-engine and containerd


author: wangkai <13474090681@163.com> - 1:2.3.20-4
changelog:
  - Fix CVE-2025-59031, CVE-2025-59032, CVE-2026-27855, CVE-2026-27856,
    CVE-2026-27857, CVE-2026-27858, CVE-2026-27859, CVE-2026-0394


author: bixiaoyan <bixiaoyan@kylinos.cn> - 2.0.8-2
changelog:
  - Change assert in ringbuffer to a return code
    Community Patch Link:
    https://github.com/ClusterLabs/libqb/pull/492/commits/88d3eeacc64a059fcb8e2d329ddeafa63b24edfb


author: zouzhimin <zouzhimin@kylinos.cn> - 2.0.8-5
changelog:
  - Check returns from setsockopt() calls, also fix doxygen comment for qb_util_timespec_from_epoch_get()


author: litenglong <litenglong@kylinos.cn> - 2.0.8-6
changelog:
  - Fix file conflicts among the help package, main package, and devel package by deleting the duplicated content during upgrades.


author: huangdengdui <huangdengui@huawei.com> - 23.11-33
changelog:
  Sync some bugfixes for hns3 pmd and modifications are as follow:
   - net/hns3: fix Rx packet without CRC data
   - net/hns3: fix CRC data segment
   - net/hns3: check requirement for hardware GRO
   - net/hns3: allow use of Tx vector when fast free not enabled
   - net/hns3: allow use of Rx vector mode with VLAN filter


author: huangdengdui <huangdengui@huawei.com> - 23.11-34
changelog:
  Sync some patches about support TSO for packets with
   IPv6 extension header and modifications are as follow:
   - net: add tunnel packet type parsing
   - app/testpmd: use packet type parsing API
   - app/testpmd: fix VLAN parsing in checksum engine
   - net: fix offset in GENEVE packet parsing
   - app/testpmd: fix packet type parsing
   - net: fix GTP packet parsing
   - net: add tunnel length in UDP tunnel parsing
   - app/testpmd: fix tunnel inner info


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-36
changelog:
  Unify locks, fix Rx path and resource release:
   - net/hns3: fix inconsistent lock
   - net/hns3: fix overwrite mbuf in vector path
   - net/hns3: fix unrelease VLAN resource when init fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-37
changelog:
  Fix unrelease VLAN resource and L4 protocol retrieval from L3 header:
   - net/hns3: fix unrelease VLAN resource when init fail
   - app/testpmd: fix L4 protocol retrieval from L3 header


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-38
changelog:
  Upload some patches of VF multiple TC and others:
   - app/testpmd: handle IEEE1588 init failure
   - examples/l3fwd: add option to set Rx burst size
   - examples/eventdev: fix queue crash with generic pipeline
   - examples/l3fwd: add Tx burst size configuration option
   - net/hns3: remove duplicate struct field
   - net/hns3: refactor DCB module
   - net/hns3: parse max TC number for VF
   - net/hns3: support multi-TCs capability for VF
   - net/hns3: fix queue TC configuration on VF
   - net/hns3: support multi-TCs configuration for VF
   - app/testpmd: avoid crash in DCB config
   - app/testpmd: show all DCB priority TC map
   - app/testpmd: relax number of TCs in DCB command
   - app/testpmd: reuse RSS config when configuring DCB
   - app/testpmd: add prio-tc map in DCB command
   - app/testpmd: add queue restriction in DCB command
   - app/testpmd: add command to disable DCB
   - examples/l3fwd: force link speed
   - examples/l3fwd-power: force link speed
   - net/hns3: log invalid MAC address from firmware
   - config/arm: add HiSilicon HIP12
   - app/testpmd: fix DCB Tx port
   - app/testpmd: fix DCB Rx queues
   - app/testpmd: set DCB forwarding TCs
   - app/testpmd: support multi-cores process one TC
   - app/testpmd: fix inner UDP checksum offload fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-39
changelog:
  fix L2 length for GRE packets:
   - net: fix L2 length for GRE packets
   - net/hns3: fix outer UDP checksum fail with simple BD


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-40
changelog:
  testpmd DCB Forwarding Enhancements and hns3 Tunnel Checksum Fix:
   - app/testpmd: check start for DCB forwarding TC commands
   - app/testpmd: show DCB forwarding TC list and cores
   - net/hns3: fix L4 checksum incorrect for tunnel packets


author: queyanwen<queyanwen@huawei.com> - 1.0.1-2
changelog:
  - Optimize the accuracy of non-steady-state data prediction and training.
  - The anbient temperature check is added befor the collection is started. If the temperature is
  - greater than 28°C, the collection will not be started.


author: queyanwen<queyanwen@huawei.com> - 1.0.1-3
changelog:
  - The current condition for determining whether the system enters the stable state is that
  - the difference between the maximum temperature and the minimum temperature within 60s is less than 0.2 degrees.
  - This judgment is too strict and needs to be changed to 2 degrees.
  - In addition, the average fuzzy processing in five windows is used to prevent data jitter.
  - When the entire system can obtain the CPU power consumption data, the obtained CPU power consumption
  - is directly used during training, instead of obtaining the CPU power consumption by inferring.


author: heppen<hepeng68@huawei.com> - 1.1.0-3
changelog:
  - Bug fix: Ctrl Auth request on main thread, but release on socket thread.
  - Bug fix: Modify policy file but do not take effect.
  - Bug fix: IsNumStr returns false when the input string is a negative number.
  - Add instructions to the config file.


author: jinye<jinye10@huawei.com> - 1.1.0-4
changelog:
  - Bug fix: Default policy can't restore after stop eagle service
  - Bug fix: Some spell bugs
  - Bug fix: Modify watt_sched_enable don't take effect
  - Bug fix: Set watt_sched_enable as zero SetWattFirstDomain return error
  - Reconstruct eagle init and load part


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: chenchen <chen_aka_jan@163.com> - 1:4.11-4
changelog:
  - switch to the new httpclient45 ECF provider
  - remove ECF httpclient dependency from p2 test
  - build failed with compilation failure in org.eclipse.test


author: liyanan <liyanan32@h-partners.com> - 1:4.11-8
changelog:
  - Add security compile options pie, relro and -fstack-protector-strong
  - Add glassfish-jsp and glassfish-servlet-api and glassfish-el-api version limit


author: Zhiguang Ni <nizhiguang@hygon.cn> - 202308-31
changelog:
  - Support OvmfPkg/AmdSevX64.dsc build to generate OVMF.fd with CSV3 RTMR (based on CC_MEASUREMENT) capability


author: taolinghongfei <taolinghongfei@h-partners.com> - 202308-33
changelog:
  - fix CVE-2026-22795,CVE-2026-22796
  - fix CVE-2025-69420
  - fix CVE-2025-69421
  - fix CVE-2025-68160
  - fix CVE-2025-69418


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: lifeifei <lifeifei@kylinos.cn> - 0.190-3
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add noreplace to /usr/lib/sysctl.d/10-default-yama-scope.conf


author: wangqiang <wangqiang1@kylinos.cn> - 0.190-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: Fix handling of corefiles with non-contiguous .so segments


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: yuanchicheng <chicheng.oerv@isrc.iscas.ac.cn> - 0.190-10
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport-fix-riscv64-return-value-location-retrieval-implementation.patch


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 3.3.0-30
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add kernel-64k and related software packages to edge_aarch64


author: lvxiangcong <lvxiangcong@kylinos.cn> - 3.4.14-16
changelog:
  - Type:CVES
  - ID:CVE-2024-24791 CVE-2023-45288 CVE-2024-24783 CVE-2024-24785 CVE-2023-45290
       CVE-2023-39326
  - SUG:NA
  - DESC:Batch fix cves through rebuild


author: yanglu <yanglu72@h-partners.com> - 2:6.6-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ethtool:hibmcge:fix wrong register address in pretty print of ethtool -d command


author: andy <liuyang01@kylinos.cn> - 2:6.6-6
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Fix SFF-8472 transceiver module identification
          ethtool: Add default branch to sff8636_show_all_ioctl switch
          qsfp: Better handling of Page 03h netlink read failure
          module-eeprom: treat zero arguments like any other arguments for hex dump
          qsf: Better handling of Page A2h netlink read failure


author: zhangyaqi <zhangyaqi@kylinos.cn> - 2:6.6-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add NULL check before jsonw_string_field() in print_string()
         netlink: add NULL check for get_string() in features.c


author: Fengyan Mu <mufengyan@huawei.com> - 2:6.6-8
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Add support the printer for the registers of unic driver
         through the command -d


author: laokz <zhangkai@iscas.ac.cn> - 1.6.2-2
changelog:
  - Let valgrind BuildRequire following system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: liupei <liupei@kylinos.cn> - 4.12.1-8
changelog:
  - fence_scsi: Automatically detect devices for shared VGs
  - fence_scsi: Add support for space-separated devices and update in meta-data


author: liupei <liupei@kylinos.cn> - 4.12.1-9
changelog:
  - fence_azure_arm:add stack cloud support
  - azure_fence: use correct credential_scope and profile for stack hub


author: liupei <liupei@kylinos.cn> - 4.12.1-11
changelog:
  - fence_aliyun: support filter for list-action
  - fence_aliyun: add credentials file support
  - fence_aliyun: update order for new parameters


author: Funda Wang <fundawang@yeah.net> - 140.7.0-1
changelog:
  - update to 140.7.0
    * fix CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880,
      CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884,
      CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890,
      CVE-2026-0891


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:chore nftables add delete table helper
         fix nftables always flush main table on start


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload related ko when stopping firewalld service
         To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-8
changelog:
  - Type:bugfix
  - CVE:NA   
  - SUG:NA   
  - DESC:fix(icmp): fix check_icmpv6_name() to use correct IPv6 names
         fix(ipset): fix configuring IP range for ipsets with nftables
         fix(ipset): fix configuring "timeout","maxelem" values for
         fix(rich): validate service name of rich rule
         fix(rich): fix range check for large rule limit
         fix(nftables): use current pkttype keywords


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.4.3-3
changelog:
  - Limit the number of clock() calls
  - Documentation (man/flac.md); fix typo 
  - flac: foreign_metadata: fix -Walloc-size
  - Fix format ending up with wrong subformat


author: Dingli Zhang <dingli@iscas.ac.cn> - 1.17.1-4
changelog:
  - Remove riscv64 prebuilded files
  - Build protoc, protoc-jar and protoc-jar-maven-plugin in prep state for riscv64


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: wangkai <13474090681@163.com> - 2:2.11.8-3
changelog:
  - Fix CVE-2026-26955, CVE-2026-26965, CVE-2026-31806, CVE-2026-31883, CVE-2026-31885,
    CVE-2026-33984, CVE-2026-33983


author: wangkai <13474090681@163.com> - 2:2.11.8-5
changelog:
  - Fix CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-27951,
    CVE-2026-29774, CVE-2026-29775, CVE-2026-31884, CVE-2026-33985


author: yangyun <yangyun50@huawei.com> -3.16.2-1
changelog:
  - upgrade to 3.16.2
  	- fix some issues (see: https://github.com/libfuse/libfuse/releases) 
  	- improved support for some less common systems (32bit, alternative libcs)
  	- unsupported mount options are no longer silently accepted
  	- auto_unmount is now compatible with allow_other
  	- readdir kernel cache can be enabled from high-level API


author: Qin Fandong <qinfandong@kylinos.cn> - 1.8.17-9
changelog:
  - Remove build requires protobuf-c* and disable plugin logitech-bulkcontroller
    which to upgrade the firmware on Logitech Video Collaboration products.


author: Chenzhen <chenzhen126@huawei.com> - 2.0.2-4
changelog:
  - fix restart thread block by resetting probe pid
    fix service failed when cmd server thread starts late
    fix OOB write when getting proc cmdline
    fix restart gopher failed for check gopher pid multi times
    fix run sig hander core for probe mng create later
    fix potential nullptr dereference in libevent openssl cb
    ipc: reset probe_flags to 0 when restarting probes
    tcpprobe: do not flush snooped procs to avoid deleting tcp link by accident
    fix buffer overflow in sscanf
    fix buffer overflow and ret value of sscanf
    snooper: enlarge channel map and shorten poll timeout to ease event loss
    system_infos: fix oob of arrays and double free
    Refactor to reduce memory usage of metric record
    bugfix: path parsing error when gala-gopher running in container
    fix strdup relative error
    tcpprobe: fix incorret struct type of tracepoint event
    fix UAF of probe bin after parsing invalid config
    snooper: fix opposite judgment logic of container info


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-85
changelog:
  - sockio: fix rpc_send coredump after RPC_MSG_EXIT
  - sockio: fix tcp_write not remove EPOLLOUT
  - fix 20.03-LTS build failed
  - sk_wait: igonre mem_thread flush signal
  - sockio: fix sendmbox full return EWOULDBLOCK
  - sockio: fix callback_tcp_send output too many at once
  - mempool: increase MEM_THREAD_MANAGER_FREE_S to avoid poll
  - sockctl: fix rtw broadcast close and shutdown
  - poll: fix do_lwip_connected_callback not delete poll kernel fd
  - sk_event: fix rtw epoll wrong event notify and remove
  - sockio: fix rtw_stack_tcp_write wrong copied_total after append
  - epoll: fix do_lwip_connected_callback
  - sk_wait: fix lwip_wait_foreach_notify coredump at startup
  - socket: fix stack_udp_readmsg return len
  - sk_wait: fix sock_wait_common_free socket: simplify calling free_count in rtw_stack_tcp_write
  - mbox: fix mbox_ring_common_free coredump when rte_ring_create failed
  - sk_wait: fix lwip_tcp_allow_send coredump
  - mempool: stop using cache when too many threads
  - mempool: fix pthread_tryjoin_np coredump when mysqld shutdown
  - mempool: mem_get_rpc add reserve limit
  - mempool: fix mbox_ring free not call recv_finish_burst
  - mempool: modify mbuf num and rpc_msg num
  - socket: fix sk_wait cannot be interrupted by signals
  - socket: fix tcp closed
  - tcp: add GAZELLE_TCP_ASYNC_RECVD      fix mbuf OOM caused by untimely sockio_peek_recv_free
  - socket: fix stack_tcp_read do not recv_finish_burst
  - socket: fix connect blocking
  - mempool: fix copy_mbuf_private
  - dfx: support sk_wait stat
  - mempool: add mem_thread_cache_flush          fix PBUF_POOL_PREINIT
  - cfg: add mem_async_mode
  - cfg: add mem_cache_max and change default rpc_msg_max
  - socket: adapt to tcp and udp
  - socket: refactor tcp and udp
  - socket: adapt to sock_event
  - socket: refactor sock_event
  - cleancode: remove get_stack_tid DPDK_PKT_BURST_SIZE PACKET_READ_SIZE
  - cleancode: remove gazelle_light_ring
  - cleancode: add GAZELLE_SAME_NODE
  - RTC: fixing program stuck while gazelle exit in multi-threads envirement


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.7.3-1
changelog:
  - Update to 3.7.3
    CheckDependentLibraries.cmake: don't use libjpeg if disabled
    frmts/mrf/CMakeLists.txt: ignore HAVE_JPEGTURBO_DUAL_MODE_8_12 if GDAL_USE_JPEG is OFF
    FindPostgreSQL.cmake: Update the list of released PgSQL versions
    Add support for PoDoFo >= 0.10.0
    Add support for TileDB 2.17
    Fix build with -DRENAME_INTERNAL_SHAPELIB_SYMBOLS=OFF


author: tangjie02 <tangjie02@kylinos.com.cn> - 1.0.1-1.ky3
changelog:
  - KYOS-F: Modify the python3-jinja2 to Requires from BuildRequires.
  - KYOS-F: Remove gdbus_codegen.glibmm*egg-info directory after install.


author: yaoxin <yao_xin001@hoperun.com> - 0.4.50-1
changelog:
  - Update to 0.4.50:
  - Core:
    * Better Gobject Introspection annotation coverage.
    * Improved error handling for gegl chain processing.
    * Added accessors for pad meta-data, to be able to show names and descriptions in UIs.
    * GeglColor: more lax parameters for g_arapm_values_cmp
    * exr-save: store 16bpc files as half, fixing gimp#10778
    * ff-load, ff-save: fix build with FFmpeg 7
    * dither: do processing in linear when all levels==2


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.43.0-4
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.43.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch
         config.mak.uname: set CSPRNG_METHOD to getrandom on Linux


author: Xinwei Hu <shinwell_hu@openeuler.sh> - 3.6.0-1
changelog:
  - Upgrade to 3.6.0
    - Support multi-stage authentication with Git credential helpers and relative worktree paths
    - New object transfer batch size configuration option
    - More POSIX-compliant hook scripts


author: Funda Wang <fundawang@yeah.net> - 3.6.1-1
changelog:
  - Upgrade to 3.6.1
    - fix CVE-2024-53263: Git LFS permits retrieval of credentials via crafted HTTP URLs


author: Funda Wang <fundawang@yeah.net> - 1.76.3-1
changelog:
  - update to 1.76.3
  - disable Regress test for now as it failed with:
    TypeError: can't redefine non-configurable property "name_conflict" in testRegress.js (line 923)


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.78.3-16
changelog:
  - apply 3 patches: backport-Fix-a-buffer-leak-when-finishing-connecting.patch, backport-Add-thread-pool-stress-test-to-task-c.patch, backport-Cleanup-trailing-spaces-task-c.patch


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-98
changelog:
  - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module
  - posix: Run tst-wordexp-reuse-mem test
  - elf: parse /proc/self/maps as the last resort to find the gap for tst-link-map-contiguous-ldso


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-101
changelog:
  - Use pending character state in IBM1390, IBM1399 character sets (CVE-2026-4046)
  - Document CVE-2026-4046


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-103
changelog:
  - include: isolate __O_CLOEXEC flag for sys/mount.h and fcntl.h
  - Linux: Only define OPEN_TREE_* macros in <sys/mount.h> if undefined (bug 33921)

   * Fri Apr 24 2026 zhangjian <mszjaas@qq.com> - 2.38-102
   - fix-cve-2026-5450
   - fix-CVE-2026-5928


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-104
changelog:
  - libio: Fix ungetwc operating on byte stream [BZ #33998] (CVE-2026-5928)
  - stdio-common: Fix buffer overflow in scanf %mc [BZ #34008] (CVE-2026-5450)


author: panzhe <panzhe@kylinos.cn> - 2.38-107
changelog:
  - Sw64: Fix getpriority error

   * Fri May 29 2026 zhongxuan2 <zhongxuan2@h-partners.com> - 2.38-106
   - fix-cve-2026-5435
   - fix-CVE-2026-6238


author: wuguanghao <wuguanghao3@huawei.com> - 11.1-1
changelog:
  - upgrade to 11.1
    - add simple-quota xattr to afr and ec ignore list
    - fix asan use-after-free bug
    - fix error not supported for ipv6
    - support OpenSSL 3.0
    - drop libglusterd
    - O_PATH support over protocol
    - Enable AES cipher for SSL by default
    - glusterd: add stripe_count in volume info
    - snapshots: Support for ZFS Snapshots
    - gfapi: Add support for 'AT_EMPTY_PATH' and 'AT_REMOVEDIR' flag


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 11.1-2
changelog:
  - fix upgrade error that {_mandir}/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: Linux_zhang <244695981@qq.com> - 3.8.2-13
changelog:
  - fix CVE-2026-33846,CVE-2026-3833,CVE-2026-42009,CVE-2026-42010,CVE-2026-42014,CVE-2026-42015,CVE-2026-5260.


author: Julian Zhu <julian.oerv@isrc.iscas.ac.cn> - 1.21.4-40
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix the bootstrap failure caused by the backport of RISC-V RVA23 support


author: huang-xiaoquan <huangxiaoquan1@huawei.com> - 1.21.4-42
changelog:
  - Type:Feature
  - CVE:NA
  - SUG:NA
  - DESC: [stepopt2] Add goexperiment.StepOpt2 for optimized step function in runtime


author: huzhangying <huzhangying@huawei.com> - 1.21.4-43
changelog:
  - Type:CVE
  - CVE:CVE-2025-58183,CVE-2025-58189,CVE-2025-61724,CVE-2025-58188,CVE-2025-58185,CVE-2025-58187,CVE-2025-61723,CVE-2025-47912,CVE-2025-58186
  - SUG:NA
  - DESC:fix CVE-2025-58183,CVE-2025-58189,CVE-2025-61724,CVE-2025-58188,CVE-2025-58185,CVE-2025-58187,CVE-2025-61723,CVE-2025-47912,CVE-2025-58186


author: huzhangying <huzhangying@huawei.com> - 1.21.4-45
changelog:
  - Type:CVE
  - CVE:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-68121,CVE-2025-61723
  - SUG:NA
  - DESC:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-68121,CVE-2025-61723


author: huzhangying <huzhangying@huawei.com> - 1.21.4-46
changelog:
  - Type:CVE
  - CVE:CVE-2026-27139,CVE-2026-27142,CVE-2026-25679
  - SUG:NA
  - DESC:fix CVE-2026-27139,CVE-2026-27142,CVE-2026-25679


author: huzhangying <huzhangying@huawei.com> - 1.21.4-48
changelog:
  - Type:CVE
  - CVE:CVE-2026-27143,CVE-2026-27144,CVE-2026-32288,CVE-2026-27140
  - SUG:NA
  - DESC:fix CVE-2026-27143,CVE-2026-27144,CVE-2026-32288,CVE-2026-27140


author: shupiaoyang <shupiaoyang1@huawei.com> - 1.24.6-2
changelog:
  - internal/runtime/maps: Add intrinsic implementation for ctrlGroupMatchH2 to avoid false-positive match
  - internal/sync: Add support for wide trie in sync.HashTrieMap
  - hash/crc32c: adjust the machine code to assembly instructions
  - hash/crc32c: adjust vmov and eor to fmovd and eorw instruction


author: rfwang07 <wangrufeng5@huawei.com> - 1.24.6-3
changelog:
  - runtime: add StepOpt experiment to optimize step function
  - internal/runtime/maps: revert a commit causing performance regression
  - internal/sync: fix panics in HashTrieMap on hash collision at almost full depth
  - runtime/pprof,net/http/pprof: add PMU and BRBE collection in go pprof
  - cmd/compile: optimize slice bounds checking with SUB/SUBconst comparisons and NEG(SUB)
  - runtime: add ClearSpan experiment to clear spans on first allocation
  - cmd/compile: add Kunpeng forceinline optimization
  - runtime: add PageShift14 experiment to optimize memory page allocation locality
  - runtime: change gcBackgroundUtilization optional
  - runtime: bugfix for pageshift14
  - reflect: add RLock fast path in initFuncTypes gated by GOEXPERIMENT=reflectrwlock
  - runtime: add tinysize experiment
  - cmd/compile: replace conditions to CCMP instructions on ARM64
  - cmd/compile: improve loopRotate to handle nested loops
  - runtime: add Kunpeng atomic write-barrier optimization
  - runtime: add Kunpeng malloc prefetch optimization
  - cmd/asm: add SVE instructions for ARM64
  - cmd/compile: convert []byte(string([]byte)) to makeslicecopy
  - add Kunpeng memory layout optimization
  - runtime: fix pageshift14 build and add DT for PageNum/PageShift14


author: wd-gitcode <wangding16@huawei.com> - 1.24.6-4
changelog:
  - runtime: memmove: use 128-bit Quad registers with FLDPQ/FSTPQ
  - runtime: add goschedIfBusy to bgsweep to prevent livelock after inlining
  - cmd/compile: support multiple levels of inlining using PGO
  - [rprfm] add Kunpeng arm64 memmove range prefetch optimization
  - cmd/compile: AArch64 LdSt optimization on Prog
  - cmd/compile: improve store-to-load forwarding with compatible types
  - cmd/compile: schedule block with predicted branch
  - cmd/internal/obj/arm64, cmd/compile, internal/runtime/atomic: add LDAPR for rcpc
  - cmd/compile: Prove dead bound checks in mallocgc


author: rfwang07 <wangrufeng5@huawei.com> - 1.24.6-5
changelog:
  - internal/bytealg: optimize Count/CountString on arm64
  - runtime: fix vector destination variant for ZUADDV instruction
  - cmd/link/internal/ld: introduce -funcalign=N option


author: laokz <zhangkai@iscas.ac.cn> - 2.15-2
changelog:
  - riscv64: force --enable-frame-pointers due to unsupported
    -momit-leaf-frame-pointer compile option until gcc14


author: Funda Wang <fundawang@yeah.net> - 8.0.32-27.5
changelog:
  - greatsql-mysql-config was removed previously, my.cnf was moved
    into greatsql-server package without conflicts and obsoletes


author: yixiangzhike <yixiangzhike007@163.com> - 1.23.0-4
changelog:
  - Delete duplicate files between groff and groff-x11
  - Detete Obsoletes and Provides about groff-x11 from groff


author: LeoLiu-oc <leoliu-oc@zhaoxin.com> - 1:2.12-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:i386: Check for cpuid family when flush cache only on VIA CPUs
         i386: Reduce the time of set VESA mode by clearing FB directly for Zhaoxin/Glenfly card


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-44
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fs/btrfs: Fix memory leaks
         fs/zfs: Fix a number of memory leaks in ZFS code
         term/ns8250-spcr: Return if redirection is disabled
         loader/i386/linux: Fix resource leak
         lib/reloacator: Fix memory leaks
         disk/ldm: Fix memory leaks
         fs/ntfs: Fix NULL pointer dereference and possible infinite loop
         net/drivers/ieee1275/ofnet: Add missing grub_malloc()
         kern/partition: Unbreak support for nested partitions
         script/execute: Don't let trailing blank lines determine the return code
         commands/file: Fix NULL dereference in the knetbsd tests
         i386/tsc: The GRUB menu gets stuck due to unserialized rdtsc
         kern/i386/tsc_pmtimer: The GRUB menu gets stuck due to failed calibration


author: yechao-w <wang.yechao255@zte.com.cn> - 1:2.12-45
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: kern/riscv/efi/init: Use time register in grub_efi_get_time_ms()


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54771,CVE-2025-54770,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         net/net: Unregister net_set_vlan command on unload
         kern/file: Call grub_dl_unref() after fs->fs_close()
         commands/test: Fix error in recursion depth calculation


author: Han Gao <gaohan@iscas.ac.cn> - 1:2.12-48
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:configure: Add -mno-relax on riscv*
         configure: Defer check for -mcmodel=large until PIC/PIE checks are done


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:2.12-50
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: workaround the BuildRequires mis-preinstallation issue on build systems


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-51
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:loader/i386/pc/linux: Fix resource leak
         Revert "lzma: Make sure we don't dereference past array
         loader/efi/linux: Correctly terminate load_options member
         loader/efi/linux: Use sizeof() instead of constant
         loader/efi/linux: Use proper type for len variable
         loader/efi/linux: Do not pass excessive size for source string
         loader/efi/linux: Remove useless assignment
         loader/efi/linux: Reuse len variable
         loader/efi/linux: Unload previous Linux kernel/initrd before updating kernel size
         normal/charset: Fix underflow and overflow in loop init
         lib/LzmaEnc: Validate len before subtracting
         osdep/unix/hostdisk: Fix signed integer overflow
         fs/zfs: Fix another memory leak in ZFS code
         fs/xfs: Fix large extent counters incompat feature support


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: lin zhang <lin.zhang@turbolinux.com.cn> - 3.24.7-1
changelog:
  - Update to 3.24.7

  -* Mon Jun 20 2022 liukuo <liukuo@kylinos.cn> - 3.24.6-2
  -- License compliance rectification


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.3.6-3
changelog:
  - Fix build on riscv64
  - Upgrade os-maven-plugin to 1.7.1
  - Remove settings.xml and use ${HOME}/.m2/repository as maven repo


author: xinghe <xinghe2@h-partners.com> - 2.9.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.9.5-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: xinghe <xinghe2@h-partners.com> - 2.9.5-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         server/addr: fix tune.events.max-events-at-once event miss and leak


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: Funda Wang <fundawang@yeah.net> - 1.14.5-2
changelog:
  - add patches from azure linux for fixing CVE-2025-2153, CVE-2025-2310,
    CVE-2025-2914, CVE-2025-2926, CVE-2025-6816, CVE-2025-2925,
    CVE-2025-2924, CVE-2025-44905, CVE-2025-6269, CVE-2025-6750,
    CVE-2025-6857, CVE-2025-7067, CVE-2025-7068, CVE-2025-6858,
    CVE-2025-2923, CVE-2025-2913, CVE-2025-6516, CVE-2025-6818,
    CVE-2025-6817, CVE-2025-6856, CVE-2025-7069


author: baizhonggui <baizhonggui@huawei.com> - 540.1.linux3-18
changelog:
  - Fix building error: make[1]: cc: No such file or directory
  - Add gcc in BuildRequires 
  - Add hfsplus-tools-sysctl.patch


author: yixiangzhike <yixiangzhike007@163.com> - 3.3.0-1
changelog:
  - Update version to 3.3.0
    - htop add '-n/--max-itrations' option
    - implement zswap support
    - add IRQ PSI meter
    - refactor /proc/<pid>/status parsing
    - add option to shadow path prefixes
    - fix linux Platform_getProcessLocks() for file-description locks
    - fix format specifier warning on 32 bit
    - prevent null pointer dereference on ealy error


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.58-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.58-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: tangce <tangce1@h-partners.com> - 2.4.58-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: tangce <tangce1@h-partners.com> - 2.4.58-14
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: tangce <tangce1@h-partners.com> - 2.4.58-15
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: chengyechun <chengyechun1@huawei.com> - 2.22.8-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Update i40e version to 2.22.8 to fix kernel-6.1 based build error


author: chengyechun <chengyechun1@huawei.com> - 2.22.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Remove the obsolte u64_stats_fetch_*_irq() users
         use mul_u64_u64_div_u64 and convert .adjfreq to .adjfine


author: chengyechun <chengyechun1@huawei.com> - 2.24.6-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:update i40e version to 2.24.6 to fix kernel-6.6 based build error


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: yanglu <yanglu72@h-partners.com> - 4.7.0-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Update iavf version to 4.7.0 to fix kernel-6.1 based build error


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-36
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Fix wrong WQE data in new post send API when QP wraps around


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1.2-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:after executing hook scripts, remove their executable permission
         of non root users


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: xinghe <xinghe2@h-partners.com> - 1:6.6.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc
         remove redundant patches


author: mufengyan <mufengyan@huawei.com> - 1:6.6.0-10
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:This patch adds ARPHRD_UB for iproute2 and support name
         parse for it and deletes the display of vf address
         information in the pf


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: Liu Chao <liuchao173@huawei.com> - 3:1.9.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: use hint->name in get_usr_irq_policy to reduce the time spent on obtaining interrupt names when use --rulesconfig


author: daisicheng <daisicheng@huawei.com> - 0.9.6-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that isula-build service did not stop after it removed


author: luofeng <luofeng13@huawei.com> - 0.9.6-22
changelog:
  - Type: bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that it failed when applying patches in RISCV architecture


author: Ge Wang <wangge20@huawei.com> - 5.0.0-2
changelog:
  - Fix install confilict with glassfish-servlet-api due to provides same file glassfish-servlet-api.jar


author: Dingli Zhang <dingli@iscas.ac.cn> -1:1.8.0.482.b08-11
changelog:
  - Fix build errors for riscv64 due to missed patch408 removal
  - Fix patch apply failure due to 8269668


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.492.b09-0
changelog:
  - update to 8u492
  - modified add-missing-test-case.patch
  - deleted 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - deleted fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - deleted fix-libpng-CVE-2026-22695.patch
  - deleted fix-libpng-CVE-2026-25646.patch
  - modified Huawei-Fix-build-failures-due-to-wrap-in-x86.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - add Use-stlr-for-putOrdered.patch


author: jvm_xu <2395635654@qq.com> -1:1.8.0.492.b09-2
changelog:
  - add Adjusting-LSE-policy-on-HiSilion-Platform.patch
  - add gzip-guard-KAE-property-parsing-during-static-init.patch
  - add heapredactor-close-redact-map-fd-after-read.patch
  - add jprofilecache-open-replay-cache-in-read-only-mode.patch
  - add Add-HashCode-intrinsic-for-aarch64.patch
  - add Add-UTF-Conversion-Intrinsics-for-aarch64.patch
  - add Use-Stlr-for-DMB.patch
  - add Add-Dynamic-heap-Size-for-PSGC-CMS-And-Out-Of-heap.patch
  - add AArch64-improve-itable-stub.patch
  - add fix-dynamic-max-heap-size-due-to-gcc12-build-error.patch


author: jvm_xu <2395635654@qq.com> -1:1.8.0.492.b09-3
changelog:
  - add support-for-Hisilicon-cpu.patch
  - add Optimize-MemNode-infinite-loops.patch
  - add JProfilecache-fix-fastdebug-asserts.patch


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.31.11-0
changelog:
  - update to 11.0.31+11(GA)
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - delete fix-libpng-CVE-2026-22695.patch
  - delete 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - delete fix-libpng-CVE-2026-25646.patch
  - add Use-stlr-for-putOrdered.patch


author: wulongyao <wulongyao1@huawei.com> - 1:17.0.19.10-0
changelog:
  - update to jdk17.0.19-ga
  - modified 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modified 8264806-Backport-Graal-Compiler.patch
  - deleted 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - deleted Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - modified add-version-txt.patch
  - modified fix-gitee.com-problem.patch
  - deleted fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - deleted fix-libpng-CVE-2026-22695.patch
  - deleted fix-libpng-CVE-2026-25646.patch
  - deleted fix-zlib-CVE-2026-27171.patch
  - add Use-stlr-for-putOrdered.patch


author: jvm_xu <2395635654@qq.com> - 1:17.0.19.10-2
changelog:
  - add jprofilecache-open-replay-cache-in-read-only-mode.patch
  - add fix-memory-leak-in-jBolt.patch
  - add HashCode-intrinsic-for-aarch64.patch
  - add Add-UTF-Conversion-Intrinsics-for-aarch64.patch
  - add Use-Stlr-for-DMB.patch
  - add Add-Dynamic-Heap-Size.patch
  - add Add-Aggresive-CDS-and-bugfix.patch
  - add fix-dynamic-max-heap-size-due-to-gcc12-build-error.patch


author: jvm_xu <2395635654@qq.com> - 1:17.0.19.10-4
changelog:
  - add Add-lost-ResourceMark-and-fix-delete-in-jBolt.patch
  - add support-for-Hisilicon-cpu.patch
  - add fix-test-failures-caused-by-the-Rename-createJavaPro.patch
  - add JProfilecache-remove-redundant-assert.patch


author: wulongyao <wulongyao1@huawei.com> - 1:21.0.11.10-0
changelog:
  - update to jdk21.0.11-ga
  - add Enhance-NUMANodesRandom.patch
  - deleted 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - modified Fix-kae-testcat-and-EATest-testcast-bug-and-fix-cve-.patch
  - modified add-version.txt.patch
  - modified backport-openjdk-8339036-8354145-8300148-8322149-833.patch
  - modified fix-gitee.com-problem.patch
  - deleted fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - deleted fix-libpng-CVE-2026-22695.patch
  - deleted fix-libpng-CVE-2026-25646.patch
  - deleted fix-zlib-CVE-2026-27171.patch
  - add Use-stlr-for-putOrdered.patch


author: jvm_xu <2395635654@qq.com> - 1:21.0.11.10-2
changelog:
  - add 8375294-fs-Files.copy-can-fail-with-EOPNOTSUPP-when-.patch
  - add 8375571-Compiler-crash-when-using-record-pattern-mat.patch
  - add 8314029-Add-file-name-parameter-to-Compiler.perfmap.patch
  - add 8332124-Jcmd-should-recognise-options-that-look-like.patch
  - add fix-AbortVMOnException-option-support-matching-multiple-.patch
  - add 8319948-jcmd-man-page-needs-to-be-updated.patch
  - add jcmd-nmt-add-start-time-and-end-time.patch
  - add Print-class-loading-details-when-enable-TraceClassLo.patch
  - add Enhance-errlog-information-for-DFX.patch
  - add 8371783-Refactor-GCCause-in-VM_CollectForMetadataAll.patch
  - add 8372380-Make-hs_err-reporting-more-robust-for-unatta.patch
  - add jprofilecache-open-replay-cache-in-read-only-mode.patch
  - add 8366062-ubsan-add-non-zero-offset-to-nullptr-in-cds-.patch
  - add fix-memory-leak-in-jBolt.patch
  - add optimize-jmap-F-dump-xxx-to-speed-up-the-dump-proces.patch
  - add Add-UTF-Conversion-Intrinsics-for-aarch64.patch
  - add Prefetch-for-LSE.patch
  - add Add-Aggresive-CDS-and-bugfix.patch
  - add 8325536-JVM-crash-during-CDS-archive-creation-with-X.patch
  - add 8346457-AOT-cache-creation-crashes-with-assert-pair_.patch
  - add fix-aggressive-cds-bug-due-to-unsafe-high-arity-Lamd.patch
  - add Compilecommand-support-dontprediction.patch
  - add fix-memory-leak-in-whitebox-testcase-ParserTest.java.patch
  - add 8350621-Code-Cache-stops-scheduling-GC.patch
  - add 8334492-DiagnosticCommands-jcmd-should-accept-p-in-o.patch


author: jvm_xu <2395635654@qq.com> - 1:21.0.11.10-4
changelog:
  - add JProfilecache-remove-redundant-assert.patch
  - add Add-lost-RsourceMark-in-jBoltManager.patch
  - add support-for-Hisilicon-cpu.patch


author: laokz <zhangkai@iscas.ac.cn> - 1:25.0.1.11-1
changelog:
  - Change java-lastest to java-25 as dependent and only apply for no-bootjdk arches, like riscv64
  - riscv64: Disable full docs


author: yaoxin <yao_xin001@hoperun.com> - 1.5.4-1
changelog:
  - Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
    CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.15-17
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils-1.1.15-linux-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils_sysmacros.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-fix-building-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils-reslove-build-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: yaoxin <1024769339@qq.com> - 1.8.0-4
changelog:
  - Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894,
    CVE-2026-43895,CVE-2026-43896 and CVE-2026-44777


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 0.17-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Disallow control characters in strict mode
          Fix the expected output for test_parse
          Fix causing the strict-mode control characters check to incorrectly trigger


author: sunhai <sunhai10@huawei.com> - 0.17-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict.


author: sunhai <sunhai10@huawei.com> - 0.17-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Handle NULL gracefully in json_tokener_free
          Issue 881 don t allow json_tokener_new_ex with a dep


author: sundapeng <sundapeng_yewu@cmss.chinamobile.com> - 2.8.2-17
changelog:
  - log clean relative index range check of group consider empty log segment to avoid too many empty log segment left


author: dongyuzhen <dongyuzhen@h-partners.com> - 3.2.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of missing kata-containers source code in the src package


author: jade_t <yzd50036@gmail.com> - 3.2.0-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:modify the git clone download address in kata_integration_clone


author: jade_t <yzd50036@gmail.com> - 3.2.0-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of self-compilation failure in the kata-containers source package


author: dongyuzhen <dongyuzhen@h-partners.com> - 1.11.1-28
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of missing kata-containers-go source code in the src package


author: zhangbowei<zhangbowei@kylinos.cn> - 1.0.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: modify kernel config for supporting shared_fs:virtio-fs option


author: yanglu <yanglu72@h-partners.com> - 006-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add crashkernel auto for Arm 
         enable kdump and set default reserve memory 512MB
         fix test failed due to default value change


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-155.0.0.145
changelog:
  - The RISC-V architecture features have been updated.
    For more details, refer to the rvck-olk repository.


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-156.0.0.146
changelog:
  - !23508 v2  bpf: Remove smap argument from bpf_selem_free()
  - !23457 v2  bpf mainline
  - !23442 ub: udma&ubase: add get tp list function.
  - !23415 drivers/ub/sentry: adapt to ubcore_get_tp_list semantic change
  - ub: udma: add get tp list function.
  - !22887 [OLK-6.6] urma: fix RNR ERR under CTP mode in IPoURMA
  - !23416 urma: implement kernel-space get tp list with hash table.
  - bpf: Remove smap argument from bpf_selem_free()
  - urma: implement kernel-space get tp list with hash table.
  - !23418  bpf: Avoid soft lockup in bpf_uprobe_unregister
  - drivers/ub/sentry: adapt to ubcore_get_tp_list semantic change
  - !23229 obmm: add feature-based enable control
  - !23362  CVE-2026-43201
  - !23351 Fix CVE-2026-43292
  - !22903 [OLK-6.6][linux-6.6.y sync] Backport 6.6.128-6.6.141 LTS Patches
  - !23228 obmm: fix VMA access for ptrace/GDB on export regions
  - selftests/bpf: Add test for stale pkt range after scalar arithmetic
  - bpf: Drop pkt_end markers on arithmetic to prevent is_pkt_ptr_branch_taken
  - obmm: add feature-based enable control
  - !23374 urma: increase topo max node limit to 1024
  - !23403 urma: add v2p function in kernel for dfx such as urma_admin
  - netfs: Fix potential uninitialised var in netfs_extract_user_iter()
  - net/rds: reset op_nents when zerocopy page pin fails
  - mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker
  - mptcp: pm: ADD_ADDR rtx: fix potential data-race
  - spi: sifive: fix controller deregistration
  - spi: sifive: Simplify clock handling with devm_clk_get_enabled()
  - media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0
  - spi: st-ssc4: fix controller deregistration
  - spi: st-ssc4: switch to use modern name
  - RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()
  - f2fs: fix false alarm of lockdep on cp_global_sem lock
  - f2fs: fix incorrect file address mapping when inline inode is unwritten
  - mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0
  - mptcp: pm: prio: skip closed subflows
  - mptcp: fix rx timestamp corruption on fastopen
  - mptcp: drop __mptcp_fastopen_gen_msk_ackseq()
  - RDMA/mana: Validate rx_hash_key_len
  - btrfs: fix missing last_unlink_trans update when removing a directory
  - btrfs: use btrfs inodes in btrfs_rmdir() to avoid so much usage of BTRFS_I()
  - btrfs: use inode already stored in local variable at btrfs_rmdir()
  - smb: client: Use FullSessionKey for AES-256 encryption key derivation
  - drm/v3d: Reject empty multisync extension to prevent infinite loop
  - eventfs: Use list_add_tail_rcu() for SRCU-protected children list
  - pmdomain: core: Fix detach procedure for virtual devices in genpd
  - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init
  - drm/gma500/oaktrail_lvds: fix hang on init failure
  - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup
  - drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout()
  - drm/i915: skip __i915_request_skip() for already signaled requests
  - iommu/vt-d: Disable DMAR for Intel Q35 IGFX
  - libceph: handle rbtree insertion error in decode_choose_args()
  - libceph: Fix potential out-of-bounds access in crush_decode()
  - libceph: Fix potential null-ptr-deref in decode_choose_args()
  - libceph: Fix potential out-of-bounds access in osdmap_decode()
  - netfs: fix error handling in netfs_extract_user_iter()
  - powerpc/warp: Fix error handling in pika_dtm_thread
  - io-wq: check that the predecessor is hashed in io_wq_remove_pending()
  - ceph: fix a buffer leak in __ceph_setxattr()
  - ALSA: usb-audio: Bound MIDI endpoint descriptor scans
  - ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans
  - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats
  - ASoC: SOF: Intel: hda: Fix NULL pointer dereference
  - ASoC: SOF: Intel: hda-dai: add support for dspless mode beyond HDAudio
  - ASoC: SOF: Intel: hda-dai: remove dspless special case
  - KVM: x86: Fix Xen hypercall tracepoint argument assignment
  - KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic
  - KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
  - audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV
  - net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled
  - netfilter: nft_ct: fix missing expect put in obj eval
  - audit: fix incorrect inheritable capability in CAPSET records
  - netfilter: nf_conntrack_sip: get helper before allocating expectation
  - workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path
  - i40e: Cleanup PTP pins on probe failure
  - crypto: af_alg - Cap AEAD AD length to 0x80000000
  - netconsole: avoid out-of-bounds access on empty string in trim_newline()
  - net/sched: sch_pie: annotate more data-races in pie_dump_stats()
  - ksmbd: validate response sizes in ipc_validate_msg()
  - net: bcmgenet: fix leaking free_bds
  - net: bcmgenet: Initialize u64 stats seq counter
  - crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx
  - ntfs: ->d_compare() must not block
  - net/sched: cls_flower: revert unintended changes
  - sfc: fix error code in efx_devlink_info_running_versions()
  - net: tls: fix strparser anchor skb leak on offload RX setup failure
  - ice: fix NULL pointer dereference in ice_reset_all_vfs()
  - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler
  - iavf: wait for PF confirmation before removing VLAN filters
  - iavf: stop removing VLAN filters from PF on interface down
  - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING
  - bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner
  - drm/amd/display: Read EDID from VBIOS embedded panel info
  - drm/amd/display: Allow DCE link encoder without AUX registers
  - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup
  - ALSA: hda/conexant: Fix missing error check for jack detection
  - ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87
  - ALSA: hda/conexant: fix some typos
  - netconsole: propagate device name truncation in dev_name_store()
  - net: netconsole: move newline trimming to function
  - net/sched: sch_cake: annotate data-races in cake_dump_stats() (V)
  - bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()
  - ipv6: rename and move ip6_dst_lookup_tunnel()
  - ipv4: add new arguments to udp_tunnel_dst_lookup()
  - ipv4: remove "proto" argument from udp_tunnel_dst_lookup()
  - ipv4: rename and move ip_route_output_tunnel()
  - sctp: discard stale INIT after handshake completion
  - netfilter: skip recording stale or retransmitted INIT
  - ASoC: codecs: ab8500: Fix casting of private data
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring
  - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings
  - net: phy: dp83869: fix setting CLK_O_SEL field.
  - net: mctp i2c: check length before marking flow active
  - ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams
  - neigh: let neigh_xmit take skb ownership
  - neighbour: add RCU protection to neigh_tables[]
  - net/sched: taprio: fix NULL pointer dereference in class dump
  - NFC: trf7970a: Ignore antenna noise when checking for RF field
  - net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit
  - net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()
  - vrf: Fix a potential NPD when removing a port from a VRF
  - net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats()
  - net/sched: sch_choke: annotate data-races in choke_dump_stats()
  - net/sched: netem: check for negative latency and jitter
  - net/sched: netem: fix slot delay calculation overflow
  - net/sched: netem: validate slot configuration
  - net/sched: netem: only reseed PRNG when seed is explicitly provided
  - net/sched: netem: fix queue limit check to include reordered packets
  - net/sched: netem: fix probability gaps in 4-state loss model
  - netdevsim: zero initialize struct iphdr in dummy sk_buff
  - cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro()
  - arm64/scs: Fix potential sign extension issue of advance_loc4
  - drm/sysfb: ofdrm: fix PCI device reference leaks
  - spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ
  - netfilter: nf_conntrack_sip: don't use simple_strtoul
  - netfilter: xt_policy: fix strict mode inbound policy matching
  - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2)
  - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated
  - drm/amdgpu: fix spelling typos
  - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG
  - nvme-pci: fix missed admin queue sq doorbell write
  - netfilter: arp_tables: fix IEEE1394 ARP payload parsing
  - nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers
  - btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent()
  - mailbox: mailbox-test: make data_ready a per-instance variable
  - mailbox: mailbox-test: initialize struct earlier
  - mailbox: mailbox-test: don't free the reused channel
  - mailbox: add sanity check for channel array
  - cgroup/rdma: fix integer overflow in rdmacg_try_charge()
  - mailbox: mailbox-test: free channels on probe error
  - fbdev: offb: fix PCI device reference leak on probe failure
  - rtc: abx80x: Disable alarm feature if no interrupt attached
  - fs/adfs: validate nzones in adfs_validate_bblk()
  - vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll()
  - tipc: fix double-free in tipc_buf_append()
  - nfp: fix swapped arguments in nfp_encode_basic_qdr() calls
  - net: dsa: realtek: rtl8365mb: fix mode mask calculation
  - net/sched: sch_sfb: annotate data-races in sfb_dump_stats()
  - net/sched: sch_red: annotate data-races in red_dump_stats()
  - net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats()
  - net/sched: sch_pie: annotate data-races in pie_dump_stats()
  - net_sched: sch_hhf: annotate data-races in hhf_dump_stats()
  - net/rds: zero per-item info buffer before handing it to visitors
  - ksmbd: scope conn->binding slowpath to bound sessions only
  - ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open
  - ksmbd: destroy async_ida in ksmbd_conn_free()
  - ksmbd: add support for supplementary groups
  - ksmbd: Use struct_size() to improve smb_direct_rdma_xmit()
  - ksmbd: destroy tree_conn_ida in ksmbd_session_destroy()
  - arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number
  - slip: bound decode() reads against the compressed packet length
  - slip: reject VJ receive packets on instances with no rstate array
  - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
  - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
  - ipvs: fix MTU check for GSO packets in tunnel mode
  - netfilter: xtables: restrict several matches to inet family
  - netfilter: conntrack: remove sprintf usage
  - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
  - netfilter: nft_osf: restrict it to ipv4
  - openvswitch: cap upcall PID array size and pre-size vport replies
  - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks
  - ipv6: fix possible UAF in icmpv6_rcv()
  - e1000e: Unroll PTP in probe error handling
  - i40e: don't advertise IFF_SUPP_NOFCS
  - ice: fix double-free of tx_buf skb
  - ice: Remove jumbo_remove step from TX path
  - tcp: annotate data-races around tp->plb_rehash
  - tcp: annotate data-races around (tp->write_seq - tp->snd_nxt)
  - tcp: annotate data-races around tp->dsack_dups
  - tcp: annotate data-races around tp->bytes_retrans
  - tcp: annotate data-races around tp->bytes_sent
  - tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans
  - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch
  - nexthop: fix IPv6 route referencing IPv4 nexthop
  - net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys
  - macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF
  - arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT
  - arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT
  - arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT
  - PCMCIA: Fix garbled log messages for KERN_CONT
  - arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings for PMIC_nINT
  - arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT
  - arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for PMIC_nINT
  - arm64: dts: imx8mp-debix-som-a: Correct PAD settings for PMIC_nINT
  - arm64: dts: imx8mp-debix-model-a: Correct PAD settings for PMIC_nINT
  - crypto: ccp - copy IV using skcipher ivsize
  - crypto: sa2ul - Fix AEAD fallback algorithm names
  - drm/i915/wm: Verify the correct plane DDB entry
  - drm/i915: Loop over all active pipes in intel_mbus_dbox_update
  - drm/i915: Extract intel_dbuf_mdclk_cdclk_ratio_update()
  - drm/i915: Simplify watermark state checker calling convention
  - drm/i915: Constify watermark state checker
  - f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()
  - f2fs: Use sysfs_emit_at() to simplify code
  - clk: visconti: pll: initialize clk_init_data to zero
  - lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug()
  - clk: qcom: dispcc-sc7180: Add missing MDSS resets
  - dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets
  - clk: xgene: Fix mapping leak in xgene_pllclk_init()
  - clk: qoriq: avoid format string warning
  - clk: imx8mq: Correct the CSI PHY sels
  - clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels()
  - clk: imx: imx6q: Fix device node reference leak in pll6_bypassed()
  - clk: qcom: dispcc-sm8250: Enable parents for pixel clocks
  - clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk
  - clk: qcom: gcc-sc8180x: Use retention for PCIe power domains
  - clk: qcom: gcc-sc8180x: Use retention for USB power domains
  - clk: qcom: gcc-sc8180x: Add missing GDSCs
  - dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs
  - scsi: target: core: Fix integer overflow in UNMAP bounds check
  - clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from byte_div_clk_src dividers
  - scsi: sg: Resolve soft lockup issue when opening /dev/sgX
  - scsi: sg: Fix sysctl sg-big-buff register during sg_init()
  - scsi: sg: Make sg_sysfs_class constant
  - clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock source
  - RDMA/core: Prefer NLA_NUL_STRING
  - platform/x86: dell-wmi-sysman: bound enumeration string aggregation
  - platform/x86: dell_rbu: avoid uninit value usage in packet_size_write()
  - fs/ntfs3: terminate the cached volume label after UTF-8 conversion
  - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist()
  - mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata()
  - platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup
  - tty: hvc_iucv: fix off-by-one in number of supported devices
  - leds: lgm-sso: Remove duplicate assignments for priv->mmap
  - platform/surface: surfacepro3_button: Drop wakeup source on remove
  - backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt()
  - dev_printk: add new dev_err_probe() helpers
  - i3c: mipi-i3c-hci: fix IBI payload length calculation for final status
  - perf util: Kill die() prototype, dead for a long time
  - ipmi: ssif_bmc: change log level to dbg in irq callback
  - ipmi: ssif_bmc: fix message desynchronization after truncated response
  - ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure
  - perf expr: Return -EINVAL for syntax error in expr__find_ids()
  - perf lock: Fix option value type in parse_max_stack
  - pinctrl: abx500: Fix type of 'argument' variable
  - perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace
  - perf branch: Avoid incrementing NULL
  - pinctrl: cy8c95x0: Avoid returning positive values to user space
  - pinctrl: cy8c95x0: Unify messages with help of dev_err_probe()
  - pinctrl: cy8c95x0: remove duplicate error message
  - pinctrl: pinctrl-pic32: Fix resource leak
  - bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT
  - bpf: allow UTF-8 literals in bpf_bprintf_prepare()
  - bpf: Fix precedence bug in convert_bpf_ld_abs alignment check
  - bpf, sockmap: Take state lock for af_unix iter
  - bpf, sockmap: Fix af_unix null-ptr-deref in proto update
  - bpf, sockmap: Fix af_unix iter deadlock
  - HID: usbhid: fix deadlock in hid_post_reset()
  - mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob
  - mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions
  - mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path
  - mtd: spi-nor: swp: check SR_TB flag when getting tb_mask
  - mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation
  - mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook
  - mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook
  - mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations
  - dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range
  - mtd: physmap_of_gemini: Fix disabled pinctrl state check
  - HID: asus: do not abort probe when not necessary
  - HID: asus: make asus_resume adhere to linux kernel coding standards
  - ima: check return value of crypto_shash_final() in boot aggregate
  - soundwire: cadence: Clear message complete before signaling waiting thread
  - dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register()
  - soundwire: bus: demote UNATTACHED state warnings to dev_dbg()
  - dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function
  - ocfs2: validate group add input before caching
  - ocfs2: validate bg_bits during freefrag scan
  - ocfs2: fix listxattr handling when the buffer is full
  - ARM: dts: imx27-eukrea: replace interrupts with interrupts-extended
  - arm64/xor: fix conflicting attributes for xor_block_template
  - ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX
  - arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP
  - soc: qcom: aoss: compare against normalized cooling state
  - soc: qcom: llcc: fix v1 SB syndrome register offset
  - ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison
  - ocfs2/dlm: validate qr_numregions in dlm_match_regions()
  - unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure
  - soc/tegra: cbb: Set ERD on resume for err interrupt
  - arm64: dts: imx8qxp-mek: switch Type-C connector power-role to dual
  - arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot
  - arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias pinctrl
  - arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD card modes
  - arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD card modes
  - arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD host controller
  - arm64: dts: qcom: sm8550: Fix GIC_ITS range length
  - arm64: dts: qcom: sm8450: Fix GIC_ITS range length
  - soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available
  - soc: qcom: ocmem: register reasons for probe deferrals
  - soc: qcom: ocmem: use scoped device node handling to simplify error paths
  - soc: qcom: ocmem: make the core clock optional
  - arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight
  - arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value
  - arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count
  - arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count
  - arm64: dts: imx8mp-evk: Enable pull select bit for PCIe regulator GPIO (M.2 W_DISABLE1)
  - arm64: dts: imx8-apalis: Fix LEDs name collision
  - memory: tegra30-emc: Fix dll_change check
  - memory: tegra124-emc: Fix dll_change check
  - ARM: dts: mediatek: mt7623: fix efuse fallback compatible
  - ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine
  - efi/capsule-loader: fix incorrect sizeof in phys array reallocation
  - gfs2: prevent NULL pointer dereference during unmount
  - gfs2: add some missing log locking
  - quota: Fix race of dquot_scan_active() with quota deactivation
  - ktest: Run POST_KTEST hooks on failure and cancellation
  - ktest: Honor empty per-test option overrides
  - ktest: Avoid undef warning when WARNINGS_FILE is unset
  - gfs2: Call unlock_new_inode before d_instantiate
  - crypto: jitterentropy - replace long-held spinlock with mutex
  - dm cache: fix missing return in invalidate_committed's error path
  - ALSA: sc6000: Keep the programmed board state in card-private data
  - ALSA: sc6000: Use standard print API
  - spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback
  - PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well
  - PCI: tegra194: Use DWC IP core version
  - PCI: tegra194: Allow system suspend when the Endpoint link is not up
  - PCI: tegra194: Disable direct speed change for Endpoint mode
  - PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select"
  - PCI: tegra194: Disable PERST# IRQ only in Endpoint mode
  - PCI: tegra194: Don't force the device into the D0 state before L2
  - PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0()
  - PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down
  - PCI: tegra194: Increase LTSSM poll time on surprise link down
  - PCI: tegra194: Fix polling delay for L2 state
  - ASoC: SOF: compress: return the configured codec from get_params
  - ALSA: scarlett2: Add missing sentinel initializer field
  - selftest: memcg: skip memcg_sock test if address family not supported
  - Documentation: fix a hugetlbfs reservation statement
  - selftests/mm: skip migration tests if NUMA is unavailable
  - PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found
  - PCI: Enable AtomicOps only if Root Port supports them
  - ASoC: rsnd: Fix potential out-of-bounds access of component_dais[]
  - crypto: qat - use swab32 macro
  - ASoC: qcom: qdsp6: topology: check widget type before accessing data
  - ASoC: fsl_easrc: Change the type for iec958 channel status controls
  - ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits()
  - ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits()
  - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put()
  - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put()
  - ASoC: fsl_micfil: Fix event generation in micfil_quality_set()
  - ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state()
  - ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode()
  - ASoC: fsl_micfil: Fix event generation in hwvad_put_enable()
  - ASoC: fsl_micfil: Add access property for "VAD Detected"
  - pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe()
  - pmdomain: ti: omap_prm: Fix a reference leak on device node
  - drm/msm/a6xx: Use barriers while updating HFI Q headers
  - drm/msm/shrinker: Fix can_block() logic
  - drm/msm/a6xx: Fix HLSQ register dumping
  - ASoC: SOF: Intel: hda: Place check before dereference
  - ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}')
  - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board
  - drm/amd/pm/ci: Fill DW8 fields from SMC
  - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels
  - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0
  - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock
  - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs
  - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled
  - ALSA: core: Validate compress device numbers without dynamic minors
  - drm/panel: simple: Correct G190EAN01 prepare timing
  - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first
  - drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0
  - drm/msm/dsi: add the missing parameter description
  - drm/msm/dpu: fix mismatch between power and frequency
  - spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo
  - drm/amdgpu/gfx10: look at the right prop for gfx queue priority
  - crypto: atmel-aes - guard unregister on error in atmel_aes_register_algs
  - crypto: atmel - Use unregister_{aeads,ahashes,skciphers}
  - crypto: atmel - Remove cfb and ofb
  - fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break
  - dm init: ensure device probing has finished in dm-mod.waitfor=
  - drm/amdgpu: Add default case in DVI mode validation
  - drm/sun4i: Fix resource leaks
  - spi: fsl-qspi: Use reinit_completion() for repeated operations
  - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check
  - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs
  - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable()
  - dm log: fix out-of-bounds write due to region_count overflow
  - dm cache metadata: fix memory leak on metadata abort retry
  - platform/chrome: chromeos_tbmc: Drop wakeup source on remove
  - dm cache: fix dirty mapping checking in passthrough mode switching
  - dm cache: support shrinking the origin device
  - dm cache: fix concurrent write failure in passthrough mode
  - dm cache policy smq: fix missing locks in invalidating cache blocks
  - dm cache: fix write hang in passthrough mode
  - dm cache: fix write path cache coherency in passthrough mode
  - dm cache: fix null-deref with concurrent writes in passthrough mode
  - ASoC: sti: use managed regmap_field allocations
  - ASoC: sti: Return errors from regmap_field_alloc()
  - drm/sun4i: backend: fix error pointer dereference
  - drm/komeda: fix integer overflow in AFBC framebuffer size check
  - net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master
  - sctp: fix missing encap_port propagation for GSO fragments
  - net: phy: qcom: at803x: Use the correct bit to disable extended next page
  - net: phy: move at803x PHY driver to dedicated directory
  - net: phy: add Rust Asix PHY driver
  - net: phy: aquantia: move to separate directory
  - bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
  - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic()
  - net/mlx5e: Fix features not applied during netdev registration
  - dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional for sja1110
  - net: ipa: Fix decoding EV_PER_EE for IPA v5.0+
  - net: ipa: Fix programming of QTIME_TIMESTAMP_CFG
  - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls
  - net/rds: Restrict use of RDS/IB to the initial network namespace
  - net/rds: Optimize rds_ib_laddr_check
  - net/sched: act_ct: Only release RCU read lock after ct_ft
  - net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf
  - 6pack: propagage new tty types
  - netfilter: nft_fwd_netdev: check ttl/hl before forwarding
  - netfilter: xt_socket: enable defrag after all other checks
  - net: bcmgenet: fix racing timeout handler
  - net: bcmgenet: switch to use 64bit statistics
  - net: bcmgenet: support reclaiming unsent Tx packets
  - net: bcmgenet: move DESC_INDEX flow to ring 0
  - net: bcmgenet: add bcmgenet_has_* helpers
  - net: bcmgenet: Remove custom ndo_poll_controller()
  - net: bcmgenet: fix off-by-one in bcmgenet_put_txcb
  - arm64: kexec: Remove duplicate allocation for trans_pgd
  - ACPI: AGDI: fix missing newline in error message
  - bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()
  - wifi: brcmfmac: Fix error pointer dereference
  - macvlan: annotate data-races around port->bc_queue_len_used
  - selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
  - selftests/powerpc: Re-order *FLAGS to follow lib.mk
  - powerpc/crash: fix backup region offset update to elfcorehdr
  - r8152: fix incorrect register write to USB_UPHY_XTAL
  - wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap()
  - wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work()
  - wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event
  - arm64: cpufeature: Make PMUVer and PerfMon unsigned
  - wifi: mt76: mt7996: fix FCS error flag check in RX descriptor
  - wifi: mt76: mt7915: fix use_cts_prot support
  - wifi: mt76: mt7615: fix use_cts_prot support
  - wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr()
  - module: Fix freeing of charp module parameters when CONFIG_SYSFS=n
  - params: Replace __modinit with __init_or_module
  - s390/bpf: Zero-extend bpf prog return values and kfunc arguments
  - dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n
  - dpaa2: add independent dependencies for FSL_DPAA2_SWITCH
  - bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap
  - bpf: Add CHECKSUM_COMPLETE to bpf test progs
  - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet
  - wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt()
  - firmware: dmi: Correct an indexing error in dmi.h
  - locking: Fix rwlock support in <linux/spinlock_up.h>
  - hrtimer: Reduce trace noise in hrtimer_start()
  - hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns()
  - hrtimers: Update the return type of enqueue_hrtimer()
  - irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter
  - s390/cio: use generic driver_override infrastructure
  - s390/cio: convert sprintf()/snprintf() to sysfs_emit()
  - s390/cio: make sch->lock spinlock pointer a member
  - debugfs: fix placement of EXPORT_SYMBOL_GPL for debugfs_create_str()
  - debugfs: check for NULL pointer in debugfs_create_str()
  - thermal/drivers/spear: Fix error condition for reading st,thermal-flags
  - devres: fix missing node debug info in devm_krealloc()
  - ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver
  - ACPI: x86: cmos_rtc: Clean up address space handler driver
  - blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current()
  - nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()
  - loop: fix partition scan race between udev and loop_reread_partitions()
  - drbd: Balance RCU calls in drbd_adm_dump_devices()
  - fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START
  - blk-cgroup: wait for blkcg cleanup before initializing new disk
  - smb: client: use kzalloc to zero-initialize security descriptor buffer
  - mtd: spi-nor: sst: Fix SST write failure
  - drm/amdgpu/vcn4: Avoid overflow on msg bound check
  - drm/amdgpu/vcn3: Avoid overflow on msg bound check
  - vsock/virtio: fix length and offset in tap skb for split packets
  - vsock: fix buffer size clamping order
  - KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  - usb: dwc3: Move GUID programming after PHY initialization
  - tracing/probes: Limit size of event probe to 3K
  - btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak
  - pwm: imx-tpm: Count the number of enabled channels in probe
  - mtd: spi-nor: sst: Fix write enable before AAI sequence
  - mtd: spi-nor: sst: Factor out common write operation to `sst_nor_write_data()`
  - ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger
  - mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values
  - usb: typec: tcpm: reset internal port states on soft reset AMS
  - mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values
  - mm/damon/core: implement damon_kdamond_pid()
  - mm/damon/core: disallow time-quota setting zero esz
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()
  - fbcon: Avoid OOB font access if console rotation fails
  - spi: microchip-core-qspi: fix controller deregistration
  - spi: microchip-core-qspi: Use helper function devm_clk_get_enabled()
  - mm/hugetlb_cma: round up per_node before logging it
  - spi: uniphier: fix controller deregistration
  - spi: uniphier: Simplify clock handling with devm_clk_get_enabled()
  - spi: uniphier: switch to use modern name
  - spi: tegra20-sflash: fix controller deregistration
  - spi: tegra114: fix controller deregistration
  - spi: sun6i: fix controller deregistration
  - spi: sun6i: switch to use modern name
  - spi: zynq-qspi: fix controller deregistration
  - spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled()
  - spi: zynq-qspi: switch to use modern name
  - spi: ti-qspi: fix controller deregistration
  - spi: spi-ti-qspi: switch to use modern name
  - spi: spi-ti-qspi: Convert to platform remove callback returning void
  - spi: sun4i: fix controller deregistration
  - spi: sun4i: switch to use modern name
  - spi: syncuacer: fix controller deregistration
  - spi: synquacer: switch to use modern name
  - Bluetooth: hci_conn: fix potential UAF in create_big_sync
  - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
  - xfrm: ah: account for ESN high bits in async callbacks
  - net: ipv6: stop checking crypto_ahash_alignmask
  - net: ipv4: stop checking crypto_ahash_alignmask
  - net: stmmac: Prevent NULL deref when RX memory exhausted
  - net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY()
  - net: stmmac: avoid shadowing global buf_sz
  - crypto: caam - guard HMAC key hex dumps in hash_digest_key
  - printk: add print_hex_dump_devel()
  - wifi: rtl8xxxu: fix potential use of uninitialized value
  - hfsplus: fix held lock freed on hfsplus_fill_super()
  - hfsplus: fix uninit-value by validating catalog record size
  - xfs: fix a resource leak in xfs_alloc_buftarg()
  - mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs
  - udf: fix partition descriptor append bookkeeping
  - firmware: google: framebuffer: Do not unregister platform device
  - spi: fix resource leaks on device setup failure
  - net: qrtr: ns: Limit the total number of nodes
  - net: qrtr: ns: Limit the maximum number of lookups
  - net: qrtr: ns: Limit the maximum server registration per node
  - net: bridge: use a stable FDB dst snapshot in RCU readers
  - net: mctp: fix don't require received header reserved bits to be zero
  - RDMA/mana_ib: Disable RX steering on RSS QP destroy
  - sched: Use u64 for bandwidth ratio calculations
  - block: relax pgmap check in bio_add_page for compatible zone device pages
  - PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete
  - wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling
  - wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor
  - wifi: mt76: connac: introduce helper for mt7925 chipset
  - lib: test_hmm: evict device pages on file close to avoid use-after-free
  - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()
  - batman-adv: bla: put backbone reference on failed claim hash insert
  - batman-adv: bla: only purge non-released claims
  - batman-adv: bla: prevent use-after-free when deleting claims
  - batman-adv: stop caching unowned originator pointers in BAT IV
  - batman-adv: reject new tp_meter sessions during teardown
  - batman-adv: fix integer overflow on buff_pos
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
  - drm/amdgpu/pm: align Hawaii mclk workaround with radeon
  - drm/amdgpu/pm: add missing revision check for CI
  - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
  - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ
  - drm/amdgpu: zero-initialize GART table on allocation
  - drm/radeon: add missing revision check for CI
  - drm/amdkfd: validate SVM ioctl nattr against buffer size
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
  - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg
  - drm/amdgpu/vce: Prevent partial address patches
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
  - drm/amdgpu: Add bounds checking to ib_{get,set}_value
  - drm/amdkfd: Add upper bound check for num_of_nodes
  - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure
  - spi: cadence: fix unclocked access on unbind
  - spi: cadence: fix controller deregistration
  - spi: mpc52xx: fix use-after-free on unbind
  - spi: orion: fix clock imbalance on registration failure
  - spi: orion: fix runtime pm leak on unbind
  - spi: imx: fix runtime pm leak on probe deferral
  - spi: img-spfi: fix controller deregistration
  - spi: rspi: fix controller deregistration
  - spi: sprd: fix controller deregistration
  - spi: coldfire-qspi: fix controller deregistration
  - spi: bcmbca-hsspi: fix controller deregistration
  - spi: fsl: fix controller deregistration
  - spi: sh-hspi: fix controller deregistration
  - spi: mtk-nor: fix controller deregistration
  - spi: omap2-mcspi: fix controller deregistration
  - spi: fsl-espi: fix controller deregistration
  - spi: s3c64xx: fix controller deregistration
  - spi: dln2: fix controller deregistration
  - media: omap3isp: drop the use count of v4l2 pipeline
  - media: i2c: ov08d10: fix image vertical start setting
  - media: staging: imx: request mbus_config in csi_start
  - media: i2c: imx412: Assert reset GPIO during probe
  - media: dib8000: avoid division by 0 in dib8000_set_dds()
  - media: pci: zoran: fix potential memory leak in zoran_probe()
  - platform/x86: hp-wmi: Ignore backlight and FnLock events
  - media: saa7164: add ioremap return checks and cleanups
  - spi: at91-usart: fix controller deregistration
  - spi: qup: fix controller deregistration
  - spi: lantiq-ssc: fix controller deregistration
  - regulator: bd9571mwv: fix OF node reference imbalance
  - regulator: act8945a: fix OF node reference imbalance
  - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap
  - regulator: rk808: fix OF node reference imbalance
  - media: rc: streamzap: Error handling in probe
  - media: rc: xbox_remote: heed DMA restrictions
  - regulator: max77650: fix OF node reference imbalance
  - regulator: mt6357: fix OF node reference imbalance
  - staging: media: atomisp: Disallow all private IOCTLs
  - spi: atmel: fix controller deregistration
  - spi: bcm63xx: fix controller deregistration
  - media: i2c: ov8856: free control handler on error in ov8856_init_controls()
  - media: uvcvideo: Enable VB2_DMABUF for metadata stream
  - HID: playstation: Clamp num_touch_reports
  - exit: Sleep at TASK_IDLE when waiting for application core dump
  - LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup
  - LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()
  - KVM: arm64: Fix initialisation order in __pkvm_init_finalise()
  - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value
  - f2fs: fix node_cnt race between extent node destroy and writeback
  - f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks()
  - f2fs: fix fiemap boundary handling when read extent cache is incomplete
  - f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode()
  - mptcp: fix scheduling with atomic in timestamp sockopt
  - mptcp: sockopt: set timestamp flags on subflow socket, not msk
  - mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure
  - mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure
  - mptcp: fastclose msk when linger time is 0
  - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
  - RDMA/rxe: Reject unknown opcodes before ICRC processing
  - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads
  - RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()
  - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()
  - power: supply: max17042: avoid overflow when determining health
  - PCI/AER: Stop ruling out unbound devices as error source
  - PCI/AER: Clear only error bits in PCIe Device Status
  - KVM: x86: check for nEPT/nNPT in slow flush hypercalls
  - smb: client: validate dacloffset before building DACL pointers
  - smb/client: fix out-of-bounds read in symlink_data()
  - smb/client: fix out-of-bounds read in smb2_compound_op()
  - s390/debug: Reject zero-length input in debug_input_flush_fn()
  - RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
  - nvme-apple: drop invalid put of admin queue reference count
  - md/raid10: fix divide-by-zero in setup_geo() with zero far_copies
  - libceph: Fix slab-out-of-bounds access in auth message processing
  - lib/scatterlist: fix temp buffer in extract_user_to_sg()
  - lib/scatterlist: fix length calculations in extract_kvec_to_sg
  - isofs: validate block number from NFS file handle in isofs_export_iget
  - isofs: validate Rock Ridge CE continuation extent against volume size
  - dm-verity-fec: correctly reject too-small hash devices
  - dm-verity-fec: correctly reject too-small FEC devices
  - dm: fix a buffer overflow in ioctl processing
  - dm: don't report warning when doing deferred remove
  - dm-thin: fix metadata refcount underflow
  - ASoC: qcom: q6apm: remove child devices when apm is removed
  - ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens
  - ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop
  - ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error
  - ASoC: fsl_easrc: fix comment typo
  - ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table
  - cpuidle: powerpc: avoid double clear when breaking snooze
  - clk: microchip: mpfs-ccc: fix out of bounds access during output registration
  - clk: imx: imx8-acm: fix flags for acm clocks
  - spi: topcliff-pch: fix use-after-free on unbind
  - thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp
  - thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata
  - udf: reject descriptors with oversized CRC length
  - ibmveth: Disable GSO for packets with small MSS
  - hv_sock: fix ARM64 support
  - gpio: of: clear OF_POPULATED on hog nodes in remove path
  - extcon: ptn5150: handle pending IRQ events during system resume
  - cifs: change_conf needs to be called for session setup
  - cifs: abort open_cached_dir if we don't request leases
  - block: add pgmap check to biovec_phys_mergeable
  - af_unix: Reject SIOCATMARK on non-stream sockets
  - hwmon: (corsair-psu) Close HID device on probe errors
  - clk: rk808: fix OF node reference imbalance
  - hwmon: (ltc2992) Fix u32 overflow in power read path
  - hwmon: (ltc2992) Clamp threshold writes to hardware range
  - parisc: Fix IRQ leak in LASI driver
  - net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler
  - net/rds: handle zerocopy send cleanup before the message is queued
  - ip6_gre: Use cached t->net in ip6erspan_changelink().
  - net: libwx: fix VF illegal register access
  - sound: ua101: fix division by zero at probe
  - net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo
  - fanotify: fix false positive on permission events
  - staging: vme_user: fix root device leak on init failure
  - spi: s3c64xx: fix NULL-deref on driver unbind
  - spi: zynqmp-gqspi: fix controller deregistration
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()
  - Bluetooth: virtio_bt: validate rx pkt_type header length
  - Bluetooth: virtio_bt: clamp rx length before skb_put
  - selinux: prune /sys/fs/selinux/disable
  - selinux: shrink critical section in sel_write_load()
  - selinux: don't reserve xattr slot when we won't fill it
  - ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
  - xfrm: provide message size for XFRM_MSG_MAPPING
  - powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o
  - ALSA: firewire-tascam: Do not drop unread control events
  - USB: serial: option: add Telit Cinterion LE910Cx compositions
  - USB: omap_udc: DMA: Don't enable burst 4 mode
  - ALSA: usb-audio: Fix UAC3 cluster descriptor size check
  - ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()
  - ALSA: usb-audio: midi2: Restart output URBs on resume
  - wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task
  - wifi: b43: enforce bounds check on firmware key index in b43_rx()
  - wifi: mac80211: remove station if connection prep fails
  - wifi: ath5k: do not access array OOB
  - wifi: mac80211: drop stray 'static' from fast-RX rx_result
  - wifi: b43legacy: enforce bounds check on firmware key index in RX path
  - wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work
  - wifi: mt76: mt7921: fix a potential clc buffer length underflow
  - exit: prevent preemption of oopsing TASK_DEAD task
  - selftests/bpf: validate fake register spill/fill precision backtracking logic
  - selftests/bpf: validate precision logic in partial_stack_load_preserves_zeros
  - selftests/bpf: validate zero preservation for sub-slot loads
  - selftests/bpf: validate STACK_ZERO is preserved on subreg spill
  - net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked
  - KVM: SVM: check validity of VMCB controls when returning from SMM
  - flow_dissector: do not dissect PPPoE PFC frames
  - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
  - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets
  - rxrpc: Fix potential UAF after skb_unshare() failure
  - spi: meson-spicc: Fix double-put in remove path
  - drm/amd/display: Do not skip unrelated mode changes in DSC validation
  - spi: rockchip: fix controller deregistration
  - ASoC: SOF: Don't allow pointer operations on unconfigured streams
  - iommufd: Fix a race with concurrent allocation and unmap
  - ACPI: video: force native backlight on HP OMEN 16 (8A44)
  - ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug
  - ACPI: scan: Use acpi_dev_put() in object add error paths
  - fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free
  - ipmi:si: Return state to normal if message allocation fails
  - ipmi: Check event message buffer response for bad data
  - ipmi: Add limits to event and receive message requests
  - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
  - netfilter: reject zero shift in nft_bitwise
  - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
  - drm/amdgpu: fix zero-size GDS range init on RDNA4
  - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
  - seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode
  - scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails
  - rtmutex: Use waiter::task instead of current in remove_waiter()
  - ntfs3: fix integer overflow in run_unpack() volume boundary check
  - ntfs3: add buffer boundary checks to run_unpack()
  - ktest: Fix the month in the name of the failure directory
  - IB/core: Fix zero dmac race in neighbor resolution
  - dm mirror: fix integer overflow in create_dirty_log()
  - crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path
  - crypto: atmel-tdes - fix DMA sync direction
  - crypto: ccree - fix a memory leak in cc_mac_digest()
  - crypto: hisilicon - Fix dma_unmap_single() direction
  - crypto: atmel-ecc - Release client on allocation failure
  - crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup
  - crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit
  - can: ucan: fix devres lifetime
  - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
  - taskstats: set version in TGID exit notifications
  - tcp: call sk_data_ready() after listener migration
  - inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails
  - md/raid5: validate payload size before accessing journal metadata
  - ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()
  - ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access
  - mtd: docg3: fix use-after-free in docg3_release()
  - mtd: docg3: Convert to platform remove callback returning void
  - KVM: nSVM: Add missing consistency check for nCR3 validity
  - KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS
  - KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT
  - KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT
  - KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID)
  - KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN
  - KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT
  - KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode
  - KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts
  - KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2
  - KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state
  - KVM: x86: Defer non-architectural deliver of exception payload to userspace read
  - userfaultfd: allow registration of ranges below mmap_min_addr
  - mm/damon/core: use time_in_range_open() for damos quota window start
  - rtc: ntxec: fix OF node reference imbalance
  - tpm: tpm_tis: stop transmit if retries are exhausted
  - tpm: tpm_tis: add error logging for data transfer
  - crypto: talitos - rename first/last to first_desc/last_desc
  - crypto: talitos - fix SEC1 32k ahash request limitation
  - arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins
  - mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration
  - mmc: block: use single block write in retry
  - power: supply: axp288_charger: Do not cancel work before initializing it
  - LoongArch: Show CPU vulnerabilites correctly
  - tpm: avoid -Wunused-but-set-variable
  - extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE'
  - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()
  - ipv4: icmp: validate reply type before using icmp_pointers
  - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
  - drm/arcpgu: fix device node leak
  - net: ks8851: Avoid excess softirq scheduling
  - net: ks8851: Reinstate disabling of BHs around IRQ handler
  - net/smc: avoid early lgr access in smc_clc_wait_msg
  - net: rds: fix MR cleanup on copy error
  - net: qrtr: ns: Free the node during ctrl_cmd_bye()
  - tools/accounting: handle truncated taskstats netlink messages
  - rxrpc: Fix re-decryption of RESPONSE packets
  - rxrpc: Fix rxkad crypto unalignment handling
  - rxrpc: Fix memory leaks in rxkad_verify_response()
  - iio: adc: ad7768-1: fix one-shot mode data acquisition
  - io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE
  - io_uring/poll: fix signed comparison in io_poll_get_ownership()
  - iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned()
  - io_uring/timeout: check unused sqe fields
  - rbd: fix null-ptr-deref when device_add_disk() fails
  - selftests/mqueue: Fix incorrectly named file
  - remoteproc: xlnx: Only access buffer information if IPI is buffered
  - parisc: _llseek syscall is only available for 32-bit userspace
  - nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set
  - nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4
  - mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused
  - md/raid10: fix deadlock with check operation and nowait requests
  - ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes
  - ALSA: ctxfi: Add fallback to default RSR for S/PDIF
  - ALSA: aoa: i2sbus: fix OF node lifetime handling
  - ext2: reject inodes with zero i_nlink and valid mode in ext2_iget()
  - media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe()
  - lib/ts_kmp: fix integer overflow in pattern length calculation
  - PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown
  - media: mtk-jpeg: fix use-after-free in release path due to uncancelled work
  - net: strparser: fix skb_head leak in strp_abort_strp()
  - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()
  - media: amphion: Fix race between m2m job_abort and device_run
  - of: unittest: fix use-after-free in testdrv_probe()
  - spi: imx: fix use-after-free on unbind
  - um: drivers: call kernel_strrchr() explicitly in cow_user.c
  - wifi: rtw88: check for PCI upstream bridge existence
  - zram: do not forget to endio for partial discard requests
  - LoongArch: Add spectre boundry for syscall dispatch table
  - ocfs2: split transactions in dio completion to avoid credit exhaustion
  - regset: use kvzalloc() for regset_get_alloc()
  - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion
  - drm/amdgpu: Use vmemdup_array_user in amdgpu_bo_create_list_entry_array
  - padata: Remove comment for reorder_work
  - firmware: google: framebuffer: Do not mark framebuffer as busy
  - ibmasm: fix heap over-read in ibmasm_send_i2o_message()
  - ibmasm: fix OOB reads in command_file_write due to missing size checks
  - misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()
  - leds: qcom-lpg: Check for array overflow when selecting the high resolution
  - ALSA: usb-audio: Evaluate packsize caps at the right place
  - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change
  - usb: chipidea: otg: not wait vbus drop if use role_switch
  - usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable()
  - ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch
  - ALSA: usb-audio: Avoid false E-MU sample-rate notifications
  - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
  - Buffer overflow in drivers/xen/sys-hypervisor.c
  - md/raid1: fix data lost for writemostly rdev
  - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing
  - crypto: testmgr - Hide ENOENT errors better
  - crypto: testmgr - Hide ENOENT errors
  - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
  - f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()
  - fuse: quiet down complaints in fuse_conn_limit_write
  - fuse: Check for large folio with SPLICE_F_MOVE
  - fuse: reject oversized dirents in page cache
  - f2fs: fix to avoid memory leak in f2fs_rename()
  - fs/ntfs3: validate rec->used in journal-replay file record check
  - rxrpc: only handle RESPONSE during service challenge
  - rxrpc: Fix anonymous key handling
  - scripts/dtc: Remove unused dts_version in dtc-lexer.l
  - Revert "wifi: cfg80211: stop NAN and P2P in cfg80211_leave"
  - ocfs2: fix out-of-bounds write in ocfs2_write_end_inline
  - ocfs2: validate inline data i_size during inode read
  - ocfs2: add inline inode consistency check to ocfs2_validate_inode_block()
  - rxrpc: Fix key quota calculation for multitoken keys
  - scripts: generate_rust_analyzer.py: define scripts
  - net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers
  - PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown
  - Revert "perf unwind-libdw: Fix invalid reference counts"
  - media: hackrf: fix to not free memory after the device is registered in hackrf_probe()
  - media: vidtv: fix pass-by-value structs causing MSAN warnings
  - nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
  - media: as102: fix to not free memory after the device is registered in as102_usb_probe()
  - ALSA: 6fire: fix use-after-free on disconnect
  - media: em28xx: fix use-after-free in em28xx_v4l2_open()
  - media: mediatek: vcodec: fix use-after-free in encoder release path
  - media: vidtv: fix nfeeds state corruption on start_streaming failure
  - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
  - mm/kasan: fix double free for kasan pXds
  - ASoC: qcom: q6apm: move component registration to unmanaged version
  - checkpatch: add support for Assisted-by tag
  - nfc: nci: complete pending data exchange on device close
  - net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr()
  - KVM: nVMX: Fold requested virtual interrupt check into has_nested_events()
  - btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io()
  - ocfs2: handle invalid dinode in ocfs2_group_extend
  - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
  - ocfs2: fix possible deadlock between unlink and dio_end_io_write
  - media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections
  - Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race
  - USB: serial: option: add Telit Cinterion FN990A MBIM composition
  - staging: sm750fb: fix division by zero in ps_to_hz()
  - wifi: rtw88: fix device leak on probe failure
  - scripts: generate_rust_analyzer.py: avoid FD leak
  - fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
  - ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc
  - ksmbd: require 3 sub-authorities before reading sub_auth[2]
  - ksmbd: validate EaNameLength in smb2_get_ea()
  - usb: gadget: renesas_usb3: validate endpoint index in standard request handlers
  - usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()
  - usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()
  - fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
  - ALSA: fireworks: bound device-supplied status before string array lookup
  - drm/vc4: platform_get_irq_byname() returns an int
  - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
  - net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()
  - staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()
  - i2c: s3c24xx: check the size of the SMBUS message before using it
  - nfc: llcp: add missing return after LLCP_CLOSED checks
  - drm/i915/psr: Do not use pipe_src as borders for SU area
  - objtool: Remove max symbol name length limitation
  - ALSA: usb-audio: Improve Focusrite sample rate filtering
  - gpio: tegra: fix irq_release_resources calling enable instead of disable
  - l2tp: Drop large packets with UDP encap
  - net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+
  - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator
  - ipvs: fix NULL deref in ip_vs_add_service error path
  - selftests: net: bridge_vlan_mcast: wait for h1 before querier check
  - xsk: validate MTU against usable frame size on bind
  - xsk: fix XDP_UMEM_SG_FLAG issues
  - xsk: respect tailroom for ZC setups
  - xsk: tighten UMEM headroom validation to account for tailroom and min frame
  - e1000: check return value of e1000_read_eeprom
  - dt-bindings: net: Fix Tegra234 MGBE PTP clock
  - net: stmmac: Fix PTP ref clock for Tegra234
  - nfc: s3fwrn5: allocate rx skb before consuming bytes
  - net: lapbether: handle NETDEV_PRE_TYPE_CHANGE
  - eventpoll: defer struct eventpoll free to RCU grace period
  - drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock
  - drm/vc4: Fix a memory leak in hang state error path
  - drm/vc4: Fix memory leak of BO array in hang state
  - drm/vc4: Release runtime PM reference after binding V3D
  - PCI: hv: Set default NUMA node to 0 for devices without affinity info
  - arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency
  - soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching
  - ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J
  - wifi: brcmfmac: validate bsscfg indices in IF events
  - ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585
  - HID: roccat: fix use-after-free in roccat_report_event
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10
  - HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3
  - platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug
  - pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer)
  - ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx
  - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
  - ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex
  - ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list
  - wifi: wl1251: validate packet IDs before indexing tx_frames
  - ALSA: hda/realtek: add quirk for Framework F111:000F
  - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx
  - can: mcp251x: add error handling for power enable in open and resume
  - ASoC: SOF: topology: reject invalid vendor array size in token parser
  - ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF
  - ALSA: asihpi: avoid write overflow check warning
  - media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl()
  - ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC
  - ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk
  - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA
  - RDMA/irdma: Fix double free related to rereg_user_mr
  - Revert "PCI: Enable ACS after configuring IOMMU for OF platforms"
  - rxrpc: Fix missing error checks for rxkad encryption/decryption failure
  - rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING)
  - rxrpc: fix reference count leak in rxrpc_server_keyring()
  - rxrpc: reject undecryptable rxkad response tickets
  - rxrpc: Only put the call ref if one was acquired
  - rxrpc: Fix key reference count leak from call->key
  - rxrpc: Fix call removal to use RCU safe deletion
  - net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()
  - net: stmmac: fix integer underflow in chain mode
  - net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure
  - pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled
  - net/mlx5: Update the list of the PCI supported devices
  - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat
  - batman-adv: hold claim backbone gateways by reference
  - net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()
  - batman-adv: reject oversized global TT response buffers
  - nfc: pn533: allocate rx skb before consuming bytes
  - arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges
  - arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity
  - arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V
  - Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower"
  - wifi: brcmsmac: Fix dma_free_coherent() size
  - Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug"
  - usb: gadget: f_hid: move list and spinlock inits from bind to alloc
  - virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN
  - MIPS: mm: Rewrite TLB uniquification for the hidden bit feature
  - MIPS: mm: Suppress TLB uniquification on EHINV hardware
  - MIPS: Always record SEGBITS in cpu_data.vmbits
  - Input: uinput - take event lock when submitting FF request "event"
  - mptcp: fix slab-use-after-free in __inet_lookup_established
  - net: rfkill: prevent unlimited numbers of rfkill events from being created
  - wifi: rt2x00usb: fix devres lifetime
  - net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta
  - MPTCP: fix lock class name family in pm_nl_create_listen_socket
  - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests
  - dmaengine: fsl-edma: change to guard(mutex) within fsl_edma3_xlate()
  - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling()
  - net: mana: fix use-after-free in add_adev() error path
  - net: macb: Move devm_{free,request}_irq() out of spin lock area
  - iio: imu: inv_icm42600: fix odr switch when turning buffer off
  - wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free
  - usb: gadget: f_uac1_legacy: validate control request size
  - usb: gadget: f_rndis: Protect RNDIS options with mutex
  - usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
  - usb: gadget: uvc: fix NULL pointer dereference during unbind race
  - usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop
  - btrfs: do not free data reservation in fallback from inline due to -ENOSPC
  - btrfs: fix the qgroup data free range for inline data extents
  - usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer
  - USB: dummy-hcd: Fix interrupt synchronization error
  - USB: dummy-hcd: Fix locking/synchronization error
  - thunderbolt: Fix property read in nhi_wake_supported()
  - misc: fastrpc: possible double-free of cctx->remote_heap
  - thermal: core: Fix thermal zone device registration error path
  - gpio: mxc: map Both Edge pad wakeup to Rising Edge
  - net: ftgmac100: fix ring allocation unwind on open failure
  - counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member
  - counter: rz-mtu3-cnt: prevent counter from being toggled multiple times
  - nvmem: imx: assign nvmem_cell_info::raw_len
  - dt-bindings: connector: add pd-disable dependency
  - comedi: me4000: Fix potential overrun of firmware buffer
  - comedi: me_daq: Fix potential overrun of firmware buffer
  - comedi: ni_atmio16d: Fix invalid clean-up after failed attach
  - comedi: Reinit dev->spinlock between attachments to low-level drivers
  - comedi: dt2815: add hardware detection to prevent crash
  - cdc-acm: new quirk for EPSON HMD
  - usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()
  - usb: ehci-brcm: fix sleep during atomic
  - usb: usbtmc: Flush anchored URBs in usbtmc_release
  - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive
  - iio: gyro: mpu3050: Fix out-of-sequence free_irq()
  - iio: gyro: mpu3050: Move iio_device_register() to correct location
  - iio: gyro: mpu3050: Fix irq resource leak
  - iio: gyro: mpu3050: Fix incorrect free_irq() variable
  - iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only
  - iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin()
  - iio: light: vcnl4035: fix scan buffer on big-endian
  - iio: dac: ad5770r: fix error return in ad5770r_read_raw()
  - iio: accel: fix ADXL355 temperature signature value
  - Input: xpad - add support for Razer Wolverine V3 Pro
  - Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode
  - Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table
  - Input: synaptics-rmi4 - fix a locking bug in an error path
  - iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()
  - drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP
  - drm/ast: dp501: Fix initialization of SCU2C
  - iio: adc: ti-adc161s626: fix buffer read on big-endian
  - mips: mm: Allocate tlb_vpn array atomically
  - hwmon: (occ) Fix division by zero in occ_show_power_1()
  - MIPS: Fix the GCC version check for `__multi3' workaround
  - ALSA: ctxfi: Fix missing SPDIFI1 index handling
  - ALSA: caiaq: fix stack out-of-bounds read in init_card
  - USB: serial: option: add MeiG Smart SRM825WN
  - wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation
  - riscv: kgdb: fix several debug register assignment bugs
  - mips: ralink: update CPU clock index
  - hwmon: (occ) Fix missing newline in occ_show_extended()
  - hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify()
  - dt-bindings: gpio: fix microchip #interrupt-cells
  - hwmon: (pxe1610) Check return value of page-select write in probe
  - accel/qaic: Handle DBC deactivation if the owner went away
  - iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one
  - net: hsr: fix VLAN add unwind on slave errors
  - net/x25: Fix overflow when accumulating packets
  - net/x25: Fix potential double free of skb
  - net/mlx5: Avoid "No data available" when FW version queries fail
  - net: macb: properly unregister fixed rate clocks
  - net: macb: fix clk handling on PCI glue driver removal
  - bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().
  - rds: ib: reject FRMR registration before IB connection is established
  - Bluetooth: SCO: fix race conditions in sco_sock_connect()
  - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate
  - net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec
  - NFC: pn533: bound the UART receive buffer
  - net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak
  - ipv6: prevent possible UaF in addrconf_permanent_addr()
  - ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure
  - tg3: Fix race for querying speed/duplex
  - net/ipv6: ioam6: prevent schema length wraparound in trace fill
  - net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak
  - net: fec: fix the PTP periodic output sysfs interface
  - crypto: caam - fix overflow on long hmac keys
  - crypto: caam - fix DMA corruption on long hmac keys
  - wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session
  - wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation
  - wifi: ath11k: skip status ring entry processing
  - dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning
  - spi: geni-qcom: Check DMA interrupts early in ISR
  - btrfs: reject root items with drop_progress and zero drop_level
  - i2c: tegra: Don't mark devices with pins as IRQ safe
  - objtool: Fix Clang jump table detection
  - tg3: replace placeholder MAC address with device property
  - btrfs: don't take device_list_mutex when querying zone info
  - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq
  - arm64/scs: Fix handling of advance_loc4
  - Revert "rust: pin-init: add references to previously initialized fields"
  - Revert "rust: pin-init: internal: init: document load-bearing fact of field accessors"
  - dmaengine: idxd: Fix freeing the allocated ida too late
  - btrfs: fix lost error when running device stats on multiple devices fs
  - btrfs: fix super block offset in error message in btrfs_validate_super()
  - dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA
  - dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction
  - dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA
  - dmaengine: xilinx: xilinx_dma: Fix dma_device directions
  - dmaengine: xilinx: xdma: Fix regmap init error handling
  - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA.
  - phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types()
  - erofs: fix "BUG: Bad page state in z_erofs_do_read_page"
  - mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0]
  - mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode
  - mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode
  - rust: pin-init: internal: init: document load-bearing fact of field accessors
  - rust: pin-init: add references to previously initialized fields
  - tracing: Fix potential deadlock in cpu hotplug with osnoise
  - tracing: Switch trace_osnoise.c code over to use guard() and __free()
  - ksmbd: fix memory leaks and NULL deref in smb2_lock()
  - ksmbd: fix use-after-free and NULL deref in smb_grant_oplock()
  - powerpc64/bpf: do not increment tailcall count when prog is NULL
  - arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off
  - ext4: always drain queued discard work in ext4_mb_release()
  - ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths
  - ext4: fix the might_sleep() warnings in kvfree()
  - ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal()
  - ext4: make recently_deleted() properly work with lazy itable initialization
  - ext4: fix fsync(2) for nojournal mode
  - ext4: fix stale xarray tags after writeback
  - ext4: fix journal credit check when setting fscrypt context
  - xfs: fix ri_total validation in xlog_recover_attri_commit_pass2
  - xfs: stop reclaim before pushing AIL during unmount
  - LoongArch: Workaround LS2K/LS7A GPU DMA hang bug
  - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock
  - dmaengine: sh: rz-dmac: Protect the driver specific lists
  - irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment
  - jbd2: gracefully abort on checkpointing state corruptions
  - net: macb: Use dev_consume_skb_any() to free TX SKBs
  - scsi: ses: Handle positive SCSI error from ses_recv_diag()
  - scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()
  - alarmtimer: Fix argument order in alarm_timer_forward()
  - s390/entry: Scrub r12 register on kernel entry
  - hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible()
  - hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature
  - hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes
  - KVM: arm64: Discard PC update state on vcpu reset
  - platform/x86: ISST: Correct locked bit width
  - can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
  - ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload
  - ALSA: firewire-lib: fix uninitialized local variable
  - ksmbd: do not expire session on binding failure
  - ksmbd: fix potencial OOB in get_file_all_info() for compound requests
  - ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()
  - s390/barrier: Make array_index_mask_nospec() __always_inline
  - s390/syscalls: Add spectre boundary for syscall dispatch table
  - spi: spi-fsl-lpspi: fix teardown order issue (UAF)
  - ASoC: adau1372: Fix clock leak on PLL lock failure
  - ASoC: adau1372: Fix unchecked clk_prepare_enable() return value
  - sysctl: fix uninitialized variable in proc_do_large_bitmap
  - hwmon: (adm1177) fix sysfs ABI violation and current unit conversion
  - ASoC: Intel: catpt: Fix the device initialization
  - spi: sn-f-ospi: Fix resource leak in f_ospi_probe()
  - PM: hibernate: Drain trailing zero pages on userspace restore
  - PM: hibernate: Don't ignore return from set_memory_ro()
  - drm/i915/gmbus: fix spurious timeout on 512-byte burst reads
  - scsi: scsi_transport_sas: Fix the maximum channel scanning issue
  - RDMA/irdma: Return EINVAL for invalid arp index error
  - RDMA/irdma: Fix deadlock during netdev reset with active connections
  - RDMA/irdma: Remove reset check from irdma_modify_qp_to_err()
  - RDMA/irdma: Clean up unnecessary dereference of event->cm_node
  - RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce()
  - RDMA/irdma: Update ibqp state to error if QP is already in error state
  - RDMA/irdma: Initialize free_qp completion before using it
  - RDMA/rw: Fall back to direct SGE on MR pool exhaustion
  - regmap: Synchronize cache for the page selector
  - Bluetooth: btusb: clamp SCO altsetting table indices
  - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock
  - Bluetooth: hci_sync: Remove remaining dependencies of hci_request
  - Bluetooth: Remove 3 repeated macro definitions
  - Bluetooth: L2CAP: Fix send LE flow credits in ACL link
  - dma-mapping: add missing `inline` for `dma_free_attrs`
  - net: enetc: fix the output issue of 'ethtool --show-ring'
  - ice: use ice_update_eth_stats() for representor stats
  - platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen
  - rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size
  - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer
  - nfc: nci: fix circular locking dependency in nci_close_device
  - ionic: fix persistent MAC address override on PF
  - pinctrl: mediatek: common: Fix probe failure for devices without EINT
  - Bluetooth: hci_ll: Fix firmware leak on error path
  - can: statistics: add missing atomic access in hot path
  - dma: swiotlb: add KMSAN annotations to swiotlb_bounce()
  - xfrm: call xdo_dev_state_delete during state update
  - spi: intel-pci: Add support for Nova Lake mobile SPI flash
  - usb: core: new quirk to handle devices with zero configurations
  - objtool: Handle Clang RSP musical chairs
  - ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390
  - ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk
  - btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create
  - dma-buf: Include ioctl.h in UAPI header
  - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits()
  - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg()
  - HID: asus: add xg mobile 2023 external hardware support
  - HID: mcp2221: cancel last I2C command on read error
  - net: usb: r8152: add TRENDnet TUC-ET2G
  - HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2
  - platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10
  - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1
  - nvme-fabrics: use kfree_sensitive() for DHCHAP secrets
  - nvme-pci: cap queue creation to used queues
  - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list
  - HID: asus: avoid memory leak in asus_report_fixup()
  - sh: platform_early: remove pdev->driver_override check
  - hwmon: (axi-fan-control) Use device firmware agnostic API
  - cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled
  - tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure
  - lib/bootconfig: check xbc_init_node() return in override path
  - ksmbd: fix use-after-free in durable v2 replay of active file handles
  - ksmbd: fix use-after-free of share_conf in compound request
  - drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr()
  - mtd: rawnand: brcmnand: skip DMA during panic write
  - mtd: rawnand: serialize lock/unlock against other NAND operations
  - i2c: cp2615: fix serial string NULL-deref at probe
  - i2c: cp2615: replace deprecated strncpy with strscpy
  - i2c: pxa: defer reset on Armada 3700 when recovery is used
  - i2c: fsi: Fix a potential leak in fsi_i2c_probe()
  - USB: serial: f81232: fix incomplete serial port generation
  - drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug
  - hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit()
  - hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value
  - net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths
  - net: mvpp2: guard flow control update with global_tx_fc in buffer switching
  - netfilter: bpf: defer hook memory release until rcu readers are done
  - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle
  - net: macb: fix uninitialized rx_fs_lock
  - wifi: mac80211: fix NULL deref in mesh_matches_local()
  - iavf: fix VLAN filter lost on add/delete race
  - igc: fix missing update of skb->tail in igc_xmit_frame()
  - net: usb: aqc111: Do not perform PM inside suspend callback
  - sched: idle: Consolidate the handling of two special cases
  - net: bcmgenet: increase WoL poll timeout
  - netfilter: xt_time: use unsigned int for monthday bit shift
  - netfilter: nft_ct: drop pending enqueued packets on removal
  - net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect
  - firmware: arm_scpi: Fix device_node reference leak in probe path
  - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down
  - soc: fsl: qbman: fix race condition in qman_destroy_fq
  - cache: ax45mp: Fix device node reference leak in ax45mp_cache_init()
  - btrfs: tree-checker: fix misleading root drop_level error message
  - btrfs: log new dentries when logging parent dir of a conflicting inode
  - drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END}
  - drm/amdgpu: apply state adjust rules to some additional HAINAN vairants
  - drm/radeon: apply state adjust rules to some additional HAINAN vairants
  - drm/amdgpu/mmhub3.0: add bounds checking for cid
  - drm/amdgpu/mmhub3.0.2: add bounds checking for cid
  - drm/amdgpu/mmhub3.0.1: add bounds checking for cid
  - drm/amdgpu/mmhub2.3: add bounds checking for cid
  - drm/amdgpu/mmhub2.0: add bounds checking for cid
  - drm/amdgpu/gmc9.0: add bounds checking for cid
  - serial: uartlite: fix PM runtime usage count underflow on probe
  - serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY
  - serial: 8250_pci: add support for the AX99100
  - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry
  - mtd: Avoid boot crash in RedBoot partition table parser
  - mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init()
  - mtd: rawnand: pl353: make sure optimal timings are applied
  - pmdomain: bcm: bcm2835-power: Increase ASB control timeout
  - mmc: sdhci: fix timing selection for 1-bit bus width
  - mmc: sdhci-pci-gli: fix GL9750 DMA write corruption
  - batman-adv: avoid OGM aggregation when skb tailroom is insufficient
  - iio: light: bh1780: fix PM runtime leak on error path
  - btrfs: fix transaction abort on file creation due to name hash collision
  - btrfs: fix transaction abort on set received ioctl due to item overflow
  - btrfs: fix transaction abort when snapshotting received subvolumes
  - kprobes: Remove unneeded warnings from __arm_kprobe_ftrace()
  - kprobes: Remove unneeded goto
  - ksmbd: unset conn->binding on failed binding request
  - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()
  - parisc: Flush correct cache in cacheflush() syscall
  - net: macb: fix use-after-free access to PTP clock
  - NFC: nxp-nci: allow GPIOs to sleep
  - LoongArch: Give more information if kmem access failed
  - s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute
  - s390/stackleak: Fix __stackleak_poison() inline assembly constraint
  - s390/xor: Fix xor_xc_2() inline assembly constraints
  - mptcp: pm: in-kernel: always set ID as avail when rm endp
  - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access
  - drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free
  - drm/exynos: vidi: fix to avoid directly dereferencing user pointer
  - drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl()
  - drm/amdgpu: Add basic validation for RAS header
  - l2tp: do not use sock_hold() in pppol2tp_session_get_sock()
  - drm/amd/display: Add pixel_clock to amd_pp_display_configuration
  - btrfs: do not strictly require dirty metadata threshold for metadata writepages
  - rxrpc: Fix data-race warning and potential load/store tearing
  - x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler
  - x86/sev: Harden #VC instruction emulation somewhat
  - dm-verity: disable recursive forward error correction
  - rxrpc: Fix recvmsg() unconditional requeue
  - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()
  - btrfs: fix NULL dereference on root when tracing inode eviction
  - arm64: mm: Don't remap pgtables for allocate vs populate
  - arm64: mm: Don't remap pgtables per-cont(pte|pmd) block
  - net/tcp-md5: Fix MAC comparison to be constant-time
  - ksmbd: Compare MACs in constant time
  - smb: client: Compare MACs in constant time
  - xfs: ensure dquot item is deleted from AIL only after log shutdown
  - xfs: fix integer overflow in bmap intent sort comparator
  - crypto: atmel-sha204a - Fix OOM ->tfm_count leak
  - drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output
  - drm/msm: Fix dma_free_attrs() buffer size
  - ksmbd: Don't log keys in SMB3 signing and encryption key generation
  - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids
  - usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling
  - can: gs_usb: gs_can_open(): always configure bitrates before starting device
  - kbuild: Leave objtool binary around with 'make clean'
  - mptcp: pm: avoid sending RM_ADDR over same subflow
  - drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink
  - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL
  - x86/sev: Allow IBPB-on-Entry feature for SNP guests
  - platform/x86: hp-bioscfg: Support allocations of larger data
  - ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths
  - gve: defer interrupt enabling until NAPI registration
  - drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD
  - i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor
  - i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort
  - i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors
  - iio: imu: inv_icm42600: fix odr switch to the same value
  - iio: gyro: mpu3050-i2c: fix pm_runtime error handling
  - iio: gyro: mpu3050-core: fix pm_runtime error handling
  - iio: buffer: Fix wait_queue not being removed
  - iio: chemical: bme680: Fix measurement wait duration calculation
  - iio: potentiometer: mcp4131: fix double application of wiper shift
  - iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()
  - iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas()
  - iio: frequency: adf4377: Fix duplicated soft reset mask
  - iio: dac: ds4424: reject -128 RAW value
  - btrfs: abort transaction on failure to update root in the received subvol ioctl
  - smb: client: fix iface port assignment in parse_server_interfaces
  - smb: client: fix in-place encryption corruption in SMB2_write()
  - lib/bootconfig: check bounds before writing in __xbc_open_brace()
  - lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after()
  - lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error
  - s390/dasd: Copy detected format information to secondary device
  - s390/dasd: Move quiesce state with pprc swap
  - xfs: fix undersized l_iclog_roundoff values
  - cifs: make default value of retrans as zero
  - tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G
  - drm/i915: Fix potential overflow of shmem scatterlist length
  - drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding
  - drm/amd: Set num IP blocks to 0 if discovery fails
  - drm/amdgpu: Fix use-after-free race in VM acquire
  - net: ethernet: arc: emac: quiesce interrupts before requesting IRQ
  - net: ncsi: fix skb leak in error paths
  - ksmbd: fix use-after-free by using call_rcu() for oplock_info
  - smb: server: fix use-after-free in smb2_open()
  - ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()
  - pmdomain: bcm: bcm2835-power: Fix broken reset status read
  - parisc: Check kernel mapping earlier at bootup
  - parisc: Fix initial page table creation for boot
  - hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
  - parisc: Increase initial mapping to 64 MB with KALLSYMS
  - batman-adv: Avoid double-rtnl_lock ELP metric worker
  - tracing: Fix syscall events activation by ensuring refcount hits zero
  - ice: fix retry for AQ command 0x06EE
  - net: mana: Ring doorbell at 4 CQ wraparounds
  - staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie
  - ixgbevf: fix link setup issue
  - ice: reintroduce retry mechanism for indirect AQ
  - irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports
  - device property: Allow secondary lookup in fwnode_get_next_child_node()
  - drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used
  - drm/bridge: samsung-dsim: Fix memory leak in error path
  - Revert "tcpm: allow looking for role_sw device in the main node"
  - scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend
  - i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach
  - libceph: admit message frames only in CEPH_CON_S_OPEN state
  - libceph: Use u32 for non-negative values in ceph_monmap_decode()
  - libceph: reject preamble if control segment is empty
  - tipc: fix divide-by-zero in tipc_sk_filter_connect()
  - ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start
  - mmc: core: Avoid bitfield RMW for claim/retune flags
  - mm/kfence: disable KFENCE upon KASAN HW tags enablement
  - mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index()
  - mm/tracing: rss_stat: ensure curr is false from kthread context
  - usb: image: mdc800: kill download URB on timeout
  - usb: mdc800: handle signal and read racing
  - usb: renesas_usbhs: fix use-after-free in ISR during device removal
  - usb: roles: get usb role switch from parent only for usb-b-connector
  - usb: cdc-acm: Restore CAP_BRK functionnality to CH343
  - usb: core: don't power off roothub PHYs if phy_set_mode() fails
  - usb: misc: uss720: properly clean up reference in uss720_probe()
  - usb: dwc3: pci: add support for the Intel Nova Lake -H
  - usb: yurex: fix race in probe
  - usb: xhci: Fix memory leak in xhci_disable_slot()
  - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed
  - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk
  - USB: add QUIRK_NO_BOS for video capture several devices
  - KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC
  - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA
  - net: usb: lan78xx: skip LTM configuration for LAN7850
  - net: usb: lan78xx: fix TX byte statistics for small packets
  - net: usb: lan78xx: fix silent drop of packets with checksum errors
  - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
  - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()
  - cgroup: fix race between task migration and iteration
  - Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on"
  - usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks()
  - octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status
  - octeontx2-af: devlink health: use retained error fmsg API
  - octeontx2-af: devlink: fix NIX RAS reporter recovery condition
  - net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled
  - ASoC: detect empty DMI strings
  - ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition
  - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address()
  - i40e: fix src IP mask checks and memcpy argument names in cloud filter
  - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set
  - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
  - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path
  - netfilter: x_tables: guard option walkers against 1-byte tail reads
  - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()
  - amd-xgbe: prevent CRC errors during RX adaptation with AN disabled
  - amd-xgbe: fix link status handling in xgbe_rx_adaptation
  - mctp: route: hold key->lock in mctp_flow_prepare_output()
  - can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value
  - mctp: i2c: fix skb memory leak in receive path
  - serial: caif: hold tty->link reference in ldisc_open and ser_release
  - net: sfp: improve Huawei MA5671a fixup
  - net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick
  - net: sfp: improve Nokia GPON sfp fixup
  - net: sfp: re-implement ignoring the hardware TX_FAULT signal
  - net/mlx5: IFC updates for disabled host PF
  - bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states
  - drm/msm/dsi: fix pclk rate calculation for bonded dsi
  - drm/msm/dsi: Document DSC related pclk_rate and hdisplay calculations
  - net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets
  - xprtrdma: Decrement re_receiving on the early exit paths
  - smb/server: Fix another refcount leak in smb2_open()
  - powerpc: 83xx: km83xx: Fix keymile vendor prefix
  - remoteproc: mediatek: Unprepare SCP clock during system suspend
  - remoteproc: sysmon: Correct subsys_name_len type in QMI request
  - powerpc/uaccess: Fix inline assembly for clang build on PPC32
  - ALSA: usb-audio: Check max frame size for implicit feedback mode, too
  - ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0
  - scsi: ufs: core: Fix shift out of bounds when MAXQ=32
  - scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace()
  - ASoC: cs42l43: Report insert for exotic peripherals
  - ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table
  - scsi: ses: Fix devices attaching to different hosts
  - ACPI: OSI: Add DMI quirk for Acer Aspire One D255
  - wifi: mac80211: set default WMM parameters on all links
  - scsi: mpi3mr: Add NULL checks when resetting request and reply queues
  - ACPI: PM: Save NVS memory on Lenovo G70-35
  - net: tcp: accept old ack during closing
  - tracing: Add NULL pointer check to trigger_data_free()
  - selftest/arm64: Fix sve2p1_sigill() to hwcap test
  - i40e: use xdp.frame_sz as XDP RxQ info frag_size
  - i40e: fix registering XDP RxQ info
  - net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()
  - net: stmmac: Fix error handling in VLAN add and delete paths
  - nfc: rawsock: cancel tx_work before socket teardown
  - nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback
  - nfc: nci: free skb on nci_transceive early error paths
  - net: nfc: nci: Fix zero-length proprietary notifications
  - drm/sched: Fix kernel-doc warning for drm_sched_job_done()
  - amd-xgbe: fix sleep while atomic on suspend/resume
  - smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info()
  - smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op()
  - xen/acpi-processor: fix _CST detection using undersized evaluation buffer
  - net/rds: Fix circular locking dependency in rds_tcp_tune
  - indirect_call_wrapper: do not reevaluate function pointer
  - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()
  - wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()
  - wifi: wlcore: Fix a locking bug
  - octeon_ep: avoid compiler and IQ/OQ reordering
  - octeon_ep: Relocate counter updates before NAPI
  - net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value
  - kunit: tool: copy caller args in run_kernel to prevent mutation
  - rust: kunit: fix warning when !CONFIG_PRINTK
  - can: mcp251x: fix deadlock in error path of mcp251x_open
  - amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds
  - atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
  - net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table
  - e1000e: clear DPG_EN after reset to avoid autonomous power-gating
  - hwmon: (it87) Check the it87_lock() return value
  - platform/x86: thinkpad_acpi: Fix errors reading battery thresholds
  - pinctrl: equilibrium: fix warning trace on load
  - pinctrl: equilibrium: rename irq_chip function callbacks
  - hwmon: (aht10) Fix initialization commands for AHT20
  - hwmon: (aht10) Add support for dht20
  - ARM: clean up the memset64() C wrapper
  - selftests: mptcp: join: check removing signal+subflow endp
  - selftests: mptcp: more stable simult_flows tests
  - smb: client: fix broken multichannel with krb5+signing
  - smb: client: fix cifs_pick_channel when channels are equally loaded
  - drbd: fix null-pointer dereference on local read error
  - drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
  - net/sched: ets: fix divide by zero in the offload path
  - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()
  - IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()
  - wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()
  - wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration
  - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()
  - wifi: radiotap: reject radiotap with unknown bits
  - ALSA: usb-audio: Use correct version for UAC3 header validation
  - platform/x86: dell-wmi: Add audio/mic mute key codes
  - platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
  - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
  - can: usb: f81604: handle bulk write errors properly
  - can: usb: f81604: handle short interrupt urb messages properly
  - can: usb: f81604: correctly anchor the urb in the read bulk callback
  - can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message
  - nfc: pn533: properly drop the usb interface reference on disconnect
  - eventpoll: Fix integer overflow in ep_loop_check_proc()
  - drm/amdgpu: keep vga memory on MacBooks with switchable graphics
  - drm/amd: Drop special case for yellow carp without discovery
  - net: arcnet: com20020-pci: fix support for 2.5Mbit cards
  - ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314
  - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4
  - usb: cdns3: remove redundant if branch
  - clk: tegra: tegra124-emc: fix device leak on set_rate()
  - arm64: dts: rockchip: Fix rk356x PCIe range mappings
  - mfd: omap-usb-host: Fix OF populate on driver rebind
  - mfd: omap-usb-host: Convert to platform remove callback returning void
  - mfd: qcom-pm8xxx: Fix OF populate on driver rebind
  - mfd: qcom-pm8xxx: Convert to platform remove callback returning void
  - ext4: delete redundant calculations in ext4_mb_get_buddy_page_lock()
  - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()
  - mailbox: Allow controller specific mapping using fwnode
  - mailbox: Use guard/scoped_guard for con_mutex
  - mailbox: Use dev_err when there is error
  - mailbox: remove unused header files
  - mailbox: sort headers alphabetically
  - mailbox: don't protect of_parse_phandle_with_args with con_mutex
  - mailbox: Use of_property_match_string() instead of open-coding
  - ext4: get rid of ppath in ext4_ext_create_new_leaf()
  - ext4: get rid of ppath in ext4_find_extent()
  - bus: omap-ocp2scp: fix OF populate on driver rebind
  - bus: omap-ocp2scp: Convert to platform remove callback returning void
  - drm/tegra: dsi: fix device leak on probe
  - media: tegra-video: Fix memory leak in __tegra_channel_try_format()
  - media: tegra-video: Use accessors for pad config 'try_*' fields
  - KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR
  - KVM: x86: Rename KVM_MSR_RET_INVALID to KVM_MSR_RET_UNSUPPORTED
  - PCI: Use resource_set_range() that correctly sets ->end
  - resource: Add resource set range and size helpers
  - PCI: Use resource names in PCI log messages
  - PCI: Update BAR # and window messages
  - memory: mtk-smi: fix device leak on larb probe
  - memory: mtk-smi: fix device leaks on common probe
  - memory: mtk-smi: Convert to platform remove callback returning void
  - PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value
  - btrfs: fix compat mask in error messages in btrfs_check_features()
  - btrfs: fix warning in scrub_verify_one_metadata()
  - btrfs: fix objectid value in error message in check_extent_data_ref()
  - btrfs: fix incorrect key offset in error message in check_dev_extent_item()
  - btrfs: add support for inserting raid stripe extents
  - btrfs: read raid stripe tree from disk
  - btrfs: add raid stripe tree definitions
  - btrfs: move btrfs_extref_hash into inode-item.h
  - btrfs: remove btrfs_crc32c wrapper
  - btrfs: move btrfs_crc32c_final into free-space-cache.c
  - ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put()
  - ALSA: pci: hda: use snd_kcontrol_chip()
  - ALSA: usb-audio: Use inclusive terms
  - ALSA: usb-audio: Cap the packet size pre-calculations
  - scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume
  - rseq: Clarify rseq registration rseq_size bound check comment
  - ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices
  - scsi: pm8001: Fix use-after-free in pm8001_queue_command()
  - scsi: lpfc: Properly set WC for DPP mapping
  - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting
  - Revert "x86/kexec: add a sanity check on previous kernel's ima kexec buffer"
  - arm64: Fix sampling the "stable" virtual counter in preemptible section
  - drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros
  - NTB: ntb_transport: Fix too small buffer for debugfs_name
  - net: nfc: nci: Fix parameter validation for packet data
  - arm64: Force the use of CNTVCT_EL0 in __delay()
  - x86/kexec: Copy ACPI root pointer address from config table
  - net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash()
  - net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle
  - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR
  - fbcon: Remove struct fbcon_display.inverse
  - fbdev: ffb: fix corrupted video output on Sun FFB1
  - fbdev: of: display_timing: fix refcount leak in of_get_display_timings()
  - fbdev: vt8500lcdfb: fix missing dma_free_coherent()
  - atm: fore200e: fix use-after-free in tasklets during device removal
  - net: intel: fix PCI device ID conflict between i40e and ipw2200
  - io_uring/filetable: clamp alloc_hint to the configured alloc range
  - tracing: Fix to set write permission to per-cpu buffer_size_kb
  - octeontx2-af: CGX: fix bitmap leaks
  - net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()
  - net: ethernet: marvell: skge: remove incorrect conflicting PCI ID
  - LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT
  - LoongArch: Prefer top-down allocation after arch_mem_init()
  - MIPS: rb532: Fix MMIO UART resource registration
  - staging: rtl8723bs: fix null dereference in find_network
  - parisc: kernel: replace kfree() with put_device() in create_tree_node()
  - PCI: Fix pci_slot_trylock() error handling
  - net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path
  - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
  - tipc: fix RCU dereference race in tipc_aead_users_dec()
  - mtd: rawnand: pl353: Fix software ECC support
  - usb: dwc2: fix resume failure if dr_mode is host
  - scsi: ufs: core: Flush exception handling work when RPM level is zero
  - perf/arm-cmn: Reject unsupported hardware configurations
  - remoteproc: imx_rproc: Fix invalid loaded resource table detection
  - btrfs: continue trimming remaining devices on failure
  - arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y
  - ocfs2: fix reflink preserve cleanup issue
  - rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()
  - mm/highmem: fix __kmap_to_page() build error
  - iio: gyro: itg3200: Fix unchecked return value in read_raw
  - dm mpath: make pg_init_delay_msecs settable
  - bus: fsl-mc: fix an error handling in fsl_mc_device_add()
  - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN
  - nvmem: Drop OF node reference on nvmem_add_one_cell() failure
  - nfsd: fix return error code for nfsd_map_name_to_[ug]id
  - PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions
  - xfs: fix remote xattr valuelblk check
  - xfs: fix freemap adjustments when adding xattrs to leaf blocks
  - xfs: delete attr leaf freemap entries when empty
  - mfd: core: Add locking around 'mfd_of_node_list'
  - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode
  - media: verisilicon: AV1: Fix tile info buffer size
  - xfs: mark data structures corrupt on EIO and ENODATA
  - selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs
  - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations
  - drm: of: drm_of_panel_bridge_remove(): fix device_node leak
  - media: venus: vdec: restrict EOS addr quirk to IRIS2 only
  - media: venus: vdec: fix error state assignment for zero bytesused
  - arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro
  - dm-unstripe: fix mapping bug when there are multiple targets in a table
  - dm-integrity: fix recalculation in bitmap mode
  - s390/pci: Handle futile config accesses of disabled devices directly
  - clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc()
  - media: i2c: ov01a10: Fix digital gain range
  - clk: clk-apple-nco: Add "apple,t8103-nco" compatible
  - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
  - soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
  - soc: ti: k3-socinfo: Fix regmap leak on probe failure
  - dm-integrity: fix a typo in the code for write/discard race
  - media: i2c: ov5647: use our own mutex for the ctrl lock
  - media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode
  - media: i2c: ov5647: Sensor should report RAW color space
  - media: i2c: ov5647: Correct minimum VBLANK value
  - media: i2c: ov5647: Correct pixel array offset
  - media: i2c: ov5647: Initialize subdev before controls
  - media: ccs: Avoid possible division by zero
  - media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update()
  - media: i2c: ov01a10: Fix test-pattern disabling
  - media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls
  - media: i2c: ov01a10: Fix analogue gain range
  - media: i2c: ov01a10: Fix reported pixel-rate value
  - media: i2c: ov01a10: Fix the horizontal flip control
  - media: i2c/tw9906: Fix potential memory leak in tw9906_probe()
  - media: i2c/tw9903: Fix potential memory leak in tw9903_probe()
  - media: cx25821: Add missing unmap in snd_cx25821_hw_params()
  - media: cx23885: Add missing unmap in snd_cx23885_hw_params()
  - media: cx88: Add missing unmap in snd_cx88_hw_params()
  - media: radio-keene: fix memory leak in error path
  - media: verisilicon: AV1: Set IDR flag for intra_only frame type
  - arm64: dts: apple: t8112-j473: Keep the HDMI port powered on
  - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()
  - HID: prodikeys: Check presence of pm->input_ep82
  - HID: magicmouse: Do not crash on missing msc->input
  - HID: hid-pl: handle probe errors
  - arm64: Disable branch profiling for all arm64 code
  - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding
  - ARM: omap2: Fix reference count leaks in omap_control_init()
  - media: verisilicon: AV1: Fix tx mode bit setting
  - media: verisilicon: AV1: Fix enable cdef computation
  - media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()
  - media: mtk-mdp: Fix error handling in probe function
  - media: mediatek: encoder: Fix uninitialized scalar variable issue
  - dm-verity: correctly handle dm_bufio_client_create() failure
  - fpga: dfl: use subsys_initcall to allow built-in drivers to be added
  - ASoC: SOF: ipc4-control: Keep the payload size up to date
  - ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data
  - ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls
  - ASoC: SOF: ipc4-control: If there is no data do not send bytes update
  - clk: renesas: rzg2l: Select correct div round macro
  - clk: renesas: rzg2l: Fix intin variable size
  - rpmsg: core: fix race in driver_override_show() and use core helper
  - netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
  - dpaa2-switch: validate num_ifs to prevent out-of-bounds write
  - net/mlx5: Fix missing devlink lock in SRIOV enable error path
  - net/mlx5: DR, Fix circular locking dependency in dump
  - RDMA/umem: Fix double dma_buf_unpin in failure path
  - RDMA/efa: Fix typo in efa_alloc_mr()
  - net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets
  - RDMA/core: Fix stale RoCE GIDs during netdev events at registration
  - tipc: fix duplicate publication key in tipc_service_insert_publ()
  - Remove WARN_ALL_UNSEEDED_RANDOM kernel config option
  - wifi: cfg80211: wext: fix IGTK key ID off-by-one
  - net: ethernet: xscale: Check for PTP support properly
  - net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set()
  - net: usb: lan78xx: scan all MDIO addresses on LAN7801
  - xfrm: always flush state and policy upon NETDEV_UNREGISTER event
  - ipmi: ipmb: initialise event handler read bytes
  - xfrm: skip templates check for packet offload tunnel mode
  - xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
  - ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
  - ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access
  - rtc: zynqmp: correct frequency value
  - drm/amd/display: Remove conditional for shaper 3DLUT power-on
  - btrfs: replace BUG() with error handling in __btrfs_balance()
  - ALSA: usb-audio: Add sanity check for OOB writes at silencing
  - drm/radeon: Add HAINAN clock adjustment
  - drm/amdgpu: Add HAINAN clock adjustment
  - ALSA: usb-audio: Update the number of packets properly at receiving
  - drm/amdgpu: Adjust usleep_range in fence wait
  - drm/amd/display: Avoid updating surface with the same surface under MPO
  - ARM: 9467/1: mm: Don't use %pK through printk
  - include: uapi: netfilter_bridge.h: Cover for musl libc
  - thermal: int340x: Fix sysfs group leak on DLVR registration failure
  - ceph: supply snapshot context in ceph_uninline_data()
  - fs/ntfs3: avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra()
  - fs/ntfs3: drop preallocated clusters for sparse and compressed files
  - fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
  - fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata
  - fs: ntfs3: check return value of indx_find to avoid infinite loop
  - MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE
  - iio: magnetometer: Remove IRQF_ONESHOT
  - iio: Use IRQF_NO_THREAD
  - Revert "mfd: da9052-spi: Change read-mask to write-mask"
  - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature
  - phy: mvebu-cp110-utmi: fix dr_mode property read from dts
  - watchdog: imx7ulp_wdt: handle the nowayout option
  - binder: don't use %pK through printk
  - fix it87_wdt early reboot by reporting running timer
  - serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done
  - staging: rtl8723bs: fix memory leak on failure path
  - misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66
  - misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read()
  - dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings
  - dmaengine: sun6i: Choose appropriate burst length under maxburst
  - fpga: of-fpga-region: Fail if any bridge is missing
  - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs
  - serial: 8250_dw: handle clock enable errors in runtime_resume
  - staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure
  - soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15)
  - m68k: nommu: fix memmove() with differently aligned src and dest for 68000
  - clk: microchip: core: correct return value on *_get_parent()
  - mailbox: sprd: clear delivery flag before handling TX done
  - remoteproc: mediatek: Break lock dependency to `prepare_lock`
  - mailbox: sprd: mask interrupts that are not handled
  - mailbox: imx: Skip the suspend flag for i.MX7ULP
  - mailbox: pcc: Remove spurious IRQF_ONESHOT usage
  - remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX channel is uninitialized
  - tracing: Fix false sharing in hwlat get_sample()
  - vhost: fix caching attributes of MMIO regions by setting them explicitly
  - scsi: buslogic: Reduce stack usage
  - ata: libata: avoid long timeouts on hot-unplugged SATA DAS
  - RDMA/rtrs-clt: For conn rejection use actual err number
  - myri10ge: avoid uninitialized variable use
  - PCI: Mark Nvidia GB10 to avoid bus reset
  - PCI: Add ACS quirk for Qualcomm Hamoa & Glymur
  - PCI: Enable ACS after configuring IOMMU for OF platforms
  - PCI: Fix pci_slot_lock () device locking
  - net/rds: Clear reconnect pending bit
  - vmw_vsock: bypass false-positive Wnonnull warning with gcc-16
  - net: usb: sr9700: remove code to drive nonexistent multicast filter
  - wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg()
  - wifi: rtw89: pci: restore LDO setting after device resume
  - octeontx2-af: Workaround SQM/PSE stalls by disabling sticky
  - Bluetooth: btusb: Add device ID for Realtek RTL8761BU
  - Bluetooth: btusb: Add new VID/PID for RTL8852CE
  - Bluetooth: hci_conn: use mod_delayed_work for active mode timeout
  - Bluetooth: hci_conn: Set link_policy on incoming ACL connections
  - ipv4: fib: Annotate access to struct fib_alias.fa_state.
  - wifi: iwlegacy: add missing mutex protection in il3945_store_measurement()
  - wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power()
  - gro: change the BUG_ON() in gro_pull_from_frag0()
  - net/rds: No shortcut out of RDS_CONN_ERROR
  - wifi: iwlwifi: mvm: check the validity of noa_len
  - net: usb: r8152: fix transmit queue timeout
  - openrisc: define arch-specific version of nop()
  - netfilter: xt_tcpmss: check remaining length before reading optlen
  - netfilter: nf_conntrack: Add allow_clash to generic protocol handler
  - ext4: mark group extend fast-commit ineligible
  - ext4: mark group add fast-commit ineligible
  - ipv6: exthdrs: annotate data-race over multiple sysctl
  - ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}()
  - wifi: ath12k: fix preferred hardware mode calculation
  - wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1
  - PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port
  - wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode
  - iommu/amd: move wait_on_sem() out of spinlock
  - iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency
  - dm: remove fake timeout to avoid leak request
  - dm: replace -EEXIST with -EBUSY
  - wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H
  - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode()
  - wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero
  - jfs: nlink overflow in jfs_rename
  - jfs: Add missing set_freezable() for freezable kthread
  - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio
  - modpost: Amend ppc64 save/restfpr symnames for -Os build
  - ASoC: es8328: Add error unwind in resume
  - hwmon: (f71882fg) Add F81968 support
  - hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE
  - ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe()
  - spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end
  - ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio
  - gpio: aspeed-sgpio: Change the macro to support deferred probe
  - ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro
  - HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK
  - HID: multitouch: add eGalaxTouch EXC3188 support
  - media: rkisp1: Fix filter mode register configuration
  - drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release
  - drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts
  - drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback
  - virt: vbox: uapi: Mark inner unions in packed structs as packed
  - hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed
  - drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map()
  - media: v4l2-async: Fix error handling on steps after finding a match
  - media: cx25821: Fix a resource leak in cx25821_dev_setup()
  - media: solo6x10: Check for out of bounds chip_id
  - media: adv7180: fix frame interval in progressive mode
  - media: amphion: Clear last_buffer_dequeued flag for DEC_CMD_START
  - spi: spi-mem: Limit octal DTR constraints to octal DTR situations
  - ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug
  - ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask
  - HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards
  - drm/amdgpu: avoid a warning in timedout job handler
  - drm/amdgpu: add support for HDP IP version 6.1.1
  - media: mediatek: vcodec: Don't try to decode 422/444 VP9
  - media: omap3isp: set initial format
  - media: omap3isp: isppreview: always clamp in preview_try_format()
  - media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes
  - drm/v3d: Set DMA segment size to avoid debug warnings
  - spi: stm32: fix Overrun issue at < 8bpw
  - media: dvb-core: dmxdevfilter must always flush bufs
  - spi-geni-qcom: use xfer->bits_per_word for can_dma()
  - spi-geni-qcom: initialize mode related registers to 0
  - drm/display/dp_mst: Add protection against 0 vcpi
  - parisc: Prevent interrupts during reboot
  - arm64: tegra: smaug: Add usb-role-switch support
  - char: tpm: cr50: Remove IRQF_ONESHOT
  - mailbox: bcm-ferxrm-mailbox: Use default primary handler
  - PCI/MSI: Unmap MSI-X region on error
  - clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF
  - clocksource/drivers/sh_tmu: Always leave device running after probe
  - bpf: verifier improvement in 32bit shift sign extension pattern
  - sparc: don't reference obsolete termio struct for TC* constants
  - sparc: Synchronize user stack on fork and clone
  - blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs()
  - xenbus: Use .freeze/.thaw to handle xenbus devices
  - perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD
  - s390/perf: Disable register readout on sampling events
  - cpufreq: dt-platdev: Block the driver from probing on more QC platforms
  - md-cluster: fix NULL pointer dereference in process_metadata_update
  - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP
  - EFI/CPER: don't go past the ARM processor CPER record buffer
  - x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set
  - rnbd-srv: Zero the rsp buffer before using it
  - perf/arm-cmn: Support CMN-600AE
  - s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS
  - tools/power cpupower: Reset errno before strtoull()
  - smb: client: add proper locking around ses->iface_last_update
  - btrfs: handle user interrupt properly in btrfs_trim_fs()
  - minix: Add required sanity checking to minix_check_superblock()
  - i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr()
  - hfsplus: pretend special inodes as regular files
  - audit: add missing syscalls to read class
  - fs/buffer: add alert in try_to_free_buffers() for folios without buffers
  - hfsplus: fix volume corruption issue for generic/498
  - libperf build: Always place libperf includes first
  - libperf: Don't remove -g when EXTRA_CFLAGS are used
  - libsubcmd: Fix null intersection case in exclude_cmds()
  - perf callchain: Fix srcline printing with inlines
  - perf unwind-libdw: Fix invalid reference counts
  - ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names
  - ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names
  - ASoC: dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false
  - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path
  - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths
  - ata: libata-scsi: refactor ata_scsi_translate()
  - ata: pata_ftide010: Fix some DMA timings
  - ext4: use optimized mballoc scanning regardless of inode format
  - ext4: don't cache extent during splitting extent
  - MIPS: Work around LLVM bug when gp is used as global register variable
  - drm/amd/display: Use same max plane scaling limits for all 64 bpp formats
  - ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk
  - x86/hyperv: Fix error pointer dereference
  - btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found
  - efi: Fix reservation of unaccepted memory table
  - s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n
  - spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe()
  - spi: wpcm-fiu: Simplify with dev_err_probe()
  - spi: wpcm-fiu: Fix uninitialized res
  - spi: wpcm-fiu: Use devm_platform_ioremap_resource_byname()
  - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2
  - drm/amdkfd: fix debug watchpoints for logical devices
  - ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init
  - drm/i915/acpi: free _DSM package when no connectors
  - drm/amdgpu: Fix memory leak in amdgpu_ras_init()
  - apparmor: fix invalid deref of rawdata when export_binary is unset
  - apparmor: provide separate audit messages for file and policy checks
  - apparmor: use passed in gfp flags in aa_alloc_null()
  - apparmor: fix rlimit for posix cpu timers
  - apparmor: return -ENOMEM in unpack_perms_table upon alloc failure
  - apparmor: fix NULL sock in aa_sock_file_perm
  - net/mlx5: Fix multiport device check over light SFs
  - bonding: alb: fix UAF in rlb_arp_recv during bond up/down
  - octeontx2-af: Fix default entries mcam entry action
  - cache: add __cacheline_group_{begin, end}_aligned() (+ couple more)
  - cache: enforce cache groups
  - ping: annotate data-races in ping_lookup()
  - bpftool: Fix truncated netlink dumps
  - ipv6: fix a race in ip6_sock_set_v6only()
  - net: remove WARN_ON_ONCE when accessing forward path array
  - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value
  - selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure with br_netfilter enabled
  - selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled
  - net: bridge: mcast: always update mdb_n_entries for vlan contexts
  - net/rds: rds_sendmsg should not discard payload_len
  - net: usb: catc: enable basic endpoint checking
  - net: sparx5/lan969x: fix PTP clock max_adj value
  - net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj()
  - net: mscc: ocelot: split xmit into FDMA and register injection paths
  - net: mscc: ocelot: extract ocelot_xmit_timestamp() helper
  - net: sparx5/lan969x: fix DWRR cost max to match hardware register width
  - selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2
  - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO
  - selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT
  - selftests/memfd: delete unused declarations
  - kbuild: Add objtool to top-level clean target
  - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check
  - ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs
  - fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
  - fs/ntfs3: prevent infinite loops caused by the next valid being the same
  - io_uring/cancel: de-unionize file and user_data in struct io_cancel_data
  - dmaengine: fsl-edma: don't explicitly disable clocks in .remove()
  - dmaengine: fsl-edma-main: Convert to platform remove callback returning void
  - backlight: qcom-wled: Change PM8950 WLED configurations
  - backlight: qcom-wled: Support ovp values for PMI8994
  - leds: qcom-lpg: Check the return value of regmap_bulk_write()
  - pinctrl: single: fix refcount leak in pcs_add_gpio_func()
  - pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition
  - iio: sca3000: Fix a resource leak in sca3000_probe()
  - ovl: Fix uninit-value in ovl_fill_real
  - pinctrl: equilibrium: Fix device node reference leak in pinbank_init()
  - usb: bdc: fix sleep during atomic
  - drivers: iio: mpu3050: use dev_err_probe for regulator request
  - mfd: simple-mfd-i2c: Add Delta TN48M CPLD support
  - mfd: simple-mfd-i2c: Keep compatible strings in alphabetical order
  - mfd: simple-mfd-i2c: Add SpacemiT P1 support
  - mfd: simple-mfd-i2c: Add compatible strings for Layerscape QIXIS FPGA
  - mfd: simple-mfd-i2c: Add MAX77705 support
  - mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure
  - Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms"
  - coresight: etm3x: Fix cpulocked warning on cpuhp
  - watchdog: starfive-wdt: Fix PM reference leak in probe error path
  - iio: pressure: mprls0025pa: fix scan_type struct
  - mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms
  - serial: SH_SCI: improve "DMA support" prompt
  - serial: imx: change SERIAL_IMX_CONSOLE to bool
  - staging: greybus: lights: avoid NULL deref
  - dma: dma-axi-dmac: fix SW cyclic transfers
  - dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX
  - clk: mediatek: Fix error handling in runtime PM setup
  - clk: qcom: gfx3d: add parent to parent request map
  - clk: qcom: dispcc-sdm845: Enable parents for pixel clocks
  - clk: Move clk_{save,restore}_context() to COMMON_CLK section
  - clk: qcom: gcc-ipq5018: flag sleep clock as critical
  - clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc
  - clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc
  - clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use shared_floor_ops
  - clk: qcom: gcc-sdx75: Update the SDCC RCGs to use shared_floor_ops
  - clk: qcom: gcc-sm8450: Update the SDCC RCGs to use shared_floor_ops
  - clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs
  - clk: qcom: rcg2: compute 2d using duty fraction directly
  - clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs
  - fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe()
  - fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings()
  - tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros
  - tracing: Properly process error handling in event_hist_trigger_parse()
  - fs/nfs: Fix readdir slow-start regression
  - nvdimm: virtio_pmem: serialize flush requests
  - scsi: csiostor: Fix dereference of null pointer rn
  - scsi: smartpqi: Fix memory leak in pqi_report_phys_luns()
  - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN
  - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc
  - power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer
  - mtd: spinand: Fix kernel doc
  - mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions()
  - cxl: Fix premature commit_end increment on decoder commit failure
  - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing
  - svcrdma: Reduce the number of rdma_rw contexts per-QP
  - svcrdma: Increase the per-transport rw_ctx count
  - svcrdma: Clean up comment in svc_rdma_accept()
  - svcrdma: Remove queue-shortening warnings
  - RDMA/core: Fix a couple of obvious typos in comments
  - RDMA/rxe: Fix race condition in QP timer handlers
  - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send
  - mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse()
  - crypto: ccp - Add an S4 restore flow
  - mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper
  - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus()
  - RDMA/rxe: Fix double free in rxe_srq_from_init
  - RDMA/rtrs-srv: fix SG mapping
  - power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed()
  - power: supply: bq27xxx: fix wrong errno when bus ops are unsupported
  - power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write
  - power: supply: sbs-battery: Fix use-after-free in power_supply_changed()
  - power: supply: rt9455: Fix use-after-free in power_supply_changed()
  - power: supply: goldfish: Fix use-after-free in power_supply_changed()
  - power: supply: cpcap-battery: Fix use-after-free in power_supply_changed()
  - power: supply: bq25980: Fix use-after-free in power_supply_changed()
  - power: supply: bq256xx: Fix use-after-free in power_supply_changed()
  - power: supply: act8945a: Fix use-after-free in power_supply_changed()
  - power: supply: ab8500: Fix use-after-free in power_supply_changed()
  - IB/cache: update gid cache on client reregister event
  - RDMA/rtrs: server: remove dead code
  - octeontx2-pf: Unregister devlink on probe failure
  - ionic: Rate limit unknown xcvr type messages
  - serial: caif: fix use-after-free in caif_serial ldisc_close()
  - net: Add skb_dstref_steal and skb_dstref_restore
  - net: sunhme: Fix sbus regression
  - net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
  - smb: client: correct value for smbd_max_fragmented_recv_size
  - PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404]
  - netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets
  - netfilter: nft_counter: fix reset of counters on 32bit archs
  - netfilter: nft_set_hash: fix get operation on big endian
  - nfc: hci: shdlc: Stop timers and work before freeing context
  - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP
  - bonding: only set speed/duplex to unknown, if getting speed failed
  - octeontx2-af: Fix PF driver crash with kexec kernel booting
  - mptcp: fix receive space timestamp initialization
  - of: unittest: fix possible null-pointer dereferences in of_unittest_property_copy()
  - ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit()
  - ipc: don't audit capability check in ipc_permissions()
  - PCI/ACPI: Restrict program_hpx_type2() to AER bits
  - PCI: Add defines for bridge window indexing
  - PCI: Add PCIE_MSG_CODE_ASSERT_INTx message macros
  - PCI: Log bridge info when first enumerating bridge
  - PCI: Log bridge windows conditionally
  - PCI: Supply bridge device, not secondary bus, to read window details
  - PCI: Move pci_read_bridge_windows() below individual window accessors
  - PCI: Initialize RCB from pci_configure_device()
  - wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump()
  - tcp: tcp_tx_timestamp() must look at the rtx queue
  - nfsd: never defer requests during idmap lookup
  - iommu/vt-d: Flush cache for PASID table before using it
  - PCI: Mark 3ware-9650SA Root Port Extended Tags as broken
  - kallsyms/ftrace: set module buildid in ftrace_mod_address_lookup()
  - module: add helper function for reading module_buildid()
  - netfilter: nft_compat: add more restrictions on netlink attributes
  - netfilter: nf_conncount: increase the connection clean up limit to 64
  - netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH
  - netfilter: nf_tables: reset table validation state on abort
  - wifi: cfg80211: stop NAN and P2P in cfg80211_leave
  - mctp i2c: initialise event handler read bytes
  - net: mctp-i2c: fix duplicate reception of old data
  - PCI/portdrv: Fix potential resource leak
  - PCI: Do not attempt to set ExtTag for VFs
  - Documentation: tracing: Add PCI tracepoint documentation
  - Documentation: trace: Refactor toctree
  - docs: fix WARNING document not included in any toctree
  - Documentation: tracing: Add ring-buffer mapping
  - PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails
  - PCI/PM: Avoid redundant delays on D3hot->D3cold
  - Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors
  - PCI: mediatek: Fix IRQ domain leak when MSI allocation fails
  - spi: tools: Add include folder to .gitignore
  - platform/chrome: cros_ec_lightbar: Fix response size initialization
  - media: uvcvideo: Fix allocation for small frame sizes
  - platform/chrome: cros_typec_switch: Don't touch struct fwnode_handle::dev
  - drm/msm/a2xx: fix pixel shader start on A225
  - media: ccs: Accommodate C-PHY into the calculation
  - drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x
  - HID: playstation: Add missing check for input_ff_create_memless
  - regulator: core: move supply check earlier in set_machine_constraints()
  - drm/msm/disp/dpu: add merge3d support for sc7280
  - drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init
  - smack: /smack/doi: accept previously used values
  - smack: /smack/doi must be > 0
  - workqueue: Process rescuer work items one-by-one using a cursor
  - workqueue: Only assign rescuer work when really needed
  - workqueue: Factor out assign_rescuer_work()
  - arm64: dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions
  - arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1
  - arm64: dts: qcom: sdm845-db845c: drop CS from SPIO0
  - arm64: dts: amlogic: g12: assign the MMC A signal clock
  - arm64: dts: amlogic: g12: assign the MMC B and C signal clocks
  - arm64: dts: amlogic: gx: assign the MMC signal clocks
  - arm64: dts: amlogic: axg: assign the MMC signal clocks
  - arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node
  - ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells
  - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling
  - soc: mediatek: svs: Fix memory leak in svs_enable_debug_write()
  - soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe
  - powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user()
  - ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property
  - arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on
  - arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on
  - arm64: dts: qcom: sdm630: fix gpu_speed_bin size
  - clk: qcom: Return correct error code in qcom_cc_probe_by_index()
  - arm64: dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control settings
  - EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size()
  - EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size()
  - soc: qcom: smem: handle ENOMEM error during probe
  - mfd: wm8350-core: Use IRQF_ONESHOT
  - EDAC/altera: Remove IRQF_ONESHOT
  - scsi: efct: Use IRQF_ONESHOT and default primary handler
  - hrtimer: Fix trace oddity
  - crypto: octeontx - fix dma_free_coherent() size
  - crypto: cavium - fix dma_free_coherent() size
  - ARM: VDSO: Patch out __vdso_clock_getres() if unavailable
  - libbpf: Fix OOB read in btf_dump_get_bitfield_value
  - selftests/bpf: veristat: fix printing order in output_stats()
  - crypto: qat - fix warning on adf_pfvf_pf_proto.c
  - s390/cio: Fix device lifecycle handling in css_alloc_subchannel()
  - PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races
  - perf: arm_spe: Properly set hw.state on failures
  - PM: wakeup: Handle empty list in wakeup_sources_walk_start()
  - Partial revert "x86/xen: fix balloon target initialization for PVH dom0"
  - x86/xen: make some functions static
  - ublk: Validate SQE128 flag before accessing the cmd
  - iomap: fix submission side handling of completion side errors
  - md/raid10: fix any_working flag handling in raid10_sync_request
  - cpuidle: governors: menu: Always check timers with tick stopped
  - cpuidle: menu: Cleanup after loadavg removal
  - io_uring/sync: validate passed in offset
  - xen/virtio: Don't use grant-dma-ops when running as Dom0
  - btrfs: fix block_group_tree dirty_list corruption
  - btrfs: qgroup: return correct error when deleting qgroup relation item
  - tpm: st33zp24: Fix missing cleanup on get_burstcount() error
  - tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure
  - i3c: dw: Initialize spinlock to avoid upsetting lockdep
  - gfs2: Retries missing in gfs2_{rename,exchange}
  - i3c: master: Update hot-join flag only on success
  - fs: add <linux/init_task.h> for 'init_fs'
  - audit: move the compat_xxx_class[] extern declarations to audit_arch.h
  - rcu: Fix rcu_read_unlock() deadloop due to softirq
  - rcu: Remove local_irq_save/restore() in rcu_preempt_deferred_qs_handler()
  - rcu: Refactor expedited handling check in rcu_read_unlock_special()
  - rcu/exp: Move expedited kthread worker creation functions above rcutree_prepare_cpu()
  - rcu: s/boost_kthread_mutex/kthread_mutex
  - hfsplus: return error when node already exists in hfs_bnode_create
  - auxdisplay: arm-charlcd: fix release_mem_region() size
  - RDMA/siw: Fix potential NULL pointer dereference in header processing
  - !23322 iommu/ummu: Fix potential soft lockup in ummu_core_alloc_separate_tdev
  - bpf: Avoid soft lockup in bpf_uprobe_unregister
  - !23394 Fix CVE-2026-45911
  - !23321 iommu/ummu: Fix reading command value in check_pa_continuity_nop_exec
  - !23388 Fix CVE-2026-45982
  - usb: cdns3: fix role switching during resume
  - urma: add v2p function in kernel for dfx such as urma_admin
  - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch()
  - !23392 Fix CVE-2026-46171
  - !23176 Fix CVE-2026-46082
  - !23277  KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1
  - !23376 ub: ub_fwctl: lift the restriction on querying the historical status of ports.
  - !22637 v3  io_uring: validate user-controlled cq.head in io_cqe_cache_refill()
  - !22644 Fix CVE-2026-43366
  - !23349  drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc()
  - !22645 Fix CVE-2026-43288
  - !23348  drm/nouveau: fix u32 overflow in pushbuf reloc bounds check
  - !22714 Fix CVE-2026-43163
  - !22610 Fix CVE-2026-43061
  - !23361  CVE-2026-46181
  - !23177 ub:hisi-ubus: modify return value of hi_feature_get() in abnormal branch
  - !23317  add min_slice and sched_runtime
  - !23373 drivers/ub/sentry: enhance sentry module error handling and logging observability
  - !23309 ub: ubase: Correct the statistics on ELR reset failures
  - urma: increase topo max node limit to 1024
  - ub: ub_fwctl: the function of querying the historical status of ports has been unrestricted.
  - drivers/ub/sentry: enhance sentry module error handling and logging observability
  - riscv: kvm: fix vector context allocation leak
  - !23094 urma: fix jetty_grp count boundary check and pass opt_mask to urma_check_opt_valid
  - !23288 Fix CVE-2026-46093
  - !23294 Fix CVE-2026-43406
  - ub:hisi-ubus: modify return value of hi_feature_get() in abnormal branch
  - urma: fix jetty_grp count boundary check and pass opt_mask to check_jetty_check_dev_cap
  - APEI/GHES: ARM processor Error: don't go past allocated memory
  - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
  - refcount: provide ops for cases when object's memory can be reused
  - !23316  sched/cputime: Fix time overflow in cputime_adjust()
  - !23346 ub: udma: change default value of set dev name
  - !23341 soc: hisilicon: kunpeng_hccs: Remove unused input parameter
  - !23330 Fix CVE-2026-46165
  - !23326 Fix CVE-2026-43466
  - !23328 Fix CVE-2026-46033
  - !23325 Fix CVE-2026-43468
  - mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node
  - iommu/ummu: Fix reading command value in check_pa_continuity_nop_exec
  - !23125 Fix CVE-2026-46051
  - drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc()
  - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check
  - !23188  CVE-2026-46044
  - ub: udma: change default value of set dev name
  - soc: hisilicon: kunpeng_hccs: Remove unused input parameter
  - soc: hisilicon: kunpeng_hccs: Fix discard 'const' qualifier
  - !23028 bugfixs for sched_ext
  - !22886  net: yt6801: fix link info for yt6801
  - !23290  iommu/amd: serialize sequence allocation under concurrent TLB invalidations
  - openvswitch: vport: fix self-deadlock on release of tunnel ports
  - crypto: authencesn - reject short ahash digests during instance creation
  - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
  - net/mlx5: Fix deadlock between devlink lock and esw->wq
  - iommu/ummu: Fix potential soft lockup in ummu_core_alloc_separate_tdev
  - iommu/ummu: Fix incorrect xarray index in map_pages error path
  - sched/eevdf: Force propagating min_slice of cfs_rq when {en,de}queue tasks
  - sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash
  - sched: Fix kabi breakage in struct sched_entity
  - sched/eevdf: Propagate min_slice up the cgroup hierarchy
  - sched/fair: Re-organize dequeue_task_fair()
  - sched/eevdf: Use sched_attr::sched_runtime to set request/slice suggestion
  - sched/cputime: Fix time overflow in cputime_adjust()
  - libceph: prevent potential out-of-bounds reads in process_message_header()
  - iommu/amd: serialize sequence allocation under concurrent TLB invalidations
  - mm/vmalloc: take vmap_purge_lock in shrinker
  - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1
  - obmm: validate VMA identity via vm_ops before accessing vm_file
  - obmm: add PMD huge entry support for ptrace/GDB vma access
  - obmm: fix VMA access for ptrace/GDB on export regions
  - obmm: fix page table walk for ownership permission updates
  - obmm: reject MAP_PRIVATE
  - md/raid5: fix soft lockup in retry_aligned_read()
  - ipmi:ssif: NULL thread on error
  - ipmi:ssif: Clean up kthread on errors
  - ﻿ub: ubase: Correct the statistics on ELR reset failures
  - ﻿ub: ubase&unic: Improve driver code readability
  - ﻿ub: ubase: Discard ctrlq request with non-zero ret value
  - ﻿ub: ubase: Add abort handling for non-timeout ELR failures
  - ﻿net: unic: Log rectification for the wildfire project
  - ﻿ub: ubase/unic/cdma: Clear adev_status when probe succeeds
  - ﻿net: unic: Filter out IPv6 link-local address in bond IP notification
  - KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0
  - sched/ext: Avoid null ptr traversal when ->put_prev_task() is called with NULL next
  - sched_ext: fix flag check for deferred callbacks
  - sched_ext: defer queue_balance_callback() until after ops.dispatch
  - sched_ext: Keep bypass on between enable failure and scx_disable_workfn()
  - urma: fix RNR ERR under CTP mode in IPoURMA
  - net: yt6801: fix link info for yt6801
  - md/bitmap: fix GPF in write_page caused by resize race
  - ext4: move ext4_percpu_param_init() before ext4_mb_init()
  - io_uring/kbuf: check if target buffer list is still legacy on recycle
  - io_uring: validate user-controlled cq.head in io_cqe_cache_refill()
  - serial: 8250: Fix TX deadlock when using DMA


author: Funda Wang <fundawang@yeah.net> - 30-63
changelog:
  - do not generate index file at all
  - add requirement on gen_digest_lists for /usr/lib/rpm/brp-digest-list
  - add shell completion macros


author: Funda Wang <fundawang@yeah.net> - 30-64
changelog:
  - enhance perl related macros
    * remove useless perl .packlist, empty .bs files and wrongly updated perllocal.pod
    * add helper macro for cpan projects
    * move perl relative macros into macros.perl


author: Funda Wang <fundawang@yeah.net> - 2.0.26-20
changelog:
  - sync all branches
  - update makedumpfile to 1.7.9
  - reorder arch-dependent patches
  - cherry picked MR:
    * https://atomgit.com/src-openeuler/kexec-tools/pull/121
    * https://atomgit.com/src-openeuler/kexec-tools/pull/148
    * https://atomgit.com/src-openeuler/kexec-tools/pull/150
    * https://atomgit.com/src-openeuler/kexec-tools/pull/163


author: Liu Chao <liuchao173@huawei.com> - 30-7
changelog:
  - disable make test because cannot find /lib/modules/`uname -r`/build
  - add extramodules to depmod search path


author: Build System <tangzhengliang1@huawei.com> - 1.0.0-1
changelog:
  - Initial package build
  - Provide libknet_core.so, libknet_frame.so, libdpstack.so
  - Include knet_mp_daemon binary
  - Add configuration files for knet communication, rsyslog, and logrotate


author: Build System <tangzhengliang1@huawei.com> - 1.0.0-2
changelog:
  - resolve cjson, dpdk, libboundscheck dependency automatically.
  - and based on tag knet-26.0.rc1-0331 adapting dpdk23


author: Build System <tangzhengliang1@huawei.com> - 1.0.0-3
changelog:
  - [fix] newest os output syslog without ident of openlog parameter, prefix libknet to solve it
  - and based on "more accurate prefix to match" commit of openEuler/knet


author: jinsaihang <jinsaihang@h-partners.com> - 1:0.9.9-13
changelog:
  - Type:bugfix
  - CVE:NA  
  - SUG:NA  
  - DESC:check whether the directory is a user source code directory


author: fuanan <fuanan3@h-partners.com> - 1:0.9.9-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patch
         backport-lookup-fix-local-bind-check.patch


author: qujingling <qujingling@huawei.com> - 1:0.9.9-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove __find_parent_obj_in_dir_for_oot and support link in changed_obj


author: Linux_zhang <244695981@qq.com> - 2:1.0.8-2
changelog:
  - fix CHILD_MAX at build time to prevent BEP discrepancies caused by varying CHILD_MAX values across repeated builds


author: wangli <3214053332@qq.com> - 1.1.0-1
changelog:
  -   add some test files
  -   prepare corresponding script for ras\rac\rahub to deploy config file respectively
  -   update part of file paths
  -   update to 1.1.0


author: gwei3 <11015100@qq.com> - 1.1.2-1
changelog:
  -   update to 1.1.2
  -   add slice length checks to avoid buffer overflow while extracting and verifying
  -   update integration test data to meet restapi parameter check requirement
  -   modify raagent/main.go file, change log to logger, os.Exit returns different values based on diff errors
  -   close RAS restapi server in signal handler
  -   Add parameter format checking for pcr/bios/ima in POST {id}/newbasevalue API
  -   Fix bugs in v1.1.1
      bug 1: hostintegritytool.sh can only add the 2nd part of ima policy into /etc/ima/ima-policy.
      bug 2: running hostintegritytool.sh multiple times will add duplicated linux cmdlines in /etc/default/grub.
      bug 3: rahub config path was assigned wrong values, which is caused by copy/paste
  -   fix the issue that Makefile not sync vendor
  -   modify readme file


author: gwei3 <11015100@qq.com> - 1.1.2-2
changelog:
  -   update BuildRequires & Requires to replace openssl* with compat-openssl11* to adapt to latest Mainline
  -   remove redundent clean label in spec file


author: leezhenxiang <1172294056@qq.com> - 2.0.0-1
changelog:
  -   update to 2.0.0
  -   add qcaserver, attester, and tas packages
  -   add BuildRequires itrustee_sdk-devel, cjson-devel and Requires itrustee_sdk, cjson
  -   modify makefile to adapt to different architectures
  -   specify the build requires in rac and attester package


author: zouzhimin <zouzhimin@kylinos.cn> - 4.13.0-13
changelog:
  - nfsserver: fix "server scope" functionality for both potentially other dropins AND multiple ExecStart


author: zouzhimin <zouzhimin@kylinos.cn> - 4.15.1-1
changelog:
  - update to 4.15.1
  - IPaddr2: dont fail with "IPv4 does not support lvs_ipv6_addrlabel"
    error, as the parameter is not used in IPv4 scenarioes


author: xuxuepeng <xuxuepeng1@huawei.com> - 0.0.1-8
changelog:
  - Type:Enhancement
  - ID:NA
  - SUG:NA
  - DESC: Simplify Store api, remove unnecessary validation
          Check if a path is abstract before connection
          Add vsock support.


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 0.0.1-12
changelog:
  - Type:Fix
  - ID:NA
  - SUG:NA
  - DESC:just use vendor on loongarch64
         add loongarch64 support for nix


author: wujie <wujie@nj.iscas.ac.cn> - 1.0.13-3
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=24988
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: liliguang <liliguang@baidu.com> - 2.9-1
changelog:
  - update to 2.9
  - dwarf-reader: Avoid adding declarations-only global vars to IR
  - libxml-utils: Pass paramater to xml_char_sptr_to_string by reference
  - ctf-reader: Fix memory leak in lookup_symbol_in_ctf_archive


author: Weifeng Su <suweifeng1@huawei.com> - 7.8.2-1
changelog:
  - upgrade to version 7.8.2:
    -Resolve warning in GCC11
    -Fix comparison warning in add_chunk_as
    -Address Clang 16 AO_pt_lock issue
    -Handle Mingw64-GCC _atomic_errors
    -Fix linker errors in OpenBSD build
    -Update get_chunk for mmap placement
    -Correct typos in names/comments
    -Update CMake version to 3.5


author: cenhuilin <cenhuilin@kylinos.cn> - 2.39.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:lsblk: fix memory leak [coverity scan]
         lsblk: fix possible use-after-free


author: yixiangzhike <yixiangzhike007@163.com> - 2.39.1-31
changelog:
  - backport community patches
      fix columns reduction
      fix memory leak issue in read_Subid_range
      fix off-by-one in maximum last sector calculation
      fix memory corruption in size calculation
      fix memory corruption in read buffers


author: wangzhiqiang <swangzhiqiang95@huawei.com> - 3.0.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add BDPluginSpec constructor and use it in plugin_specs_from_names


author: tianmuyang <tianmuyang@huawei.com> 2:1.2.2-11
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: yezengruan <yezengruan@huawei.com> 1.0.0-12
changelog:
  - kpatch_process: fix possible double free.
  - ptrace: fix NULL pointer access problem
  - fix patched process crashing when acccess the global var
  - fix probably restore cc symbol link fail when kill patch building uncourteous
  - optimize: Remove unnecessary comparison code


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-correct-realpath-test-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-fix-Werror-format-security.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Zhipeng Lu <luzhipeng8@h-partners.com> - 1.0-1
changelog:
  - Support resource creation and destruction in CDMA
    user mode, enabling read and write semantic functions
    for CDMA user mode.


author: Zhipeng Lu <luzhipeng8@h-partners.com> - 1.0.1-0
changelog:
  - add version and fix some format and add doc to devel package
  - change the compile command and the usage of so


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.21.0.27-1
changelog:
  - Update package to version 3.21.0.27
    Added libdap::Array::rename_dim() for HK-247
    Added new Direct I/O support so that modules written using libdap can pass compressed data buffers
    Fix handling of libtirpc pkg-config files with -L flags
    Moved the functionality of is_dap4_projected() into libdap4
    Added support for 64-bit sized arrays


author: laokz <zhangkai@iscas.ac.cn> - 3.21.0.27-2
changelog:
  - let BuildRequire valgrind depend on system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 0.70.2-7
changelog:
  - apply 2 patches: backport-Mark-all-protected-packages-as-user-installed-for-.patch, backport-fix--compare-RPMItem-in-transaction-with-rpmvercmp.patch


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: doupengda <doupengda@loongson.cn> 1.0.1-7
changelog:
  - update config.guess and config.sub
  - fix SOURCE1 file autoconf.h '__loongarch64__' to '__loongarch64'


author: yuanchao <1050706328@qq.com> - 2.1.12-13
changelog:
  - Fix function undeclared,incompatible pointer and parameter lack in 'add-testcases-for-event.c-apis.patch',support clang build


author: andy <liuyang01@kylinos.cn> - 2.1.12-14
changelog:
  - Fix leak in evbuffer_add_file() on empty files
  - evthread: fix NULL dereference in evthread_setup_global_lock_()
  - Fix potential null dereference in http-server


author: shixuantong <shixuantong1@h-partners.com> - 2.1.12-15
changelog:
  - fix: arc4_getword integer overflow, detected by -fsanitize=undefined
  - Fix divide-by-zero in ev_token_bucket_get_tick_
  - fixed missing check for null after strdup in evutil_inet_pton_scope
  - Fix integer-overflow in ev_token_bucket_cfg_new
  - Fix integer overflow in HTTP version
  - Fix potential Null pointer dereference in bufferevent_openssl.c
  - Fix potential Null pointer dereference in dns-example.c
  - Fix potential Null pointer dereference in event-read-fifo.c
  - Fix unlikely (for libevent) UB in HT_GROW()


author: Funda Wang <fundawang@yeah.net> - 2.1.12-16
changelog:
  - Don't use deprecated functions when building against OpenSSL 3.0
  - fix linkage of shared libraries


author: yanglongkang <yanglongkang@h-partners.com> - 3.4.4-5
changelog:
  - Fix x86/ffi64 calls with 6 gp and some sse registers
    Robustify floating point comparison in test
    Fix floating point compare


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.6.4-22
changelog:
  - Remove /usr/lib64/libglade-2.0.so.* from libglade2-devel package which already exists in libglade2 package.


author: Yang Yanchao <yangyanchao6@huawei.com> - 0.1-3
changelog:
  - Check the return ptr of the malloc[#I7YV2X]
    add hnid in gmemPrefetch [#I7XQMW]
    free userData in stream to avoid async operations accessing illeagal address[#I7Z2RF]


author: wangkai <13474090681@163.com> - 2.5.31-3
changelog:
  - Fix CVE-2026-40334, CVE-2026-40334, CVE-2026-40338, CVE-2026-40339,
    CVE-2026-40340, CVE-2026-40341


author: Kai Liu <kai.liu@windriver.com> - 1:1.49.5-5
changelog:
  - Replace patch support_OPENEULER_to_configure.patch by backport-support-openEuler.patch
    which is backported from upstream, fix issue of detecting openEuler.
  - Add provide-openEuler-appliance-package-list.patch after correctly detected openEuler.
    It was using REDHAT list before.


author: yanglu <yanglu72@h-partners.com> - 3.0.17-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:avoid crashing in icalcomponent_normalize
         fix a memleak in icalcomponent_normalize


author: Xu Raoqing <609179072@qq.com> - 2.9.4-19
changelog:
  - oidc_child: fix wrong usage of printf format (a2bd434)
  - ad: use right memory context in GPO code (723a30b)
  - Responder: fix passkey auth when user-verification is off (4c6c010)
  - KRB5: fix mem leak in authenticate_stored_users (8b452b3)
  - KCM: fix use-after-free in kcm_read_options (50ae35f)
  - NSS: Fix wrong condition invalidating an optimization (6d71291)


author: Funda Wang <fundawang@yeah.net> - 1.5.8-2
changelog:
  - backport upstream patches
    * Bug fix: iso_image_set_ignore_aclea() inverted the setting
      for reading the XFS-style project id from disk files
    * Silenced error messages about ioctl(FS_IOC_FSGETXATTR)


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:refix the failure of building with cppcheck>=2.11 by using upstream patch


author: echo <2220386943@qq.com> - 1.2-2
changelog:
  - update version to 1.2-2
  - support new create thread
  - description of supplementary documents
  - support event grouping
  - add the mangleName in symbol.h


author: yixiangzhike <yixiangzhike007@163.com> - 1.6.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix possible uninitialized variable


author: xinghe <xinghe2@h-partners.com> - 8.17.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:extending the certificate validate period
         remove redundant patches


author: shechenglong <shechenglong@xfusion.com> - 25.0.3-46
changelog:
  - libcontainerd: change the digest used when restoring
  - backport builder/dockerfile: ADD with best-effort xattrs
  - man/docker-build.1: typo in parameter variable: CID => IID
  - Restore INC iptables rules on firewalld reload
  - fix TestPassthrough
  - fix issue where node promotion could fail
  - libnetwork/drivers/overlay: fix naked returns, output variables
  - libnetwork: fix flaky Swarm service DNS
  - volume/local: use t.TempDir
  - libnetwork/drivers/bridge: fix non-constant format string in call (govet)
  - volume/service: rename interface that collided with vars
  - plugin: fix naked returns, output vars


author: wuguanghao <wuguanghao3@huawei.com> - 5.0.2-1
changelog:
  - upgrade to 5.0.2:
    - fix double free in nfs3_pread_mcb()
    - Multithread support for Linux and Windows
    - fix NFS4 behavior of chmod/chown/utimes
    - Add nfs_umount() to NFSv3
    - Add nfs_statvfs64()
    - NFSv4 fix for directory handling
    - NFSv4 support
    - lockf() support(NFSv4 only)
    - fcntl() support (FNSv4 only)
    - Added nfs-fh: a simple utility to print the filehandle for a nfs file


author: chengyechun <chengyechun1@huawei.com> - 3.7.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent segfault in af_request_type
         fix bridge info parsing


author: Weifeng Su <suweifeng1@huawe.com> - 1.8-1
changelog:
  - Upgrade to version 1.8
    -Support added for Flexible Data Placement(TP4146)
    -Add support for Persistent Discovery Controllers
    -Replaced the libsystemd dependency with libdbus
    -A parser for the NBFT table
    -Ignoring fabric connect attempts if the execution context doesn't match
    -support for TP8018
    -use sysfs only for topology scan
    -auto cleanup for resources
    -buf fixed and clean code


author: xinghe <xinghe2@h-partners.com> - 2:1.6.40-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.5-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to remove redundant inclusion of libintl.h


author: chenyanpanHW <chenyanpan@huawei.com> - 0.9.4-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libquvi-0.9.4-lua-5.2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 1.15.2-3
changelog:
  - backport patches from upstream
      Fix a memory leak of the glib slist
      Add missing end callback for already downloaded zchunk files
      Fix memory leak of repo and repomd
      Fix a crash when the gnupghomedir is NULL or not specified on Python API


author: yuanchao <1050706328@qq.com> - 0.20.5-3
changelog:
  - fix `incompatible function pointer types passing`errors in test-vala-unstable.vala and test-vala-lang.vala


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: nickyang <nickyang228@163.com> - 2.74.3-12
changelog:
  - Type:cves
  - ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
  - SUG:NA
  - DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716


author: nickyang <nickyang228@163.com> - 2.74.3-13
changelog:
  - Type:cves
  - ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
  - SUG:NA
  - DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-5
changelog:
  - Type:CVE
  - Id:CVE-2025-4877 CVE-2025-4878 CVE-2025-5351 CVE-2025-5987 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877CVE-2025-4878CVE-2025-5351CVE-2025-5987CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: yueyuankun<yueyuankun@kylinos.cn> - 1.11.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch to work around strict permissions issues for sshd tests


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.11.0-6
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: laokz <zhangkai@iscas.ac.cn> - 1.9.6-2
changelog:
  - make with_mem_leak_test option following i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.20-20
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.11-missing-protos.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.11-mem-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.20-fix-resource-leaks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.11-bz729009.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.20-no-static-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2013-4420.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openEuler-CVE-2021-33643-CVE-2021-33644.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openEuler-CVE-2021-33645-CVE-2021-33646.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2021-33640-fix-memory-leak-and-use-after-free-bugs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: jiangsihui <jiangsihui@huawei.com> - 1.0.0-1
changelog:
  - Supports permission table management functions, including
    the creation, release, and invalidation of permission tables,
    while also supporting context maintenance for operating
    permission tables.


author: Liming An <anliming1@h-partners.com> - 1.0.0-2
changelog:
  - Remove the x86 support from the source code and specify the
    aarch64 in the spec.
    Change indent.


author: Liming An <anliming1@h-partners.com> - 1.0.1-0
changelog:
  - Add UMMU library doc and readme.
    Delete unused readme files.
    Modify cmake version from cmakelist.
    Modify build add debuginfo


author: Liming An <anliming1@h-partners.com> - 1.0.2-1
changelog:
  - Adjust PLB Refresh Timing in grant
    Fix log level initialization issue.
    Synchronized the changes in the kernel header file ummu_core.h.
    The README file is adapted to the code repository address change.
    Widen userspace lock scope to prevent deadlock with kernfs.


author: Funda Wang <fundawang@yeah.net> - 1.5-2
changelog:
  - add upstream patch supporting tracing for AV1 picture info
  - requires x11 as pkgconfig private, since vdpau_x11.h refers X11/Xlib.h
  - cleanup spec


author: PengruiZhang <zhangpengrui@huawei.com> - 9.10.0-26
changelog:
  - vdpa: Add the count of vdpa devices when calculating Max locked memory
  - virDomainDeviceIsUSB: Handle all USB devices and simplify the code
  - add TengyunS5000C cpu info to cpu map
  - qemu:Implement the RAS feature for aarch64


author: PengruiZhang <zhangpengrui@huawei.com> - 9.10.0-28
changelog:
  - virshFindDisk: fix NULL-dereference of xmlCopyNode() result
  - vir-qemu-sev-validate: Use string() method in xpath
  - network: convert virFileLinkPointsTo to return bool
  - security_util: fix log in virSecurityMoveRememberedLabel
  - Skip the UEFI check for CCA
  - conf: fix integer overflow in virDomainControllerDefParseXML
  - qemu: Replace the deprecated short-formed option "unix"
  - ch_driver: fix condition in virCHDomainRemoveInactive()
  - remote: DeserializeDomainDiskErrors: remove dead code


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-29
changelog:
  - cpu_map: add kunpeng-920-V1 cpu map
  - cpu_map: add kunpeng-920-V2 cpu map
  - cpu_map: add kunpeng-950-V1 cpu map
  - Migration/urma: tune and restore rcu_expedited around URMA migration
  - Migration/urma: enable ONECOPY capability for destination


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-30
changelog:
  - qemu_command: Remove unused iommufd variable in qemuBuildPCIHostdevDevProps
  - qemu_command: Don't open code virPCIDeviceAddressAsString()
  - meson: Stop looking for passt at build time
  - qemu: Move memory device coldplug into a separate function
  - Migration/urma:enable RCU expedited tuning for HCOM Protocol


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-31
changelog:
  - ub: ub device management infrastructure
  - ub: support get ub device list
  - ub: support delete missing ub devs
  - ub: add detailed code for prepare and bind driver code
  - ub: support ub dev bind to stub driver
  - ub: support get guidAddress from devNum
  - ub: more detailed code for bind and unbind driver code
  - ub: detailed code for reattach ub dev process
  - ub: check if hostdev ub is prepared
  - ub: check vfio-ub info when ub hostdev is configed
  - ub: switch fclose(FILE) to VIR_FORCE_FCLOSE(FILE)


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-33
changelog:
  - conf: Fix error message in virNetworkForwardDefParseXML
  - qemu: Fix guest-sync response time in qga command
  - virthreadpool: create threads from the newly expanded workers
  - qemu: Use g_autoptr in qemuProcessInit
  - qemu: Add kvm-vtimer-status support for AArch64 KVM guests


author: Pengrui Zhang <zhangpengrui@huawei.com> - 9.10.0-34
changelog:
  - qemu_driver: Don't handle the EOF event if vm get restarted
  - conf: add the hugepage allocation option
  - qemu: cgroup: Add /dev/ubmempfd to default device ACL


author: liujie-answer <liujie5@linkdatatechnology.com> - 20260410-2
changelog:
  - add linux-firmware-linkdata sub-package
  - This configuration file is from Linkdata, supporting Linkdata Ethernet Controller advanced feature configuration.


author: eastb233 <xiezhiheng@huawei.com> 17.0.6-7
changelog:
  - Type: cherry-pick
  - ID:NA
  - SUG:NA
  - DESC: cherry-pick
  -    Add toolchain_clang build support
  -    Part of adopt to new cmake macro
  -    build with clang


author: eastb233 <xiezhiheng@huawei.com> 17.0.6-8
changelog:
  - Type: Update
  - ID:NA
  - SUG:NA
  - DESC: Update https://gitee.com/openeuler/llvm-project/archive/refs/tags/llvm-for-oE-17.0.6-2509.0.1.tar.gz


author: eastb233 <xiezhiheng@huawei.com> 17.0.6-9
changelog:
  - Update https://gitee.com/openeuler/llvm-project/archive/refs/tags/llvm-for-oE-17.0.6-2509.0.2.tar.gz


author: liyunfei <liyunfei33@huawei.com> - 19.1.7-11
changelog:
  - update to llvm-for-oE-19.1.7-2506.0.2
  - release note: https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-19.1.7-2506.0.2


author: liyunfei <liyunfei33@huawei.com> - 19.1.7-17
changelog:
  - update to llvm-for-oE-19.1.7-2512.0.1
  - release note: https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-19.1.7-2512.0.1


author: liyunfei <liyunfei33@huawei.com> - 19.1.7-19
changelog:
  - update to llvm-for-oE-19.1.7-2512.0.2
  - release note: https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-19.1.7-2512.0.2


author: eastb233 <xiezhiheng@huawei.com> - 20.1.8-8
changelog:
  - update to llvm-for-oE-20.1.8-2606.0.2
  - release note: https://atomgit.com/openeuler/llvm-project/releases/llvm-for-oE-20.1.8-2606.0.2


author: Funda Wang <fundawang@yeah.net> - 4.99.6-1
changelog:
  - update to 4.99.6
  - switch to autotools based build system per suggested by upstream
   - new devel sub package, due to switching to autotools
   - add two security-related build switches from archlinux:
     - only allow root to list all open files
     - allow anyone to list anyone else's socket files


author: liuchao <liuchao173@huawei.com> - 2.13.7-1
changelog:
  - Update to 2.13.7:
    - fix: invoke MKDIR_P before changing directories
    - fix: -Wsingle-bit-bitfield-constant-conversion with clang16
    - fix: clean java inner class files in examples
    - Introduce sync vs unsync enablers
    - Fix: misaligned urcu reader accesses
    - ustfork: Fix warning about volatile qualifier
    - ustfork: Fix possible race conditions
    - Fix: tracepoint: Remove trailing \ at the end of macro
    - fix: python agent: use stdlib distutils when setuptools is installed
    - fix: python agent: install on Debian python >= 3.10
    - fix: python agent: Add a dependency on generated files
    - python: use setuptools with python >= 3.12


author: Dingli Zhang <dingli@iscas.ac.cn> - 0:7.7.0-2
changelog:
  - Update spec for RISCV64 due to OOM compilation error
  - Add Requires of several packages to resolve conflicts during installation


author: jikai<jikai11@huawei.com> - 5.0.2-13
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: unfreeze freezing container and bugfix for files.limit and syscontainer


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 5.0.2-14
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: update meson parameters for disabling LTO when building with clang & ld.bfd


author: yuanchao <1050706328@qq.com> - 5.0.2-16
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix error of cc.compiles in meson.build on aarch cased by '-fstack-clash-protection' and '-Werror'


author: wujichao <wujichao1@huawei.com> - 0.3-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bugfix: Information in cpu directory is overwritten after lxcfs restart


author: Liu Qingtao <liu.qingtao2@zte.com.cn> - 1.9.4-3
changelog:
  - Add patch riscv_zicclsm_lz4_force_mem_access_2.patch to configure LZ4_FORCE_MEMORY_ACCESS=2 for RISC-V with Zicclsm extension


author: chenyanpanHW <chenyanpan@huawei.com> - 12.5-33
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/nail-11.25-config.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.3-pager.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-lzw.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-fname-null.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-collect.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-usage.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-man-page-fixes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-outof-Introduce-expandaddr-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-fio.c-Unconditionally-require-wordexp-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-globname-Invoke-wordexp-with-WRDE_NOCMD-CVE-2004-277.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-unpack-Disable-option-processing-for-email-addresses.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-empty-from.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-nss-hostname-matching.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-encsplit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-openssl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-mailx-12.5-no-SSLv3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/set-mail-defualt-did-not-record-failsend.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yaoxin <1024769339@qq.com> - 2.4.16.6-1
changelog:
  - Update to 2.4.16.6:
    * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
    * info: fix requests to the info hook with extend_session=false
    * cookie: OIDCCookieSameSite default behaviour Lax
    * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
    * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
      cannot be found on the system upon initaliizing cache mutexes and the file cache
    * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
      compatibility with <=2.4.15.7 and to support private/test deployments
    * code: address warnings from static code analysis tool CodeChecker


author: Funda Wang <fundawang@yeah.net> - 102.9.0-9
changelog:
  - set CC and CXX so that clang won't be selected automatically
  - fix compilation errors in sw_64 support


author: yanglu <yanglu72@h-partners.com> - 2:0.95-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Change UDP and ICMP sockets binding to accept a source IP from the -a CLI option


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: yaoxin <yao_xin001@hoperun.com> - 1.2.2-1
changelog:
  - Update to 1.2.2:
    * XML declaration must produce a START_DOCUMENT event.
    * Fix processing of PIs.
    * Unit test with subsequent dashes in a PI.
    * Replace project license Indiana 1.1.1 with explicit license 1.2 of MXParser.


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: wangkai <13474090681@163.com> - 8.0.44-1
changelog:
  - Update to 8.0.44 for fix CVEs (CVE-2025-53069,CVE-2025-53062,CVE-2025-53054,
    CVE-2025-53053,CVE-2025-53045,CVE-2025-53044,CVE-2025-53042,CVE-2025-53040)


author: yaoxin <1024769339@qq.com> - 8.0.45-1
changelog:
  - Update to 8.0.45 for fix CVEs (CVE-2026-21936,CVE-2026-21937,
    CVE-2026-21941,CVE-2026-21948,CVE-2026-21964,CVE-2026-21968)


author: wangkai <13474090681@163.com> - 8.0.46-1
changelog:
  - Update to 8.0.46 for fix CVEs (CVE-2026-21998, CVE-2026-22001, CVE-2026-22002,
    CVE-2026-22004, CVE-2026-22005, CVE-2026-22009, CVE-2026-22015, CVE-2026-22017,
    CVE-2026-34267, CVE-2026-34270, CVE-2026-34271, CVE-2026-34276, CVE-2026-34278,
    CVE-2026-34293, CVE-2026-34303, CVE-2026-34304, CVE-2026-34308, CVE-2026-35236,
    CVE-2026-35237, CVE-2026-35238, CVE-2026-35239, CVE-2026-35240)


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.2.8-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0000-netcf-call-aug_load-at-most-once-per-second.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-netcf-optimize-aug_match-query-for-all-ifcfg-files-related.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0002-netcf-linux-include-bond-element-for-bonds-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0003-netcf-Properly-classify-bond-devices-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-memory-leak-in-aug-match-mac.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: lingsheng <lingsheng1@h-partners.com> - 1:1.0.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: liweigang <liweiganga@uniontech.com> - 1:1.0.8-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: evaluate: guard against NULL basetype
  evaluate: error out if basetypes are different
  evaluate: reject attempt to update a set
  evaluate: release mpz type in expr_evaluate_list() error path
  expression: missing line in describe command with invalid expression
  evaluate: handle invalid mapping expressions in stateful object statements gracefully


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix crash in json_parse_set_stmt_list
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: eaglegai <eaglegai@163.com> - 1:1.0.8-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: don't allow nat map with specified protocol
         rule: return error if table does not exist
         json: make sure timeout list is initialised
         evaluate: don't update cache for anonymous chains
         json: return error if table does not exist
         json: don't BUG when asked to list synproxies
         evaluate: compact STMT_F_STATEFUL checks
         evaluate: only allow stateful statements in set and map definitions
         optimize: expand expression list when merging into concatenation
         netlink: fix stack overflow due to erroneous rounding
         netlink: bogus concatenated set ranges with netlink message overrun
         netlink: fix crash when ops doesn't support udata
         netlink: Catch unknown types when deserializing objects
         netlink: Avoid potential NULL-ptr deref parsing set elem expressions
         netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY
         evaluate: don't BUG on unexpected base datatype
         src: BASECHAIN flag no longer implies presence of priority expression
         parser_bison: only reset by name is supported by now


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         segtree: fix string data initialisation
         src: netlink: netlink_delinearize_table() may return NULL
         src: ensure chain policy evaluation when specified
         src: fix memory leak in anon chain error handling
         mnl: silence compiler warning
         datatype: Increase symbolic constant printer robustness
         evaluate: follow prefix expression recursively if needed


author: yaoxin <yao_xin001@hoperun.com> - 1:20.12.1-1
changelog:
  - Update to 20.12.1:
    * CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session()
      leads to HTTP/2 server crash- (High)
    * CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
    * llhttp version 9.2.1
    * undici version 5.28.4


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:20.12.1-2
changelog:
  - fix building w/ clang: only apply '-fno-ipa-icf' for gcc && disable LTO for clang + ld.bfd
  - improve the handling of trilling whitespaces in C/CXXFLAGS


author: Ge Wang <wang__ge@126.com> - 1:20.12.1-3
changelog:
  - CVE-2023-45853 - Reject overflows of zip header fields in minizip
  - CVE-2024-5274 - Using FunctionParsingScope for parsing class static
  - CVE-2024-5535 - Fix SSL_select_next_proto
  - CVE-2024-7971 - Spill all loop inputs before entering loop


author: wangkai <13474090681@163.com> - 1:20.18.2-1
changelog:
  - Update to 20.18.2
  - Fix CVE-2025-23083 CVE-2025-23085 CVE-2025-23084 CVE-2024-36137
    CVE-2024-22018 CVE-2024-22020


author: wangkai <13474090681@163.com> - 1:20.18.2-5
changelog:
  - Fix CVE-2025-55130, CVE-2025-55131, CVE-2025-55132,
    CVE-2025-59465, CVE-2025-59466, CVE-2026-21637


author: wangkai <13474090681@163.com> - 1:20.18.2-7
changelog:
  - Followup fix CVE-2026-21637 and fix CVE-2026-21710, CVE-2026-21713,
    CVE-2026-21714, CVE-2026-21715, CVE-2026-21716, CVE-2026-21717


author: leiju <leiju4@huawei.com> - 0.1.3-2
changelog:
  - delete ExclusiveArch:i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl noarch


author: yyjeqhc <jialin.oerv@isrc.iscas.ac.cn> - 0.2.17-3
changelog:
  - Migrated legacy `import pango` and `pangocairo` usage to modern PyGObject (`gi.repository.Pango`, `PangoCairo`)
  - Replaced all legacy constants (`pango.STRETCH_...`) with `Pango.Stretch.XXX` enums


author: yixiangzhike <yixiangzhike007@163.com> - 0.9.12-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Move temporary files from /var/run to /run to delete warning in installing


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-10
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: andy <liuyang01@kylinos.cn> - 2.0.16-12
changelog:
  - backport patches from upstream
  - libnuma: Make numa_available respect EPERM
  - libnuma: fix nodemask allocation size for get_mempolicy


author: Ruozhu Li <liruozhu@huawei.com> - 1.00.029-1
changelog:
  - Added the function of sending a notification message to the switch when the software starts, and the switch sending domain members to the host, improving the reliability of software upgrade scenarios.
  - Add more connection parameter support, consistent with nvme cli.
  - Bond ports can join the domain and automatically establish a connection.


author: Ge Wang <wangge20@h-partners.com> 2.10.15-1
changelog:
  - Fix build failure due tu ruby updated to version 3.1.3
  - Modify version to match version of obs-server


author: yanglongkang <yanglongkang@h-partners.com> - 0.34.7-4
changelog:
  - Replace SELinux deprecated functions
  - Replace deprecated libxml2 calls
  - Fix implicit cast from const to non const


author: LHesperus <liuchanggeng@huawei.com> -v2.1.0-1
changelog:
  - remove the logger.h interface and add TRACE interface, increase safe_queue wait time to 5s
  - support reload log-level online
  - adapt analysis on riscv
  - add load base sched instance
  - v2.0.6-3 add adapt dynamicsmt analysis if smt is not enable
  - fix code check
  - add trace log and change level intf and delete logger
  - smc-d analysis fix inconsistency in the display of zero connection
  - v2.0.6-2 add realtime compile macro
  - v2.0.6-1 add smc_acc.yaml check and some logs
  - add net_hardirq_tune_data.h
  - fux binary coredump
  - v2.0.5-3 fix xcall analysis issues
  - v2.0.5-2 improve some output format
  - add xcall prefetch
  - network interface plugin : adapt same nic with different ifindex
  - v2.0.5-1 fix issues
  - v2.0.4-1 add docker coordination burst tune
  - add multi net path tune and analysis
  - add error log and params check
  - v2.0.3-3 oeaware-sdk enhances user permissions
  - v2.0.3-2 Fixed memory leak issues:
    - Fixed unsubscribeHandler topic deserialize memory leak
    - Fixed analysis module memory leak
  - Enhanced eBPF functionality:
    - Set memory lock limit to infinity for eBPF
    - Used eBPF to collect thread information
  - Network improvements:
    - Fixed ntoh port error
    - Added support for attaching all network interfaces
    - Used tcp-set-state to adapt k8s docker
  - New features:
    - Added xcall parameters
    - Added support for docker coordination burst analysis
    - Added parameter validation
    - Added NUMA parallel scheduler tuning support
  - Other improvements:
    - Fixed header files and added CI test
  - v2.0.3-1: Refactored and enhanced the analysis module:
    - Added scenario-aware analysis for multiple optimization plugins
    - Introduced command-line result viewing capability
    - Implemented Markdown format output support
  - Add new plugin: smt,binary,hirq


author: fly_1997 <flylove7@outlook.com> -v2.1.1-1
changelog:
  - add hwprobe_analysis for RISC-V
  - fix error logger info
  - support kernel cluster scheduler
  - adapt for kylin-v10-sp3
  - realtime tune add new tuning item
  - fix smc insmod err
  - realtime tune skip grubby update
  - add hwprobe_tune hwprobe_ext_zbb_tune for RISC-V
  - add high_load value check


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-0
changelog:
  - Add new test suite srpm and intel
  - Add virtual branch of test suite
  - Add support for Kylin and UOS
  - Bugfix


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: xiaochn <xiaochuannan@inspur.com> - 1.1.7-1
changelog:
  - Add KylinSec 3.5.3 support
  - Fix the problem of disk size calculation
  - Fix bcm57414 nic test failed issue
  - Change the format of date
  - Fixed a bug where a non-existent logger level was used
  - Update README.md
  - Fix vgpu testing issue


author: hewanhan <hewanhan@h-partners.com> - 1.1.10-0
changelog:
  - Add kernel support of openeEuler 24.03 LTS SP4
  - Fix false positives in the system testsuite on x86


author: JofDiamonds <kwb0523@163.com> - 1.1-5
changelog:
  - fix some review issues:
    1.fix segment fault triggered by unsupported command operations
    2.fix incorrect use of securec function parameters
    3.remove redundant cmd option 'V'


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1.0-5.7
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:add riscv64 subarch specific changes

   * Tue Oct 14 2025 yangchaohao <yangchaohao@huawei.com> - 1.0-5.6
   	 - Type:NA
   	 - ID:NA
   	 - SUG:NA
   	 - DESC:modify repo for openEuler-24.03-LTS-SP4


author: yangchaohao <yangchaohao@huawei.com> - 1.0-5.9
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:fix wrong metalink url of update-source

   * Thu Dec 25 2025 jchzhou <zhoujiacheng@iscas.ac.cn> - 1.0-5.8
   - Type:NA
   - ID:NA
   - SUG:NA
   - DESC:add riscv64 metalink fixes


author: Kai Liu <kai.liu@windriver.com> - 0.3.25-5
changelog:
  - Don't run make tasks in background sub-shell, as this causes
    severe issue. Use the _smp_mflags macro instead. See issue
    IB3EV0 for more detail.


author: xu_ping <707078654@qq.com> - 3.24.0-1
changelog:
  - Upgrade version to 3.24.0
    * Add support for FIPS-session mode
    * Updates to harden against RSA timing attacks
    * Add option to show the master key verification patterns of secure keys
    * Add support for exporting a key or certificate as URI-PEM file
    * Performance improvements for attribute retrieval
    * Add support for SHA-2 mechanisms
    * Experimental support for IBM Dilithium via OpenSSL OQS provider
    * Support live guest relocation for protected key (PKEY) operations
    * Add support for CKA_ALWAYS_AUTHENTICATE
    * Add support for CKD_*_SP800 KDFs for ECDH
    * Add support for SHA based key derivation mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms
    * Add support for building Opencryptoki on the IBM AIX platform
    * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64)
    * Add support for protecting tokens with a token specific user group
    * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE
    * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later


author: zhang_wenyu <zhang_wenyu@hoperun.com> - 3.25.0-1
changelog:
  - Upgrade version to 3.25.0
    * Add support for PKCS#11 v3.0 SHAKE key derivation
    * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP
    * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms
    * Add support for CCA AES CIPHER secure key types
    * Add support for the CKM_ECDH1_DERIVE mechanism
    * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms
    * Add support for the CKM_RSA_AES_KEY_WRAP mechanism
    * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism
    * Add a tool for import and exporting PKCS#11 keys to a KMIP server
    * Add support for opaque secure key blob import via C_CreateObject
    * Add support for key wrapping with AES-GCM
    * Add support for newer CCA versions on s390x and non-s390x platforms
    * Add support for CKM_AES_GCM (single-part operations only)


author: Funda Wang <fundawang@yeah.net> - 0.23.0-7
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.0-26
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-multicast-set.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-notify-systemd-of-start-up.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-null-pointer-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-openssl-1.1-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2016-7567.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2017-17833.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2012-4428-fix-handling-of-string-list-in-slp_common-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-slp_iface-c-comma-expression-so-it-works-as-designed.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Daemon-sends-wrong-service-reply-when-security-is-enabled.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-DAAddresses-hostname-resolution-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Change-default-slpreg-connection-from-UDP-to-TCP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-interface-parsing-code-to-look-for-null-ifc-addrs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-broadcast-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Properly-initialize-xcastsocks-for-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-xrealloc-to-properly-free-original-pointer-on-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2019-5544.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xingwei <xingwei14@h-partners.com> - 2.0.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: zhangbinqin<zhangbinqin@h-partners.com> - 9.6p1-13
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388 
  - SUG:NA
  - DESC:fix CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: baiguo <baiguo@kylinos.cn> - 0.4.34-2
changelog:
  - Use vasprintf() if available for error messages and otherwise vsnprintf();orccompiler, orcparse: Use secure UCRT printing functions on Windows


author: jiangchuangang <jiangchuangang@huawei.com> - 2022.7-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update to 2022.7
    add skip-if-etc-mtab-is-not-a-symlink-of-proc-self-mounts.patch for test failed


author: chenyanpanHW <chenyanpan@huawei.com> - 2.4.13-14
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-Drop-module-long-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: liweigang <liweiganga@uniontech.com> - 3.6-2
changelog:
  - remove patch support gpt_sync_mbr
  - file: huawei-bugfix-add-support-of-gpt_sync_mbr.patch
  - file: add support for gpt_sync_mbr and fix failure of it.


author: wangkai <13474090681@163.com> - 6.2.2-4
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)


author: hugel <gengqihu2@h-partners.com> - 10.42-12
changelog:
  - DESC:sync patches from upstream
         backport-Further-ASCII-tests-and-minor-bugfix-plus-ChangeLog-.patch
         backport-avoid-inconsistency-between-d-and-digit-when-using-a.patch
         backport-Fix-the-lookahead-after-d-or-posix-to-skip-whitespac.patch
         backport-Improve-error-offsets-for-character-classes-548.patch
         backport-Non-recursive-scan-prefix-in-JIT-560.patch


author: zouzhimin <zouzhimin@kylinos.cn> - 0.11.7-13
changelog:
  - fix: Support for other distributions and delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/do-not-support-cluster-setup-with-udp-u-transport.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Support-for-openEuler.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/fix-do-not-put-empty-uid-gid-options-to-an-uidgid-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/fix-stonith-level-validation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-pcsd-ruby.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/update-crm_mon-schemas-for-tests.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/add-dtos-and-converting-functions-for-resources-stat.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/fixes-after-review.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/store-clone-instance-id-in-resource-status-dtos.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/increase-a-timeout-in-a-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Export-rule-constraints-in-a-non-deprecated-way.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-fix-stdout-wrapping-to-terminal-width.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-fix-booth-destroy-for-arbitrators.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/fix-tests-for-tornado-6.5.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: zouzhimin <zouzhimin@kylinos.cn> - 0.11.7-14
changelog:
  - fix stdout wrapping to terminal width and modify spec file, sed command to replace "patch3" with "patch1"


author: tangyuchen <tangyuchen5@huawei.com> - 2.0.0-1
changelog:
  - update to 2.0.0
    - Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
    - Add '--disable-polkit' option
    - Reset eventCounter when a reader is removed
    - Add "polkit" in "pcscd -v" output if enabled
    - Doxygen: document SCARD_E_INVALID_VALUE for some functions
    - use secure_getenv(3) if available
    - Some other minor improvements


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: Funda Wang <fundawang@yeah.net> - 4:5.38.0-11
changelog:
  - split out patch adding link to libperl.so into two separated patches,
    and sync it with mageia, which is a better version than fedora
  - disable cleaning empty perl directories
  - use git lfs storage


author: chenyanpanHW <chenyanpan@huawei.com> - 4.050-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-DBD-mysql-4.050-Remove-a-useless-shebang-from-DBD-mysql.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: sqfu <dev01203@linx-info.com> - 1.647-1
changelog:
  - update version to 1.647
  - Fix Makefile rules for Changes
  - Another example to bind columns 
  - Fix fetchall_arrayref for undefined NAME


author: Funda Wang <fundawang@yeah.net> - 1:0.280236-2
changelog:
  - Link XS modules to libperl.so with EU::CBuilder on Linux
  - drop useless perl(:MODULE_COMPAT) requirement


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:3.51-1
changelog:
  - upgrade vertion to 3.51:
    - fix OVERLOAD and FALLBACK handling
    - fix ExtUtils::ParseXS compatibility with perl < 5.8.8
    - add support for elifdef and elifndef
    - allow symbolic alias of default function
    - better support for duplicate ALIASes
    - make versions in ExtUtils-ParseXS consistent


author: pengjian <pengjian23@mails.ucas.ac.cn> - 1:0.82-3
changelog:
  - Introduced environment variable-controlled polling timeouts 
  for the close and connection-keeping functions in the os_unix.c file.


author: dongyuzhen <dongyuzhen@h-partners.com> - 1:2.57-1
changelog:
  - upgrade version to 2.57:
    - fix long standing bug that duplicate options were not detected when the options differ in case while ignore_case is in effect
    - allow periods in option names
    - move Getopt::Long::Parser to a separate module and add documentation
    - do not use Getopt::Long to establish Getopt::Long::Parser version
    - adapt tests for perl core


author: lichaoran <pkwarcraft@hotmail.com> 1.3293-3
changelog:
  - add buildRequires: add gcc as we using it to compile
  - and perl-generators to auto-generate perl module provides


author: dongyuzhen <dongyuzhen@h-partners.com> - 0.42-1
changelog:
  - upgrade version to 0.42:
    - updated for Perl v5.14 - use `package NAME VERSION` syntax
    - fix typo 'behvior'
    - fix for DragonflyBSD and IPV6_V6ONLY from core perl


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.084-1
changelog:
  - upgrade version to 2.084:
    - various fixes for edge cases
    - update documentation to reflect default SSL_version


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 2.084-2
changelog:
  - Passing NO_NETWORK_TESTING=1 as an environment variable
    solves the interactive issue required for using rpmbuild locally


author: YangengLiu <dev01202@linx-info.com> - 2.098-1
changelog:
  - update version to 2.098
  - upgrading from plain socket (no object) by using correct fdopen mode +< instead of <+.
  - make sure that an unblessed sockets gets blessed in place instead of using new_from_fd.


author: Funda Wang <fundawang@yeah.net> - 0.68-4
changelog:
  - use perl-generators to scan META.json for requirements
  - Drop perl(t::common.pl) requires
  - drop useless perl(:MODULE_COMPAT) requirement


author: chenyanpanHW <chenyanpan@huawei.com> - 6.07-8
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/LWP-Protocol-https-6.06-Debian-746576-don-t-disale-verification-if-only-host.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/LWP-Protocol-https-6.06-Debian-746576-fix-test-make-it-workable-for-Crypt-SS.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: woody2918 <wudi1@uniontech.com> - 0.29-1
changelog:
  - Update version to 0.29
  - Fixed numeric zero and empty string argument handling in translit() & translit_reverse().


author: zhangyao <zhangyao108@huawei.com> - 0.047-1
changelog:
  - Upgrade version to 0.047
  - Filter out script documentation from scripts
  - Don't manify podless modules/scripts 
  - Compile all .c files in src/
  - Add module sharedirs
  - Add src/ to include paths


author: zhangyao <zhangyao108@huawei.com> - 1:20231213-1
changelog:
  - Upgrade version to 20231213
  - Update certificates
  - Stop installing mk-ca-bundle.pl script
  - Switched tests from Test to Test::More


author: woody2918 <wudi1@uniontech.com> - 0.45-1
changelog:
  - update version to 0.45
  - Make sure to stringify versions so that they are quoted when they are encoded in JSON
  - Allow to parse class|role NAME VERSION


author: wujie <wujie@nj.iscas.ac.cn> - 0.61-20
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=186681
    Author is David Abdurachmanov <david.abdurachmanov@sifive.com>


author: woody2918 <wudi1@uniontech.com> 0.242-1
changelog:
  - update version to 0.242
  - Corrected test dependencies
  - Packaging fix to stop installing boilerplate.pl


author: huyubiao <huyubiao@huawei.com> - 2:3.48-1
changelog:
  - update version to 3.48
    - Accept TAP version 14
    - Fix HARNESS_PERL_SWITCHES=-I handling in TAP::Harness::Env
    - Color the "ok"s as well.
    - Skip symlink tests on msys2
    - Use use absolute path for executable tests
    - Space-quote executable if has spaces
    - Avoid using Errno::EINTR directly for platforms without it
    - stop calling import on App::Prove plugins


author: Funda Wang <fundawang@yeah.net> - 1.16-8
changelog:
  - force stdin of analysor script
  - merge two META.json/yml analysors for runtime and buildtime into one
  - correctly dump content of META.yml files
  - dump build requires also
  - provide perlmeta_buildrequires script
  - use perl-generators to scan META.json for requirements
  - add perl_from_meta from mageia so that dependencies could be
    fetched from META.json/yml
  - update to 1.16
    * Squash multiple perl(:VERSION) symbols into one
    * Remove perl dependencies that are provided in the same file
    * Fix broken call to perl.prov when filenames contain spaces
    * Add perltest.attr to generate dependencies for tests sub-packages


author: zhangyao <zhangyao108@huawei.com> - 2:2.36-1
changelog:
  - DESC: Upgrade version to 2.36, test code modify, build optimization, avoid the use of magic numbers, deal compilation warning


author: gaihuiying <eaglegai@163.com> - 0.9.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if need libdrm, pango, libpng and if need to exclude bootlog


author: shiptux <shiptux@gmail.com> - 1.12.5p2-2
changelog:
  - Backport upstream b33e02d2 (issue #4347): use 96-bit IV in testEncryptDecryptGCM
    so it passes under OpenSSL 3


author: duyiwei <duyiwei@kylinos.cn> - 1:4.9.4-10
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC: Optimize spec files and fix CVE in batches through rebuild


author: duyiwei <duyiwei@kylinos.cn> - 1:4.9.4-11
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9676,CVE-2024-9675, CVE-2024-9407,CVE-2024-9341
  - SUG:NA
  - DESC: fix CVE-2024-9676,CVE-2024-9675, CVE-2024-9407, and CVE-2024-9341


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.19-4
changelog:
  - Fix poptCallbackType documentation
  - Fix multiple typos in comments
  - Fix potential double-free in test3.c


author: Chenxi Mao <chenxi.mao@suse.com> - 13.01.0000-3
changelog:
  - Add libpq-devel version dependency.
  - Bump version release to 3, because previous change didn't bump release number.


author: heppen <hepeng68@huawei.com> - 1.1.0-3
changelog:
  - Bug fix: fix build warning.
  - Bug fix: export PWR_SYS_GetRtPowerInfo.
  - Bug fix: data collection task intercept invalid task type.


author: heppen <hepeng68@huawei.com> - 1.1.0-4
changelog:
  - Bug fix: memcpy null pointer, array out of bounds, struct align.
  - Bug fix: get watt state will failed at the first time.
  - Bug fix: use process name to query pid but return all pids.
  - Bug fix: mismatch fopen/pclose and popen/fclose, useless if statement.


author: heppen <hepeng68@huawei.com> - 1.1.0-5
changelog:
  - Bug fix: SIGPIPE cause powerapi server exit.
  - Bug fix: pstree command is too slow to get all pid.
  - Bug fix: set smart grid state failed.
  - Bug fix: get watt attr and task list is not correct.


author: Zihao Xue <xuezihao@huawei.com> - 1.1.0-6
changelog:
  - Bug fix: heap buffer overflow caused by sending incomplete strings.
  - Bug fix: too long strings into QueryProcs causes services broke down.


author: Funda Wang <fundawang@yeah.net> - 2.15-2
changelog:
  - fix build with latest gettext
  - harden systemd service file from openSUSE
  - add patch regarding risc-v arch support


author: gaihuiying <eaglegai@163.com> - 2.5.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:pre-created upstream default lock dir
         Openssl engine API is deprecated for a while thus disable it


author: gaihuiying <eaglegai@163.com> - 2.5.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf
         Add configure check to see if we have struct sockaddr_ll


author: chenyanpanHW <chenyanpan@huawei.com> - 3.22-52
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.24-rhconfig.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.15.1-man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.22-truncate.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.24-ipv6.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Zhu Jin <zhujin18@huawei.com> - 4.0.4-8
changelog:
  - library: address a potential race resulting in a fault and avoid strdup() calls in sd2proc() if possible


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.3.8b-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix: %patchN is deprecated (7 usages found), use %patch N (or %patch -P N)


author: wangkai <13474090681@163.com> - 1.3.9a-1
changelog:
  - Update to 1.3.9a for fix CVE-2026-42167
  - Add 'proxy' sub-package with unbundled mod_proxy
  - Use libsodium to provide ed25519 key support for mod_sftp
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: Funda Wang <fundawang@yeah.net> - 25.1-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix build with wrong permission
  - DESC: fix conflicts with protobuf2
  - DESC: revert:distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 25.1-13
changelog:
  - Type:CVE
  - CVE:CVE-2026-0994
  - SUG:NA
  - DESC:Fix Any recursion depth bypass in Python json_format.ParseDict


author: liuchao <liuchao173.huawei.com> - 1.5.0-1
changelog:
  - upgrade to 1.5.0:
    - Makefile.am: change link order
    - GitHub actions fail on Windows due to missing unzip command
    - Export and install CMake targets
    - Use CMAKE_CURRENT_BINARY_DIR instead of CMAKE_BINARY_DIR
    - remove deprecated functionality
    - Avoid "unused variable" compiler warning
    - Update autotools
    - Support for new Google protobuf 22.x, 23.x releases
    - Miscellaneous fixes
    - Remove protobuf 2.x support
    - Silence some compiler diagnostics
    - Fixing MSVC build for Msbuild and Makefile generators


author: Funda Wang <fundawang@yeah.net> - 17.0-2
changelog:
  - add upstream patch fixing running tests with impossible alignments
  - move language files into lib package
  - cleanup spec


author: yixiangzhike <yixiangzhike007@163.com> - 3.1.1-1
changelog:
  - update version to 3.1.1
    - Fixed bug in NotAny where expr parse action was not being run
    - Fix regex matching for Python quoted strings
    - Make create_diagram() code compatible with latest version of railroad-diagrams
    - Support Python 3.12
    - Small perf optimization for `expr | ""` mapping to `Optional(expr)`
    - Redo QuotedString '\' escape handling as a state machine
    - Add ParseResults.deepcopy()
    - Remove ^ and $ tags from pp.common.url regex
    - Added DelimitedList class, for better handling of naming and diagramming
    - Deprecate ParserElement.validate()
    - Added new class method ParserElement.using_each
    - Fix bug in delimited_list
    - Added python_quoted_string; fixed exception messages for ParseElementEnhance subclasses
    - Enable packrat in verilogParse.py by default
    - Add embed argument to create_diagram
    - Add support for slice in expr[] notation
    - Fixed bug in srange
    - Added Lox language parser


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 7.4.4-1
changelog:
  - Update package with version 7.4.4
    Fix non-string constants at the top of file being detected as docstrings on Python>=3.8.
    Removed unhelpful error message from assertion rewrite mechanism
    Updated documentation to refer to hyphenated options
    Markers are now considered in the reverse mro order to ensure base class markers are considered first
    Improved disclaimer on pytest plugin reference page to better indicate this is an automated
    Added ExceptionInfo.from_exception() <pytest.ExceptionInfo.from_exception>


author: wangkai <13474090681@163.com> - 3.13.5-1
changelog:
  - Update to 3.13.5
    * Fix CVE-2026-22815, CVE-2026-34513, CVE-2026-34514, CVE-2026-34516,
      CVE-2026-34517, CVE-2026-34518, CVE-2026-34519, CVE-2026-34520, CVE-2026-34525


author: Yu Peng <yupeng@kylinos.cn> - 1.4.0-1
changelog:
  - Upgrade to 1.4.0.
    Added decorator functionality to Signal as a convenient way to add a callback 
    Improved type safety by allowing callback parameters to be type checked


author: zhangxingrong <zhangxingrong@uniontech.com> - 1.4.6-1
changelog:
  - Update to version 1.4.6
    - Nothing in the library's logic. Just a fix in one of the test cases.
      And some changes to prevent same situation from happening again.
    - Fixed incorrect handling of newlines.
    - STARTTLS is now fully enforced if used.


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.13.1-1
changelog:
  - Update package to version 1.13.1
    Improve re-writer implementation, fixing chain and adding support to callables


author: yueyuankun <yueyuankun@kylinos.cn> - 23.1.0-1
changelog:
  - Update to 23.1.0
  - The InvalidHash exception is deprecated in favor of InvalidHashError
  - argon2.hash_password(), argon2.hash_password_raw(), and argon2.verify_password() that have been soft-deprecated since 2016 are now hard-deprecated
  - Official support for Python 3.11 and 3.12
  - Python 3.6 is not supported anymore
  - argon2.exceptions.InvalidHashError as a replacement for InvalidHash
  - salt parameter to argon2.PasswordHasher.hash() to allow for custom salts


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.0.5-1
changelog:
  - Update package to version 1.0.5
  - fix error handling that might result in null exception
    cleanups of exception handling : errors must now have an exception
    Handling NameError is not working


author: yaoxin <1024769339@qq.com> - 1.0.6-1
changelog:
  - Update to 1.0.6:
    * drop testing and support for Python3.8, add Python 3.13, change document to reflect this.
    * implement safe_getattr and safe_format functions; fix bugs in UNSAFE_ATTRS and UNSAFE_ATTRS_DTYPES usage
    * make all procedure attributes private to curb access to AST nodes, which can be exploited
    * improvements to error messages, including use ast functions to construct better error messages
    * remove import of numpy.linalg, as documented
    * update doc description for security advisory


author: GuoCe <guoce@kylinso.cn> - 1.34.79-1
changelog:
  - update to version 1.34.79
  - A lot of functions have been updated, 
  - such as adding IAMIdentityCenterInstanceArn parameter to CreateAccountSubscription.


author: xu_ping <707078654@qq.com> - 7.0.0-1
changelog:
  - Upgrade version to 7.0.0
  - Python 3.12 support and python 3.7 no longer supported
  - Add support bind mount propagation.


author: xu_ping <707078654@qq.com> - 1.3.0-1
changelog:
  - Update package to version 1.3.0
  - Python 3.12 support.
  - fix some bugfix
  - Update internally pinned pytest-flask to 1.3.0 for Flask >=3.0.0 support


author: xigaoxinyan <xigaoxinyan@huawei.com> - 18.0.0-11
changelog:
  - Drop docs package: sphinx Update make docs build error and Fix build error caused by py3.10+ wildcard


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 8.22.1-1
changelog:
  - Update package to version 8.22.1
    Use check_same_thread=False by default for history sqlite db
    Use prompt_toolkit.application.create_app_session for debugger prompt
    Provide and easier way to generate magics and pre-post hooks
    Refuse to install event loop hooks when not using prompt_toolkit
    Add hack to change traceback syntax highlighting


author: xuchenchen <xuchenchen@kylinos.cn> - 3.1.3-2
changelog:
  - Type: CVE
  - CVE: CVE-2024-34064
  - SUG: NA
  - DESC: fix disallow invalid characters in keys to xmlattr filter


author: fuanan <fuanan3@h-partners.com> - 3.17.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 3.17.3
         drop python 2 support
         datatime fixes
         Remove ancient pathlib requirement for python3. It is part of the stdlib since Python 3.4


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 5.7.1-1
changelog:
  - Update package with version 5.7.1
    Derive JupyterAsyncApp from JupyterApp
    Modernize event loop behavior
    Enable async JupyterApp
    Clean up lint and add downstream checks
    Add python 3.12 support and update typings for traitlets 5.11


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.9.0-1
changelog:
  - Update package with version 0.9.0
    Clean up linting and fix a bug that was found
    Adopt ruff format
    Normalize "jsonschema[format-nongpl]" in pyproject.toml


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.5.2-1
changelog:
  - Update package with version 0.5.2
    Set terminals_available to False when not enabled
    Update ruff config


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.5.3-1
changelog:
  - Update package with version 0.5.3
    Drop support for Python 3.7
    Add direct dependency on ipykernel
    Adapt to level config to match other Jupyter repos


author: xuhe <xuhe@kylinos.cn> - 2.27.3-1
changelog:
  - Update to 2.27.3
  - Fix test util typings.
  - Use json5 typings.
  - Use updated releaser workflows.
  - Ignore pageconfig file if JSON is zero-length.
  - For v2 extensions parse entrypoint data.
  - Add util to get consolidated page_config from higher levels.
  - Move ENV_CONFIG_PATH import back into _get_config_manager.
  - Load overrides once, rather than in each settings handler.
  - Run docs on ubuntu.
  - Fix handling language packs for pseudo language.


author: chenhuihan <chenhuihan@huawei.com> - 2.8.0-1
changelog:
  - Update package to version 2.8.0:
    - export PyJWKClientConnectionError class
    - pre-autoupdate mirrors-mypy blacken-docs black
    - allows passing of ssl.SSLContext to PyJWKClient


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.5.3-1
changelog:
  - Update package to version 1.5.3
    Fix mkdocs serve sometimes locking up all browser tabs when navigating quickly
    Add many new supported languages for "search" plugin - update lunr-languages to 1.12.0
    Built-in themes now also support Chinese (Traditional, Taiwan) language


author: dongyuzhen <dongyuzhen@h-partners.com> - 3.2.1-1
changelog:
  - upgrade version to 3.2.1:
    - add Tadpole graph
    - fix listing of release notes on Releases page
    - fix syntax warning from bad escape sequence
    - fix triangles to avoid using is to compare nodes
    - fix error message for nx.mycielski_graph(0)
    - disallow negative number of nodes in complete_multipartite_graph
    - fix names of small graphs
    - fix extendability function name in bipartite.rst
    - improve error messages for misconfigured backend treatment


author: Shinwell Hu <micromotive@qq.com> - 1.11.1.1-4
changelog:
  - Python-ninja should never obsolate ninja-build.
  - Rename /usr/bin/ninja shipped in this package to /usr/bin/python-ninja


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 23.2-1
changelog:
  - Update package with version 23.2
    Add python 3.12 support.
    Add types for packaging.version._Version.
    Add platform tag support for LoongArch.
    Update pyupgrade to Python 3.7+
    Support enriched metadata.


author: kaijie Gu <jiekgu@foxmail.com> - 24.1-1
changelog:
  - Update package with version 24.1
    Add support for Python 3.13
    Fix typo in _parser docstring
    Modernise type annotations using FA rules from ruff
    Document markers.default_environment()


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.0.43-1
changelog:
  - Update package to version 3.0.43
    Make formatted_text.split_lines() accept an iterable instead of lists only.
    Disable the IPython workaround (from 3.0.41) for IPython >= 8.18.
    Restore signal.SIGINT handler between prompts.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.7.0-1
changelog:
  - Update version to 3.7.0
    Drop GIL during long-running proj database calls
    Add is_deprecated and get_non_deprecated() to CRS
    Add runtime & compiled PROJ versions
    Add Windows system path to delvewheel add-path
    Adds codespell to pre-commit hooks


author: yaoxin <yao_xin001@hoperun.com> - 5.1.0-1
changelog:
  - Update to 5.1.0
  - Bug Fixes:
    * Handle RESP3 sets as Python lists (#3324)
    * Prevent async ClusterPipeline instances from becoming "false-y" (#3068)
    * Add hostname field to _parse_node_line (#3343)
    * More docs fixes (#3326)
    * Delete the first-defined (and thus "duplicate") Script class (#3333)
    * Catch a known DeprecationWarning when calling .close() (#3335)
    * Add missed redismod at test_commands.py (#3369)
  - Breaking Changes:
    * Timeseries insertion filters for close samples (#3228)
    * Enhanced classes string representation (#3001)
    * Partial clean up of Python 3.7 compatibility (#2928)


author: lixiaoyong <lixiaoyong@kylinos.cn> - 5.2.0-1
changelog:
  - Upgrade version to 5.2.0
    Extend AggregateRequest with scorer argument
    Pin pytest-profiling version


author: jiangxinyu <jiangxinyu@kylinos.cn> - 0.18.6-1
changelog:
  - Update package to version 0.18.6
  - Fix issue with multiple document intermixing YAML 1.2 and YAML 1.1, the VersionedResolver now resets


author: guochao <guochao@kylinos.cn> - 1.10.2-1
changelog:
  - Update package to version 1.10.2
  - bump pypa/cibuildwheel from 2.19.2 to 2.20.0
  - fix handling of unset --debug flag


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.11.1-1
changelog:
  - Update package to version 1.11.1
    Fix finding cargo artifacts when filenames are empty
    Drop support for Python 3.8
    Support free-threaded Python
    Support adding custom env vars


author: liutao <liutao1@kylinos.cn> - 1.13.3-1
changelog:
  - upgrade to 1.13.3-1
  - Handle matrices of zero columns correctly in the Matrix constructor
  - NumPy numbers can be used with clebsch_gordan


author: fuanan <fuanan3@h-partners.com> - 1.8.1-1
changelog:
  - update version to 1.8.1
  - bump http-proxy from 1.17.0 to 1.8.1
  - fix broken link
  - add chunked inference
  - fix attrs in custom predict fn for tensorboard
  - fixing infer edge case issue
  - explicitly require bash(Change /bin/sh to /bin/bash in build_pip_package.sh)
  - add support for witwidget for JupyterLab 3.x.


author: yaoxin <yao_xin001@hoperun.com> - 6.4.1-1
changelog:
  - Update to 6.4.1
    * Parsing of the ``Transfer-Encoding`` header is now stricter.
    * Handling of whitespace in headers now matches the RFC more closely.
    * ``tornado.curl_httpclient`` now prohibits carriage return and linefeed headers in HTTP headers
    (matching the behavior of ``simple_httpclient``).


author: liuzhilin <liuzhilin@kylinos.cn> - 0.25.1-1
changelog:
  - Upgrade package 0.25.1
  - Fix crash when importing trio in embedded Python on Windows, and other installs that remove docstrings.


author: caiyuxin <caiyuxin@kylinos.cn> - 2024.10.21.16-1
changelog:
  - Update package to version 2024.10.21.16
    * update calver to include hour
    * Add Django trove classifiers for 5 and upcoming 5.2 release.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2025.5.9.12-1
changelog:
  - Update package to version 2025.5.9.12 and fix build error for setuptools 78.1.1
    Add trove classifier for GraalPython
    feat: add free-threading classifiers
    refactor: add numbers to force correct sort
    Add several missing languages
    Add Trove classifier for Python 3.15
    Don't assume basename of sys.executable is "python"
    Add entry point to enable installing with pipx or uvx
    Add classifier for Wagtail 7
    add __all__ to declare public API
    Add Pyodide framework
    Remove unused and "Voluntarily retired" licenses
    Add upcoming django CMS version
    Fix out-of-order placement of "quantum computing"


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 4.10.0-1
changelog:
  - Update package with version 4.10.0
    Add support for PEP 728, PEP 742
    Drop runtime error when a read-only TypedDict item overrides a mutable one.
    Speedup issubclass() checks against simple runtime-checkable protocols by around 6%.
    Add support for PEP 705, adding typing_extensions.ReadOnly.
    Drop support for Python 3.7 (including PyPy-3.7).


author: zeng liwen <zengliwen@kylinos.cn> - 4.12.2-1
changelog:
  - Update to 4.12.2
  - Fix the runtime behavior of type parameters with defaults (PEP 696)
  - Fix AttributeError when using typing_extensions.runtime_checkable in combination with typing.Protocol on Python 3.12.2 or newer
  - Fix Protocol tests on Python 3.13.0a6 and newer
  - Improve the implementation of type parameter defaults (PEP 696)
  - Add typing_extensions.get_annotations, a backport of inspect.get_annotations that adds features specified by PEP 649
  - Fix regression in v4.12.0 where specialization of certain generics with an overridden __eq__ method would raise errors


author: wangjunqi <wangjunqi@kylinos.cn> - 5.2-1
changelog:
  - Update package to version 5.2
    Added a pre-commit config
    Updated python versions [hugovk]
    Added type hints for the public functions
    Moved to using pyproject.toml for project config.


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.3.0-1
changelog:
  - Update package to version 4.3.0
    Fixed inability to pass total_tokens as a keyword argument on trio


author: liuzhilin <liuzhilin@kylinos.cn> - 4.4.0-1
changelog:
  - Update package to version 4.4.0
  - Added __slots__ to AsyncResource so that child classes can use __slots__.
  - Fixed the entire task group being cancelled if a TaskGroup.start() call gets cancelled.
  - Fixed MemoryObjectStream dropping an item if the item is delivered to a recipient that is waiting to receive an item but has a cancellation pending.
  - Fixed erroneous TypedAttributeLookupError if a typed attribute getter raises KeyError.


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.6.1-1
changelog:
  - Update package to version 4.6.1
  - Bugfix: Fixed feed_data after feed_eof assertion errors on asyncio
    Bugfix: Fixed missing or inconsistent error when acquiring already owned Lock


author: yaoxin <yaoxin30@huawei.com> - 1.4.4-3
changelog:
  - Modified the build and install phases to adapt to the compilation and installation modes of Python 3.10


author: chenyanpanHW <chenyanpan@huawei.com> - 1.11.0-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/beaker-use-system-paste.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Weifeng Su <suweifeng1@huawei.com> - 5.0.8-1
changelog:
  - upgrade to 5.0.8
    -fix a regression error in 5.0.7
    -update testing to validate against python version 2.7 and 3.5-3.11
    -update broken links / no-existent services and references


author: Liu Wang <1823363429@qq.com> -1.25.0-1
changelog:
  - update package to version 1.25.0
  - Added commit_prefix option to Version.serialize() to insert a prefix when serializing commit IDs.
  - Added escape_with option to Version.serialize() to customize how branch names are escaped.
  - Fixed: Deprecation warning from re.sub() using Python 3.13+.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 24.1.0-1
changelog:
  - Update package with version 24.1.0
    Added a default to an internal API that is used by scikit-build-core.


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1.25.0-1
changelog:
  - Upgrade package version to 1.25.0
    Add .venv to the list of directories that cannot be traversed
    Output from the core Application utility now writes to stderr


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.0.4-1
changelog:
  - Upgrade package with version 1.0.4
    Add support for HTTPS proxies.
    Handle sni_hostname extension with SOCKS proxy.
    Handle HTTP/1.1 half-closed connections gracefully.
    Add support for Python 3.12 and drop Python 3.7 support.
    Async support becomes fully optional.
    Add support for synchronous TLS-in-TLS streams.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.27.0-1
changelog:
  - Upgrade package with version 0.27.0
    Support HTTPS proxies.
    Drop support for Python 3.7 and Add support for Python 3.12.
    Add support for httpcore 1.0.
    Respect the http1 argument while configuring proxy transports.
    Fix RFC 2069 mode digest authentication.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.0.0-1
changelog:
  - Update package with version 1.0.0
    Fix tests for nbclient v0.8
    Remove caps & bump Python for SPEC 0


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 8.6.0-1
changelog:
  - Update package with version 8.6.0
    Update typing for traitlets 5.13
    Enable strict typing
    Test on python 3.12


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.2.4-1
changelog:
  - Update package with version 2.2.4
    Fix websocket handler incorrectly inheriting from APIHandler rather than JupyterHandler
    Remove unused notebook config entry point
    Support latest version of typescript-language-server


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.13.0-1
changelog:
  - Update package with version 2.13.0
    Add an option to have authentication enabled for all endpoints by default
    Websockets: add configurations for ping interval and timeout
    Log extension import time at debug level unless it's actually slow
    Add support for async Authorizers
    Support get file(notebook) md5
    Update kernel env to reflect changes in session
    Support external kernels


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 4.1.2-1
changelog:
  - Upgrade package with version 4.1.2
    Fix highlight sequencing when replacing text in code cells
    Restore notebook scrolling on dragging a cell to the viewport edge
    Fix typing in editable elements inside of open shadow DOM
    Correct Alt + number keyboard shortcuts command map
    Update jupyter-collaboration for the Binder environment
    Add virtual scrollbar component to windowed lists.
    Load custom CSS functionality and documentation
    Add plugin manager and extension locks


author: zhaojingyu <zhaojingyu@kylinos.cn> - 4.1.6-1
changelog:
  - Upgrade package with version 4.1.6
  - Fix outputarea collapse expand
    Disable placeholder for password input


author: muxiaohui <muxiaohui@kylinos.cn> - 4.3.0-1
changelog:
  - Update version to 4.3.0
    Add setting to enable single-click navigation in file browser.
    Adds command to toggle cell outputs.
    Add kernel selection to Galata notebook creation.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 4.3.5-1
changelog:
  - Upgrade package with version 4.3.5
    Fix scrolling and selection restoration on undo/redo
    Fix windowing crash due to out-of-bounds access
    Increase color contrast of operators in code editor
    Fix jupyverse installation instructions
    Use Zulip for instant messaging


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.3.0-1
changelog:
  - Update package with version 0.3.0
    Upgrade extension to work with jupyterlab4
    Delete lock file and rerun jlpm install
    Remove dev dependencies and auto generated hatch file
    Make build work with python 3.12
    Remove package-lock.json from git tracking


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.2.0-1
changelog:
  - Upgrade package with version 1.2.0
    Support running LibCST on Python 3.12 and drop support for running it on 3.8
    Allow Element::codegen to be used by external users
    Fix parsing list matchers without explicit brackets
    Fix filepathprovider generic type


author: xu_ping <707078654@qq.com> - 0.46.2-1
changelog:
  - Update to 0.46.2:
    * M2Crypto closes SSL connection on closing HTTPS Connection, and
      some other related issues
    * Modernize C API by eliminating use of deprecated
      PyBytes_AsStringAndSize and related functions with Python
      Buffer Protocol
    * Add logging support to C extension code sending messages to the
      Python logging
    * Reverted removal of demo/ subdirectory
    * Correct license to BSD-2-Clause and update references
    * Specify in setup.cfg that we require Python >= 3.6


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.0.1-1
changelog:
  - Update package with version 1.0.1
    Don't import MkDocsConfig (does not exist on MkDocs 1.3-)
    Add Markdown anchors and aliases
    Preserve HTML data attributes (from spans to anchors)
    Support [`identifier`][] with pymdownx.inlinehilite enabled
    Recognize links with multi-line text


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.3.0-1
changelog:
  - Update package with version 2.3.0
    Change excluded file log level to INFO
    Add source attribute to authors. Aims to support GitHub and GitLab in mkdocs material.
    Add support for GitLab


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 6.0.4-1
changelog:
  - Update package with version 6.0.4
    Add mkdocs>=1.4 as dependency.
    Dropped Python upper version requirement bound.
    Fixed some warnings not shown when missing start and end delimiters in some contexts


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.6.1-1
changelog:
  - Update package with version 0.6.1
    Fix compatibility with MkDocs 1.5+
    Fix when markdown extensions is set to None


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.3.1-1
changelog:
  - Update package to version 1.3.1
    Add official support for Python 3.11 and 3.12.
    Remove support for Python 3.7.
    FIX: Better deprecation warning.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.8.0-1
changelog:
  - Update package with version 0.8.0
    Remove python 3.7 support and upgrade setup-python action
    Upgrade setup-python action to v5


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 7.16.6-1
changelog:
  - Update package with version 7.16.6
    Prevent leading whitespace in markdown code blocks from being stripped
    Update base.tex.j2 for macro compatibility with newer versions of Pandoc
    Allow including text/x-rst outputs in rst conversion, transition away from text/restructuredtext
    Add support for mistune 3.1.0
    [HTMLExporter] Initialize resources before widget filtering
    Add a toggle to skip the svg encoding of images
    Support configureable width and height of reveal presentations
    Convert coalescese_streams function to CoalesceStreamsPreprocessor


author: openeuler_bot <infra@openeuler.sh> - 7.17.0-1
changelog:
  - Add support for arbitrary browser arguments (version:7.17.0).
  - Fix QtPNGExporter returning empty bytes on macOS (version:7.17.0).
  - Fix CVE-2025-53000: Secure Inkscape Windows path (registry first + block CWD) (version:7.17.0).
  - Drop support for Python 3.8, fix the CI tests (version:7.17.0).


author: YangengLiu <dev01202@linx-info.com> - 7.17.1-1
changelog:
  - update version to 7.17.1
    * Allow configureable WebPDF JavaScript processing timeout.
    * Fix when checking template paths on shared filesystems.
    * Tweak webpdf template logic to fix duplicate extension problem.


author: shixuantong <shixuantong1@huawei.com> - 1:1.24.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove f2py form python3-numpy package. It is in python3-numpy-f2py
         Do not pack open-source test case files


author: zhaojingyu <zhaojingyu@kylinos.cn> - 2.2.2-1
changelog:
  - Update to 2.2.2
  - Avoid issuing a spurious DeprecationWarning when a custom DataFrame or Series subclass method is called


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.1.8-1
changelog:
  - Update package with version 2.1.8
    Bugfix: Can't include nested data files in built wheel.
    Rename tag-pattern to tag_regex in the docs.
    Copytree handle existing dirs.
    Normalize the dist info name in the wheel.
    Path to uri expansion in dependency string.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.0.0-1
changelog:
  - Update package to version 1.0.0
    Rewrite the entire library using dataclasses.
    Add more rigorous testing.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.10.6-1
changelog:
  - Update package to version 2.10.6
    Remove Cython & Move to pyproject.toml
    Move settings to pydantic-settings
    Add hooky config to pyproject.toml
    Add github token to cherry-pick
    Add strict option to BaseConfig


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.27.2-1
changelog:
  - Update package to version 2.27.2
    Fix linux PGO wheel build
    Forward default_value calls to the underlying schema for DefinitionRefValidator
    Include JSON Schema input core schema in function schemas


author: jiangxinyu <jiangxinyu@kylinos.cn> - 2024.2-1
changelog:
  - Update package to version 2024.2
    Update sklearn.neighbors hook to account for removed hidden import


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 10.7-1
changelog:
  - Update package to version 10.7
    Allow configuring custom repository providers based off the existing providers.
    Admonitions and Details now allow configuring custom block classes and default titles.
    Ensure that Keys does not parse base64 encoded URLs.
    Allow PathLike objects for base_path to better support interactions with MkDocs.
    Officially support Python 3.12 and drop Python 3.7 support.
    Add new combine_header_slug option in legacy Tabbed extension and new Block Tab extension


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.9.0-1
changelog:
  - Update package with version 0.9.0
    Update event loop handling
    Allow passing request_timeout to client_fetch
    Update ruff and typings


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.15.0-1
changelog:
  - Update package with version 3.15.0
    Make requirements compile disable pip's require-virtualenv flag always
    Update setuptools config
    Add dependabot configuration for GitHub Actions
    Bump actions/setup-python from 3 to 4
    Activate numpy tests on Python 3.11
    Add setup-cfg-fmt to pre-commit


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 1.3.1-1
changelog:
  - Update package with version 1.3.1
    Update workflows and tests.
    Use trusted publishing and configure Renovate.
    Drop 3.7 support and do sys path hack.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.7.0-1
changelog:
  - Update package to version 0.7.0
    Add support for extensionless Python files for server
    Fix configuration inheritance for configurations specified in the LSP settings
    Fix placement of inline parameter comments
    Add a subcommand to generate dependency graphs
    Add Python version support to ruff analyze CLI
    Add exclude support to ruff analyze
    Fix parentheses around return type annotations
    Fix codeblock dynamic line length calculation for indented docstring examples
    Refurb implement hardcoded-string-charset
    Refurb Count codepoints not bytes for slice-to-remove-prefix-or-suffix


author: zhangxianting <zhangxianting@uniontech.com> - 3.19.2-1
changelog:
  - Update to 3.19.2:
  - Updated test & build matrix to include Python 3.12 and use GitHub Actions as a Trusted Publisher (OIDC) https://github.com/simplejson/simplejson/pull/317


author: wangkai <13474090681@163.com> - 3.19.2-2
changelog:
  - Fixed the packaging process does not include __pycache__ tests
  - Obsoletes empty package python-simplejson-help


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.0.0-1
changelog:
  - Update package to version 1.0.0
  - Dependencies: use pip-tools + GH Action to keep dependencies updated


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.0.8-1
changelog:
  - Update package to version 1.0.8
  - Fix multiple term matching when word appears in both title and document


author: zhangxianting <zhangxianting@unionech.com> - 2.12.1-1
changelog:
  - Increase the upper limit version of typing_extensions to fix install, typing_extensions>=3.6.6,<4.6.0 to typing_extensions>=3.6.6,<=4.10.0


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.13.0-1
changelog:
  - Update package to version 2.13.0
    Add support for datetime.timedelta to time_machine.travel().
    Add shift() method to the time_machine pytest fixture.
    Fix documentation about using local time for naive date(time) strings.


author: Liu Wang <1823363429@qq.com> - 0.13.3-1
changelog:
  - Update package to version 0.13.3
    fix: register encoder's doc incorrectly mentions TypeError
    feat: add .item() method to retrieve the item object
    Fix: Inconsistent newlines on Windows
    Replace pytest's legacy tmpdir fixture with tmp_path
    Prevent repeated whitespace items in arrays
    Aot setitem not implemented fix
    Fix removal of items from Arrays
    Fix: reject single keys that aren't strings
    fix: Invalid serialization when overwriting out-of-order table key
    fix: Dumping a subelement of a parsed toml fails starting on 4rd level of nesting
    fix: ensure unique table indices when adding items to out-of-order tables
    fix: add newline indentation after existing items in Container class
    fix: Missing newline at end of file with multiple array of tables can corrupt during dumping


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 5.14.1-1
changelog:
  - Upgrade package with version 5.14.1
    Add option to load traitlets values from environement.
    Cleanup after remove Python 2 support.
    Add more project URLs, trove classifiers.
    Added type hints to HasTraits.observe() and friends.


author: gaihuiying <eaglegai@163.com> - 1.17.1-15
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: gaihuiying <eaglegai@163.com> - 1.17.1-16
changelog:
  - Type:cves
  - CVE:CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960
  - SUG:NA
  - DESC:fix CVE-2026-33278,CVE-2026-42944,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960


author: gaihuiying <eaglegai@163.com> - 1.17.1-17
changelog:
  - Type:cves
  - CVE:CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608
  - SUG:NA
  - DESC:fix CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608


author: chengyechun <chengyechun1@huawei.com> - 1.26.18-2
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorizatioin header on redirects


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 1.26.18-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Prevent issue in HTTPResponse().read() when decoded_content is True and then False


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 0.3.12-3
changelog:
  - The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: wangqiang <wangqiang1@kylinos.cn> - 8.5.1-1
changelog:
  - Update to 8.5.1
  - NEW: Formally support Python 3.11 (no change).
  - NEW: Add support for Python 3.12 (pathlib changes).
  - NEW: Drop Python 3.7 support.
  - FIX: Fix handling of current directory when magic and non-magic patterns are mixed in glob pattern list.
  - FIX: Fix issue with type check failure in wcmatch.glob.


author: lixiaoyong <lixiaoyong@kylinos.cn> - 0.14.1-1
changelog:
  - Upgrade package to version 0.14.1
    - Drop support for Python older than 3.6
    - Additional ruff/Pyflakes/codespell fixes


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-69
changelog:
  - Migration/urma:reduce plflash update time
  - Migration/urma:avoid clearing remote dirty bitmap after migration completes
  - Migration/urma:add detailed downtime statistics for live migration
  - Migration/urma:support jfr post list mode over URMA
  - Migration/urma:move registration and unregistration ram to thread
  - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration
  - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM
  - target/i386: csv: Remove all nodes within dma unmapping addr range
  - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container()
  - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd
  - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest
  - target/i386: csv: Introduce host-data=str option
  - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines.
  - Migration/urma:fix memory leak caused by hashmap in urma migration
  - bugfix: add PAS_EXPANSION config to support mmcd device
  - ub: fix ub ers map failed 
  - ub: fix vm reset core when config vfio-ub device


author: fanmingzhan <fanmingzhan@h-partners.com> - 11:8.2.0-70
changelog:
  - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-71
changelog:
  - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region"
  - arm/kvm-rme: Add support for hisi-cca huge page mapping method
  - arm/kvm-rme: Add device assignment method for cca realm vm
  - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-72
changelog:
  - ub: don't check ers addr size is power of 2
  - ub: support process msg code exch
  - ub: replace malloc with g_malloc0
  - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP
  - MAINTAINERS: add me as maintainer to virtio-snd
  - virtio-snd: remove TODO comments
  - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196)
  - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195)
  - virtio-snd: tighten read amount in in_cb(CVE-2026-3195)
  - hw/arm: Close unreleased out_fault_fd
  - pci: avoid the info qtree crash caused by arm-smmuv3-accel


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-73
changelog:
  - target/arm: add kunpeng 920 V1 support
  - target/arm: add kunpeng 950 V1 support
  - target/arm: add kunpeng 920 V2 support
  - hw/virtio/virtio-crypto: verify asym request size(CVE-2025-14876)
  - cryptodev-builtin: Limit the maximum size(CVE-2025-14876)
  - block/vmdk: fix OOB read in vmdk_read_extent()(CVE-2026-2243)
  - lsi53c895a: keep a reference to the device while SCRIPTS execute(CVE-2024-6519)


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-74
changelog:
  - virtio-blk: avoid using ioeventfd state in irqfd conditional
  - machine: Use error handling when CPU type is checked
  - hw/core/cpu: Update description of CPUState::node
  - hw/cpu/core: Cleanup unused included header in core.c
  - hw/cpu/cluster: Cleanup unused included header in cluster.c
  - hw/arm/bcm2836: Simplify use of reset-cbar property
  - hw/arm/bcm2836: Use ARM_CPU mp-affinity property
  - hw: Simplify accesses to the CPUState::start-powered-off property
  - hw/ppc/xive2_regs: Remove unnecessary cpu.h inclusion
  - hw/mips: Inline bios.h definitions
  - docs: use "buses" rather than "busses"
  - hw/ppc/spapr_cpu_core: Access QDev properties with proper API
  - hw/vfio: fix iteration over global VFIODevice list
  - vfio/iommufd: Remove the use of stat() to check file existence
  - vfio/container: Rename vfio_init_container to vfio_set_iommu
  - target/sparc: Simplify qemu_irq_ack
  - tests/avocado: add a simple i386 replay kernel test
  - tests/avocado: modernise the drive args for replay_linux
  - block: Fix crash when loading snapshot on inactive node
  - roms/efi: clean up edk2 build config
  - roms/efi: exclude efi shell from secure boot builds
  - Migration/urma:Avoid polling jfc timeouts resulting from hardware failures.
  - hyperv/syndbg: check length returned by cpu_physical_memory_map()(CVE-2026-3842)
  - ub: fix ers update error
  - kvm/arm/virt: Implement kvm-vtimer-status
  - hw/arm/virt: Implement timer early inject PV support
  - Migration/urma: replace ulseep with usleep in poll_jfc_wait


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-76
changelog:
  - target/arm: Conditionally add KVM writable properties based on RME
  - Migration/urma:adapt urma to use udma device to process iterative migration
  - Migration/urma: drop unused index in qemu_urma_init_ram_blocks
  - ub_ummu: default uninstall all tecte when cfgi all invalidate and free vdev when tecte uninstall
  - ub ummu: realize mapt_cmdq_ctxt_attr regster process
  - vfio ub: support config fd for vfio-ub device
  - hw/core/machine-smp: Deprecate unsupported "parameter=1" SMP configurations
  - hw/core/machine-smp: Calculate total CPUs once in machine_parse_smp_config()
  - hw/core/machine: Introduce the module as a CPU topology level
  - hw/core/machine: Support modules in -smp
  - hw/core: Introduce module-id as the topology subindex
  - hw/core: Support module-id in numa configuration
  - hw/i386: split x86.c in multiple parts
  - i386/cpu: Fix i/d-cache topology to core level for Intel CPU
  - i386/cpu: Use APIC ID info to encode cache topo in CPUID[4]
  - i386/cpu: Use APIC ID info get NumSharingCache for CPUID[0x8000001D].EAX[bits 25:14]
  - i386/cpu: Consolidate the use of topo_info in cpu_x86_cpuid()
  - i386/cpu: Introduce bitmap to cache available CPU topology levels
  - i386: Split topology types of CPUID[0x1F] from the definitions of CPUID[0xB]
  - i386/cpu: Decouple CPUID[0x1F] subleaf with specific topology level
  - i386: Introduce module level cpu topology to CPUX86State
  - i386: Support modules_per_die in X86CPUTopoInfo
  - i386: Expose module level in CPUID[0x1F]
  - i386: Support module_id in X86CPUTopoIDs
  - i386/cpu: Introduce module-id to X86CPU
  - tests: Add test case of APIC ID for module level parsing
  - hw/i386/pc: Support smp.modules for x86 PC machine
  - i386: Add cache topology info in CPUCacheInfo
  - i386/cpu: Use CPUCacheInfo.share_level to encode CPUID[4]
  - i386/cpu: Use CPUCacheInfo.share_level to encode CPUID[0x8000001D].EAX[bits 25:14]
  - i386: Add support for SUCCOR feature
  - i386/cpu: fixup number of addressable IDs for processor cores in the physical package
  - kvm: Allow kvm_arch_get/put_registers to accept Error**
  - i386/cpu: Don't enumerate the "invalid" CPU topology level
  - hw/core: Make CPU topology enumeration arch-agnostic
  - qapi/qom: Define cache enumeration and properties for machine
  - hw/core: Check smp cache topology support for machine
  - hw/core: Add a helper to check the cache topology level
  - hw/core/machine-smp: Initialize caches_bitmap before reading
  - hw/core/machine-smp: Fix error message parameter
  - i386/cpu: Extract a common fucntion to setup value of MSR_CORE_THREAD_COUNT
  - i386/cpu: Drop the variable smp_cores and smp_threads in x86_cpu_pre_plug()
  - i386/cpu: Drop cores_per_pkg in cpu_x86_cpuid()
  - i386/topology: Update the comment of x86_apicid_from_topo_ids()
  - i386/topology: Introduce helpers for various topology info of different level
  - target/i386/cpu: Consolidate the use of warn_report_once()
  - i386/cpu: Track a X86CPUTopoInfo directly in CPUX86State
  - i386/cpu: Hoist check of CPUID_EXT3_TOPOEXT against threads_per_core
  - cpu: Remove nr_cores from struct CPUState
  - i386/cpu: Set up CPUID_HT in x86_cpu_expand_features() instead of cpu_x86_cpuid()
  - i386/cpu: Set and track CPUID_EXT3_CMP_LEG in env->features[FEAT_8000_0001_ECX]
  - hw/core/machine: Reject thread level cache
  - i386/cpu: Support module level cache topology
  - i386/cpu: Update cache topology with machine's configuration
  - i386/pc: Support cache topology in -machine for PC machine
  - i386/cpu: add has_caches flag to check smp_cache configuration
  - i386/cpu: Introduce enable_cpuid_0x1f to force exposing CPUID 0x1f
  - i386/cpu: Move adjustment of CPUID_EXT_PDCM before feature_dependencies[] check
  - i386/cpu: Rename enable_cpuid_0x1f to force_cpuid_0x1f
  - i386/cpu: Refine comment of CPUID2CacheDescriptorInfo
  - i386/cpu: Add descriptor 0x49 for CPUID 0x2 encoding
  - i386/cpu: Add default cache model for Intel CPUs with level < 4
  - i386/cpu: Present same cache model in CPUID 0x2 & 0x4
  - i386/cpu: Consolidate CPUID 0x4 leaf
  - i386/cpu: Drop CPUID 0x2 specific cache info in X86CPUState
  - i386/cpu: Add x-vendor-cpuid-only-v2 option for compatibility
  - i386/cpu: Mark CPUID[0x80000005] as reserved for Intel
  - i386/cpu: Rename AMD_ENC_ASSOC to X86_ENC_ASSOC
  - i386/cpu: Fix CPUID[0x80000006] for Intel CPU
  - i386/cpu: Add legacy_intel_cache_info cache model
  - i386/cpu: Add legacy_amd_cache_info cache model
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x2
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x4
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x80000005
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x80000006
  - i386/cpu: Select legacy cache model based on vendor in CPUID 0x8000001D
  - i386/cpu: Use a unified cache_info in X86CPUState
  - i386/cpu: Introduce cache model for SierraForest
  - i386/cpu: Introduce cache model for GraniteRapids
  - i386/cpu: Introduce cache model for SapphireRapids
  - i386/cpu: Add a "x-force-cpuid-0x1f" property
  - i386/cpu: Enable 0x1f leaf for SierraForest by default
  - i386/cpu: Enable 0x1f leaf for SierraForest by default
  - i386/cpu: Enable 0x1f leaf for GraniteRapids by default
  - i386/cpu: Enable 0x1f leaf for SapphireRapids by default
  - i386/cpu: Mark EBX/ECX/EDX in CPUID 0x80000000 leaf as reserved for Intel
  - i386/cpu: Mark CPUID 0x80000007[EBX] as reserved for Intel
  - i386/cpu: Mark CPUID 0x80000008 ECX bits[0:7] & [12:15] as reserved for Intel/Zhaoxin
  - i386/cpu: Reorder CPUID leaves in cpu_x86_cpuid()
  - i386/cpu: Fix number of addressable IDs field for CPUID.01H.EBX[23:16]
  - i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]
  - i386/cpu: Honor maximum value for CPUID.8000001DH.EAX[25:14]
  - hw/core: allow parameter=1 for SMP topology on any machine
  - docs/deprecated: Remove undeprecated SMP description
  - i386/tcg: Make CPUID_HT and CPUID_EXT3_CMP_LEG supported
  - i386/hvf: Make CPUID_HT supported
  - target/i386/cpu: Move addressable ID encoding out of compat property in CPUID[0x1]
  - target/i386: add compatibility property for pdcm feature


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-77
changelog:
  - system/physmem: Fix possible double free when destroy cpu address space
  - Migration: add virtcca secure CVM live migration support
  - Migration: add virtcca secure CVM live migration support
  - virtcca migration: bugfix, meson option 'virtcca_migration' default value set to disabled
  - ub: update VFIO UB IRQ index enum definitions
  - ub: add VFIO_UB_REINIT_IRQ_INDEX for reinit interrupt support
  - ub: return error code to vm
  - ub: fix passthrough errno to vm
  - ub: reinit irq set failed don't stop vm
  - migration/cgs: fix some function name spell error
  - migration/cgs: Fix mismatched allocator in write_numa_info_to_sysfs
  - ub: fix fill_rq_cq not checking fill_cq return value
  - ub: fix ub cq depth
  - ub: pass ub feature to guest os
  - migration/cgs: bugfix, adding poison ignore CONFIG_VIRTCCA_MIGRATION when building non-aarch64 target to avoid error


author: Jingwiw <wangjingwei@iscas.ac.cn> - 5.2.0+git6.3-1
changelog:
  - Init package from openSUSE: https://build.opensuse.org/package/show/home:neochapay:nemo:mw/qt5-qtfeedback


author: panchenbo <panchenbo@kylinsec.com.cn> - 5.15.10-5
changelog:
  - Backport ffmpeg: avcodec/x86/mathops: clip constants used with shift instructions within inline assembly


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: andy <liuyang01@kylinos.cn> - 0.8.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patches
         Use the right dev_t decoding for diskerror handler


author: Yafen Fang <yafen@iscas.ac.cn> - 6.6.0-53.0.0.6
changelog:
  - update kernel version to openEuler 6.6.0-53.0.0
  - update Raspberry Pi patch, last commit (ff0fe12ab875d587348b6f2b9e73ae928049ebee): dtoverlay: Add a dtoverlay for pwm-gpio
  - fix: initial output, then the screen goes black
  - add support for RPi 5


author: Yafen Fang <yafen@iscas.ac.cn> - 6.6.0-84.0.0.12
changelog:
  - update kernel version to openEuler 6.6.0-84.0.0
  - update Raspberry Pi patch, last commit (f1076a9d7a269d72b6707283560d0d38203cb07a): delete the comment


author: shixuantong <shixuantong1@huawei.com> - 8.2-4
changelog:
  - Add shell command to switch bracketed-paste mode from on to off to keep consistent with realine-8.0


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: zhouyihang <zhouyihang3@h-partners.com> - 0.9.1-4
changelog:
  - Type:requirements
  - Id:NA
  - SUG:NA
  - DESC:use libsoup2 instead of libsoup3 for build when no libsoup3 provided


author: sunsuwan <sunsuwan3@huawei.com> - 1.2.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add a user directory when the rpc user directory does not exist


author: wangyueliang <wangyueliang@kylinos.cn> - 2022.16-4
changelog:
  - merge feature from branch openEuler-22.03-LTS-SP1：
  - DESC: add loongarch64 and sw_64 support
  - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn>


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.18-5
changelog:
  - revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: zhangyaqi <zhangyaqi@kylinos.cn> - 8.2312.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak in omazureeventhubs on accepted PN_DELIVERY event


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2312.0-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix passing the value to EscapeChar
         Do not free the uninitialized cstring
         Keep original free pattern
         network subsystem: improve connection failure error message
         Fix runConf NULL pointer refence
         rainerscript: do not try to call a function if it does not exist
         nsd_ptcp regression fix: remove debugging messages emited to stderr
         Fix legacy $ActionQueueDiscardMark parameter


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 8.2312.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:gnutls bugfix: Avoid blocking sockets during TLS handshake
         gnutls bugfix: Add timeout to GnuTLS handshake
         core: fix potential NULL ptr access on HUP in very early startup phase
         omfwd: fix segfault in UDP freeaddrinfo
         gnutls TLS driver: fix small memory leak
         rsyslog startup bugfix: cosmetic memory leak
         core: fix potential misadressing in sigmask
         covscan: remove defect type of RESOURCE_LEAK
         Fix a buffer overflow when the argument to replace is empty


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 8.2312.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:omusrmsg bugfix: potential null pointer dereference causes segfault
         omusrmsg bugfix: potential double free, which can cause segfault
         imjournal: fix double sd_journal_close() during thread cancellation
         imuxsock: Add statistics counter for discarded messages
         omjournal: Fix priority value
         fix stringop-overread warning in omusrmsg
         fix hashtable realloc memset range
         fix off-by-one buffer overflow


author: qujingling <qujingling@huawei.com> - 8.2312.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:imjournal: initialize instance fields to avoid invalid free
         imjournal: fix vulnerability in state file creation


author: woody2918 <wudi1@uniontech.com> - 1.15.0-1
changelog:
  - Upgrade to 1.15.0
  - Update reference to MiniTest -> Minitest
  - Add test (and fix support for) for Rack v2.1.x.


author: Ge Wang <wang__ge@126.com> - 0.19.1-1
changelog:
  - update to version 0.19.1
  - No more warnings triggered by enable_for_subprocesses.
  - Avoid trying to patch Process.fork when it isn't available.
  - Dropped support for Ruby 2.4, it reached EOL


author: ouyangminxiang <ouyangminxiang@kylinsec.com.cn> - 1.1.0-2
changelog:
  - add BuildRequires: rubygem-bigdecimal rubygem-io-console rubygem-openssl rubygem-psych 
    to resolve koji build error during check


author: liyanan <liyanan61@h-partners.com> - 1.4.0-1
changelog:
  - Update to 1.4.0
  - Faraday adapter exceptions namespace compatibility with Faraday v1
  - Add global config option `Typhoeus::Config.proxy`
  - Add cache adapters for Dails,Rails, and Redis


author: xiefangqi <xiefangqi2@huawei.com> - 0.1.92.6
changelog:
  - Fix split_digits support to SentencepieceTrainer spec parser
  - Add sentencepiece.pc install
  - Add spm_train --help option
  - Fix FTBFS problem on armel/mips/powerpc/m68k/sh4
  - Fix endian problem on android plarform
  - Fix pb protobuf header file can't find problem
  - Restore the sentence boundary


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 2:4.14.3-1
changelog:
  - update version to 4.14.3
    -Avoid null pointer dereference
    -Update utmp at an initial login
    -Merge libshadow and libmisc into a single libshadow
    -Adding the userdel and groupdel hooks to release tarball


author: yueyuankun <yueyuankun@kylinos.cn> - 15.7-21
changelog:
  - spec: Remove debugsource requirement from debuginfo
  - Allow debuginfo to be installed alone without pulling in the debugsource package.


author: wjiang <app@cameyan.com> -15.7-22
changelog:
  - Backport bugfix patches from upstream
  - Fix build with binutils 2.46 (c4665d2)
  - Fix memory leak on TPM log error in mirror_one_mok_variable (92630f2)


author: Keqian Zhu <zhukeqian1@huawei.com> - 1.0.0-4
changelog:
  - guestinfo: Take another VM stop reason to account
  - cpu_qos: Add aditional setting for cpu QOS
  - cachembw_qos: Add a job to sync VM pids to resctrl


author: Dongxu Sun <sundongxu3@huawei.com> - 1.0.0-6
changelog:
  - cpu_qos: Register reset_domain_bandwidth as exit func after adding power_qos job
  - power_qos/cachembw_qos: Add type check for environment variables


author: Dongxu Sun <sundongxu3@huawei.com> - 1.0.0-7
changelog:
  - docs-Use-chinese-description-instead-of-English-in-R.patch
  - Makefile-Use-strip-option-in-gcc.patch


author: liuqingtao <liu.qingtao2@zte.com.cn> -1.1.10-3
changelog:
  - optimized-RV-FindMatchLength-improving-compress-speed--upstream-accepted
  - DESC:Use-high-performance-FindMatchLength-to-Optimize for RV


author: zhengziyang <zheng.ziyang@zte.com.cn> -1.1.10-5
changelog:
  - backport：add rvv support for MemCopy64，upstream accepted
  - DESC:This PR add RVV to  optimize Memcopy64 function , improving compression speed


author: zhengziyang <zheng.ziyang@zte.com.cn> -1.1.10-6
changelog:
  - backport：gate__builtin_ctzll-behind-Zbb-to-avoid-10
  - DESC:RISC-V: use __builtin_ctzll only when Zbb is present


author: yaqiangchen <chenyaqiang@huawei.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: Dingli Zhang <dingli@iscas.ac.cn> - 1.1.10-2
changelog:
  - Fix errors due to wrong path in sqljet-build.xml
  - Add -Xconversiontimeout to avoid timeout errors for riscv64.


author: xinghe <xingheyd@163.com> - 7:6.6-8
changelog:
  - Type:cves
  - ID:CVE-2026-33526 CVE-2026-33515 CVE-2026-32748
  - SUG:NA
  - DESC:fix CVE-2026-33526 CVE-2026-33515 CVE-2026-32748


author: chenyanpanHW <chenyanpan@huawei.com> - 1.7.7-12
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-fix-maven-compiler-plugin-release-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 1.9.15p5-7
changelog:
  - apply 2 patches: backport-sudo_rfc1938_setup--fix-out-of-bounds-read-if-the-.patch, backport-sudo_auth_init--Fix-setting-FLAG_ONEANDONLY-if-onl.patch


author: renoseven<dev@renoseven.net> - 1.2.2-4
changelog:
  - bugfix: fix rust 1.84 compile failure
  - bugfix: fix cannot find working directory
  - bugfix: fix set signal handler failure
  - bugfix: fix active accepted patch failure


author: renoseven<dev@renoseven.net> - 1.2.2-5
changelog:
  - feature: support riscv64
  - feature: support 'syscare rescan' command
  - feature: support patch blacklist / blocklist
  - feature: support custom kernel config
  - feature: support log config
  - feature: add metadata viewer
  - feature: add metadata generator
  - bugfix: supress rpm signature warnings
  - bugfix: remove build id check
  - bugfix: ignore useless sections
  - bugfix: fix attach non-exist process failure
  - bugfix: fix remote mmap failure
  - bugfix: fix some symbol resolving issue
  - bugfix: remove upatch failure process list
  - bugfix: remove root permission check


author: renoseven<dev@renoseven.net> - 1.2.2-6
changelog:
  - feature: upatch supports overridding line macros
  - bugfix: fix upatch id parsing error
  - bugfix: fix upatch object linker detection failure
  - bugfix: fix kernel module build failure
  - bugfix: fix kernel patch name length limitation
  - bugfix: fix multiple upatch-diff issues
  - bugfix: fix multiple upatch-manage issues
  - rpm: extract vendor from syscare-1.2.2.tar.gz to vendor.tar.gz


author: renoseven<dev@renoseven.net> - 1.2.2-7
changelog:
  - change: add debuginfo package version verification in syscare-build
  - change: rename "--keep-line-macros" to "--override-line-macros" in syscare-build
  - change: rename "--keep-line-macros" to "--override-line-macros" in upatch-build
  - bugfix: fix special section correlation failure
  - bugfix: fix compilation command misdetection
  - bugfix: fix incorrect upatch object lookup when upatch ID conflicts
  - bugfix: fix patch file disorder when building cumulative patches
  - bugfix: fix abnormal syscare CLI return value when external command failure
  - bugfix: fix stack check false warnings under boundary conditions
  - bugfix: fix build failure under Rust 1.89


author: zhangxianting <zhangxianting@uniontech.com> - 0.9-64
changelog:
  - Type:patch
  - CVE:NA
  - SUG:NA
  - DESC:patch hunk FAILED bacause of the arch judgement of sw_64 and loongarch64


author: laokz <zhangkai@iscas.ac.cn> - 0.9-67
changelog:
  - Type:fix
  - CVE:NA
  - SUG:NA
  - DESC:riscv64: reverse -static-pie patch due to unsupported tool-chains


author: wjiang <app@cameyan.com> - 255-52
changelog:
  - backport community patches and skip bios_version test:
        backport-login-user-runtime-dir-free-ignored-sd_bus_error-avo.patch
        backport-login-user-runtime-dir-use-STRLEN-where-appropriate.patch
        backport-systemctl-gracefully-adjust-bus-transport-and-runtim.patch
        backport-journal-do-not-rotate-journal-when-MaxRetentionSec-i.patch
        backport-nspawn-use-strv_extend-and-friends-to-build-director.patch
        backport-nspawn-only-remount-usr-with-idmap-when-volatile-yes.patch
        backport-nspawn-mount-var-after-remount_idmap-when-volatile-s.patch
        backport-compress-avoid-a-bunch-of-div-by-zeroes.patch


author: Linux_zhang <244695981@qq.com> - 255-53
changelog:
  - sync community patches
    backport-journal-use-EBADMSG-for-invalid-data-in-file-mmap.patch
    backport-journal-replace-a-bunch-of-assert-with-friendlier-ch.patch


author: wulinfeng <wulinfeng@xfusion.com> - 255-55
changelog:
  - fix coredump generation when systemd-resolved and systemd-networkd service is started then uninstalled


author: langfei<langfei@huawei.com> - 4.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Resolve stap-exporter.service chenge to disable when upgraded systemtap-stap-exporter package


author: langfei<langfei@huawei.com> - 4.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix some test cases fail to be executed, Resolve the sc2168 warning detected by the shellcheck tool.


author: liuchao <liuchao173@huawei.com> - 5.0-1
changelog:
  - Upgrade to 5.0:
    - Performance improvements in uprobe registration and module startup.
    - More probe point process details are printed in "-L" list mode with more "-v".
    - For the case where newer kernels may break systemtap runtime APIs, better pass-4 failure diagnostics are printed.
    - Tapset function print_ubacktrace_fileline() now understands DWARF5.
    - The target(s) of process probes may be specified by path name globs,  as located selected debuginfod servers.
    - The kernel-user message transport system added framing codes, making the transport more reliable, but becoming incompatible across pre-5.0 versions. Use matching versions of stap and staprun.
    - The testsuite Makefile has been simplified to remove concurrency, so "parallel" and "resume" modes are gone.
    - New runtime macro STP_TIMING_NSECS is now supported for reporting probe timing stats in nsecs instead of cycles.  This may become default later.
    - Add new runtime macro STP_FORCE_STDOUT_TTY to override STP_STDOUT_NOT_ATTY.


author: Funda Wang <fundawang@yeah.net> - 0.8.2-15
changelog:
  - move glib schemas into main package
  - drop static lib as it was not used by any other packages
  - drop uselss scriptlets as they are handled by rpm file trigger already


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-81
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix telnet crashes on stack overflow due to infinite recursion.


author: chenyanpanHW <chenyanpan@huawei.com> - 5.0-15
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/texi2html-5.0-Do-not-install-Unicode-EastAsianWidth-if-external-is.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/texi2html-5.0-Do-not-install-libintl-perl-if-external-is-used.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Guoshuai Sun <sunguoshuai@huawe.com> - 8:2018-24
changelog:
  - Drop texlive-venturisadf texlive-wsuipa texlive-vntex, because those packages
    use utopia license may not be free for anyone


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: updmap-map, wasy2-ps
  - Add texlive-vntex back, because texlive#I29Y5F is false. See the
  - first paragraph of https://tug.org/fonts/utopia/LICENSE-utopia.txt


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: tkz-linknodes, tkz-kiviat
  - tkz-doc-doc


author: xu_ping <707078654@qq.com> - 9:2021-3
changelog:
  - License compliance rectification.
  - remove package texlive-cm-unicode-doc due to license Non-compliance.


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: einfuehrung-doc, einfuehrung2-doc


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: ifetex, ifluatex, ifxetex,
  - hyperxmp


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: latex-bib-ex-doc, latex-bib2-ex.doc,
  - latex-referenz, latex-tabellen, latex-tds, ltxindex


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: math-e-doc, mbenotes
  - mathalfa was renamed to mathalpha


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: presentations, pst-spirograph,
  - pst-vue3d, psu-thesis


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: texlive-docindex, tabulars-e-doc


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com>- 0.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "cc:No such file or directroy" error message is displayed during compilation.Therefore,add buildrequires gcc.
         The macro unitdir is used.Therefore,add buildrequires systemd


author: yaoxin <1024769339@qq.com> - 1:9.0.117-1
changelog:
  - Update to 9.0.117 for fix CVEs: CVE-2026-24880, CVE-2026-25854,
    CVE-2026-29129, CVE-2026-29145, CVE-2026-29146, CVE-2026-32990,
    CVE-2026-34483, CVE-2026-34486, CVE-2026-34487, CVE-2026-34500


author: yaoxin <1024769339@qq.com> - 1:9.0.118-1
changelog:
  - Update to 9.0.118 for fix CVEs: CVE-2026-41284, CVE-2026-41293,
    CVE-2026-42498, CVE-2026-43512, CVE-2026-43513, CVE-2026-43514,
    CVE-2026-43515
  - Fix tomcat-jsvc stop failed


author: chench <chench@hygon.cn> - 4.0.1-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add SM4 algorithm support
    - Add support for udev to create tcm devices
    - add ecc encrypt/decrypt support
    - add bootstrap file from upstream


author: lizhuo <lizhuo@xfusion.com> - 4.0.1-6
changelog:
  - FAPI: Fix missing scanf checks.
    In several cases the return value of scanf was not checked.
    Thus afterwards acces to variables not initialized was possible.


author: lizhuo <lizhuo@xfusion.com> - 4.0.1-7
changelog:
  - FAPI: TCTI Device: Fix using of C string for byte array.
    On arch linux gcc did produce an error because a null terminator
    was added.


author: liuchao <liuchao173@huawei.com> - 2.21.0-1
changelog:
  - upgrade to 2.21.0:
    - api: fixed stop method not to require any parameter
    - plugin_scheduler: fix perf fd leaks
    - allow skipping rollback when restarting TuneD or switching profile
    - function_calc_isolated_cores: no errors for offline CPUs
    - sap-hana: new profile sap-hana-kvm-guest
    - serialized SIGHUP handler to prevent possible bootcmdline corruption
    - fixed possible traceback on SIGHUP
    - updated manual pages to be consistent
    - tuned-adm: better error message for unauthorized switch_profile
    - plugin_sysctl: report reapplied sysctls only on different values
    - plugin_cpu: added support for pm_qos_resume_latency_us
    - plugin_cpu: added support for intel_pstate scaling driver
    - plugin_scheduler: do not leak FDs from the perf
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
    - throughput-performance: set net.core.somaxconn to at least 2048
    - API: added support for moving devices between instances
    - added support for the API access through the Unix Domain Socket
    - D-Bus: send tracebacks through D-Bus only in debug mode
    - Makefile: added fix for python-3.12
    - do not exit on duplicate config lines


author: ZhaoYu Jiang <jiangzhaoyu@kylinos.cn> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)
    - tuned-ppd: fixed controller init to correctly set_on_battery


author: tianmuyang <tianmuyang@huawei.com> - 2.24.1-4
changelog:
  - profiles: add programmable scheduling based on eBPF
  - package:  change package tuned to architecture-dependent


author: langfei <langfei@huawei.com> - 2024a-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees;
  -	No need for America/Coyhaique in zonenow.tab.


author: Liu Chao <liuchao173@huawei.com> - 2024a-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Moldova has used EU transition times since 2022
  	Most of BC moves from PDT to Pacific Time on 03-09
  	Delay America/Vancouver tm_isdst transition


author: renmingshuai <renmingshuai@huawei.com> - 4.4.2-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add a test case for PXE to support ipv6
         support lease time config for ipv6


author: gongzhengtang <gong_zhengtang@163.com> - 1.0.0-1
changelog:
  - Refactored KO loading to enforce a common-first-then-specific module
  - order across categories, treating missing modules as non-fatal warnings
  - while failing the service on actual load errors.


changelog: - Add virt-optimizer subpackage and make ubs-virt a meta package
author:
  l30067380 [l30067380@users.noreply.gitcode.com](mailto:l30067380@users.noreply.gitcode.com) - 1.0.0-3


author: luyizhou <luyizhou1@huawei.com> - 26.06.0-B002
changelog:
  -urma: add Bazel build support.
  -urpc: enhance ums agent security proxy.
  -urpc: umq shared flow-control jfr.
  -urma: enhance bonding multi-path.


author: luyizhou <luyizhou1@huawei.com> - 26.06.0-B003
changelog:
  -urma: support get jfce fd list by usr ctl.
  -urma: add register log API and refactor user dfx.
  -urma: fix bonding dev context, jetty import and bondp_import_jetty mem leak.
  -urma: add bondp_create_jfc/jfr extended interface and port validation.
  -urma: fix bazel compile and rename liburma-udma.so output.
  -urpc: fetch umdk headers from gitcode when build.
  -umq: update imm data to 64bit and support ctp.
  -umq: improve buffer rollback, batch size, jfr/jfc port and IMM handling.
  -ums: implement secure UB token exchange via ums_agent.
  -ums: add netlink token exchange framework and agent fixes.
  -ums: improve token proxy and TLS connection handling.
  -dlock: fix peer_type, header len, batch lock and SSL buffer issues.
  -cam: fix mask calculation error in combine.
  -ub: udma support st64b_en function.
  -umdk: add umdk main package.


author: wangxin <wangxin554@huawei.com> - 26.06.0-B004
changelog:
  -urma: performance optimization post wr
  -umq: alloc a id for umq
  -urma: add main_ue_eid admin command support
  -ums: remove auto-learn mode and enforce strict identity verification
  -umq: support register ext_func for log
  -urma: topology supports parallel planes
  -urma: allow disabling of msn deduplication


author: liuchao <liuchao173@huawei.com> - 1.90.2-1
changelog:
  - Update to 1.90.2:
    - Fix wireless devices not disappearing from Settings when disconnected
    - Require a newer libgudev to avoid bugs related to newline stripping when reading sysfs attributes
    - Add installed-tests files for use with gnome-desktop-testing
    - Fix integration test to work with system installed upower binary and under jhbuild
    - Detect headsets with kernel batteries such as Logitech and Steelseries headsets, and make them automatically disappear if the headset is turned off (if the kernel driver supports the wireless_status attribute)
    - Hide duplicate Logitech Bluetooth devices (Bolt-compatible devices connected through Bluetooth would show as 2 batteries)
    - Hide duplicate Logitech wireless devices when they get connected through USB as well
    - Fix Bluetooth device names not synchronising, and use user-chosen names when available
    - Handle the "present" sysfs attribute changing
    - Fix iDevices not appearing
    - Fix reading capacity_level with newer libgudev
    - Fix OpenBSD backend
    - Refactor internal battery handling into separate classes
    - Guess charging/discharging state based on energy rate (#196)
    - Fix polling after resume (#198)
    - Fix battery state guessing (#146)
    - Reload history when battery ID changes
    - Test fixes
    - Move state guessing into DisplayDevice
    - Always use 90% threshold to consider a battery full
    - Various test improvements
    - Fix mice showing up as keyboards (#189)
    - Allow unit test inspector to fail (#187)
    - Fix test cases when daemon shuts down too slowly (#188)
    - Remove broken wakeup DBus API
    - Tag UPS hid devices using hwdb and update list from upstream
    - Only permit Refresh method when in debug mode
    - Refactor device polling
    - Refactor udev device discovery and sibling detection
    - Improved testing and CI
    - Handle SIGTERM to trigger a clean shutdown
    - Improve polling of batteries after line-power "online" status change
    - Multiple wacom tablet detection fixes
    - Fix updates after a BT hid power supply moves in sysfs
    - Fix enumeration of "Whats Up!" devices on startup
    - Accept USB power supplies without warning
    - Allow building without gtk-doc


author: yaoxin <1024769339@qq.com> - 0.9.9-1
changelog:
  - Update to 0.9.9:
    * Changed: Require CMake >=3.10.0
    * Fixed: Dissolve undefined behavior in parsing of URIs
    * Fixed: Normalized percent-encoded octets should have uppercase letters
      in the host
    * Fixed: Fix macros URI_VER_SUFFIX_UNICODE and URI_VER_UNICODE
    * Improved: CMake: Compile with -std=c90 by default
    * Improved: Convert remaining DOS (CR/LF) newlines to Unix newlines


author: zhanghongtao <zhanghongtao22@huawei.com> - 017-1
changelog:
  - update package to usbutils-017
  - lsusb: add fallback names for 'lsusb -v' output
  - Honor system libdir and includedir
  - usbutils: lsusb-t: print entries for devices with no interfaces
  - lsusb -t: sort in bus order, not reverse order
  - susb-t: if a driver is not bound to an interface, report "[none]"
  - Generate usbutils.pc pkgconfig file
  - usbreset: Allow idProduct and idVendor to be 0
  - susb: Add function that sorts the output by device ID.
  - lsusb: Additional sorting by bus number.
  - lsusb: This is a more compact implementation of the device list sort implemented within this pull request. The output remains the same as the one demonstrated in the previous commit.


author: liuchao <liuchao173@huawei.com> - 0.14.0-1
changelog:
  - upgrade to 0.14.0:
    - Fix: urcu-bp: only teardown call-rcu worker in destructor
    - Fix: rculfhash: urcu_die() takes positive error value
    - Fix: call_rcu: teardown default call_rcu worker on application exit
    - Fix: join worker thread in call_rcu_data_free
    - Docs: clarify grace period polling API
    - Document grace period polling in rcu-api.md
    - Implement poll rcu stress test in rcutorture
    - urcu-memb,mb,signal: Implement grace period polling
    - Fix: auto-resize hash table destroy deadlock
    - Fix building on MSYS2
    - rculfhash: Include rculfhash-internal.h from local directory
    - Remove "Darwin" from "should also work on list"
    - Merge branch 'adah1972-improve-md'
    - Add semicolons at the end of function prototypes
    - Wrap a file name in backticks
    - Wrap command-line options in backticks
    - Fix a wrong format
    - Wrap URLs in angle brackets
    - Fix Markdown issues
    - Fix: Always check pthread_create for failures
    - Disable signals in URCU background threads
    - Fix: futex.h: include headers outside extern C
    - Fix: add missing unused attribute to _rcu_dereference
    - Fix: change method used by _rcu_dereference to strip type constness
    - Fix: remove type constness in URCU_FORCE_CAST's C++ version
    - Move extern "C" down in include/urcu/urcu-bp.h
    - fix: ifdef linux specific cpu count compat
    - Add unit tests for possible_cpus_array_len
    - fix: sysconf(_SC_NPROCESSORS_CONF) can be less than max cpu id
    - Fix: revise obsolete command in README.md
    - Fix: workqueue: remove unused variable "ret"
    - Fix: urcu-qsbr: futex wait: handle spurious futex wakeups
    - Fix: urcu: futex wait: handle spurious futex wakeups
    - Fix: urcu-wait: futex wait: handle spurious futex wakeups
    - Fix: defer_rcu: futex wait: handle spurious futex wakeups
    - Fix: call_rcu: futex wait: handle spurious futex wakeups
    - Fix: workqueue: futex wait: handle spurious futex wakeups
    - Fix: Use %lu rather than %ld to print count
    - Update ABI definition files
    - Bump version current and age
    - alpha: allocate membarrier system call number
    - Bump version to 0.14.0-pre
    - Improved test framework
    - rculfhash: introduce cds_lfht_node_init_deleted
    - Fix: changelog: v0.13.0 was released in 2021
    - cleanup: i386 arch detection
    - fix: properly detect 'cmpxchg' on x86-32
    - fix: use urcu-tls compat with c++ compiler
    - Fix typo
    - fix: remove autoconf features default value in help message
    - fix: add missing pkgconfig file for memb flavour lib
    - Cleanup: Tests: Remove useless pre-C99 compatibility code from tap.h
    - Document C99 and C++11 requirement in README.md
    - Always use '__thread' for Thread local storage except on MSVC
    - Fix: powerpc32: transparent unions alter calling convention
    - fix: don't use C++ thread_local on MacOs
    - wfcqueue API: implement overloaded wrappers with templates
    - wfcqueue: combine C++ API cds_wfcq_head_cast with overloading
    - wfstack C++ API: implement overloaded wrappers with templates
    - lfstack C++ API: implement overloaded wrappers with templates
    - wfstack: combine C++ API cds_wfs_stack_cast with overloading
    - lfstack: combine C++ API cds_lfs_stack_cast with overloading
    - fix: test_build tap plan
    - Test C++ build of list head init
    - Fix order of initializers in CDS_LIST_HEAD_INIT
    - unit tests: test wfcqueue, wfstack, lfstack empty check functions in C++
    - wfcqueue: implement C++ API based on function overloading
    - wfstack: implement C++ API based on function overloading
    - lfstack: implement C++ API based on function overloading
    - Fix tap.h: remove extra semicolon in pass/fail macros
    - Add C++ build tests
    - Build and run regression and unit tests as C++ programs
    - Add --enable-Werror configure switch
    - Add `urcu_posix_assert()` as `assert()` replacement
    - Rename `urcu_assert()` to `urcu_assert_debug()`
    - cleanup: spelling fixes in comments
    - Make temporary variable in _rcu_dereference non-const
    - (tls-ie2) Fix: x86 and s390: uatomic __hp() macro C++ support
    - Fix: x86 and s390: uatomic __hp() macro clang support
    - Fix: x86 and s390 uatomic: __hp() macro warning with gcc 11


author: yueyuankun <yueyuankun@kylinos.cn> - 0.14.0-3
changelog:
  - Type: compile
  - ID: NA
  - SUG: NA
  - DESC: Fix compilation errors in loongarch architecture
          Replace setup with autosetup


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-7
changelog:
  - tests: testdriver: Add filesystem socket example
  - cli: Drop unnecessary --disk prop aliases
  - fsdetails: Fix an error with source.socket of virtiofs
  - tests: cli: Fix test output after previous commit
  - cli: --disk: Add driver.metadata_cache options


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-8
changelog:
  - diskbackend: Drop support for sheepdog
  - cli: support --boot loader.stateless=
  - virt-install: Reuse cli.fail_conflicting
  - virt-install: --unattended and --cloud-init conflict
  - cloner: Sync and system uuid
  - virt-install: --help required options are wrong
  - cli: --cpu: Add maxphysaddr.{mode,bits} options
  - tests: Add a compat check for linux2020 in amd-sev test case
  - virtinstall: fix regression with --boot and no install method
  - virtinstall: split no_install conditional apart to track code coverage


author: chenzheng<chenzheng71@huawei.com> - 0.1.8-1
changelog:
  - Type:bugfix
  - DESC:fix compile error and change sealing key interface parameter for avoid ambiguity


author: lutong <lutong14@huawei.com> - 1.1-9
changelog:
  - bugfix:fixed display error caused by missing signal_exits & revert change method of getting domain id


author: John W. Linville <linville@redhat.com> - 2019.06.03-5
changelog:
  - Remove patch preventing install of regulatory.bin.5 man page
  - Include regulatory.bin.5 man page in distributed files


author: zhengziyang <zheng.ziyang@zte.com.cn> - 0.164-4.20231001git31e19f92_bootstrap
changelog:
  - riscv64:Add RVV-optimized weight functions for motion compensation. These functions improve weighted prediction performance.


author: liliguang <liliguang@baidu.com> - 1.4.30-1
changelog:
  - update to 1.4.30
  - Fix compiler warnings in testsuite when building on AIX.
  - The API docs still said DatabaseError was thrown for operations on a closed
    database, but since 1.4.10 we throw its subclass DatabaseClosedError instead.


author: mahailiang <mahailiang@uniontech.com> - 1.1.3-6
changelog:
  - xdg-email: Support for Deepin
  - Restore matching of older deepin names
  - Add new case for Deepin while detecting DE


author: Funda Wang <fundawang@yeah.net> - 1.2.42-1
changelog:
  - update to 1.2.42
  - disable md5 and ripemd160 per upstream
  - disable gcrypt backend per upstream
    (https://github.com/lsh123/xmlsec/pull/848)


author: Funda Wang <fundawang@yeah.net> - 1.20.11-37
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


author: Wang Kui <wangkui35@h-partners.com> - 1.20.11-41
changelog:
  - Fix CVE-2025-49176 CVE-2025-49179 CVE-2025-49180 CVE-2022-49737
    CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


author: lingsheng <ultra_planet@qq.com> - 1.20.11-42
changelog:
  - fix CVE-2022-49737 CVE-2025-49175 CVE-2025-49176 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


author: xingwei <xingwei14@h-partners.com> - 4.2.3-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add haveged requires and optimize random number function replacement patch


author: yanglu <yanglu72@huawei.com> - 4.1-6
changelog:
  - DESC:delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.5-nfsnobody2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.13-ypxfr-zeroresp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.13-nonedomain.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.19-slp-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-4.0-manfix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.24-aliases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.27-confpost.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-2.31-netgrprecur.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-4.0-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ypserv-4.0-selinux-context.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  ,and delete BuildRequires git


author: yuanchao <1050706328@qq.com> - 0.13.72-4
changelog:
  - backport:disable zzip_use_file_header_zip64_offset,and fix wrong format in changelog,to support clang build


