# changelog

author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-79.0.0.72
changelog:
  - !15203  usb: cdc-acm: Check control transfer buffer size before access
  - usb: cdc-acm: Check control transfer buffer size before access
  - !15214  USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
  - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
  - !15178 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Conflicts Patches
  - perf time-utils: Fix 32-bit nsec parsing
  - perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
  - perf stat: Display iostat headers correctly
  - perf sched timehist: Fix missing free of session in perf_sched__timehist()
  - perf report: Fix --total-cycles --stdio output error
  - perf ui/browser/annotate: Use global annotation_options
  - perf annotate: Move some source code related fields from 'struct annotation' to 'struct annotated_source'
  - perf annotate: Split branch stack cycles info from 'struct annotation'
  - perf inject: Fix leader sampling inserting additional samples
  - perf mem: Free the allocated sort string, fixing a leak
  - !14179 [OLK-6.6] update ITMT support patch for Zhaoxin CPUs
  - cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
  - cpufreq: ACPI: add ITMT support when CPPC enabled
  - Revert "cpufreq: ACPI: add ITMT support when CPPC enabled"
  - !15200  arm64/mpam: Try reading again if monitor instance returns not ready
  - arm64/mpam: Try reading again if monitor instance returns not ready
  - !15197 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.68-6.6.69 LTS Patches
  - block: avoid to reuse `hctx` not removed from cpuhp callback list
  - ALSA: hda/realtek: Fix spelling mistake "Firelfy" -> "Firefly"
  - ALSA: sh: Fix wrong argument order for copy_from_iter()
  - btrfs: sysfs: fix direct super block member reads
  - btrfs: avoid monopolizing a core when activating a swap file
  - power: supply: gpio-charger: Fix set charge current limits
  - drm/amdkfd: pause autosuspend when creating pdd
  - drm/amdkfd: Use device based logging for errors
  - drm/amdkfd: drop struct kfd_cu_info
  - drm/amdkfd: reduce stack size in kfd_topology_add_device()
  - drm/amdgpu/hdp6.0: do a posting read when flushing HDP
  - drm/amdgpu/hdp5.0: do a posting read when flushing HDP
  - drm/amdgpu/hdp4.0: do a posting read when flushing HDP
  - drm/amd/amdgpu: allow use kiq to do hdp flush under sriov
  - pmdomain: core: Add missing put_device()
  - ALSA: hda/realtek: fix micmute LEDs don't work on HP Laptops
  - ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook X G1i
  - MIPS: mipsregs: Set proper ISA level for virt extensions
  - MIPS: Probe toolchain support of -msym32
  - blk-mq: move cpuhp callback registering out of q->sysfs_lock
  - blk-mq: register cpuhp callback after hctx is added to xarray table
  - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
  - spi: omap2-mcspi: Fix the IS_ERR() bug for devm_clk_get_optional_enabled()
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error
  - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
  - spi: intel: Add Panther Lake SPI controller support
  - platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
  - LoongArch: BPF: Adjust the parameter of emit_jirl()
  - LoongArch: Fix reserving screen info memory for above-4G firmware
  - regmap: Use correct format specifier for logging range errors
  - smb: server: Fix building with GCC 15
  - ALSA: sh: Use standard helper for buffer accesses
  - ALSA: hda/conexant: fix Z60MR100 startup pop issue
  - udf: Skip parent dir link count update if corrupted
  - scsi: qla1280: Fix hw revision numbering for ISP1020/1040
  - watchdog: mediatek: Add support for MT6735 TOPRGU/WDT
  - watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
  - stddef: make __struct_group() UAPI C++-friendly
  - powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
  - mtd: rawnand: fix double free in atmel_pmecc_create_user()
  - dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
  - dmaengine: apple-admac: Avoid accessing registers in probe
  - dmaengine: fsl-edma: implement the cleanup path of fsl_edma3_attach_pd()
  - dmaengine: tegra: Return correct DMA status when paused
  - dmaengine: dw: Select only supported masters for ACPI devices
  - dmaengine: mv_xor: fix child node refcount handling in early exit
  - phy: rockchip: naneng-combphy: fix phy reset
  - phy: usb: Toggle the PHY power during init
  - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
  - phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider
  - phy: core: Fix that API devm_phy_put() fails to release the phy
  - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
  - phy: core: Fix an OF node refcount leakage in _of_phy_get()
  - phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP
  - mtd: rawnand: arasan: Fix missing de-registration of NAND
  - mtd: rawnand: arasan: Fix double assertion of chip-select
  - mtd: diskonchip: Cast an operand to prevent potential overflow
  - nfsd: restore callback functionality for NFSv4.0
  - nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
  - bpf: Check negative offsets in __bpf_skb_min_len()
  - tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
  - mm/vmstat: fix a W=1 clang compiler warning
  - ceph: allocate sparse_ext map only for sparse reads
  - ceph: fix memory leak in ceph_direct_read_write()
  - ceph: try to allocate a smaller extent map for sparse read
  - !15190 v2  fs/resctrl: Adapt to the hardware topology structures of RDT and MPAM
  - arm64/mpam: Add write memory barrier to guarantee monitor results
  - arm64/mpam: Improve conversion accuracy between percent and fixed-point fraction
  - arm64/mpam: Fix out-of-bound access of cfg array
  - arm64/mpam: fix bug in percent_to_mbw_max()
  - arm64/mpam: fix MBA granularity conversion formula
  - arm64/mpam: Fix out-of-bound access of mbwu_state array
  - arm64/mpam: Add judgment to distinguish MSMON_MBWU_CAPTURE definition
  - arm64/mpam: Support MATA monitor feature for MPAM
  - fs/resctrl: Adapt to the hardware topology structures of RDT and MPAM
  - !15192  scsi: megaraid_sas: Fix for a potential deadlock
  - scsi: megaraid_sas: Fix for a potential deadlock
  - !15191  gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
  - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
  - !15170  The QoS feature adapts to the cfs bandwidth throttling
  - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug
  - sched/qos: Fix qos throttling in SMT expelled
  - hungtask: fixed offline group hung task issue under high load scenarios
  - !15176  virtio-blk: don't keep queue frozen during system suspend
  - virtio-blk: don't keep queue frozen during system suspend
  - !15175  block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
  - block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
  - !15167  Backport tracing fix patch
  - trace: Fix kabi breakage for trace_event_fields
  - tracing: Check "%s" dereference via the field and not the TP_printk format
  - !15181  kobject: Fix global-out-of-bounds in kobject_action_type()
  - kobject: Fix global-out-of-bounds in kobject_action_type()
  - !15184  binfmt_flat: Fix integer overflow bug on 32 bit systems
  - binfmt_flat: Fix integer overflow bug on 32 bit systems
  - !15161 Revert "irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0"
  - Revert "irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0"
  - !15166  tracing: Have process_string() also allow arrays
  - tracing: Have process_string() also allow arrays
  - !14939 Fix  the performance monitor  relates to core for Hygon family 18h processor
  - perf/x86/amd/core: Fix performance monitor for Hygon family 18h processor
  - !15159  mm/thp: fix deferred split unqueue naming and locking
  - mm/thp: fix deferred split unqueue naming and locking
  - !15142 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.66-6.6.68 LTS Patches
  - dt-bindings: net: fec: add pps channel property
  - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
  - net: fec: make PPS channel configurable
  - net: fec: refactor PPS channel configuration
  - io_uring/rw: avoid punting to io-wq directly
  - io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN
  - io_uring/rw: split io_read() into a helper
  - epoll: Add synchronous wakeup support for ep_poll_callback
  - ceph: fix memory leaks in __ceph_sync_read()
  - ceph: improve error handling and short/overflow-read logic in __ceph_sync_read()
  - ceph: validate snapdirname option length when mounting
  - of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
  - of: Fix error path in of_parse_phandle_with_args_map()
  - udmabuf: also check for F_SEAL_FUTURE_WRITE
  - nilfs2: fix buffer head leaks in calls to truncate_inode_pages()
  - of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
  - of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent()
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget
  - io_uring: Fix registered ring file refcount leak
  - selftests/bpf: Use asm constraint "m" for LoongArch
  - selftests/memfd: run sysctl tests when PID namespace support is enabled
  - tracing: Add "%s" check in test_event_printk()
  - tracing: Add missing helper functions in event pointer dereference check
  - tracing: Fix test_event_printk() to process entire print argument
  - smb: client: fix TCP timers deadlock after rmmod
  - Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
  - btrfs: tree-checker: reject inline extent items with 0 ref count
  - vmalloc: fix accounting with i915
  - zram: fix uninitialized ZRAM not releasing backing device
  - zram: refuse to use zero sized block device as backing device
  - hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers
  - hwmon: (tmp513) Fix Current Register value interpretation
  - hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers
  - hwmon: (tmp513) Use SI constants from units.h
  - hwmon: (tmp513) Simplify with dev_err_probe()
  - hwmon: (tmp513) Don't use "proxy" headers
  - drm/amdgpu: don't access invalid sched
  - i915/guc: Accumulate active runtime on gt reset
  - i915/guc: Ensure busyness counter increases motonically
  - i915/guc: Reset engine utilization buffer before registration
  - drm/panel: novatek-nt35950: fix return value check in nt35950_probe()
  - thunderbolt: Improve redrive mode handling
  - USB: serial: option: add Telit FE910C04 rmnet compositions
  - USB: serial: option: add MediaTek T7XX compositions
  - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
  - USB: serial: option: add MeiG Smart SLM770A
  - USB: serial: option: add TCL IK512 MBIM & ECM
  - hexagon: Disable constant extender optimization for LLVM prior to 19.1.0
  - efivarfs: Fix error on non-existent file
  - i2c: riic: Always round-up when calculating bus period
  - chelsio/chtls: prevent potential integer overflow on 32bit
  - net: tun: fix tun_napi_alloc_frags()
  - KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init
  - EDAC/amd64: Simplify ECC check on unified memory controllers
  - mmc: mtk-sd: disable wakeup in .remove() and in the error path of .probe()
  - mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
  - net: mdiobus: fix an OF node reference leak
  - selftests: openvswitch: fix tcpdump execution
  - netfilter: ipset: Fix for recursive locking warning
  - ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems
  - net: ethernet: bgmac-platform: fix an OF node reference leak
  - ksmbd: fix broken transfers when exceeding max simultaneous operations
  - ksmbd: count all requests in req_running counter
  - net: renesas: rswitch: rework ts tags management
  - ionic: use ee->offset when returning sprom data
  - netdevsim: prevent bad user input in nsim_dev_health_break_write()
  - net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()
  - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
  - cxl/region: Fix region creation for greater than x2 switches
  - cxl/pci: Fix potential bogus return value upon successful probing
  - tools: hv: change permissions of NetworkManager configuration file
  - xfs: reset rootdir extent size hint after growfsrt
  - xfs: take m_growlock when running growfsrt
  - xfs: Fix the owner setting issue for rmap query in xfs fsmap
  - xfs: conditionally allow FS_XFLAG_REALTIME changes if S_DAX is set
  - xfs: attr forks require attr, not attr2
  - xfs: remove unused parameter in macro XFS_DQUOT_LOGRES
  - xfs: fix file_path handling in tracepoints
  - xfs: convert comma to semicolon
  - xfs: Fix xfs_prepare_shift() range for RT
  - xfs: Fix xfs_flush_unmap_range() range for RT
  - xfs: create a new helper to return a file's allocation unit
  - xfs: declare xfs_file.c symbols in xfs_file.h
  - xfs: use consistent uid/gid when grabbing dquots for inodes
  - xfs: verify buffer, inode, and dquot items every tx commit
  - xfs: fix the contact address for the sysfs ABI documentation
  - i2c: pnx: Fix timeout in wait functions
  - p2sb: Do not scan and remove the P2SB device when it is unhidden
  - p2sb: Move P2SB hide and unhide code to p2sb_scan_and_cache()
  - p2sb: Introduce the global flag p2sb_hidden_by_bios
  - p2sb: Factor out p2sb_read_from_cache()
  - platform/x86: p2sb: Make p2sb_get_devfn() return void
  - usb: cdns3: Add quirk flag to enable suspend residency
  - PCI/AER: Disable AER service on suspend
  - PCI: Use preserve_config in place of pci_flags
  - ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C
  - ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP
  - MIPS: Loongson64: DTS: Fix msi node for ls7a
  - usb: cdns3-ti: Add workaround for Errata i2409
  - PCI: Add ACS quirk for Broadcom BCM5760X NIC
  - PCI: vmd: Create domain symlink before pci_bus_add_devices()
  - usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled
  - net: sched: fix ordering of qlen adjustment
  - x86/static-call: fix 32-bit build
  - x86/xen: remove hypercall page
  - x86/xen: use new hypercall functions instead of hypercall page
  - x86/xen: add central hypercall functions
  - x86/static-call: provide a way to do very early static-call updates
  - objtool/x86: allow syscall instruction
  - x86: make get_cpu_vendor() accessible from Xen code
  - xen/netfront: fix crash when removing device
  - net: rswitch: Avoid use-after-free in rswitch_poll()
  - selftests/bpf: remove use of __xlated()
  - tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe()
  - kselftest/arm64: abi: fix SVCR detection
  - blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
  - net: dsa: microchip: KSZ9896 register regmap alignment to 32 bit boundaries
  - net: renesas: rswitch: fix initial MPIC register setting
  - Bluetooth: SCO: Add support for 16 bits transparent voice setting
  - Bluetooth: iso: Fix recursive locking warning
  - ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired
  - team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
  - net/sched: netem: account for backlog updates from child qdisc
  - net: dsa: felix: fix stuck CPU-injected packets with short taprio windows
  - netfilter: nf_tables: do not defer rule destruction via call_rcu
  - net: renesas: rswitch: handle stop vs interrupt race
  - net: renesas: rswitch: fix leaked pointer on error path
  - net: renesas: rswitch: fix race window between tx start and complete
  - net: rswitch: Add jumbo frames handling for TX
  - net: rswitch: Add a setting ext descriptor function
  - net: rswitch: Add unmap_addrs instead of dma address in each desc
  - net: rswitch: Use build_skb() for RX
  - net: rswitch: Use unsigned int for desc related array index
  - net: rswitch: Drop unused argument/return value
  - Documentation: PM: Clarify pm_runtime_resume_and_get() return value
  - ASoC: amd: yc: Fix the wrong return value
  - ALSA: control: Avoid WARN() for symlink errors
  - qca_spi: Make driver probing reliable
  - qca_spi: Fix clock speed for multiple QCA7000
  - cxgb4: use port number to set mac addr
  - ACPI: resource: Fix memory resource type union access
  - net: sparx5: fix the maximum frame length register
  - net: sparx5: fix FDMA performance issue
  - spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user()
  - net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set()
  - net: mscc: ocelot: be resilient to loss of PTP packets during transmission
  - net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are IRQ-safe
  - net: mscc: ocelot: improve handling of TX timestamp for unknown skb
  - net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb()
  - net: lapb: increase LAPB_HEADER_LEN
  - ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()
  - selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted
  - selftests: mlxsw: sharedbuffer: Remove duplicate test cases
  - selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
  - wifi: cfg80211: sme: init n_channels before channels[] access
  - tipc: fix NULL deref in cleanup_bearer()
  - batman-adv: Do not let TT changes list grows indefinitely
  - batman-adv: Remove uninitialized data in full table TT response
  - batman-adv: Do not send uninitialized TT changes
  - amdgpu/uvd: get ring reference from rq scheduler
  - wifi: mac80211: fix station NSS capability initialization order
  - wifi: mac80211: clean up 'ret' in sta_link_apply_parameters()
  - wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon
  - rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long
  - bpf, sockmap: Fix update element with same
  - bpf, sockmap: Fix race between element replace and close()
  - xfs: only run precommits once per transaction object
  - xfs: fix scrub tracepoints when inode-rooted btrees are involved
  - xfs: return from xfs_symlink_verify early on V4 filesystems
  - xfs: don't drop errno values when we fail to ficlone the entire range
  - xfs: update btree keys correctly when _insrec splits an inode root block
  - drm/i915: Fix memory leak by correcting cache object name in error handler
  - usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode
  - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer
  - usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe()
  - usb: typec: anx7411: fix fwnode_handle reference leak
  - usb: ehci-hcd: fix call balance of clocks handling routines
  - usb: gadget: midi2: Fix interpretation of is_midi1 bits
  - scsi: ufs: core: Update compl_time_stamp_local_clock after completing a cqe
  - usb: dwc2: Fix HCD port connection race
  - usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
  - usb: dwc2: Fix HCD resume
  - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
  - usb: host: max3421-hcd: Correctly abort a USB request.
  - riscv: Fix IPIs usage in kfence_protect_page()
  - ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5
  - riscv: Fix wrong usage of __pa() on a fixmap address
  - tcp: check space before adding MPTCP SYN options
  - splice: do not checksum AF_UNIX sockets
  - ksmbd: fix racy issue from session lookup and expire
  - !15144  hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
  - hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
  - !15143  scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
  - !15132  CVE-2024-56607 fix
  - wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()
  - wifi: mac80211: Add non-atomic station iterator
  - !15140  iio: adc: rockchip_saradc: fix information leak in triggered buffer
  - iio: adc: rockchip_saradc: fix information leak in triggered buffer


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-80.0.0.73
changelog:
  - !15278  tracing/osnoise: Fix resetting of tracepoints
  - tracing/osnoise: Fix resetting of tracepoints
  - !15227 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Conflicts Patches
  - mm: z3fold: deprecate CONFIG_Z3FOLD
  - null_blk: Remove usage of the deprecated ida_simple_xx() API
  - iomap: handle a post-direct I/O invalidate race in iomap_write_delalloc_release
  - proc: add config & param to block forcing mem writes
  - HID: Ignore battery for all ELAN I2C-HID devices
  - ata: sata_sil: Rename sil_blacklist to sil_quirks
  - ata: pata_serverworks: Do not use the term blacklist
  - scsi: aacraid: Rearrange order of struct aac_srb_unit
  - uprobes: Fix race in uprobe_free_utask
  - perf,x86: Fix kabi breakage in struct uprobe_task
  - perf,x86: avoid missing caller address in stack traces captured in uprobe
  - i2c: synquacer: Deal with optional PCLK correctly
  - i2c: synquacer: Remove a clk reference from struct synquacer_i2c
  - !15248 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.64-6.6.66 LTS Conflicts Patches
  - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
  - selftests/ftrace: adjust offset for kprobe syntax error test
  - bpf: Remove unnecessary kfree(im_node) in lpm_trie_update_elem
  - iommu/arm-smmu: Defer probe of clients after smmu device bound
  - gpio: grgpio: use a helper variable to store the address of ofdev->dev
  - KVM: arm64: Change kvm_handle_mmio_return() return polarity
  - !15270 v2  mm: Backport two patch
  - arm64/mm: Drop setting PTE_TYPE_PAGE in pte_mkcont()
  - arm64/mm: Re-organize arch_make_huge_pte()
  - mm/hugetlb: use arch_make_huge_pte() in __hugetlb_insert_pfn()
  - !14820 [OLK-6.6]Hygon: Support kernel boot verification and secret injection for Hygon CSV3 VM
  - KVM: SVM: CSV: Support inject secret to Hygon CSV3 guest
  - KVM: SVM: CSV: Support issue non-4K aligned CSV3_CMD_LAUNCH_ENCRYPT_DATA and more than once
  - KVM: SVM: CSV: Provide KVM_CSV3_SET_GUEST_PRIVATE_MEMORY ioctl interface
  - KVM: SVM: CSV: Provide KVM_CAP_HYGON_COCO_EXT interface
  - crypto: ccp: Provide csv_get_extension_info() to present extensions of newer CSV firmware
  - KVM: SVM: CSV: Ensure all the GPRs and some non-GPRs are synced before LAUNCH_ENCRYPT_VMCB
  - crypto: ccp: Get api version again when update Hygon CSV firmware at runtime
  - KVM: SVM: CSV: Fix the vm_size even if CSV3 feature is unsupported on Hygon CPUs
  - !14819 [OLK-6.6]Hygon: Support CSV3 Attestation
  - x86/configs: openeuler_defconfig: Set CONFIG_VIRT_DRIVERS=y and CONFIG_EFI_SECRET=m
  - virt/csv-guest: Provide interface for request of CSV3 attestation report
  - x86/csv: Add support for CSV3 ATTESTATION secure call
  - x86/csv: Define ATTESTATION secure call command
  - !15251 Intel: Backport upstream auto-tune per-CPU pageset size patchset
  - mm and cache_info: remove unnecessary CPU cache info update
  - !15185 hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
  - hwtracing: hisi_ptt: Check duplicate filters before allocation
  - hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-82.0.0.75
changelog:
  - !15440 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.70-6.6.72 LTS Patches
  - drm/mediatek: Only touch DISP_REG_OVL_PITCH_MSB if AFBC is supported
  - riscv: Fix text patching when IPI are used
  - mm: hugetlb: independent PMD page table shared count
  - mm/hugetlb: enforce that PMD PT sharing has split PMD PT locks
  - pgtable: fix s390 ptdesc field comments
  - workqueue: Add rcu lock check at the end of work item execution
  - pmdomain: imx: gpcv2: fix an OF node reference leak in imx_gpcv2_probe()
  - pmdomain: imx: gpcv2: Simplify with scoped for each OF child loop
  - arm64: dts: rockchip: add hevc power domain clock to rk3328
  - ARM: dts: imxrt1050: Fix clocks for mmc
  - io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
  - riscv: kprobes: Fix incorrect address calculation
  - iio: adc: ad7124: Disable all channels at probe time
  - iio: inkern: call iio_device_put() only on mapped devices
  - iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
  - iio: gyro: fxas21002c: Fix missing data update in trigger handler
  - iio: imu: kmx61: fix information leak in triggered buffer
  - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
  - iio: pressure: zpa2326: fix information leak in triggered buffer
  - usb: gadget: configfs: Ignore trailing LF for user strings to cdev
  - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
  - usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm()
  - usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
  - usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in the error path of .probe()
  - usb: gadget: midi2: Reverse-select at the right place
  - usb: fix reference leak in usb_new_device()
  - USB: core: Disable LPM only for non-suspended ports
  - USB: usblp: return error when setting unsupported protocol
  - usb: dwc3-am62: Disable autosuspend during remove
  - usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null
  - tty: serial: 8250: Fix another runtime PM usage counter underflow
  - misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config
  - usb: dwc3: gadget: fix writing NYET threshold
  - USB: serial: cp210x: add Phoenix Contact UPS Device
  - usb-storage: Add max sectors quirk for Nokia 208
  - staging: iio: ad9832: Correct phase range check
  - staging: iio: ad9834: Correct phase range check
  - USB: serial: option: add Neoway N723-EA support
  - USB: serial: option: add MeiG Smart SRM815
  - dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2)
  - io_uring/timeout: fix multishot updates
  - drm/amd/display: increase MAX_SURFACES to the value supported by hw
  - drm/amdkfd: fixed page fault when enable MES shader debugger
  - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
  - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
  - smb: client: sync the root session and superblock context passwords before automounting
  - thermal: of: fix OF node leak in of_thermal_zone_find()
  - ksmbd: Implement new SMB3 POSIX type
  - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
  - sctp: sysctl: udp_port: avoid using current->nsproxy
  - sctp: sysctl: auth_enable: avoid using current->nsproxy
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
  - mptcp: sysctl: sched: avoid using current->nsproxy
  - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
  - scsi: ufs: qcom: Power off the PHY if it was already powered on in ufs_qcom_power_up_sequence()
  - dm thin: make get_first_thin use rcu-safe list first function
  - riscv: mm: Fix the out of bound issue of vmemmap address
  - cpuidle: riscv-sbi: fix device node release in early exit of for_each_possible_cpu
  - ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
  - afs: Fix the maximum cell name length
  - drm/mediatek: Add return value check when reading DPCD
  - drm/mediatek: Fix mode valid issue for dp
  - drm/mediatek: Fix YCbCr422 color format issue for DP
  - drm/mediatek: stop selecting foreign drivers
  - net/mlx5: Fix variable not being completed when function returns
  - net: stmmac: dwmac-tegra: Read iommu stream id from device tree
  - netfilter: nf_tables: imbalance in flowtable binding
  - iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
  - x86/mm/numa: Use NUMA_NO_NODE when calling memblock_set_node()
  - memblock tests: fix implicit declaration of function 'numa_valid_node'
  - riscv: Fix early ftrace nop patching
  - tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset
  - Bluetooth: btnxpuart: Fix driver sending truncated data
  - Bluetooth: MGMT: Fix Add Device to responding before completing
  - Bluetooth: hci_sync: Fix not setting Random Address when required
  - eth: gve: use appropriate helper to set xdp_features
  - ipvlan: Fix use-after-free in ipvlan_get_iflink().
  - tls: Fix tls_sw_sendmsg error handling
  - igc: return early when failing to read EECD register
  - igc: field get conversion
  - ice: fix incorrect PHY settings for 100 GB/s
  - cxgb4: Avoid removal of uninserted tid
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails
  - pds_core: limit loop over fw name list
  - net: libwx: fix firmware mailbox abnormal return
  - tcp/dccp: allow a connection when sk_max_ack_backlog is zero
  - tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog
  - net: 802: LLC+SNAP OID:PID lookup on start of skb data
  - ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
  - selftests/alsa: Fix circular dependency involving global-timer
  - ASoC: mediatek: disable buffer pre-allocation
  - ASoC: rt722: add delay time to wait for the calibration procedure
  - erofs: fix PSI memstall accounting
  - erofs: handle overlapped pclusters out of crafted images properly
  - ovl: support encoding fid from inode with no alias
  - ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
  - ovl: do not encode lower fh with upper sb_writers held
  - exfat: fix the infinite loop in __exfat_free_cluster()
  - dm array: fix cursor index when skipping across block boundaries
  - dm array: fix unreleased btree blocks on closing a faulty array cursor
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end
  - jbd2: flush filesystem device before updating tail sequence
  - jbd2: increase IO priority for writing revoke records
  - memblock: make memblock_set_node() also warn about use of MAX_NUMNODES
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation
  - Revert "x86, crash: wrap crash dumping code into crash related ifdefs"
  - Revert "x86/hyperv: Fix hv tsc page based sched_clock for hibernation"
  - !15423 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Additional Patches
  - !15423 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Additional Patches
  - RDMA/bnxt_re: Fix max SGEs for the Work Request
  - mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
  - mptcp: fix recvbuffer adjust on sleeping rcvmsg
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
  - mm/kmemleak: fix sleeping function called from invalid context at print message
  - mm/readahead: fix large folio support in async readahead
  - fs/proc/task_mmu: fix pagemap flags with PMD THP entries on 32bit
  - drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  - dt-bindings: display: adi,adv7533: Drop single lane support
  - drm: adv7511: Drop dsi single lane support
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init()
  - sky2: Add device ID 11ab:4373 for Marvell 88E8075
  - RDMA/uverbs: Prevent integer overflow issue
  - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
  - kcov: mark in_softirq_really() as __always_inline
  - ALSA hda/realtek: Add quirk for Framework F111:000C
  - ALSA: seq: Check UMP support for midi_version change
  - modpost: fix the missed iteration for the max bit in do_input()
  - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
  - RDMA/bnxt_re: Fix the max WQE size for static WQE support
  - ARC: build: Try to guess GCC variant of cross compiler
  - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
  - Bluetooth: hci_core: Fix sleeping function called from invalid context
  - net: usb: qmi_wwan: add Telit FE910C04 compositions
  - smb: client: destroy cfid_put_wq on module exit
  - ksmbd: set ATTR_CTIME flags when setting mtime
  - ksmbd: retry iterate_dir in smb2_query_dir
  - bpf: fix potential error return
  - sound: usb: format: don't warn that raw DSD is unsupported
  - sound: usb: enable DSD output for ddHiFi TC44C
  - ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model
  - drm/amdkfd: Correct the migration DMA map direction
  - wifi: mac80211: wake the queues in case of failure in resume
  - net: ti: icssg-prueth: Fix clearing of IEP_CMP_CFG registers during iep_init
  - ila: serialize calls to nf_register_net_hooks()
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
  - af_packet: fix vlan_get_tci() vs MSG_PEEK
  - net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
  - net: restrict SO_REUSEPORT to inet sockets
  - net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
  - net: sfc: Correct key_len for efx_tc_ct_zone_ht_params
  - RDMA/rtrs: Ensure 'ib_sge list' is accessible
  - net: mv643xx_eth: fix an OF node reference leak
  - eth: bcmsysport: fix call balance of priv->clk handling routines
  - ALSA: usb-audio: US16x08: Initialize array before use
  - net: llc: reset skb->transport_header
  - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
  - drm/i915/dg1: Fix power gate sequence.
  - net/mlx5e: macsec: Maintain TX SA from encoding_sa
  - net/mlx5: DR, select MSIX vector 0 for completion queue creation
  - netrom: check buffer length before accessing it
  - net: Fix netns for ip_tunnel_init_flow()
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit()
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit()
  - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev()
  - ip_tunnel: annotate data-races around t->parms.link
  - net: stmmac: restructure the error path of stmmac_probe_config_dt()
  - net: stmmac: don't create a MDIO bus if unnecessary
  - net: dsa: microchip: Fix LAN937X set_ageing_time function
  - net: dsa: microchip: Fix KSZ9477 set_ageing_time function
  - drm/bridge: adv7511_audio: Update Audio InfoFrame properly
  - RDMA/bnxt_re: Fix the locking while accessing the QP table
  - RDMA/bnxt_re: Fix MSN table size for variable wqe mode
  - RDMA/bnxt_re: Add send queue size check for variable wqe
  - RDMA/bnxt_re: Disable use of reserved wqes
  - RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters
  - RDMA/bnxt_re: Fix max_qp_wrs reported
  - RDMA/bnxt_re: Fix reporting hw_ver in query_device
  - RDMA/bnxt_re: Add check for path mtu in modify_qp
  - RDMA/bnxt_re: Fix the check for 9060 condition
  - nvme-pci: 512 byte aligned dma pool segment quirk
  - RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters
  - RDMA/bnxt_re: Avoid initializing the software queue for user queues
  - RDMA/mlx5: Enforce same type port association for multiport RoCE
  - RDMA/bnxt_re: Remove always true dattr validity check
  - RDMA/bnxt_re: Allow MSN table capability check
  - powerpc: Remove initialisation of readpos
  - net: mctp: handle skb cleanup on sock_queue failures
  - ceph: give up on paths longer than PATH_MAX
  - mmc: sdhci-msm: fix crypto key eviction
  - !15418  ocfs2: handle a symlink read error correctly
  - ocfs2: handle a symlink read error correctly
  - !15299  ptp: Ensure info->enable callback is always set
  - !15299  ptp: Ensure info->enable callback is always set
  - ptp: Ensure info->enable callback is always set
  - !15424  bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
  - !15424  bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
  - bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
  - !15367  libbpf: Fix segfault due to libelf functions not setting errno
  - !15367  libbpf: Fix segfault due to libelf functions not setting errno
  - libbpf: Fix segfault due to libelf functions not setting errno
  - !15417 [Intel-SIG] x86/cpu: Clearwater Forest support including CPU model and new ISAs
  - x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
  - x86/cpu: Add model number for Intel Clearwater Forest processor
  - !15225  cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - !15225  cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - !15390  backport mainline bugfix patch
  - !15390  backport mainline bugfix patch
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
  - genirq: Make handle_enforce_irqctx() unconditionally available
  - !15229  NFS: remove unused variable nfs_rpcstat
  - NFS: remove unused variable nfs_rpcstat
  - !14975 [OLK-6.6] [Backport] scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE
  - scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE
  - !15302 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Conflicts Patches
  - selftests: mptcp: join: test for prohibited MPC to port-based endp
  - !15292 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.56-6.6.57 LTS Conflicts Patches
  - HID: mcp2200: added driver for GPIOs of MCP2200
  - !15326 [OLK-6.6]Hygon: Rename Hygon SM{3,4} feature macro to X86_FEATURE_HYGON_SM{3,4}
  - !15326 [OLK-6.6]Hygon: Rename Hygon SM{3,4} feature macro to X86_FEATURE_HYGON_SM{3,4}
  - x86/cpufeatures: Rename X86_FEATURE_SM{3,4} to X86_FEATURE_HYGON_SM{3,4}
  - !15402  nilfs2: fix possible int overflows in nilfs_fiemap()
  - !15402  nilfs2: fix possible int overflows in nilfs_fiemap()
  - nilfs2: fix possible int overflows in nilfs_fiemap()
  - !15043  wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
  - wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
  - !15283  wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion
  - wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion
  - !15308  CVE-2025-21732
  - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error
  - RDMA/mlx5: Ensure created mkeys always have a populated rb_key
  - RDMA/mlx5: Change check for cacheable mkeys
  - !15298  usbnet: ipheth: fix possible overflow in DPE length check
  - usbnet: ipheth: fix possible overflow in DPE length check
  - !15334  perf/core: Save raw sample data conditionally based on sample type
  - perf/core: Save raw sample data conditionally based on sample type
  - !15347  Mainline Patch
  - bpf: Use preempt_count() directly in bpf_send_signal_common()
  - bpf: Send signals asynchronously if !preemptible
  - !15331  Fixes CVE-2025-21767
  - clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context
  - clocksource: Use pr_info() for "Checking clocksource synchronization" message
  - !15221  smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - !15364  LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
  - LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
  - !15345  USB: hub: Ignore non-compliant devices with too many configs or interfaces
  - USB: hub: Ignore non-compliant devices with too many configs or interfaces
  - !15363  gpiolib: Fix crash on error in gpiochip_get_ngpios()
  - gpiolib: Fix crash on error in gpiochip_get_ngpios()
  - !15385  orangefs: fix a oob in orangefs_debug_write
  - orangefs: fix a oob in orangefs_debug_write
  - !15265  NFSD: fix hang in nfsd4_shutdown_callback
  - NFSD: fix hang in nfsd4_shutdown_callback
  - !15263  NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
  - NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
  - !15266  nfsd: clear acl_access/acl_default after releasing them
  - nfsd: clear acl_access/acl_default after releasing them
  - !15346  block: mark GFP_NOIO around sysfs ->store()
  - block: mark GFP_NOIO around sysfs ->store()
  - !15309  usb: xhci: Fix NULL pointer dereference on certain command aborts
  - !15309  usb: xhci: Fix NULL pointer dereference on certain command aborts
  - usb: xhci: Fix NULL pointer dereference on certain command aborts
  - !15204 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Patches
  - !15204 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.69-6.6.70 LTS Patches
  - platform/x86: mlx-platform: call pci_dev_put() to balance the refcount
  - ALSA: ump: Shut up truncated string warning
  - usb: xhci: Avoid queuing redundant Stop Endpoint commands
  - cleanup: Remove address space of returned pointer
  - crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes
  - Bluetooth: btusb: mediatek: add callback function in btusb_disconnect
  - Bluetooth: btusb: add callback function in btusb suspend/resume
  - scsi: mpi3mr: Start controller indexing from 0
  - scsi: mpi3mr: Use ida to manage mrioc ID
  - ALSA: ump: Update legacy substream names upon FB info update
  - ALSA: ump: Indicate the inactive group in legacy substream names
  - ALSA: ump: Don't open legacy substream for an inactive group
  - ALSA: ump: Use guard() for locking
  - udf: Verify inode link counts before performing rename
  - udf_rename(): only access the child content on cross-directory rename
  - watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler
  - watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset
  - watchdog: rzg2l_wdt: Remove reset de-assert from probe
  - of: address: Preserve the flags portion on 1:1 dma-ranges mapping
  - of: address: Store number of bus flag cells rather than bool
  - of: address: Remove duplicated functions
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation
  - x86, crash: wrap crash dumping code into crash related ifdefs
  - thunderbolt: Don't display nvm_version unless upgrade supported
  - thunderbolt: Add support for Intel Panther Lake-M/P
  - thunderbolt: Add support for Intel Lunar Lake
  - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
  - usb: xhci: Limit Stop Endpoint retries
  - xhci: retry Stop Endpoint on buggy NEC controllers
  - net: renesas: rswitch: fix possible early skb release
  - softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel
  - net/mlx5: unique names for per device caches
  - Revert "nvme: make keep-alive synchronous operation"
  - nvme: use helper nvme_ctrl_state in nvme_keep_alive_finish function
  - usb: typec: ucsi: add update_connector callback
  - usb: typec: ucsi: add callback for connector status updates
  - iio: adc: ad7192: properly check spi_get_device_match_data()
  - iio: adc: ad7192: Convert from of specific to fwnode property handling
  - usb: chipidea: udc: limit usb request length to max 16KB
  - usb: chipidea: add CI_HDRC_HAS_SHORT_PKT_LIMIT flag
  - usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag
  - fs/ntfs3: Fix warning in ni_fiemap
  - fs/ntfs3: Implement fallocate for compressed files
  - remoteproc: qcom: pas: enable SAR2130P audio DSP support
  - remoteproc: qcom: pas: Add support for SA8775p ADSP, CDSP and GPDSP
  - remoteproc: qcom: pas: Add sc7180 adsp
  - mailbox: pcc: Check before sending MCTP PCC response ACK
  - clk: qcom: clk-alpha-pll: Add NSS HUAYRA ALPHA PLL support for ipq9574
  - clk: qcom: clk-alpha-pll: Add support for zonda ole pll configure
  - Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925
  - Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925
  - Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925
  - Bluetooth: Add support ITTIM PE50-M75C
  - Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions
  - i2c: i801: Add support for Intel Panther Lake
  - i2c: i801: Add support for Intel Arrow Lake-H
  - wifi: ath10k: avoid NULL pointer error during sdio remove
  - wifi: ath10k: Update Qualcomm Innovation Center, Inc. copyrights
  - media: uvcvideo: Force UVC version to 1.0a for 0408:4033
  - media: uvcvideo: Force UVC version to 1.0a for 0408:4035
  - cleanup: Adjust scoped_guard() macros to avoid potential warning
  - cleanup: Add conditional guard support
  - crypto: ecdsa - Avoid signed integer overflow on signature decoding
  - crypto: ecdsa - Use ecc_digits_from_bytes to convert signature
  - crypto: ecdsa - Rename keylen to bufsize where necessary
  - crypto: ecdsa - Convert byte arrays with key coordinates to digits
  - ext4: partial zero eof block on unaligned inode size extension
  - ext4: convert to new timestamp accessors
  - memblock: allow zero threshold in validate_numa_converage()
  - NUMA: optimize detection of memory with no node id assigned by firmware
  - sched: Initialize idle tasks only once
  - usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic
  - smb: client: fix use-after-free of signing key
  - smb: client: stop flooding dmesg in smb2_calc_signature()
  - fs/smb/client: implement chmod() for SMB3 POSIX Extensions
  - smb/client: rename cifs_ace to smb_ace
  - smb/client: rename cifs_acl to smb_acl
  - smb/client: rename cifs_sid to smb_sid
  - smb/client: rename cifs_ntsd to smb_ntsd
  - x86/mm: Carve out INVLPG inline asm for use by others
  - docs: media: update location of the media patches
  - drm/amd/display: Fix incorrect DSC recompute trigger
  - drm/amd/display: Fix DSC-re-computing


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-82.0.0.76
changelog:
  - RISC-V kernel upgrade to 6.6.0-82.0.0
  - riscv: Fixed conflict created by commit c7c8e8a76904
  - riscv: Enable zstd-compressed firmware support
  - riscv: Enable AMDKFD driver for ROCm


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-83.0.0.77
changelog:
  - !15047 mm: Backport some mm patchs
  - mm/memmap: prevent double scanning of memmap by kmemleak
  - mm: kmemleak: fix upper boundary check for physical address objects
  - mm/vmscan: fix hard LOCKUP in function isolate_lru_folios
  - mm: compaction: use the proper flag to determine watermarks
  - !15271  LoongArch: fix cacheinfo/unaligned/rtc/s3/hda/usb issues
  - blutetooth/btusb: delay 1ms while suspending
  - LoongArch: Correct the cacheinfo sharing information
  - ice: fix unaligned access in ice_create_lag_recipe
  - LoongArch: set CONFIG_CMA_SIZE_MBYTES to 0
  - rtc: loongson: clear TOY_MATCH0_REG in loongson_rtc_isr()
  - hda/pci: Add AZX_DCAPS_NO_TCSEL flag for Loongson HDA devices
  - LoongArch: Update the flush cache policy
  - !15516 mm: shmem: remove unnecessary warning in shmem_writepage()
  - mm: shmem: remove unnecessary warning in shmem_writepage()
  - !15492  Add dp module in hibmc driver
  - drm/hisilicon/hibmc: add dp module in hibmc
  - drm/hisilicon/hibmc: refactored struct hibmc_drm_private
  - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver
  - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers
  - drm/hisilicon/hibmc: add dp aux in hibmc drivers
  - drm/hisilicon/hibmc: convert to struct drm_edid
  - !15395  clk: qcom: dispcc-sm6350: Add missing parent_map for a clock
  - clk: qcom: dispcc-sm6350: Add missing parent_map for a clock
  - !15459  perf: Configure BRBE correctly on VHE host
  - perf: Configure BRBE correctly on VHE host
  - !15369  media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
  - media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
  - !15421 [OLK-6.6] [Backport] upstream fix for driver nvme
  - nvme: handle connectivity loss in nvme_set_queue_count
  - nvme: fix bogus kzalloc() return check in nvme_init_effects_log()
  - nvme: Add error path for xa_store in nvme_init_effects
  - nvme: Add error check for xa_store in nvme_get_effects_log
  - !15370  wifi: brcmfmac: Check the return value of of_property_read_string_index()
  - wifi: brcmfmac: Check the return value of of_property_read_string_index()
  - !15483  CVE-2024-58069
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
  - !15470  some readahead improvement
  - readahead: properly shorten readahead when falling back to do_page_cache_ra()
  - readahead: don't shorten readahead window in read_pages()
  - readahead: make sure sync readahead reads needed page
  - !15404  ipmr: do not call mr_mfc_uses_dev() for unres entries
  - ipmr: do not call mr_mfc_uses_dev() for unres entries
  - !15376 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.62-6.6.63 LTS Conflicts Patches
  - mptcp: update local address flags when setting it
  - NFSD: Async COPY result needs to return a write verifier
  - !15164 [openEuler-24.03-LTS][linux-6.6.y sync] KVM: x86: Play nice with protected guests in complete_hypercall_exit()
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit()
  - !15375 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Conflicts Patches
  - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone
  - !15149 Fix northbridge init warning in guest for Hygon family 18h model 4h
  - x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
  - !15147  Add device HID for Hygon GPIO controller
  - pinctrl: Add device HID for Hygon GPIO controller
  - !15438 fix HCT build err once VFIO disabled
  - hct: fix build err once VFIO disabled


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-84.0.0.78
changelog:
  - !15625 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.75-6.6.76 LTS Patches
  - HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
  - Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
  - selftests/landlock: Fix error message
  - LoongArch: Change 8 to 14 for LOONGARCH_MAX_{BRP,WRP}
  - s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
  - btrfs: output the reason for open_ctree() failure
  - media: imx-jpeg: Fix potential error pointer dereference in detach_pm()
  - staging: media: max96712: fix kernel oops when removing module
  - usb: gadget: f_tcm: Don't free command immediately
  - media: uvcvideo: Fix double free in error path
  - remoteproc: core: Fix ida_free call while not allocated
  - mptcp: handle fastopen disconnect correctly
  - mptcp: consolidate suboption status
  - usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR PPS
  - usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE
  - usb: dwc3: core: Defer the probe until USB power supply ready
  - usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk()
  - usb: gadget: f_tcm: Fix Get/SetInterface return value
  - drivers/card_reader/rtsx_usb: Restore interrupt based detection
  - net: usb: rtl8150: enable basic endpoint checking
  - ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro
  - ktest.pl: Check kernelrelease return in get_version
  - selftests/rseq: Fix handling of glibc without rseq support
  - netfilter: nf_tables: reject mismatching sum of field_len with set key length
  - kbuild: switch from lz4c to lz4 for compression
  - Revert "SUNRPC: Reduce thread wake-up rate when receiving large RPC messages"
  - f2fs: Introduce linear search for dentries
  - hexagon: Fix unbalanced spinlock in die()
  - hexagon: fix using plain integer as NULL pointer warning in cmpxchg
  - kconfig: fix memory leak in sym_warn_unmet_dep()
  - kconfig: WERROR unmet symbol dependency
  - kconfig: deduplicate code in conf_read_simple()
  - kconfig: remove unused code for S_DEF_AUTO in conf_read_simple()
  - kconfig: require a space after '#' for valid input
  - kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST
  - cifs: Fix getting and setting SACLs over SMB1
  - cifs: Validate EAs for WSL reparse points
  - io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock()
  - ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback
  - RISC-V: Mark riscv_v_init() as __init
  - hostfs: fix the host directory parse when mounting.
  - hostfs: Add const qualifier to host_root in hostfs_fill_super()
  - hostfs: fix string handling in __dentry_name()
  - hostfs: convert hostfs to use the new mount API
  - genksyms: fix memory leak when the same symbol is read from *.symref file
  - genksyms: fix memory leak when the same symbol is added from source
  - net: hsr: fix fill_frame_info() regression vs VLAN packets
  - net: sh_eth: Fix missing rtnl lock in suspend/resume path
  - net: xdp: Disallow attaching device-bound programs in generic mode
  - tcp: correct handling of extreme memory squeeze
  - bgmac: reduce max frame size to support just MTU 1500
  - vsock: Allow retrying on connect() failure
  - Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming
  - perf trace: Fix runtime error of index out of bounds
  - net: stmmac: Limit FIFO size by hardware capability
  - net: stmmac: Limit the number of MTL queues to hardware capability
  - ptp: Properly handle compat ioctls
  - net: davicom: fix UAF in dm9000_drv_remove
  - vxlan: Fix uninit-value in vxlan_vnifilter_dump()
  - net: netdevsim: try to close UDP port harness races
  - net: rose: fix timer races against user threads
  - iavf: allow changing VLAN state without calling PF
  - PM: hibernate: Add error handling for syscore_suspend()
  - net: fec: implement TSO descriptor cleanup
  - gpio: mxc: remove dead code after switch to DT-only
  - regulator: core: Add missing newline character
  - ubifs: skip dumping tnc tree when zroot is null
  - xfrm: delete intermediate secpath entry in packet offload mode
  - dmaengine: ti: edma: fix OF node reference leaks in edma_driver
  - xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO
  - tools/bootconfig: Fix the wrong format specifier
  - NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE
  - NFSv4.2: fix COPY_NOTIFY xdr buf size calculation
  - serial: 8250: Adjust the timeout for FIFO mode
  - driver core: class: Fix wild pointer dereferences in API class_dev_iter_next()
  - module: Extend the preempt disabled section in dereference_symbol_descriptor().
  - nilfs2: protect access to buffers with no active references
  - nilfs2: convert nilfs_lookup_dirty_data_buffers to use folio_create_empty_buffers
  - buffer: make folio_create_empty_buffers() return a buffer_head
  - ocfs2: mark dquot as inactive if failed to start trans while releasing dquot
  - scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails
  - scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1
  - PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test
  - PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error
  - PCI: imx6: Skip controller_id generation logic for i.MX7D
  - PCI: imx6: Simplify clock handling by using clk_bulk*() function
  - media: dvb-usb-v2: af9035: fix ISO C90 compilation error on af9035_i2c_master_xfer
  - staging: media: imx: fix OF node leak in imx_media_add_of_subdevs()
  - watchdog: rti_wdt: Fix an OF node leak in rti_wdt_probe()
  - media: nxp: imx8-isi: fix v4l2-compliance test errors
  - mtd: hyperbus: hbmc-am654: fix an OF node reference leak
  - mtd: hyperbus: hbmc-am654: Convert to platform remove callback returning void
  - mtd: rawnand: brcmnand: fix status read of brcmnand_waitfunc
  - media: uvcvideo: Propagate buf->error to userspace
  - media: camif-core: Add check for clk_enable()
  - media: mipi-csis: Add check for clk_enable()
  - media: i2c: ov9282: Correct the exposure offset
  - media: i2c: imx412: Add missing newline to prints
  - media: i2c: imx290: Register 0x3011 varies between imx327 and imx290
  - media: marvell: Add check for clk_enable()
  - PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy()
  - media: lmedm04: Handle errors for lme2510_int_read
  - media: rc: iguanair: handle timeouts
  - spi: omap2-mcspi: Correctly handle devm_clk_get_optional() errors
  - RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"
  - efi: sysfb_efi: fix W=1 warnings when EFI is not set
  - of: reserved-memory: Do not make kmemleak ignore freed address
  - RDMA/mlx5: Fix indirect mkey ODP page count
  - i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition
  - i3c: dw: Add hot-join support.
  - arm64: tegra: Fix DMA ID for SPI2
  - fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device()
  - ARM: dts: mediatek: mt7623: fix IR nodename
  - arm64: dts: qcom: sm8250: Fix interrupt types of camss interrupts
  - arm64: dts: qcom: sdm845: Fix interrupt types of camss interrupts
  - arm64: dts: mediatek: add per-SoC compatibles for keypad nodes
  - dts: arm64: mediatek: mt8195: Remove MT8183 compatible for OVL
  - arm64: dts: qcom: sc8280xp: Fix up remoteproc register space sizes
  - arm64: dts: qcom: sm8150-microsoft-surface-duo: fix typos in da7280 properties
  - arm64: dts: qcom: sc7180: fix psci power domain node names
  - arm64: dts: qcom: sc7180: change labels to lower-case
  - arm64: dts: qcom: Add SM7125 device tree
  - arm64: dts: qcom: sc7180-trogdor-pompom: rename 5v-choke thermal zone
  - arm64: dts: qcom: sc7180-*: Remove thermal zone polling delays
  - arm64: dts: qcom: sc7180-trogdor-quackingstick: add missing avee-supply
  - arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: remove disabled ov7251 camera
  - arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: Convert mezzanine riser to dtso
  - ARM: omap1: Fix up the Retu IRQ on Nokia 770
  - RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error
  - arm64: dts: allwinner: a64: explicitly assign clock parent for TCON0
  - arm64: dts: ti: k3-am62a: Remove duplicate GICR reg
  - arm64: dts: ti: k3-am62: Remove duplicate GICR reg
  - ARM: dts: microchip: sama5d27_wlsom1_ek: Add no-1-8-v property to sdmmc0 node
  - ARM: dts: microchip: sama5d27_wlsom1_ek: Remove mmc-ddr-3_3v property from sdmmc0 node
  - arm64: dts: qcom: sm8450: correct sleep clock frequency
  - arm64: dts: qcom: sm8350: correct sleep clock frequency
  - arm64: dts: qcom: sm8250: correct sleep clock frequency
  - arm64: dts: qcom: sm6375: correct sleep clock frequency
  - arm64: dts: qcom: sm6125: correct sleep clock frequency
  - arm64: dts: qcom: sm4450: correct sleep clock frequency
  - arm64: dts: qcom: sdx75: correct sleep clock frequency
  - arm64: dts: qcom: sc7280: correct sleep clock frequency
  - arm64: dts: qcom: qrb4210-rb2: correct sleep clock frequency
  - arm64: dts: qcom: q[dr]u1000: correct sleep clock frequency
  - arm64: dts: qcom: qcs404: correct sleep clock frequency
  - arm64: dts: qcom: msm8994: correct sleep clock frequency
  - arm64: dts: qcom: msm8939: correct sleep clock frequency
  - arm64: dts: qcom: msm8916: correct sleep clock frequency
  - arm64: dts: qcom: sm7225-fairphone-fp4: Drop extra qcom,msm-id value
  - arm64: dts: qcom: msm8994: Describe USB interrupts
  - arm64: dts: qcom: msm8996: Fix up USB3 interrupts
  - arm64: dts: qcom: sa8775p: Update sleep_clk frequency
  - arm64: dts: qcom: move common parts for sa8775p-ride variants into a .dtsi
  - arm64: dts: qcom: sa8775p-ride: enable pmm8654au_0_pon_resin
  - arm64: dts: qcom: sa8775p-ride: Describe sgmii_phy1 irq
  - arm64: dts: qcom: sa8775p-ride: Describe sgmii_phy0 irq
  - arm64: dts: qcom: msm8996-xiaomi-gemini: Fix LP5562 LED1 reg property
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Drop pp3300_panel voltage settings
  - memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
  - ARM: dts: stm32: Swap USART3 and UART8 alias on STM32MP15xx DHCOM SoM
  - ARM: dts: stm32: Deduplicate serial aliases and chosen node for STM32MP15xx DHCOM SoM
  - arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie1
  - RDMA/srp: Fix error handling in srp_add_port
  - arm64: dts: mediatek: mt8183: willow: Support second source touchscreen
  - arm64: dts: mediatek: mt8183: kenzo: Support second source touchscreen
  - RDMA/rxe: Fix mismatched max_msg_sz
  - RDMA/rxe: Improve newline in printing messages
  - arm: dts: socfpga: use reset-name "stmmaceth-ocp" instead of "ahb"
  - ARM: dts: aspeed: yosemite4: correct the compatible string for max31790
  - ARM: dts: aspeed: yosemite4: Add required properties for IOE on fan boards
  - ARM: dts: aspeed: yosemite4: correct the compatible string of adm1272
  - arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names
  - arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names
  - arm64: dts: mediatek: mt8195-demo: Drop regulator-compatible property
  - arm64: dts: mediatek: mt8195-cherry: Drop regulator-compatible property
  - arm64: dts: mediatek: mt8192-asurada: Drop regulator-compatible property
  - arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property
  - arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property
  - rdma/cxgb4: Prevent potential integer overflow on 32bit
  - RDMA/mlx4: Avoid false error about access to uninitialized gids array
  - ARM: dts: stm32: Fix IPCC EXTI declaration on stm32mp151
  - arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A
  - arm64: dts: mediatek: mt8516: add i2c clock-div property
  - arm64: dts: mediatek: mt8516: fix wdt irq type
  - arm64: dts: mediatek: mt8516: fix GICv2 range
  - arm64: dts: mt8183: set DMIC one-wire mode on Damu
  - arm64: dts: mediatek: mt8186: Move wakeup to MTU3 to get working suspend
  - ARM: at91: pm: change BU Power Switch to automatic mode
  - soc: atmel: fix device_node release in atmel_soc_device_init()
  - cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM in readdir.c
  - smb: client: fix oops due to unset link speed
  - padata: avoid UAF for reorder_work
  - padata: add pd get/put refcnt helper
  - padata: fix UAF in padata_reorder
  - perf lock: Fix parse_lock_type which only retrieve one lock flag
  - ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop
  - bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write
  - pinctrl: amd: Take suspend type into consideration which pins are non-wake
  - pinctrl: stm32: Add check for clk_enable()
  - perf report: Fix misleading help message about --demangle
  - ASoC: Intel: avs: Fix theoretical infinite loop
  - ASoC: Intel: avs: Do not readq() u32 registers
  - ASoC: Intel: avs: Abstract IPC handling
  - ASoC: Intel: avs: Prefix SKL/APL-specific members
  - perf namespaces: Fixup the nsinfo__in_pidns() return type, its bool
  - perf namespaces: Introduce nsinfo__set_in_pidns()
  - perf machine: Don't ignore _etext when not a text symbol
  - perf top: Don't complain about lack of vmlinux when not resolving some kernel samples
  - padata: fix sysfs store callback check
  - ALSA: seq: Make dependency on UMP clearer
  - ALSA: seq: remove redundant 'tristate' for SND_SEQ_UMP_CLIENT
  - crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto()
  - ktest.pl: Remove unused declarations in run_bisect_test function
  - perf expr: Initialize is_test value in expr__ctx_new()
  - ASoC: renesas: rz-ssi: Use only the proper amount of dividers
  - perf bpf: Fix two memory leakages when calling perf_env__insert_bpf_prog_info()
  - perf header: Fix one memory leakage in process_bpf_prog_info()
  - perf header: Fix one memory leakage in process_bpf_btf()
  - crypto: caam - use JobR's space to access page 0 regs
  - selftests/bpf: Fix fill_link_info selftest on powerpc
  - ASoC: sun4i-spdif: Add clock multiplier settings
  - tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind
  - libbpf: don't adjust USDT semaphore address if .stapsdt.base addr is missing
  - net/rose: prevent integer overflows in rose_setsockopt()
  - tcp_cubic: fix incorrect HyStart round start detection
  - net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns()
  - netfilter: nft_flow_offload: update tcp state flags under lock
  - netfilter: nf_tables: fix set size with rbtree backend
  - netfilter: nft_set_rbtree: prefer sync gc to async worker
  - netfilter: nft_set_rbtree: rename gc deactivate+erase function
  - netfilter: nf_tables: de-constify set commit ops function argument
  - net: sched: Disallow replacing of child qdisc from one parent to another
  - net: avoid race between device unregistration and ethnl ops
  - octeon_ep: remove firmware stats fetch in ndo_get_stats64
  - net/mlxfw: Drop hard coded max FW flash image size
  - net: let net.core.dev_weight always be non-zero
  - pwm: stm32: Add check for clk_enable()
  - clk: analogbits: Fix incorrect calculation of vco rate delta
  - inet: ipmr: fix data-races
  - wifi: cfg80211: adjust allocation of colocated AP data
  - wifi: cfg80211: Handle specific BSSID in 6GHz scanning
  - selftests: harness: fix printing of mismatch values in __EXPECT()
  - selftests: timers: clocksource-switch: Adapt progress to kselftest framework
  - wifi: mt76: mt7996: fix ldpc setting
  - wifi: mt76: mt7996: fix incorrect indexing of MIB FW event
  - wifi: mt76: mt7996: fix HE Phy capability
  - wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU
  - wifi: mt76: mt7996: add max mpdu len capability
  - wifi: mt76: mt7996: fix register mapping
  - wifi: mt76: mt7915: fix register mapping
  - wifi: mt76: mt7915: fix omac index assignment after hardware reset
  - wifi: mt76: mt7915: improve hardware restart reliability
  - wifi: mt76: connac: move mt7615_mcu_del_wtbl_all to connac
  - wifi: mt76: mt7915: firmware restart on devices with a second pcie link
  - wifi: mt76: mt7996: fix rx filter setting for bfee functionality
  - wifi: mt76: mt7915: fix overflows seen when writing limit attributes
  - wifi: mt76: mt7921: fix using incorrect group cipher after disconnection.
  - wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO
  - landlock: Handle weird files
  - net/smc: fix data error when recvmsg with MSG_PEEK flag
  - clk: ralink: mtmips: remove duplicated 'xtal' clock for Ralink SoC RT3883
  - wifi: mac80211: don't flush non-uploaded STAs
  - wifi: mac80211: Fix common size calculation for ML element
  - wifi: mac80211: fix tid removal during mesh forwarding
  - wifi: mac80211: prohibit deactivating all links
  - wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC
  - wifi: wlcore: fix unbalanced pm_runtime calls
  - samples/landlock: Fix possible NULL dereference in parse_path()
  - mfd: syscon: Fix race in device_node_get_regmap()
  - mfd: syscon: Use scoped variables with memory allocators to simplify error paths
  - mfd: syscon: Add of_syscon_register_regmap() API
  - mfd: syscon: Remove extern from function prototypes
  - leds: cht-wcove: Use devm_led_classdev_register() to avoid memory leak
  - HID: fix generic desktop D-Pad controls
  - HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
  - clk: qcom: gcc-sdm845: Do not use shared clk_ops for QUPs
  - wifi: ath12k: fix tx power, max reg power update to firmware
  - ipmi: ssif_bmc: Fix new request loss when bmc ready for a response
  - OPP: OF: Fix an OF node leak in _opp_add_static_v2()
  - ax25: rcu protect dev->ax25_ptr
  - regulator: of: Implement the unwind path of of_regulator_match()
  - clk: sunxi-ng: a64: stop force-selecting PLL-MIPI as TCON0 parent
  - clk: sunxi-ng: a64: drop redundant CLK_PLL_VIDEO0_2X and CLK_PLL_MIPI
  - dt-bindings: clock: sunxi: Export PLL_VIDEO_2X and PLL_MIPI
  - team: prevent adding a device which is already a team device lower
  - clk: imx8mp: Fix clkout1/2 support
  - cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq* clocks
  - cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ is not available
  - gpio: pca953x: log an error when failing to get the reset GPIO
  - gpio: pca953x: Fully convert to device managed resources
  - gpio: pca953x: Drop unused fields in struct pca953x_platform_data
  - cpufreq: schedutil: Fix superfluous updates caused by need_freq_update
  - pwm: stm32-lp: Add check for clk_enable()
  - inetpeer: do not get a refcount in inet_getpeer()
  - inetpeer: update inetpeer timestamp in inet_getpeer()
  - inetpeer: remove create argument of inet_getpeer()
  - inetpeer: remove create argument of inet_getpeer_v[46]()
  - leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata()
  - dt-bindings: mfd: bd71815: Fix rsense and typos
  - cpupower: fix TSC MHz calculation
  - ACPI: fan: cleanup resources in the error path of .probe()
  - wifi: brcmfmac: add missing header include for brcmf_dbg
  - regulator: dt-bindings: mt6315: Drop regulator-compatible property
  - HID: multitouch: fix support for Goodix PID 0x01e9
  - wifi: rtlwifi: pci: wait for firmware loading before releasing memory
  - wifi: rtlwifi: fix memory leaks and invalid access at probe error path
  - wifi: rtlwifi: destroy workqueue at rtl_deinit_core
  - wifi: rtlwifi: remove unused check_buddy_priv
  - dt-bindings: leds: class-multicolor: Fix path to color definitions
  - clk: fix an OF node reference leak in of_clk_get_parent_name()
  - of: remove internal arguments from of_property_for_each_u32()
  - clk: si5351: allow PLLs to be adjusted without reset
  - serial: sc16is7xx: use device_property APIs when configuring irda mode
  - dt-bindings: mmc: controller: clarify the address-cells description
  - rxrpc: Fix handling of received connection abort
  - spi: zynq-qspi: Add check for clk_enable()
  - net_sched: sch_sfq: don't allow 1 packet limit
  - net_sched: sch_sfq: handle bigger packets
  - net_sched: sch_sfq: annotate data-races around q->perturb_period
  - wifi: rtlwifi: usb: fix workqueue leak when probe fails
  - wifi: rtlwifi: fix init_sw_vars leak when probe fails
  - wifi: rtlwifi: wait for firmware loading before releasing memory
  - wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step
  - wifi: rtlwifi: do not complete firmware loading needlessly
  - wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855
  - ipmi: ipmb: Add check devm_kasprintf() returned value
  - drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini()
  - drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE
  - drm/msm: Check return value of of_dma_configure()
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8550
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8350
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8250
  - drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8150
  - OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
  - drm/amdgpu/vcn: reset fw_shared under SRIOV
  - drm/rockchip: vop2: include rockchip_drm_drv.h
  - drm/rockchip: move output interface related definition to rockchip_drm_drv.h
  - drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8
  - drm/rockchip: vop2: Fix the windows switch between different layers
  - drm/rockchip: vop2: set bg dly and prescan dly at vop2_post_config
  - drm/rockchip: vop2: Set YUV/RGB overlay mode
  - drm/rockchip: vop2: Fix the mixer alpha setup for layer 0
  - drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset
  - drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
  - drm/amd/pm: Fix an error handling path in vega10_enable_se_edc_force_stall_config()
  - HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
  - drm/etnaviv: Fix page property being used for non writecombine buffers
  - drm/msm/dp: set safe_to_exit_level before printing it
  - x86/topology: Use x86_sched_itmt_flags for PKG domain unconditionally
  - x86/cpu: Enable SD_ASYM_PACKING for PKG domain on AMD
  - sched/topology: Rename 'DIE' domain to 'PKG'
  - afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call
  - select: Fix unbalanced user_access_end()
  - partitions: ldm: remove the initial kernel-doc notation
  - selftests/powerpc: Fix argument order to timer_sub()
  - pstore/blk: trivial typo fixes
  - block: retry call probe after request_module in blk_request_module
  - fs: fix proc_handler for sysctl_nr_open
  - afs: Fix cleanup of immediately failed async calls
  - afs: Fix directory format encoding struct
  - afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY
  - dlm: fix srcu_read_lock() return type to int
  - powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active
  - !15477  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
  - PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
  - !15472  PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()
  - PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()
  - !15473  iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
  - iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
  - !15474  OPP: add index check to assert to avoid buffer overflow in _read_freq()
  - OPP: add index check to assert to avoid buffer overflow in _read_freq()
  - !15475  wifi: wcn36xx: fix channel survey memory allocation size
  - wifi: wcn36xx: fix channel survey memory allocation size
  - !15476  LoongArch: Fix warnings during S3 suspend
  - LoongArch: Fix warnings during S3 suspend
  - !15464 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.72-6.6.75 LTS Patches
  - drm/v3d: Assign job pointer to NULL before signaling the fence
  - Input: xpad - add support for wooting two he (arm)
  - Input: xpad - add support for Nacon Evol-X Xbox One Controller
  - Input: xpad - improve name of 8BitDo controller 2dc8:3106
  - Input: xpad - add QH Electronics VID/PID
  - Input: xpad - add unofficial Xbox 360 wireless receiver clone
  - Input: atkbd - map F23 key to support default copilot shortcut
  - Input: xpad - add support for Nacon Pro Compact
  - ALSA: usb-audio: Add delay quirk for USB Audio Device
  - Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null"
  - scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
  - vfio/platform: check the bounds of read/write syscalls
  - cachestat: fix page cache statistics permission checking
  - Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad"
  - net: sched: fix ets qdisc OOB Indexing
  - smb: client: handle lack of EA support in smb2_query_path_info()
  - libfs: Add simple_offset_rename() API
  - ASoC: samsung: Add missing depends on I2C
  - hwmon: (drivetemp) Set scsi command timeout to 10s
  - irqchip/sunxi-nmi: Add missing SKIP_WAKE flag
  - of/unittest: Add test that of_address_to_resource() fails on non-translatable address
  - drm/amd/display: Use HW lock mgr for PSR1
  - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request
  - seccomp: Stub for !CONFIG_SECCOMP
  - ASoC: samsung: Add missing selects for MFD_WM8994
  - ASoC: wm8994: Add depends on MFD core
  - x86/xen: fix SLS mitigation in xen_hypercall_iret()
  - nfsd: add list_head nf_gc to struct nfsd_file
  - Revert "drm/amdgpu: rework resume handling for display (v2)"
  - fs: relax assertions on failure to encode file handles
  - ovl: support encoding fid from inode with no alias
  - ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
  - ocfs2: fix deadlock in ocfs2_get_system_file_inode
  - iio: imu: inv_icm42600: fix spi burst write not supported
  - Revert "PCI: Use preserve_config in place of pci_flags"
  - drm/amdgpu: always sync the GFX pipe on ctx switch
  - drm/i915/fb: Relax clear color alignment to 64 bytes
  - hrtimers: Handle CPU state correctly on hotplug
  - irqchip: Plug a OF node reference leak in platform_irqchip_probe()
  - filemap: avoid truncating 64-bit offset to 32 bits
  - nouveau/fence: handle cross device fences properly
  - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
  - vsock: reset socket state when de-assigning the transport
  - vsock/virtio: cancel close work in the destructor
  - vsock/virtio: discard packets if the transport changes
  - net: ethernet: xgbe: re-add aneg to supported features in PHY quirks
  - selftests: mptcp: avoid spurious errors on disconnect
  - mptcp: fix spurious wake-up on under memory pressure
  - mptcp: be sure to send ack when mptcp-level window re-opens
  - i2c: atr: Fix client detach
  - zram: fix potential UAF of zram table
  - ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA
  - x86/asm: Make serialize() always_inline
  - nvmet: propagate npwg topology
  - RDMA/bnxt_re: Fix to export port num to ib_query_qp
  - poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll()
  - ACPI: resource: acpi_dev_irq_override(): Check DMI match last
  - smb: client: fix double free of TCP_Server_Info::hostname
  - i2c: rcar: fix NACK handling when being a target
  - i2c: mux: demux-pinctrl: check initial mux selection, too
  - Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data"
  - hwmon: (tmp513) Fix division of negative numbers
  - soc: ti: pruss: Fix pruss APIs
  - drm/v3d: Ensure job pointer is set to NULL after job completion
  - drm/vmwgfx: Add new keep_resv BO param
  - net/mlx5e: Always start IPsec sequence number from 1
  - net/mlx5e: Rely on reqid in IPsec tunnel mode
  - net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel
  - net/mlx5: Clear port select structure when fail to create
  - net/mlx5: Fix RDMA TX steering prio
  - net: fec: handle page_pool_dev_alloc_pages error
  - net: xilinx: axienet: Fix IRQ coalescing packet count overflow
  - nfp: bpf: prevent integer overflow in nfp_bpf_event_output()
  - pktgen: Avoid out-of-bounds access in get_imix_entries
  - openvswitch: fix lockup on tx to unregistering netdev with carrier
  - bpf: Fix bpf_sk_select_reuseport() memory leak
  - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()
  - Revert "ovl: do not encode lower fh with upper sb_writers held"
  - Revert "ovl: pass realinode to ovl_encode_real_fh() instead of realdentry"
  - Revert "ovl: support encoding fid from inode with no alias"
  - !15608  perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list
  - perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list
  - !15360  USB: hub: Ignore non-compliant devices with too many configs or interfaces
  - USB: hub: Ignore non-compliant devices with too many configs or interfaces
  - !15597  CVE-2025-21853
  - bpf: avoid holding freeze_mutex during mmap operation
  - bpf: unify VM_WRITE vs VM_MAYWRITE use in BPF map mmaping logic
  - !15603  Mainline patch merged into OLK-6.6
  - RDMA/hns: Fix missing xa_destroy()
  - RDMA/hns: Fix wrong value of max_sge_rd
  - RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
  - RDMA/hns: Fix invalid sq params not being blocked
  - RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
  - RDMA/hns: Fix soft lockup during bt pages loop
  - !15430  cpufreq: Fix some boost errors related to CPU online and offline
  - cpufreq: prevent NULL dereference in cpufreq_online()
  - cpufreq: ACPI: Remove set_boost in acpi_cpufreq_cpu_init()
  - cpufreq: CPPC: Fix wrong max_freq in policy initialization
  - cpufreq: Introduce a more generic way to set default per-policy boost flag
  - cpufreq: Fix re-boost issue after hotplugging a CPU
  - !15568 [olk 6.6] some features for hibmcge driver
  - net: hibmcge: Add support for ioctl
  - net: hibmcge: Add support for BMC diagnose feature
  - net: hibmcge: Add support for mac link exception handling feature
  - net: hibmcge: Add support for abnormal irq handling feature
  - net: hibmcge: Add support for checksum offload
  - net: hibmcge: Add support for dump statistics
  - ethtool: Implement ethtool_puts()
  - !15357  blk-cgroup: Fix class @block_class's subsystem refcount leakage
  - blk-cgroup: Fix class @block_class's subsystem refcount leakage
  - !15333 VirtCCA Feature: cvm support UEFI boot
  - Bug fix: Resolve the issue of host hard lockup
  - VirtCCA: The cvm removes the vcpu binding limit.
  - VirtCCA: Improve nfs workqueue bind method
  - VirtCCA: Intercept the situation where devices with both NVM adn CVM passthrough under same PCIe root port
  - VirtCCA: an interface to retrieve the TMI version is added
  - VirtCCA: cvm support UEFI boot
  - !15414 bnxt_en: Fix possible memory leak when hwrm_req_replace fails
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails
  - !15580  two bugfixs
  - mm/migrate: fix shmem xarray update during migration
  - mm: fix finish_fault() handling for large folios


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-85.0.0.79
changelog:
  - !15705  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - !15704  perf/core: Add RCU read lock protection to perf_iterate_ctx()
  - perf/core: Add RCU read lock protection to perf_iterate_ctx()
  - !15672  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - !15621  misc: fastrpc: Fix copy buffer page size
  - misc: fastrpc: Fix copy buffer page size
  - !15620  s390/ism: add release function for struct device
  - s390/ism: add release function for struct device
  - !15622  Fix UAF in acct(2)
  - acct: block access to kernel internal filesystems
  - acct: perform last write from workqueue
  - !15488  CVE-2025-21816
  - hrtimer: Fix kabi broken of struct hrtimer_cpu_base
  - hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
  - !15706 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.78-6.6.79 LTS Patches
  - kbuild: hdrcheck: fix cross build with clang
  - HID: hid-steam: Fix use-after-free when detaching device
  - Revert "vfio/platform: check the bounds of read/write syscalls"
  - x86/i8253: Disable PIT timer 0 when not in use
  - vsock: Orphan socket after transport release
  - vsock: Keep the binding until socket destruction
  - io_uring/kbuf: reallocate buf lists on upgrade
  - HID: hid-steam: Don't use cancel_delayed_work_sync in IRQ context
  - alpha: replace hardcoded stack offsets with autogenerated ones
  - mm: gup: fix infinite loop within __get_longterm_locked
  - arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented
  - md/md-bitmap: move bitmap_{start, end}write to md upper layer
  - md: add a new callback pers->bitmap_sector()
  - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()
  - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write()
  - selftests: rtnetlink: update netdevsim ipsec output format
  - netdevsim: print human readable IP address
  - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0
  - drm/v3d: Stop active perfmon if it is being destroyed
  - drm/rcar-du: dsi: Fix PHY lock bit check
  - drm/tidss: Clear the interrupt status for interrupts being disabled
  - drm/tidss: Fix issue in irq handling causing irq-flood issue
  - ipv6: mcast: add RCU protection to mld_newpack()
  - ipv6: mcast: extend RCU protection in igmp6_send()
  - ndisc: extend RCU protection in ndisc_send_skb()
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
  - arp: use RCU protection in arp_xmit()
  - neighbour: use RCU protection in __neigh_notify()
  - neighbour: delete redundant judgment statements
  - ndisc: use RCU protection in ndisc_alloc_skb()
  - HID: hid-steam: Move hidraw input (un)registering to work
  - HID: hid-steam: Make sure rumble work is canceled on removal
  - HID: hid-steam: Add Deck IMU support
  - HID: hid-steam: Fix cleanup in probe()
  - HID: hid-steam: remove pointless error message
  - HID: hid-steam: Add gamepad-only mode switched to by holding options
  - HID: hid-steam: Update list of identifiers from SDL
  - HID: hid-steam: Clean up locking
  - HID: hid-steam: Disable watchdog instead of using a heartbeat
  - HID: hid-steam: Avoid overwriting smoothing parameter
  - ipv6: icmp: convert to dev_net_rcu()
  - ipv6: use RCU protection in ip6_default_advmss()
  - flow_dissector: use RCU protection to fetch dev_net()
  - ipv4: icmp: convert to dev_net_rcu()
  - ipv4: use RCU protection in __ip_rt_update_pmtu()
  - net: ipv4: Cache pmtu for all packet paths if multipath enabled
  - ipv4: use RCU protection in inet_select_addr()
  - ipv4: use RCU protection in rt_is_expired()
  - ipv4: use RCU protection in ipv4_default_advmss()
  - net: add dev_net_rcu() helper
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
  - ipv4: add RCU protection to ip4_dst_hoplimit()
  - btrfs: fix hole expansion when writing at an offset beyond EOF
  - mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw()
  - igc: Set buffer type for empty frames in igc_init_empty_frame
  - mmc: mtk-sd: Fix register settings for hs400(es) mode
  - arm64: Handle .ARM.attributes section in linker scripts
  - regmap-irq: Add missing kfree()
  - regulator: qcom_smd: Add l2, l5 sub-node to mp5496 regulator
  - partitions: mac: fix handling of bogus partition table
  - gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock
  - gpiolib: acpi: Add a quirk for Acer Nitro ANV14
  - alpha: align stack for page fault and user unaligned trap handlers
  - serial: 8250: Fix fifo underflow on flush
  - efi: Avoid cold plugged memory for placing the kernel
  - kbuild: userprogs: fix bitsize and target detection on clang
  - wifi: ath12k: fix handling of 6 GHz rules
  - alpha: make stack 16-byte aligned (most cases)
  - can: etas_es58x: fix potential NULL pointer dereference on udev->serial
  - can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero
  - can: c_can: fix unbalanced runtime PM disable in error path
  - can: ctucanfd: handle skb allocation failure
  - USB: serial: option: drop MeiG Smart defines
  - USB: serial: option: fix Telit Cinterion FN990A name
  - USB: serial: option: add Telit Cinterion FN990B compositions
  - USB: serial: option: add MeiG Smart SLM828
  - usb: cdc-acm: Fix handling of oversized fragments
  - USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
  - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
  - USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
  - USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
  - usb: core: fix pipe creation for get_bMaxPacketSize0
  - USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
  - usb: dwc2: gadget: remove of_node reference upon udc_stop
  - usb: gadget: udc: renesas_usb3: Fix compiler warning
  - usb: roles: set switch registered flag early on
  - usb: dwc3: Fix timeout issue during controller enter/exit from halt state
  - usb: gadget: f_midi: Fixing wMaxPacketSize exceeded issue during MIDI bind retries
  - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting
  - KVM: nSVM: Enter guest mode before initializing nested NPT MMU
  - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
  - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
  - batman-adv: Drop unmanaged ELP metric worker
  - batman-adv: Ignore neighbor throughput metrics in error case
  - batman-adv: fix panic during interface removal
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
  - ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V
  - selftests: gpio: gpio-sim: Fix missing chip disablements
  - Grab mm lock before grabbing pt lock
  - vfio/pci: Enable iowrite64 and ioread64 for vfio pci
  - rtla/timerlat_top: Abort event processing on second signal
  - rtla/timerlat_hist: Abort event processing on second signal
  - scsi: ufs: bsg: Set bsg_queue to NULL after removal
  - PCI: switchtec: Add Microchip PCI100X device IDs
  - PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P
  - media: uvcvideo: Add Kurokesu C1 PRO camera
  - media: uvcvideo: Add new quirk definition for the Sonix Technology Co. 292a camera
  - media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
  - media: i2c: ds90ub953: Add error handling for i2c reads/writes
  - media: i2c: ds90ub913: Add error handling to ub913_hw_init()
  - media: cxd2841er: fix 64-bit division on gcc-9
  - soc/tegra: fuse: Update Tegra234 nvmem keepout list
  - fbdev: omap: use threaded IRQ for LCD DMA
  - RDMA/efa: Reset device on probe failure
  - tools: fix annoying "mkdir -p ..." logs when building tools in parallel
  - x86/xen: allow larger contiguous memory regions in PV guests
  - xen/swiotlb: relax alignment requirements
  - drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - gpio: bcm-kona: Add missing newline to dev_err format string
  - gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ
  - gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
  - drm/i915/selftests: avoid using uninitialized context
  - cgroup: Remove steal time from usage_usec
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  - team: better TEAM_OPTION_TYPE_STRING validation
  - LoongArch: Fix idle VS timer enqueue
  - vxlan: check vxlan_vnigroup_init() return value
  - vrf: use RCU protection in l3mdev_l3_out()
  - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
  - ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
  - spi: sn-f-ospi: Fix division by zero
  - HID: multitouch: Add NULL check in mt_input_configured
  - pinctrl: cy8c95x0: Respect IRQ trigger settings from firmware
  - !14287 [OLK-6.6] SCSI: Support Linkdata HBA/RAID Controllers
  - SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
  - !15686 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.76-6.6.78 LTS Patches
  - char: misc: deallocate static minor in error path
  - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA
  - ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15
  - ALSA: hda/realtek: Add quirks for ASUS ROG 2023 models
  - ALSA: hda/realtek: Fix microphone regression on ASUS N705UD
  - Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
  - Revert "rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads"
  - Revert "rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads"
  - Revert "KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()"
  - Revert "KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock"
  - Revert "KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults"
  - Revert "KVM: e500: always restore irqs"
  - KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
  - KVM: x86: Make x2APIC ID 100% readonly
  - tty: xilinx_uartps: split sysrq handling
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  - mptcp: prevent excessive coalescing on receive
  - btrfs: avoid monopolizing a core when activating a swap file
  - Revert "btrfs: avoid monopolizing a core when activating a swap file"
  - ocfs2: check dir i_size in ocfs2_find_entry
  - net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling
  - spi: atmel-qspi: Memory barriers after memory-mapped I/O
  - spi: atmel-quadspi: Create `atmel_qspi_ops` to support newer SoC families
  - MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static
  - rtc: zynqmp: Fix optional clock name property
  - pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails
  - rtla/timerlat_top: Stop timerlat tracer on signal
  - rtla/timerlat_hist: Stop timerlat tracer on signal
  - rtla: Add trace_instance_stop
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/osnoise: Distinguish missing workload option
  - scripts/gdb: fix aarch64 userspace detection in get_current_task
  - maple_tree: simplify split calculation
  - net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset
  - net/ncsi: wait for the last response to Deselect Package before configuring channel
  - misc: fastrpc: Fix copy buffer page size
  - misc: fastrpc: Fix registered buffer page address
  - misc: fastrpc: Deregister device nodes properly in error scenarios
  - misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors
  - mtd: onenand: Fix uninitialized retlen in do_otp_read()
  - irqchip/apple-aic: Only handle PMC interrupt as FIQ when configured so
  - i3c: master: Fix missing 'ret' assignment in set_speed()
  - NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - mailbox: tegra-hsp: Clear mailbox before using message
  - ocfs2: fix incorrect CPU endianness conversion causing mount failure
  - pnfs/flexfiles: retry getting layout segment for reads
  - selftests: mptcp: connect: -f: no reconnect
  - vfio/platform: check the bounds of read/write syscalls
  - io_uring/rw: commit provided buffer state on async
  - io_uring: fix io_req_prep_async with provided buffers
  - io_uring/net: don't retry connect operation on EPOLLERR
  - io_uring: fix multishots with selected buffers
  - nvmem: imx-ocotp-ele: set word length to 1
  - nvmem: imx-ocotp-ele: fix reading from non zero offset
  - nvmem: imx-ocotp-ele: simplify read beyond device check
  - nvmem: core: improve range check for nvmem_cell_write()
  - nvmem: qcom-spmi-sdam: Set size in struct nvmem_config
  - crypto: qce - unregister previously registered algos in error path
  - crypto: qce - fix goto jump in error path
  - media: uvcvideo: Remove redundant NULL assignment
  - media: uvcvideo: Support partial control reads
  - media: uvcvideo: Fix event flags in uvc_ctrl_send_events
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - media: i2c: ds90ub960: Fix logging SP & EQ status only for UB9702
  - media: i2c: ds90ub960: Fix UB9702 VC map
  - media: i2c: ds90ub960: Fix use of non-existing registers on UB9702
  - media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()
  - media: ccs: Fix cleanup order in ccs_probe()
  - media: ccs: Fix CCS static data parsing for large block sizes
  - media: ov5640: fix get_light_freq on auto
  - media: imx296: Add standby delay during probe
  - media: mc: fix endpoint iteration
  - media: mmp: Bring back registration of the device
  - soc: qcom: smem_state: fix missing of_node_put in error path
  - soc: mediatek: mtk-devapc: Fix leaking IO map on error paths
  - iio: light: as73211: fix channel handling in only-color triggered buffer
  - media: ccs: Clean up parsed CCS static data on parse failure
  - kfence: skip __GFP_THISNODE allocations on NUMA systems
  - rv: Reset per-task monitors also for idle tasks
  - tpm: Change to kvalloc() in eventlog/acpi.c
  - ACPI: PRM: Remove unnecessary strict handler address checks
  - xfs: Add error handling for xfs_reflink_cancel_cow_range
  - xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end
  - pwm: microchip-core: fix incorrect comparison with max period
  - arm64: tegra: Disable Tegra234 sce-fabric node
  - arm64: tegra: Fix typo in Tegra234 dce-fabric compatible
  - crypto: qce - fix priority to be less than ARMv8 CE
  - arm64: dts: qcom: sm8550: correct MDSS interconnects
  - arm64: dts: qcom: sm8550: Fix MPSS memory length
  - arm64: dts: qcom: sm8550: Fix CDSP memory length
  - arm64: dts: qcom: sm8450: Fix MPSS memory length
  - arm64: dts: qcom: sm8450: Fix CDSP memory length
  - arm64: dts: qcom: sm8350: Fix MPSS memory length
  - arm64: dts: qcom: sm8350: Fix CDSP memory base and length
  - arm64: dts: qcom: sm8350: Fix ADSP memory base and length
  - arm64: dts: qcom: sm6375: Fix MPSS memory base and length
  - arm64: dts: qcom: sm6375: Fix CDSP memory base and length
  - arm64: dts: qcom: sm6375: Fix ADSP memory length
  - arm64: dts: qcom: sm6350: Fix uart1 interconnect path
  - arm64: dts: qcom: sm6350: Fix MPSS memory length
  - arm64: dts: qcom: sm6350: Fix ADSP memory length
  - arm64: dts: qcom: sm6115: Fix ADSP memory base and length
  - arm64: dts: qcom: sm6115: Fix CDSP memory length
  - arm64: dts: qcom: sm6115: Fix MPSS memory length
  - ARM: dts: ti/omap: gta04: fix pm issues caused by spi module
  - ARM: dts: dra7: Add bus_dma_limit for l4 cfg bus
  - ubi: Add a check for ubi_num
  - x86/boot: Use '-std=gnu11' to fix build with GCC 15
  - rust: init: use explicit ABI to clean warning in future compilers
  - kbuild: Move -Wenum-enum-conversion to W=2
  - scsi: storvsc: Set correct data length for sending SCSI command without payload
  - scsi: ufs: qcom: Fix crypto key eviction
  - scsi: qla2xxx: Move FCE Trace buffer allocation to user control
  - scsi: st: Don't set pos_unknown just after device recognition
  - nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk
  - nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk
  - PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf()
  - PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1
  - arm64: tegra: Fix Tegra234 PCIe interrupt-map
  - ALSA: hda: Fix headset detection failure due to unstable sort
  - ALSA: hda/realtek: Enable headset mic on Positivo C6400
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
  - block: don't revert iter for -EIOCBQUEUED
  - mips/math-emu: fix emulation of the prefx instruction
  - dm-crypt: track tag_offset in convert_context
  - dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit()
  - powerpc/pseries/eeh: Fix get PE state translation
  - LoongArch: Extend the maximum number of watchpoints
  - MIPS: Loongson64: remove ROM Size unit in boardinfo
  - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use
  - serial: sh-sci: Drop __initdata macro for port_cfg
  - soc: qcom: socinfo: Avoid out of bounds read of serial number
  - ASoC: acp: Support microphone from Lenovo Go S
  - usbnet: ipheth: document scope of NCM implementation
  - usbnet: ipheth: fix DPE OoB read
  - usbnet: ipheth: break up NCM header size computation
  - usbnet: ipheth: refactor NCM datagram loop
  - usbnet: ipheth: check that DPE points past NCM header
  - usbnet: ipheth: use static NDP16 location in URB
  - usb: gadget: f_tcm: Don't prepare BOT write request twice
  - usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint
  - usb: gadget: f_tcm: Decrement command ref count on cleanup
  - usb: gadget: f_tcm: Translate error to sense
  - wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916
  - wifi: rtw88: sdio: Fix disconnection after beacon loss
  - wifi: mt76: mt7921u: Add VID/PID for TP-Link TXE50UH
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
  - wifi: rtlwifi: rtl8821ae: Fix media status report
  - HID: hid-sensor-hub: don't use stale platform-data on remove
  - of: reserved-memory: Fix using wrong number of cells to get property 'alignment'
  - of: Fix of_find_node_opts_by_path() handling of alias+path+options
  - of: Correct child specifier used as input of the 2nd nexus node
  - scsi: ufs: core: Fix the HIGH/LOW_TEMP Bit Definitions
  - perf bench: Fix undefined behavior in cmpworker()
  - efi: libstub: Use '-std=gnu11' to fix build with GCC 15
  - clk: mediatek: mt2701-mm: add missing dummy clk
  - clk: mediatek: mt2701-img: add missing dummy clk
  - clk: mediatek: mt2701-bdp: add missing dummy clk
  - clk: mediatek: mt2701-aud: fix conversion to mtk_clk_simple_probe
  - clk: mediatek: mt2701-vdec: fix conversion to mtk_clk_simple_probe
  - clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate
  - clk: qcom: gcc-mdm9607: Fix cmd_rcgr offset for blsp1_uart6 rcg
  - clk: qcom: gcc-sm6350: Add missing parent_map for two clocks
  - clk: qcom: gcc-sm8550: Do not turn off PCIe GDSCs during gdsc_disable()
  - clk: qcom: clk-alpha-pll: fix alpha mode configuration
  - media: i2c: ds90ub960: Fix UB9702 refclk register access
  - clk: sunxi-ng: a100: enable MMC clock reparenting
  - Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
  - drm/i915: Drop 64bpp YUV formats from ICL+ SDR planes
  - drm/komeda: Add check for komeda_get_layer_fourcc_list()
  - drm/i915: Fix page cleanup on DMA remap failure
  - drm/i915/guc: Debug print LRC state entries only if the context is pinned
  - Revert "drm/amd/display: Use HW lock mgr for PSR1"
  - drm/amdkfd: only flush the validate MES contex
  - drm/amd/pm: Mark MM activity as unsupported
  - ksmbd: fix integer overflows on 32 bit systems
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
  - arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma
  - drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event()
  - KVM: arm64: timer: Always evaluate the need for a soft timer
  - fs/proc: do_task_stat: Fix ESP not readable during coredump
  - m68k: vga: Fix I/O defines
  - s390/futex: Fix FUTEX_OP_ANDN implementation
  - smb: client: change lease epoch type from unsigned int to __u16
  - smb: client: fix order of arguments of tracepoints
  - drm/modeset: Handle tiled displays in pan_display_atomic.
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx
  - leds: lp8860: Write full EEPROM, not only half of it
  - cpufreq: s3c64xx: Fix compilation warning
  - rxrpc: Fix call state set to not include the SERVER_SECURING state
  - net: sched: Fix truncation of offloaded action statistics
  - tun: revert fix group permission check
  - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
  - ACPI: property: Fix return value for nval == 0 in acpi_data_prop_read()
  - x86/xen: add FRAME_END to xen_hypercall_hvm()
  - x86/xen: fix xen_hypercall_hvm() to not clobber %rbx
  - net: rose: lock the socket in rose_bind()
  - net: atlantic: fix warning during hot unplug
  - gpio: pca953x: Improve interrupt support
  - rxrpc: Fix the rxrpc_connection attend queue handling
  - udp: gso: do not drop small packets when PMTU reduces
  - tg3: Disable tg3 PCIe AER on system reboot
  - vmxnet3: Fix tx queue race condition with XDP
  - ice: Add check for devm_kzalloc()
  - net: bcmgenet: Correct overlaying of PHY and MAC Wake-on-LAN
  - nvme-fc: use ctrl state getter
  - ice: put Rx buffers after being done with current frame
  - gpu: drm_dp_cec: fix broken CEC adapter properties check
  - firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry
  - net/ncsi: fix locking in Get MAC Address handling
  - net/ncsi: Add NC-SI 1.2 Get MC MAC Address command
  - KVM: e500: always restore irqs
  - KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults
  - KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock
  - KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()
  - platform/x86: acer-wmi: Ignore AC events
  - Input: allocate keycode for phone linking
  - ASoC: amd: Add ACPI dependency to fix build error
  - ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
  - platform/x86: int3472: Check for adev == NULL
  - iommu/arm-smmu-v3: Clean up more on probe failure
  - iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible
  - x86/kexec: Allocate PGD for x86_64 transition page tables separately
  - selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack()
  - tipc: re-order conditions in tipc_crypto_key_rcv()
  - mmc: sdhci-msm: Correctly set the load for the regulator
  - net: wwan: iosm: Fix hibernation by re-binding the driver around it
  - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
  - APEI: GHES: Have GHES honor the panic= setting
  - i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz
  - wifi: iwlwifi: avoid memory leak
  - net/mlx5: use do_aux_work for PHC overflow checks
  - HID: Wacom: Add PCI Wacom device support
  - clk: qcom: Make GCC_8150 depend on QCOM_GDSC
  - mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id
  - tomoyo: don't emit warning in tomoyo_write_control()
  - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
  - mmc: core: Respect quirk_max_rate for non-UHS SDIO card
  - tun: fix group permission check
  - wifi: rtw89: add crystal_cap check to avoid setting as overflow value
  - safesetid: check size of policy writes
  - drm/bridge: it6505: fix HDCP CTS KSV list wait timer
  - drm/bridge: it6505: fix HDCP CTS compare V matching
  - drm/bridge: it6505: fix HDCP encryption when R0 ready
  - drm/bridge: it6505: fix HDCP Bstatus check
  - drm/bridge: it6505: Change definition MAX_HDCP_DOWN_STREAM_COUNT
  - drm/amd/display: Fix Mode Cutoff in DSC Passthrough to DP2.1 Monitor
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
  - drm/virtio: New fence for every plane update
  - x86/amd_nb: Restrict init function to AMD-based systems
  - lockdep: Fix upper limit for LOCKDEP_*_BITS configs
  - sched: Don't try to catch up excess steal time.
  - btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling
  - btrfs: fix data race when accessing the inode's disk_i_size at btrfs_drop_extents()
  - s390/stackleak: Use exrl instead of ex in __stackleak_poison()
  - arm64/mm: Ensure adequate HUGE_MAX_HSTATE
  - btrfs: fix use-after-free when attempting to join an aborted transaction
  - btrfs: fix assertion failure when splitting ordered extent after transaction abort
  - Revert "hostfs: convert hostfs to use the new mount API"
  - Revert "hostfs: fix string handling in __dentry_name()"
  - Revert "hostfs: Add const qualifier to host_root in hostfs_fill_super()"
  - Revert "hostfs: fix the host directory parse when mounting."
  - !15645  nilfs2: do not force clear folio if buffer is referenced
  - nilfs2: do not force clear folio if buffer is referenced
  - !15660 v2  add support DVMBM in HIP12
  - KVM: arm64: Add new HiSi CPU type to support DVMBM
  - kvm: hisi_virt: Update TLBI broadcast feature for hip12
  - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE
  - !15593  io_uring: prevent opcode speculation
  - io_uring: prevent opcode speculation
  - !15644  ata: libata-sff: Ensure that we cannot write outside the allocated buffer
  - ata: libata-sff: Ensure that we cannot write outside the allocated buffer
  - !15581  smb: client: Add check for next_buffer in receive_encrypted_standard()
  - smb: client: Add check for next_buffer in receive_encrypted_standard()


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-85.0.0.80
changelog:
  - RISC-V kernel upgrade to 6.6.0-85.0.0
  - Add spacemit k1 support, include pinctrl, gpio, clk, reset, uart, dts-bindings and dts
  - KVM AIA: Enable HW_ACCL
  - RISC-V: Remove unnecessary include from compat.h


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-86.0.0.81
changelog:
  - !15783 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.80-6.6.81 LTS Patches
  - firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success
  - scsi: ufs: core: Cancel RTC work during ufshcd_remove()
  - scsi: ufs: core: Start the RTC update work later
  - scsi: ufs: core: Fix another deadlock during RTC update
  - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive
  - scsi: ufs: core: Fix deadlock during RTC update
  - x86/microcode/intel: Remove unnecessary cache writeback and invalidation
  - arm64: dts: rockchip: Disable DMA for uart5 on px30-ringneck
  - intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly
  - gve: set xdp redirect target only when it is available
  - amdgpu/pm/legacy: fix suspend/resume issues
  - riscv: signal: fix signal frame size
  - riscv/futex: sign extend compare value in atomic cmpxchg
  - rseq/selftests: Fix riscv rseq_offset_deref_addv inline asm
  - sched/core: Prevent rescheduling when interrupts are disabled
  - rcuref: Plug slowpath race in rcuref_put()
  - vmlinux.lds: Ensure that const vars with relocations are mapped R/O
  - mptcp: reset when MPTCP opts are dropped after join
  - mptcp: always handle address removal under msk socket lock
  - phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE
  - net: enetc: fix the off-by-one issue in enetc_map_tx_tso_buffs()
  - net: enetc: correct the xdp_tx statistics
  - net: enetc: update UDP checksum when updating originTimestamp field
  - net: enetc: keep track of correct Tx BD count in enetc_map_tx_tso_buffs()
  - net: enetc: fix the off-by-one issue in enetc_map_tx_buffs()
  - usbnet: gl620a: fix endpoint checking in genelink_bind()
  - i2c: npcm: disable interrupt enable bit before devm_request_irq
  - drm/amd/display: Fix HPD after gpu reset
  - drm/amd/display: Disable PSR-SU on eDP panels
  - perf/core: Fix low freq setting via IOC_PERIOD
  - perf/x86: Fix low freqency setting issue
  - ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2
  - riscv: KVM: Fix SBI TIME error generation
  - riscv: KVM: Fix SBI IPI error generation
  - riscv: KVM: Fix hart suspend status check
  - RISCV: KVM: Introduce mp_state_lock to avoid lock inversion
  - phy: rockchip: naneng-combphy: compatible reset with old DT
  - x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems
  - io_uring/net: save msg_control for compat
  - net: ti: icss-iep: Reject perout generation request
  - net: ti: icss-iep: Remove spinlock-based synchronization
  - include: net: add static inline dst_dev_overhead() to dst.h
  - net/mlx5: IRQ, Fix null string in debug print
  - net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination.
  - net: Clear old fragment checksum value in napi_reuse_skb
  - ice: Fix deinitializing VF in error path
  - ice: add E830 HW VF mailbox message limit support
  - ice: Add E830 device IDs, MAC type and registers
  - firmware: cs_dsp: Remove async regmap writes
  - ipvs: Always clear ipvs_property flag in skb_scrub_packet()
  - ASoC: es8328: fix route from DAC to output
  - net: set the minimum for net_hotdata.netdev_budget_usecs
  - net: loopback: Avoid sending IP packets without an Ethernet header
  - afs: Fix the server_list to unuse a displaced server rather than putting it
  - afs: Make it possible to find the volumes that are using a server
  - rxrpc: rxperf: Fix missing decoding of terminal magic cookie
  - Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response
  - ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports
  - sunrpc: suppress warnings for unused procfs functions
  - RDMA/mlx5: Fix bind QP error cleanup flow
  - scsi: core: Clear driver private data when retrying request
  - SUNRPC: Handle -ETIMEDOUT return from tlshd
  - SUNRPC: Prevent looping due to rpc_signal_task() races
  - SUNRPC: convert RPC_TASK_* constants to enum
  - scsi: ufs: core: Fix ufshcd_is_ufs_dev_busy() and ufshcd_eh_timed_out()
  - scsi: ufs: core: Prepare to introduce a new clock_gating lock
  - scsi: ufs: core: Introduce ufshcd_has_pending_tasks()
  - scsi: ufs: core: Add UFS RTC support
  - scsi: ufs: core: Add ufshcd_is_ufs_dev_busy()
  - RDMA/mana_ib: Allocate PAGE aligned doorbell index
  - IB/mlx5: Set and get correct qp_num for a DCT QP
  - !15650 PCI/DPC: Ignore Surprise Down error on hot removal
  - PCI/DPC: Ignore Surprise Down error on hot removal
  - !15813  fix CVE-2025-21883
  - ice: Fix deinitializing VF in error path
  - ice: add E830 HW VF mailbox message limit support
  - ice: Add E830 device IDs, MAC type and registers
  - !15800  proc: fix UAF in proc_get_inode()
  - proc: fix UAF in proc_get_inode()
  - !15799  ksmbd: fix incorrect validation for num_aces field of smb_acl
  - ksmbd: fix incorrect validation for num_aces field of smb_acl
  - !15798  ksmbd: fix out-of-bounds in parse_sec_desc()
  - ksmbd: fix out-of-bounds in parse_sec_desc()
  - !15749  CVE-2025-21963 && CVE-2025-21964
  - cifs: Fix integer overflow while processing acdirmax mount option
  - cifs: Fix integer overflow while processing acregmax mount option
  - !15680  scsi: ufs: core: Fix use-after free in init error and remove paths
  - scsi: ufs: core: Fix use-after free in init error and remove paths
  - !15681  kernel: be more careful about dup_mmap() failures and uprobe registering
  - kernel: be more careful about dup_mmap() failures and uprobe registering
  - !15772  tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
  - tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
  - !15789  slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - !15788  wifi: cfg80211: regulatory: improve invalid hints checking
  - wifi: cfg80211: regulatory: improve invalid hints checking
  - !15787  i2c: npcm: disable interrupt enable bit before devm_request_irq
  - i2c: npcm: disable interrupt enable bit before devm_request_irq
  - !15786  ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
  - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
  - ASoC: SOF: topology: Parse DAI type token for dspless mode
  - ASoC: SOF: topology: dynamically allocate and store DAI widget->private
  - !15807  RDMA/mlx5: Fix a WARN during dereg_mr for DM type
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type
  - !15338  partitions: mac: fix handling of bogus partition table
  - partitions: mac: fix handling of bogus partition table
  - !15771  bpf: Add tracepoints with null-able arguments
  - bpf: Add tracepoints with null-able arguments
  - !15775 v2  CVE-2024-57857
  - RDMA/siw: Remove direct link to net_device
  - RDMA: Export ib_device_get_netdev()
  - !15790  fix CVE-2025-21976
  - fbdev: hyperv_fb: Allow graceful removal of framebuffer
  - fbdev: hyperv_fb: Simplify hvfb_putmem
  - fbdev: Introduce devm_register_framebuffer()
  - !15785 v2  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - !15757  Fix kmemleak false positive
  - efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
  - !15396  fix CVE-2024-57999
  - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
  - !15762  scsi: ufs: core: bsg: Fix crash when arpmb command fails
  - scsi: ufs: core: bsg: Fix crash when arpmb command fails
  - !15410  CVE-2025-21715
  - net: davicom: fix UAF in dm9000_drv_remove
  - !15408  CVE-2025-21744
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
  - !15729 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.79-6.6.80 LTS Patches
  - mtd: rawnand: cadence: fix unchecked dereference
  - ibmvnic: Inspect header requirements before using scrq direct
  - ibmvnic: Perform tx CSO during send scrq direct
  - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit
  - nilfs2: handle errors that nilfs_prepare_chunk() may return
  - nilfs2: eliminate staggered calls to kunmap in nilfs_rename
  - nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link
  - arm64: dts: rockchip: change eth phy mode to rgmii-id for orangepi r1 plus lts
  - md: Fix md_seq_ops() regressions
  - ftrace: Do not add duplicate entries in subops manager ops
  - ftrace: Correct preemption accounting for function tracing.
  - EDAC/qcom: Correct interrupt enable register configuration
  - mtd: rawnand: cadence: fix incorrect device in dma_unmap_single
  - mtd: rawnand: cadence: use dma_map_resource for sdma address
  - mtd: rawnand: cadence: fix error code in cadence_nand_init()
  - mm,madvise,hugetlb: check for 0-length range after end address adjustment
  - ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close
  - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
  - ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls()
  - ASoC: fsl_micfil: Enable default case in micfil_set_quality()
  - ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
  - lib/iov_iter: fix import_iovec_ubuf iovec management
  - soc: loongson: loongson2_guts: Add check for devm_kstrdup()
  - drop_monitor: fix incorrect initialization order
  - tee: optee: Fix supplicant wait loop
  - drm/i915/dp: Fix error handling during 128b/132b link training
  - drm/i915: Make sure all planes in use by the joiner have their crtc included
  - drm/msm/dpu: Disable dither in phys encoder cleanup
  - arm64: dts: mediatek: mt8183: Disable DSI display output by default
  - drm/nouveau/pmu: Fix gp10b firmware guard
  - bpf: skip non exist keys in generic_map_lookup_batch
  - nvme/ioctl: add missing space in err message
  - drm/msm: Avoid rounding up to one jiffy
  - nouveau/svm: fix missing folio unlock + put after make_device_exclusive_range()
  - power: supply: da9150-fg: fix potential overflow
  - bpf: Fix deadlock when freeing cgroup storage
  - bpf: Disable non stream socket for strparser
  - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
  - drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
  - drm/msm/gem: Demote userspace errors to DRM_UT_DRIVER
  - drm/tidss: Fix race condition while handling interrupt registers
  - drm/tidss: Add simple K2G manual reset
  - net: axienet: Set mac_managed_pm
  - arp: switch to dev_getbyhwaddr() in arp_req_set_public()
  - net: Add non-RCU dev_getbyhwaddr() helper
  - flow_dissector: Fix port range key handling in BPF conversion
  - flow_dissector: Fix handling of mixed port and port-range keys
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels().
  - tcp: adjust rcvq_space after updating scaling ratio
  - vsock/bpf: Warn on socket without transport
  - sockmap, vsock: For connectible sockets allow only connected
  - ibmvnic: Don't reference skb after sending to VIOS
  - ibmvnic: Add stat for tx direct vs tx batched
  - ibmvnic: Introduce send sub-crq direct
  - ibmvnic: Return error code on TX scrq flush fail
  - ALSA: seq: Drop UMP events when no UMP-conversion is set
  - net/sched: cls_api: fix error handling causing NULL dereference
  - ALSA: hda/cirrus: Correct the full scale volume set logic
  - geneve: Fix use-after-free in geneve_find_dev().
  - powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC
  - ALSA: hda/realtek: Fixup ALC225 depop procedure
  - powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
  - powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
  - ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB]
  - USB: gadget: f_midi: f_midi_complete to call queue_work
  - usb: gadget: core: flush gadget workqueue after device removal
  - USB: gadget: core: create sysfs link between udc and gadget
  - nvmem: imx-ocotp-ele: fix MAC address byte order
  - nvmem: Move and rename ->fixup_cell_info()
  - nvmem: Simplify the ->add_cells() hook
  - nvmem: Create a header for internal sharing
  - media: uvcvideo: Remove dangling pointers
  - media: uvcvideo: Only save async fh if success
  - media: uvcvideo: Refactor iterators
  - soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove
  - soc/mediatek: mtk-devapc: Convert to platform remove callback returning void
  - arm64: dts: qcom: sm8550: Fix ADSP memory base and length
  - arm64: dts: qcom: sm8550: add missing qcom,non-secure-domain property
  - arm64: dts: qcom: sm8550: Add dma-coherent property
  - arm64: dts: qcom: sm8450: Fix ADSP memory base and length
  - arm64: dts: qcom: sm8450: add missing qcom,non-secure-domain property
  - scsi: core: Do not retry I/Os during depopulation
  - scsi: core: Handle depopulation and restoration in progress
  - firmware: qcom: scm: Fix missing read barrier in qcom_scm_is_available()
  - ASoC: renesas: rz-ssi: Add a check for negative sample_space
  - Input: synaptics - fix crash when enabling pass-through port
  - Input: serio - define serio_pause_rx guard to pause and resume serio ports
  - Bluetooth: qca: Fix poor RF performance for WCN6855
  - Bluetooth: qca: Update firmware-name to support board specific nvm
  - Bluetooth: qca: Support downloading board id specific NVM for WCN7850
  - cpufreq: fix using cpufreq-dt as module
  - cpufreq: dt-platdev: add missing MODULE_DESCRIPTION() macro
  - memcg: fix soft lockup in the OOM process
  - mm: update mark_victim tracepoints fields
  - md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime
  - md/md-bitmap: add 'sync_size' into struct md_bitmap_stats
  - md/md-cluster: fix spares warnings for __le64
  - md/md-bitmap: replace md_bitmap_status() with a new helper md_bitmap_get_stats()
  - !15743  uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - !15768  gpio: aggregator: protect driver attr handlers against module unload
  - gpio: aggregator: protect driver attr handlers against module unload
  - !15755  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - !15739  ftrace: Avoid potential division by zero in function_stat_show()
  - ftrace: Avoid potential division by zero in function_stat_show()
  - !15748  tracing: Fix bad hist from corrupting named_triggers list
  - tracing: Fix bad hist from corrupting named_triggers list
  - !15750  perf/core: Fix pmus_lock vs. pmus_srcu ordering
  - perf/core: Fix pmus_lock vs. pmus_srcu ordering
  - !15697  fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - !15613  CVE-2024-57952
  - libfs: Fix duplicate directory entry in offset_dir_lookup
  - libfs: Use d_children list to iterate simple_offset directories
  - libfs: Replace simple_offset end-of-directory detection
  - Revert "libfs: fix infinite directory reads for offset dir"
  - Revert "libfs: Add simple_offset_empty()"
  - libfs: Return ENOSPC when the directory offset range is exhausted
  - !15724  CVE-2024-52560
  - fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode()
  - fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
  - !15277  drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - !15641  block: don't revert iter for -EIOCBQUEUED
  - block: don't revert iter for -EIOCBQUEUED
  - !15515  media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - !15731  Some mainline patches merged into drivers/hwmon
  - hwmon: (acpi_power_meter) Fix the fake power alarm reporting
  - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices().
  - hwmon: (acpi_power_meter) Fix update the power trip points on failure
  - hwmon: (acpi_power_meter) Fix uninitialized variables
  - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method
  - !15711  Some bug fix patches for RDMA/hns to olk-6.6
  - RDMA/hns: Fix remove debugfs after device has been unregistered
  - RDMA/hns: Reorder uctx deallocation
  - RDMA/hns: Fix a meaningless loop in free_buffer_pages_proc()
  - RDMA/hns: Fix DCA error path in alloc_wqe_buf()
  - RDMA/hns: Fix mismatched kzalloc vs kvfree
  - RDMA/hns: Fix delay-destruction mechanism not processing kernel db
  - RDMA/hns: Fix delayed destruction of db not taking effect
  - RDMA/hns: Move mtr_node into the mtr struct
  - RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct


author: Li Nan <linan122@huawei.com> - 6.6.0-87.0.0.82
changelog:
  - !15987 v12  Add support for IPIv
  - kabi: Use KABI_EXTEND to perform kabi repair for IPIV
  - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12
  - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE
  - kvm: hisi_virt: Register ipiv exception interrupt
  - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule
  - kvm: arm64: avoid sending multi-SGIs in IPIV
  - kvm: hisi_virt: Allocate VM table and save vpeid in it
  - !15980  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - !15979  thermal: int340x: Add NULL check for adev
  - !15921 Support SMT control on arm64.
  - !15975  perf/x86: Fix open counting event error
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - thermal: int340x: Add NULL check for adev
  - !15968 v3  Backport mainline patches to avoid crash caused by rsize being 0
  - !15960  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - !15974  RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
  - !15952  ksmbd: validate zero num_subauth before sub_auth is accessed
  - !15950  drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
  - perf/x86: Fix open counting event error
  - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
  - smb: client: Update IO sizes after reconnection
  - smb: client: Store original IO parameters and prevent zero IO sizes
  - smb:client: smb: client: Add reverse mapping from tcon to superblocks
  - Revert "cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0"
  - !15958 cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
  - !15916  LoongArch: Increase ARCH_DMA_MINALIGN up to 16
  - !15961  drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
  - !15945 crypto: hisilicon - some bugfix
  - drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - !15929  arm_mpam: Add SMMU support for MPAM
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
  - !15793  CVE-2025-21892
  - !15795  CVE-2025-21941
  - ksmbd: validate zero num_subauth before sub_auth is accessed
  - drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
  - !15871 v2  CVE-2024-57795
  - !15906 [OLK-6.6] drm/hisilicon/hibmc: some bugfixes for hibmc-drm driver
  - !15834 uacce: fix for the numa distance calculation
  - crypto: hisilicon/qm - disable error report before flr
  - hisi_acc_vfio_pci: obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - fix the pf2vf timeout when global reset
  - crypto: hisilicon/qm - modify interrupt processing resource application
  - crypto: hisilicon/qm - mask axi error before memory init
  - crypto: hisilicon/qm - invalidate queues in use
  - crypto: hisilicon/sec2 - fix memory use-after-free issue
  - crypto: hisilicon/sec2 - fix for gcm spec check
  - crypto: hisilicon/hpre - fix dma unmap sequence
  - !15936  ASoC: imx-card: Add NULL check in imx_card_probe()
  - !15922 mm: shmem: fix potential data corruption during shmem swapin
  - !15924 mm/vmscan: drop checking if _deferred_list is empty before using TTU_SYNC
  - !15913  block: fix resource leak in blk_register_queue() error path
  - ASoC: imx-card: Add NULL check in imx_card_probe()
  - !15923 RDMA/hns :Add some mainline patches to OLK-6.6
  - iommu: Fix kabi broken of struct iommu_ops
  - fs/resctrl: Move iommu_groups back when their associated RDT group is deleted
  - fs/resctrl: Fix the iommu_group parsing process
  - iommu/arm-smmu-v3: Check pointer valid before dereferencing it
  - arm_mpam: Select CONFIG_RESCTRL_IOMMU on the ARM64 by default
  - ACPI/MPAM: Parse the rest of the ACPI table
  - fs/resctrl: Add support for assigning iommu_groups to resctrl groups
  - arm_mpam: resctrl: Add iommu helpers to get/set the partid and pmg
  - kobject: Add kset_get_next_obj() to allow a kset to be walked
  - iommu: Add helper to retrieve iommu kset
  - iommu: Add helpers to retrieve iommu_groups by id or kobject
  - iommu: Add helpers to get and set the QoS state
  - iommu/arm-smmu-v3: Add mpam helpers to query and set state
  - iommu/arm-smmu-v3: Issue a batch of commands to the same cmdq
  - iommu/arm-smmu-v3: Register SMMU capabilities with MPAM
  - mm: shmem: fix potential data corruption during shmem swapin
  - mm/vmscan: drop checking if _deferred_list is empty before using TTU_SYNC
  - RDMA/hns: Fix wrong maximum DMA segment size
  - Revert "RDMA/hns: fix iommu_map_sg() failed when MR bigger than 4G"
  - RDMA/hns: initialize db in update_srq_db()
  - RDMA/hns: Remove unused parameters
  - config: enable CONFIG_HOTPLUG_SMT for arm64
  - arm64: Kconfig: Enable HOTPLUG_SMT
  - arm64: topology: Support SMT control on ACPI based system
  - arch_topology: Support SMT control for OF based system
  - cpu/SMT: Provide a default topology_is_primary_thread()
  - Revert "arm64: Kconfig: Enable HOTPLUG_SMT"
  - !15904 v2  PCI: AER: fix deadlock in do_recovery
  - !15910 v2  soc cache: Add support for HiSilicon L3 cache
  - LoongArch: Increase ARCH_DMA_MINALIGN up to 16
  - block: fix resource leak in blk_register_queue() error path
  - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
  - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
  - !15909  coresight: tmc: Don't change the buffer size if it's in use
  - soc cache: Modify default config to compile HiSilicon SoC cache driver
  - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent
  - soc cache: Add framework driver for HiSilicon SoC cache
  - coresight: tmc: Don't change the buffer size if it's in use
  - PCI: AER: fix deadlock in do_recovery
  - !15863 Some mainline patches merged into olk-6.6: drivers/hwmon
  - !15812  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - !15821  LoongArch: Set hugetlb mmap base address aligned with pmd size
  - !15882  Updates for HiSilicon L3C PMU driver
  - !15886  Add HPD, getting EDID, colorbar features in DP function
  - !15851 migration: adapt to new migration configuration
  - drm/hisilicon/hibmc: Add vga connector detect functions
  - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
  - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
  - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
  - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
  - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
  - drm/hisilicon/hibmc: Add dp serdes cfg in dp process
  - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
  - drm/hisilicon/hibmc: Restructuring the header dp_reg.h
  - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
  - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
  - drm/ast: Implement polling for VGA and SIL164 connectors
  - drm/sysfs: Register "ddc" symlink later
  - !15612 Some trivial cleanups for shmem
  - drivers/perf: hisi: Add support for L3C PMU v3
  - drivers/perf: hisi: Refactor the event configuration of L3C PMU
  - drivers/perf: hisi: Extend the field of tt_core
  - drivers/perf: hisi: Extract the event filter check of L3C PMU
  - drivers/perf: hisi: Simplify the probe process of each L3C PMU version
  - drivers/perf: hisi: Export hisi_uncore_pmu_isr()
  - drivers/perf: hisi: Relax the event ID check in the framework
  - !15872 【olk 6.6】backport some bugfixes for hibmcge driver
  - !15852  Fix CVE-2025-22013
  - !15845  regulator: check that dummy regulator has been probed before using it
  - !15854  perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - !15838  General updates of HiSilicon PMU drivers
  - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register
  - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates
  - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
  - ACPI: IPMI: Add helper to wait for when SMI is selected
  - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
  - RDMA/rxe: Remove the direct link to net_device
  - net: hibmcge: fix multiple phy_stop() issue
  - net: hibmcge: fix not restore rx pause mac addr after reset issue
  - net: hibmcge: fix the incorrect np_link fail state issue.
  - net: hibmcge: fix wrong mtu log issue
  - net: hibmcge: fix the share of irq statistics among different network ports issue
  - net: hibmcge: fix incorrect multicast filtering issue
  - net: hibmcge: fix incorrect pause frame statistics issue
  - migration: adapt to new migration configuration
  - migration: qm updates BAR configuration
  - migration: update BAR space size
  - hisi_acc_vfio_pci: update function return values
  - hisi_acc_vfio_pci: bugfix live migration function without VF device driver
  - hisi_acc_vfio_pci: bugfix the problem of uninstalling driver
  - hisi_acc_vfio_pci: bugfix cache write-back issue
  - hisi_acc_vfio_pci: add eq and aeq interruption restore
  - hisi_acc_vfio_pci: fix XQE dma address error
  - !15839  ext4: Some zeroing fixes
  - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - arm64/fpsimd: Remove unused declaration fpsimd_kvm_prepare()
  - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
  - !15321  printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
  - regulator: check that dummy regulator has been probed before using it
  - !15826  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - !15754 v3  Support the FEAT_HDBSS introduced in Armv9.5
  - jbd2: fix off-by-one while erasing journal
  - iomap: do not interrupt IOMAP_ZERO
  - ext4: fix potential memory exposure issues during truncate in iomap mode.
  - ext4: do not always order data when partial zeroing out a block
  - mm: zero range of eof folio exposed by inode size extension
  - mm: convert pagecache_isize_extended to use a folio
  - ext4: goto right label 'out_mmap_sem' in ext4_setattr()
  - drivers/perf: hisi: Add support for HiSilicon MN PMU driver
  - drivers/perf: hisi: Add support for HiSilicon NoC PMU
  - drivers/perf: hisi: Support PMUs with no interrupt
  - drivers/perf: hisi: Relax the event number check of v2 PMUs
  - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver
  - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information
  - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - drivers/perf: hisi: Simplify the probe process for each DDRC version
  - drivers/perf: hisi: Delete redundant blank line of DDRC PMU
  - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver
  - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs
  - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier
  - drivers/perf: hisi: Add a common function to retrieve topology from firmware
  - drivers/perf: hisi: Extract topology information to a separate structure
  - drivers/perf: hisi: Refactor the detection of associated CPUs
  - drivers/perf: hisi: Migrate to one online CPU if no associated one online
  - drivers/perf: hisi: Don't update the associated_cpus on CPU offline
  - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs
  - !15827  perf stat: Enable iostat mode for HiSilicon PCIe PMU
  - !15072 hisilicon: ACC Live Migration DFX Replacement Mainline Solution
  - x86: openeuler_defconfig add CONFIG_VFIO_DEBUGFS=y
  - arm64: openeuler_defconfig add CONFIG_VFIO_DEBUGFS=y
  - perf stat: Enable iostat mode for HiSilicon PCIe PMU
  - vfio: fix kabi breakage due to struct vfio_device and enum vfio_device_mig_state
  - Documentation: add debugfs description for vfio
  - Documentation: add debugfs description for hisi migration
  - MAINTAINERS: Add vfio debugfs interface doc link
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - MAINTAINERS: add Baolin as shmem reviewer
  - mm: shmem: factor out the within_size logic into a new helper
  - mm: shmem: change the return value of shmem_find_swap_entries()
  - mm: shmem: remove duplicate error validation
  - mm: shmem: remove 'fadvise()' comments
  - mm: shmem: drop the unused macro
  - docs: tmpfs: drop 'fadvise()' from the documentation
  - !15611 Minimize xa_node allocation during xarry split
  - docs: tmpfs: update the large folios policy for tmpfs and shmem
  - mm: shmem: add a kernel command line to change the default huge policy for tmpfs
  - hisi_acc_vfio_pci: register debugfs for hisilicon migration driver
  - hisi_acc_vfio_pci: create subfunction for data reading
  - hisi_acc_vfio_pci: extract public functions for container_of
  - hisi_acc_vfio_pci: Remove the deferred_reset logic
  - vfio/migration: Add debugfs to live migration driver
  - Revert "vfio/migration: added map length page alignment"
  - Revert "vfio/migration: bugfix some driver code"
  - Revert "vfio/migration: add eq and aeq interruption restore"
  - Revert "vfio/migration: bugfix cache write-back issue"
  - Revert "vfio/migration: remove unused local variable"
  - Revert "hisi-acc-vfio-pci:add DFX for acc migration driver"
  - Revert "hisi_acc_vfio_pci: add exception error handling"
  - Revert "migration: fix reference counting exception issue"
  - Revert "migration: modify dfx error type without VM driver"
  - !15636 Kunpeng Accelerator Enables New Features
  - LoongArch: Set hugetlb mmap base address aligned with pmd size
  - crypto: hisilicon/sec2 - fix for sec spec check
  - crypto: hisilicon/sec2 - fix for aead authsize alignment
  - crypto: hisilicon/sec2 - fix for aead auth key length
  - crypto: hisilicon/hpre - adapt ECDH for high-performance cores
  - crypto: hisilicon/qm - support new function communication
  - Revert "crypto: hisilicon/qm - fix the pf2vf timeout when global reset"
  - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time"
  - crypto: hisilicon/sec2 - fix for aead invalid authsize
  - crypto: hisilicon/sec2 - fix for aead icv error
  - Revert "crypto: hisilicon/sec2: fix memory use-after-free issue"
  - Revert "crypto: hisilicon/sec2 - fix for aead icv error"
  - Revert "crypto: hisilicon/sec2 - fix for aead invalid authsize"
  - crypto: hisilicon/zip - support new error report
  - Revert "crypto: hisilicon/qm - check device status before sending mailbox"
  - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time"
  - Revert "crypto: hisilicon/qm - disable error report before flr"
  - crypto: hisilicon/zip - add data aggregation feature
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params
  - RDMA/mlx5: Fix the recovery flow of the UMR QP
  - arm64/kabi: use KABI_EXTEND to skip KABI check
  - arm64/config: add config to control whether enable HDBSS feature
  - arm64/kvm: support to handle the HDBSSF event
  - arm64/kvm: using ioctl to enable/disable the HDBSS feature
  - arm64/kvm: support set the DBM attr during memory abort
  - arm64/sysreg: add HDBSS related register information
  - uacce: fix for the numa distance calculation
  - uacce: fixes the mutex repeatedly locking error
  - mm/shmem: use xas_try_split() in shmem_split_large_entry()
  - mm/filemap: use xas_try_split() in __filemap_add_folio()
  - xarray: add xas_try_split() to split a multi-index entry
  - mm: shmem: add large folio support for tmpfs
  - mm: shmem: change shmem_huge_global_enabled() to return huge order bitmap
  - mm: factor out the order calculation into a new helper
  - Xarray: distinguish large entries correctly in xas_split_alloc()
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: yaoxin <1024769339@qq.com> - 20250113-1
changelog:
  - Update to 20250113:
    * Parse unknown timezones as UTC
    * Apk (Alpine Linux) format support added
    * Implement default value in parameter expansion
    * Also support supplements that use & as "and"
    * Add workaround for skopeo's argument parser
    * add cap-htm=off on power9
    * Fixed usage of chown calls
    * Remove leading `go` from `purl` locators


author: jianmin <jianmin@iscas.ac.cn> - 1.34.1-5
changelog:
  - Type:cve
  - CVE:CVE-2024-3727 CVE-2024-24791
  - SUG:NA
  - DESC: fix CVE-2024-3727 and Rebuild to fix CVE-2024-24791


author: liuxu <liuxu156@huawei.com> - 1:1.36.1-6
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: wangkai <13474090681@163.com> - 1.82.0-1
changelog:
  - Update to 1.82.0 because firefox update 140ESR version
  - Synchronize the code from the openEuler-24.03-LTS-SP1 branch
  - Remove rls command


author: wangqiang <wangqiang1@kylinos.cn> - 17.0.6-16
changelog:
  - Ignored the `-Wa,--generate-missing-build-notes=` option, update llvm-lit config to support macro `build_for_openeuler`


author: wangqiang <wangqiang1@kylinos.cn> - 17.0.6-17
changelog:
  - Complete -fgcc-compatible option scope to Langopts and Diagopts, and handling of option `-Wall` and `-Werror=format=2` override `-Wno`


author: Zhao Mengmeng <zhaomengmeng@kylinos.cn> - 17.0.6-18
changelog:
  - Fix the too-early instantiation of conditional "explict" by applying the patch
    of https://github.com/llvm/llvm-project/commit/128b3b61fe6768c724975fd1df2be0abec848cf6


author: dongyuzhen <dongyuzhen@h-partners.com> - 23.4.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:net/sysconfig: do not remove all existing settings of /etc/sysconfig/network
         fix: typing for rsyslog, ubuntu_pro, power_state_change


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add python3-passlib to BuildRequires
         skip some test if there are multiple NICs with the MAC address 'ee:ee:ee:ee:ee:ee'
         fix: unpin jsonschema and update tests
         test: fix tmpdir in test_cc_apk_configure
         bug(tests): mock reads of host's /sys/class/net via  get_sys_class_path
         test: fix disable_sysfs_net mock
         tests: drop CiTestCase and convert to pytest


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix growpart race
         handle error when log file is empty
         ec2: Do not enable dhcp6 on EC2


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable use-dns for secondary nics
         Make duplicate route add succeed
         Fix predictable interface rename issue


author: fuanan <fuanan3@h-partners.com> - 3.27.9-5
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: zhangzikang <zhangzikang@kylinos.cn> - 1.6.22-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add loong64 to THP patch, fix build error for loongarch64
         fix incorrect dates


author: huyubiao <huyubiao@huawei.com> - 9.4-9
changelog:
  - fix alias sm3sum not working on bash
    delete redundant backport-chmod-fix-exit-status-when-ignoring-symlinks.patch


author: huyubiao <huyubiao@huawei.com> - 9.4-10
changelog:
  - sync patches from community
  - add backport-pinky-fix-string-size-calculation.patch
        backport-cksum-consistently-validate-length-attributes.patch
        backport-timeout-fix-race-where-we-might-kill-arbitrary-proce.patch
        backport-timeout-fix-narrow-race-in-failing-to-kill-processes.patch
        backport-maint-basenc-consistently-check-buffer-bounds-when-e.patch
        backport-putenv-Don-t-crash-upon-out-of-memory.patch
        backport-head-off_t-not-uintmax_t-for-file-offset.patch
        backport-shuf-avoid-integer-overflow-on-huge-inputs.patch
        backport-shuf-fix-randomness-bug.patch


author: hugel <gengqihu2@h-partners.com> - 9.4-12
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: Peng Fan <fanpeng@loongson.cn> - 12.3.1-33
changelog:
  - Type: Sync
  - DESC: Optimize the loading of immediate numbers.
  -       Fixed bug in bstrins_<mode>for_ior_mask.


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 12.3.1-38
changelog:
  - Type: Sync
  - DESC: Sync patches for fixing building issues with clang
  - Source: https://gitee.com/openeuler/gcc/pulls/239


author: shaojiansong <shaojiansong@kylinos.cn> - 8.0.4-3
changelog:
  - Fix lack of loongarch64 and sw_64 patch files in src.rpm package which is build from any platform.


author: lijian <lijian2@kylinos.cn> - 1.8.7-1
changelog:
  - update to 1.8.7
  - crun: new command "crun features".
  - linux: support io_priority from the OCI specs.
  - cgroup: allow setting swap to 0.
  - cgroup, systemd: set the memory limit on the system scope.


author: xinghe <xinghe2@h-partners.com> - 4.18.5-2
changelog:
  - Type:cves
  - ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
  - SUG:NA
  - DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670


author: Funda Wang <fundawang@yeah.net> - 1:2.4.7-7
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: xingwei <xingwei14@h-partners.com> - 8.4.0-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         urlapi: fix redirect to a new fragment or query (only)
         tool_getparam: clear sensitive arguments better


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix freeing of resources in disconnect
         openssl: fix crash on missing cert password


author: yanglu <yanglu72@h-partners.com> - 8.1.2-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:vtls:avoid memory leak if sha256 call fails
         urlapi:make sure zoneid is also duplicated in curl_url_dup


author: zhouyihang <zhouyihang3@h-partners.com> - 8.1.2-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:transfer: also stop the sending on closed connection
         openssl: avoid BN_num_bits() NULL pointer derefs


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: chenhaixing <chenhaixing@huawei.com> 4.14.0-12
changelog:
  - CVE:NA
  - SUG:NA
  - DESC:dnf:fix undo error when include rollback of group upgrade
             fix can't download package when url have characters encoded


author: hanhuihui <hanhuihui5@huawei.com> - 4.16.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver


author: LuWu <2398491106@qq.com> - 4.16.2-5
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: renmingshuai <renmingshuai@huawei.com> - 2.89-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: zhangbowei<zhangbowei@kylinos.cn> - 25.0.3-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix bug by using docker-proxy in the source file to get better compatibility


author: suoxiaocong <suoxiaocong@kylinos.cn> - 18.09.0-337
changelog:
  - Type:BUG
  - CVE:NA
  - SUG:NA
  - DESC:remove ifarch condition check when addding source, this causes src.rpm missing files


author: huangdengdui <huangdengui@huawei.com> - 23.11-10
changelog:
  Sync some patches for hns3 about PFC and RSS
   - net/hns3: support new device
   - app/testpmd: fix RSS algorithm choice
   - net/hns3: enable PFC for all user priorities


author: huangdengdui <huangdengui@huawei.com> - 23.11-14
changelog:
  Package the following example to dpdk-tools:
   dpdk-l3fwd, dpdk-l3fwd-power, dpdk-ethtool, dpdk-dma, dpdk-ptpclient


author: huangdengdui <huangdengui@huawei.com> - 23.11-17
changelog:
  Sync some patchs from upstreaming for hns3 pmd and modifications
   are as follow:
   - dma/hisilicon: remove support for HIP09 platform
   - net/hns3: disable SCTP verification tag for RSS hash input
   - net/hns3: fix variable overflow
   - net/hns3: fix double free for Rx/Tx queue
   - net/hns3: fix read Rx timestamp handle
   - net/hns3: fix offload flag of IEEE 1588
   In addition, the following patch synchronizes the latest version
   - ethdev: fix strict aliasing lead to link cannot be up


author: yinbin <yinbin8@huawei.com> - 23.11-18
changelog:
  - change dpdk-* in dpdk-tools  from dynamic build to static build
  - add -s flag to remove symbols of dpdk-* in dpdk-tools


author: huangdengdui <huangdengui@huawei.com> - 23.11-19
changelog:
  Support more VLAN fields matching for hns3 and sync a bugfix
   - net/hns3: add Rx DMA address align check
   - net/hns3: support more VLAN fields matching


author: huangdengdui <huangdengui@huawei.com> - 23.11-24
changelog:
  Sync some patchs from upstreaming, includind some bugfixes, hns3 pmd
   flow rule priority feature, hns3 pmd outer VLAN flow match feature,
   and support dump reigser names and filter.
   This patch set is modified as follows:
   - net/hns3: fix cannot fully use hardware flow director table
   - net/hns3: fix error code for repeatedly create counter
   - net/hns3: support flow rule priority
   - common/nfp: use new kvargs process API
   - net/tap: use new kvargs process API
   - net/sfc: use new kvargs process API
   - kvargs: rework process API
   - net/hns3: fix variable type
   - net/hns3: fix pointer offset
   - net/hns3: fix error log
   - net/hns3: support filtering registers by module names
   - net/hns3: support reporting names of registers
   - net/hns3: refactor register dump
   - net/hns3: remove separators between register module
   - net/hns3: fix dump counter of registers
   - net/hns3: remove some basic address dump
   - telemetry: register command with private argument
   - ethdev: fix race on ports in telemetry endpoints
   - ethdev: add telemetry command for registers
   - ethdev: add report of register names and filter
   - net/hns3: support outer VLAN flow match
   - net/hns3: register VLAN flow match mode parameter
   - net/hns3: support general tunnel flow match
   - net/hns3: restrict tunnel flow rule to one header
   - net/hns3: remove ROH devices
   - net/hns3: dump queue head and tail pointer info
   - dmadev: fix potential null pointer access
   - net/hns3: verify reset type from firmware
   - ethdev: verify queue ID in Tx done cleanup


author: - Chenxi Mao <chenxi.mao@suse.com> - 1.25-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Upgrade dwarves version to 1.25 to fix build error
          if kernel version upgrade to 6.4


author: lifeifei<lifeifei@kylinos.cn> - 2.0.11-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: yexiao<yexiao7@huawei.com> - 202308-5
changelog:
  - fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: fuanan <fuanan3@h-partners.com> - 0.189-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Remove unnecessary patch because this patch is contained in elfutils-0.189.tar


author: lifeifei <lifeifei@kylinos.cn> - 0.190-3
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add noreplace to /usr/lib/sysctl.d/10-default-yama-scope.conf


author: wangqiang <wangqiang1@kylinos.cn> - 0.190-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: Fix handling of corefiles with non-contiguous .so segments


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: lvxiangcong <lvxiangcong@kylinos.cn> - 3.4.14-16
changelog:
  - Type:CVES
  - ID:CVE-2024-24791 CVE-2023-45288 CVE-2024-24783 CVE-2024-24785 CVE-2023-45290
       CVE-2023-39326
  - SUG:NA
  - DESC:Batch fix cves through rebuild


author: wangkai <13474090681@163.com> - 102.14.0-1
changelog:
  - Update to 102.14.0
  - Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056


author: lvfei <lvfei@kylinos.cn> - 102.15.0-1
changelog:
  - Update to 102.15.0
  - Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584


author: wangkai <13474090681@163.com> - 115.9.0-1
changelog:
  - Update to 115.9.0
  - Fix CVE-2024-2616 CVE-2024-2608 CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-2607 CVE-2024-2611
  - CVE-2024-1546 CVE-2024-1549 CVE-2024-1547 CVE-2024-1553 CVE-2024-1551 CVE-2024-1548 CVE-2024-1552 CVE-2024-1550
  - CVE-2024-0750 CVE-2024-0746 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0751 CVE-2024-0749 CVE-2024-0753 CVE-2024-0755
  - CVE-2023-6856 CVE-2023-6859 CVE-2023-6857 CVE-2023-6860 CVE-2023-6867 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861 CVE-2023-6864


author: wangkai <13474090681@163.com> - 115.12.0-1
changelog:
  - Update to 115.12.0
  - Fix CVE-2024-29944 CVE-2024-3302 CVE-2024-3852 CVE-2024-3854
    CVE-2024-3857 CVE-2024-3859 CVE-2024-3861 CVE-2024-3864 CVE-2024-4367
    CVE-2024-4767 CVE-2024-4768 CVE-2024-4769 CVE-2024-4770 CVE-2024-4777
    CVE-2024-5688 CVE-2024-5690 CVE-2024-5691 CVE-2024-5692 CVE-2024-5693
    CVE-2024-5696 CVE-2024-5700 CVE-2024-5702


author: wangkai <13474090681@163.com> - 115.14.0-1
changelog:
  - Update to 115.14.0
  - Fix CVE-2024-7519 CVE-2024-7521 CVE-2024-7522 CVE-2024-7524
    CVE-2024-7525 CVE-2024-7526 CVE-2024-7527 CVE-2024-7529 CVE-2024-7531


author: wangkai <13474090681@163.com> - 128.4.0-1
changelog:
  - Update to 128.4.0
  - Fix CVE-2024-10458 CVE-2024-10459 CVE-2024-10460 CVE-2024-10461 CVE-2024-10462
    CVE-2024-10463 CVE-2024-10464 CVE-2024-10465 CVE-2024-10466 CVE-2024-10467


author: wangkai <13474090681@163.com> - 128.5.0-1
changelog:
  - Update to 128.5.0
  - Fix CVE-2024-11691 CVE-2024-11692 CVE-2024-11694 CVE-2024-11695 CVE-2024-11696
    CVE-2024-11697 CVE-2024-11699


author: wangkai <13474090681@163.com> - 128.6.0-1
changelog:
  - Update to 128.6.0
  - Fix CVE-2025-0237 CVE-2025-0238 CVE-2025-0239 CVE-2025-0240 CVE-2025-0241
    CVE-2025-0242 CVE-2025-0243


author: wangkai <13474090681@163.com> - 128.7.0-1
changelog:
  - Update to 128.7.0
  - Fix CVE-2025-1009 CVE-2025-1010 CVE-2025-1011 CVE-2025-1012 CVE-2025-1013
    CVE-2025-1014 CVE-2025-1016 CVE-2025-1017


author: wangkai <13474090681@163.com> - 128.8.0-1
changelog:
  - Update to 128.8.0
  - Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
    CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938


author: wangkai <13474090681@163.com> - 128.10.0-1
changelog:
  - Update to 128.10.0
  - Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093


author: wangkai <13474090681@163.com> - 128.11.0-1
changelog:
  - Update to 128.11.0
  - Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
  - Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269


author: wangkai <13474090681@163.com> - 128.13.0-1
changelog:
  - Update to 128.13.0
  - Fix CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032
    CVE-2025-8033 CVE-2025-8034 CVE-2025-8035


author: wangkai <13474090681@163.com> - 128.3.0-1
changelog:
  - Update to 128.3.0
  - Fix CVE-2024-9392 CVE-2024-9393 CVE-2024-9394 CVE-2024-9396
    CVE-2024-9397 CVE-2024-9398 CVE-2024-9399 CVE-2024-9400 CVE-2024-9401
    CVE-2024-9402


author: wangkai <13474090681@163.com> - 140.3.1-1
changelog:
  - Update to 140.3.1
  - Fix CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10532 CVE-2025-10533
    CVE-2025-10536 CVE-2025-10537 CVE-2025-9182 CVE-2025-9183 CVE-2025-9184
    CVE-2025-8036 CVE-2025-8037 CVE-2025-8038 CVE-2025-8039 CVE-2025-8040


author: Funda Wang <fundawang@yeah.net> - 140.4.0-1
changelog:
  - update to 140.4.0
  - fix CVE-2025-11708, CVE-2025-11709, CVE-2025-11710, CVE-2025-11711,
    CVE-2025-11712, CVE-2025-11713, CVE-2025-11714, CVE-2025-11715


author: xinghe <xinghe2@h-partnres.com> - 1.0.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix zone combined forward must not default to True
         fix fw icmptype don't alter ipvs in io_object
         fix check config use the dictionary variants
         fix functions check config fails if direct.xml exists
         fix service adding includes


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:chore nftables add delete table helper
         fix nftables always flush main table on start


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload related ko when stopping firewalld service
         To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-47
changelog:
  - fix coredump when get empty from udp sendring
  - [virtio]: distribute pkg by dst_port
  - parse packages type in rx_poll
  - [virtio]: cfg ipv4 and ipv6 addr
  - fix build failed in 2003sp4
  - fix dpdk_bond_primary_set bug
  - cfg: del unnecessary logs
  - perftool: add latency tool


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-48
changelog:
  - add flow_bifurcation switch in lstack_cfg file
  - virtio: dfx data of virtio
  - virtio: update g_rule_port by reg_ring_type enum
  - virtio: mode actual_queue_num
  - fix poll init not clear old fd


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-50
changelog:
  - cleancode: rename gazelle files in lwip
  - add .gitignore
  - cleancode: improving makefile readability


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-51
changelog:
  - cleancode: refactor sys_now and lwip_ioctl
  - add sem post when update event
  - cleancode: refactor lwipgz_hlist.h
  - fix EPOLLIN event dropd
  - cleancode: refactor lwipgz_list.h
  - cleancode: refactor posix_api
  - fix some error of NULL pointer
  - cleancode: refactor posix type and get_socket
  - cleancode: refactor lwipsock.h


author: yangchen555 <yangchen145@huawei.com> - 1.0.2-52
changelog:
  - fix redis coredump when hugetlbs pagesize is 1024M
  - vitio_user: modify mbuf index for bond4
  - Check the return of lwip_init
  - support kernel connect
  - POSIX: fix select timeout disable and build failed in openEuler 2003


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-53
changelog:
  - virtio_user: modify mbuf index for bond4
  - fix issue: create virtio_user based on bond4 main network card
  - virtio: fix dfx error with multiple cpus
  - dfx: optimize gazellectl -x for bond


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-54
changelog:
  - refector fill udp sendring
  - virtio_user: solve the issue that failed to bind virtio_user's IPv6 address
  - virtio_user: add vlan info for kernerl packets when vlan switch is on
  - WRAP:fix double connect lead posix api disable


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-55
changelog:
  - virtio: mod virtio_user_name when multi process is on
  - WRAP: fix bind log error
  - WRAP:fix ltran mode did not bind kernel while open kni
  - virtio_user: The program establishes a network connection when network card status is up
  - fix redis coredump ctrl-c during the pressure test


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-59
changelog:
  - epoll: fix wild pointer detected by cooddy
  - tools: fix sync patch script date wrong and update the way get patchnum
  - cfg: modify maximum tcp_conn_count to 2w
  - fix mbuf_total calculation error


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-64
changelog:
  - cleancode: declare different cfg_params types
  - cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
  - cleancode: move some API from stack to rpc and rtw
  - cleancode: refactor rtc_api rtw_api and dummy_api


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-66
changelog:
  - af_xdp: set rlimit unlimit when gazelle init
  - add interrupt mode support
  - add pingpong dfx support


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-67
changelog:
  - bugfix: fix gazelle init failed while setup by non-root user
  - rpc: fix rpc_sync_call spinlock block when msg be recalled
  - rtw: fix send length exceeding send_ring_size
  - fix stack null when register interrupt


author: hantwofish <yinbin8@huawei.com> - 1.0.2-73
changelog:
  - xdp: support XDP_STATISTICS by posix_api->getsockopt_fn
  - add SO_NUMA_ID(optname) for adapting opneGauss
  - remove the unused return variable.
  - Fix annotation errors
  - bugfix: start fail when executing the popen command for the second time in openGauss


author: yinbin <jiangheng14@huawei.com> - 1.0.2-74
changelog:
  - LOG: Optimize some log displays
  - remove: code about nobolck mode for mysql
  - interrupt: fix timeout events cannot be counted


author: yinbin <yinbin8@huawei.com> - 1.0.2-77
changelog:
  - openGauss: support kernel connnect
  - xdp: support stack bind numa
  - CFG: fix xdp iface check error
  - fix build error in 2003SP4
  - cfg: show dpdk args after dpdk_adjust_args
  - fix free null pointer when no matching device is found
  - update test/unitest/ltran/ltran_param_test.c.
  - Fix the wrong spelling description in the notes and logs
  - LWIP: adjust position of shutdown in callback of connect
  - fix socket of control thread is overwirtten due to another primary process start


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-85
changelog:
  - sockio: fix rpc_send coredump after RPC_MSG_EXIT
  - sockio: fix tcp_write not remove EPOLLOUT
  - fix 20.03-LTS build failed
  - sk_wait: igonre mem_thread flush signal
  - sockio: fix sendmbox full return EWOULDBLOCK
  - sockio: fix callback_tcp_send output too many at once
  - mempool: increase MEM_THREAD_MANAGER_FREE_S to avoid poll
  - sockctl: fix rtw broadcast close and shutdown
  - poll: fix do_lwip_connected_callback not delete poll kernel fd
  - sk_event: fix rtw epoll wrong event notify and remove
  - sockio: fix rtw_stack_tcp_write wrong copied_total after append
  - epoll: fix do_lwip_connected_callback
  - sk_wait: fix lwip_wait_foreach_notify coredump at startup
  - socket: fix stack_udp_readmsg return len
  - sk_wait: fix sock_wait_common_free socket: simplify calling free_count in rtw_stack_tcp_write
  - mbox: fix mbox_ring_common_free coredump when rte_ring_create failed
  - sk_wait: fix lwip_tcp_allow_send coredump
  - mempool: stop using cache when too many threads
  - mempool: fix pthread_tryjoin_np coredump when mysqld shutdown
  - mempool: mem_get_rpc add reserve limit
  - mempool: fix mbox_ring free not call recv_finish_burst
  - mempool: modify mbuf num and rpc_msg num
  - socket: fix sk_wait cannot be interrupted by signals
  - socket: fix tcp closed
  - tcp: add GAZELLE_TCP_ASYNC_RECVD      fix mbuf OOM caused by untimely sockio_peek_recv_free
  - socket: fix stack_tcp_read do not recv_finish_burst
  - socket: fix connect blocking
  - mempool: fix copy_mbuf_private
  - dfx: support sk_wait stat
  - mempool: add mem_thread_cache_flush          fix PBUF_POOL_PREINIT
  - cfg: add mem_async_mode
  - cfg: add mem_cache_max and change default rpc_msg_max
  - socket: adapt to tcp and udp
  - socket: refactor tcp and udp
  - socket: adapt to sock_event
  - socket: refactor sock_event
  - cleancode: remove get_stack_tid DPDK_PKT_BURST_SIZE PACKET_READ_SIZE
  - cleancode: remove gazelle_light_ring
  - cleancode: add GAZELLE_SAME_NODE
  - RTC: fixing program stuck while gazelle exit in multi-threads envirement


author: liuchao <liuchao173@huawei.com> - 14.1-1
changelog:
  - upgrade GDB version to 14.1:
    - GDB no longer support AiX 4.x, 5.x and 6.x. The minimum version supported is AiX 7.1.
    - GDB/MI version 1 support has been removed
    - Initial built-in support for Debugger Adapter Protocol (DAP)
    - GDB now recognizes the NO_COLOR environment variable
    - Initial support for integer types larger than 64 bits
    - Breakpoints can now be inferior-specific
    - New convenience function "$_shell", to execute a shell command and return its result.
    - Python support
    - Support for enabling or disabling individual remote target features
    - New 'no-history' stop reason
    - Support for inferior-specific breakpoints
    - The bkpt tuple, which appears in breakpoint-created notifications, and in the result of the -break-insert command can now include an optional 'inferior' field for both the main breakpoint, and each location, when the breakpoint is inferior-specific.
    - Trying to create a thread-specific breakpoint using a non-existent thread ID now results in an error
    - New "simple-values-ref-types" -list-feature value indicating how the --simple-values option in various commands take reference types into account.
    - Initial support for Scalable Matrix Extension (SME) and for Scalable Matrix Extension 2 (SME2)
    - The 'org.gnu.gdb.aarch64.pauth' Pointer Authentication feature is now deprecated in favor of the 'org.gnu.gdb.aarch64.pauth_v2' feature string
    - Support for the Ada 2022 target name symbol ('@')
    - Support for the The Ada 2022 'Enum_Rep and 'Enum_Val attributes
    - The 'list' command now accepts '.' as an argument, telling GDB to print the location around the point of execution within the current frame
    - New '%V' output format for printf and dprintf commands.
    - The printf command now limits the size of strings fetched from the inferior to the value of the 'max-value-size' setting.
    - Support for extending at configure time the default value of the 'debug-file-directory' GDB parameter via the new --additional-debug-dirs=PATHs configure option.
    - New command "info main"
    - New command "set tui mouse-events [on|off]" (on by default)
    - New command "set always-read-ctf on|off" (off by default)
    - Various new debug and maitenance commands


author: yaoxin <yao_xin001@hoperun.com> - 0.4.50-1
changelog:
  - Update to 0.4.50:
  - Core:
    * Better Gobject Introspection annotation coverage.
    * Improved error handling for gegl chain processing.
    * Added accessors for pad meta-data, to be able to show names and descriptions in UIs.
    * GeglColor: more lax parameters for g_arapm_values_cmp
    * exr-save: store 16bpc files as half, fixing gimp#10778
    * ff-load, ff-save: fix build with FFmpeg 7
    * dither: do processing in linear when all levels==2


author: zhangxianting <zhangxianting@uniontech.com> - 9.56.1-6
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.39.1-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.39.1-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.43.0-4
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: yanglu <yanglu72@h-partners.com> - 2.78.0-1
changelog:
  - update glib-networking version to 2.78.0:
    - disable PKCS#11 tests when GNuTLS is built without PKCS#11 support
    - fix connection tests on 32-bit systems with 64-bit time_t
    - updated translations


author: zhangzikang <zhangzikang@kylinos.cn> - 2.78.3-3
changelog:
  - backport patch:
      backport-gdbusmessage-Clean-the-cached-arg0-when-setting-the-message-body.patch
      backport-gsocketclient-Fix-a-use-after-free-in-g_socket_client_connected_callback.patch
      backport-gcontextspecificgroup-Wait-until-stop_func-is-done.patch
      backport-gresources-fix-memory-leak-from-libelf.patch


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-38
changelog:
  - nptl: Use <support/check.h> facilities in tst-setuid3
  - posix: Use <support/check.h> facilities in tst-truncate and tst-truncate64
  - ungetc: Fix backup buffer leak on program exit [BZ #27821]
  - ungetc: Fix uninitialized read when putting into unused streams [BZ #27821]
  - Make tst-ungetc use libsupport
  - stdio-common: Add test for vfscanf with matches longer than INT_MAX [BZ #27650]
  - support: Add FAIL test failure helper


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-40
changelog:
  - elf: Change ldconfig auxcache magic number (bug 32231)
  - Add crt1-2.0.o for glibc 2.0 compatibility tests
  - libio: Attempt wide backup free only for non-legacy code


author: shixuantong <shixuantong@huawei.com> - 2.38-43
changelog:
  - elf: avoid jumping over a needed declaration
  - elf: Move __rtld_malloc_init_stubs call into _dl_start_final


author: shixuantong <shixuantong@huawei.com> - 2.38-44
changelog:
  - elf: Handle static PIE with non-zero load address
  - elf: Introduce _dl_relocate_object_no_relro
  - elf: Switch to main malloc after final ld.so self-relocation


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-45
changelog:
  - nptl: initialize cpu_id_start prior to rseq registration
  - nptl: initialize rseq area prior to registration


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-52
changelog:
  - stdlib: Test using setenv with updated environ [BZ #32588]
  - Fix underallocation of abort_msg_s struct (CVE-2025-0395)
  - elf: Support recursive use of dynamic TLS in interposed malloc
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - x86/string: Fixup alignment of main loop in str{n}cmp-evex [BZ #32212]
  - x86: Improve large memset perf with non-temporal stores [RHEL-29312]
  - x86_64: Fix missing wcsncat function definition without multiarch (x86-64-v4)
  - sysdeps/x86/Makefile: Split and sort tests
  - x86: Only align destination to 1x VEC_SIZE in memset 4x loop
  - elf: Fix slow tls access after dlopen [BZ #19924]
  - x86: Check the lower byte of EAX of CPUID leaf 2 [BZ #30643]
  - x86_64: Add log1p with FMA
  - x86_64: Add expm1 with FMA
  - x86_64: Add log2 with FMA
  - x86_64: Sort fpu/multiarch/Makefile


author: xiajimei <xiejiamei@hygon.cn> - 2.38-56
changelog:
  - x86: Enable non-temporal memset for Hygon processors
  - x86: Add `Avoid_STOSB` tunable to allow NT memset without ERMS
  - x86: Use `Avoid_Non_Temporal_Memset` to control non-temporal path
  - x86: Disable non-temporal memset on Skylake Server
  - x86: Fix value for `x86_memset_non_temporal_threshold` when it is undesirable
  - x86: Enable non-temporal memset tunable for AMD
  - x86: Add seperate non-temporal tunable for memset
  - x86: Fix Zen3/Zen4 ERMS selection (BZ 30994)
  - x86: Add cache information support for Hygon processors
  - x86: Add new architecture type for Hygon processors


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-57
changelog:
  - math: Improve layout of exp/exp10 data
  - AArch64: Use prefer_sve_ifuncs for SVE memset
  - AArch64: Add SVE memset
  - math: Improve layout of expf data
  - AArch64: Remove zva_128 from memset
  - AArch64: Optimize memset
  - AArch64: Improve generic strlen
  - assert: Add test for CVE-2025-0395


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-58
changelog:
  - x86_64: Fix typo in ifunc-impl-list.c.
  - elf: Test case for bug 32976 (CVE-2025-4802)
  - support: Add support_record_failure_barrier
  - support: Use const char * argument in support_capture_subprogram_self_sgid
  - elf: Ignore LD_LIBRARY_PATH and debug env var for setuid for static


author: xuraoqing <xuraoqing@huawei.com> - 3.8.2-1
changelog:
  - update to 3.8.2
  - some API and ABI modifications, see NEWS for details
  - New option --attime to specify current time
  - libgnutls: Add a mechanism to control whether to enforce extended master secret (RFC 7627)
  - libgnutls: Add additional PBKDF limit checks in FIPS mode as defined in SP 800-132
  - libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to %GNUTLS_NO_DEFAULT_EXTENSIONS.
  - libgnutls: Add support for RFC 9258 external PSK importer.
  - libgnutls: ClientHello extensions are randomized by default,
               To make fingerprinting harder, TLS extensions in ClientHello messages are shuffled.
  - gnutls-cli: New option --starttls-name.
  - libgnutls: transparent KTLS support is extended to FreeBSD kernel.
  - libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452).
  - libgnutls: Add API functions to perform ECDH and DH key agreement.
  - libgnutls: Fix timing side-channel inside RSA-PSK key exchange(CVE-2023-5981).


author: wangshuo <wangshuo@kylinos.cn> - 1.21.4-25
changelog:
  - Type:CVE
  - CVE:CVE-2024-34158
  - SUG:NA
  - DESC:fix CVE-2024-34158
  -      optimize the names of the first two patch files


author: wangshuo <wangshuo@kylinos.cn> - 1.21.4-29
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:crypto/tls: fix Config.Time in tests using expired certificates


author: Vanient <xiadanni1@huawei.com> - 1.21.4-30
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: allow update of system stack bounds on callback from C thread


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ignore signing failure
         Revert "templates: Disable the os-prober by default"
         Revert "templates: Properly disable the os-prober by default"
         Add grub-get-kernel-settings and use it in 10_linux
         Replace a lot of man pages with slightly nicer ones


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-15
changelog:
  - Type:CVE
  - CVE:CVE-2021-46848
  - SUG:NA
  - DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.12-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Export all variables from the initial context when creating a submenu


author: peng.zou <peng.zou@shingroup.cn> - 1:2.12-22
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove BuildRequires:pesign >= 0.99-8 and fix bug about petitboot doesn't ignore EFI entries for ppc64le


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:10_linux: fix missing "ro" in kernel boot parameters
         Disable LTO


author: hanliyang <hanliyang@hygon.cn> - 1:2.12-26
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:use confidential computing provisioned secrets for disk decryption


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.12-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:acpi: Fix out of bounds access in grub_acpi_xsdt_find_table()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:commands/efi/tpm: Re-enable measurements on confidential computing platforms


author: Funda Wang <fundawang@yeah.net> - 1:2.12-32
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:disable fortify level based on new settings of openEuler-rpm-config


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-33
changelog:
  - Type:CVE
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
  24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
  25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
  -0678,CVE-2025-1125
  - SUG:NA
  - DESC:fix the vulnerabilities announced on February 18th, 2025


author: Funda Wang <fundawang@yeah.net> - 1:2.12-40
changelog:
  - requirement
  - CVE:NA
  - SUG:NA
  - DESC: Disable the .package_note awfulness
  - DESC: drop duplicate list of locale files


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: Jia Chao <jiac13@chinaunicom.cn> - 3.3.4-4
changelog:
  - fix: use $HOME rather than /home/abuild, suit for all buildtools.
  - fix: yarn have ELF bin, not noarch at all.


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.3.6-3
changelog:
  - Fix build on riscv64
  - Upgrade os-maven-plugin to 1.7.1
  - Remove settings.xml and use ${HOME}/.m2/repository as maven repo


author: xinghe <xinghe2@h-partners.com> - 2.9.5-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: xinghe <xinghe2@h-partners.com> - 2.9.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.9.5-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: xinghe <xinghe2@h-partners.com> - 2.9.5-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         server/addr: fix tune.events.max-events-at-once event miss and leak


author: xinghe <xinghe2@h-partners.com> - 2.6.6-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:backport to fix potential coredump:
         errors: handle malloc failure in usermsgs_put
         ssl_sock: add check for ha_meth
         thread: add a check for pthread_creat


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.58-2
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: zhangyaqi <zhagnyaqi@kylinos.cn> - 2.4.58-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:allocate a heap buffer if the configured size is greater than the stack-allocated buffer.


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.58-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.58-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: chengyechun <chengyechun1@huawei.com> - 2.4.55-3
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.55-5
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802, CVE-2023-43622
  - SUG:NA
  - DESC:fix CVE-2023-31122 and CVE-2023-45802 and CVE-2023-43622


author: zhongtao <zhongtao17@huawei.com> - 2.1.5-7
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: bugfix of background execution exec error command and setting negative cpu-rt issue


author: zhongtao <zhongtao17@huawei.com> - 2.1.5-8
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: remove extra %s in CreateContainerLogSymlink and allow env variable has an empty value


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: Funda Wang <fundawang@yeah.net> - 50.0-14
changelog:
  - adopt to new cmake macro
  - migrated to SPDX license
  - drop useless setup macro, cause it duplicates with autosetup
  - drop useless ldconfig_scriptlets, it has been done through glibc's
    filetriggers since openeuler 1.0


author: Xinghai Cen <cenxinghai@h-partners.com> - 50.0-17
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Fix coredump during QP destruction when send_cq == recv_cq


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-32
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Increase input parameter checks and adjust inline data size.


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:6.1.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix testsuite build failure and delete libcap-devel dependency


author: xinghe <xinghe2@h-partners.com> - 1:6.6.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc
         remove redundant patches


author: yanglu <yanglu72@h-partners.com> - 1.8.9-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ebtables translate Print flush command after parsing is finished
         fix crash when opts isn't reallocated
         Fix handling of non-existent chains
         nft: Special casing for among match in compare_matches
         extensions: libipt_icmp: Fix confusion between 255/255 and any
         Revert libiptc: fix wrong maptype of base chain counters on restore
         extensions: Fix checking of conntrack --ctproto 0
         libxtables: xtoptions: Fix for non-CIDR-compatible hostmasks
         libxtables: xtoptions: Prevent XTOPT_PUT with XTTYPE_HOSTMASK
         libiptc: Fix for another segfault due to chain index NULL pointer


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.432.b06-2
changelog:
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8253072-XERCES-version-is-displayed-incorrect.patch
  - add 8159461-8288556-getComponentType.patch
  - add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
  - add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.452.b09-0
changelog:
  - update to 8u452
  - modified add-missing-test-case.patch
  - modified GCC-12-reports-some-compiler-warnings.patch


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: neu-mobi <liuyulong.work@qq.com> - 1:17.0.10.9-0.rolling
changelog:
  - del 8168469-Memory-leak-in-JceSecurity.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
  - del 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - del 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - del 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
  - del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
  - modified 8253495-CDS-generates-non-deterministic-outpu.patch
  - modified 8280872-Reorder-code-cache-segments-to-improv.patch
  - modified add-version-txt.patch
  - add Add-problemlist.patch
  - add puyuan-jdk17.0.9-patch.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.11.9-0.rolling
changelog:
  - del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
  - modify puyuan-jdk17.0.9-patch.patch


author: songliyang <songliyang@kylinos.cn> - 1:17.0.11.9-1
changelog:
  - rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
  - fix loongarch vendor error and delete redundant vendor args


author: songliyang <songliyang@kylinos.cn> - 1:17.0.12.7-1
changelog:
  - update Loongarch support patch to fix the error while applying in prep stage
  - delete redundant symbols while viewing spec file with vim that make it strange on highlight


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.12.7-2
changelog:
  - add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
  - add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.12.7-5
changelog:
  - Add Backport-of-JDK-8305680.patch
  - Add Backport-of-JDK-8305937.patch
  - Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
  - Add 8337982-Remove-dead-undef-assrt0n.patch
  - Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
  - Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
  - Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
  - Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
  - Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
  - Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch


author: Benshuai5D <zhangyunbo7@huawei.com> - 1:17.0.13.11-0
changelog:
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8264806-Backport-Graal-Compiler.patch
  - modify Add-JBooster-Lazy-AOT-module.patch
  - modify Apply-TBI-to-ZGC-of-JDK17.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify KAE-zip-Features.patch
  - modify add-version-txt.patch
  - add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
  - update to 17.0.13+11(ga)


author: Benshuai5D <benshuai5d@huawei> - 1:17.0.14.7-0
changelog:
  - update to 17.0.14
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8280872-Reorder-code-cache-segments-to-improv.patch
  - modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch


author: Benshuai5D <zhangyunbo7@huawei.com> - 1:21.0.6.7-0
changelog:
  - update to jdk21.0.6-ga
  - delete Backport-JDK-8207908-JMXStatusTest.java-fails-assert.patch
  - delete Backport-JDK-8320682-[AArch64]-C1-compilation-fails-.patch
  - delete Backport-JDK-8331391-Enhance-the-keytool-code-by-inv.patch
  - delete Backport-JDK-8332866-Crash-in-ImageIO-JPEG-decoding-.patch
  - delete Backport-of-8337067-Test-runtime-classFileParserBug-.patch
  - delete Backport-of-JDK-8316895-SeenThread-print_action_que.patch
  - delete Backport-of-JDK-8328723-IP-Address-error-when-client.patch
  - modify Backport-JDK-8329174-update-CodeBuffer-layout-in-com.patch
  - modify Backport-JDK-8340623-Remove-outdated-PROCESSOR_ARCHI.patch


author: wulongyao <wulongyao1@huawei.com> - 1:21.0.6.7-2
changelog:
  - add huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add huawei-Add-KAE-Provider.patch
  - add huawei-Add-KAE-zip-feature.patch
  - add huawei-Fix-arm32-build-failed-undefined-reference.patch
  - add huawei-Add-Fast-Serialzer.patch
  - add huawei-Add-Hashmap-frontCache-opt.patch
  - add huawei-1-add-port-jbolt-feature.patch
  - add huawei-heap-dump-redact-support.patch
  - add huawei-Adapt-to-clang-build-toolchain.patch
  - add huawei-Add-KAE-SM2.patch


author: Dingli Zhang <dingli@iscas.ac.cn> - 1:21.0.6.7-3
changelog:
  - add RVA23 profile and disable auto-enable Vector on buggy kernels for riscv64
  - add Backport-JDK-8315338-RISC-V-Change-flags-for-stable-.patch
  - add Backport-JDK-8329083-RISC-V-Update-profiles-supporte.patch
  - add Backport-JDK-8343555-RISC-V-make-some-verified-on-ha.patch
  - add Backport-JDK-8348554-Enhance-Linux-kernel-version-ch.patch
  - add Backport-JDK-8348384-RISC-V-Disable-auto-enable-Vect.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:21.0.7.6-0
changelog:
  - update to jdk21.0.7-ga
  - delete Backport-JDK-8328553-Get-rid-of-JApplet-in-test-jdk-.patch
  - delete Backport-JDK-8336012-Fix-usages-of-jtreg-reserved-pr.patch
  - delete huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
  - modify huawei-Adapt-to-clang-build-toolchain.patch
  - add huawei-fix-build-fail-realpath.patch
  - modify huawei-heap-dump-redact-support.patch


author: Dingli Zhang <dingli@iscas.ac.cn> - 1:21.0.7.6-4
changelog:
  - add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
  - add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 1.6-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: mengkanglai <mengkanglai2@huawei.com> - 0.16-2
changelog:
  - add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
  - add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
  - add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 0.17-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Disallow control characters in strict mode
          Fix the expected output for test_parse
          Fix causing the strict-mode control characters check to incorrectly trigger


author: sunhai <sunhai10@huawei.com> - 0.17-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict.


author: sunhai <sunhai10@huawei.com> - 0.17-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Handle NULL gracefully in json_tokener_free
          Issue 881 don t allow json_tokener_new_ex with a dep


author: yanglu <yanglu72@h-partners.com> - 006-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add crashkernel auto for Arm 
         enable kdump and set default reserve memory 512MB
         fix test failed due to default value change


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.9-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove .export_symbol section newly added in 6.6 kernel to avoid compile error


author: zhongtao<zhongtao17@huawei.com> - 2.1.4-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add enable pod events field and Add oomkilled field in inspect.json


author: bizhiyuan <bizhiyuan@kylinos.cn> - 4.13.0-23
changelog:
  - aws-vpc-move-ip/aws-vpc-route53/awseip/awsvip: add auth_type parameter and AWS Policy based authentication type


author: chengyechun <chengyechun1@huawei.com> - 4.9.2-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix second find_cmd Segmentation fault
         Ensure that PollVec enum matches poll values


author: zhangyao <zhangyao108@huawei.com> - 2.39.1-15
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport community patches
          backport-sys-utils-setpriv-fix-potential-memory-leak.patch
          backport-sys-utils-save_adjtime-fix-memory-leak.patch
          backport-wall-fix-possible-memory-leak.patch
          backport-suL-fix-use-after-free-on-error.patch


author: yuanchicheng <chicheng.oerv@isrc.iscas.ac.cn> - 2.39.1-17
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport community patches
          backport-lscpu-add-riscv-cputype-support.patch


author: zhangyao <zhangyao108@huawei.com> - 2.39.1-19
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport community patches
         [add] backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch
         backport-libblkid-fix-potential-memory-leaks.patch
         backport-sys-utils-fix-add-NULL-check-for-mnt_fs_get_target-r.patch
         backport-sulogin-fix-POSIX-locale-use.patch
         backport-setpriv.c-fix-memory-leak-in-parse_groups-function.patch
         backport-whereis-avoid-accessing-uninitialized-memory.patch
         backport-dmesg-fix-notime-use.patch


author: zhangting <dev03303@linx-info.com> - 2.39.1-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix an issue that mkfs.bfs fix memory leak
  	mkfs.bfs-fix-memory-leaks-and-weak-code.patch


author: hugel <gengqihu2@h-partners.com> - 2.39.1-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert community patch
         [del] backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch


author: wangzhiqiang <swangzhiqiang95@huawei.com> - 3.0.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add BDPluginSpec constructor and use it in plugin_specs_from_names


author: tianmuyang <tianmuyang@huawei.com> 2:1.2.2-11
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-11
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
    backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
    backport-libbpf-Fix-is_pow_of_2.patch
    backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:1.2.2-2
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-NULL-pointer-dereference-in_bpf_object__c.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:1.2.2-4
changelog:
  - backport patch from upstream:
    backport-libbpf-Avoid-uninitialized-value-in-BPF_CORE_READ_BI.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:1.2.2-5
changelog:
  - backport patch from upstream:
    backport-libbpf-Add-NULL-checks-to-bpf_object__prev_map,next_.patch
    backport-libbpf-Apply-map_set_def_max_entries-for-inner_maps-.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:1.2.2-6
changelog:
  - backport patch from upstream:
    backport-libbpf-Dont-take-direct-pointers-into-BTF-data-from-.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:1.2.2-8
changelog:
  - backport patch from upstream:
    backport-libbpf-Do-not-resolve-size-on-duplicate-FUNCs.patch
    backport-libbpf-Fix-bpf_object__open_skeleton-s-mishandling-o.patch
    backport-libbpf-Fix-segfault-due-to-libelf-functions-not-sett.patch
    backport-libbpf-Fixed-getting-wrong-return-address-on-arm64-a.patch
    backport-libbpf-fix-sym_is_subprog-logic-for-weak-global-subp.patch
    backport-libbpf-move-global-data-mmap-ing-into-bpf_object__lo.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: yanglongkang <yanglongkang@h-partners.com> - 2.69-3
changelog:
  - backport upstream patches:
    getpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: chenhaixing <chenhaixing@huawei.com> - 0.70.2-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
                Fix utimes error message in dnf-repo
                Do not download repository if our local cache is up to date in dnf-repo
                python bindings:Load all modules with RTLD_GLOBAL


author: shixuantong <shixuantong1@huawei.com> - 3.4.4-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix x86/ffi64 calls with 6 gp and some sse registers
         Robustify floating point comparison in test
         Fix floating point compare


author: Kai Liu <kai.liu@windriver.com> - 1:1.49.5-3
changelog:
  - Replace patch support_OPENEULER_to_configure.patch by backport-support-openEuler.patch
    which is backported from upstream, fix issue of detecting openEuler.
  - Add provide-openEuler-appliance-package-list.patch after correctly detected openEuler.
    It was using REDHAT list before.


author: yixiangzhike <yixiangzhike007@163.com> - 1.6.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix possible uninitialized variable


author: xinghe <xinghe2@h-partners.com> - 8.17.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:extending the certificate validate period
         remove redundant patches


author: shechenglong <shechenglong@xfusion.com> - 25.0.3-17
changelog:
  - DESC: move group creation into pre section rather than post section
          change requires into meta dependency for its actual use


author: Funda Wang <fundawang@yeah.net> - 25.0.3-22
changelog:
  - fix CVE-2024-36620, CVE-2024-36621, CVE-2024-36623
  - reorganize patches so that they could be applied automatically


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.4-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: liying <liying_1@chinatelecom.cn> - 1.0.31-3
changelog:
  - Marked unimplemented dither enums in the header file as such.
  - Fix typo
  - Fix memory leak in caf_read_header


author: xinghe <xinghe2@h-partners.com> - 2.74.3-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-5
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-7
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: renmingshuai <renmingshuai@huawei.com> - 0.10.5-2
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-5
changelog:
  - Type:CVE
  - Id:CVE-2025-4877 CVE-2025-4878 CVE-2025-5351 CVE-2025-5987 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877CVE-2025-4878CVE-2025-5351CVE-2025-5987CVE-2025-5372


author: Funda Wang <fundawang@yeah.net> - 2.11.5-5
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: Funda Wang <fundawang@yeah.net> - 2.11.5-6
changelog:
  - Type:CVE
  - CVE:CVE-2025-32414
  - CVE:CVE-2025-32415
  - SUG:NA
  - DESC: fix CVE-2025-32414, CVE-2025-32415


author: yinbin <yinbin8@huawei.com> - 2.2.0-60
changelog:
  - IPV6: Enable IPV6_FRAG_COPYHEADER macro to adapt 64bit
  - IPV6: fix array out of bounds in function ip6_ntoa_r
  - IPV6: add group check while mld6 schedule a report


author: hankangkang <hankangkang5@huawei.com> - 2.2.0-62
changelog:
  - When the GAZELLE_TCP_REUSE_IPPORT is on, min_cnts_lpcb is NULL
  - Turn on the LWIP_SO-LINGER switch


author: wujichao <wujichao1@huawei.com> - 0.3-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bugfix: Information in cpu directory is overwritten after lxcfs restart


author: xiejing <xiejing@kylinos.cn> - 4:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096
  - Fix version description in systemd service file
  - Add conflict with greatsql and change requires


author: yaoxin <1024769339@qq.com> - 2.4.16.6-1
changelog:
  - Update to 2.4.16.6:
    * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
    * info: fix requests to the info hook with extend_session=false
    * cookie: OIDCCookieSameSite default behaviour Lax
    * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
    * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
      cannot be found on the system upon initaliizing cache mutexes and the file cache
    * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
      compatibility with <=2.4.15.7 and to support private/test deployments
    * code: address warnings from static code analysis tool CodeChecker


author: wangkai <13474090681@163.com> - 8.0.37-1
changelog:
  - Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
    CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
    CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
    CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
    CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
    CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
    CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
    CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
    CVE-2024-21057,CVE-2023-6129)


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: xingwei <xingwei14@h-partners.com> - 1:5.9.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
  	IF-MIB: pass the network interface index to net
  	IF-MIB: fix a memory leak
  	IF-MIB: fix a recently introduced use after free
  	IF-MIB: add a trailing newline to an error message


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: huangyu <huangyu106@huawei.com> - 1:1.0.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The python-setup tools causes an error in the nftables packaging path,This macro is added to ensure that path remains unchanged


author: xinghe <xinghe2@h-partners.com> - 1:1.0.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cache prepare nft_cache evaluate to return error
         fix cache validate handle string length
         add src support for implicit chain bindings
         fix cache release pending rules
         fix segtree map listing
         parser_json fix device parsing in netdev family
         fix src Don't parse string as verdict in map


author: lingsheng <lingsheng1@h-partners.com> - 1:1.0.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: liweigang <liweiganga@uniontech.com> - 1:1.0.8-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: evaluate: guard against NULL basetype
  evaluate: error out if basetypes are different
  evaluate: reject attempt to update a set
  evaluate: release mpz type in expr_evaluate_list() error path
  expression: missing line in describe command with invalid expression
  evaluate: handle invalid mapping expressions in stateful object statements gracefully


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix crash in json_parse_set_stmt_list
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: eaglegai <eaglegai@163.com> - 1:1.0.8-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: don't allow nat map with specified protocol
         rule: return error if table does not exist
         json: make sure timeout list is initialised
         evaluate: don't update cache for anonymous chains
         json: return error if table does not exist
         json: don't BUG when asked to list synproxies
         evaluate: compact STMT_F_STATEFUL checks
         evaluate: only allow stateful statements in set and map definitions
         optimize: expand expression list when merging into concatenation
         netlink: fix stack overflow due to erroneous rounding
         netlink: bogus concatenated set ranges with netlink message overrun
         netlink: fix crash when ops doesn't support udata
         netlink: Catch unknown types when deserializing objects
         netlink: Avoid potential NULL-ptr deref parsing set elem expressions
         netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY
         evaluate: don't BUG on unexpected base datatype
         src: BASECHAIN flag no longer implies presence of priority expression
         parser_bison: only reset by name is supported by now


author: xingwei <xingwei14@h-partners.com> - 2:7.92-4
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead


author: wangkai <13474090681@163.com> - 1:20.11.1-1
changelog:
  - Update to 20.11.1
  - Fix CVE-2023-46809 CVE-2024-21896 CVE-2024-22019 CVE-2024-21892 CVE-2024-24758 CVE-2024-22025


author: yaoxin <yao_xin001@hoperun.com> - 1:20.12.1-1
changelog:
  - Update to 20.12.1:
    * CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session()
      leads to HTTP/2 server crash- (High)
    * CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
    * llhttp version 9.2.1
    * undici version 5.28.4


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:20.12.1-2
changelog:
  - fix building w/ clang: only apply '-fno-ipa-icf' for gcc && disable LTO for clang + ld.bfd
  - improve the handling of trilling whitespaces in C/CXXFLAGS


author: Ge Wang <wang__ge@126.com> - 1:20.12.1-3
changelog:
  - CVE-2023-45853 - Reject overflows of zip header fields in minizip
  - CVE-2024-5274 - Using FunctionParsingScope for parsing class static
  - CVE-2024-5535 - Fix SSL_select_next_proto
  - CVE-2024-7971 - Spill all loop inputs before entering loop


author: wangkai <13474090681@163.com> - 1:20.18.2-1
changelog:
  - Update to 20.18.2
  - Fix CVE-2025-23083 CVE-2025-23085 CVE-2025-23084 CVE-2024-36137
    CVE-2024-22018 CVE-2024-22020


author: yyjeqhc <jialin.oerv@isrc.iscas.ac.cn> - 0.2.17-3
changelog:
  - Migrated legacy `import pango` and `pangocairo` usage to modern PyGObject (`gi.repository.Pango`, `PangoCairo`)
  - Replaced all legacy constants (`pango.STRETCH_...`) with `Pango.Stretch.XXX` enums


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: liqiang <liqiang332@h-partner.com> - 1.1.3-3
changelog:
  - Fix libswsds.so not stripped
  - Fix the value of kernel.src obtained by the kabi test case is incorrect
  - Add board infomation and fix memory bug
  - Fix the block size fails to be obtained during the NVME test
  - Judge whether to support kabi testing by architecture
  - Update readme and dev_design


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-0
changelog:
  - Add board information in the test report
  - Add spdk test case
  - Add dpdk test case
  - Update pci.ids file


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-0
changelog:
  - Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
  - Add modifications to Kylinsec with oec-hardware
  - Add support for Loongson and SW architectures
  - Bugfix


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
  - Add fio test cases:read,write,randread,randwrite
  - Solve the nvme line break issue in the command line interface
  - Fix compilation errors in the make command
  - Add Vulkan testcase for nvida GPU
  - Resolve the issue of oech server startup failure on version 24.03


author: xiaochn <xiaochuannan@inspur.com> - 1.1.5-3
changelog:
  - Resolve the issue of different kernel source download locations in kabi test case
  - Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
  - Add the way for manually adding kabiwhitelist file
  - For custom vendors, refer to the method of obtaining openEuler os information
  - Supports custom vendor


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-0
changelog:
  - Add new test suite srpm and intel
  - Add virtual branch of test suite
  - Add support for Kylin and UOS
  - Bugfix


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: Funda Wang <fundawang@yeah.net> - 0.23.0-7
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: renmingshuai<renmingshuai@huawei.com> - 9.3p1-3
changelog:
  - Type:CVE
  - CVE:CVE-2023-48795,CVE-2023-51385
  - SUG:NA
  - DESC:fix CVE-2023-48795 and CVE-2023-51385


author: bitianyuan <bitianyuan@huawei.com> - 9.3p2-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the missing member of the struct Authmethod method_gsskeyex


author: wangcheng <wangcheng156@huawei.com> - 1:3.0.12-1
changelog:
  - Upgrade to 3.0.12
    Resolves: CVE-2023-0464
    Resolves: CVE-2023-0465
    Resolves: CVE-2023-0466
    Resolves: CVE-2023-1255
    Resolves: CVE-2023-2650
    Resolves: CVE-2023-5363
    Resolves: CVE-2023-6237
    Resolves: CVE-2023-6129
    Resolves: CVE-2023-5678
    Resolves: CVE-2024-0727


author: baiguo <baiguo@kylinos.cn> - 0.4.34-2
changelog:
  - Use vasprintf() if available for error messages and otherwise vsnprintf();orccompiler, orcparse: Use secure UCRT printing functions on Windows


author: wangkai <13474090681@163.com> - 6.2.2-4
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)


author: hugel <gengqihu2@h-partners.com> - 10.42-12
changelog:
  - DESC:sync patches from upstream
         backport-Further-ASCII-tests-and-minor-bugfix-plus-ChangeLog-.patch
         backport-avoid-inconsistency-between-d-and-digit-when-using-a.patch
         backport-Fix-the-lookahead-after-d-or-posix-to-skip-whitespac.patch
         backport-Improve-error-offsets-for-character-classes-548.patch
         backport-Non-recursive-scan-prefix-in-JIT-560.patch


author: Xiaoqian Lv <xiaoqian@nj.iscas.ac.cn> - 4.5-5
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: backport upstream 4.5-0.20 patches to support riscv64


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: pengjian <pengjian23@mails.ucas.ac.cn> - 1:0.82-3
changelog:
  - Introduced environment variable-controlled polling timeouts 
  for the close and connection-keeping functions in the os_unix.c file.


author: duyiwei <duyiwei@kylinos.cn> - 1:4.9.4-10
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC: Optimize spec files and fix CVE in batches through rebuild


author: duyiwei <duyiwei@kylinos.cn> - 1:4.9.4-11
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9676,CVE-2024-9675, CVE-2024-9407,CVE-2024-9341
  - SUG:NA
  - DESC: fix CVE-2024-9676,CVE-2024-9675, CVE-2024-9407, and CVE-2024-9341


author: wangyu <wangqingsan@huawei.com> - 123-1
changelog:
  - update to 123
    - duktape:prevent wrongful termination of runway thread
    - harden the security features of the systemd service
    - add packit build tool
    - systemd:set User/Group and don't change uid/gid if already set
    - stop installing /usr/share/polkit-1/rules.d as 700/polkitd
    - moving the 50-default.rules file location


author: dillon chen <dillon.chen@gmail.com> - 13.3-7
changelog:
  - Fix issue: confilct between libpq-devel and postgresql-devel
  - guess init spec from redhat 
  - change redhat spec:rm private package and add files to server-devel
  - so add delete lines to Fix issue
  - Next: write oe libpq and postgresql spec by myself


author: gaihuiying <eaglegai@163.com> - 2.4.9-2
changelog:
  - Type:bufix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: gaihuiying <eaglegai@163.com> - 2.5.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:pre-created upstream default lock dir
         Openssl engine API is deprecated for a while thus disable it


author: gaihuiying <eaglegai@163.com> - 2.5.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf
         Add configure check to see if we have struct sockaddr_ll


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.3.8b-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix: %patchN is deprecated (7 usages found), use %patch N (or %patch -P N)


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: Funda Wang <fundawang@yeah.net> - 25.1-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix build with wrong permission
  - DESC: fix conflicts with protobuf2
  - DESC: revert:distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.0.5-1
changelog:
  - Update package to version 1.0.5
  - fix error handling that might result in null exception
    cleanups of exception handling : errors must now have an exception
    Handling NameError is not working


author: yaoxin <1024769339@qq.com> - 1.0.6-1
changelog:
  - Update to 1.0.6:
    * drop testing and support for Python3.8, add Python 3.13, change document to reflect this.
    * implement safe_getattr and safe_format functions; fix bugs in UNSAFE_ATTRS and UNSAFE_ATTRS_DTYPES usage
    * make all procedure attributes private to curb access to AST nodes, which can be exploited
    * improvements to error messages, including use ast functions to construct better error messages
    * remove import of numpy.linalg, as documented
    * update doc description for security advisory


author: xuchenchen <xuchenchen@kylinos.cn> - 3.1.3-2
changelog:
  - Type: CVE
  - CVE: CVE-2024-34064
  - SUG: NA
  - DESC: fix disallow invalid characters in keys to xmlattr filter


author: xuhe <xuhe@kylinos.cn> - 2.27.3-1
changelog:
  - Update to 2.27.3
  - Fix test util typings.
  - Use json5 typings.
  - Use updated releaser workflows.
  - Ignore pageconfig file if JSON is zero-length.
  - For v2 extensions parse entrypoint data.
  - Add util to get consolidated page_config from higher levels.
  - Move ENV_CONFIG_PATH import back into _get_config_manager.
  - Load overrides once, rather than in each settings handler.
  - Run docs on ubuntu.
  - Fix handling language packs for pseudo language.


author: Shinwell Hu <micromotive@qq.com> - 1.11.1.1-4
changelog:
  - Python-ninja should never obsolate ninja-build.
  - Rename /usr/bin/ninja shipped in this package to /usr/bin/python-ninja


author: gengqihu <gengqihu2@h-partners.com> - 23.3.1-1
changelog:
  - update version to 23.3.1
  - Fix parallel pip cache downloads causing crash (#12364)
  - Upgrade urllib3 to 1.26.17 (#12343)
  - Fix zsh completion script (#12173)
  - Fix #12166
  - Move the setuptools settings into pyproject.toml
  - Use `-r=...` instead of `-r ...` for hg
  - Drop isort and flake8 settings from setup.cfg
  - Follow imports for more vendored dependencies
  - Enable mypy's strict equality checks (#12209)
  - Fixed argument name in docstring
  - Allow truststore to not import on Python 3.9 and earlier
  - Vendor truststore
  - Fix formatting, combine numbers not strings!
  - Remove uses of `utcnow` in non-vendored code (#12006)
  - Fix issues raised in code review
  - move test_download_metadata mock pypi index utilities to conftest.py
  - Use strict optional checking in req_install.py (#11379)
  - Fix 'force' remove file without write permissions
  - Dropped unused attribute
  - Fix Pytest --use-venv init
  - Limit the double download fix to wheels
  - Fix slowness on Python 3.11 when updating an existing large environment.
  - Fix `pip completion --zsh`


author: yaoxin <yao_xin001@hoperun.com> - 6.4.1-1
changelog:
  - Update to 6.4.1
    * Parsing of the ``Transfer-Encoding`` header is now stricter.
    * Handling of whitespace in headers now matches the RFC more closely.
    * ``tornado.curl_httpclient`` now prohibits carriage return and linefeed headers in HTTP headers
    (matching the behavior of ``simple_httpclient``).


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-5
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-6
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup


author: Funda Wang <fundawang@yeah.net> - 3.11.6-8
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
    - Quote template strings in venv activation scripts


author: Chenxi Mao <chenxi.mao@suse.com> - 3.10.9-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC: Enable link time optimizaitons (LTO) for better performance.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 2.13.0-1
changelog:
  - Update package with version 2.13.0
    Add an option to have authentication enabled for all endpoints by default
    Websockets: add configurations for ping interval and timeout
    Log extension import time at debug level unless it's actually slow
    Add support for async Authorizers
    Support get file(notebook) md5
    Update kernel env to reflect changes in session
    Support external kernels


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 4.1.2-1
changelog:
  - Upgrade package with version 4.1.2
    Fix highlight sequencing when replacing text in code cells
    Restore notebook scrolling on dragging a cell to the viewport edge
    Fix typing in editable elements inside of open shadow DOM
    Correct Alt + number keyboard shortcuts command map
    Update jupyter-collaboration for the Binder environment
    Add virtual scrollbar component to windowed lists.
    Load custom CSS functionality and documentation
    Add plugin manager and extension locks


author: zhaojingyu <zhaojingyu@kylinos.cn> - 4.1.6-1
changelog:
  - Upgrade package with version 4.1.6
  - Fix outputarea collapse expand
    Disable placeholder for password input


author: muxiaohui <muxiaohui@kylinos.cn> - 4.3.0-1
changelog:
  - Update version to 4.3.0
    Add setting to enable single-click navigation in file browser.
    Adds command to toggle cell outputs.
    Add kernel selection to Galata notebook creation.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 4.3.5-1
changelog:
  - Upgrade package with version 4.3.5
    Fix scrolling and selection restoration on undo/redo
    Fix windowing crash due to out-of-bounds access
    Increase color contrast of operators in code editor
    Fix jupyverse installation instructions
    Use Zulip for instant messaging


author: yanglu <yanglu72@h-partners.com> - 1.13.2-5
changelog:
  - Type:cves
  - CVE:CVE-2022-30689 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30689 and CVE-2022-30699


author: gaihuiying <eaglegai@163.com> - 1.17.0-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"


author: chenhaixing <chenhaixing@huawei.com> - 1.26.12-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix socket timeout value when HTTPConnect is reused
         remove Exclamation mark character from the unreserved characters
         fix _idna_encode handling of x80


author: chengyechun <chengyechun1@huawei.com> - 1.26.17-2
changelog:
  - Type:CVE
  - ID:CVE-2023-45803
  - SUG:NA
  - DESC:fix CVE-2023-45803 Made body stripped form HTTP requests


author: chengyechun <chengyechun1@huawei.com> - 1.26.18-2
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorizatioin header on redirects


author: lixiaoyong <lixiaoyong@kylinos.cn> - 0.14.1-1
changelog:
  - Upgrade package to version 0.14.1
    - Drop support for Python older than 3.6
    - Additional ruff/Pyflakes/codespell fixes


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-6
changelog:
  - coro: support live patch for libcare
  - tests/acpi: Update expected ACPI tables for vcpu hotplug(Update BinDir)
  - arm/virt: Require mc->has_hotpluggable_cpus for cold-plugged vcpu
  - arm/virt: Consider has_ged when set mc->has_hotpluggable_cpus
  - arm/virt-acpi: Require possible_cpu_arch_ids for build_cpus_aml()
  - acpi/ged: Remove cpuhp field of ged
  - acpi/ged: Init cpu hotplug only when machine support it
  - intc/gicv3: Fixes for vcpu hotplug
  - arm/kvm: Set psci smccc filter only with vcpu hotplug
  - accel/kvm: Use correct id for parked vcpu
  - arm/virt: Fix adjudgement of core_id for vcpu hotplugged
  - arm/virt.c: Convey local_err when set psci-conduit
  - system/cpus: Fix resume_all_vcpus() under vCPU hotplug condition
  - system/cpus: Fix pause_all_vcpus() under concurrent environment
  - acpi/cpu: Fix cpu_hotplug_hw_init()
  - arm/cpu: Some fixes for arm_cpu_unrealizefn()
  - system/physmem: Fix possible double free when destroy cpu as
  - hw/arm/virt: Expose cold-booted CPUs as MADT GICC Enabled
  - tcg/mttcg: enable threads to unregister in tcg_ctxs[]
  - hw/arm: Support hotplug capability check using _OSC method
  - target/arm/kvm,tcg: Register/Handle SMCCC hypercall exits to VMM/Qemu
  - target/arm/kvm: Write CPU state back to KVM on reset
  - target/arm: Add support of *unrealize* ARMCPU during vCPU Hot-unplug
  - physmem,gdbstub: Common helping funcs/changes to *unrealize* vCPU
  - hw/arm: Changes required for reset and to support next boot
  - arm/virt: Update the guest(via GED) about CPU hot-(un)plug events
  - hw/intc/arm-gicv3*: Changes required to (re)init the vCPU register info
  - hw/arm,gicv3: Changes to update GIC with vCPU hot-plug notification
  - arm/virt: Changes to (un)wire GICC<->vCPU IRQs during hot-(un)plug
  - arm/virt: Add/update basic hot-(un)plug framework
  - hw/acpi: Update ACPI GED framework to support vCPU Hotplug
  - arm/virt: Release objects for *disabled* possible vCPUs after init
  - hw/acpi: Make _MAT method optional
  - hw/arm: MADT Tbl change to size the guest with possible vCPUs
  - hw/acpi: Update GED _EVT method AML with cpu scan
  - hw/acpi: ACPI/AML Changes to reflect the correct _STA.{PRES,ENA} Bits to Guest
  - arm/virt: Make ARM vCPU *present* status ACPI *persistent*
  - arm/virt/acpi: Build CPUs AML with CPU Hotplug support
  - tests/acpi/bios-tables-test: Allow changes to virt/DSDT file
  - acpi/cpu: Add cpu_cppc building support
  - arm/virt/acpi: Factor out CPPC building from DSDT CPU aml
  - hw/acpi: Update CPUs AML with cpu-(ctrl)dev change
  - arm/virt: Create GED dev before *disabled* CPU Objs are destroyed
  - arm/virt: Add cpu hotplug events to GED during creation
  - hw/acpi: Init GED framework with cpu hotplug events
  - hw/acpi: Use qemu_present_cpu() API in ACPI CPU hotplug init
  - hw/acpi: Add ACPI CPU hotplug init stub
  - arm/acpi: Enable ACPI support for vcpu hotplug
  - hw/acpi: Move CPU ctrl-dev MMIO region len macro to common header file
  - arm/virt: Init PMU at host for all possible vcpus
  - arm/virt,gicv3: Changes to pre-size GIC with possible vcpus @machine init
  - arm/virt,kvm: Pre-create disabled possible vCPUs @machine init
  - accel/kvm: Extract common KVM vCPU {creation,parking} code
  - arm/virt,target/arm: Machine init time change common to vCPU {cold|hot}-plug
  - hw/arm/virt: Move setting of common CPU properties in a function
  - cpus-common: Add common CPU utility for possible vCPUs
  - arm/virt,target/arm: Add new ARMCPU {socket,cluster,core,thread}-id property


author: Keqian Zhu <zhukeqian1@huawei.com> - 11:8.2.0-7
changelog:
  - arm/virt: Use max_cpus to calculate redist1_count
  - arm/virt: Use separate filed to identify cpu-hotplug enable


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-11
changelog:
  - hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
  - hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/virtio: Introduce virtio_bh_new_guarded() helper
  - hw/net/net_tx_pkt: Fix overrun in update_sctp_checksum()
  - hw/nvme: fix -Werror=maybe-uninitialized
  - block/virtio-blk: Fix memory leak from virtio_blk_zone_report
  - hw/net/virtio-net: fix qemu set used ring flag even vhost started
  - hw/scsi/scsi-generic: Fix io_timeout property not applying
  - tests: bios-tables-test: Rename smbios type 4 related test functions


author: zhangxianting <zhangxianting@uniontech.com> - 11:8.2.0-12
changelog:
  - target/i386: Export RFDS bit to guests
  - target/i386: Add new CPU model SierraForest
  - target/i386: Introduce Icelake-Server-v7 to enable TSX
  - hw/isa/vt82c686: Keep track of PIRQ/PINT pins separately
  - kvm/arm: Fix compatibility of cold-plug CPU with SVE
  - arm/virt/acpi: Extend cpufreq to support max_cpus
  - kvm/arm: Fix SVE related logic for vcpu hotplug feature
  - arm/virt: Don't modify smp.max_cpus when vcpu hotplug disabled
  - acpi/cpu: Fix detection of present cpu


author: Song Gao <gaosong@loongson.cn> - 11:8.2.0-13
changelog:
  - target/loongarch: Fix qemu-system-loongarch64 assert
  - target/loongarch: Fix qemu-loongarch64 hang when executing 'll.d $t0, $t0, 0'
  - target/loongarch: Fix tlb huge page loading issue
  - target/loongarch/kvm: Add software breakpoint support
  - target/loongarch/kvm: sync kernel header files
  - hw/intc/loongarch_extioi: Add virt extension support
  - target/loongarch/kvm: Add pmu support
  - target/loongarch/kvm: Fix vm restore failed
  - target/loongarch/kvm: Add pv steal time support
  - target/loongarch/kvm: fpu save the vreg registers high


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-14
changelog:
  - target/riscv/cpu.c: fix Zvkb extension config
  - target/i386: Add new Hygon 'Dharma' CPU model
  - target/i386: Add Hygon Dhyana-v3 CPU model
  - ui/gtk: Fix mouse/motion event scaling issue with GTK display backend
  - hw/ufs: Fix buffer overflow bug
  - arm/virt: Set vcpus_count of CPU as 1 to compatible with libvirt
  - ppc/pnv: I2C controller is not user creatablei


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-15
changelog:
  - block: Parse filenames only when explicitly requested (CVE-2024-4467)
  - iotests/270: Don't store data-file with json: prefix in image (CVE-2024-4467)
  - iotests/244: Don't store data-file with protocol in image (CVE-2024-4467)
  - qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
  - migration/dirtyrate: Fix segmentation fault
  - target/hexagon: idef-parser fix leak of init_list


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-16
changelog:
  - nbd/server: CVE-2024-7409: Close stray clients at server-stop
  - nbd/server: CVE-2024-7409: Drop non-negotiating clients
  - nbd/server: CVE-2024-7409: Cap default max-connections to 100 
  - nbd/server: Plumb in new args to nbd_client_add()
  - nbd: Minor style and typo fixes


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-17
changelog:
  - cvm : bug fix for undefined reference to 'virtcca_cvm_allowed' while compiling
  - cvm : bug-fix for incorrect device name check for vhost-user-fs
  - target/i386: add control bits support for LAM
  - target/i386: add support for LAM in CPUID enumeration
  - Add support for the virtcca cvm feature.
  - target/sparc: use signed denominator in sdiv helper
  - crypto: Introduce SM4 symmetric cipher algorithm
  - ppc/vof: Fix unaligned FDT property access
  - vl: fix "type is NULL" in -vga help
  - hw/display/bcm2835_fb: fix fb_use_offsets condition
  - aspeed/smc: Fix possible integer overflow
  - hw/nvme: fix number of PIDs for FDP RUH update
  - hw/nvme: fix memory leak in nvme_dsm
  - hvf: arm: Do not advance PC when raising an exception
  - physmem: Bail out qemu_ram_block_from_host() for invalid ram addrs


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-18
changelog:
  - hw/loongarch/virt: Fix FDT memory node address width
  - hw/loongarch: Fix fdt memory node wrong 'reg'
  - load_elf: fix iterator's type for elf file processing
  - migration/colo: Fix bdrv_graph_rdlock_main_loop: Assertion `!qemu_in_…
  - target/i386: no single-step exception after MOV or POP SS
  - char-stdio: Restore blocking mode of stdout on exit
  - backends/cryptodev-builtin: Fix local_error leaks
  - target/loongarch: fix a wrong print in cpu dump
  - virtio-pci: fix use of a released vector
  - target/arm: Disable SVE extensions when SVE is disabled
  - hw/misc/bcm2835_property: Fix handling of FRAMEBUFFER_SET_PALETTE
  - target/i386: Introduce SapphireRapids-v3 to add missing features
  - virtio-net: Ensure queue index fits with RSS (CVE-2024-6505)
  - nbd/server: CVE-2024-7409: Avoid use-after-free when closing server
  - update io/trace-events. Parameters should remain consistent.
  - update docs/tools/virtfs-proxy-helper.rst. This place is spelled wrong.
  - kvm: Add support for CSV2 reboot
  - target/i386/kvm: Fix the resettable info when emulate Hygon CSV2 guest
  - target/i386: get/set/migrate GHCB state
  - target/i386: csv: Add support for migrate VMSA for CSV2 guest
  - migration/ram: Accelerate the loading of CSV guest's encrypted pages
  - migration/ram: Accelerate the transmission of CSV guest's encrypted pages
  - target/i386: csv: add support to load incoming encrypted pages queued in the CMD list
  - target/i386: csv: add support to queue the incoming page into a list
  - target/i386: csv: add support to encrypt the outgoing pages in the list queued before.
  - target/i386: csv: add support to queue the outgoing page into a list
  - target/i386: csv: Read cert chain from file when prepared for CSV live migration
  - target/i386: Introduce header file csv.h
  - migration/ram: Fix calculation of gfn correpond to a page in ramblock
  - target/i386: sev: Clear shared_regions_list when reboot CSV Guest
  - migration/ram: Force encrypted status for VGA vram
  - target/i386: sev: Return 0 if sev_send_get_packet_len() fails
  - kvm: Add support for userspace MSR filtering and handling of MSR_KVM_MIGRATION_CONTROL.
  - migration/ram: Force encrypted status for flash0 & flash1 devices.
  - migration/ram: add support to send encrypted pages
  - migration: add support to migrate shared regions list
  - kvm: Add support for SEV shared regions list and KVM_EXIT_HYPERCALL.
  - target/i386: sev: add support to load incoming encrypted page
  - target/i386: sev: add support to encrypt the outgoing page
  - target/i386: sev: do not create launch context for an incoming guest
  - target/i386: sev: provide callback to setup outgoing context
  - confidential guest support: introduce ConfidentialGuestMemoryEncryptionOps for encrypted VMs
  - migration.json: add AMD SEV specific migration parameters
  - doc: update AMD SEV to include Live migration flow
  - crypto/tlscredspsk: Free username on finalize
  - hw/nvme: fix leak of uninitialized memory in io_mgmt_recv
  - hw/display/vhost-user-gpu.c: fix vhost_user_gpu_chr_read()
  - cvm : Implement command blacklist for cvm security enhancement
  - crypto: Introduce SM3 hash hmac pbkdf algorithm
  - virtio-net: Use virtual time for RSC timers
  - vvfat: Fix bug in writing to middle of file
  - hw/core/ptimer: fix timer zero period condition for freq > 1GHz
  - hw/misc: support vpsp


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-19
changelog:
  - mac_dbdma: Remove leftover `dma_memory_unmap` calls(CVE-2024-8612)
  - softmmu: Support concurrent bounce buffers(CVE-2024-8612)
  - system/physmem: Per-AddressSpace bounce buffering
  - system/physmem: Propagate AddressSpace to MapClient helpers


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-20
changelog:
  - Added CoDA feature support in the context of CVM. When virtcca cvm is enabled, the iommu is tagged as secure.
  - hw/block: fix uint32 overflow
  - hw/ufs: add basic info of query response upiu
  - crypto: avoid leak of ctx when bad cipher mode is given Fixes: Coverity CID 1546884


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-21
changelog:
  - tests: bump QOS_PATH_MAX_ELEMENT_SIZE again
  - softmmu/physmem: fix memory leak in dirty_memory_extend()
  - crypto: run qcrypto_pbkdf2_count_iters in a new thread
  - hw/audio/virtio-sound: fix heap buffer overflow
  - hw/intc/arm_gic: fix spurious level triggered interrupts
  - ui/sdl2: set swap interval explicitly when OpenGL is enabled
  - target/riscv/kvm: tolerate KVM disable ext errors
  - virtio: remove virtio_tswap16s() call in vring_packed_event_read()
  - block: fix -Werror=maybe-uninitialized false-positive
  - hw/remote/vfio-user: Fix config space access byte order
  - hw/loongarch/virt: Fix memory leak
  - hw/intc/riscv_aplic: APLICs should add child earlier than realize
  - stdvga: fix screen blanking
  - ui/gtk: Draw guest frame at refresh cycle
  - target/i386: fix size of EBP writeback in gen_enter()
  - virtio-net: drop too short packets early
  - target/ppc: Fix lxv/stxv MSR facility check
  - target/ppc: Fix lxvx/stxvx facility check
  - virtio-snd: add max size bounds check in input cb(CVE-2024-7730)


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-26
changelog:
  - vdpa-dev: Fix initialisation order to restore VDUSE compatibility
  - tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
  - migration: fix-possible-int-overflow
  - target/m68k: Map FPU exceptions to FPSR register
  - qemu-options: Fix CXL Fixed Memory Window interleave-granularity typo
  - hvf: arm: Fix encodings for ID_AA64PFR1_EL1 and debug System registers
  - hw/intc/arm_gic: Fix handling of NS view of GICC_APR<n>
  - qio: Inherit follow_coroutine_ctx across TLS
  - target/riscv: Fix the element agnostic function problem
  - accel/tcg: Fix typo causing tb->page_addr[1] to not be recorded
  - tcg/loongarch64: Fix tcg_out_movi vs some pcrel pointers
  - migration: Fix file migration with fdset
  - ui/vnc: don't return an empty SASL mechlist to the client
  - target/arm: Fix FJCVTZS vs flush-to-zero
  - hw/ppc/e500: Prefer QOM cast
  - sphinx/qapidoc: Fix to generate doc for explicit, unboxed arguments
  - hw/ppc/e500: Remove unused "irqs" parameter
  - hw/ppc/e500: Add missing device tree properties to i2c controller node
  - hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb()
  - hw/arm/mps2-tz.c: fix RX/TX interrupts order
  - target/i386: csv: Add support to migrate the incoming context for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing context for CSV3 guest
  - target/i386: csv: Add support to migrate the incoming page for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing page for CSV3 guest
  - linux-headers: update kernel headers to include CSV3 migration cmds
  - vfio: Only map shared region for CSV3 virtual machine
  - vga: Force full update for CSV3 guest
  - target/i386: csv: Load initial image to private memory for CSV3 guest
  - target/i386: csv: Do not register/unregister guest secure memory for CSV3 guest
  - target/i386: cpu: Populate CPUID 0x8000_001F when CSV3 is active
  - target/i386: csv: Add command to load vmcb to CSV3 guest memory
  - target/i386: csv: Add command to load data to CSV3 guest memory
  - target/i386: csv: Add command to initialize CSV3 context
  - target/i386: csv: Add CSV3 context
  - next-kbd: convert to use qemu_input_handler_register()
  - qemu/bswap: Undefine CPU_CONVERT() once done
  - exec/memop: Remove unused memop_big_endian() helper
  - hw/nvme: fix handling of over-committed queues
  - 9pfs: fix crash on 'Treaddir' request
  - hw/misc/psp: Pin the hugepage memory specified by mem2 during use for psp
  - hw/misc: support tkm use mem2 memory
  - hw/i386: add mem2 option for qemu
  - kvm: add support for guest physical bits
  - target/i386: add guest-phys-bits cpu property


author: Xianglai Li <lixianglai@loongson.cn> - 11:8.2.0-27
changelog:
  - fix compile error on loongarch
  - hw/loongarch: fix cpu hotplug reset
  - hw/loongarch/boot: Use warn_report when no kernel filename
  - hw/loongarch: clean code
  - hw/loongarch: Add KVM pch msi device support
  - hw/loongarch: Add KVM pch pic device support
  - hw/loongarch: Add KVM extioi device support
  - hw/loongarch: Add KVM IPI device support
  - hw/loongarch/virt: Update the ACPI table for hotplug cpu
  - hw/loongarch/virt: Add basic CPU plug support
  - hw/loongarch/virt: Add CPU topology support
  - accel/kvm/kvm-all: Fixes the missing break in vCPU unpark logic
  - gdbstub: Add helper function to unregister GDB register space
  - physmem: Add helper function to destroy CPU AddressSpace
  - hw/acpi: Update CPUs AML with cpu-(ctrl)dev change
  - hw/acpi: Update ACPI GED framework to support vCPU Hotplug
  - hw/acpi: Move CPU ctrl-dev MMIO region len macro to common header file
  - accel/kvm: Extract common KVM vCPU {creation,parking} code
  - target/loongarch: Add steal time support on migration
  - linux-headers: loongarch: Add kvm_para.h and unistd_64.h
  - target/loongarch/kvm: Implement LoongArch PMU extension
  - target/loongarch: Implement lbt registers save/restore function
  - target/loongarch: Add loongson binary translation feature
  - sync loongarch linux-headers
  - target/loongarch: Avoid bits shift exceeding width of bool type
  - target/loongarch: Use explicit little-endian LD/ST API
  - target/loongarch: fix -Werror=maybe-uninitialized false-positive
  - target/loongarch: Support QMP dump-guest-memory
  - target/loongarch/kvm: Add vCPU reset function
  - target/loongarch: Add compatible support about VM reboot
  - target/loongarch: Fix cpu_reset set wrong CSR_CRMD
  - target/loongarch: Set CSR_PRCFG1 and CSR_PRCFG2 values
  - target/loongarch: Remove avail_64 in trans_srai_w() and simplify it
  - target/loongarch/kvm: Add software breakpoint support
  - target/loongarch: Add loongarch vector property unconditionally
  - target/loongarch/kvm: Fix VM recovery from disk failures
  - target/loongarch: Put cpucfg operation before CSR register
  - target/loongarch: Add TCG macro in structure CPUArchState
  - hw/arm/virt-acpi-build.c: Migrate SPCR creation to common location
  - hw/loongarch/virt: Add FDT table support with acpi ged pm register
  - hw/loongarch/virt: Add description for virt machine type
  - hw/loongarch: Add acpi SPCR table support
  - hw/loongarch: virt: pass random seed to fdt
  - hw/loongarch: virt: support up to 4 serial ports
  - hw/loongarch: Remove default enable with VIRTIO_VGA device
  - hw/loongarch: Fix length for lowram in ACPI SRAT
  - hw/loongarch/virt: Remove unused assignment
  - hw/loongarch: Change the tpm support by default
  - hw/loongarch/boot.c: fix out-of-bound reading
  - hw/loongarch/virt: Use MemTxAttrs interface for misc ops
  - tests/libqos: Add loongarch virt machine node
  - hw/loongarch: Remove minimum and default memory size
  - hw/loongarch: Refine system dram memory region
  - hw/loongarch: Refine fwcfg memory map
  - hw/loongarch: Refine fadt memory table for numa memory
  - hw/loongarch: Refine acpi srat table for numa memory
  - hw/loongarch: Add VM mode in IOCSR feature register in kvm mode
  - hw/loongarch: Refine default numa id calculation
  - hw/loongarch: Rename LoongArchMachineState with LoongArchVirtMachineState
  - hw/loongarch: Rename LOONGARCH_MACHINE with LOONGARCH_VIRT_MACHINE
  - hw/loongarch: move memory map to boot.c
  - loongarch: switch boards to "default y"
  - hw/loongarch: Add cells missing from rtc node
  - hw/loongarch: Add cells missing from uart node
  - hw/loongarch: fdt remove unused irqchip node
  - hw/loongarch: fdt adds pcie irq_map node
  - hw/loongarch: fdt adds pch_msi Controller
  - hw/loongarch: fdt adds pch_pic Controller
  - hw/loongarch: fdt adds Extend I/O Interrupt Controller
  - hw/loongarch: fdt adds cpu interrupt controller node
  - hw/loongarch: Init efi_fdt table
  - hw/loongarch: Init efi_initrd table
  - hw/loongarch: Init efi_boot_memmap table
  - hw/loongarch: Init efi_system_table
  - hw/loongarch: Add init_cmdline
  - hw/loongarch: Add slave cpu boot_code
  - hw/loongarch: Add load initrd
  - hw/loongarch: Move boot functions to boot.c


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-28
changelog:
  - hw/misc/mos6522: Fix bad class definition of the MOS6522 device
  - target/i386: Fix minor typo in NO_NESTED_DATA_BP feature bit
  - cpu: ensure we don't call start_exclusive from cpu_exec
  - Avoid unaligned fetch in ladr_match()
  - audio/audio.c: remove trailing newline in error_setg
  - acpi/tests/avocado/bits: wait for 200 seconds for SHUTDOWN event from bits VM
  - linux-user: Tolerate CONFIG_LSM_MMAP_MIN_ADDR
  - accel/tcg: Fix user-only probe_access_internal plugin
  - linux-user: Honor elf alignment when placing images
  - Reserve address for MSI mapping in the CVM scenario.


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-29
changelog:
  - target/i386: csv: Support inject secret for CSV3 guest only if the extension is enabled
  - target/i386: csv: Support load kernel hashes for CSV3 guest only if the extension is enabled
  - target/i386: csv: Request to set private memory of CSV3 guest if the extension is enabled
  - target/i386: kvm: Support to get and enable extensions for Hygon CoCo guest
  - qapi/qom,target/i386: csv-guest: Introduce secret-header-file=str and secret-file=str options
  - bakcend: VirtCCA:resolve hugepage memory waste issue in vhost-user scenario
  - parallels: fix ext_off assertion failure due to overflow
  - backends/cryptodev-vhost-user: Fix local_error leaks
  - hw/usb/hcd-ehci: Fix debug printf format string
  - target/riscv/vector_helper.c: fix 'vmvr_v' memcpy endianess
  - target/riscv/vector_helper.c: optimize loops in ldst helpers
  - target/riscv/vector_helper.c: set vstart = 0 in GEN_VEXT_VSLIDEUP_VX()
  - target/hexagon: don't look for static glib
  - virtio-net: Fix network stall at the host side waiting for kick
  - Add if condition to avoid assertion failed error in blockdev_init
  - target/arm: Use float_status copy in sme_fmopa_s
  - target/arm: take HSTR traps of cp15 accesses to EL2, not EL1
  - target/arm: Reinstate "vfp" property on AArch32 CPUs
  - target/i386/cpu: Fix notes for CPU models
  - target/arm: LDAPR should honour SCTLR_ELx.nAA
  - target/riscv: Avoid bad shift in riscv_cpu_do_interrupt()
  - hvf: remove unused but set variable
  - hw/misc/nrf51_rng: Don't use BIT_MASK() when we mean BIT()
  - Avoid taking address of out-of-bounds array index
  - target/arm: Fix VCMLA Dd, Dn, Dm[idx]
  - target/arm: Fix UMOPA/UMOPS of 16-bit values
  - target/arm: Fix SVE/SME gross MTE suppression checks
  - target/arm: Fix nregs computation in do_{ld,st}_zpa
  - crypto: fix error check on gcry_md_open
  - Change vmstate_cpuhp_sts vmstateDescription version_id
  - hw/pci: Remove unused pci_irq_pulse() method
  - hw/intc: Don't clear pending bits on IRQ lowering
  - target/arm: Drop user-only special case in sve_stN_r
  - migration: Ensure vmstate_save() sets errp
  - target/i386: fix hang when using slow path for ptw_setl
  - contrib/plugins: add compat for g_memdup2
  - hw/audio/hda: fix memory leak on audio setup
  - crypto: perform runtime check for hash/hmac support in gcrypt
  - target/arm: Fix incorrect aa64_tidcp1 feature check
  - target/arm: fix exception syndrome for AArch32 bkpt insn
  - target/arm: Don't get MDCR_EL2 in pmu_counter_enabled() before checking ARM_FEATURE_PMU
  - linux-user: Print tid not pid with strace
  - target/arm: Fix A64 scalar SQSHRN and SQRSHRN
  - target/arm: Don't assert for 128-bit tile accesses when SVL is 128
  - hw/timer/exynos4210_mct: fix possible int overflow
  - target/arm: Avoid shifts by -1 in tszimm_shr() and tszimm_shl()
  - hw/audio/virtio-snd: Always use little endian audio format
  - target/riscv: Fix vcompress with rvv_ta_all_1s
  - usb-hub: Fix handling port power control messages


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-30
changelog:
  - Revert "linux-user: Print tid not pid with strace"
  - gpex-acpi: Remove duplicate DSM #5
  - smmuv3: Use default bus for arm-smmuv3-accel
  - smmuv3: Change arm-smmuv3-nested name to arm-smmuv3-accel
  - smmu-common: Return sysmem address space only for vfio-pci
  - smmuv3: realize get_pasid_cap and set ssidsize with pasid
  - vfio: Synthesize vPASID capability to VM
  - backend/iommufd: Report PASID capability
  - pci: Get pasid capability from vIOMMU
  - smmuv3: Add support for page fault handling
  - kvm: Translate MSI doorbell address only if it is valid
  - hw/arm/smmuv3: Enable sva/stall IDR features
  - iommufd.h: Updated to openeuler olk-6.6 kernel
  - tests/data/acpi/virt: Update IORT acpi table
  - hw/arm/virt-acpi-build: Add IORT RMR regions to handle MSI nested binding
  - tests/qtest: Allow IORT acpi table to change
  - hw/arm/virt-acpi-build: Build IORT with multiple SMMU nodes
  - hw/arm/smmuv3: Associate a pci bus with a SMMUv3 Nested device
  - hw/arm/smmuv3: Add initial support for SMMUv3 Nested device
  - hw/arm/virt: Add an SMMU_IO_LEN macro
  - hw/pci-host/gpex: [needs kernel fix] Allow to generate preserve boot config DSM #5
  - tests/data/acpi: Update DSDT acpi tables
  - acpi/gpex: Fix PCI Express Slot Information function 0 returned value
  - tests/qtest: Allow DSDT acpi tables to change
  - hw/arm/smmuv3: Forward cache invalidate commands via iommufd
  - hw/arm/smmu-common: Replace smmu_iommu_mr with smmu_find_sdev
  - hw/arm/smmuv3: Add missing STE invalidation
  - hw/arm/smmuv3: Add smmu_dev_install_nested_ste() for CFGI_STE
  - hw/arm/smmuv3: Check idr registers for STE_S1CDMAX and STE_S1STALLD
  - hw/arm/smmuv3: Read host SMMU device info
  - hw/arm/smmuv3: Ignore IOMMU_NOTIFIER_MAP for nested-smmuv3
  - hw/arm/smmu-common: Return sysmem if stage-1 is bypassed
  - hw/arm/smmu-common: Add iommufd helpers
  - hw/arm/smmu-common: Add set/unset_iommu_device callback
  - hw/arm/smmu-common: Extract smmu_get_sbus and smmu_get_sdev helpers
  - hw/arm/smmu-common: Bypass emulated IOTLB for a nested SMMU
  - hw/arm/smmu-common: Add a nested flag to SMMUState
  - backends/iommufd: Introduce iommufd_viommu_invalidate_cache
  - backends/iommufd: Introduce iommufd_vdev_alloc
  - backends/iommufd: Introduce iommufd_backend_alloc_viommu
  - vfio/iommufd: Implement [at|de]tach_hwpt handlers
  - vfio/iommufd: Implement HostIOMMUDeviceClass::realize_late() handler
  - HostIOMMUDevice: Introduce realize_late callback
  - vfio/iommufd: Add properties and handlers to TYPE_HOST_IOMMU_DEVICE_IOMMUFD
  - backends/iommufd: Add helpers for invalidating user-managed HWPT
  - Update iommufd.h header for vSVA
  - vfio/common: Allow disabling device dirty page tracking
  - vfio/migration: Don't block migration device dirty tracking is unsupported
  - vfio/iommufd: Implement VFIOIOMMUClass::query_dirty_bitmap support
  - vfio/iommufd: Implement VFIOIOMMUClass::set_dirty_tracking support
  - vfio/iommufd: Probe and request hwpt dirty tracking capability
  - vfio/{iommufd, container}: Invoke HostIOMMUDevice::realize() during attach_device()
  - vfio/iommufd: Add hw_caps field to HostIOMMUDeviceCaps
  - vfio/{iommufd,container}: Remove caps::aw_bits
  - HostIOMMUDevice: Store the VFIO/VDPA agent
  - vfio/iommufd: Introduce auto domain creation
  - vfio/ccw: Don't initialize HOST_IOMMU_DEVICE with mdev
  - vfio/ap: Don't initialize HOST_IOMMU_DEVICE with mdev
  - vfio/iommufd: Return errno in iommufd_cdev_attach_ioas_hwpt()
  - backends/iommufd: Extend iommufd_backend_get_device_info() to fetch HW capabilities
  - vfio/iommufd: Don't initialize nor set a HOST_IOMMU_DEVICE with mdev
  - vfio/pci: Extract mdev check into an helper
  - intel_iommu: Check compatibility with host IOMMU capabilities
  - intel_iommu: Implement [set|unset]_iommu_device() callbacks
  - intel_iommu: Extract out vtd_cap_init() to initialize cap/ecap
  - vfio/pci: Pass HostIOMMUDevice to vIOMMU
  - hw/pci: Introduce pci_device_[set|unset]_iommu_device()
  - hw/pci: Introduce helper function pci_device_get_iommu_bus_devfn()
  - vfio: Create host IOMMU device instance
  - backends/iommufd: Implement HostIOMMUDeviceClass::get_cap() handler
  - vfio/container: Implement HostIOMMUDeviceClass::get_cap() handler
  - vfio/iommufd: Implement HostIOMMUDeviceClass::realize() handler
  - backends/iommufd: Introduce helper function iommufd_backend_get_device_info()
  - vfio/container: Implement HostIOMMUDeviceClass::realize() handler
  - range: Introduce range_get_last_bit()
  - backends/iommufd: Introduce TYPE_HOST_IOMMU_DEVICE_IOMMUFD[_VFIO] devices
  - vfio/container: Introduce TYPE_HOST_IOMMU_DEVICE_LEGACY_VFIO device
  - backends/host_iommu_device: Introduce HostIOMMUDeviceCaps
  - backends: Introduce HostIOMMUDevice abstract
  - vfio/iommufd: Remove CONFIG_IOMMUFD usage
  - vfio/spapr: Extend VFIOIOMMUOps with a release handler
  - vfio/spapr: Only compile sPAPR IOMMU support when needed
  - vfio/iommufd: Introduce a VFIOIOMMU iommufd QOM interface
  - vfio/spapr: Introduce a sPAPR VFIOIOMMU QOM interface
  - vfio/container: Intoduce a new VFIOIOMMUClass::setup handler
  - vfio/container: Introduce a VFIOIOMMU legacy QOM interface
  - vfio/container: Introduce a VFIOIOMMU QOM interface
  - vfio/container: Initialize VFIOIOMMUOps under vfio_init_container()
  - vfio/container: Introduce vfio_legacy_setup() for further cleanups
  - docs/devel: Add VFIO iommufd backend documentation
  - vfio: Introduce a helper function to initialize VFIODevice
  - vfio/ccw: Move VFIODevice initializations in vfio_ccw_instance_init
  - vfio/ap: Move VFIODevice initializations in vfio_ap_instance_init
  - vfio/platform: Move VFIODevice initializations in vfio_platform_instance_init
  - vfio/pci: Move VFIODevice initializations in vfio_instance_init
  - hw/i386: Activate IOMMUFD for q35 machines
  - kconfig: Activate IOMMUFD for s390x machines
  - hw/arm: Activate IOMMUFD for virt machines
  - vfio: Make VFIOContainerBase poiner parameter const in VFIOIOMMUOps callbacks
  - vfio/ccw: Make vfio cdev pre-openable by passing a file handle
  - vfio/ccw: Allow the selection of a given iommu backend
  - vfio/ap: Make vfio cdev pre-openable by passing a file handle
  - vfio/ap: Allow the selection of a given iommu backend
  - vfio/platform: Make vfio cdev pre-openable by passing a file handle
  - vfio/platform: Allow the selection of a given iommu backend
  - vfio/pci: Make vfio cdev pre-openable by passing a file handle
  - vfio/pci: Allow the selection of a given iommu backend
  - vfio/iommufd: Enable pci hot reset through iommufd cdev interface
  - vfio/pci: Introduce a vfio pci hot reset interface
  - vfio/pci: Extract out a helper vfio_pci_get_pci_hot_reset_info
  - vfio/iommufd: Add support for iova_ranges and pgsizes
  - vfio/iommufd: Relax assert check for iommufd backend
  - vfio/iommufd: Implement the iommufd backend
  - vfio/common: return early if space isn't empty
  - util/char_dev: Add open_cdev()
  - backends/iommufd: Introduce the iommufd object
  - vfio/spapr: Move hostwin_list into spapr container
  - vfio/spapr: Move prereg_listener into spapr container
  - vfio/spapr: switch to spapr IOMMU BE add/del_section_window
  - vfio/spapr: Introduce spapr backend and target interface
  - vfio/container: Implement attach/detach_device
  - vfio/container: Move iova_ranges to base container
  - vfio/container: Move dirty_pgsizes and max_dirty_bitmap_size to base container
  - vfio/container: Move listener to base container
  - vfio/container: Move vrdl_list to base container
  - vfio/container: Move pgsizes and dma_max_mappings to base container
  - vfio/container: Convert functions to base container
  - vfio/container: Move per container device list in base container
  - vfio/container: Switch to IOMMU BE set_dirty_page_tracking/query_dirty_bitmap API
  - vfio/container: Move space field to base container
  - vfio/common: Move giommu_list in base container
  - vfio/common: Introduce vfio_container_init/destroy helper
  - vfio/container: Switch to dma_map|unmap API
  - vfio/container: Introduce a empty VFIOIOMMUOps
  - vfio: Introduce base object for VFIOContainer and targeted interface
  - cryptodev: Fix error handling in cryptodev_lkcf_execute_task()
  - hw/xen: Fix xen_bus_realize() error handling
  - hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
  - target/s390x: Fix a typo in s390_cpu_class_init()
  - hw/sd/sdhci: free irq on exit
  - hw/ufs: free irq on exit
  - hw/pci-host/designware: Fix ATU_UPPER_TARGET register access
  - target/i386: Make invtsc migratable when user sets tsc-khz explicitly
  - target/i386: Construct CPUID 2 as stateful iff times > 1
  - target/i386: Enable fdp-excptn-only and zero-fcs-fds
  - target/i386: Don't construct a all-zero entry for CPUID[0xD 0x3f]
  - i386/cpuid: Remove subleaf constraint on CPUID leaf 1F
  - target/i386: pass X86CPU to x86_cpu_get_supported_feature_word
  - target/i386: Raise the highest index value used for any VMCS encoding
  - target/i386: Add VMX control bits for nested FRED support
  - target/i386: Delete duplicated macro definition CR4_FRED_MASK
  - target/i386: Add get/set/migrate support for FRED MSRs
  - target/i386: enumerate VMX nested-exception support
  - vmxcap: add support for VMX FRED controls
  - target/i386: mark CR4.FRED not reserved
  - target/i386: add support for FRED in CPUID enumeration
  - target/i386: fix feature dependency for WAITPKG
  - target/i386: Add more features enumerated by CPUID.7.2.EDX
  - net: fix build when libbpf is disabled, but libxdp is enabled
  - hw/nvme: fix invalid endian conversion
  - hw/nvme: fix invalid check on mcl
  - backends/cryptodev: Do not ignore throttle/backends Errors
  - backends/cryptodev: Do not abort for invalid session ID
  - virtcca: add kvm isolation when get tmi version.
  - qga: Don't daemonize before channel is initialized
  - qga: Add log to guest-fsfreeze-thaw command
  - backends: VirtCCA: cvm_gpa_start supports both 1GB and 3GB
  - BUGFIX: Enforce isolation for virtcca_shared_hugepage
  - arm: VirtCCA: qemu CoDA support UEFI boot
  - arm: VirtCCA: Compatibility with older versions of TMM and the kernel
  - arm: VirtCCA: qemu uefi boot support kae
  - arm: VirtCCA: CVM support UEFI boot


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-31
changelog:
  - target/arm: Change arm_cpu_mp_affinity when enabled IPIV feature
  - fw_cfg: Don't set callback_opaque NULL in fw_cfg_modify_bytes_read()


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-32
changelog:
  - target/i386: csv: Release CSV3 shared pages after unmapping DMA
  - target/i386: Add new CPU model ClearwaterForest
  - target/i386: add sha512, sm3, sm4 feature bits
  - docs: Add GNR, SRF and CWF CPU models
  - target/i386: Export BHI_NO bit to guests
  - target/i386: Introduce SierraForest-v2 model
  - vdpa/iommufd:Implement DMA mapping through the iommufd interface
  - vdpa/iommufd:Introduce vdpa-iommufd module
  - vdpa/iommufd:support associating iommufd backend for vDPA devices
  - Kconfig/iommufd/VDPA: Update IOMMUFD module configuration dependencies The vDPA module can also use IOMMUFD like the VFIO module. 
  - backends/iommufd: Get rid of qemu_open_old()
  - backends/iommufd: Make iommufd_backend_*() return bool
  - backends/iommufd: Fix missing ERRP_GUARD() for error_prepend()
  - backends/iommufd: Remove mutex
  - backends/iommufd: Remove check on number of backend users
  - hw/intc: Add extioi ability of 256 vcpu interrupt routing
  - hw/rtc: Fixed loongson rtc emulation errors
  - hw/loongarch/boot: Adjust the loading position of the initrd
  - target/loongarch: Fix the cpu unplug resource leak
  - target/loongarch: fix vcpu reset command word issue
  - vdpa:Fix dirty page bitmap synchronization not done after suspend for vdpa devices


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-33
changelog:
  - arm: cvm: fix arm-softmmu build on x86 platform
  - arm: VirtCCA: fix arm-softmmu build on x86 platform
  - hw/arm/virt: HDBSS: fix arm-softmmu build on x86 platform
  - hw/arm/virt: decouple migrate_hdbss_buffer_size() with kvm_update_hdbss_cap()
  - hw/arm/virt: only support the HDBSS feature in aarch64
  - multifd: bugfix for incorrect migration data with qatzip compression
  - multifd: bugfix for incorrect migration data with QPL compression
  - multifd: bugfix for migration using compression methods
  - migration/multifd: Zero p->flags before starting filling a packet
  - migration/multifd: Ensure packet->ramblock is null-terminated
  - migration/multifd: Fix rb->receivedmap cleanup race
  - migration/multifd: Fix loop conditions in multifd_zstd_send_prepare and multifd_zstd_recv
  - tests/migration: Add integration test for 'qatzip' compression method
  - migration: Introduce 'qatzip' compression method
  - migration: Add migration parameters for QATzip
  - meson: Introduce 'qatzip' feature to the build system
  - docs/migration: add qatzip compression feature
  - migration/multifd: Fix p->iov leak in multifd-uadk.c
  - tests/migration-test: add uadk compression test
  - migration/multifd: Switch to no compression when no hardware support
  - migration/multifd: Add UADK based compression and decompression
  - migration/multifd: Add UADK initialization
  - migration/multifd: add uadk compression framework
  - configure: Add uadk option
  - docs/migration: add uadk compression feature
  - configure: add --enable-qpl build option
  - migration/multifd: implement qpl compression and decompression
  - migration/multifd: implement initialization of qpl compression
  - migration/multifd: include ram.h in multifd.h
  - migration/multifd: add qpl compression method
  - migration/multifd: put IOV initialization into compression method
  - docs/migration: add qpl compression feature
  - migration/multifd: solve zero page causing multiple page faults
  - migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page.
  - migration/multifd: Implement zero page transmission on the multifd thread
  - migration/multifd: Add new migration option zero-page-detection
  - migration/multifd: Allow multifd without packets
  - migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data
  - migration/multifd: Cleanup multifd_recv_sync_main
  - tests/migration: Set compression level in migration tests
  - migration: Properly apply migration compression level parameters
  - migration/multifd: Drop unnecessary helper to destroy IOC
  - migration/multifd: Cleanup outgoing_args in state destroy
  - migration/multifd: Make multifd_channel_connect() return void
  - migration/multifd: Drop registered_yank
  - migration/multifd: Cleanup TLS iochannel referencing
  - migration/multifd: Release recv sem_sync earlier
  - migration/multifd: Remove p->quit from recv side
  - migration/multifd: Add a synchronization point for channel creation
  - migration/multifd: Unify multifd and TLS connection paths
  - migration/multifd: Move multifd_send_setup into migration thread
  - migration/multifd: Move multifd_send_setup error handling in to the function
  - migration/multifd: Remove p->running
  - migration/multifd: Join the TLS thread
  - migration: Fix logic of channels and transport compatibility check
  - migration/multifd: Optimize sender side to be lockless
  - migration/multifd: Stick with send/recv on function names
  - migration/multifd: Cleanup multifd_load_cleanup()
  - migration/multifd: Cleanup multifd_save_cleanup()
  - migration/multifd: Rewrite multifd_queue_page()
  - migration/multifd: Change retval of multifd_send_pages()
  - migration/multifd: Change retval of multifd_queue_page()
  - migration/multifd: Split multifd_send_terminate_threads()
  - migration/multifd: Forbid spurious wakeups
  - migration/multifd: Move header prepare/fill into send_prepare()
  - migration/multifd: Move trace_multifd_send|recv()
  - migration/multifd: Move total_normal_pages accounting
  - migration/multifd: Rename p->num_packets and clean it up
  - migration/multifd: Drop pages->num check in sender thread
  - migration/multifd: Simplify locking in sender thread
  - migration/multifd: Separate SYNC request with normal jobs
  - migration/multifd: Drop MultiFDSendParams.normal[] array
  - migration/multifd: Postpone reset of MultiFDPages_t
  - migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths
  - migration/multifd: multifd_send_kick_main()
  - migration/multifd: Drop stale comment for multifd zero copy
  - docs/migration: Further move virtio to be feature of migration
  - docs/migration: Further move vfio to be feature of migration
  - docs/migration: Organize "Postcopy" page
  - docs/migration: Split "dirty limit"
  - docs/migration: Split "Postcopy"
  - docs/migration: Split "Debugging" and "Firmware"
  - docs/migration: Split "Backwards compatibility" separately
  - docs/migration: Convert virtio.txt into rST
  - docs/migration: Create index page
  - docs/migration: Create migration/ directory
  - tests/qtest: Re-enable multifd cancel test
  - tests/qtest/migration: Use the new migration_test_add
  - tests/qtest/migration: Add a wrapper to print test names
  - tests/qtest/migration: Print migration incoming errors
  - migration: Report error in incoming migration
  - migration/multifd: Change multifd_pages_init argument
  - migration/multifd: Remove QEMUFile from where it is not needed
  - migration/multifd: Remove MultiFDPages_t::packet_num
  - migration/multifd: Remove unnecessary usage of local Error
  - migration: Fix migration_channel_read_peek() error path
  - migration/multifd: Remove error_setg() in migration_ioc_process_incoming()
  - migration/multifd: Fix leaking of Error in TLS error flow
  - migration/multifd: Simplify multifd_channel_connect() if else statement
  - migration/multifd: Fix error message in multifd_recv_initial_packet()
  - hw/arm/virt: support the HDBSS feature


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-34
changelog:
  - target/arm: support the IPIV feature
  - Revert "target/arm: Change arm_cpu_mp_affinity when enabled IPIV feature"
  - vdpa/iommufd: All vdpa devices perform only one log_sync each time.
  - memory:Optimize flatview ioeventfd processing
  - memory/eventfd:Introduce ioeventfd batch processing to reduce the time required to update ioeventfd
  - migration/memory:Optimize unnecessary memory region updates during live migration
  - migration:Extand the fdtable in the incoming phase of migration
  - virtio/irqfd: Batch processing of irqfd related operations during virtio device startup
  - kvm/msi: Mark whether there is an IRQ route table update through changes
  - virtio-pci:Batch processing of IRQFD mapping for multi queue Virtio devices


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-35
changelog:
  - Fix error in virtCCA CoDA scenario.
  - Revert "backends/iommufd: Make iommufd_backend_*() return bool"


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: yanglongkang <yanglongkang@h-partners.com> - 0.6.8-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport libtraceevent patch to adapt to kernel ftrace ring buffer change


author: renhongxun <renhongxun@h-partners.com> - 0.6.8-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:clear the link to rasdaemon.service when uninstalling rasdaemon
         and ensure rasdaemon restart once be upgraded


author: luoshengwei <luoshengwei@huawei.com> - 0.8.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cpu isolate errors when some cpus are offline
    before the service started


author: wangjiang <app@cameyan.com> - 0.8.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add some improvements and add new modules to HiSilicon common section


author: shixuantong <shixuantong1@huawei.com> - 8.2-4
changelog:
  - Add shell command to switch bracketed-paste mode from on to off to keep consistent with realine-8.0


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: zhouyihang <zhouyihang3@h-partners.com> - 0.9.1-4
changelog:
  - Type:requirements
  - Id:NA
  - SUG:NA
  - DESC:use libsoup2 instead of libsoup3 for build when no libsoup3 provided


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.18-5
changelog:
  - revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: pengyi <pengyi37@huawei.com> - 8.2210.0-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:omprog bugfix: invalid status handling at called program
         core bugfix: template system may generate invalid json


author: linzhuorong <linzhuorong@huawei.com> - 8.2210.0-3
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: imjournal: add second fallback to _COMM
          bugfix: prevent pot. segfault when switchung to
          core/bugfix: using $uuid msg prop can deadlock rsyslog on shutdown
          GNUTls Driver: Fix memory leaks in gtlsInitCred


author: zhangyaqi <zhangyaqi@kylinos.cn> - 8.2312.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak in omazureeventhubs on accepted PN_DELIVERY event


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2312.0-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix passing the value to EscapeChar
         Do not free the uninitialized cstring
         Keep original free pattern
         network subsystem: improve connection failure error message
         Fix runConf NULL pointer refence
         rainerscript: do not try to call a function if it does not exist
         nsd_ptcp regression fix: remove debugging messages emited to stderr
         Fix legacy $ActionQueueDiscardMark parameter


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 8.2312.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:gnutls bugfix: Avoid blocking sockets during TLS handshake
         gnutls bugfix: Add timeout to GnuTLS handshake
         core: fix potential NULL ptr access on HUP in very early startup phase
         omfwd: fix segfault in UDP freeaddrinfo
         gnutls TLS driver: fix small memory leak
         rsyslog startup bugfix: cosmetic memory leak
         core: fix potential misadressing in sigmask
         covscan: remove defect type of RESOURCE_LEAK
         Fix a buffer overflow when the argument to replace is empty


author: jinlun<jinlun@huawei.com> - 40.7-1
changelog:
  - update version to 40.7
    - Allow chronyd-restricted read chronyd key files
    - Allow systemd-sleep set attributes of efivarfs files
    - Make name_zone_t and named_var_run_t a part of the mountpoint attribute
    - Update cifs interfaces to include fs_search_auto_mountpoints()
    - Allow map xserver_tmpfs_t files when xserver_clients_write_xshm is on
    - Add map_read map_write to kernel_prog_run_bpf
    - Add policy for nvme-stas
    - Make new virt drivers permissive
    - Allow named and ndc use the io_uring api
    - Allow sssd send SIGKILL to passket_child running in ipa_otpd_t


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 2:4.14.3-1
changelog:
  - update version to 4.14.3
    -Avoid null pointer dereference
    -Update utmp at an initial login
    -Merge libshadow and libmisc into a single libshadow
    -Adding the userdel and groupdel hooks to release tarball


author: yaqiangchen <chenyaqiang@huawei.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: yanglu <yanglu72@h-partners.com> - 7:6.1-2
changelog:
  - Type:cves
  - ID:CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848
  - SUG:NA
  - DESC:fix CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848


author: zhangyao <zhangyao108@huawei.com> - 255-27
changelog:
  - DESC:network networkd address does not set up firewall rules
         add backport-network-networkd-address-don-t-set-up-firewall-rules.patch


author: zhangyao <zhangyao108@huawei.com> - 255-32
changelog:
  - backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table


author: fuanan <fuanan3@h-partners.com> - 255-42
changelog:
  - backport: sync patches from systemd community
    add backport-run-pass-the-pty-slave-fd-to-transient-service.patch
        backport-run-do-not-pass-the-pty-slave-fd-to-transient-servic.patch


author: langfei<langfei@huawei.com> - 4.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Resolve stap-exporter.service chenge to disable when upgraded systemtap-stap-exporter package


author: langfei<langfei@huawei.com> - 4.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix some test cases fail to be executed, Resolve the sc2168 warning detected by the shellcheck tool.


author: liuchao <liuchao173@huawei.com> - 5.0-1
changelog:
  - Upgrade to 5.0:
    - Performance improvements in uprobe registration and module startup.
    - More probe point process details are printed in "-L" list mode with more "-v".
    - For the case where newer kernels may break systemtap runtime APIs, better pass-4 failure diagnostics are printed.
    - Tapset function print_ubacktrace_fileline() now understands DWARF5.
    - The target(s) of process probes may be specified by path name globs,  as located selected debuginfod servers.
    - The kernel-user message transport system added framing codes, making the transport more reliable, but becoming incompatible across pre-5.0 versions. Use matching versions of stap and staprun.
    - The testsuite Makefile has been simplified to remove concurrency, so "parallel" and "resume" modes are gone.
    - New runtime macro STP_TIMING_NSECS is now supported for reporting probe timing stats in nsecs instead of cycles.  This may become default later.
    - Add new runtime macro STP_FORCE_STDOUT_TTY to override STP_STDOUT_NOT_ATTY.


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: liuchao <liuchao173@huawei.com> - 2.21.0-1
changelog:
  - upgrade to 2.21.0:
    - api: fixed stop method not to require any parameter
    - plugin_scheduler: fix perf fd leaks
    - allow skipping rollback when restarting TuneD or switching profile
    - function_calc_isolated_cores: no errors for offline CPUs
    - sap-hana: new profile sap-hana-kvm-guest
    - serialized SIGHUP handler to prevent possible bootcmdline corruption
    - fixed possible traceback on SIGHUP
    - updated manual pages to be consistent
    - tuned-adm: better error message for unauthorized switch_profile
    - plugin_sysctl: report reapplied sysctls only on different values
    - plugin_cpu: added support for pm_qos_resume_latency_us
    - plugin_cpu: added support for intel_pstate scaling driver
    - plugin_scheduler: do not leak FDs from the perf
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
    - throughput-performance: set net.core.somaxconn to at least 2048
    - API: added support for moving devices between instances
    - added support for the API access through the Unix Domain Socket
    - D-Bus: send tracebacks through D-Bus only in debug mode
    - Makefile: added fix for python-3.12
    - do not exit on duplicate config lines


author: ZhaoYu Jiang <jiangzhaoyu@kylinos.cn> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)
    - tuned-ppd: fixed controller init to correctly set_on_battery


author: tianmuyang <tianmuyang@huawei.com> - 2.24.1-4
changelog:
  - profiles: add programmable scheduling based on eBPF
  - package:  change package tuned to architecture-dependent


author: langfei<langfei@huawei.com> - 2022g-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: langfei <langfei@huawei.com> - 2024a-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees;
  -	No need for America/Coyhaique in zonenow.tab.


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-41
changelog:
  - Type:CVE
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
  - SUG:NA
  - DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237


author: lutong <lutong14@huawei.com> - 1.1-9
changelog:
  - bugfix:fixed display error caused by missing signal_exits & revert change method of getting domain id


author: yanglu <yanglu72@h-partners.com> -1.20.11-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix regression caused by the fix for CVE-2024-0229 
         fix use after free related to CVE-2024-21886


author: shuaijiakun <shuaijiakun1288@phytium.com.cn> -1.20.11-32
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:fix display error for ps23xx when using ast and pe2201 bmc card.


author: Funda Wang <fundawang@yeah.net> - 1.20.11-37
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


author: yuanchao <1050706328@qq.com> - 0.13.72-4
changelog:
  - backport:disable zzip_use_file_header_zip64_offset,and fix wrong format in changelog,to support clang build


