# changelog

author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-85.0.0.90
changelog:
  - !15705  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - !15704  perf/core: Add RCU read lock protection to perf_iterate_ctx()
  - perf/core: Add RCU read lock protection to perf_iterate_ctx()
  - !15672  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - !15621  misc: fastrpc: Fix copy buffer page size
  - misc: fastrpc: Fix copy buffer page size
  - !15620  s390/ism: add release function for struct device
  - s390/ism: add release function for struct device
  - !15622  Fix UAF in acct(2)
  - acct: block access to kernel internal filesystems
  - acct: perform last write from workqueue
  - !15488  CVE-2025-21816
  - hrtimer: Fix kabi broken of struct hrtimer_cpu_base
  - hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
  - !15706 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.78-6.6.79 LTS Patches
  - kbuild: hdrcheck: fix cross build with clang
  - HID: hid-steam: Fix use-after-free when detaching device
  - Revert "vfio/platform: check the bounds of read/write syscalls"
  - x86/i8253: Disable PIT timer 0 when not in use
  - vsock: Orphan socket after transport release
  - vsock: Keep the binding until socket destruction
  - io_uring/kbuf: reallocate buf lists on upgrade
  - HID: hid-steam: Don't use cancel_delayed_work_sync in IRQ context
  - alpha: replace hardcoded stack offsets with autogenerated ones
  - mm: gup: fix infinite loop within __get_longterm_locked
  - arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented
  - md/md-bitmap: move bitmap_{start, end}write to md upper layer
  - md: add a new callback pers->bitmap_sector()
  - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()
  - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write()
  - selftests: rtnetlink: update netdevsim ipsec output format
  - netdevsim: print human readable IP address
  - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0
  - drm/v3d: Stop active perfmon if it is being destroyed
  - drm/rcar-du: dsi: Fix PHY lock bit check
  - drm/tidss: Clear the interrupt status for interrupts being disabled
  - drm/tidss: Fix issue in irq handling causing irq-flood issue
  - ipv6: mcast: add RCU protection to mld_newpack()
  - ipv6: mcast: extend RCU protection in igmp6_send()
  - ndisc: extend RCU protection in ndisc_send_skb()
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
  - arp: use RCU protection in arp_xmit()
  - neighbour: use RCU protection in __neigh_notify()
  - neighbour: delete redundant judgment statements
  - ndisc: use RCU protection in ndisc_alloc_skb()
  - HID: hid-steam: Move hidraw input (un)registering to work
  - HID: hid-steam: Make sure rumble work is canceled on removal
  - HID: hid-steam: Add Deck IMU support
  - HID: hid-steam: Fix cleanup in probe()
  - HID: hid-steam: remove pointless error message
  - HID: hid-steam: Add gamepad-only mode switched to by holding options
  - HID: hid-steam: Update list of identifiers from SDL
  - HID: hid-steam: Clean up locking
  - HID: hid-steam: Disable watchdog instead of using a heartbeat
  - HID: hid-steam: Avoid overwriting smoothing parameter
  - ipv6: icmp: convert to dev_net_rcu()
  - ipv6: use RCU protection in ip6_default_advmss()
  - flow_dissector: use RCU protection to fetch dev_net()
  - ipv4: icmp: convert to dev_net_rcu()
  - ipv4: use RCU protection in __ip_rt_update_pmtu()
  - net: ipv4: Cache pmtu for all packet paths if multipath enabled
  - ipv4: use RCU protection in inet_select_addr()
  - ipv4: use RCU protection in rt_is_expired()
  - ipv4: use RCU protection in ipv4_default_advmss()
  - net: add dev_net_rcu() helper
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
  - ipv4: add RCU protection to ip4_dst_hoplimit()
  - btrfs: fix hole expansion when writing at an offset beyond EOF
  - mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw()
  - igc: Set buffer type for empty frames in igc_init_empty_frame
  - mmc: mtk-sd: Fix register settings for hs400(es) mode
  - arm64: Handle .ARM.attributes section in linker scripts
  - regmap-irq: Add missing kfree()
  - regulator: qcom_smd: Add l2, l5 sub-node to mp5496 regulator
  - partitions: mac: fix handling of bogus partition table
  - gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock
  - gpiolib: acpi: Add a quirk for Acer Nitro ANV14
  - alpha: align stack for page fault and user unaligned trap handlers
  - serial: 8250: Fix fifo underflow on flush
  - efi: Avoid cold plugged memory for placing the kernel
  - kbuild: userprogs: fix bitsize and target detection on clang
  - wifi: ath12k: fix handling of 6 GHz rules
  - alpha: make stack 16-byte aligned (most cases)
  - can: etas_es58x: fix potential NULL pointer dereference on udev->serial
  - can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero
  - can: c_can: fix unbalanced runtime PM disable in error path
  - can: ctucanfd: handle skb allocation failure
  - USB: serial: option: drop MeiG Smart defines
  - USB: serial: option: fix Telit Cinterion FN990A name
  - USB: serial: option: add Telit Cinterion FN990B compositions
  - USB: serial: option: add MeiG Smart SLM828
  - usb: cdc-acm: Fix handling of oversized fragments
  - USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
  - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
  - USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
  - USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
  - usb: core: fix pipe creation for get_bMaxPacketSize0
  - USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
  - usb: dwc2: gadget: remove of_node reference upon udc_stop
  - usb: gadget: udc: renesas_usb3: Fix compiler warning
  - usb: roles: set switch registered flag early on
  - usb: dwc3: Fix timeout issue during controller enter/exit from halt state
  - usb: gadget: f_midi: Fixing wMaxPacketSize exceeded issue during MIDI bind retries
  - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting
  - KVM: nSVM: Enter guest mode before initializing nested NPT MMU
  - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
  - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
  - batman-adv: Drop unmanaged ELP metric worker
  - batman-adv: Ignore neighbor throughput metrics in error case
  - batman-adv: fix panic during interface removal
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
  - ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V
  - selftests: gpio: gpio-sim: Fix missing chip disablements
  - Grab mm lock before grabbing pt lock
  - vfio/pci: Enable iowrite64 and ioread64 for vfio pci
  - rtla/timerlat_top: Abort event processing on second signal
  - rtla/timerlat_hist: Abort event processing on second signal
  - scsi: ufs: bsg: Set bsg_queue to NULL after removal
  - PCI: switchtec: Add Microchip PCI100X device IDs
  - PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P
  - media: uvcvideo: Add Kurokesu C1 PRO camera
  - media: uvcvideo: Add new quirk definition for the Sonix Technology Co. 292a camera
  - media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
  - media: i2c: ds90ub953: Add error handling for i2c reads/writes
  - media: i2c: ds90ub913: Add error handling to ub913_hw_init()
  - media: cxd2841er: fix 64-bit division on gcc-9
  - soc/tegra: fuse: Update Tegra234 nvmem keepout list
  - fbdev: omap: use threaded IRQ for LCD DMA
  - RDMA/efa: Reset device on probe failure
  - tools: fix annoying "mkdir -p ..." logs when building tools in parallel
  - x86/xen: allow larger contiguous memory regions in PV guests
  - xen/swiotlb: relax alignment requirements
  - drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - gpio: bcm-kona: Add missing newline to dev_err format string
  - gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ
  - gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
  - drm/i915/selftests: avoid using uninitialized context
  - cgroup: Remove steal time from usage_usec
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  - team: better TEAM_OPTION_TYPE_STRING validation
  - LoongArch: Fix idle VS timer enqueue
  - vxlan: check vxlan_vnigroup_init() return value
  - vrf: use RCU protection in l3mdev_l3_out()
  - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
  - ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
  - spi: sn-f-ospi: Fix division by zero
  - HID: multitouch: Add NULL check in mt_input_configured
  - pinctrl: cy8c95x0: Respect IRQ trigger settings from firmware
  - !14287 [OLK-6.6] SCSI: Support Linkdata HBA/RAID Controllers
  - SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
  - !15686 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.76-6.6.78 LTS Patches
  - char: misc: deallocate static minor in error path
  - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA
  - ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15
  - ALSA: hda/realtek: Add quirks for ASUS ROG 2023 models
  - ALSA: hda/realtek: Fix microphone regression on ASUS N705UD
  - Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
  - Revert "rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads"
  - Revert "rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads"
  - Revert "KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()"
  - Revert "KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock"
  - Revert "KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults"
  - Revert "KVM: e500: always restore irqs"
  - KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
  - KVM: x86: Make x2APIC ID 100% readonly
  - tty: xilinx_uartps: split sysrq handling
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  - mptcp: prevent excessive coalescing on receive
  - btrfs: avoid monopolizing a core when activating a swap file
  - Revert "btrfs: avoid monopolizing a core when activating a swap file"
  - ocfs2: check dir i_size in ocfs2_find_entry
  - net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling
  - spi: atmel-qspi: Memory barriers after memory-mapped I/O
  - spi: atmel-quadspi: Create `atmel_qspi_ops` to support newer SoC families
  - MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static
  - rtc: zynqmp: Fix optional clock name property
  - pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails
  - rtla/timerlat_top: Stop timerlat tracer on signal
  - rtla/timerlat_hist: Stop timerlat tracer on signal
  - rtla: Add trace_instance_stop
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/osnoise: Distinguish missing workload option
  - scripts/gdb: fix aarch64 userspace detection in get_current_task
  - maple_tree: simplify split calculation
  - net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset
  - net/ncsi: wait for the last response to Deselect Package before configuring channel
  - misc: fastrpc: Fix copy buffer page size
  - misc: fastrpc: Fix registered buffer page address
  - misc: fastrpc: Deregister device nodes properly in error scenarios
  - misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors
  - mtd: onenand: Fix uninitialized retlen in do_otp_read()
  - irqchip/apple-aic: Only handle PMC interrupt as FIQ when configured so
  - i3c: master: Fix missing 'ret' assignment in set_speed()
  - NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - mailbox: tegra-hsp: Clear mailbox before using message
  - ocfs2: fix incorrect CPU endianness conversion causing mount failure
  - pnfs/flexfiles: retry getting layout segment for reads
  - selftests: mptcp: connect: -f: no reconnect
  - vfio/platform: check the bounds of read/write syscalls
  - io_uring/rw: commit provided buffer state on async
  - io_uring: fix io_req_prep_async with provided buffers
  - io_uring/net: don't retry connect operation on EPOLLERR
  - io_uring: fix multishots with selected buffers
  - nvmem: imx-ocotp-ele: set word length to 1
  - nvmem: imx-ocotp-ele: fix reading from non zero offset
  - nvmem: imx-ocotp-ele: simplify read beyond device check
  - nvmem: core: improve range check for nvmem_cell_write()
  - nvmem: qcom-spmi-sdam: Set size in struct nvmem_config
  - crypto: qce - unregister previously registered algos in error path
  - crypto: qce - fix goto jump in error path
  - media: uvcvideo: Remove redundant NULL assignment
  - media: uvcvideo: Support partial control reads
  - media: uvcvideo: Fix event flags in uvc_ctrl_send_events
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - media: i2c: ds90ub960: Fix logging SP & EQ status only for UB9702
  - media: i2c: ds90ub960: Fix UB9702 VC map
  - media: i2c: ds90ub960: Fix use of non-existing registers on UB9702
  - media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()
  - media: ccs: Fix cleanup order in ccs_probe()
  - media: ccs: Fix CCS static data parsing for large block sizes
  - media: ov5640: fix get_light_freq on auto
  - media: imx296: Add standby delay during probe
  - media: mc: fix endpoint iteration
  - media: mmp: Bring back registration of the device
  - soc: qcom: smem_state: fix missing of_node_put in error path
  - soc: mediatek: mtk-devapc: Fix leaking IO map on error paths
  - iio: light: as73211: fix channel handling in only-color triggered buffer
  - media: ccs: Clean up parsed CCS static data on parse failure
  - kfence: skip __GFP_THISNODE allocations on NUMA systems
  - rv: Reset per-task monitors also for idle tasks
  - tpm: Change to kvalloc() in eventlog/acpi.c
  - ACPI: PRM: Remove unnecessary strict handler address checks
  - xfs: Add error handling for xfs_reflink_cancel_cow_range
  - xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end
  - pwm: microchip-core: fix incorrect comparison with max period
  - arm64: tegra: Disable Tegra234 sce-fabric node
  - arm64: tegra: Fix typo in Tegra234 dce-fabric compatible
  - crypto: qce - fix priority to be less than ARMv8 CE
  - arm64: dts: qcom: sm8550: correct MDSS interconnects
  - arm64: dts: qcom: sm8550: Fix MPSS memory length
  - arm64: dts: qcom: sm8550: Fix CDSP memory length
  - arm64: dts: qcom: sm8450: Fix MPSS memory length
  - arm64: dts: qcom: sm8450: Fix CDSP memory length
  - arm64: dts: qcom: sm8350: Fix MPSS memory length
  - arm64: dts: qcom: sm8350: Fix CDSP memory base and length
  - arm64: dts: qcom: sm8350: Fix ADSP memory base and length
  - arm64: dts: qcom: sm6375: Fix MPSS memory base and length
  - arm64: dts: qcom: sm6375: Fix CDSP memory base and length
  - arm64: dts: qcom: sm6375: Fix ADSP memory length
  - arm64: dts: qcom: sm6350: Fix uart1 interconnect path
  - arm64: dts: qcom: sm6350: Fix MPSS memory length
  - arm64: dts: qcom: sm6350: Fix ADSP memory length
  - arm64: dts: qcom: sm6115: Fix ADSP memory base and length
  - arm64: dts: qcom: sm6115: Fix CDSP memory length
  - arm64: dts: qcom: sm6115: Fix MPSS memory length
  - ARM: dts: ti/omap: gta04: fix pm issues caused by spi module
  - ARM: dts: dra7: Add bus_dma_limit for l4 cfg bus
  - ubi: Add a check for ubi_num
  - x86/boot: Use '-std=gnu11' to fix build with GCC 15
  - rust: init: use explicit ABI to clean warning in future compilers
  - kbuild: Move -Wenum-enum-conversion to W=2
  - scsi: storvsc: Set correct data length for sending SCSI command without payload
  - scsi: ufs: qcom: Fix crypto key eviction
  - scsi: qla2xxx: Move FCE Trace buffer allocation to user control
  - scsi: st: Don't set pos_unknown just after device recognition
  - nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk
  - nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk
  - PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf()
  - PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1
  - arm64: tegra: Fix Tegra234 PCIe interrupt-map
  - ALSA: hda: Fix headset detection failure due to unstable sort
  - ALSA: hda/realtek: Enable headset mic on Positivo C6400
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
  - block: don't revert iter for -EIOCBQUEUED
  - mips/math-emu: fix emulation of the prefx instruction
  - dm-crypt: track tag_offset in convert_context
  - dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit()
  - powerpc/pseries/eeh: Fix get PE state translation
  - LoongArch: Extend the maximum number of watchpoints
  - MIPS: Loongson64: remove ROM Size unit in boardinfo
  - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use
  - serial: sh-sci: Drop __initdata macro for port_cfg
  - soc: qcom: socinfo: Avoid out of bounds read of serial number
  - ASoC: acp: Support microphone from Lenovo Go S
  - usbnet: ipheth: document scope of NCM implementation
  - usbnet: ipheth: fix DPE OoB read
  - usbnet: ipheth: break up NCM header size computation
  - usbnet: ipheth: refactor NCM datagram loop
  - usbnet: ipheth: check that DPE points past NCM header
  - usbnet: ipheth: use static NDP16 location in URB
  - usb: gadget: f_tcm: Don't prepare BOT write request twice
  - usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint
  - usb: gadget: f_tcm: Decrement command ref count on cleanup
  - usb: gadget: f_tcm: Translate error to sense
  - wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916
  - wifi: rtw88: sdio: Fix disconnection after beacon loss
  - wifi: mt76: mt7921u: Add VID/PID for TP-Link TXE50UH
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
  - wifi: rtlwifi: rtl8821ae: Fix media status report
  - HID: hid-sensor-hub: don't use stale platform-data on remove
  - of: reserved-memory: Fix using wrong number of cells to get property 'alignment'
  - of: Fix of_find_node_opts_by_path() handling of alias+path+options
  - of: Correct child specifier used as input of the 2nd nexus node
  - scsi: ufs: core: Fix the HIGH/LOW_TEMP Bit Definitions
  - perf bench: Fix undefined behavior in cmpworker()
  - efi: libstub: Use '-std=gnu11' to fix build with GCC 15
  - clk: mediatek: mt2701-mm: add missing dummy clk
  - clk: mediatek: mt2701-img: add missing dummy clk
  - clk: mediatek: mt2701-bdp: add missing dummy clk
  - clk: mediatek: mt2701-aud: fix conversion to mtk_clk_simple_probe
  - clk: mediatek: mt2701-vdec: fix conversion to mtk_clk_simple_probe
  - clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate
  - clk: qcom: gcc-mdm9607: Fix cmd_rcgr offset for blsp1_uart6 rcg
  - clk: qcom: gcc-sm6350: Add missing parent_map for two clocks
  - clk: qcom: gcc-sm8550: Do not turn off PCIe GDSCs during gdsc_disable()
  - clk: qcom: clk-alpha-pll: fix alpha mode configuration
  - media: i2c: ds90ub960: Fix UB9702 refclk register access
  - clk: sunxi-ng: a100: enable MMC clock reparenting
  - Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
  - drm/i915: Drop 64bpp YUV formats from ICL+ SDR planes
  - drm/komeda: Add check for komeda_get_layer_fourcc_list()
  - drm/i915: Fix page cleanup on DMA remap failure
  - drm/i915/guc: Debug print LRC state entries only if the context is pinned
  - Revert "drm/amd/display: Use HW lock mgr for PSR1"
  - drm/amdkfd: only flush the validate MES contex
  - drm/amd/pm: Mark MM activity as unsupported
  - ksmbd: fix integer overflows on 32 bit systems
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
  - arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma
  - drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event()
  - KVM: arm64: timer: Always evaluate the need for a soft timer
  - fs/proc: do_task_stat: Fix ESP not readable during coredump
  - m68k: vga: Fix I/O defines
  - s390/futex: Fix FUTEX_OP_ANDN implementation
  - smb: client: change lease epoch type from unsigned int to __u16
  - smb: client: fix order of arguments of tracepoints
  - drm/modeset: Handle tiled displays in pan_display_atomic.
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx
  - leds: lp8860: Write full EEPROM, not only half of it
  - cpufreq: s3c64xx: Fix compilation warning
  - rxrpc: Fix call state set to not include the SERVER_SECURING state
  - net: sched: Fix truncation of offloaded action statistics
  - tun: revert fix group permission check
  - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
  - ACPI: property: Fix return value for nval == 0 in acpi_data_prop_read()
  - x86/xen: add FRAME_END to xen_hypercall_hvm()
  - x86/xen: fix xen_hypercall_hvm() to not clobber %rbx
  - net: rose: lock the socket in rose_bind()
  - net: atlantic: fix warning during hot unplug
  - gpio: pca953x: Improve interrupt support
  - rxrpc: Fix the rxrpc_connection attend queue handling
  - udp: gso: do not drop small packets when PMTU reduces
  - tg3: Disable tg3 PCIe AER on system reboot
  - vmxnet3: Fix tx queue race condition with XDP
  - ice: Add check for devm_kzalloc()
  - net: bcmgenet: Correct overlaying of PHY and MAC Wake-on-LAN
  - nvme-fc: use ctrl state getter
  - ice: put Rx buffers after being done with current frame
  - gpu: drm_dp_cec: fix broken CEC adapter properties check
  - firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry
  - net/ncsi: fix locking in Get MAC Address handling
  - net/ncsi: Add NC-SI 1.2 Get MC MAC Address command
  - KVM: e500: always restore irqs
  - KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults
  - KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock
  - KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()
  - platform/x86: acer-wmi: Ignore AC events
  - Input: allocate keycode for phone linking
  - ASoC: amd: Add ACPI dependency to fix build error
  - ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
  - platform/x86: int3472: Check for adev == NULL
  - iommu/arm-smmu-v3: Clean up more on probe failure
  - iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible
  - x86/kexec: Allocate PGD for x86_64 transition page tables separately
  - selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack()
  - tipc: re-order conditions in tipc_crypto_key_rcv()
  - mmc: sdhci-msm: Correctly set the load for the regulator
  - net: wwan: iosm: Fix hibernation by re-binding the driver around it
  - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
  - APEI: GHES: Have GHES honor the panic= setting
  - i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz
  - wifi: iwlwifi: avoid memory leak
  - net/mlx5: use do_aux_work for PHC overflow checks
  - HID: Wacom: Add PCI Wacom device support
  - clk: qcom: Make GCC_8150 depend on QCOM_GDSC
  - mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id
  - tomoyo: don't emit warning in tomoyo_write_control()
  - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
  - mmc: core: Respect quirk_max_rate for non-UHS SDIO card
  - tun: fix group permission check
  - wifi: rtw89: add crystal_cap check to avoid setting as overflow value
  - safesetid: check size of policy writes
  - drm/bridge: it6505: fix HDCP CTS KSV list wait timer
  - drm/bridge: it6505: fix HDCP CTS compare V matching
  - drm/bridge: it6505: fix HDCP encryption when R0 ready
  - drm/bridge: it6505: fix HDCP Bstatus check
  - drm/bridge: it6505: Change definition MAX_HDCP_DOWN_STREAM_COUNT
  - drm/amd/display: Fix Mode Cutoff in DSC Passthrough to DP2.1 Monitor
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
  - drm/virtio: New fence for every plane update
  - x86/amd_nb: Restrict init function to AMD-based systems
  - lockdep: Fix upper limit for LOCKDEP_*_BITS configs
  - sched: Don't try to catch up excess steal time.
  - btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling
  - btrfs: fix data race when accessing the inode's disk_i_size at btrfs_drop_extents()
  - s390/stackleak: Use exrl instead of ex in __stackleak_poison()
  - arm64/mm: Ensure adequate HUGE_MAX_HSTATE
  - btrfs: fix use-after-free when attempting to join an aborted transaction
  - btrfs: fix assertion failure when splitting ordered extent after transaction abort
  - Revert "hostfs: convert hostfs to use the new mount API"
  - Revert "hostfs: fix string handling in __dentry_name()"
  - Revert "hostfs: Add const qualifier to host_root in hostfs_fill_super()"
  - Revert "hostfs: fix the host directory parse when mounting."
  - !15645  nilfs2: do not force clear folio if buffer is referenced
  - nilfs2: do not force clear folio if buffer is referenced
  - !15660 v2  add support DVMBM in HIP12
  - KVM: arm64: Add new HiSi CPU type to support DVMBM
  - kvm: hisi_virt: Update TLBI broadcast feature for hip12
  - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE
  - !15593  io_uring: prevent opcode speculation
  - io_uring: prevent opcode speculation
  - !15644  ata: libata-sff: Ensure that we cannot write outside the allocated buffer
  - ata: libata-sff: Ensure that we cannot write outside the allocated buffer
  - !15581  smb: client: Add check for next_buffer in receive_encrypted_standard()
  - smb: client: Add check for next_buffer in receive_encrypted_standard()


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-85.0.0.91
changelog:
  - RISC-V kernel upgrade to 6.6.0-85.0.0
  - Add spacemit k1 support, include pinctrl, gpio, clk, reset, uart, dts-bindings and dts
  - KVM AIA: Enable HW_ACCL
  - RISC-V: Remove unnecessary include from compat.h


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-86.0.0.92
changelog:
  - !15783 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.80-6.6.81 LTS Patches
  - firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success
  - scsi: ufs: core: Cancel RTC work during ufshcd_remove()
  - scsi: ufs: core: Start the RTC update work later
  - scsi: ufs: core: Fix another deadlock during RTC update
  - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive
  - scsi: ufs: core: Fix deadlock during RTC update
  - x86/microcode/intel: Remove unnecessary cache writeback and invalidation
  - arm64: dts: rockchip: Disable DMA for uart5 on px30-ringneck
  - intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly
  - gve: set xdp redirect target only when it is available
  - amdgpu/pm/legacy: fix suspend/resume issues
  - riscv: signal: fix signal frame size
  - riscv/futex: sign extend compare value in atomic cmpxchg
  - rseq/selftests: Fix riscv rseq_offset_deref_addv inline asm
  - sched/core: Prevent rescheduling when interrupts are disabled
  - rcuref: Plug slowpath race in rcuref_put()
  - vmlinux.lds: Ensure that const vars with relocations are mapped R/O
  - mptcp: reset when MPTCP opts are dropped after join
  - mptcp: always handle address removal under msk socket lock
  - phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE
  - net: enetc: fix the off-by-one issue in enetc_map_tx_tso_buffs()
  - net: enetc: correct the xdp_tx statistics
  - net: enetc: update UDP checksum when updating originTimestamp field
  - net: enetc: keep track of correct Tx BD count in enetc_map_tx_tso_buffs()
  - net: enetc: fix the off-by-one issue in enetc_map_tx_buffs()
  - usbnet: gl620a: fix endpoint checking in genelink_bind()
  - i2c: npcm: disable interrupt enable bit before devm_request_irq
  - drm/amd/display: Fix HPD after gpu reset
  - drm/amd/display: Disable PSR-SU on eDP panels
  - perf/core: Fix low freq setting via IOC_PERIOD
  - perf/x86: Fix low freqency setting issue
  - ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2
  - riscv: KVM: Fix SBI TIME error generation
  - riscv: KVM: Fix SBI IPI error generation
  - riscv: KVM: Fix hart suspend status check
  - RISCV: KVM: Introduce mp_state_lock to avoid lock inversion
  - phy: rockchip: naneng-combphy: compatible reset with old DT
  - x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems
  - io_uring/net: save msg_control for compat
  - net: ti: icss-iep: Reject perout generation request
  - net: ti: icss-iep: Remove spinlock-based synchronization
  - include: net: add static inline dst_dev_overhead() to dst.h
  - net/mlx5: IRQ, Fix null string in debug print
  - net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination.
  - net: Clear old fragment checksum value in napi_reuse_skb
  - ice: Fix deinitializing VF in error path
  - ice: add E830 HW VF mailbox message limit support
  - ice: Add E830 device IDs, MAC type and registers
  - firmware: cs_dsp: Remove async regmap writes
  - ipvs: Always clear ipvs_property flag in skb_scrub_packet()
  - ASoC: es8328: fix route from DAC to output
  - net: set the minimum for net_hotdata.netdev_budget_usecs
  - net: loopback: Avoid sending IP packets without an Ethernet header
  - afs: Fix the server_list to unuse a displaced server rather than putting it
  - afs: Make it possible to find the volumes that are using a server
  - rxrpc: rxperf: Fix missing decoding of terminal magic cookie
  - Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response
  - ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports
  - sunrpc: suppress warnings for unused procfs functions
  - RDMA/mlx5: Fix bind QP error cleanup flow
  - scsi: core: Clear driver private data when retrying request
  - SUNRPC: Handle -ETIMEDOUT return from tlshd
  - SUNRPC: Prevent looping due to rpc_signal_task() races
  - SUNRPC: convert RPC_TASK_* constants to enum
  - scsi: ufs: core: Fix ufshcd_is_ufs_dev_busy() and ufshcd_eh_timed_out()
  - scsi: ufs: core: Prepare to introduce a new clock_gating lock
  - scsi: ufs: core: Introduce ufshcd_has_pending_tasks()
  - scsi: ufs: core: Add UFS RTC support
  - scsi: ufs: core: Add ufshcd_is_ufs_dev_busy()
  - RDMA/mana_ib: Allocate PAGE aligned doorbell index
  - IB/mlx5: Set and get correct qp_num for a DCT QP
  - !15650 PCI/DPC: Ignore Surprise Down error on hot removal
  - PCI/DPC: Ignore Surprise Down error on hot removal
  - !15813  fix CVE-2025-21883
  - ice: Fix deinitializing VF in error path
  - ice: add E830 HW VF mailbox message limit support
  - ice: Add E830 device IDs, MAC type and registers
  - !15800  proc: fix UAF in proc_get_inode()
  - proc: fix UAF in proc_get_inode()
  - !15799  ksmbd: fix incorrect validation for num_aces field of smb_acl
  - ksmbd: fix incorrect validation for num_aces field of smb_acl
  - !15798  ksmbd: fix out-of-bounds in parse_sec_desc()
  - ksmbd: fix out-of-bounds in parse_sec_desc()
  - !15749  CVE-2025-21963 && CVE-2025-21964
  - cifs: Fix integer overflow while processing acdirmax mount option
  - cifs: Fix integer overflow while processing acregmax mount option
  - !15680  scsi: ufs: core: Fix use-after free in init error and remove paths
  - scsi: ufs: core: Fix use-after free in init error and remove paths
  - !15681  kernel: be more careful about dup_mmap() failures and uprobe registering
  - kernel: be more careful about dup_mmap() failures and uprobe registering
  - !15772  tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
  - tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
  - !15789  slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - !15788  wifi: cfg80211: regulatory: improve invalid hints checking
  - wifi: cfg80211: regulatory: improve invalid hints checking
  - !15787  i2c: npcm: disable interrupt enable bit before devm_request_irq
  - i2c: npcm: disable interrupt enable bit before devm_request_irq
  - !15786  ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
  - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
  - ASoC: SOF: topology: Parse DAI type token for dspless mode
  - ASoC: SOF: topology: dynamically allocate and store DAI widget->private
  - !15807  RDMA/mlx5: Fix a WARN during dereg_mr for DM type
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type
  - !15338  partitions: mac: fix handling of bogus partition table
  - partitions: mac: fix handling of bogus partition table
  - !15771  bpf: Add tracepoints with null-able arguments
  - bpf: Add tracepoints with null-able arguments
  - !15775 v2  CVE-2024-57857
  - RDMA/siw: Remove direct link to net_device
  - RDMA: Export ib_device_get_netdev()
  - !15790  fix CVE-2025-21976
  - fbdev: hyperv_fb: Allow graceful removal of framebuffer
  - fbdev: hyperv_fb: Simplify hvfb_putmem
  - fbdev: Introduce devm_register_framebuffer()
  - !15785 v2  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - !15757  Fix kmemleak false positive
  - efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
  - !15396  fix CVE-2024-57999
  - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
  - !15762  scsi: ufs: core: bsg: Fix crash when arpmb command fails
  - scsi: ufs: core: bsg: Fix crash when arpmb command fails
  - !15410  CVE-2025-21715
  - net: davicom: fix UAF in dm9000_drv_remove
  - !15408  CVE-2025-21744
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
  - !15729 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.79-6.6.80 LTS Patches
  - mtd: rawnand: cadence: fix unchecked dereference
  - ibmvnic: Inspect header requirements before using scrq direct
  - ibmvnic: Perform tx CSO during send scrq direct
  - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit
  - nilfs2: handle errors that nilfs_prepare_chunk() may return
  - nilfs2: eliminate staggered calls to kunmap in nilfs_rename
  - nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link
  - arm64: dts: rockchip: change eth phy mode to rgmii-id for orangepi r1 plus lts
  - md: Fix md_seq_ops() regressions
  - ftrace: Do not add duplicate entries in subops manager ops
  - ftrace: Correct preemption accounting for function tracing.
  - EDAC/qcom: Correct interrupt enable register configuration
  - mtd: rawnand: cadence: fix incorrect device in dma_unmap_single
  - mtd: rawnand: cadence: use dma_map_resource for sdma address
  - mtd: rawnand: cadence: fix error code in cadence_nand_init()
  - mm,madvise,hugetlb: check for 0-length range after end address adjustment
  - ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close
  - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
  - ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls()
  - ASoC: fsl_micfil: Enable default case in micfil_set_quality()
  - ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
  - lib/iov_iter: fix import_iovec_ubuf iovec management
  - soc: loongson: loongson2_guts: Add check for devm_kstrdup()
  - drop_monitor: fix incorrect initialization order
  - tee: optee: Fix supplicant wait loop
  - drm/i915/dp: Fix error handling during 128b/132b link training
  - drm/i915: Make sure all planes in use by the joiner have their crtc included
  - drm/msm/dpu: Disable dither in phys encoder cleanup
  - arm64: dts: mediatek: mt8183: Disable DSI display output by default
  - drm/nouveau/pmu: Fix gp10b firmware guard
  - bpf: skip non exist keys in generic_map_lookup_batch
  - nvme/ioctl: add missing space in err message
  - drm/msm: Avoid rounding up to one jiffy
  - nouveau/svm: fix missing folio unlock + put after make_device_exclusive_range()
  - power: supply: da9150-fg: fix potential overflow
  - bpf: Fix deadlock when freeing cgroup storage
  - bpf: Disable non stream socket for strparser
  - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
  - drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
  - drm/msm/gem: Demote userspace errors to DRM_UT_DRIVER
  - drm/tidss: Fix race condition while handling interrupt registers
  - drm/tidss: Add simple K2G manual reset
  - net: axienet: Set mac_managed_pm
  - arp: switch to dev_getbyhwaddr() in arp_req_set_public()
  - net: Add non-RCU dev_getbyhwaddr() helper
  - flow_dissector: Fix port range key handling in BPF conversion
  - flow_dissector: Fix handling of mixed port and port-range keys
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels().
  - tcp: adjust rcvq_space after updating scaling ratio
  - vsock/bpf: Warn on socket without transport
  - sockmap, vsock: For connectible sockets allow only connected
  - ibmvnic: Don't reference skb after sending to VIOS
  - ibmvnic: Add stat for tx direct vs tx batched
  - ibmvnic: Introduce send sub-crq direct
  - ibmvnic: Return error code on TX scrq flush fail
  - ALSA: seq: Drop UMP events when no UMP-conversion is set
  - net/sched: cls_api: fix error handling causing NULL dereference
  - ALSA: hda/cirrus: Correct the full scale volume set logic
  - geneve: Fix use-after-free in geneve_find_dev().
  - powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC
  - ALSA: hda/realtek: Fixup ALC225 depop procedure
  - powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
  - powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
  - ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB]
  - USB: gadget: f_midi: f_midi_complete to call queue_work
  - usb: gadget: core: flush gadget workqueue after device removal
  - USB: gadget: core: create sysfs link between udc and gadget
  - nvmem: imx-ocotp-ele: fix MAC address byte order
  - nvmem: Move and rename ->fixup_cell_info()
  - nvmem: Simplify the ->add_cells() hook
  - nvmem: Create a header for internal sharing
  - media: uvcvideo: Remove dangling pointers
  - media: uvcvideo: Only save async fh if success
  - media: uvcvideo: Refactor iterators
  - soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove
  - soc/mediatek: mtk-devapc: Convert to platform remove callback returning void
  - arm64: dts: qcom: sm8550: Fix ADSP memory base and length
  - arm64: dts: qcom: sm8550: add missing qcom,non-secure-domain property
  - arm64: dts: qcom: sm8550: Add dma-coherent property
  - arm64: dts: qcom: sm8450: Fix ADSP memory base and length
  - arm64: dts: qcom: sm8450: add missing qcom,non-secure-domain property
  - scsi: core: Do not retry I/Os during depopulation
  - scsi: core: Handle depopulation and restoration in progress
  - firmware: qcom: scm: Fix missing read barrier in qcom_scm_is_available()
  - ASoC: renesas: rz-ssi: Add a check for negative sample_space
  - Input: synaptics - fix crash when enabling pass-through port
  - Input: serio - define serio_pause_rx guard to pause and resume serio ports
  - Bluetooth: qca: Fix poor RF performance for WCN6855
  - Bluetooth: qca: Update firmware-name to support board specific nvm
  - Bluetooth: qca: Support downloading board id specific NVM for WCN7850
  - cpufreq: fix using cpufreq-dt as module
  - cpufreq: dt-platdev: add missing MODULE_DESCRIPTION() macro
  - memcg: fix soft lockup in the OOM process
  - mm: update mark_victim tracepoints fields
  - md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime
  - md/md-bitmap: add 'sync_size' into struct md_bitmap_stats
  - md/md-cluster: fix spares warnings for __le64
  - md/md-bitmap: replace md_bitmap_status() with a new helper md_bitmap_get_stats()
  - !15743  uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - !15768  gpio: aggregator: protect driver attr handlers against module unload
  - gpio: aggregator: protect driver attr handlers against module unload
  - !15755  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - !15739  ftrace: Avoid potential division by zero in function_stat_show()
  - ftrace: Avoid potential division by zero in function_stat_show()
  - !15748  tracing: Fix bad hist from corrupting named_triggers list
  - tracing: Fix bad hist from corrupting named_triggers list
  - !15750  perf/core: Fix pmus_lock vs. pmus_srcu ordering
  - perf/core: Fix pmus_lock vs. pmus_srcu ordering
  - !15697  fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - !15613  CVE-2024-57952
  - libfs: Fix duplicate directory entry in offset_dir_lookup
  - libfs: Use d_children list to iterate simple_offset directories
  - libfs: Replace simple_offset end-of-directory detection
  - Revert "libfs: fix infinite directory reads for offset dir"
  - Revert "libfs: Add simple_offset_empty()"
  - libfs: Return ENOSPC when the directory offset range is exhausted
  - !15724  CVE-2024-52560
  - fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode()
  - fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
  - !15277  drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - !15641  block: don't revert iter for -EIOCBQUEUED
  - block: don't revert iter for -EIOCBQUEUED
  - !15515  media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - !15731  Some mainline patches merged into drivers/hwmon
  - hwmon: (acpi_power_meter) Fix the fake power alarm reporting
  - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices().
  - hwmon: (acpi_power_meter) Fix update the power trip points on failure
  - hwmon: (acpi_power_meter) Fix uninitialized variables
  - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method
  - !15711  Some bug fix patches for RDMA/hns to olk-6.6
  - RDMA/hns: Fix remove debugfs after device has been unregistered
  - RDMA/hns: Reorder uctx deallocation
  - RDMA/hns: Fix a meaningless loop in free_buffer_pages_proc()
  - RDMA/hns: Fix DCA error path in alloc_wqe_buf()
  - RDMA/hns: Fix mismatched kzalloc vs kvfree
  - RDMA/hns: Fix delay-destruction mechanism not processing kernel db
  - RDMA/hns: Fix delayed destruction of db not taking effect
  - RDMA/hns: Move mtr_node into the mtr struct
  - RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct


author: Li Nan <linan122@huawei.com> - 6.6.0-87.0.0.93
changelog:
  - !15987 v12  Add support for IPIv
  - kabi: Use KABI_EXTEND to perform kabi repair for IPIV
  - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12
  - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE
  - kvm: hisi_virt: Register ipiv exception interrupt
  - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule
  - kvm: arm64: avoid sending multi-SGIs in IPIV
  - kvm: hisi_virt: Allocate VM table and save vpeid in it
  - !15980  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - !15979  thermal: int340x: Add NULL check for adev
  - !15921 Support SMT control on arm64.
  - !15975  perf/x86: Fix open counting event error
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - thermal: int340x: Add NULL check for adev
  - !15968 v3  Backport mainline patches to avoid crash caused by rsize being 0
  - !15960  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - !15974  RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
  - !15952  ksmbd: validate zero num_subauth before sub_auth is accessed
  - !15950  drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
  - perf/x86: Fix open counting event error
  - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
  - smb: client: Update IO sizes after reconnection
  - smb: client: Store original IO parameters and prevent zero IO sizes
  - smb:client: smb: client: Add reverse mapping from tcon to superblocks
  - Revert "cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0"
  - !15958 cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
  - !15916  LoongArch: Increase ARCH_DMA_MINALIGN up to 16
  - !15961  drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
  - !15945 crypto: hisilicon - some bugfix
  - drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - !15929  arm_mpam: Add SMMU support for MPAM
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
  - !15793  CVE-2025-21892
  - !15795  CVE-2025-21941
  - ksmbd: validate zero num_subauth before sub_auth is accessed
  - drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
  - !15871 v2  CVE-2024-57795
  - !15906 [OLK-6.6] drm/hisilicon/hibmc: some bugfixes for hibmc-drm driver
  - !15834 uacce: fix for the numa distance calculation
  - crypto: hisilicon/qm - disable error report before flr
  - hisi_acc_vfio_pci: obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - fix the pf2vf timeout when global reset
  - crypto: hisilicon/qm - modify interrupt processing resource application
  - crypto: hisilicon/qm - mask axi error before memory init
  - crypto: hisilicon/qm - invalidate queues in use
  - crypto: hisilicon/sec2 - fix memory use-after-free issue
  - crypto: hisilicon/sec2 - fix for gcm spec check
  - crypto: hisilicon/hpre - fix dma unmap sequence
  - !15936  ASoC: imx-card: Add NULL check in imx_card_probe()
  - !15922 mm: shmem: fix potential data corruption during shmem swapin
  - !15924 mm/vmscan: drop checking if _deferred_list is empty before using TTU_SYNC
  - !15913  block: fix resource leak in blk_register_queue() error path
  - ASoC: imx-card: Add NULL check in imx_card_probe()
  - !15923 RDMA/hns :Add some mainline patches to OLK-6.6
  - iommu: Fix kabi broken of struct iommu_ops
  - fs/resctrl: Move iommu_groups back when their associated RDT group is deleted
  - fs/resctrl: Fix the iommu_group parsing process
  - iommu/arm-smmu-v3: Check pointer valid before dereferencing it
  - arm_mpam: Select CONFIG_RESCTRL_IOMMU on the ARM64 by default
  - ACPI/MPAM: Parse the rest of the ACPI table
  - fs/resctrl: Add support for assigning iommu_groups to resctrl groups
  - arm_mpam: resctrl: Add iommu helpers to get/set the partid and pmg
  - kobject: Add kset_get_next_obj() to allow a kset to be walked
  - iommu: Add helper to retrieve iommu kset
  - iommu: Add helpers to retrieve iommu_groups by id or kobject
  - iommu: Add helpers to get and set the QoS state
  - iommu/arm-smmu-v3: Add mpam helpers to query and set state
  - iommu/arm-smmu-v3: Issue a batch of commands to the same cmdq
  - iommu/arm-smmu-v3: Register SMMU capabilities with MPAM
  - mm: shmem: fix potential data corruption during shmem swapin
  - mm/vmscan: drop checking if _deferred_list is empty before using TTU_SYNC
  - RDMA/hns: Fix wrong maximum DMA segment size
  - Revert "RDMA/hns: fix iommu_map_sg() failed when MR bigger than 4G"
  - RDMA/hns: initialize db in update_srq_db()
  - RDMA/hns: Remove unused parameters
  - config: enable CONFIG_HOTPLUG_SMT for arm64
  - arm64: Kconfig: Enable HOTPLUG_SMT
  - arm64: topology: Support SMT control on ACPI based system
  - arch_topology: Support SMT control for OF based system
  - cpu/SMT: Provide a default topology_is_primary_thread()
  - Revert "arm64: Kconfig: Enable HOTPLUG_SMT"
  - !15904 v2  PCI: AER: fix deadlock in do_recovery
  - !15910 v2  soc cache: Add support for HiSilicon L3 cache
  - LoongArch: Increase ARCH_DMA_MINALIGN up to 16
  - block: fix resource leak in blk_register_queue() error path
  - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
  - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
  - !15909  coresight: tmc: Don't change the buffer size if it's in use
  - soc cache: Modify default config to compile HiSilicon SoC cache driver
  - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent
  - soc cache: Add framework driver for HiSilicon SoC cache
  - coresight: tmc: Don't change the buffer size if it's in use
  - PCI: AER: fix deadlock in do_recovery
  - !15863 Some mainline patches merged into olk-6.6: drivers/hwmon
  - !15812  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - !15821  LoongArch: Set hugetlb mmap base address aligned with pmd size
  - !15882  Updates for HiSilicon L3C PMU driver
  - !15886  Add HPD, getting EDID, colorbar features in DP function
  - !15851 migration: adapt to new migration configuration
  - drm/hisilicon/hibmc: Add vga connector detect functions
  - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
  - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
  - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
  - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
  - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
  - drm/hisilicon/hibmc: Add dp serdes cfg in dp process
  - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
  - drm/hisilicon/hibmc: Restructuring the header dp_reg.h
  - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
  - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
  - drm/ast: Implement polling for VGA and SIL164 connectors
  - drm/sysfs: Register "ddc" symlink later
  - !15612 Some trivial cleanups for shmem
  - drivers/perf: hisi: Add support for L3C PMU v3
  - drivers/perf: hisi: Refactor the event configuration of L3C PMU
  - drivers/perf: hisi: Extend the field of tt_core
  - drivers/perf: hisi: Extract the event filter check of L3C PMU
  - drivers/perf: hisi: Simplify the probe process of each L3C PMU version
  - drivers/perf: hisi: Export hisi_uncore_pmu_isr()
  - drivers/perf: hisi: Relax the event ID check in the framework
  - !15872 【olk 6.6】backport some bugfixes for hibmcge driver
  - !15852  Fix CVE-2025-22013
  - !15845  regulator: check that dummy regulator has been probed before using it
  - !15854  perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - !15838  General updates of HiSilicon PMU drivers
  - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register
  - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates
  - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
  - ACPI: IPMI: Add helper to wait for when SMI is selected
  - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
  - RDMA/rxe: Remove the direct link to net_device
  - net: hibmcge: fix multiple phy_stop() issue
  - net: hibmcge: fix not restore rx pause mac addr after reset issue
  - net: hibmcge: fix the incorrect np_link fail state issue.
  - net: hibmcge: fix wrong mtu log issue
  - net: hibmcge: fix the share of irq statistics among different network ports issue
  - net: hibmcge: fix incorrect multicast filtering issue
  - net: hibmcge: fix incorrect pause frame statistics issue
  - migration: adapt to new migration configuration
  - migration: qm updates BAR configuration
  - migration: update BAR space size
  - hisi_acc_vfio_pci: update function return values
  - hisi_acc_vfio_pci: bugfix live migration function without VF device driver
  - hisi_acc_vfio_pci: bugfix the problem of uninstalling driver
  - hisi_acc_vfio_pci: bugfix cache write-back issue
  - hisi_acc_vfio_pci: add eq and aeq interruption restore
  - hisi_acc_vfio_pci: fix XQE dma address error
  - !15839  ext4: Some zeroing fixes
  - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - arm64/fpsimd: Remove unused declaration fpsimd_kvm_prepare()
  - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
  - !15321  printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
  - regulator: check that dummy regulator has been probed before using it
  - !15826  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - !15754 v3  Support the FEAT_HDBSS introduced in Armv9.5
  - jbd2: fix off-by-one while erasing journal
  - iomap: do not interrupt IOMAP_ZERO
  - ext4: fix potential memory exposure issues during truncate in iomap mode.
  - ext4: do not always order data when partial zeroing out a block
  - mm: zero range of eof folio exposed by inode size extension
  - mm: convert pagecache_isize_extended to use a folio
  - ext4: goto right label 'out_mmap_sem' in ext4_setattr()
  - drivers/perf: hisi: Add support for HiSilicon MN PMU driver
  - drivers/perf: hisi: Add support for HiSilicon NoC PMU
  - drivers/perf: hisi: Support PMUs with no interrupt
  - drivers/perf: hisi: Relax the event number check of v2 PMUs
  - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver
  - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information
  - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - drivers/perf: hisi: Simplify the probe process for each DDRC version
  - drivers/perf: hisi: Delete redundant blank line of DDRC PMU
  - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver
  - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs
  - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier
  - drivers/perf: hisi: Add a common function to retrieve topology from firmware
  - drivers/perf: hisi: Extract topology information to a separate structure
  - drivers/perf: hisi: Refactor the detection of associated CPUs
  - drivers/perf: hisi: Migrate to one online CPU if no associated one online
  - drivers/perf: hisi: Don't update the associated_cpus on CPU offline
  - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs
  - !15827  perf stat: Enable iostat mode for HiSilicon PCIe PMU
  - !15072 hisilicon: ACC Live Migration DFX Replacement Mainline Solution
  - x86: openeuler_defconfig add CONFIG_VFIO_DEBUGFS=y
  - arm64: openeuler_defconfig add CONFIG_VFIO_DEBUGFS=y
  - perf stat: Enable iostat mode for HiSilicon PCIe PMU
  - vfio: fix kabi breakage due to struct vfio_device and enum vfio_device_mig_state
  - Documentation: add debugfs description for vfio
  - Documentation: add debugfs description for hisi migration
  - MAINTAINERS: Add vfio debugfs interface doc link
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - MAINTAINERS: add Baolin as shmem reviewer
  - mm: shmem: factor out the within_size logic into a new helper
  - mm: shmem: change the return value of shmem_find_swap_entries()
  - mm: shmem: remove duplicate error validation
  - mm: shmem: remove 'fadvise()' comments
  - mm: shmem: drop the unused macro
  - docs: tmpfs: drop 'fadvise()' from the documentation
  - !15611 Minimize xa_node allocation during xarry split
  - docs: tmpfs: update the large folios policy for tmpfs and shmem
  - mm: shmem: add a kernel command line to change the default huge policy for tmpfs
  - hisi_acc_vfio_pci: register debugfs for hisilicon migration driver
  - hisi_acc_vfio_pci: create subfunction for data reading
  - hisi_acc_vfio_pci: extract public functions for container_of
  - hisi_acc_vfio_pci: Remove the deferred_reset logic
  - vfio/migration: Add debugfs to live migration driver
  - Revert "vfio/migration: added map length page alignment"
  - Revert "vfio/migration: bugfix some driver code"
  - Revert "vfio/migration: add eq and aeq interruption restore"
  - Revert "vfio/migration: bugfix cache write-back issue"
  - Revert "vfio/migration: remove unused local variable"
  - Revert "hisi-acc-vfio-pci:add DFX for acc migration driver"
  - Revert "hisi_acc_vfio_pci: add exception error handling"
  - Revert "migration: fix reference counting exception issue"
  - Revert "migration: modify dfx error type without VM driver"
  - !15636 Kunpeng Accelerator Enables New Features
  - LoongArch: Set hugetlb mmap base address aligned with pmd size
  - crypto: hisilicon/sec2 - fix for sec spec check
  - crypto: hisilicon/sec2 - fix for aead authsize alignment
  - crypto: hisilicon/sec2 - fix for aead auth key length
  - crypto: hisilicon/hpre - adapt ECDH for high-performance cores
  - crypto: hisilicon/qm - support new function communication
  - Revert "crypto: hisilicon/qm - fix the pf2vf timeout when global reset"
  - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time"
  - crypto: hisilicon/sec2 - fix for aead invalid authsize
  - crypto: hisilicon/sec2 - fix for aead icv error
  - Revert "crypto: hisilicon/sec2: fix memory use-after-free issue"
  - Revert "crypto: hisilicon/sec2 - fix for aead icv error"
  - Revert "crypto: hisilicon/sec2 - fix for aead invalid authsize"
  - crypto: hisilicon/zip - support new error report
  - Revert "crypto: hisilicon/qm - check device status before sending mailbox"
  - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time"
  - Revert "crypto: hisilicon/qm - disable error report before flr"
  - crypto: hisilicon/zip - add data aggregation feature
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params
  - RDMA/mlx5: Fix the recovery flow of the UMR QP
  - arm64/kabi: use KABI_EXTEND to skip KABI check
  - arm64/config: add config to control whether enable HDBSS feature
  - arm64/kvm: support to handle the HDBSSF event
  - arm64/kvm: using ioctl to enable/disable the HDBSS feature
  - arm64/kvm: support set the DBM attr during memory abort
  - arm64/sysreg: add HDBSS related register information
  - uacce: fix for the numa distance calculation
  - uacce: fixes the mutex repeatedly locking error
  - mm/shmem: use xas_try_split() in shmem_split_large_entry()
  - mm/filemap: use xas_try_split() in __filemap_add_folio()
  - xarray: add xas_try_split() to split a multi-index entry
  - mm: shmem: add large folio support for tmpfs
  - mm: shmem: change shmem_huge_global_enabled() to return huge order bitmap
  - mm: factor out the order calculation into a new helper
  - Xarray: distinguish large entries correctly in xas_split_alloc()
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: yaoxin <1024769339@qq.com> - 20250113-1
changelog:
  - Update to 20250113:
    * Parse unknown timezones as UTC
    * Apk (Alpine Linux) format support added
    * Implement default value in parameter expansion
    * Also support supplements that use & as "and"
    * Add workaround for skopeo's argument parser
    * add cap-htm=off on power9
    * Fixed usage of chown calls
    * Remove leading `go` from `purl` locators


author: jianmin <jianmin@iscas.ac.cn> - 1.34.1-5
changelog:
  - Type:cve
  - CVE:CVE-2024-3727 CVE-2024-24791
  - SUG:NA
  - DESC: fix CVE-2024-3727 and Rebuild to fix CVE-2024-24791


author: liuxu <liuxu156@huawei.com> - 1:1.36.1-6
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: dongyuzhen <dongyuzhen@h-partners.com> - 23.4.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:net/sysconfig: do not remove all existing settings of /etc/sysconfig/network
         fix: typing for rsyslog, ubuntu_pro, power_state_change


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.27.9-5
changelog:
  - Support 
    /usr/bin/cmake --build "x86_64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/cmake-3.27.9-8.oe2403sp1.x86_64" /usr/bin/cmake --install "x86_64-openEuler-linux-gnu".


author: fuanan <fuanan3@h-partners.com> - 3.27.9-6
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: huyubiao <huyubiao@huawei.com> - 9.4-9
changelog:
  - fix alias sm3sum not working on bash
    delete redundant backport-chmod-fix-exit-status-when-ignoring-symlinks.patch


author: huyubiao <huyubiao@huawei.com> - 9.4-10
changelog:
  - sync patches from community
  - add backport-pinky-fix-string-size-calculation.patch
        backport-cksum-consistently-validate-length-attributes.patch
        backport-timeout-fix-race-where-we-might-kill-arbitrary-proce.patch
        backport-timeout-fix-narrow-race-in-failing-to-kill-processes.patch
        backport-maint-basenc-consistently-check-buffer-bounds-when-e.patch
        backport-putenv-Don-t-crash-upon-out-of-memory.patch
        backport-head-off_t-not-uintmax_t-for-file-offset.patch
        backport-shuf-avoid-integer-overflow-on-huge-inputs.patch
        backport-shuf-fix-randomness-bug.patch


author: hugel <gengqihu2@h-partners.com> - 9.4-12
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: lijian <lijian2@kylinos.cn> - 1.8.7-1
changelog:
  - update to 1.8.7
  - crun: new command "crun features".
  - linux: support io_priority from the OCI specs.
  - cgroup: allow setting swap to 0.
  - cgroup, systemd: set the memory limit on the system scope.


author: Funda Wang <fundawang@yeah.net> - 1:2.4.7-7
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: xingwei <xingwei14@h-partners.com> - 8.4.0-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         urlapi: fix redirect to a new fragment or query (only)
         tool_getparam: clear sensitive arguments better


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix freeing of resources in disconnect
         openssl: fix crash on missing cert password


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: renmingshuai <renmingshuai@huawei.com> - 2.89-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: huangdengdui <huangdengui@huawei.com> - 23.11-17
changelog:
  Sync some patchs from upstreaming for hns3 pmd and modifications
   are as follow:
   - dma/hisilicon: remove support for HIP09 platform
   - net/hns3: disable SCTP verification tag for RSS hash input
   - net/hns3: fix variable overflow
   - net/hns3: fix double free for Rx/Tx queue
   - net/hns3: fix read Rx timestamp handle
   - net/hns3: fix offload flag of IEEE 1588
   In addition, the following patch synchronizes the latest version
   - ethdev: fix strict aliasing lead to link cannot be up


author: yinbin <yinbin8@huawei.com> - 23.11-18
changelog:
  - change dpdk-* in dpdk-tools  from dynamic build to static build
  - add -s flag to remove symbols of dpdk-* in dpdk-tools


author: huangdengdui <huangdengui@huawei.com> - 23.11-19
changelog:
  Support more VLAN fields matching for hns3 and sync a bugfix
   - net/hns3: add Rx DMA address align check
   - net/hns3: support more VLAN fields matching


author: huangdengdui <huangdengui@huawei.com> - 23.11-24
changelog:
  Sync some patchs from upstreaming, includind some bugfixes, hns3 pmd
   flow rule priority feature, hns3 pmd outer VLAN flow match feature,
   and support dump reigser names and filter.
   This patch set is modified as follows:
   - net/hns3: fix cannot fully use hardware flow director table
   - net/hns3: fix error code for repeatedly create counter
   - net/hns3: support flow rule priority
   - common/nfp: use new kvargs process API
   - net/tap: use new kvargs process API
   - net/sfc: use new kvargs process API
   - kvargs: rework process API
   - net/hns3: fix variable type
   - net/hns3: fix pointer offset
   - net/hns3: fix error log
   - net/hns3: support filtering registers by module names
   - net/hns3: support reporting names of registers
   - net/hns3: refactor register dump
   - net/hns3: remove separators between register module
   - net/hns3: fix dump counter of registers
   - net/hns3: remove some basic address dump
   - telemetry: register command with private argument
   - ethdev: fix race on ports in telemetry endpoints
   - ethdev: add telemetry command for registers
   - ethdev: add report of register names and filter
   - net/hns3: support outer VLAN flow match
   - net/hns3: register VLAN flow match mode parameter
   - net/hns3: support general tunnel flow match
   - net/hns3: restrict tunnel flow rule to one header
   - net/hns3: remove ROH devices
   - net/hns3: dump queue head and tail pointer info
   - dmadev: fix potential null pointer access
   - net/hns3: verify reset type from firmware
   - ethdev: verify queue ID in Tx done cleanup


author: queyanwen<queyanwen@huawei.com> - 1.0.1-2
changelog:
  - Optimize the accuracy of non-steady-state data prediction and training.
  - The anbient temperature check is added befor the collection is started. If the temperature is
  - greater than 28°C, the collection will not be started.


author: queyanwen<queyanwen@huawei.com> - 1.0.1-3
changelog:
  - The current condition for determining whether the system enters the stable state is that
  - the difference between the maximum temperature and the minimum temperature within 60s is less than 0.2 degrees.
  - This judgment is too strict and needs to be changed to 2 degrees.
  - In addition, the average fuzzy processing in five windows is used to prevent data jitter.
  - When the entire system can obtain the CPU power consumption data, the obtained CPU power consumption
  - is directly used during training, instead of obtaining the CPU power consumption by inferring.


author: heppen<hepeng68@huawei.com> - 1.1.0-3
changelog:
  - Bug fix: Ctrl Auth request on main thread, but release on socket thread.
  - Bug fix: Modify policy file but do not take effect.
  - Bug fix: IsNumStr returns false when the input string is a negative number.
  - Add instructions to the config file.


author: jinye<jinye10@huawei.com> - 1.1.0-4
changelog:
  - Bug fix: Default policy can't restore after stop eagle service
  - Bug fix: Some spell bugs
  - Bug fix: Modify watt_sched_enable don't take effect
  - Bug fix: Set watt_sched_enable as zero SetWattFirstDomain return error
  - Reconstruct eagle init and load part


author: Xiaotian Wu <wuxiaotian@loongson.cn> - 202308-17
changelog:
  - Update LoongArch virtual machine
  - 0080-Platform-Loongson-Remove-minimium-memory-size-limita.patch
  - 0081-Platform-Loongson-Modify-loongarch-uefi-firmware-siz.patch
  - 0082-fixup-fdt-parse-error.patch


author: fuanan <fuanan3@h-partners.com> - 0.189-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Remove unnecessary patch because this patch is contained in elfutils-0.189.tar


author: lifeifei <lifeifei@kylinos.cn> - 0.190-3
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add noreplace to /usr/lib/sysctl.d/10-default-yama-scope.conf


author: wangqiang <wangqiang1@kylinos.cn> - 0.190-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: Fix handling of corefiles with non-contiguous .so segments


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: lvxiangcong <lvxiangcong@kylinos.cn> - 3.4.14-16
changelog:
  - Type:CVES
  - ID:CVE-2024-24791 CVE-2023-45288 CVE-2024-24783 CVE-2024-24785 CVE-2023-45290
       CVE-2023-39326
  - SUG:NA
  - DESC:Batch fix cves through rebuild


author: wangkai <13474090681@163.com> - 128.4.0-1
changelog:
  - Update to 128.4.0
  - Fix CVE-2024-10458 CVE-2024-10459 CVE-2024-10460 CVE-2024-10461 CVE-2024-10462
    CVE-2024-10463 CVE-2024-10464 CVE-2024-10465 CVE-2024-10466 CVE-2024-10467


author: wangkai <13474090681@163.com> - 128.5.0-1
changelog:
  - Update to 128.5.0
  - Fix CVE-2024-11691 CVE-2024-11692 CVE-2024-11694 CVE-2024-11695 CVE-2024-11696
    CVE-2024-11697 CVE-2024-11699


author: wangkai <13474090681@163.com> - 128.6.0-1
changelog:
  - Update to 128.6.0
  - Fix CVE-2025-0237 CVE-2025-0238 CVE-2025-0239 CVE-2025-0240 CVE-2025-0241
    CVE-2025-0242 CVE-2025-0243


author: wangkai <13474090681@163.com> - 128.7.0-1
changelog:
  - Update to 128.7.0
  - Fix CVE-2025-1009 CVE-2025-1010 CVE-2025-1011 CVE-2025-1012 CVE-2025-1013
    CVE-2025-1014 CVE-2025-1016 CVE-2025-1017


author: wangkai <13474090681@163.com> - 128.8.0-1
changelog:
  - Update to 128.8.0
  - Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
    CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938


author: wangkai <13474090681@163.com> - 128.10.0-1
changelog:
  - Update to 128.10.0
  - Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093


author: wangkai <13474090681@163.com> - 128.11.0-1
changelog:
  - Update to 128.11.0
  - Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
  - Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269


author: wangkai <13474090681@163.com> - 128.13.0-1
changelog:
  - Update to 128.13.0
  - Fix CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032
    CVE-2025-8033 CVE-2025-8034 CVE-2025-8035


author: wangkai <13474090681@163.com> - 128.3.0-1
changelog:
  - Update to 128.3.0
  - Fix CVE-2024-9392 CVE-2024-9393 CVE-2024-9394 CVE-2024-9396
    CVE-2024-9397 CVE-2024-9398 CVE-2024-9399 CVE-2024-9400 CVE-2024-9401
    CVE-2024-9402


author: wangkai <13474090681@163.com> - 140.3.1-1
changelog:
  - Update to 140.3.1
  - Fix CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10532 CVE-2025-10533
    CVE-2025-10536 CVE-2025-10537 CVE-2025-9182 CVE-2025-9183 CVE-2025-9184
    CVE-2025-8036 CVE-2025-8037 CVE-2025-8038 CVE-2025-8039 CVE-2025-8040


author: Funda Wang <fundawang@yeah.net> - 140.4.0-1
changelog:
  - update to 140.4.0
  - fix CVE-2025-11708, CVE-2025-11709, CVE-2025-11710, CVE-2025-11711,
    CVE-2025-11712, CVE-2025-11713, CVE-2025-11714, CVE-2025-11715


author: yinbin <yinbin8@huawei.com> - 1.0.2-77
changelog:
  - openGauss: support kernel connnect
  - xdp: support stack bind numa
  - CFG: fix xdp iface check error
  - fix build error in 2003SP4
  - cfg: show dpdk args after dpdk_adjust_args
  - fix free null pointer when no matching device is found
  - update test/unitest/ltran/ltran_param_test.c.
  - Fix the wrong spelling description in the notes and logs
  - LWIP: adjust position of shutdown in callback of connect
  - fix socket of control thread is overwirtten due to another primary process start


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-85
changelog:
  - sockio: fix rpc_send coredump after RPC_MSG_EXIT
  - sockio: fix tcp_write not remove EPOLLOUT
  - fix 20.03-LTS build failed
  - sk_wait: igonre mem_thread flush signal
  - sockio: fix sendmbox full return EWOULDBLOCK
  - sockio: fix callback_tcp_send output too many at once
  - mempool: increase MEM_THREAD_MANAGER_FREE_S to avoid poll
  - sockctl: fix rtw broadcast close and shutdown
  - poll: fix do_lwip_connected_callback not delete poll kernel fd
  - sk_event: fix rtw epoll wrong event notify and remove
  - sockio: fix rtw_stack_tcp_write wrong copied_total after append
  - epoll: fix do_lwip_connected_callback
  - sk_wait: fix lwip_wait_foreach_notify coredump at startup
  - socket: fix stack_udp_readmsg return len
  - sk_wait: fix sock_wait_common_free socket: simplify calling free_count in rtw_stack_tcp_write
  - mbox: fix mbox_ring_common_free coredump when rte_ring_create failed
  - sk_wait: fix lwip_tcp_allow_send coredump
  - mempool: stop using cache when too many threads
  - mempool: fix pthread_tryjoin_np coredump when mysqld shutdown
  - mempool: mem_get_rpc add reserve limit
  - mempool: fix mbox_ring free not call recv_finish_burst
  - mempool: modify mbuf num and rpc_msg num
  - socket: fix sk_wait cannot be interrupted by signals
  - socket: fix tcp closed
  - tcp: add GAZELLE_TCP_ASYNC_RECVD      fix mbuf OOM caused by untimely sockio_peek_recv_free
  - socket: fix stack_tcp_read do not recv_finish_burst
  - socket: fix connect blocking
  - mempool: fix copy_mbuf_private
  - dfx: support sk_wait stat
  - mempool: add mem_thread_cache_flush          fix PBUF_POOL_PREINIT
  - cfg: add mem_async_mode
  - cfg: add mem_cache_max and change default rpc_msg_max
  - socket: adapt to tcp and udp
  - socket: refactor tcp and udp
  - socket: adapt to sock_event
  - socket: refactor sock_event
  - cleancode: remove get_stack_tid DPDK_PKT_BURST_SIZE PACKET_READ_SIZE
  - cleancode: remove gazelle_light_ring
  - cleancode: add GAZELLE_SAME_NODE
  - RTC: fixing program stuck while gazelle exit in multi-threads envirement


author: liuchao <liuchao173@huawei.com> - 14.1-1
changelog:
  - upgrade GDB version to 14.1:
    - GDB no longer support AiX 4.x, 5.x and 6.x. The minimum version supported is AiX 7.1.
    - GDB/MI version 1 support has been removed
    - Initial built-in support for Debugger Adapter Protocol (DAP)
    - GDB now recognizes the NO_COLOR environment variable
    - Initial support for integer types larger than 64 bits
    - Breakpoints can now be inferior-specific
    - New convenience function "$_shell", to execute a shell command and return its result.
    - Python support
    - Support for enabling or disabling individual remote target features
    - New 'no-history' stop reason
    - Support for inferior-specific breakpoints
    - The bkpt tuple, which appears in breakpoint-created notifications, and in the result of the -break-insert command can now include an optional 'inferior' field for both the main breakpoint, and each location, when the breakpoint is inferior-specific.
    - Trying to create a thread-specific breakpoint using a non-existent thread ID now results in an error
    - New "simple-values-ref-types" -list-feature value indicating how the --simple-values option in various commands take reference types into account.
    - Initial support for Scalable Matrix Extension (SME) and for Scalable Matrix Extension 2 (SME2)
    - The 'org.gnu.gdb.aarch64.pauth' Pointer Authentication feature is now deprecated in favor of the 'org.gnu.gdb.aarch64.pauth_v2' feature string
    - Support for the Ada 2022 target name symbol ('@')
    - Support for the The Ada 2022 'Enum_Rep and 'Enum_Val attributes
    - The 'list' command now accepts '.' as an argument, telling GDB to print the location around the point of execution within the current frame
    - New '%V' output format for printf and dprintf commands.
    - The printf command now limits the size of strings fetched from the inferior to the value of the 'max-value-size' setting.
    - Support for extending at configure time the default value of the 'debug-file-directory' GDB parameter via the new --additional-debug-dirs=PATHs configure option.
    - New command "info main"
    - New command "set tui mouse-events [on|off]" (on by default)
    - New command "set always-read-ctf on|off" (off by default)
    - Various new debug and maitenance commands


author: yaoxin <yao_xin001@hoperun.com> - 0.4.50-1
changelog:
  - Update to 0.4.50:
  - Core:
    * Better Gobject Introspection annotation coverage.
    * Improved error handling for gegl chain processing.
    * Added accessors for pad meta-data, to be able to show names and descriptions in UIs.
    * GeglColor: more lax parameters for g_arapm_values_cmp
    * exr-save: store 16bpc files as half, fixing gimp#10778
    * ff-load, ff-save: fix build with FFmpeg 7
    * dither: do processing in linear when all levels==2


author: zhangxianting <zhangxianting@uniontech.com> - 9.56.1-6
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: fuanan <fuanan3@h-partners.com> - 2.39.1-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.39.1-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.43.0-4
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: Xinwei Hu <shinwell_hu@openeuler.sh> - 3.6.0-1
changelog:
  - Upgrade to 3.6.0
    - Support multi-stage authentication with Git credential helpers and relative worktree paths
    - New object transfer batch size configuration option
    - More POSIX-compliant hook scripts


author: Funda Wang <fundawang@yeah.net> - 3.6.1-1
changelog:
  - Upgrade to 3.6.1
    - fix CVE-2024-53263: Git LFS permits retrieval of credentials via crafted HTTP URLs


author: yanglu <yanglu72@h-partners.com> - 2.78.0-1
changelog:
  - update glib-networking version to 2.78.0:
    - disable PKCS#11 tests when GNuTLS is built without PKCS#11 support
    - fix connection tests on 32-bit systems with 64-bit time_t
    - updated translations


author: zhangzikang <zhangzikang@kylinos.cn> - 2.78.3-3
changelog:
  - backport patch:
      backport-gdbusmessage-Clean-the-cached-arg0-when-setting-the-message-body.patch
      backport-gsocketclient-Fix-a-use-after-free-in-g_socket_client_connected_callback.patch
      backport-gcontextspecificgroup-Wait-until-stop_func-is-done.patch
      backport-gresources-fix-memory-leak-from-libelf.patch


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-45
changelog:
  - nptl: initialize cpu_id_start prior to rseq registration
  - nptl: initialize rseq area prior to registration


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-52
changelog:
  - stdlib: Test using setenv with updated environ [BZ #32588]
  - Fix underallocation of abort_msg_s struct (CVE-2025-0395)
  - elf: Support recursive use of dynamic TLS in interposed malloc
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - x86/string: Fixup alignment of main loop in str{n}cmp-evex [BZ #32212]
  - x86: Improve large memset perf with non-temporal stores [RHEL-29312]
  - x86_64: Fix missing wcsncat function definition without multiarch (x86-64-v4)
  - sysdeps/x86/Makefile: Split and sort tests
  - x86: Only align destination to 1x VEC_SIZE in memset 4x loop
  - elf: Fix slow tls access after dlopen [BZ #19924]
  - x86: Check the lower byte of EAX of CPUID leaf 2 [BZ #30643]
  - x86_64: Add log1p with FMA
  - x86_64: Add expm1 with FMA
  - x86_64: Add log2 with FMA
  - x86_64: Sort fpu/multiarch/Makefile


author: xiajimei <xiejiamei@hygon.cn> - 2.38-56
changelog:
  - x86: Enable non-temporal memset for Hygon processors
  - x86: Add `Avoid_STOSB` tunable to allow NT memset without ERMS
  - x86: Use `Avoid_Non_Temporal_Memset` to control non-temporal path
  - x86: Disable non-temporal memset on Skylake Server
  - x86: Fix value for `x86_memset_non_temporal_threshold` when it is undesirable
  - x86: Enable non-temporal memset tunable for AMD
  - x86: Add seperate non-temporal tunable for memset
  - x86: Fix Zen3/Zen4 ERMS selection (BZ 30994)
  - x86: Add cache information support for Hygon processors
  - x86: Add new architecture type for Hygon processors


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-57
changelog:
  - math: Improve layout of exp/exp10 data
  - AArch64: Use prefer_sve_ifuncs for SVE memset
  - AArch64: Add SVE memset
  - math: Improve layout of expf data
  - AArch64: Remove zva_128 from memset
  - AArch64: Optimize memset
  - AArch64: Improve generic strlen
  - assert: Add test for CVE-2025-0395


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-58
changelog:
  - x86_64: Fix typo in ifunc-impl-list.c.
  - elf: Test case for bug 32976 (CVE-2025-4802)
  - support: Add support_record_failure_barrier
  - support: Use const char * argument in support_capture_subprogram_self_sgid
  - elf: Ignore LD_LIBRARY_PATH and debug env var for setuid for static


author: xuraoqing <xuraoqing@huawei.com> - 3.8.2-1
changelog:
  - update to 3.8.2
  - some API and ABI modifications, see NEWS for details
  - New option --attime to specify current time
  - libgnutls: Add a mechanism to control whether to enforce extended master secret (RFC 7627)
  - libgnutls: Add additional PBKDF limit checks in FIPS mode as defined in SP 800-132
  - libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to %GNUTLS_NO_DEFAULT_EXTENSIONS.
  - libgnutls: Add support for RFC 9258 external PSK importer.
  - libgnutls: ClientHello extensions are randomized by default,
               To make fingerprinting harder, TLS extensions in ClientHello messages are shuffled.
  - gnutls-cli: New option --starttls-name.
  - libgnutls: transparent KTLS support is extended to FreeBSD kernel.
  - libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452).
  - libgnutls: Add API functions to perform ECDH and DH key agreement.
  - libgnutls: Fix timing side-channel inside RSA-PSK key exchange(CVE-2023-5981).


author: wangshuo <wangshuo@kylinos.cn> - 1.21.4-25
changelog:
  - Type:CVE
  - CVE:CVE-2024-34158
  - SUG:NA
  - DESC:fix CVE-2024-34158
  -      optimize the names of the first two patch files


author: wangshuo <wangshuo@kylinos.cn> - 1.21.4-29
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:crypto/tls: fix Config.Time in tests using expired certificates


author: Vanient <xiadanni1@huawei.com> - 1.21.4-30
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: allow update of system stack bounds on callback from C thread


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:10_linux: fix missing "ro" in kernel boot parameters
         Disable LTO


author: hanliyang <hanliyang@hygon.cn> - 1:2.12-26
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:use confidential computing provisioned secrets for disk decryption


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.12-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:acpi: Fix out of bounds access in grub_acpi_xsdt_find_table()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:commands/efi/tpm: Re-enable measurements on confidential computing platforms


author: Funda Wang <fundawang@yeah.net> - 1:2.12-32
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:disable fortify level based on new settings of openEuler-rpm-config


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-33
changelog:
  - Type:CVE
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
  24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
  25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
  -0678,CVE-2025-1125
  - SUG:NA
  - DESC:fix the vulnerabilities announced on February 18th, 2025


author: Funda Wang <fundawang@yeah.net> - 1:2.12-40
changelog:
  - requirement
  - CVE:NA
  - SUG:NA
  - DESC: Disable the .package_note awfulness
  - DESC: drop duplicate list of locale files


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: xinghe <xinghe2@h-partners.com> - 2.9.5-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: xinghe <xinghe2@h-partners.com> - 2.9.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.9.5-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: xinghe <xinghe2@h-partners.com> - 2.9.5-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         server/addr: fix tune.events.max-events-at-once event miss and leak


author: xinghe <xinghe2@h-partners.com> - 2.6.6-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:backport to fix potential coredump:
         errors: handle malloc failure in usermsgs_put
         ssl_sock: add check for ha_meth
         thread: add a check for pthread_creat


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.58-2
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: zhangyaqi <zhagnyaqi@kylinos.cn> - 2.4.58-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:allocate a heap buffer if the configured size is greater than the stack-allocated buffer.


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.58-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.58-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: chengyechun <chengyechun1@huawei.com> - 2.4.55-5
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802, CVE-2023-43622
  - SUG:NA
  - DESC:fix CVE-2023-31122 and CVE-2023-45802 and CVE-2023-43622


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 50.0-10
changelog:
  - Type: requirement
  - ID: NA
  - SUG: NA
  - DESC: Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: Funda Wang <fundawang@yeah.net> - 50.0-14
changelog:
  - adopt to new cmake macro
  - migrated to SPDX license
  - drop useless setup macro, cause it duplicates with autosetup
  - drop useless ldconfig_scriptlets, it has been done through glibc's
    filetriggers since openeuler 1.0


author: Xinghai Cen <cenxinghai@h-partners.com> - 50.0-17
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Fix coredump during QP destruction when send_cq == recv_cq


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-32
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Increase input parameter checks and adjust inline data size.


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:6.1.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix testsuite build failure and delete libcap-devel dependency


author: xinghe <xinghe2@h-partners.com> - 1:6.6.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc
         remove redundant patches


author: yanglu <yanglu72@h-partners.com> - 1.8.9-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ebtables translate Print flush command after parsing is finished
         fix crash when opts isn't reallocated
         Fix handling of non-existent chains
         nft: Special casing for among match in compare_matches
         extensions: libipt_icmp: Fix confusion between 255/255 and any
         Revert libiptc: fix wrong maptype of base chain counters on restore
         extensions: Fix checking of conntrack --ctproto 0
         libxtables: xtoptions: Fix for non-CIDR-compatible hostmasks
         libxtables: xtoptions: Prevent XTOPT_PUT with XTTYPE_HOSTMASK
         libiptc: Fix for another segfault due to chain index NULL pointer


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.432.b06-2
changelog:
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8253072-XERCES-version-is-displayed-incorrect.patch
  - add 8159461-8288556-getComponentType.patch
  - add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
  - add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.452.b09-0
changelog:
  - update to 8u452
  - modified add-missing-test-case.patch
  - modified GCC-12-reports-some-compiler-warnings.patch


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: Benshuai5D <benshuai5d@huawei> - 1:17.0.14.7-0
changelog:
  - update to 17.0.14
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8280872-Reorder-code-cache-segments-to-improv.patch
  - modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch


author: Benshuai5D <zhangyunbo7@huawei.com> - 1:21.0.6.7-0
changelog:
  - update to jdk21.0.6-ga
  - delete Backport-JDK-8207908-JMXStatusTest.java-fails-assert.patch
  - delete Backport-JDK-8320682-[AArch64]-C1-compilation-fails-.patch
  - delete Backport-JDK-8331391-Enhance-the-keytool-code-by-inv.patch
  - delete Backport-JDK-8332866-Crash-in-ImageIO-JPEG-decoding-.patch
  - delete Backport-of-8337067-Test-runtime-classFileParserBug-.patch
  - delete Backport-of-JDK-8316895-SeenThread-print_action_que.patch
  - delete Backport-of-JDK-8328723-IP-Address-error-when-client.patch
  - modify Backport-JDK-8329174-update-CodeBuffer-layout-in-com.patch
  - modify Backport-JDK-8340623-Remove-outdated-PROCESSOR_ARCHI.patch


author: wulongyao <wulongyao1@huawei.com> - 1:21.0.6.7-2
changelog:
  - add huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add huawei-Add-KAE-Provider.patch
  - add huawei-Add-KAE-zip-feature.patch
  - add huawei-Fix-arm32-build-failed-undefined-reference.patch
  - add huawei-Add-Fast-Serialzer.patch
  - add huawei-Add-Hashmap-frontCache-opt.patch
  - add huawei-1-add-port-jbolt-feature.patch
  - add huawei-heap-dump-redact-support.patch
  - add huawei-Adapt-to-clang-build-toolchain.patch
  - add huawei-Add-KAE-SM2.patch


author: Dingli Zhang <dingli@iscas.ac.cn> - 1:21.0.6.7-3
changelog:
  - add RVA23 profile and disable auto-enable Vector on buggy kernels for riscv64
  - add Backport-JDK-8315338-RISC-V-Change-flags-for-stable-.patch
  - add Backport-JDK-8329083-RISC-V-Update-profiles-supporte.patch
  - add Backport-JDK-8343555-RISC-V-make-some-verified-on-ha.patch
  - add Backport-JDK-8348554-Enhance-Linux-kernel-version-ch.patch
  - add Backport-JDK-8348384-RISC-V-Disable-auto-enable-Vect.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:21.0.7.6-0
changelog:
  - update to jdk21.0.7-ga
  - delete Backport-JDK-8328553-Get-rid-of-JApplet-in-test-jdk-.patch
  - delete Backport-JDK-8336012-Fix-usages-of-jtreg-reserved-pr.patch
  - delete huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
  - modify huawei-Adapt-to-clang-build-toolchain.patch
  - add huawei-fix-build-fail-realpath.patch
  - modify huawei-heap-dump-redact-support.patch


author: Dingli Zhang <dingli@iscas.ac.cn> - 1:21.0.7.6-4
changelog:
  - add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
  - add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 1.6-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 0.17-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Disallow control characters in strict mode
          Fix the expected output for test_parse
          Fix causing the strict-mode control characters check to incorrectly trigger


author: sunhai <sunhai10@huawei.com> - 0.17-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict.


author: sunhai <sunhai10@huawei.com> - 0.17-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Handle NULL gracefully in json_tokener_free
          Issue 881 don t allow json_tokener_new_ex with a dep


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.9-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove .export_symbol section newly added in 6.6 kernel to avoid compile error


author: jinsaihang <jinsaihang@h-partners.com> - 1:0.9.9-13
changelog:
  - Type:bugfix
  - CVE:NA  
  - SUG:NA  
  - DESC:check whether the directory is a user source code directory


author: zouzhimin <zouzhimin@kylinos.cn> - 4.13.0-13
changelog:
  - nfsserver: fix "server scope" functionality for both potentially other dropins AND multiple ExecStart


author: zouzhimin <zouzhimin@kylinos.cn> - 4.15.1-1
changelog:
  - update to 4.15.1
  - IPaddr2: dont fail with "IPv4 does not support lvs_ipv6_addrlabel"
    error, as the parameter is not used in IPv4 scenarioes


author: laokz <zhangkai@iscas.ac.cn> - 0.0.1-7
changelog:
  - Type:Enhancement
  - ID:NA
  - SUG:NA
  - DESC: Add riscv64 support. Patches are from nix v0.17.0 and v0.18.0.
          Add protobuf-compiler to avoid patching big binary for prost-build.


author: xuxuepeng <xuxuepeng1@huawei.com> - 0.0.1-8
changelog:
  - Type:Enhancement
  - ID:NA
  - SUG:NA
  - DESC: Simplify Store api, remove unnecessary validation
          Check if a path is abstract before connection
          Add vsock support.


author: zhangyao <zhangyao108@huawei.com> - 2.39.1-15
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport community patches
          backport-sys-utils-setpriv-fix-potential-memory-leak.patch
          backport-sys-utils-save_adjtime-fix-memory-leak.patch
          backport-wall-fix-possible-memory-leak.patch
          backport-suL-fix-use-after-free-on-error.patch


author: yuanchicheng <chicheng.oerv@isrc.iscas.ac.cn> - 2.39.1-17
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport community patches
          backport-lscpu-add-riscv-cputype-support.patch


author: zhangyao <zhangyao108@huawei.com> - 2.39.1-19
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport community patches
         [add] backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch
         backport-libblkid-fix-potential-memory-leaks.patch
         backport-sys-utils-fix-add-NULL-check-for-mnt_fs_get_target-r.patch
         backport-sulogin-fix-POSIX-locale-use.patch
         backport-setpriv.c-fix-memory-leak-in-parse_groups-function.patch
         backport-whereis-avoid-accessing-uninitialized-memory.patch
         backport-dmesg-fix-notime-use.patch


author: zhangting <dev03303@linx-info.com> - 2.39.1-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix an issue that mkfs.bfs fix memory leak
  	mkfs.bfs-fix-memory-leaks-and-weak-code.patch


author: hugel <gengqihu2@h-partners.com> - 2.39.1-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert community patch
         [del] backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch


author: wangzhiqiang <swangzhiqiang95@huawei.com> - 3.0.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add BDPluginSpec constructor and use it in plugin_specs_from_names


author: tianmuyang <tianmuyang@huawei.com> 2:1.2.2-11
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-11
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
    backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
    backport-libbpf-Fix-is_pow_of_2.patch
    backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:1.2.2-2
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-NULL-pointer-dereference-in_bpf_object__c.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:1.2.2-4
changelog:
  - backport patch from upstream:
    backport-libbpf-Avoid-uninitialized-value-in-BPF_CORE_READ_BI.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:1.2.2-5
changelog:
  - backport patch from upstream:
    backport-libbpf-Add-NULL-checks-to-bpf_object__prev_map,next_.patch
    backport-libbpf-Apply-map_set_def_max_entries-for-inner_maps-.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:1.2.2-6
changelog:
  - backport patch from upstream:
    backport-libbpf-Dont-take-direct-pointers-into-BTF-data-from-.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:1.2.2-8
changelog:
  - backport patch from upstream:
    backport-libbpf-Do-not-resolve-size-on-duplicate-FUNCs.patch
    backport-libbpf-Fix-bpf_object__open_skeleton-s-mishandling-o.patch
    backport-libbpf-Fix-segfault-due-to-libelf-functions-not-sett.patch
    backport-libbpf-Fixed-getting-wrong-return-address-on-arm64-a.patch
    backport-libbpf-fix-sym_is_subprog-logic-for-weak-global-subp.patch
    backport-libbpf-move-global-data-mmap-ing-into-bpf_object__lo.patch


author: yanglongkang <yanglongkang@h-partners.com> - 2.69-3
changelog:
  - backport upstream patches:
    getpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: Kai Liu <kai.liu@windriver.com> - 1:1.49.5-5
changelog:
  - Replace patch support_OPENEULER_to_configure.patch by backport-support-openEuler.patch
    which is backported from upstream, fix issue of detecting openEuler.
  - Add provide-openEuler-appliance-package-list.patch after correctly detected openEuler.
    It was using REDHAT list before.


author: xinghe <xinghe2@h-partners.com> - 8.17.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:extending the certificate validate period
         remove redundant patches


author: xinghe <xinghe2@h-partners.com> - 2.74.3-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-5
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-7
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: renmingshuai <renmingshuai@huawei.com> - 0.10.5-2
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-5
changelog:
  - Type:CVE
  - Id:CVE-2025-4877 CVE-2025-4878 CVE-2025-5351 CVE-2025-5987 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877CVE-2025-4878CVE-2025-5351CVE-2025-5987CVE-2025-5372


author: hankangkang <hankangkang5@huawei.com> - 2.2.0-62
changelog:
  - When the GAZELLE_TCP_REUSE_IPPORT is on, min_cnts_lpcb is NULL
  - Turn on the LWIP_SO-LINGER switch


author: wujichao <wujichao1@huawei.com> - 0.3-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bugfix: Information in cpu directory is overwritten after lxcfs restart


author: xiejing <xiejing@kylinos.cn> - 4:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096
  - Fix version description in systemd service file
  - Add conflict with greatsql and change requires


author: wangkai <13474090681@163.com> - 20240312-1
changelog:
  - Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
    CVE-2023-22655, CVE-2023-43490, CVE-2023-28746


author: Funda Wang <fundawang@yeah.net> - 20240813-1
changelog:
  - update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
    CVE-2024-24980, CVE-2023-42667, CVE-2023-49141


author: Funda Wang <fundawang@yeah.net> - 20250211-1
changelog:
  - update to 2025021 for fix CVE-2024-28047, CVE-2024-31157, CVE-2024-39279,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-24582, CVE-2023-34440, CVE-2024-37020,
    CVE-2024-39355, CVE-2023-43758, CVE-2024-36293, CVE-2024-31068


author: Funda Wang <fundawang@yeah.net> - 20250512-1
changelog:
  - update to 20250512 to fix CVE-2024-28956, CVE-2025-24495, CVE-2025-20012,
    CVE-2024-45332, CVE-2025-20623, CVE-2024-43420, CVE-2025-20054, CVE-2025-20103


author: Funda Wang <fundawang@yeah.net> - 20250812-1
changelog:
  - update to 20250812 to fix CVE-2025-20053, CVE-2025-20109, CVE-2025-21090,
    CVE-2025-22839, CVE-2025-22840, CVE-2025-22889, CVE-2025-24305, CVE-2025-26403,
    CVE-2025-32086


author: yaoxin <1024769339@qq.com> - 2.4.16.6-1
changelog:
  - Update to 2.4.16.6:
    * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
    * info: fix requests to the info hook with extend_session=false
    * cookie: OIDCCookieSameSite default behaviour Lax
    * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
    * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
      cannot be found on the system upon initaliizing cache mutexes and the file cache
    * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
      compatibility with <=2.4.15.7 and to support private/test deployments
    * code: address warnings from static code analysis tool CodeChecker


author: wangkai <13474090681@163.com> - 8.0.37-1
changelog:
  - Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
    CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
    CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
    CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
    CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
    CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
    CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
    CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
    CVE-2024-21057,CVE-2023-6129)


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: lingsheng <lingsheng1@h-partners.com> - 1:1.0.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: liweigang <liweiganga@uniontech.com> - 1:1.0.8-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: evaluate: guard against NULL basetype
  evaluate: error out if basetypes are different
  evaluate: reject attempt to update a set
  evaluate: release mpz type in expr_evaluate_list() error path
  expression: missing line in describe command with invalid expression
  evaluate: handle invalid mapping expressions in stateful object statements gracefully


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix crash in json_parse_set_stmt_list
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: eaglegai <eaglegai@163.com> - 1:1.0.8-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: don't allow nat map with specified protocol
         rule: return error if table does not exist
         json: make sure timeout list is initialised
         evaluate: don't update cache for anonymous chains
         json: return error if table does not exist
         json: don't BUG when asked to list synproxies
         evaluate: compact STMT_F_STATEFUL checks
         evaluate: only allow stateful statements in set and map definitions
         optimize: expand expression list when merging into concatenation
         netlink: fix stack overflow due to erroneous rounding
         netlink: bogus concatenated set ranges with netlink message overrun
         netlink: fix crash when ops doesn't support udata
         netlink: Catch unknown types when deserializing objects
         netlink: Avoid potential NULL-ptr deref parsing set elem expressions
         netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY
         evaluate: don't BUG on unexpected base datatype
         src: BASECHAIN flag no longer implies presence of priority expression
         parser_bison: only reset by name is supported by now


author: xingwei <xingwei14@h-partners.com> - 2:7.92-4
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead


author: wangkai <13474090681@163.com> - 1:20.11.1-1
changelog:
  - Update to 20.11.1
  - Fix CVE-2023-46809 CVE-2024-21896 CVE-2024-22019 CVE-2024-21892 CVE-2024-24758 CVE-2024-22025


author: yaoxin <yao_xin001@hoperun.com> - 1:20.12.1-1
changelog:
  - Update to 20.12.1:
    * CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session()
      leads to HTTP/2 server crash- (High)
    * CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
    * llhttp version 9.2.1
    * undici version 5.28.4


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:20.12.1-2
changelog:
  - fix building w/ clang: only apply '-fno-ipa-icf' for gcc && disable LTO for clang + ld.bfd
  - improve the handling of trilling whitespaces in C/CXXFLAGS


author: Ge Wang <wang__ge@126.com> - 1:20.12.1-3
changelog:
  - CVE-2023-45853 - Reject overflows of zip header fields in minizip
  - CVE-2024-5274 - Using FunctionParsingScope for parsing class static
  - CVE-2024-5535 - Fix SSL_select_next_proto
  - CVE-2024-7971 - Spill all loop inputs before entering loop


author: wangkai <13474090681@163.com> - 1:20.18.2-1
changelog:
  - Update to 20.18.2
  - Fix CVE-2025-23083 CVE-2025-23085 CVE-2025-23084 CVE-2024-36137
    CVE-2024-22018 CVE-2024-22020


author: yyjeqhc <jialin.oerv@isrc.iscas.ac.cn> - 0.2.17-3
changelog:
  - Migrated legacy `import pango` and `pangocairo` usage to modern PyGObject (`gi.repository.Pango`, `PangoCairo`)
  - Replaced all legacy constants (`pango.STRETCH_...`) with `Pango.Stretch.XXX` enums


author: fly_1997 <flylove7@outlook.com> -v2.0.2-4
changelog:
  - use double for analysis tlb parameters
  - if an error occurs during smc config loading, smc_tune fails to be enabled
  - remove unused instance


author: LHesperus <liuchanggeng@huawei.com> -v2.1.0-1
changelog:
  - remove the logger.h interface and add TRACE interface, increase safe_queue wait time to 5s
  - support reload log-level online
  - adapt analysis on riscv
  - add load base sched instance
  - v2.0.6-3 add adapt dynamicsmt analysis if smt is not enable
  - fix code check
  - add trace log and change level intf and delete logger
  - smc-d analysis fix inconsistency in the display of zero connection
  - v2.0.6-2 add realtime compile macro
  - v2.0.6-1 add smc_acc.yaml check and some logs
  - add net_hardirq_tune_data.h
  - fux binary coredump
  - v2.0.5-3 fix xcall analysis issues
  - v2.0.5-2 improve some output format
  - add xcall prefetch
  - network interface plugin : adapt same nic with different ifindex
  - v2.0.5-1 fix issues
  - v2.0.4-1 add docker coordination burst tune
  - add multi net path tune and analysis
  - add error log and params check
  - v2.0.3-3 oeaware-sdk enhances user permissions
  - v2.0.3-2 Fixed memory leak issues:
    - Fixed unsubscribeHandler topic deserialize memory leak
    - Fixed analysis module memory leak
  - Enhanced eBPF functionality:
    - Set memory lock limit to infinity for eBPF
    - Used eBPF to collect thread information
  - Network improvements:
    - Fixed ntoh port error
    - Added support for attaching all network interfaces
    - Used tcp-set-state to adapt k8s docker
  - New features:
    - Added xcall parameters
    - Added support for docker coordination burst analysis
    - Added parameter validation
    - Added NUMA parallel scheduler tuning support
  - Other improvements:
    - Fixed header files and added CI test
  - v2.0.3-1: Refactored and enhanced the analysis module:
    - Added scenario-aware analysis for multiple optimization plugins
    - Introduced command-line result viewing capability
    - Implemented Markdown format output support
  - Add new plugin: smt,binary,hirq


author: fly_1997 <flylove7@outlook.com> -v2.1.1-1
changelog:
  - add hwprobe_analysis for RISC-V
  - fix error logger info
  - support kernel cluster scheduler
  - adapt for kylin-v10-sp3
  - realtime tune add new tuning item
  - fix smc insmod err
  - realtime tune skip grubby update
  - add hwprobe_tune hwprobe_ext_zbb_tune for RISC-V
  - add high_load value check


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
  - Add fio test cases:read,write,randread,randwrite
  - Solve the nvme line break issue in the command line interface
  - Fix compilation errors in the make command
  - Add Vulkan testcase for nvida GPU
  - Resolve the issue of oech server startup failure on version 24.03


author: xiaochn <xiaochuannan@inspur.com> - 1.1.5-3
changelog:
  - Resolve the issue of different kernel source download locations in kabi test case
  - Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
  - Add the way for manually adding kabiwhitelist file
  - For custom vendors, refer to the method of obtaining openEuler os information
  - Supports custom vendor


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-0
changelog:
  - Add new test suite srpm and intel
  - Add virtual branch of test suite
  - Add support for Kylin and UOS
  - Bugfix


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: xiaochn <xiaochuannan@inspur.com> - 1.1.7-1
changelog:
  - Add KylinSec 3.5.3 support
  - Fix the problem of disk size calculation
  - Fix bcm57414 nic test failed issue
  - Change the format of date
  - Fixed a bug where a non-existent logger level was used
  - Update README.md
  - Fix vgpu testing issue


author: Xiaoqian Lv <xiaoqian@nj.iscas.ac.cn> - 4.5-5
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: backport upstream 4.5-0.20 patches to support riscv64


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: pengjian <pengjian23@mails.ucas.ac.cn> - 1:0.82-3
changelog:
  - Introduced environment variable-controlled polling timeouts 
  for the close and connection-keeping functions in the os_unix.c file.


author: duyiwei <duyiwei@kylinos.cn> - 1:4.9.4-10
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC: Optimize spec files and fix CVE in batches through rebuild


author: duyiwei <duyiwei@kylinos.cn> - 1:4.9.4-11
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9676,CVE-2024-9675, CVE-2024-9407,CVE-2024-9341
  - SUG:NA
  - DESC: fix CVE-2024-9676,CVE-2024-9675, CVE-2024-9407, and CVE-2024-9341


author: wangyu <wangqingsan@huawei.com> - 123-1
changelog:
  - update to 123
    - duktape:prevent wrongful termination of runway thread
    - harden the security features of the systemd service
    - add packit build tool
    - systemd:set User/Group and don't change uid/gid if already set
    - stop installing /usr/share/polkit-1/rules.d as 700/polkitd
    - moving the 50-default.rules file location


author: gaihuiying <eaglegai@163.com> - 2.5.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:pre-created upstream default lock dir
         Openssl engine API is deprecated for a while thus disable it


author: gaihuiying <eaglegai@163.com> - 2.5.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf
         Add configure check to see if we have struct sockaddr_ll


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.3.8b-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix: %patchN is deprecated (7 usages found), use %patch N (or %patch -P N)


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.0.5-1
changelog:
  - Update package to version 1.0.5
  - fix error handling that might result in null exception
    cleanups of exception handling : errors must now have an exception
    Handling NameError is not working


author: yaoxin <1024769339@qq.com> - 1.0.6-1
changelog:
  - Update to 1.0.6:
    * drop testing and support for Python3.8, add Python 3.13, change document to reflect this.
    * implement safe_getattr and safe_format functions; fix bugs in UNSAFE_ATTRS and UNSAFE_ATTRS_DTYPES usage
    * make all procedure attributes private to curb access to AST nodes, which can be exploited
    * improvements to error messages, including use ast functions to construct better error messages
    * remove import of numpy.linalg, as documented
    * update doc description for security advisory


author: xuchenchen <xuchenchen@kylinos.cn> - 3.1.3-2
changelog:
  - Type: CVE
  - CVE: CVE-2024-34064
  - SUG: NA
  - DESC: fix disallow invalid characters in keys to xmlattr filter


author: xuhe <xuhe@kylinos.cn> - 2.27.3-1
changelog:
  - Update to 2.27.3
  - Fix test util typings.
  - Use json5 typings.
  - Use updated releaser workflows.
  - Ignore pageconfig file if JSON is zero-length.
  - For v2 extensions parse entrypoint data.
  - Add util to get consolidated page_config from higher levels.
  - Move ENV_CONFIG_PATH import back into _get_config_manager.
  - Load overrides once, rather than in each settings handler.
  - Run docs on ubuntu.
  - Fix handling language packs for pseudo language.


author: gengqihu <gengqihu2@h-partners.com> - 23.3.1-1
changelog:
  - update version to 23.3.1
  - Fix parallel pip cache downloads causing crash (#12364)
  - Upgrade urllib3 to 1.26.17 (#12343)
  - Fix zsh completion script (#12173)
  - Fix #12166
  - Move the setuptools settings into pyproject.toml
  - Use `-r=...` instead of `-r ...` for hg
  - Drop isort and flake8 settings from setup.cfg
  - Follow imports for more vendored dependencies
  - Enable mypy's strict equality checks (#12209)
  - Fixed argument name in docstring
  - Allow truststore to not import on Python 3.9 and earlier
  - Vendor truststore
  - Fix formatting, combine numbers not strings!
  - Remove uses of `utcnow` in non-vendored code (#12006)
  - Fix issues raised in code review
  - move test_download_metadata mock pypi index utilities to conftest.py
  - Use strict optional checking in req_install.py (#11379)
  - Fix 'force' remove file without write permissions
  - Dropped unused attribute
  - Fix Pytest --use-venv init
  - Limit the double download fix to wheels
  - Fix slowness on Python 3.11 when updating an existing large environment.
  - Fix `pip completion --zsh`


author: yaoxin <yao_xin001@hoperun.com> - 6.4.1-1
changelog:
  - Update to 6.4.1
    * Parsing of the ``Transfer-Encoding`` header is now stricter.
    * Handling of whitespace in headers now matches the RFC more closely.
    * ``tornado.curl_httpclient`` now prohibits carriage return and linefeed headers in HTTP headers
    (matching the behavior of ``simple_httpclient``).


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-4032, CVE-2024-0397 and fix xml tree assert error


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.11.6-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:enable profile guided optimizations for some architectures


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-6
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-7
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup


author: Funda Wang <fundawang@yeah.net> - 3.11.6-8
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
    - Quote template strings in venv activation scripts


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 4.1.2-1
changelog:
  - Upgrade package with version 4.1.2
    Fix highlight sequencing when replacing text in code cells
    Restore notebook scrolling on dragging a cell to the viewport edge
    Fix typing in editable elements inside of open shadow DOM
    Correct Alt + number keyboard shortcuts command map
    Update jupyter-collaboration for the Binder environment
    Add virtual scrollbar component to windowed lists.
    Load custom CSS functionality and documentation
    Add plugin manager and extension locks


author: zhaojingyu <zhaojingyu@kylinos.cn> - 4.1.6-1
changelog:
  - Upgrade package with version 4.1.6
  - Fix outputarea collapse expand
    Disable placeholder for password input


author: muxiaohui <muxiaohui@kylinos.cn> - 4.3.0-1
changelog:
  - Update version to 4.3.0
    Add setting to enable single-click navigation in file browser.
    Adds command to toggle cell outputs.
    Add kernel selection to Galata notebook creation.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 4.3.5-1
changelog:
  - Upgrade package with version 4.3.5
    Fix scrolling and selection restoration on undo/redo
    Fix windowing crash due to out-of-bounds access
    Increase color contrast of operators in code editor
    Fix jupyverse installation instructions
    Use Zulip for instant messaging


author: lixiaoyong <lixiaoyong@kylinos.cn> - 0.14.1-1
changelog:
  - Upgrade package to version 0.14.1
    - Drop support for Python older than 3.6
    - Additional ruff/Pyflakes/codespell fixes


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-26
changelog:
  - vdpa-dev: Fix initialisation order to restore VDUSE compatibility
  - tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
  - migration: fix-possible-int-overflow
  - target/m68k: Map FPU exceptions to FPSR register
  - qemu-options: Fix CXL Fixed Memory Window interleave-granularity typo
  - hvf: arm: Fix encodings for ID_AA64PFR1_EL1 and debug System registers
  - hw/intc/arm_gic: Fix handling of NS view of GICC_APR<n>
  - qio: Inherit follow_coroutine_ctx across TLS
  - target/riscv: Fix the element agnostic function problem
  - accel/tcg: Fix typo causing tb->page_addr[1] to not be recorded
  - tcg/loongarch64: Fix tcg_out_movi vs some pcrel pointers
  - migration: Fix file migration with fdset
  - ui/vnc: don't return an empty SASL mechlist to the client
  - target/arm: Fix FJCVTZS vs flush-to-zero
  - hw/ppc/e500: Prefer QOM cast
  - sphinx/qapidoc: Fix to generate doc for explicit, unboxed arguments
  - hw/ppc/e500: Remove unused "irqs" parameter
  - hw/ppc/e500: Add missing device tree properties to i2c controller node
  - hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb()
  - hw/arm/mps2-tz.c: fix RX/TX interrupts order
  - target/i386: csv: Add support to migrate the incoming context for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing context for CSV3 guest
  - target/i386: csv: Add support to migrate the incoming page for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing page for CSV3 guest
  - linux-headers: update kernel headers to include CSV3 migration cmds
  - vfio: Only map shared region for CSV3 virtual machine
  - vga: Force full update for CSV3 guest
  - target/i386: csv: Load initial image to private memory for CSV3 guest
  - target/i386: csv: Do not register/unregister guest secure memory for CSV3 guest
  - target/i386: cpu: Populate CPUID 0x8000_001F when CSV3 is active
  - target/i386: csv: Add command to load vmcb to CSV3 guest memory
  - target/i386: csv: Add command to load data to CSV3 guest memory
  - target/i386: csv: Add command to initialize CSV3 context
  - target/i386: csv: Add CSV3 context
  - next-kbd: convert to use qemu_input_handler_register()
  - qemu/bswap: Undefine CPU_CONVERT() once done
  - exec/memop: Remove unused memop_big_endian() helper
  - hw/nvme: fix handling of over-committed queues
  - 9pfs: fix crash on 'Treaddir' request
  - hw/misc/psp: Pin the hugepage memory specified by mem2 during use for psp
  - hw/misc: support tkm use mem2 memory
  - hw/i386: add mem2 option for qemu
  - kvm: add support for guest physical bits
  - target/i386: add guest-phys-bits cpu property


author: Xianglai Li <lixianglai@loongson.cn> - 11:8.2.0-27
changelog:
  - fix compile error on loongarch
  - hw/loongarch: fix cpu hotplug reset
  - hw/loongarch/boot: Use warn_report when no kernel filename
  - hw/loongarch: clean code
  - hw/loongarch: Add KVM pch msi device support
  - hw/loongarch: Add KVM pch pic device support
  - hw/loongarch: Add KVM extioi device support
  - hw/loongarch: Add KVM IPI device support
  - hw/loongarch/virt: Update the ACPI table for hotplug cpu
  - hw/loongarch/virt: Add basic CPU plug support
  - hw/loongarch/virt: Add CPU topology support
  - accel/kvm/kvm-all: Fixes the missing break in vCPU unpark logic
  - gdbstub: Add helper function to unregister GDB register space
  - physmem: Add helper function to destroy CPU AddressSpace
  - hw/acpi: Update CPUs AML with cpu-(ctrl)dev change
  - hw/acpi: Update ACPI GED framework to support vCPU Hotplug
  - hw/acpi: Move CPU ctrl-dev MMIO region len macro to common header file
  - accel/kvm: Extract common KVM vCPU {creation,parking} code
  - target/loongarch: Add steal time support on migration
  - linux-headers: loongarch: Add kvm_para.h and unistd_64.h
  - target/loongarch/kvm: Implement LoongArch PMU extension
  - target/loongarch: Implement lbt registers save/restore function
  - target/loongarch: Add loongson binary translation feature
  - sync loongarch linux-headers
  - target/loongarch: Avoid bits shift exceeding width of bool type
  - target/loongarch: Use explicit little-endian LD/ST API
  - target/loongarch: fix -Werror=maybe-uninitialized false-positive
  - target/loongarch: Support QMP dump-guest-memory
  - target/loongarch/kvm: Add vCPU reset function
  - target/loongarch: Add compatible support about VM reboot
  - target/loongarch: Fix cpu_reset set wrong CSR_CRMD
  - target/loongarch: Set CSR_PRCFG1 and CSR_PRCFG2 values
  - target/loongarch: Remove avail_64 in trans_srai_w() and simplify it
  - target/loongarch/kvm: Add software breakpoint support
  - target/loongarch: Add loongarch vector property unconditionally
  - target/loongarch/kvm: Fix VM recovery from disk failures
  - target/loongarch: Put cpucfg operation before CSR register
  - target/loongarch: Add TCG macro in structure CPUArchState
  - hw/arm/virt-acpi-build.c: Migrate SPCR creation to common location
  - hw/loongarch/virt: Add FDT table support with acpi ged pm register
  - hw/loongarch/virt: Add description for virt machine type
  - hw/loongarch: Add acpi SPCR table support
  - hw/loongarch: virt: pass random seed to fdt
  - hw/loongarch: virt: support up to 4 serial ports
  - hw/loongarch: Remove default enable with VIRTIO_VGA device
  - hw/loongarch: Fix length for lowram in ACPI SRAT
  - hw/loongarch/virt: Remove unused assignment
  - hw/loongarch: Change the tpm support by default
  - hw/loongarch/boot.c: fix out-of-bound reading
  - hw/loongarch/virt: Use MemTxAttrs interface for misc ops
  - tests/libqos: Add loongarch virt machine node
  - hw/loongarch: Remove minimum and default memory size
  - hw/loongarch: Refine system dram memory region
  - hw/loongarch: Refine fwcfg memory map
  - hw/loongarch: Refine fadt memory table for numa memory
  - hw/loongarch: Refine acpi srat table for numa memory
  - hw/loongarch: Add VM mode in IOCSR feature register in kvm mode
  - hw/loongarch: Refine default numa id calculation
  - hw/loongarch: Rename LoongArchMachineState with LoongArchVirtMachineState
  - hw/loongarch: Rename LOONGARCH_MACHINE with LOONGARCH_VIRT_MACHINE
  - hw/loongarch: move memory map to boot.c
  - loongarch: switch boards to "default y"
  - hw/loongarch: Add cells missing from rtc node
  - hw/loongarch: Add cells missing from uart node
  - hw/loongarch: fdt remove unused irqchip node
  - hw/loongarch: fdt adds pcie irq_map node
  - hw/loongarch: fdt adds pch_msi Controller
  - hw/loongarch: fdt adds pch_pic Controller
  - hw/loongarch: fdt adds Extend I/O Interrupt Controller
  - hw/loongarch: fdt adds cpu interrupt controller node
  - hw/loongarch: Init efi_fdt table
  - hw/loongarch: Init efi_initrd table
  - hw/loongarch: Init efi_boot_memmap table
  - hw/loongarch: Init efi_system_table
  - hw/loongarch: Add init_cmdline
  - hw/loongarch: Add slave cpu boot_code
  - hw/loongarch: Add load initrd
  - hw/loongarch: Move boot functions to boot.c


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-28
changelog:
  - hw/misc/mos6522: Fix bad class definition of the MOS6522 device
  - target/i386: Fix minor typo in NO_NESTED_DATA_BP feature bit
  - cpu: ensure we don't call start_exclusive from cpu_exec
  - Avoid unaligned fetch in ladr_match()
  - audio/audio.c: remove trailing newline in error_setg
  - acpi/tests/avocado/bits: wait for 200 seconds for SHUTDOWN event from bits VM
  - linux-user: Tolerate CONFIG_LSM_MMAP_MIN_ADDR
  - accel/tcg: Fix user-only probe_access_internal plugin
  - linux-user: Honor elf alignment when placing images
  - Reserve address for MSI mapping in the CVM scenario.


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-29
changelog:
  - target/i386: csv: Support inject secret for CSV3 guest only if the extension is enabled
  - target/i386: csv: Support load kernel hashes for CSV3 guest only if the extension is enabled
  - target/i386: csv: Request to set private memory of CSV3 guest if the extension is enabled
  - target/i386: kvm: Support to get and enable extensions for Hygon CoCo guest
  - qapi/qom,target/i386: csv-guest: Introduce secret-header-file=str and secret-file=str options
  - bakcend: VirtCCA:resolve hugepage memory waste issue in vhost-user scenario
  - parallels: fix ext_off assertion failure due to overflow
  - backends/cryptodev-vhost-user: Fix local_error leaks
  - hw/usb/hcd-ehci: Fix debug printf format string
  - target/riscv/vector_helper.c: fix 'vmvr_v' memcpy endianess
  - target/riscv/vector_helper.c: optimize loops in ldst helpers
  - target/riscv/vector_helper.c: set vstart = 0 in GEN_VEXT_VSLIDEUP_VX()
  - target/hexagon: don't look for static glib
  - virtio-net: Fix network stall at the host side waiting for kick
  - Add if condition to avoid assertion failed error in blockdev_init
  - target/arm: Use float_status copy in sme_fmopa_s
  - target/arm: take HSTR traps of cp15 accesses to EL2, not EL1
  - target/arm: Reinstate "vfp" property on AArch32 CPUs
  - target/i386/cpu: Fix notes for CPU models
  - target/arm: LDAPR should honour SCTLR_ELx.nAA
  - target/riscv: Avoid bad shift in riscv_cpu_do_interrupt()
  - hvf: remove unused but set variable
  - hw/misc/nrf51_rng: Don't use BIT_MASK() when we mean BIT()
  - Avoid taking address of out-of-bounds array index
  - target/arm: Fix VCMLA Dd, Dn, Dm[idx]
  - target/arm: Fix UMOPA/UMOPS of 16-bit values
  - target/arm: Fix SVE/SME gross MTE suppression checks
  - target/arm: Fix nregs computation in do_{ld,st}_zpa
  - crypto: fix error check on gcry_md_open
  - Change vmstate_cpuhp_sts vmstateDescription version_id
  - hw/pci: Remove unused pci_irq_pulse() method
  - hw/intc: Don't clear pending bits on IRQ lowering
  - target/arm: Drop user-only special case in sve_stN_r
  - migration: Ensure vmstate_save() sets errp
  - target/i386: fix hang when using slow path for ptw_setl
  - contrib/plugins: add compat for g_memdup2
  - hw/audio/hda: fix memory leak on audio setup
  - crypto: perform runtime check for hash/hmac support in gcrypt
  - target/arm: Fix incorrect aa64_tidcp1 feature check
  - target/arm: fix exception syndrome for AArch32 bkpt insn
  - target/arm: Don't get MDCR_EL2 in pmu_counter_enabled() before checking ARM_FEATURE_PMU
  - linux-user: Print tid not pid with strace
  - target/arm: Fix A64 scalar SQSHRN and SQRSHRN
  - target/arm: Don't assert for 128-bit tile accesses when SVL is 128
  - hw/timer/exynos4210_mct: fix possible int overflow
  - target/arm: Avoid shifts by -1 in tszimm_shr() and tszimm_shl()
  - hw/audio/virtio-snd: Always use little endian audio format
  - target/riscv: Fix vcompress with rvv_ta_all_1s
  - usb-hub: Fix handling port power control messages


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-30
changelog:
  - Revert "linux-user: Print tid not pid with strace"
  - gpex-acpi: Remove duplicate DSM #5
  - smmuv3: Use default bus for arm-smmuv3-accel
  - smmuv3: Change arm-smmuv3-nested name to arm-smmuv3-accel
  - smmu-common: Return sysmem address space only for vfio-pci
  - smmuv3: realize get_pasid_cap and set ssidsize with pasid
  - vfio: Synthesize vPASID capability to VM
  - backend/iommufd: Report PASID capability
  - pci: Get pasid capability from vIOMMU
  - smmuv3: Add support for page fault handling
  - kvm: Translate MSI doorbell address only if it is valid
  - hw/arm/smmuv3: Enable sva/stall IDR features
  - iommufd.h: Updated to openeuler olk-6.6 kernel
  - tests/data/acpi/virt: Update IORT acpi table
  - hw/arm/virt-acpi-build: Add IORT RMR regions to handle MSI nested binding
  - tests/qtest: Allow IORT acpi table to change
  - hw/arm/virt-acpi-build: Build IORT with multiple SMMU nodes
  - hw/arm/smmuv3: Associate a pci bus with a SMMUv3 Nested device
  - hw/arm/smmuv3: Add initial support for SMMUv3 Nested device
  - hw/arm/virt: Add an SMMU_IO_LEN macro
  - hw/pci-host/gpex: [needs kernel fix] Allow to generate preserve boot config DSM #5
  - tests/data/acpi: Update DSDT acpi tables
  - acpi/gpex: Fix PCI Express Slot Information function 0 returned value
  - tests/qtest: Allow DSDT acpi tables to change
  - hw/arm/smmuv3: Forward cache invalidate commands via iommufd
  - hw/arm/smmu-common: Replace smmu_iommu_mr with smmu_find_sdev
  - hw/arm/smmuv3: Add missing STE invalidation
  - hw/arm/smmuv3: Add smmu_dev_install_nested_ste() for CFGI_STE
  - hw/arm/smmuv3: Check idr registers for STE_S1CDMAX and STE_S1STALLD
  - hw/arm/smmuv3: Read host SMMU device info
  - hw/arm/smmuv3: Ignore IOMMU_NOTIFIER_MAP for nested-smmuv3
  - hw/arm/smmu-common: Return sysmem if stage-1 is bypassed
  - hw/arm/smmu-common: Add iommufd helpers
  - hw/arm/smmu-common: Add set/unset_iommu_device callback
  - hw/arm/smmu-common: Extract smmu_get_sbus and smmu_get_sdev helpers
  - hw/arm/smmu-common: Bypass emulated IOTLB for a nested SMMU
  - hw/arm/smmu-common: Add a nested flag to SMMUState
  - backends/iommufd: Introduce iommufd_viommu_invalidate_cache
  - backends/iommufd: Introduce iommufd_vdev_alloc
  - backends/iommufd: Introduce iommufd_backend_alloc_viommu
  - vfio/iommufd: Implement [at|de]tach_hwpt handlers
  - vfio/iommufd: Implement HostIOMMUDeviceClass::realize_late() handler
  - HostIOMMUDevice: Introduce realize_late callback
  - vfio/iommufd: Add properties and handlers to TYPE_HOST_IOMMU_DEVICE_IOMMUFD
  - backends/iommufd: Add helpers for invalidating user-managed HWPT
  - Update iommufd.h header for vSVA
  - vfio/common: Allow disabling device dirty page tracking
  - vfio/migration: Don't block migration device dirty tracking is unsupported
  - vfio/iommufd: Implement VFIOIOMMUClass::query_dirty_bitmap support
  - vfio/iommufd: Implement VFIOIOMMUClass::set_dirty_tracking support
  - vfio/iommufd: Probe and request hwpt dirty tracking capability
  - vfio/{iommufd, container}: Invoke HostIOMMUDevice::realize() during attach_device()
  - vfio/iommufd: Add hw_caps field to HostIOMMUDeviceCaps
  - vfio/{iommufd,container}: Remove caps::aw_bits
  - HostIOMMUDevice: Store the VFIO/VDPA agent
  - vfio/iommufd: Introduce auto domain creation
  - vfio/ccw: Don't initialize HOST_IOMMU_DEVICE with mdev
  - vfio/ap: Don't initialize HOST_IOMMU_DEVICE with mdev
  - vfio/iommufd: Return errno in iommufd_cdev_attach_ioas_hwpt()
  - backends/iommufd: Extend iommufd_backend_get_device_info() to fetch HW capabilities
  - vfio/iommufd: Don't initialize nor set a HOST_IOMMU_DEVICE with mdev
  - vfio/pci: Extract mdev check into an helper
  - intel_iommu: Check compatibility with host IOMMU capabilities
  - intel_iommu: Implement [set|unset]_iommu_device() callbacks
  - intel_iommu: Extract out vtd_cap_init() to initialize cap/ecap
  - vfio/pci: Pass HostIOMMUDevice to vIOMMU
  - hw/pci: Introduce pci_device_[set|unset]_iommu_device()
  - hw/pci: Introduce helper function pci_device_get_iommu_bus_devfn()
  - vfio: Create host IOMMU device instance
  - backends/iommufd: Implement HostIOMMUDeviceClass::get_cap() handler
  - vfio/container: Implement HostIOMMUDeviceClass::get_cap() handler
  - vfio/iommufd: Implement HostIOMMUDeviceClass::realize() handler
  - backends/iommufd: Introduce helper function iommufd_backend_get_device_info()
  - vfio/container: Implement HostIOMMUDeviceClass::realize() handler
  - range: Introduce range_get_last_bit()
  - backends/iommufd: Introduce TYPE_HOST_IOMMU_DEVICE_IOMMUFD[_VFIO] devices
  - vfio/container: Introduce TYPE_HOST_IOMMU_DEVICE_LEGACY_VFIO device
  - backends/host_iommu_device: Introduce HostIOMMUDeviceCaps
  - backends: Introduce HostIOMMUDevice abstract
  - vfio/iommufd: Remove CONFIG_IOMMUFD usage
  - vfio/spapr: Extend VFIOIOMMUOps with a release handler
  - vfio/spapr: Only compile sPAPR IOMMU support when needed
  - vfio/iommufd: Introduce a VFIOIOMMU iommufd QOM interface
  - vfio/spapr: Introduce a sPAPR VFIOIOMMU QOM interface
  - vfio/container: Intoduce a new VFIOIOMMUClass::setup handler
  - vfio/container: Introduce a VFIOIOMMU legacy QOM interface
  - vfio/container: Introduce a VFIOIOMMU QOM interface
  - vfio/container: Initialize VFIOIOMMUOps under vfio_init_container()
  - vfio/container: Introduce vfio_legacy_setup() for further cleanups
  - docs/devel: Add VFIO iommufd backend documentation
  - vfio: Introduce a helper function to initialize VFIODevice
  - vfio/ccw: Move VFIODevice initializations in vfio_ccw_instance_init
  - vfio/ap: Move VFIODevice initializations in vfio_ap_instance_init
  - vfio/platform: Move VFIODevice initializations in vfio_platform_instance_init
  - vfio/pci: Move VFIODevice initializations in vfio_instance_init
  - hw/i386: Activate IOMMUFD for q35 machines
  - kconfig: Activate IOMMUFD for s390x machines
  - hw/arm: Activate IOMMUFD for virt machines
  - vfio: Make VFIOContainerBase poiner parameter const in VFIOIOMMUOps callbacks
  - vfio/ccw: Make vfio cdev pre-openable by passing a file handle
  - vfio/ccw: Allow the selection of a given iommu backend
  - vfio/ap: Make vfio cdev pre-openable by passing a file handle
  - vfio/ap: Allow the selection of a given iommu backend
  - vfio/platform: Make vfio cdev pre-openable by passing a file handle
  - vfio/platform: Allow the selection of a given iommu backend
  - vfio/pci: Make vfio cdev pre-openable by passing a file handle
  - vfio/pci: Allow the selection of a given iommu backend
  - vfio/iommufd: Enable pci hot reset through iommufd cdev interface
  - vfio/pci: Introduce a vfio pci hot reset interface
  - vfio/pci: Extract out a helper vfio_pci_get_pci_hot_reset_info
  - vfio/iommufd: Add support for iova_ranges and pgsizes
  - vfio/iommufd: Relax assert check for iommufd backend
  - vfio/iommufd: Implement the iommufd backend
  - vfio/common: return early if space isn't empty
  - util/char_dev: Add open_cdev()
  - backends/iommufd: Introduce the iommufd object
  - vfio/spapr: Move hostwin_list into spapr container
  - vfio/spapr: Move prereg_listener into spapr container
  - vfio/spapr: switch to spapr IOMMU BE add/del_section_window
  - vfio/spapr: Introduce spapr backend and target interface
  - vfio/container: Implement attach/detach_device
  - vfio/container: Move iova_ranges to base container
  - vfio/container: Move dirty_pgsizes and max_dirty_bitmap_size to base container
  - vfio/container: Move listener to base container
  - vfio/container: Move vrdl_list to base container
  - vfio/container: Move pgsizes and dma_max_mappings to base container
  - vfio/container: Convert functions to base container
  - vfio/container: Move per container device list in base container
  - vfio/container: Switch to IOMMU BE set_dirty_page_tracking/query_dirty_bitmap API
  - vfio/container: Move space field to base container
  - vfio/common: Move giommu_list in base container
  - vfio/common: Introduce vfio_container_init/destroy helper
  - vfio/container: Switch to dma_map|unmap API
  - vfio/container: Introduce a empty VFIOIOMMUOps
  - vfio: Introduce base object for VFIOContainer and targeted interface
  - cryptodev: Fix error handling in cryptodev_lkcf_execute_task()
  - hw/xen: Fix xen_bus_realize() error handling
  - hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
  - target/s390x: Fix a typo in s390_cpu_class_init()
  - hw/sd/sdhci: free irq on exit
  - hw/ufs: free irq on exit
  - hw/pci-host/designware: Fix ATU_UPPER_TARGET register access
  - target/i386: Make invtsc migratable when user sets tsc-khz explicitly
  - target/i386: Construct CPUID 2 as stateful iff times > 1
  - target/i386: Enable fdp-excptn-only and zero-fcs-fds
  - target/i386: Don't construct a all-zero entry for CPUID[0xD 0x3f]
  - i386/cpuid: Remove subleaf constraint on CPUID leaf 1F
  - target/i386: pass X86CPU to x86_cpu_get_supported_feature_word
  - target/i386: Raise the highest index value used for any VMCS encoding
  - target/i386: Add VMX control bits for nested FRED support
  - target/i386: Delete duplicated macro definition CR4_FRED_MASK
  - target/i386: Add get/set/migrate support for FRED MSRs
  - target/i386: enumerate VMX nested-exception support
  - vmxcap: add support for VMX FRED controls
  - target/i386: mark CR4.FRED not reserved
  - target/i386: add support for FRED in CPUID enumeration
  - target/i386: fix feature dependency for WAITPKG
  - target/i386: Add more features enumerated by CPUID.7.2.EDX
  - net: fix build when libbpf is disabled, but libxdp is enabled
  - hw/nvme: fix invalid endian conversion
  - hw/nvme: fix invalid check on mcl
  - backends/cryptodev: Do not ignore throttle/backends Errors
  - backends/cryptodev: Do not abort for invalid session ID
  - virtcca: add kvm isolation when get tmi version.
  - qga: Don't daemonize before channel is initialized
  - qga: Add log to guest-fsfreeze-thaw command
  - backends: VirtCCA: cvm_gpa_start supports both 1GB and 3GB
  - BUGFIX: Enforce isolation for virtcca_shared_hugepage
  - arm: VirtCCA: qemu CoDA support UEFI boot
  - arm: VirtCCA: Compatibility with older versions of TMM and the kernel
  - arm: VirtCCA: qemu uefi boot support kae
  - arm: VirtCCA: CVM support UEFI boot


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-31
changelog:
  - target/arm: Change arm_cpu_mp_affinity when enabled IPIV feature
  - fw_cfg: Don't set callback_opaque NULL in fw_cfg_modify_bytes_read()


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-32
changelog:
  - target/i386: csv: Release CSV3 shared pages after unmapping DMA
  - target/i386: Add new CPU model ClearwaterForest
  - target/i386: add sha512, sm3, sm4 feature bits
  - docs: Add GNR, SRF and CWF CPU models
  - target/i386: Export BHI_NO bit to guests
  - target/i386: Introduce SierraForest-v2 model
  - vdpa/iommufd:Implement DMA mapping through the iommufd interface
  - vdpa/iommufd:Introduce vdpa-iommufd module
  - vdpa/iommufd:support associating iommufd backend for vDPA devices
  - Kconfig/iommufd/VDPA: Update IOMMUFD module configuration dependencies The vDPA module can also use IOMMUFD like the VFIO module. 
  - backends/iommufd: Get rid of qemu_open_old()
  - backends/iommufd: Make iommufd_backend_*() return bool
  - backends/iommufd: Fix missing ERRP_GUARD() for error_prepend()
  - backends/iommufd: Remove mutex
  - backends/iommufd: Remove check on number of backend users
  - hw/intc: Add extioi ability of 256 vcpu interrupt routing
  - hw/rtc: Fixed loongson rtc emulation errors
  - hw/loongarch/boot: Adjust the loading position of the initrd
  - target/loongarch: Fix the cpu unplug resource leak
  - target/loongarch: fix vcpu reset command word issue
  - vdpa:Fix dirty page bitmap synchronization not done after suspend for vdpa devices


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-33
changelog:
  - arm: cvm: fix arm-softmmu build on x86 platform
  - arm: VirtCCA: fix arm-softmmu build on x86 platform
  - hw/arm/virt: HDBSS: fix arm-softmmu build on x86 platform
  - hw/arm/virt: decouple migrate_hdbss_buffer_size() with kvm_update_hdbss_cap()
  - hw/arm/virt: only support the HDBSS feature in aarch64
  - multifd: bugfix for incorrect migration data with qatzip compression
  - multifd: bugfix for incorrect migration data with QPL compression
  - multifd: bugfix for migration using compression methods
  - migration/multifd: Zero p->flags before starting filling a packet
  - migration/multifd: Ensure packet->ramblock is null-terminated
  - migration/multifd: Fix rb->receivedmap cleanup race
  - migration/multifd: Fix loop conditions in multifd_zstd_send_prepare and multifd_zstd_recv
  - tests/migration: Add integration test for 'qatzip' compression method
  - migration: Introduce 'qatzip' compression method
  - migration: Add migration parameters for QATzip
  - meson: Introduce 'qatzip' feature to the build system
  - docs/migration: add qatzip compression feature
  - migration/multifd: Fix p->iov leak in multifd-uadk.c
  - tests/migration-test: add uadk compression test
  - migration/multifd: Switch to no compression when no hardware support
  - migration/multifd: Add UADK based compression and decompression
  - migration/multifd: Add UADK initialization
  - migration/multifd: add uadk compression framework
  - configure: Add uadk option
  - docs/migration: add uadk compression feature
  - configure: add --enable-qpl build option
  - migration/multifd: implement qpl compression and decompression
  - migration/multifd: implement initialization of qpl compression
  - migration/multifd: include ram.h in multifd.h
  - migration/multifd: add qpl compression method
  - migration/multifd: put IOV initialization into compression method
  - docs/migration: add qpl compression feature
  - migration/multifd: solve zero page causing multiple page faults
  - migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page.
  - migration/multifd: Implement zero page transmission on the multifd thread
  - migration/multifd: Add new migration option zero-page-detection
  - migration/multifd: Allow multifd without packets
  - migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data
  - migration/multifd: Cleanup multifd_recv_sync_main
  - tests/migration: Set compression level in migration tests
  - migration: Properly apply migration compression level parameters
  - migration/multifd: Drop unnecessary helper to destroy IOC
  - migration/multifd: Cleanup outgoing_args in state destroy
  - migration/multifd: Make multifd_channel_connect() return void
  - migration/multifd: Drop registered_yank
  - migration/multifd: Cleanup TLS iochannel referencing
  - migration/multifd: Release recv sem_sync earlier
  - migration/multifd: Remove p->quit from recv side
  - migration/multifd: Add a synchronization point for channel creation
  - migration/multifd: Unify multifd and TLS connection paths
  - migration/multifd: Move multifd_send_setup into migration thread
  - migration/multifd: Move multifd_send_setup error handling in to the function
  - migration/multifd: Remove p->running
  - migration/multifd: Join the TLS thread
  - migration: Fix logic of channels and transport compatibility check
  - migration/multifd: Optimize sender side to be lockless
  - migration/multifd: Stick with send/recv on function names
  - migration/multifd: Cleanup multifd_load_cleanup()
  - migration/multifd: Cleanup multifd_save_cleanup()
  - migration/multifd: Rewrite multifd_queue_page()
  - migration/multifd: Change retval of multifd_send_pages()
  - migration/multifd: Change retval of multifd_queue_page()
  - migration/multifd: Split multifd_send_terminate_threads()
  - migration/multifd: Forbid spurious wakeups
  - migration/multifd: Move header prepare/fill into send_prepare()
  - migration/multifd: Move trace_multifd_send|recv()
  - migration/multifd: Move total_normal_pages accounting
  - migration/multifd: Rename p->num_packets and clean it up
  - migration/multifd: Drop pages->num check in sender thread
  - migration/multifd: Simplify locking in sender thread
  - migration/multifd: Separate SYNC request with normal jobs
  - migration/multifd: Drop MultiFDSendParams.normal[] array
  - migration/multifd: Postpone reset of MultiFDPages_t
  - migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths
  - migration/multifd: multifd_send_kick_main()
  - migration/multifd: Drop stale comment for multifd zero copy
  - docs/migration: Further move virtio to be feature of migration
  - docs/migration: Further move vfio to be feature of migration
  - docs/migration: Organize "Postcopy" page
  - docs/migration: Split "dirty limit"
  - docs/migration: Split "Postcopy"
  - docs/migration: Split "Debugging" and "Firmware"
  - docs/migration: Split "Backwards compatibility" separately
  - docs/migration: Convert virtio.txt into rST
  - docs/migration: Create index page
  - docs/migration: Create migration/ directory
  - tests/qtest: Re-enable multifd cancel test
  - tests/qtest/migration: Use the new migration_test_add
  - tests/qtest/migration: Add a wrapper to print test names
  - tests/qtest/migration: Print migration incoming errors
  - migration: Report error in incoming migration
  - migration/multifd: Change multifd_pages_init argument
  - migration/multifd: Remove QEMUFile from where it is not needed
  - migration/multifd: Remove MultiFDPages_t::packet_num
  - migration/multifd: Remove unnecessary usage of local Error
  - migration: Fix migration_channel_read_peek() error path
  - migration/multifd: Remove error_setg() in migration_ioc_process_incoming()
  - migration/multifd: Fix leaking of Error in TLS error flow
  - migration/multifd: Simplify multifd_channel_connect() if else statement
  - migration/multifd: Fix error message in multifd_recv_initial_packet()
  - hw/arm/virt: support the HDBSS feature


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-34
changelog:
  - target/arm: support the IPIV feature
  - Revert "target/arm: Change arm_cpu_mp_affinity when enabled IPIV feature"
  - vdpa/iommufd: All vdpa devices perform only one log_sync each time.
  - memory:Optimize flatview ioeventfd processing
  - memory/eventfd:Introduce ioeventfd batch processing to reduce the time required to update ioeventfd
  - migration/memory:Optimize unnecessary memory region updates during live migration
  - migration:Extand the fdtable in the incoming phase of migration
  - virtio/irqfd: Batch processing of irqfd related operations during virtio device startup
  - kvm/msi: Mark whether there is an IRQ route table update through changes
  - virtio-pci:Batch processing of IRQFD mapping for multi queue Virtio devices


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-35
changelog:
  - Fix error in virtCCA CoDA scenario.
  - Revert "backends/iommufd: Make iommufd_backend_*() return bool"


author: Qizhi Zhang <zhangqizhi3@h-partners.com> - 0.8.0-8
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:Add some improvements and add new modules to HiSilicon common section


author: shixuantong <shixuantong1@huawei.com> - 8.2-4
changelog:
  - Add shell command to switch bracketed-paste mode from on to off to keep consistent with realine-8.0


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.18-5
changelog:
  - revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: zhangyaqi <zhangyaqi@kylinos.cn> - 8.2312.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak in omazureeventhubs on accepted PN_DELIVERY event


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2312.0-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix passing the value to EscapeChar
         Do not free the uninitialized cstring
         Keep original free pattern
         network subsystem: improve connection failure error message
         Fix runConf NULL pointer refence
         rainerscript: do not try to call a function if it does not exist
         nsd_ptcp regression fix: remove debugging messages emited to stderr
         Fix legacy $ActionQueueDiscardMark parameter


author: jinlun<jinlun@huawei.com> - 40.7-1
changelog:
  - update version to 40.7
    - Allow chronyd-restricted read chronyd key files
    - Allow systemd-sleep set attributes of efivarfs files
    - Make name_zone_t and named_var_run_t a part of the mountpoint attribute
    - Update cifs interfaces to include fs_search_auto_mountpoints()
    - Allow map xserver_tmpfs_t files when xserver_clients_write_xshm is on
    - Add map_read map_write to kernel_prog_run_bpf
    - Add policy for nvme-stas
    - Make new virt drivers permissive
    - Allow named and ndc use the io_uring api
    - Allow sssd send SIGKILL to passket_child running in ipa_otpd_t


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 2:4.14.3-1
changelog:
  - update version to 4.14.3
    -Avoid null pointer dereference
    -Update utmp at an initial login
    -Merge libshadow and libmisc into a single libshadow
    -Adding the userdel and groupdel hooks to release tarball


author: yaqiangchen <chenyaqiang@huawei.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: yanglu <yanglu72@h-partners.com> - 7:6.1-2
changelog:
  - Type:cves
  - ID:CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848
  - SUG:NA
  - DESC:fix CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848


author: lingsheng <lingsheng1@h-partners.com> - 6.04-16
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: fuanan <fuanan3@h-partners.com> - 255-42
changelog:
  - backport: sync patches from systemd community
    add backport-run-pass-the-pty-slave-fd-to-transient-service.patch
        backport-run-do-not-pass-the-pty-slave-fd-to-transient-servic.patch


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: liuchao <liuchao173@huawei.com> - 2.21.0-1
changelog:
  - upgrade to 2.21.0:
    - api: fixed stop method not to require any parameter
    - plugin_scheduler: fix perf fd leaks
    - allow skipping rollback when restarting TuneD or switching profile
    - function_calc_isolated_cores: no errors for offline CPUs
    - sap-hana: new profile sap-hana-kvm-guest
    - serialized SIGHUP handler to prevent possible bootcmdline corruption
    - fixed possible traceback on SIGHUP
    - updated manual pages to be consistent
    - tuned-adm: better error message for unauthorized switch_profile
    - plugin_sysctl: report reapplied sysctls only on different values
    - plugin_cpu: added support for pm_qos_resume_latency_us
    - plugin_cpu: added support for intel_pstate scaling driver
    - plugin_scheduler: do not leak FDs from the perf
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
    - throughput-performance: set net.core.somaxconn to at least 2048
    - API: added support for moving devices between instances
    - added support for the API access through the Unix Domain Socket
    - D-Bus: send tracebacks through D-Bus only in debug mode
    - Makefile: added fix for python-3.12
    - do not exit on duplicate config lines


author: ZhaoYu Jiang <jiangzhaoyu@kylinos.cn> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)
    - tuned-ppd: fixed controller init to correctly set_on_battery


author: tianmuyang <tianmuyang@huawei.com> - 2.24.1-4
changelog:
  - profiles: add programmable scheduling based on eBPF
  - package:  change package tuned to architecture-dependent


author: langfei<langfei@huawei.com> - 2022g-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: langfei <langfei@huawei.com> - 2024a-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees;
  -	No need for America/Coyhaique in zonenow.tab.


author: lutong <lutong14@huawei.com> - 1.1-9
changelog:
  - bugfix:fixed display error caused by missing signal_exits & revert change method of getting domain id


author: yanglu <yanglu72@h-partners.com> -1.20.11-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix regression caused by the fix for CVE-2024-0229 
         fix use after free related to CVE-2024-21886


author: shuaijiakun <shuaijiakun1288@phytium.com.cn> -1.20.11-32
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:fix display error for ps23xx when using ast and pe2201 bmc card.


author: Funda Wang <fundawang@yeah.net> - 1.20.11-37
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


