# changelog

author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.24.v2401
changelog:
  - secondly update changelog for incoming 4.19.90-89.24.v2401 (Zhengyuan Liu)
  - Revert "LoongArch: Increase ARCH_DMA_MINALIGN up to 16" (Wang Yan) [task:478151]
  - update changelog for incoming 4.19.90-89.24.v2401 (Zhengyuan Liu)
  - net: fix race between napi kthread mode and busy poll (Wei Wang) [task:466046]
  - neigh: fix ARP retransmit timer guard (Hangbin Liu) [task:470107]
  - neigh: support smaller retrans_time settting (Hangbin Liu) [task:470107]
  - net: link_watch: prevent starvation when processing linkwatch wq (Yunsheng Lin) [task:470107]
  - HYGON: crypto: ccp: Fix the issue of TDM support detection failure on Hygon platforms without psp firmware support. (niuyongwen) [bug:337403]
  - HYGON: perf/x86/uncore: Add support for Hygon family 18h model 4-8h and 10h DF PMU (wudandan) [bug:340362]
  - iommu/amd: Fix potential @entry null deref (Joao Martins) [task:457728]
  - iommu/amd: Disable AMD IOMMU if CMPXCHG16B feature is not supported (Suravee Suthikulpanit) [task:457728]
  - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (Suravee Suthikulpanit) [task:457728]
  - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (Suravee Suthikulpanit) [task:457728]
  - net: fix a compilation (xiaolinkui) [task:468687]
  - Revert "loongarch/kabi: fix kabi issue for "LoongArch: Add AVEC irqchip support"" (wangxuewen) [task:471631]
  - loongarch/kabi: fix kabi issue for "LoongArch: Remove shm_align_mask and use SHMLBA instead" (wangxuewen) [task:458327]
  - udp: Deal with race between UDP socket address change and rehash (Stefano Brivio) [task:469817] {CVE-2024-57974}
  - Revert "udp: Deal with race between UDP socket address change and rehash" (taowei) [task:469817]
  - Kdump: Resolve Second Kernel Boot Failure (duanchenghao) [bug:353716, bug:353689]
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Sean Christopherson) [task:442641] {CVE-2024-58083}
  - thermal: int340x: Add NULL check for adev (Chenyuan Yang) [task:459932] {CVE-2025-23136}
  - fbdev: smscufx: fix error handling code in ufx_usb_probe (Dongliang Mu) [task:448819] {CVE-2022-49741}
  - video: fbdev: don't print error message on framebuffer_alloc() failure (Bartlomiej Zolnierkiewicz) [task:448819]
  - video: fbdev: intelfb: return -ENOMEM on framebuffer_alloc() failure (Bartlomiej Zolnierkiewicz) [task:448819]
  - video: fbdev: s3c-fb: return -ENOMEM on framebuffer_alloc() failure (Bartlomiej Zolnierkiewicz) [task:448819]
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (Pavel Paklov) [task:466598] {CVE-2025-37927}
  - bpf: avoid holding freeze_mutex during mmap operation (Andrii Nakryiko) [task:444118] {CVE-2025-21853}
  - bpf: Prevent mmap()'ing read-only maps as writable (Andrii Nakryiko) [task:444118]
  - bpf: Prevent re-mmap()'ing BPF map as writable for initially r/o mapping (Andrii Nakryiko) [task:444118]
  - qibfs: fix _another_ leak (Al Viro) [task:466584] {CVE-2025-37983}
  - wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() (Wentao Liang) [task:466615] {CVE-2025-37990}
  - wifi: wl1251: fix memory leak in wl1251_tx_work (Abdun Nihaal) [task:466597] {CVE-2025-37982}
  - drm/nouveau: prime: fix ttm_bo_delayed_delete oops (Chris Bainbridge) [task:460149] {CVE-2025-37765}
  - driver core: fix potential NULL pointer dereference in dev_uevent() (Dmitry Torokhov) [task:462069] {CVE-2025-37800}
  - driver core: introduce device_set_driver() helper (Dmitry Torokhov) [task:462069]
  - driver core: bus: implement bus_get/put() without the private pointer (Greg Kroah-Hartman) [task:462069]
  - driver core: add local subsys_get and subsys_put functions (Greg Kroah-Hartman) [task:462069]
  - Revert "driver core: Fix uevent_show() vs driver detach race" (Greg Kroah-Hartman) [task:462069]
  - usb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback (Wesley Cheng) [task:440766] {CVE-2022-49398}
  - tty: serial: fsl_lpuart: fix race on RX DMA shutdown (Alexander Sverdlin) [task:461247] {CVE-2023-53094}
  - misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (Kunihiko Hayashi) [task:460201] {CVE-2025-23140}
  - i2c: cros-ec-tunnel: defer probe if parent EC is not present (Thadeu Lima de Souza Cascardo) [task:460209] {CVE-2025-37781}
  - xenbus: Use kref to track req lifetime (Jason Andryuk) [task:466603] {CVE-2025-37949}
  - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init (Gabriel Shahrouzi) [task:462560] {CVE-2025-37878}
  - ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (Murad Masimov) [task:440505] {CVE-2025-21792}
  - scsi: hisi_sas: Free irq vectors in order for v3 HW (Qi Liu) [task:440479] {CVE-2022-49118}
  - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (Cong Wang) [task:419353]
  - net/sched: netem: account for backlog updates from child qdisc (Martin Ottens) [task:419353] {CVE-2024-56770}
  - net: netem: use a list in addition to rbtree (Peter Oskolkov) [task:419353]
  - wifi: rtlwifi: remove unused check_buddy_priv (Thadeu Lima de Souza Cascardo) [task:442589] {CVE-2024-58072}
  - rtlwifi: replace usage of found with dedicated list iterator variable (Jakob Koschel) [task:442589]
  - rtlwifi: Fix errors in spacing in wifi.h (Larry Finger) [task:442589]
  - rtlwifi: Fix problems with block comments in wifi.h (Larry Finger) [task:442589]
  - rtlwifi: Remove CamelCase variables from base code (Larry Finger) [task:442589]
  - batman-adv: Drop unmanaged ELP metric worker (Sven Eckelmann) [task:439944] {CVE-2025-21823}
  - batman-adv: Ignore neighbor throughput metrics in error case (Sven Eckelmann) [task:439944]
  - batman-adv: ELP - use wifi tx bitrate as fallback (René Treffer) [task:439944]
  - list: fix a data-race around ep->rdllist (Kuniyuki Iwashima) [task:440750] {CVE-2022-49443}
  - list: introduce list_is_head() helper and re-use it in list.h (Andy Shevchenko) [task:440750]
  - net: phy: leds: fix memory leak (Qingfang Deng) [task:466413] {CVE-2025-37989}
  - LoongArch: Increase ARCH_DMA_MINALIGN up to 16 (Huacai Chen) [task:459709] {CVE-2025-22049}
  - sched/core: Prevent rescheduling when interrupts are disabled (Thomas Gleixner) [task:448841] {CVE-2023-52935}
  - s390/sclp: Add check for get_zeroed_page() (Haoxiang Li) [task:462569] {CVE-2025-37883}
  - f2fs: fix to do sanity check on node blkaddr in truncate_node() (Chao Yu) [task:416339] {CVE-2024-56692}
  - f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() (Chao Yu) [task:440555] {CVE-2022-49380}
  - f2fs: do not count ENOENT for error case (Jaegeuk Kim) [task:439941]
  - f2fs: avoid infinite loop to flush node pages (Jaegeuk Kim) [task:439941] {CVE-2022-49317}
  - f2fs: fix wrong condition check when failing metapage read (Jaegeuk Kim) [task:439941]
  - f2fs: avoid an infinite loop in f2fs_sync_dirty_inodes (Jaegeuk Kim) [task:439941]
  - f2fs: set SBI_NEED_FSCK flag when inconsistent node block found (Weichao Guo) [task:439941]
  - scsi: pm8001: Fix task leak in pm8001_send_abort_all() (Damien Le Moal) [task:440632] {CVE-2022-49120}
  - scsi: pm80xx: Fix command issue sizing (peter chang) [task:440632]
  - scsi: pm80xx: Squashed logging cleanup changes (peter chang) [task:440632]
  - xfs: don't include bnobt blocks when reserving free block pool (Darrick J. Wong) [task:464914]
  - xfs: set aside allocation btree blocks from block reservation (Brian Foster) [task:464914]
  - xfs: introduce in-core global counter of allocbt blocks (Brian Foster) [task:464914]
  - btrfs: always report error in run_one_delayed_ref() (Qu Wenruo) [task:448850] {CVE-2022-49761}
  - xfs: fix leaked dealloc blocks accounting (Shida Zhang) [task:467725]
  - kernel.spec: support 4knew Compilation method (lihaofeng) [task:448372]
  - mmu_notifiers: Add code replication hook support on NUMA systems (huhai) [task:449356]
  - scsi: st: Fix array overflow in st_setup() (Kai Mäkisara) [task:462440] {CVE-2025-37857}
  - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Patrisious Haddad) [task:459937] {CVE-2025-22086}
  - RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (Chen Zhongjin) [task:460250] {CVE-2022-49925}
  - IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition (Niels Dossche) [task:441319] {CVE-2022-49089}
  - usbnet: gl620a: fix endpoint checking in genelink_bind() (Nikita Zhandarovich) [task:448793] {CVE-2025-21877}
  - netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [task:410153] {CVE-2024-56637}
  - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (Eric Dumazet) [task:426473] {CVE-2025-21653}
  - ax25: rcu protect dev->ax25_ptr (Eric Dumazet) [task:440765] {CVE-2025-21812}
  - ax25: Use kernel universal linked list to implement ax25_dev_list (Duoming Zhou) [task:440765]
  - page_pool: avoid infinite loop to schedule delayed worker (Jason Xing) [task:462587] {CVE-2025-37859}
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Cong Wang) [task:461022] {CVE-2025-37798}
  - tipc: fix memory leak in tipc_link_xmit (Tung Nguyen) [task:461213] {CVE-2025-37757}
  - i40e: Fix kernel crash during reboot when adapter is in recovery mode (Ivan Vecera) [task:461215] {CVE-2023-53114}
  - net_sched: hfsc: Fix a UAF vulnerability in class handling (Cong Wang) [task:461360] {CVE-2025-37797}
  - tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (Tung Nguyen) [task:461966] {CVE-2025-37824}
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia) [task:421045] {CVE-2024-53680}
  - f2fs: fix race in concurrent f2fs_stop_gc_thread (Long Li) [task:410149] {CVE-2024-53218}
  - f2fs: use spin_lock to avoid hang (Jaegeuk Kim) [task:440817] {CVE-2022-49169}
  - btrfs: do not double complete bio on errors during compressed reads (Josef Bacik) [task:440568] {CVE-2022-49167}
  - btrfs: fix use-after-free when attempting to join an aborted transaction (Filipe Manana) [task:440409] {CVE-2025-21753}
  - net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" (Jeremy Linton) [task:441340]
  - net: bcmgenet: Use stronger register read/writes to assure ordering (Jeremy Linton) [task:441340] {CVE-2022-49194}
  - net: systemport: fix potential memory leak in bcm_sysport_xmit() (Wang Hai) [task:387641] {CVE-2024-50171}
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (Quang Le) [task:434029] {CVE-2025-21702}
  - net_sched: sch_fifo: implement lockless __fifo_dump() (Eric Dumazet) [task:434029]
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() (Marcel Hamer) [task:440550] {CVE-2025-21744}
  - netrom: check buffer length before accessing it (Ilya Shchipletsov) [task:425034] {CVE-2024-57802}
  - SUNRPC: Fix the svc_deferred_event trace class (Chuck Lever) [task:439956] {CVE-2022-49065}
  - SUNRPC: Clean up request deferral tracepoints (Chuck Lever) [task:439956]
  - SUNRPC: Simplify defining common RPC trace events (Chuck Lever) [task:439956]
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung (Arnaud Lecomte) [task:460175] {CVE-2025-37749}
  - can: j1939: j1939_send_one(): fix missing CAN header initialization (Oliver Hartkopp) [task:460174] {CVE-2022-49845}
  - wifi: at76c50x: fix use after free access in at76_disconnect (Abdun Nihaal) [task:460161] {CVE-2025-37796}
  - net: vlan: don't propagate flags on open (Stanislav Fomichev) [task:460234] {CVE-2025-23163}
  - sctp: detect and prevent references to a freed transport in sendmsg (Ricardo Cañuelo Navarro) [task:460144] {CVE-2025-23142}
  - net: openvswitch: fix nested key length validation in the set() action (Ilya Maximets) [task:460141] {CVE-2025-37789}
  - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (Debin Zhu) [task:459581] {CVE-2025-22063}
  - atm: Fix NULL pointer dereference (Minjoong Kim) [task:459567] {CVE-2025-22018}
  - net_sched: skbprio: Remove overly strict queue assertions (Cong Wang) [task:458462] {CVE-2025-38637}
  - f2fs: fix missing free nid in f2fs_handle_failed_inode (Jaegeuk Kim) [task:440776] {CVE-2022-49255}
  - ubifs: Fix to add refcount once page is set private (Zhihao Cheng) [task:439948] {CVE-2021-47635}
  - include/linux/pagemap.h: introduce attach/detach_page_private (Guoqing Jiang) [task:439948]
  - btrfs: use latest_dev in btrfs_show_devname (Anand Jain) [task:330554] {CVE-2021-47599}
  - btrfs: convert latest_bdev type to btrfs_device and rename (Anand Jain) [task:330554] {CVE-2021-47599}
  - ext4: fix access to uninitialised lock in fc replay path (Luis Henriques (SUSE)) [task:376395] {CVE-2024-50014}
  - media: streamzap: fix race between device disconnection and urb callback (Murad Masimov) [task:459565] {CVE-2025-22027}
  - bpf: Fix deadlock between rcu_tasks_trace and event_mutex. (Alexei Starovoitov) [task:462409] {CVE-2025-37884}
  - bpf: Fix kmemleak warning for percpu hashmap (Yonghong Song) [task:461956] {CVE-2025-37807}
  - net: annotate races around sk->sk_bound_dev_if (Eric Dumazet) [task:439947] {CVE-2022-49420}
  - drm/scheduler: fix fence ref counting (Christian König) [task:460223] {CVE-2022-49829}
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Matthieu Baerts (NGI0)) [task:426896] {CVE-2025-21640}
  - fs: relax assertions on failure to encode file handles (Amir Goldstein) [task:429490] {CVE-2024-57924}
  - xfs: fix freeing speculative preallocations for preallocated files (Christoph Hellwig) [task:449979]
  - xfs: update fork seq counter on data fork changes (Brian Foster) [task:449979]
  - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (Kaixin Wang) [task:387977] {CVE-2024-47747}
  - fs: add a new SB_I_NOUMASK flag (Jeff Layton) [task:438543, task:442990]
  - NFS: Further optimisations for 'ls -l' (Trond Myklebust) [task:438543, task:442990]
  - NFS: Support larger readdir buffers (Trond Myklebust) [task:438543, task:442990]
  - NFS: Remove unnecessary kmap in nfs_readdir_xdr_to_array() (Trond Myklebust) [task:438543, task:442990]
  - NFS: Clean up nfs_readdir_page_filler() (Trond Myklebust) [task:438543, task:442990]
  - NFS: Clean up directory array handling (Trond Myklebust) [task:438543, task:442990]
  - nfs: pass the correct prototype to read_cache_page (Christoph Hellwig) [task:438543, task:442990]
  - NFS: Clean up readdir struct nfs_cache_array (Trond Myklebust) [task:438543, task:442990]
  - nfs: Replace zero-length array with flexible-array member (Gustavo A. R. Silva) [task:438543, task:442990]
  - NFS: Ensure contents of struct nfs_open_dir_context are consistent (Trond Myklebust) [task:438543, task:442990]
  - NFS: Use the 64-bit server readdir cookies when possible (Trond Myklebust) [task:438543, task:442990]
  - nfs: optimise readdir cache page invalidation (Dai Ngo) [task:438543, task:442990]
  - clocksource: Skip watchdog check for large watchdog intervals (Jiri Wiesner) [task:431250]
  - clocksource: Reduce the default clocksource_watchdog() retries to 2 (Waiman Long) [task:457161]
  - clocksource: Avoid accidental unstable marking of clocksources (Waiman Long) [task:457161]
  - clocksource: Print deviation in nanoseconds when a clocksource becomes unstable (Feng Tang) [task:431250]
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (Cong Wang) [task:461961] {CVE-2025-37823}
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy (Matthieu Baerts (NGI0)) [task:426435] {CVE-2025-21639}
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts (NGI0)) [task:426436] {CVE-2025-21638}
  - spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao) [task:421039] {CVE-2024-50051}
  - net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads (Jonathan Currier) [task:461948] {CVE-2025-37833}
  - tcp/dccp: Add another way to allocate local ports in bind() (luoxuanqiang) [task:452905]
  - netfilter: socket: Lookup orig tuple for IPv6 SNAT (Maxim Mikityanskiy) [task:459941] {CVE-2025-22021}
  - SSSNIC: fix a compilation of 3snic drivers (xiaolinkui) [task:458713]
  - net/rose: prevent integer overflows in rose_setsockopt() (Nikita Zhandarovich) [task:441317] {CVE-2025-21711}
  - netfilter: conntrack: revisit the gc initial rescheduling bias (Antoine Tenart) [task:441321]
  - netfilter: conntrack: fix the gc rescheduling delay (Antoine Tenart) [task:441321]
  - ip: Fix data-races around sysctl_ip_prot_sock. (Kuniyuki Iwashima) [task:440771] {CVE-2022-49578}
  - net: port < inet_prot_sock(net) --> inet_port_requires_bind_service(net, port) (Maciej Żenczykowski) [task:440771]
  - net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (Jakub Kicinski) [task:440770] {CVE-2025-21768}
  - udp: Deal with race between UDP socket address change and rehash (Stefano Brivio) [task:441338] {CVE-2024-57974}
  - ipv6: udp: constify 'struct net' parameter of socket lookups (Eric Dumazet) [task:441338]
  - udp: constify 'struct net' parameter of socket lookups (Eric Dumazet) [task:441338]
  - udp: Remove unused variable/function (exact_dif) (Tim Beale) [task:441338]
  - udp: Remove unused parameter (exact_dif) (Tim Beale) [task:441338]
  - net: ipv6: drop unneeded likely() call around IS_ERR() (Enrico Weigelt) [task:441338]
  - udp6: add missing rehash callback to udplite (Alexey Kodanev) [task:441338]
  - net: udp6: prefer listeners bound to an address (Peter Oskolkov) [task:441338]
  - netfilter: conntrack: revisit gc autotuning (Florian Westphal) [task:441321] {CVE-2022-49110}
  - net: fix geneve_opt length integer overflow (Lin Ma) [task:458450] {CVE-2025-22055}
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled (Filipe Manana) [task:429487] {CVE-2024-56759}
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Nikolay Kuratov) [task:427427] {CVE-2024-57938}
  - tcp: Fix data-races around sysctl_tcp_l3mdev_accept. (Kuniyuki Iwashima) [task:440800] {CVE-2022-49599}
  - tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() (Eric Dumazet) [task:440800]
  - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths (John Keeping) [task:442582] {CVE-2025-21835}
  - igb: Fix potential invalid memory access in igb_init_module() (Yuan Can) [task:421029] {CVE-2024-52332}
  - quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo) [task:420523] {CVE-2024-56780}
  - ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe (Miaoqian Lin) [task:440548] {CVE-2022-49241}
  - ASoC: atmel: sam9x5_wm8731: use devm_snd_soc_register_card() (Yang Yingliang) [task:440548]
  - bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener (Jakub Sitnicki) [task:448847] {CVE-2023-52986}
  - ip: Fix data-races around sysctl_ip_fwd_update_priority. (Kuniyuki Iwashima) [task:440687] {CVE-2022-49603}
  - xfs: fix log recovery when unknown rocompat bits are set (Darrick J. Wong) [task:450130]
  - xfs: allow inode inactivation during a ro mount log recovery (Darrick J. Wong) [task:450130]
  - bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals (Daniel Borkmann) [task:441339] {CVE-2022-49658}
  - smb: client: Add check for next_buffer in receive_encrypted_standard() (Haoxiang Li) [task:444124] {CVE-2025-21844}
  - cifs: fix potential memory leaks in session setup (Paulo Alcantara) [task:448797] {CVE-2023-53008}
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end (Ming-Hung Tsai) [task:426323] {CVE-2024-57929}
  - RDMA/core: Fix ib block iterator counter overflow (Yonatan Nachum) [task:448788] {CVE-2023-53026}
  - ice: always check VF VSI pointer values (Jacob Keller) [task:440513] {CVE-2022-49516}
  - ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. (Kuniyuki Iwashima) [task:440707] {CVE-2022-49579}
  - tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. (Kuniyuki Iwashima) [task:440692] {CVE-2022-49585}
  - tcp: disable TFO blackhole logic by default (Wei Wang) [task:440692]
  - tcp: Fix a data-race around sysctl_tcp_ecn_fallback. (Kuniyuki Iwashima) [task:441283] {CVE-2022-49630}
  - netfilter: nf_tables: fix crash when nf_trace is enabled (Florian Westphal) [task:440633]
  - netfilter: nf_tables: avoid skb access on nf_stolen (Florian Westphal) [task:440633] {CVE-2022-49622}
  - netfilter: nf_tables: consolidate rule verdict trace call (Pablo Neira Ayuso) [task:440633]
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (Haoxiang Li) [task:444125] {CVE-2025-21848}
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Kuniyuki Iwashima) [task:444121]
  - geneve: Fix use-after-free in geneve_find_dev(). (Kuniyuki Iwashima) [task:444121] {CVE-2025-21858}
  - remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region (Miaoqian Lin) [task:440416] {CVE-2022-49188}
  - remoteproc: qcom_q6v5_mss: Extract mba/mpss from memory-region (Sibi Sankar) [task:440416]
  - ext4: fix race condition between ext4_write and ext4_convert_inline_data (Baokun Li) [task:439963] {CVE-2022-49414}
  - ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow (Baokun Li) [task:449973]
  - ext4: avoid potential data overflow in next_linear_group (Kemeng Shi) [task:449973]
  - ext4: use locality group preallocation for small closed files (Jan Kara) [task:449973]
  - ext4: avoid unnecessary spreading of allocations among groups (Jan Kara) [task:449973]
  - ext4: discard preallocations before releasing group lock (Jan Kara) [task:449973]
  - ext4: fix dead loop in ext4_mb_new_blocks (Ye Bin) [task:449973]
  - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS (Baokun Li) [task:449973]
  - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow (Baokun Li) [task:449973]
  - ext4: add two helper functions extent_logical_end() and pa_logical_end() (Baokun Li) [task:449973]
  - ext4: fix rbtree traversal bug in ext4_mb_use_preallocated (Ojaswin Mujoo) [task:449973]
  - ext4: mballoc: Remove useless setting of ac_criteria (Ritesh Harjani) [task:449973]
  - ext4: add EXT4_MB_HINT_GOAL_ONLY test in ext4_mb_use_preallocated (Kemeng Shi) [task:449973]
  - ext4: Stop searching if PA doesn't satisfy non-extent file (Ojaswin Mujoo) [task:449973]
  - ext4: Use rbtrees to manage PAs instead of inode i_prealloc_list (Ojaswin Mujoo) [task:449973]
  - ext4: Refactor code related to freeing PAs (Ojaswin Mujoo) [task:449973]
  - ext4: Convert pa->pa_inode_list and pa->pa_obj_lock into a union (Ojaswin Mujoo) [task:449973]
  - ext4: limit the length of per-inode prealloc list (brookxu) [task:449973]
  - ext4: reorganize if statement of ext4_mb_release_context() (brookxu) [task:449973]
  - ext4: add mb_debug logging when there are lost chunks (brookxu) [task:449973]
  - ext4: mballoc: add blocks to PA list under same spinlock after allocating blocks (Ritesh Harjani) [task:449973]
  - ext4: use built-in RCU list checking in mballoc (Madhuparna Bhowmik) [task:449973]
  - ext4: Abstract out overlap fix/check logic in ext4_mb_normalize_request() (Ojaswin Mujoo) [task:449973]
  - ext4: Move overlap assert logic into a separate function (Ojaswin Mujoo) [task:449973]
  - ext4: Refactor code in ext4_mb_normalize_request() and ext4_mb_use_preallocated() (Ojaswin Mujoo) [task:449973]
  - ext4: avoid unnecessary pointer dereference in ext4_mb_normalize_request (Kemeng Shi) [task:449973]
  - ext4: Add allocation criteria 1.5 (CR1_5) (Ojaswin Mujoo) [task:449973]
  - ext4: Add per CR extent scanned counter (Ojaswin Mujoo) [task:449973]
  - ext4: Abstract out logic to search average fragment list (Ojaswin Mujoo) [task:449973]
  - ext4: fixup possible uninitialized variable access in ext4_mb_choose_next_group_cr1() (Jan Kara) [task:449973]
  - ext4: use is_power_of_2 helper in ext4_mb_regular_allocator (Kemeng Shi) [task:449973]
  - ext4: Avoid scanning smaller extents in BG during CR1 (Ojaswin Mujoo) [task:449973]
  - ext4: Add counter to track successful allocation of goal length (Ojaswin Mujoo) [task:449973]
  - ext4: Convert mballoc cr (criteria) to enum (Ojaswin Mujoo) [task:449973]
  - ext4: use buckets for cr 1 block scan instead of rbtree (Jan Kara) [task:449973]
  - ext4: fix sparse warnings (Theodore Ts'o) [task:449973]
  - ext4: add proc files to monitor new structures (Harshad Shirwadkar) [task:449973]
  - ext4: make mballoc try target group first even with mb_optimize_scan (Jan Kara) [task:449973]
  - ext4: mballoc: add more mb_debug() msgs (Ritesh Harjani) [task:449973]
  - ext4: mballoc: refactor ext4_mb_show_ac() (Ritesh Harjani) [task:449973]
  - ext4: improve cr 0 / cr 1 group scanning (Harshad Shirwadkar) [task:449973]
  - ext4: add ability to return parsed options from parse_options (Harshad Shirwadkar) [task:449973]
  - ext4: add MB_NUM_ORDERS macro (Harshad Shirwadkar) [task:449973]
  - ext4: optimize the implementation of ext4_mb_good_group() (brookxu) [task:449973]
  - ext4: add prefetch_block_bitmaps mount option (Theodore Ts'o) [task:449973, addresses-google-bug:159488342]
  - ext4: add prefetching for block allocation bitmaps (Alex Zhuravlev) [task:449973]
  - ext4: add mballoc stats proc file (Harshad Shirwadkar) [task:449973]
  - ext4: drop s_mb_bal_lock and convert protected fields to atomic (Harshad Shirwadkar) [task:449973]
  - ext4: skip non-loaded groups at cr=0/1 when scanning for good groups (Alex Zhuravlev) [task:449973]
  - ext4: mballoc: use lock for checking free blocks while retrying (Ritesh Harjani) [task:449973]
  - ext4: mballoc: introduce pcpu seqcnt for freeing PA to improve ENOSPC handling (Ritesh Harjani) [task:449973]
  - ext4: mballoc: refactor ext4_mb_discard_preallocations() (Ritesh Harjani) [task:449973]
  - ext4: mballoc: refactor ext4_mb_good_group() (Ritesh Harjani) [task:449973]
  - xfs: fix chown leaking delalloc quota blocks when fssetxattr fails (Darrick J. Wong) [task:450133]
  - xfs: always return -ENOSPC on project quota reservation failure (Eric Sandeen) [task:450133]
  - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition (Kaixin Wang) [task:458685] {CVE-2025-37838}
  - blkcg: Add during the process to ensure data synchronization between CPUs. (cuitao) [task:404161, task:455283]
  - blkcg: handle dying request_queue when associating a blkg (Dennis Zhou) [task:404161, task:455283]
  - OPENEULER: sched/fair: Introduce multiple qos level (liwanwu) [task:447047]
  - scsi/megaraid: fix the iommu free issue (Zheng Tan) [bug:343066, bug:334281, bug:328152]
  - mmc: core: use sysfs_emit() instead of sprintf() (Sergey Shtylyov) [task:440609] {CVE-2022-49267}
  - RDMA/mlx5: Move events notifier registration to be after device registration (Patrisious Haddad) [task:410141] {CVE-2024-53224}
  - net: asix: add proper error handling of usb read errors (Pavel Skripkin) [task:440657] {CVE-2022-49226}
  - net: restrict SO_REUSEPORT to inet sockets (Eric Dumazet) [task:425031] {CVE-2024-57903}
  - sock: redo the psock vs ULP protection check (Jakub Kicinski) [task:425031]
  - bpf: Fix potential array overflow in bpf_trampoline_get_progs() (Yuntao Wang) [task:441305] {CVE-2022-49548}
  - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (Hans de Goede) [task:440567]
  - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() (Duoming Zhou) [task:440567] {CVE-2022-49309}
  - staging: rtl8723bs: replace _cancel_timer with del_timer_sync (Ross Schmidt) [task:440567]
  - staging: rtl8723bs: replace __inline by inline (Rasmus Villemoes) [task:440567]
  - i2c: designware: use casting of u64 in clock multiplication to avoid overflow (Lareine Khawaly) [task:448836] {CVE-2022-49749}
  - i2c: designware: Use DIV_ROUND_CLOSEST() macro (Andy Shevchenko) [task:448836]
  - math64: New DIV_S64_ROUND_CLOSEST helper (Chunyan Zhang) [task:448836]
  - units: Add SI metric prefix definitions (Andy Shevchenko) [task:448836]
  - include/linux/units.h: add helpers for kelvin to/from Celsius conversion (Akinobu Mita) [task:448836]
  - mm/mmap: teach generic_get_unmapped_area{_topdown} to handle hugetlb mappings (Oscar Salvador) [task:450281]
  - regulator: check that dummy regulator has been probed before using it (Christian Eggers) [task:452500, task:464599] {CVE-2025-22008}
  - hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (Ma Wupeng) [task:450240, task:464599] {CVE-2025-21931}
  - fbdev: hyperv_fb: Allow graceful removal of framebuffer (Saurabh Sengar) [task:450275, task:464599] {CVE-2025-21976}
  - fbdev: Introduce devm_register_framebuffer() (Thomas Weißschuh) [task:450275, task:464599]
  - drm/amd/display: Assign normalized_pix_clk when color depth = 14 (Alex Hung) [task:450278, task:464599] {CVE-2025-21956}
  - LoongArch: Set hugetlb mmap base address aligned with pmd size (Bibo Mao) [task:450281, task:464599] {CVE-2025-21949}
  - LoongArch: Remove shm_align_mask and use SHMLBA instead (Huacai Chen) [task:450281, task:464599]
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params (Ma Ke) [task:450263, task:464599] {CVE-2025-21941}
  - drm/amd/display: Check for invalid input params when building scaling params (Michael Strauss) [task:450263, task:464599]
  - RDMA/hns: Fix ah error counter in sw stat not increasing (Junxian Huang) [bug:333288]
  - RDMA/hns: Modify debugfs name (Yuyu Li) [bug:333288]
  - RDMA/hns: Support SW stats with debugfs (Junxian Huang) [bug:333288]
  - RDMA/hns: Add debugfs to hns RoCE (Junxian Huang) [bug:333288]
  - txgbe: FIX: fix delete redefine netdev_xmit_more in kylin os (linyuexie) [task:458496]
  - ngbe: FIX: fix delete redefine netdev_xmit_more in kylin os (linyuexie) [task:458496]
  - bpf: sync_linked_regs() must preserve subreg_def (Eduard Zingerman) [task:398625] {CVE-2024-53125}
  - bpf: Check the other end of slot_type for STACK_SPILL (Martin KaFai Lau) [task:434197]
  - ipv4: prevent potential spectre v1 gadget in fib_metrics_match() (Eric Dumazet) [task:448792] {CVE-2023-52996}
  - netfilter: allow exp not to be removed in nf_ct_find_expectation (Xin Long) [task:444898] {CVE-2023-52927}
  - LoongArch: irqchip/pch-lpc: fix irq_mask error. (wanghongliang) [task:450160]
  - LoongArch: fix kexec and kdump kernel runtime error (Ming Wang) [task:450160]
  - pci/msi: Increase the forgetting of {} after if (Juxin Gao) [task:450160]
  - LoongArch: KVM: Add interrupt checking with Loongson AVEC (Xianglai Li) [task:450160]
  - LoongArch: KVM: Fixed VM migration failure after ptw was enabled (Xianglai Li) [task:450160]
  - loongarch/kvm: Fixed the virtual machine crash problem after the physical machine wakes up from sleep (Xianglai Li) [task:450160]
  - driver/irqchip: add extioi cpu encode support for 6.6 host (Xianglai Li) [task:450160]
  - cpufreq: loongson3-acpi: Change failed status to disable (Juxin Gao) [task:450160]
  - LoongArch:LSVZ: Fix typo issue using funtion kvm_gcsr_write() (Bibo Mao) [task:450160]
  - LoongArch: KVM: enable ptw for kvm (Xianglai Li) [task:450160]
  - mlxsw: spectrum: Guard against invalid local ports (Amit Cohen) [task:440543] {CVE-2022-49134}
  - mlxsw: spectrum: Protect driver from buggy firmware (Amit Cohen) [task:440543]
  - mlxsw: Verify the accessed index doesn't exceed the array length (Danielle Ratson) [task:440543]
  - nvme-fc: fix racing controller reset and create association (James Smart) [task:395841]
  - nvme-fc: avoid calling _nvme_fc_abort_outstanding_ios from interrupt context (James Smart) [task:395841]
  - nvme-fc: do not wait in vain when unloading module (Daniel Wagner) [task:395841] {CVE-2024-26846}
  - nvme-fc: remove nvme_fc_terminate_io() (James Smart) [task:395841]
  - nvme-fc: eliminate terminate_io use by nvme_fc_error_recovery (James Smart) [task:395841]
  - nvme-fc: track error_recovery while connecting (James Smart) [task:395841]
  - nvme-fc: fix io timeout to abort I/O (James Smart) [task:395841]
  - nvme-fc: convert assoc_active flag to bit op (James Smart) [task:395841]
  - nvme-fc: remove err_work work item (James Smart) [task:395841]
  - nvme_fc: add 'nvme_discovery' sysfs attribute to fc transport device (James Smart) [task:395841]
  - Revert "usb: xhci: Add timeout argument in address_device USB HCD callback" (dengjie03) [task:440504]
  - Revert "usb: xhci: Fix NULL pointer dereference on certain command aborts" (dengjie03) [task:440504]
  - usb-storage: apply IGNORE_UAS for Realtek RTL9210 (dengjie03) [bug:332982]
  - sysctl: Fix data races in proc_douintvec(). (Kuniyuki Iwashima) [task:440762] {CVE-2022-49641}
  - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (Akash M) [task:426433] {CVE-2024-57913}
  - ALSA: pcm: Add sanity NULL check for the default mmap fault handler (Takashi Iwai) [task:429543] {CVE-2024-53180}
  - net: gso: fix ownership in __udp_gso_segment (Antoine Tenart) [task:450256] {CVE-2025-21926}
  - udp: rehash on disconnect (Willem de Bruijn) [task:450256]
  - net: ipv4: drop unneeded likely() call around IS_ERR() (Enrico Weigelt) [task:450256]
  - udp: add missing rehash callback to udplite (Alexey Kodanev) [task:450256]
  - net: udp: prefer listeners bound to an address (Peter Oskolkov) [task:450256]
  - clk: qcom: clk-rcg2: Update logic to calculate D value for RCG (Taniya Das) [task:440546] {CVE-2022-49189}
  - ftrace: Avoid potential division by zero in function_stat_show() (Nikolay Kuratov) [task:450271] {CVE-2025-21898}
  - ice: fix memory leak in aRFS after reset (Grzegorz Nitka) [task:450280] {CVE-2025-21981}
  - caif_virtio: fix wrong pointer check in cfv_probe() (Vitaliy Shevtsov) [task:450247] {CVE-2025-21904}
  - gpio: rcar: Use raw_spinlock to protect register access (Niklas Söderlund) [task:450255] {CVE-2025-21912}
  - gpio: rcar: Optimize GPIO pin state read on R-Car Gen3 (Geert Uytterhoeven) [task:450255]
  - gpio: rcar: Implement gpio_chip.get_multiple() (Geert Uytterhoeven) [task:450255]
  - gpio: rcar: Rework hardware features handling (Geert Uytterhoeven) [task:450255]
  - gpio: rcar: Cache gpiochip_get_data() return value (Geert Uytterhoeven) [task:450255]
  - gpio: rcar: select General Output Register to set output states (Vladimir Zapolskiy) [task:450255]
  - gpio: rcar: reference device instead of platform device (Vladimir Zapolskiy) [task:450255]
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario (Visweswara Tanuku) [task:450260] {CVE-2025-21914}
  - net_sched: Prevent creation of classes with TC_H_ROOT (Cong Wang) [task:450261] {CVE-2025-21971}
  - wifi: cfg80211: regulatory: improve invalid hints checking (Nikita Zhandarovich) [task:450244] {CVE-2025-21910}
  - HID: appleir: Fix potential NULL dereference at raw event handle (Daniil Dulov) [task:450218] {CVE-2025-21948}
  - Mucse: rnp: never use err_handler avoid os crash when aer error recover (Dong Yibo) [task:447054]
  - memcg: fix soft lockup in the OOM process (Chen Ridong) [task:440777] {CVE-2024-57977}
  - usb: renesas_usbhs: Flush the notify_hotplug_work (Claudiu Beznea) [task:450259] {CVE-2025-21917}
  - vlan: enforce underlying device type (Oscar Maes) [task:450262] {CVE-2025-21920}
  - scsi: qla1280: Fix kernel oops when debug level > 2 (Magnus Lindholm) [task:450276] {CVE-2025-21957}
  - scsi: qla1280: use lower_32_bits and upper_32_bits instead of reinventing them (Christoph Hellwig) [task:450276]
  - wifi: nl80211: reject cooked mode if it is set along with other flags (Vitaliy Shevtsov) [task:450266] {CVE-2025-21909}
  - rapidio: fix an API misues when rio_add_net() fails (Haoxiang Li) [task:450268] {CVE-2025-21934}
  - llc: do not use skb_get() before dev_queue_xmit() (Eric Dumazet) [task:450248] {CVE-2025-21925}
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (Zhang Lixu) [task:450254] {CVE-2025-21928}
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net() (Haoxiang Li) [task:450246] {CVE-2025-21935}
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (Chengen Du) [task:450787] {CVE-2025-21993}
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (Florent Revest) [task:450788] {CVE-2025-21991}
  - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() (Nikita Zhandarovich) [task:451120] {CVE-2025-21996}
  - Bluetooth: Fix error code in chan_alloc_skb_cb() (Dan Carpenter) [task:451118] {CVE-2025-22007}
  - EDAC/ghes: Setup DIMM label from DMI and use it in error reports (Robert Richter) [task:409255]
  - EDAC/mc: Remove enable_per_layer_report function argument (Robert Richter) [task:409255]
  - EDAC/mc: Report "unknown memory" on too many DIMM labels found (Robert Richter) [task:409255]
  - EDAC/mc: Fix use-after-free and memleaks during device removal (Robert Richter) [task:409255]
  - EDAC/mc: Reduce indentation level in edac_mc_handle_error() (Robert Richter) [task:409255]
  - EDAC/mc: Remove needless zero string termination (Robert Richter) [task:409255]
  - EDAC: Introduce an mci_for_each_dimm() iterator (Robert Richter) [task:409255]
  - EDAC: Remove EDAC_DIMM_OFF() macro (Robert Richter) [task:409255]
  - EDAC: Replace EDAC_DIMM_PTR() macro with edac_get_dimm() function (Robert Richter) [task:409255]
  - EDAC/mc_sysfs: Make debug messages consistent (Robert Richter) [task:409255]
  - EDAC/mc_sysfs: Remove pointless gotos (Robert Richter) [task:409255]
  - EDAC: Prefer 'unsigned int' to bare use of 'unsigned' (Robert Richter) [task:409255]
  - EDAC/sysfs: Remove csrow objects on errors (Robert Richter) [task:409255]
  - EDAC/sysfs: Drop device references properly (Greg KH) [task:409255]
  - EDAC: Drop per-memory controller buses (Borislav Petkov) [task:409255]
  - EDAC: Don't add devices under /sys/bus/edac (Tony Luck) [task:409255]
  - ppp: Fix KMSAN uninit-value warning with bpf (Jiayuan Chen) [task:450270] {CVE-2025-21922}
  - ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (Kuniyuki Iwashima) [task:451123] {CVE-2025-22005}
  - net: atm: fix use after free in lec_send() (Dan Carpenter) [task:451119] {CVE-2025-22004}
  - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (Kohei Enju) [task:450269] {CVE-2025-21959}
  - netfilter: nf_conncount: fix wrong variable type (Yunjian Wang) [task:450269]
  - arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall (Alexandru Elisei) [task:440489] {CVE-2022-49520}
  - hwrng: nomadik - keep clock enabled while hwrng is registered (Martin Kaiser) [task:440480]
  - hwrng: st - keep clock enabled while hwrng is registered (Martin Kaiser) [task:440408]
  - hwrng: nomadik - Change clk_disable to clk_disable_unprepare (Miaoqian Lin) [task:440408]
  - hwrng: cavium - fix NULL but dereferenced coccicheck error (Wan Jiabing) [task:440408] {CVE-2022-49177}
  - hwrng: cavium - Check health status while reading random data (Sunil Goutham) [task:440408]
  - hwrng: st - Fix W=1 unused variable warning (Herbert Xu) [task:440408]
  - hwrng: n2-drv - fix typo (Stephen Rothwell) [task:440408]
  - hwrng: drivers - Use device-managed registration API (Chuhong Yuan) [task:440408]
  - icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr. (Kuniyuki Iwashima) [task:440570] {CVE-2022-49632}
  - kernel/resource: fix kfree() of bootmem memory again (Miaohe Lin) [task:440655] {CVE-2022-49190}
  - macsec: fix UAF bug for real_dev (Ziyang Xuan) [task:439954] {CVE-2022-49390}
  - tee: optee: Fix supplicant wait loop (Sumit Garg) [task:448794] {CVE-2025-21871}
  - bpf: Skip task with pid=1 in send_signal_common() (Hao Sun) [task:448840] {CVE-2023-52992}
  - netlink: prevent potential spectre v1 gadgets (Eric Dumazet) [task:448831] {CVE-2023-53000}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.25.v2401
changelog:
  - secondly update changelog for incoming 4.19.90-89.25.v2401 (Zhengyuan Liu)
  - xfs: push the AIL in xlog_grant_head_wake (Dave Chinner) [task:507733]
  - EULER: sched/smart_grid: Prevent double-free in sched_grid_qos_free (Yipeng Zou) [task:505997]
  - update changelog for incoming 4.19.90-89.25.v2401 (Zhengyuan Liu)
  - mm/memory.c: Make the refreshing rate of rss_stat manual (Enze Li) [task:362195]
  - bpf: sync_linked_regs() must preserve subreg_def (Eduard Zingerman) [task:398625, task:460124] {CVE-2024-53125}
  - bpf: Fix wrong reg type conversion in release_reference() (Youlin Li) [task:460124] {CVE-2022-49873}
  - bpf: Add helper macro bpf_for_each_reg_in_vstate (Kumar Kartikeya Dwivedi) [task:434197, task:460124]
  - bpf: Support for pointers beyond pkt_end. (Alexei Starovoitov) [task:434197, task:460124]
  - Revert "bpf: sync_linked_regs() must preserve subreg_def" (Yun Lu) [task:460124]
  - bpf: Fix WARN() in get_bpf_raw_tp_regs (Tao Chen) [task:497313] {CVE-2025-38285}
  - jfs: add check read-only before truncation in jfs_truncate_nolock() (Vasiliy Kovalev) [task:459936] {CVE-2024-58094}
  - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key (Vasiliy Kovalev) [task:460140] {CVE-2025-37782}
  - jfs: Fix uninit-value access of imap allocated in the diMount() function (Zhongqiu Han) [task:460236] {CVE-2025-37742}
  - jfs: remove unnecessary oom message (Zhen Lei) [task:460236]
  - jfs: Prevent copying of nlink with value 0 from disk inode (Edward Adam Davis) [task:460150] {CVE-2025-37741}
  - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() (Henry Martin) [task:460300] {CVE-2025-37758}
  - isofs: Prevent the use of too small fid (Edward Adam Davis) [task:460221] {CVE-2025-37780}
  - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [task:448967] {CVE-2025-21699}
  - block: Fix handling of offline queues in blk_mq_alloc_request_hctx() (Bart Van Assche) [task:440716] {CVE-2022-49720}
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam) [task:425033] {CVE-2024-57892}
  - ocfs2: correct return value of ocfs2_local_free_info() (Joseph Qi) [task:425033]
  - bfq: Avoid merging queues with different parents (Jan Kara) [task:441921] {CVE-2022-49412}
  - jfs: Fix null-ptr-deref in jfs_ioc_trim (Dylan Wolff) [task:491953] {CVE-2025-38203}
  - xfs: fix xfs leaked delalloc blocks accounting p2 (Shida Zhang) [task:494391]
  - iio: adc: at91: call input_free_device() on allocated iio_dev (Joe Hattori) [task:426329] {CVE-2024-57904}
  - kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) [task:448817] {CVE-2023-52936}
  - irqdomain: Remove debugfs_file from struct irq_domain (Greg Kroah-Hartman) [task:448817]
  - USB: gadget: f_midi: f_midi_complete to call queue_work (Jill Donahue) [task:444127] {CVE-2025-21859}
  - nilfs2: prevent use of deleted inode (Edward Adam Davis) [task:421043] {CVE-2024-53690}
  - bpf: Use preempt_count() directly in bpf_send_signal_common() (Hou Tao) [task:442356]
  - bpf: Send signals asynchronously if !preemptible (Puranjay Mohan) [task:442356] {CVE-2025-21728}
  - fbdev: sisfb: Fix strbuf array overflow (Andrey Shumilin) [task:387561] {CVE-2024-50180}
  - iio: accel: mma8452: use the correct logic to get mma8452_data (Haibo Chen) [task:440788] {CVE-2022-49285}
  - drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init (Miaoqian Lin) [task:440488] {CVE-2022-49462}
  - drm/msm/a6xx: Rename a6xx_gmu_probe to a6xx_gmu_init (Sean Paul) [task:440488]
  - ext4: fix off-by-one error in do_split (Artem Sadovnikov) [task:460184] {CVE-2025-23150}
  - btrfs: fix inode list leak during backref walking at find_parent_nodes() (Filipe Manana) [task:460298] {CVE-2022-49913}
  - Btrfs: preftree: use rb_first_cached (Liu Bo) [task:460298]
  - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() (Ashish Kalra) [task:460284] {CVE-2022-49885}
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Yajun Deng) [task:459707] {CVE-2023-53034}
  - f2fs: fix to do sanity check on total_data_blocks (Chao Yu) [task:440482] {CVE-2022-49360}
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del (Luiz Augusto von Dentz) [task:450217]
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (Luiz Augusto von Dentz) [task:450217] {CVE-2025-21969}
  - PCI: phytium: Add hotplug and hotreset workaround patch for phytium SoCs (huhai) [task:477347]
  - crypto: null - Use spin lock instead of mutex (Herbert Xu) [task:461960] {CVE-2025-37808}
  - crypto: null - Remove VLA usage of skcipher (Kees Cook) [task:461960]
  - crypto: skcipher - Set tfm in SYNC_SKCIPHER_REQUEST_ON_STACK (Herbert Xu) [task:461960]
  - crypto: skcipher - Introduce crypto_sync_skcipher (Kees Cook) [task:461960]
  - iommu: smmuv3: Not print information of SMMU 0x10 event (huhai) [task:477347]
  - drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table (Charles Han) [task:497273] {CVE-2025-38319}
  - bpf: Annotate bpf_long_memcpy with data_race (Daniel Borkmann) [task:494931] {CVE-2023-52521}
  - bpf, sockmap: Avoid using sk_socket after free when sending (Jiayuan Chen) [task:491315] {CVE-2025-38154}
  - KVM: Don't null dereference ops->destroy (Alexey Kardashevskiy) [task:440631] {CVE-2022-49568}
  - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var (Murad Masimov) [task:491907] {CVE-2025-38214}
  - bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO (Kumar Kartikeya Dwivedi) [task:481763] {CVE-2022-49961}
  - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Youngjun Lee) [task:495947] {CVE-2025-38249}
  - net: hns3: fix incorrect components info of ethtool --reset command (Jie Wang) [bug:367889]
  - net: hns3: add support for triggering reset by ethtool (Yufeng Mo) [bug:367889]
  - smb: client: Fix use-after-free in cifs_fill_dirent (Wang Zhaolong) [task:482229] {CVE-2025-38051}
  - scsi: megaraid_sas: Fix invalid node index (Chen Yu) [task:495933] {CVE-2025-38239}
  - jfs: validate AG parameters in dbMount() to prevent crashes (Vasiliy Kovalev) [task:491929] {CVE-2025-38230}
  - fs/jfs: consolidate sanity checking in dbMount (Dave Kleikamp) [task:491929]
  - jfs: add sanity check for agwidth in dbMount (Edward Adam Davis) [task:491929]
  - net_sched: sch_sfq: move the limit validation (Octavian Purdila) [task:440591]
  - net_sched: sch_sfq: don't allow 1 packet limit (Octavian Purdila) [task:440591] {CVE-2024-57996}
  - net_sched: sch_sfq: handle bigger packets (Eric Dumazet) [task:440591]
  - vgacon: Add check for vc_origin address range in vgacon_scroll() (GONG Ruiqi) [task:491959] {CVE-2025-38213}
  - net: openvswitch: Fix the dead loop of MPLS parse (Faicker Mo) [task:492665] {CVE-2025-38146}
  - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). (Kuniyuki Iwashima) [task:495937] {CVE-2025-38245}
  - seg6: Fix validation of nexthop addresses (Ido Schimmel) [task:497745] {CVE-2025-38310}
  - ZHAOXIN: pmu: disable events/zhaoxin/uncore (leoliu-oc) [bug:353063]
  - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() (Sergey Shtylyov) [task:497753] {CVE-2025-38312}
  - media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (Wentao Liang) [task:494929] {CVE-2025-38237}
  - jffs2: check jffs2_prealloc_raw_node_refs() result in few other places (Fedor Pchelkin) [task:497135] {CVE-2025-38328}
  - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). (Kuniyuki Iwashima) [task:497287] {CVE-2025-38324}
  - fbcon: Make sure modelist not set on unregistered console (Kees Cook) [task:491975] {CVE-2025-38198}
  - fbcon: Introduce wrapper for console->fb_info lookup (Daniel Vetter) [task:491975]
  - wifi: ath9k_htc: Abort software beacon handling if disabled (Toke Høiland-Jørgensen) [task:491657] {CVE-2025-38157}
  - xen/privcmd: fix error exit of privcmd_ioctl_dm_op() (Juergen Gross) [task:482077] {CVE-2022-49989}
  - aoe: clean device rq_list in aoedev_downdev() (Justin Sanders) [task:497277] {CVE-2025-38326}
  - crypto: hisilicon/sec - don't sleep when in softirq (Zhengchao Shao) [task:481943] {CVE-2022-50171}
  - net: clear the dst when changing skb protocol (Jakub Kicinski) [task:492357] {CVE-2025-38192}
  - bpf: update skb->protocol in bpf_skb_net_grow (Willem de Bruijn) [task:492357]
  - of: check previous kernel's ima-kexec-buffer against memory bounds (Vaibhav Jain) [task:482053] {CVE-2022-50159}
  - arm64/machine_t: Add Soc-id Judgment for the S5000C series. (tanze) [task:489537]
  - set linkdata NIC to y in x86, arm and loongarch (YANGANG) [task:449997]
  - LINKDATA: SXE: add support for linkdata sxe NIC (YANGANG) [task:449997]
  - ax25: Remove broken autobind (Murad Masimov) [task:459548] {CVE-2025-22109}
  - udp: Fix memory accounting leak. (Kuniyuki Iwashima) [task:459933] {CVE-2025-22058}
  - ibmvnic: Use kernel helpers for hex dumps (Nick Child) [task:459569] {CVE-2025-22104}
  - pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() (Josh Poimboeuf) [task:462579] {CVE-2025-37850}
  - ext4: fix BUG_ON() when directory entry has invalid rec_len (Luís Henriques) [task:460128] {CVE-2022-49879}
  - ext4: refactor initialize_dirent_tail() (Theodore Ts'o) [task:460128]
  - ext4: rename "dirent_csum" functions to use "dirblock" (Theodore Ts'o) [task:460128]
  - ext4: fix OOB read when checking dotdot dir (Acs, Jakub) [task:458578] {CVE-2025-37785}
  - Bluetooth: use hdev->workqueue when queuing hdev->{cmd,ncmd}_timer works (Tetsuo Handa) [task:481991]
  - Bluetooth: When HCI work queue is drained, only queue chained work (Schspa Shi) [task:481991] {CVE-2022-50166}
  - Bluetooth: Add ncmd=0 recovery handling (Manish Mandlik) [task:481991]
  - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() (Liu Jian) [task:461321] {CVE-2023-53133}
  - bnxt: Do not read past the end of test names (Kees Cook) [task:448825] {CVE-2023-53010}
  - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). (Kuniyuki Iwashima) [task:492663] {CVE-2025-38181}
  - genirq/affinity: Improve __irq_build_affinity_masks() (Ming Lei) [bug:341996, bug:350695]
  - xfs: split up the xfs_reflink_end_cow work into smaller transactions (Darrick J. Wong) [task:489411]
  - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (Terry Junge) [task:491897] {CVE-2025-38103}
  - HID: hyperv: Correctly access fields declared as __le16 (Michael Kelley) [task:491897]
  - bpf: fix ktls panic with sockmap (Jiayuan Chen) [task:492661] {CVE-2025-38166}
  - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (Haixia Qu) [task:492195] {CVE-2025-38184}
  - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Kefeng Wang) [task:448807] {CVE-2023-52939}
  - bpf: track changes_pkt_data property for global functions (Eduard Zingerman) [task:461065] {CVE-2024-58098}
  - bpf: add find_containing_subprog() utility function (Eduard Zingerman) [task:461065]
  - bpf: use bitfields for simple per-subprog bool flags (Andrii Nakryiko) [task:461065]
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (Henry Martin) [task:461952] {CVE-2025-37830}
  - perf python: Convert tracepoint.py example to python3 (Tanu M) [task:488387]
  - PHYTIUM: PCI: Add ACS quirk for phytium root and switch ports (leixiang) [task:477923]
  - net: ch9200: fix uninitialised access during mii_nway_restart (Qasim Ijaz) [task:486337] {CVE-2025-38086}
  - ocfs2: fix data corruption after failed write (Jan Kara via Ocfs2-devel) [task:461083] {CVE-2023-53081}
  - ext4: update s_journal_inum if it changes after journal replay (Baokun Li) [task:461218] {CVE-2023-53091}
  - jbd2: remove wrong sb->s_sequence check (Jan Kara) [task:462570] {CVE-2025-37839}
  - scsi: target: Fix WRITE_SAME No Data Buffer crash (Mike Christie) [task:463324] {CVE-2022-21546}
  - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) (Alexander Lobakin) [task:482165] {CVE-2022-50093}
  - virtio-gpu: fix a missing check to avoid NULL dereference (Xiaomeng Tong) [task:481883] {CVE-2022-50181}
  - bpf, cgroup: Fix kernel BUG in purge_effective_progs (Pu Lehui) [task:482137]
  - bpf: Fix KASAN use-after-free Read in compute_effective_progs (Tadeusz Struk) [task:482137] {CVE-2022-50219}
  - bpf, netns: Handle multiple link attachments (Jakub Sitnicki) [task:482137]
  - bpf: fix potential 32-bit overflow when accessing ARRAY map element (Andrii Nakryiko) [task:482217] {CVE-2022-50167}
  - net: stmmac: fix notifier registration (Aaro Koskinen) [bug:370375]
  - perf: Fix pmu_filter_match() (Peter Zijlstra) [task:464493]
  - nfsd: decrease sc_count directly if fail to queue dl_recall (Li Lingfeng) [task:459566]
  - nfsd: put dl_stid if fail to queue dl_recall (Li Lingfeng) [task:459566] {CVE-2025-22025}
  - nfsd: make nfsd4_run_cb a bool return function (Jeff Layton) [task:459566]
  - jfs: reject on-disk inodes of an unsupported type (Dmitry Antipov) [task:459660] {CVE-2025-37925}
  - dlm: prevent NPD when writing a positive value to event_done (Thadeu Lima de Souza Cascardo) [task:459658] {CVE-2025-23131}
  - ocfs2: validate l_tree_depth to avoid out-of-bounds access (Vasiliy Kovalev) [task:459623] {CVE-2025-22079}
  - jfs: add check read-only before txBeginAnon() call (Vasiliy Kovalev) [task:459938] {CVE-2024-58095}
  - nvmet-tcp: don't restore null sk_state_change (Alistair Francis) [task:481811] {CVE-2025-38035}
  - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (Al Viro) [task:482067] {CVE-2025-38058}
  - scsi: iscsi: Fix HW conn removal use after free (Mike Christie) [task:482545] {CVE-2022-50031}
  - scsi: target: iscsi: Fix timeout on deleted connection (Dmitry Bogdanov) [task:482265] {CVE-2025-38075}
  - ALSA: pcm: Fix race of buffer access at PCM OSS layer (Takashi Iwai) [task:482035] {CVE-2025-38078}
  - virtio_net: fix memory leak inside XPD_TX with mergeable (Xuan Zhuo) [task:482159] {CVE-2022-50065}
  - Revert "virtio_net: enable napi_tx by default" (Tang Longjun) [task:476739]
  - media: dvb-core: Fix use-after-free on race condition at dvb_frontend (Hyunwoo Kim) [task:478283] {CVE-2022-45885}
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo (Silvano Seva) [task:466609] {CVE-2025-37970}
  - nilfs2: protect access to buffers with no active references (Ryusuke Konishi) [task:441315] {CVE-2025-21811}
  - iio: pressure: zpa2326: fix information leak in triggered buffer (Javier Carrasco) [task:426431] {CVE-2024-57912}
  - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (Javier Carrasco) [task:426437] {CVE-2024-57911}
  - iio: imu: kmx61: fix information leak in triggered buffer (Javier Carrasco) [task:426324] {CVE-2024-57908}
  - jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal) [task:419633] {CVE-2024-56598}
  - udf: fix uninit-value use in udf_get_fileshortad (Gianfranco Trad) [task:387577] {CVE-2024-50143}
  - f2fs: fix to check atomic_file in f2fs ioctl interfaces (Chao Yu) [task:375569] {CVE-2024-49859}
  - nfc: fdp: Fix potential memory leak in fdp_nci_send() (Shang XiaoJing) [task:460238] {CVE-2022-49924}
  - net/mlx5: Fix steering rules cleanup (Lama Kayal) [task:461036] {CVE-2023-53079}
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Ryo Takakura) [task:460254] {CVE-2025-23161}
  - bpf: consider that tail calls invalidate packet pointers (Eduard Zingerman) [task:461040] {CVE-2024-58237}
  - bpf: refactor bpf_helper_changes_pkt_data to use helper number (Eduard Zingerman) [task:461040]
  - iio: light: opt3001: fix deadlock due to concurrent flag access (Luca Ceresoli) [task:466236] {CVE-2025-37968}
  - mm/gup: Remove enfornced COW mechanism (Peter Xu) [task:446992]
  - net: tls: explicitly disallow disconnect (Jakub Kicinski) [task:460146] {CVE-2025-37756}
  - HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX (Tomasz Pakuła) [task:466581] {CVE-2025-37942}
  - HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc (Zhang Lixu) [task:461023]
  - HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (Reka Norman) [task:461023] {CVE-2023-53039}
  - devm-helpers: Add resource managed version of work init (Matti Vaittinen) [task:461023]
  - devm-helpers: Fix devm_delayed_work_autocancel() kerneldoc (Matti Vaittinen) [task:461023]
  - workqueue: Add resource managed version of delayed work init (Matti Vaittinen) [task:461023]
  - xsk: Add missing overflow check in xdp_umem_reg (Kal Conley) [task:460911] {CVE-2023-53080}
  - xsk: Fix number of pinned pages/umem size discrepancy (Björn Töpel) [task:460911]
  - net/xdp: use shift instead of 64 bit division (Pavel Machek) [task:460911]
  - net: usb: lan78xx: Limit packet length to skb->len (Szymon Heidrich) [task:461084] {CVE-2023-53068}
  - net: ena: Fix error handling in ena_init() (Yuan Can) [task:460204] {CVE-2022-49813}
  - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (Shang XiaoJing) [task:460177] {CVE-2022-49923}
  - NFC: nxp-nci: remove unnecessary labels (wengjianfeng) [task:460177]
  - btrfs: do not clean up repair bio if submit fails (Josef Bacik) [task:440526] {CVE-2022-49168}
  - nilfs2: handle errors that nilfs_prepare_chunk() may return (Ryusuke Konishi) [task:440497] {CVE-2025-21721}
  - nilfs2: eliminate staggered calls to kunmap in nilfs_rename (Ryusuke Konishi) [task:440497]
  - nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link (Ryusuke Konishi) [task:440497]
  - nilfs2: fix potential deadlock with newly created symlinks (Ryusuke Konishi) [task:387559] {CVE-2024-50229}
  - HID: ignore non-functional sensor in HP 5MP Camera (Chia-Lin Kao (AceLan)) [task:450748] {CVE-2025-21992}
  - RDMA/hns: Fix soft lockup during bt pages loop (Junxian Huang) [task:452502] {CVE-2025-22010}
  - scsi: pm8001: Fix tag leaks on error (Damien Le Moal) [task:440565] {CVE-2022-49121}
  - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails (Nikolay Aleksandrov) [task:461063] {CVE-2023-53103}
  - bonding: Fix memory leak when changing bond type to Ethernet (Ido Schimmel) [task:461063]
  - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change (Nikolay Aleksandrov) [task:461063]
  - bpf: Scrub packet on bpf_redirect_peer (Paul Chaignon) [task:466592] {CVE-2025-37959}
  - uprobes: Reject the shared zeropage in uprobe_write_opcode() (Tong Tiangen) [task:448833] {CVE-2025-21881}
  - module: ensure that kobject_put() is safe for module type kobjects (Dmitry Antipov) [task:471773] {CVE-2025-37995}
  - RDMA/core: Silence oversized kvmalloc() warning (Shay Drory) [task:462568] {CVE-2025-37867}
  - net/9p: use a dedicated spinlock for trans_fd (Dominique Martinet) [task:460118] {CVE-2022-49765}
  - scsi: hisi_sas: Add cond_resched() for no forced preemption model (Yihang Li) [task:429513] {CVE-2024-56589}
  - ibmvnic: Don't reference skb after sending to VIOS (Nick Child) [task:444126] {CVE-2025-21855}
  - 9p/net: fix improper handling of bogus negative read/write replies (Dominique Martinet) [task:462564] {CVE-2025-37879}
  - 9pnet: allow making incomplete read requests (Sergey Alirzaev) [task:462564]
  - PCI: Fix reference leak in pci_register_host_bridge() (Ma Ke) [task:462406] {CVE-2025-37836}
  - tracing: Fix wild-memory-access in register_synth_event() (Shang XiaoJing) [task:460168] {CVE-2022-49799}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.26.v2401
changelog:
  - net: drop bad gso csum_start and offset in virtio_net_hdr (Willem de Bruijn) [task:534195]
  - net: missing check virtio (Denis Arefev) [task:534195]
  - fix kabi issue for "net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation" (xiaolinkui) [task:534195]
  - net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation (Willem de Bruijn) [task:534195]
  - net: group skb_shinfo zerocopy related bits together. (Jonathan Lemon) [task:534195]
  - netfilter: nf_tables: fix nat hook table deletion (Florian Westphal) [task:534199]
  - net: hsr: Add VLAN support (WingMan Kwok) [task:534197]
  - RDMA/nl: Do not permit empty devices names during RDMA_NLDEV_CMD_NEWLINK/SET (Jason Gunthorpe) [task:534193]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.27.v2401
changelog:
  - thirdly update changelog for incoming 4.19.90-89.27.v2401 (Zhengyuan Liu)
  - net: tighten bad gso csum offset check in virtio_net_hdr (Willem de Bruijn) [task:541407]
  - Revert "LoongArch: Remove shm_align_mask and use SHMLBA (duanchenghao) [task:541467]
  - Revert "mm/mmap: teach generic_get_unmapped_area{_topdown} to handle hugetlb mappings" (duanchenghao) [task:541467]
  - Revert "LoongArch: Set hugetlb mmap base address aligned with pmd size" (duanchenghao) [task:541467]
  - Revert "LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE" (duanchenghao) [task:541467]
  - mm: ksize() should silently accept a NULL pointer (William Kucharski) [task:434197, bug:423829]
  - mm/slab.c: fix kernel-doc warning for __ksize() (Randy Dunlap) [task:434197, bug:423829]
  - mm/kasan: add object validation in ksize() (Marco Elver) [task:434197, bug:423829]
  - mm/slab: refactor common ksize KASAN logic into slab_common.c (Marco Elver) [task:434197, bug:423829]
  - mm/kasan: change kasan_check_{read,write} to return boolean (Marco Elver) [task:434197, bug:423829]
  - mm/kasan: introduce __kasan_check_{read,write} (Marco Elver) [task:434197, bug:423829]
  - LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE (Huacai Chen) [task:541467]
  - RDMA/srpt: Fix a use-after-free (Bart Van Assche) [task:482173] {CVE-2022-50129}
  - bpf, verifier: Fix memory leak in array reallocation for stack state (Kees Cook) [task:434197]
  - secondly update changelog for incoming 4.19.90-89.27.v2401 (Zhengyuan Liu)
  - linux/virtio_net.h: Support USO offload in vnet header. (Andrew Melnychenko) [task:534195]
  - net: accept UFOv6 packages in virtio_net_hdr_to_skb (Willem de Bruijn) [task:534195]
  - net: check if protocol extracted by virtio_net_hdr_set_proto is correct (Balazs Nemeth) [task:534195]
  - ALSA: hda: Manage concurrent reg access more properly (Takashi Iwai) [task:221568]
  - media: venus: hfi_parser: add check to avoid out of bound access (Vikash Garodia) [task:460230] {CVE-2025-23157}
  - media: venus: hfi_parser: Add check to keep the number of codecs within range (Vikash Garodia) [task:460230]
  - bpf: Fix accesses to uninit stack slots (Andrei Matei) [task:434197, task:525023]
  - bpf: verifier: Improve function state reallocation (Lorenz Bauer) [task:434197, task:525023]
  - mm: slab: provide krealloc_array() (Bartosz Golaszewski) [task:434197, task:525023]
  - wifi: prevent A-MSDU attacks in mesh networks (Mathy Vanhoef) [task:519717] {CVE-2025-38512}
  - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Leon Romanovsky) [task:214146] {CVE-2024-26907}
  - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ (Alexey Dobriyan) [task:214146]
  - stddef: Introduce DECLARE_FLEX_ARRAY() helper (Kees Cook) [task:214146]
  - tls: stop recv() if initial process_rx_list gave us non-DATA (Sabrina Dubroca) [task:522807] {CVE-2024-58239}
  - tls: rx: drop pointless else after goto (Jakub Kicinski) [task:522807]
  - tls: rx: jump to a more appropriate label (Jakub Kicinski) [task:522807]
  - net: bridge: use DEV_STATS_INC() (Eric Dumazet) [task:207281] {CVE-2023-52578}
  - wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() (Dan Carpenter) [task:520535]
  - iwlwifi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang) [task:520535] {CVE-2025-38602}
  - bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots (Tao Lyu) [task:532401]
  - bpf: fix check for attempt to corrupt spilled pointer (Andrii Nakryiko) [task:532401] {CVE-2023-52462}
  - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Dmitry Torokhov) [bug:407309]
  - bpf: Move skb->len == 0 checks into __bpf_redirect (Stanislav Fomichev) [task:328841]
  - net/af_packet: check len when min_header_len equals to 0 (Zhengchao Shao) [task:328841]
  - bpf: Don't redirect packets with invalid pkt_len (Zhengchao Shao) [task:328841]
  - net: fix refcount bug in sk_psock_get (2) (Hawkins Jiawei) [task:218801]
  - net, sk_msg: Don't use RCU_INIT_POINTER on sk_user_data (Jakub Sitnicki) [task:218801]
  - net, sk_msg: Clear sk_user_data pointer on clone if tagged (Jakub Sitnicki) [task:218801]
  - scsi: libsas: Abort all in-flight requests when device is gone (Jason Yan) [bug:408215, task:537245]
  - drm/amdgpu: install stub fence into potential unused fence pointers (Lang Yu) [task:531789, task:534643] {CVE-2023-53248}
  - dma-buf: add dma_fence_get_stub (Christian König) [task:531789, task:534643]
  - udf: Fix uninitialized array access for some pathnames (Jan Kara) [task:373027, task:534643]
  - ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (Li Zhong) [task:532227, task:534643] {CVE-2022-50327}
  - IB/mlx5: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov) [task:533505]
  - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (Adham Faris) [task:533505]
  - net/mlx5: Fix spelling mistake "syndrom" -> "syndrome" (Colin Ian King) [task:533505]
  - net/mlx5e: Correctly report errors for ethtool rx flows (Cosmin Ratiu) [task:533505]
  - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (Carolina Jubran) [task:533505]
  - net/mlx5: Fix fw tracer first block check (Moshe Shemesh) [task:533505]
  - net/mlx5: improve some comments (Hu Haowen) [task:533505]
  - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() (Yuanjun Gong) [task:533505]
  - ceph: take snap_empty_lock atomically with snaprealm refcount change (Jeff Layton) [task:530217]
  - net: Fix TOCTOU issue in sk_is_readable() (Michal Luczaj) [task:491659] {CVE-2025-38112}
  - net/mlx5e: Fix cleanup null-ptr deref on encap lock (Paul Blakey) [task:461217] {CVE-2023-53105}
  - sctp: initialize more fields in sctp_v6_from_sk() (Eric Dumazet) [task:532203] {CVE-2025-39812}
  - fs: writeback: fix use-after-free in __mark_inode_dirty() (Jiufei Xue) [task:534347] {CVE-2025-39866}
  - writeback: Fix inode->i_io_list not be protected by inode->i_lock error (Jchao Sun) [task:534347]
  - wifi: mac80211_hwsim: drop short frames (Johannes Berg) [task:532575] {CVE-2023-53321}
  - netfilter: x_tables: fix percpu counter block leak on error path when creating new netns (Pavel Tikhomirov) [task:531791] {CVE-2023-53200}
  - selinux: fix cred stacking bug (penghuaihe) [task:490643]
  - security: support bpf hooks stacking (penghuaihe) [task:490643]
  - drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() (Hangyu Hua) [task:440742] {CVE-2022-49644}
  - skbuff: skb_segment, Call zero copy functions before using skbuff frags (Mohamed Khalfella) [task:532803] {CVE-2023-53354}
  - modpost: fix off by one in is_executable_section() (Dan Carpenter) [task:534137] {CVE-2023-53397}
  - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() (Yang Yingliang) [task:532165] {CVE-2022-50246}
  - RDMA/bnxt_re: wraparound mbox producer index (Kashyap Desai) [task:531719] {CVE-2023-53201}
  - drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug (K Prateek Nayak) [task:532209]
  - cacheinfo: Fix shared_cpu_map to handle shared caches at different levels (Yong-Xuan Wang) [task:532209] {CVE-2023-53254}
  - cacheinfo: Align checks in cache_shared_cpu_map_{setup,remove} for readability (Sudeep Holla) [task:532209]
  - cacheinfo: Add helper to access any cache index for a given CPU (Sudeep Holla) [task:532209]
  - comedi: pcl812: Fix bit shift out of bounds (Ian Abbott) [task:519689] {CVE-2025-38530}
  - blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (Li Jinlin) [task:530285]
  - Revert "blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd" (cuitao) [task:530285]
  - blkcg: Fix multiple bugs in blkcg_activate_policy() (Tejun Heo) [task:530285]
  - blkcg: pass @q and @blkcg into blkcg_pol_alloc_pd_fn() (Tejun Heo) [task:530285]
  - comedi: aio_iiro_16: Fix bit shift out of bounds (Ian Abbott) [task:519361] {CVE-2025-38529}
  - tee: fix NULL pointer dereference in tee_shm_put (Pei Xiao) [task:534351] {CVE-2025-39865}
  - af_unix: Fix data-races around user->unix_inflight. (Kuniyuki Iwashima) [task:532219] {CVE-2023-53204}
  - net: sched: sfb: fix null pointer access issue when sfb_init() fails (Zhengchao Shao) [task:532833] {CVE-2022-50356}
  - KVM: SVM: Fix vgif feature not enabled (张浩) [task:532315]
  - driver: base: fix UAF when driver_attach failed (Schspa Shi) [task:440534] {CVE-2022-49385}
  - bpf: Reject narrower access to pointer ctx fields (Paul Chaignon) [task:520583] {CVE-2025-38591}
  - ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (Haoxiang Li) [task:523425] {CVE-2025-38664}
  - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle (Chen Zhongjin) [task:531315] {CVE-2023-53250}
  - drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (Ivan Stepchenko) [task:442357] {CVE-2024-58052}
  - drm/amdgpu: fix usage slab after free (Vitaly Prosyak) [task:429491] {CVE-2024-56551}
  - drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again (shaoyunl) [task:225612] {CVE-2021-47551}
  - drm/amdkfd: don't use dqm lock during device reset/suspend/resume (Philip Yang) [task:225612]
  - drm/i915/selftests: fix subtraction overflow bug (Andrzej Hajda) [task:440726] {CVE-2022-49635}
  - tcp: Add sysctl to configure ephemeral port shuffle period for connect() (luoxuanqiang) [task:522905]
  - tcp: Add sysctl to control port randomization in __inet_hash_connect() (Xuanqiang Luo) [task:522905]
  - PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 (Werner Sembach) [task:442591] {CVE-2025-21831}
  - x86/PCI: Avoid PME from D3hot/D3cold for AMD Rembrandt and Phoenix USB4 (Mario Limonciello) [task:442591]
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (Lucy Thrun) [task:530189] {CVE-2025-39751}
  - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (Soenke Huster) [task:440402] {CVE-2022-49139}
  - ALSA: seq: oss: Send fragmented SysEx messages immediately (Takashi Iwai) [task:429534] {CVE-2024-57893}
  - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() (Zhang Shurong) [task:532109] {CVE-2023-53220}
  - ipv6: sr: Fix MAC comparison to be constant-time (Eric Biggers) [task:527963] {CVE-2025-39702}
  - net/sched: Fix backlog accounting in qdisc_dequeue_internal (William Liu) [task:527995] {CVE-2025-39677}
  - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Dan Carpenter) [task:530193]
  - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Takashi Iwai) [task:530193] {CVE-2025-39757}
  - tracing: Add down_write(trace_event_sem) when adding trace event (Steven Rostedt) [task:520111] {CVE-2025-38539}
  - jbd2: prevent softlockup in jbd2_log_do_checkpoint() (Baokun Li) [task:527509]
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Takashi Iwai) [task:527383] {CVE-2025-38729}
  - ipv6: fix possible infinite loop in fib6_info_uses_dev() (Eric Dumazet) [task:520571] {CVE-2025-38587}
  - wifi: mac80211: reject TDLS operations when station is not associated (Moon Hee Lee) [task:523365] {CVE-2025-38644}
  - srcu: Tighten cleanup_srcu_struct() GP checks (Paul E. McKenney) [task:440484] {CVE-2022-49651}
  - tcp: also NULL skb->dev when copy was needed (Florian Westphal) [task:526817]
  - tcp: ensure skb->dev is NULL before leaving TCP stack (Eric Dumazet) [task:526817]
  - net: 9p: fix refcount leak in p9_read_work() error handling (Hangyu Hua) [task:482233] {CVE-2022-50114}
  - net_sched: Flush gso_skb list too during ->change() (Cong Wang) [task:476201] {CVE-2025-37992}
  - openvswitch: Fix unsafe attribute parsing in output_userspace() (Eelco Chaudron) [task:471767] {CVE-2025-37998}
  - config/x86: enable CONFIG_DRM_PHYTIUM (Shixiong Ou) [task:522397]
  - net/packet: fix a race in packet_set_ring() and packet_notifier() (Quang Le) [task:523421] {CVE-2025-38617}
  - f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (Chao Yu) [task:520783] {CVE-2025-38578}
  - iavf: Fix reset error handling (Przemyslaw Patynowski) [task:482117] {CVE-2022-50053}
  - io_uring: prevent opcode speculation (Pavel Begunkov) [task:444117] {CVE-2025-21863}
  - Remove sensitive words (Haofeng Li) [task:524133]
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [task:503861] {CVE-2025-38352}
  - block/blk-throttle: Fix spinlock corruption when skipping throttling (Yang Xiuwei) [task:512445]
  - vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic) [task:523419] {CVE-2025-38618}
  - REDHAT: spec: Fix internal "File listed twice" errors (Prarit Bhargava) [task:506475]
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Jann Horn) [task:486335] {CVE-2025-38085}
  - net/sched: Restrict conditions for adding duplicating netems to qdisc tree (William Liu) [task:520771] {CVE-2025-38553}
  - update changelog for incoming 4.19.90-89.27.v2401 (Zhengyuan Liu)
  - media: xc2028: avoid use-after-free in load_firmware_cb() (Chi Zhiling) [task:219526]
  - can: bcm: Fix UAF in bcm_proc_show() (YueHaibing) [task:371789]
  - usb: gadget: configfs: Fix OOB read on empty string write (Xinyu Liu) [task:507017, task:516901] {CVE-2025-38497}
  - arm64: paravirt: Use RCU read locks to guard stolen_time (Prakruthi Deepak Heragu) [task:516941]
  - arm64: paravirt: Initialize steal time when cpu is online (Andrew Jones) [task:516941]
  - arm64: Retrieve stolen time as paravirtualized guest (Steven Price) [task:516941]
  - KVM: arm64: Provide VCPU attributes for stolen time (Steven Price) [task:516941]
  - KVM: Allow kvm_device_ops to be const (Steven Price) [task:516941]
  - KVM: arm64: Support stolen time reporting via shared structure (Steven Price) [task:516941]
  - KVM: arm64: Implement PV_TIME_FEATURES call (Steven Price) [task:516941]
  - KVM: arm64: Document PV-time interface (Steven Price) [task:516941]
  - ia64: kprobes: Fix to pass correct trampoline address to the handler (Masami Hiramatsu) [task:485647]
  - ia64: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (Kuniyuki Iwashima) [task:495865] {CVE-2025-38250}
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching (Tengda Wu) [task:458968] {CVE-2025-22035}
  - udp: fix skb_copy_and_csum_datagram with odd segment sizes (Willem de Bruijn) [task:516751]
  - iov_iter: reduce code duplication (Al Viro) [task:516751]
  - iov_iter: teach csum_and_copy_to_iter() to handle pipe-backed ones (Al Viro) [task:516751]
  - security/lsm: Fix missing selinux file type (mengdehui) [task:506521]
  - driver/tpm: fix NULL err when creat vtpm (mengdehui) [task:519155]
  - kysec/ppro: Fix get paths that are not real paths (mengdehui) [bug:387337]
  - media: cxusb: no longer judge rbuf when the write fails (Edward Adam Davis) [task:491981] {CVE-2025-38229}
  - geneve: make sure to pull inner header in geneve_rx() (Eric Dumazet) [task:214140] {CVE-2024-26857}
  - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() (Eric Dumazet) [task:214149] {CVE-2024-26882}
  - net: ethernet: stmmac: fix write to sgmii_adapter_base (Dinh Nguyen) [task:441324]
  - net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link (Dinh Nguyen) [task:441324] {CVE-2022-49061}
  - gpio: prevent potential speculation leaks in gpio_device_get_desc() (Hagar Hemdan) [task:352677]
  - scsi: megaraid_sas: Make most module parameters static (Dr. David Alan Gilbert) [task:505377, task:522117]
  - megaraid_sas: don't set QUEUE_FLAG_NOMERGES (Christoph Hellwig) [task:505377, task:522117]
  - scsi: megasas: Stop using the SCSI pointer (Bart Van Assche) [task:505377, task:522117]
  - scsi: megaraid_sas: Add helper functions for irq_context (Sumit Saxena) [task:505377, task:522117]
  - scsi: megaraid_sas: Call scsi_done() directly (Bart Van Assche) [task:505377, task:522117]
  - scsi: core: Rename scsi_mq_done() into scsi_done() and export it (Bart Van Assche) [task:505377, task:522117]
  - scsi: megaraid_sas: Retry reads of outbound_intr_status reg (Shivasharan S) [task:505377, task:522117]
  - rpmbuild: The 4K compilation option was removed from rpmbuild. (lihaofeng) [task:490099]
  - Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken (Pedro Nishiyama) [task:491387] {CVE-2025-38099}
  - Bluetooth: Add quirk for broken READ_VOICE_SETTING (Pedro Nishiyama) [task:491387]
  - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (Luiz Augusto von Dentz) [task:491397] {CVE-2025-38117}
  - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (Alexis Lothoré) [task:491205] {CVE-2025-38126}
  - net: stmmac: Calculate CDC error only once (Kurt Kanzenbach) [task:491205]
  - net: stmmac: retain PTP clock time during SIOCSHWTSTAMP ioctls (Holger Assmann) [task:491205]
  - net: stmmac: Fix signed/unsigned wreckage (Thomas Gleixner) [task:491205]
  - net: stmmac: add timestamp correction to rid CDC sync error (Voon Weifeng) [task:491205]
  - net: stmmac: Get correct timestamp values from XGMAC (Jose Abreu) [task:491205]
  - net: stmmac: fix ptp timestamping on Rx on gmac4 (Ilias Apalodimas) [task:491205]
  - net: stmmac: implement the SIOCGHWTSTAMP ioctl (Artem Panfilov) [task:491205]
  - mtk-sd: reset host->mrq on prepare_data() error (Sergey Senozhatsky) [task:505919]
  - mtk-sd: Prevent memory corruption from DMA map failure (Masami Hiramatsu (Google)) [task:505919] {CVE-2025-38401}
  - mmc: mediatek: use data instead of mrq parameter from msdc_{un}prepare_data() (Yue Hu) [task:505919]
  - mmc: mediatek: fix SDIO IRQ detection issue (jjian zhou) [task:505919]
  - mmc: bcm2835: Drop pointer to mmc_host from bcm2835_host (Lukas Wunner) [task:505919]
  - panic: implement nmi_panic_self_stop function for KunPeng 920 (liqiang01) [task:515025]
  - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (Xiang Mei) [task:507039]
  - net/sched: sch_qfq: Fix race condition on qfq_aggregate (Xiang Mei) [task:507039] {CVE-2025-38477}
  - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Mark Zhang) [task:507033] {CVE-2025-38387}
  - nbd: fix race between timeout and normal completion (Ming Lei) [task:511239] {CVE-2024-49855}
  - btrfs: fix deadlock between quota enable and other quota operations (Filipe Manana) [task:510715, task:503849, task:463272]
  - LoongArch: Define the __io_aw() hook as mmiowb() (Huacai Chen) [task:221961] {CVE-2024-35818}
  - ipv6: mcast: add RCU protection to mld_newpack() (Eric Dumazet) [task:440273] {CVE-2025-21758}
  - ndisc: extend RCU protection in ndisc_send_skb() (Eric Dumazet) [task:440599] {CVE-2025-21760}
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (Eric Dumazet) [task:440498] {CVE-2025-21761}
  - ndisc: use RCU protection in ndisc_alloc_skb() (Eric Dumazet) [task:440498]
  - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() (Eric Dumazet) [task:440498]
  - mld: avoid unnecessary high order page allocation in mld_newpack() (Taehee Yoo) [task:440273]
  - KVM: async_pf: Cleanup kvm_setup_async_pf() (Vitaly Kuznetsov) [task:511433]
  - fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var (Murad Masimov) [task:491927] {CVE-2025-38215}
  - cpufreq: governor: Use kobject release() method to free dbs_data (Kevin Hao) [task:440528] {CVE-2022-49513}
  - cpufreq: Move to_gov_attr_set() to cpufreq.h (Kevin Hao) [task:440528]
  - driver core: fix deadlock in __device_attach (Zhang Wensheng) [task:441300] {CVE-2022-49371}
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [task:425040] {CVE-2024-57884}
  - sw_64: kprobes: Use generic kretprobe trampoline handler (Feng Yang) [task:510463]
  - block: don't allow the same type rq_qos add more than once (Jinke Han) [task:482125] {CVE-2022-50086}
  - dm thin: fix use-after-free crash in dm_sm_register_threshold_callback (Luo Meng) [task:481813] {CVE-2022-50092}
  - jfs: fix array-index-out-of-bounds read in add_missing_indices (Aditya Dutt) [task:491905] {CVE-2025-38204}
  - net: lan743x: Fix memleak issue when GSO enabled (Thangaraj Samynathan) [task:466617] {CVE-2025-37909}
  - lan743x: fix endianness when accessing descriptors (Alexey Denisov) [task:466617]
  - lan743x: fix rx_napi_poll/interrupt ping-pong (Sven Van Asbroeck) [task:466617]
  - lan743x: remove redundant initialization of variable current_head_index (Colin Ian King) [task:466617]
  - lan743x: remove redundant assignment to variable rx_process_result (Colin Ian King) [task:466617]
  - wifi: iwlwifi: don't warn when if there is a FW error (Miri Korenblit) [task:491311] {CVE-2025-38096}
  - ipvs: fix uninit-value for saddr in do_output_route4 (Julian Anastasov) [task:466487] {CVE-2025-37961}
  - sch_htb: make htb_qlen_notify() idempotent (Cong Wang) [task:466415] {CVE-2025-37932}
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w (Shruti Parab) [task:466237] {CVE-2025-37911}
  - net: atlantic: fix aq_vec index out of range error (Chia-Lin Kao (AceLan)) [task:481741] {CVE-2022-50066}
  - scsi: zfcp: Fix double free of FSF request when qdio send fails (Benjamin Block) [task:460278] {CVE-2022-49789}
  - dm cache: prevent BUG_ON by blocking retries on failed device resumes (Ming-Hung Tsai) [task:481765] {CVE-2025-38066}
  - net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (Peter Seiderer) [task:481989] {CVE-2025-38061}
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Shin'ichiro Kawasaki) [task:492667] {CVE-2025-38211}
  - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private (Weihang Li) [task:492667]
  - neighbour: use RCU protection in __neigh_notify() (Eric Dumazet) [task:440628] {CVE-2025-21763}
  - neighbour: delete redundant judgment statements (Li Zetao) [task:440628]
  - ipv6: mcast: extend RCU protection in igmp6_send() (Eric Dumazet) [task:440728] {CVE-2025-21759}
  - rpl: Fix use-after-free in rpl_do_srh_inline(). (Kuniyuki Iwashima) [task:507049] {CVE-2025-38476}
  - f2fs: fix to do sanity check on sbi->total_valid_block_count (Chao Yu) [task:490963] {CVE-2025-38163}
  - Bluetooth: use memset avoid memory leaks (Minghao Chi (CGEL ZTE)) [task:439933] {CVE-2022-49116}
  - team: better TEAM_OPTION_TYPE_STRING validation (Eric Dumazet) [task:440782] {CVE-2025-21787}
  - net_sched: sch_sfq: reject invalid perturb period (Eric Dumazet) [task:491933] {CVE-2025-38193}
  - ice: fix Tx scheduler error handling in XDP callback (Michal Kubiak) [task:491665] {CVE-2025-38127}
  - kprobes: Make local functions static (Masami Hiramatsu) [task:485647]
  - kprobes: Free kretprobe_instance with RCU callback (Masami Hiramatsu) [task:485647]
  - kprobes: Remove NMI context check (Masami Hiramatsu) [task:485647]
  - loongarch: kprobes: Use generic kretprobe trampoline handler (Feng Yang) [task:485647]
  - sparc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - sh: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - s390: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - powerpc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - mips: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - arc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - arm64: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - arm: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - x86/kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - kprobes: Add generic kretprobe trampoline handler (Masami Hiramatsu) [task:485647]
  - atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (Yue Haibing) [task:505883] {CVE-2025-38458}
  - ipc: fix to protect IPCS lookups using RCU (Jeongjun Park) [task:491917] {CVE-2025-38212}
  - HID: core: ensure the allocated report buffer can contain the reserved report ID (Benjamin Tissoires) [task:507035] {CVE-2025-38495}
  - Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() (Kuniyuki Iwashima) [task:507031] {CVE-2025-38473}
  - usb: net: sierra: check for no status endpoint (Oliver Neukum) [task:507045] {CVE-2025-38474}
  - net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (William Liu) [task:507019] {CVE-2025-38468}
  - sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed (Waiman Long) [task:482073] {CVE-2022-50103}
  - Bluetooth: btrtl: Prevent potential NULL dereference (Dan Carpenter) [task:460185] {CVE-2025-37792}
  - ACPICA: Refuse to evaluate a method if arguments are missing (Rafael J. Wysocki) [task:505901] {CVE-2025-38386}
  - mtd: spinand: fix memory leak of ECC engine conf (Pablo Martin-Gomez) [task:505937] {CVE-2025-38384}
  - HID: core: do not bypass hid_hw_raw_request (Benjamin Tissoires) [task:507013] {CVE-2025-38494}
  - usb: typec: altmodes/displayport: do not index invalid pin_assignments (RD Babiera) [task:505909] {CVE-2025-38391}
  - perf: Fix sample vs do_exit() (Peter Zijlstra) [task:505889] {CVE-2025-38424}
  - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() (Tengda Wu) [task:497747] {CVE-2025-38320}
  - scsi: lpfc: Use memcpy() for BIOS version (Daniel Wagner) [task:497751] {CVE-2025-38332}
  - ftrace: Fix UAF when lookup kallsym after ftrace disabled (Ye Bin) [task:497283] {CVE-2025-38346}
  - atm: clip: Fix potential null-ptr-deref in to_atmarpd(). (Kuniyuki Iwashima) [task:505877] {CVE-2025-38460}
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (Zhu Yanjun) [task:482019] {CVE-2025-38024}
  - intel_th: Fix a resource leak in an error handling path (Christophe JAILLET) [task:482199] {CVE-2022-50143}
  - crypto: algif_hash - fix double free in hash_accept (Ivan Pravdin) [task:482127] {CVE-2025-38079}
  - btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (Goldwyn Rodrigues) [task:482133] {CVE-2025-38034}
  - intel_th: msu: Fix vmalloced buffers (Alexander Shishkin) [task:482209] {CVE-2022-50142}
  - intel_th: msu: Get rid of the window size limit (Alexander Shishkin) [task:482209]
  - mm/vmscan: don't try to reclaim hwpoison folio (Jinjiang Tu) [task:461947] {CVE-2025-37834}
  - libnvdimm/labels: Fix divide error in nd_label_data_init() (Robert Richter) [task:482039] {CVE-2025-38072}
  - nvdimm: Split label init out from the logic for getting config data (Alexander Duyck) [task:482039]
  - libnvdimm, dimm: Maximize label transfer size (Dan Williams) [task:482039]
  - block: fix resource leak in blk_register_queue() error path (Zheng Qixing) [task:466601] {CVE-2025-37980}
  - jffs2: check that raw node were preallocated before writing summary (Artem Sadovnikov) [task:491885] {CVE-2025-38194}
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (Fedor Pchelkin) [task:419629]
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Ignat Korchagin) [task:419629] {CVE-2024-56605}
  - drivers/rapidio/rio_cm.c: prevent possible heap overwrite (Andrew Morton) [task:488165] {CVE-2025-38090}
  - thunderbolt: Do not double dequeue a configuration request (Sergey Senozhatsky) [task:491861] {CVE-2025-38174}
  - can: bcm: add missing rcu read protection for procfs content (Oliver Hartkopp) [task:476361] {CVE-2025-38003}
  - can: bcm: add locking for bcm_op runtime updates (Oliver Hartkopp) [task:476359] {CVE-2025-38004}
  - efi: fix potential NULL deref in efi_mem_reserve_persistent (Anton Gusev) [task:448780] {CVE-2023-52976}
  - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (Evgenii Shatokhin) [task:425037] {CVE-2024-57889}
  - fbdev: omapfb: Add 'plane' value check (Leonid Arapov) [task:462582] {CVE-2025-37851}
  - usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() (Chenyuan Yang) [task:462584] {CVE-2025-37881}
  - mtd: rawnand: brcmnand: fix PM resume warning (Kamal Dasu) [task:462586] {CVE-2025-37840}
  - fs/jfs: Prevent integer overflow in AG size calculation (Rand Deeb) [task:462439] {CVE-2025-37858}
  - pm: cpupower: bench: Prevent NULL dereference on malloc failure (Zhongqiu Han) [task:462443] {CVE-2025-37841}
  - HID: pidff: Fix null pointer dereference in pidff_find_fields (Tomasz Pakuła) [task:462571] {CVE-2025-37862}
  - mcb: fix a double free bug in chameleon_parse_gdd() (Haoxiang Li) [task:461958] {CVE-2025-37817}
  - usb: dwc3: gadget: check that event count does not exceed event buffer length (Frode Isaksen) [task:461959] {CVE-2025-37810}
  - staging: rtl8712: fix uninit-value in usb_read8() and friends (Wang Cheng) [task:441328] {CVE-2022-49301}
  - staging: rtl8712: usb_ops.c: Remove leading p from variable names (Nishka Dasgupta) [task:441328]
  - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() (Zhang Shurong) [task:463860] {CVE-2023-53146}
  - mtd: inftlcore: Add error check for inftl_read_oob() (Wentao Liang) [task:466613] {CVE-2025-37892}
  - tracing: Fix oob write in trace_seq_to_buffer() (Jeongjun Park) [task:466608] {CVE-2025-37923}
  - arp: use RCU protection in arp_xmit() (Eric Dumazet) [task:440668] {CVE-2025-21762}
  - ipv6: use RCU protection in ip6_default_advmss() (Eric Dumazet) [task:441272] {CVE-2025-21765}
  - net: add dev_net_rcu() helper (Eric Dumazet) [task:441272, task:440668]
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Jiri Pirko) [task:350517]
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr error (Ming-Hung Tsai) [task:390747] {CVE-2024-50280}
  - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() (Josh Poimboeuf) [task:466477] {CVE-2025-37937}
  - ftrace: Add cond_resched() to ftrace_graph_set_hash() (zhoumin) [task:466616] {CVE-2025-37940}
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Henry Martin) [task:461963] {CVE-2025-37829}
  - ext4: ignore xattrs past end (Bhupesh) [task:460186] {CVE-2025-37738}
  - usb: dwc2: fix a devres leak in hw_enable upon suspend resume (Fabrice Gasnier) [task:460650] {CVE-2023-53054}
  - usb: dwc2: Always disable regulators on driver teardown (Marc Zyngier) [task:460650]
  - iio: adc: ti-ads8688: fix information leak in triggered buffer (Javier Carrasco) [task:426440] {CVE-2024-57906}
  - usb: xhci: Apply the link chain quirk on NEC isoc endpoints (Michal Pecio) [task:458303] {CVE-2025-22022}
  - usb: xhci: move link chain bit quirk checks into one helper function. (Niklas Neronin) [task:458303]
  - xhci: Don't pass struct xhci_hcd pointer to xhci_link_seg() (Mathias Nyman) [task:458303]
  - atm: clip: Fix infinite recursive call of clip_push(). (Kuniyuki Iwashima) [task:505897] {CVE-2025-38459}
  - vsock/vmci: Clear the vmci transport packet properly when initializing it (HarshaVardhana S A) [task:505907] {CVE-2025-38403}
  - media: venus: hfi: add check to handle incorrect queue size (Vikash Garodia) [task:460274] {CVE-2025-23158}
  - media: venus: hfi: add a check to handle OOB in sfr region (Vikash Garodia) [task:460239] {CVE-2025-23159}
  - reset: uniphier-glue: Fix possible null-ptr-deref (Hui Tang) [task:448822] {CVE-2022-49758}
  - reset: uniphier-glue: Use reset_control_bulk API (Philipp Zabel) [task:448822]
  - reset: uniphier-usb3: Rename to reset-uniphier-glue (Kunihiko Hayashi) [task:448822]
  - media: venus: hfi_parser: refactor hfi packet parsing logic (Vikash Garodia) [task:460123] {CVE-2025-23156}
  - media: venus: hfi: add checks to handle capabilities from firmware (Vikash Garodia) [task:460123]
  - media: venus: hfi_parser: Check for instance after hfi platform get (Stanimir Varbanov) [task:460123]
  - media: venus: hfi_parser: Don't initialize parser on v1 (Stanimir Varbanov) [task:460123]
  - media: venus: Fix uninitialized variable count being checked for zero (Colin Ian King) [task:460123]
  - media: venus: Get codecs and capabilities from hfi platform (Stanimir Varbanov) [task:460123]
  - media: venus: parser: Prepare parser for multiple invocations (Stanimir Varbanov) [task:460123]
  - bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() (Shin'ichiro Kawasaki) [task:439953] {CVE-2022-49711}
  - tipc: Fix use-after-free in tipc_conn_close(). (Kuniyuki Iwashima) [task:505893] {CVE-2025-38464}
  - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint (Mike Christie) [task:458998] {CVE-2025-22083}
  - RDMA/srpt: Introduce a reference count in struct srpt_device (Bart Van Assche) [task:482173]
  - RDMA/srpt: Duplicate port name members (Bart Van Assche) [task:482173]
  - drm/qxl: fix UAF on handle creation (Wander Lairson Costa) [task:346813] {CVE-2023-39198}
  - RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() (Jianglei Nie) [task:482015] {CVE-2022-50138}
  - RDMA/qedr: Improve error logs for rdma_alloc_tid error return (Prabhakar Kushwaha) [task:482015]
  - net_sched: sch_sfq: fix a potential crash on gso_skb handling (Eric Dumazet) [task:491209] {CVE-2025-38115}
  - calipso: unlock rcu before returning -EAFNOSUPPORT (Eric Dumazet) [task:491257]
  - calipso: Don't call calipso functions for AF_INET sk. (Kuniyuki Iwashima) [task:491257] {CVE-2025-38147}
  - net: cadence: macb: Fix a possible deadlock in macb_halt_tx. (Mathieu Othacehe) [task:491663] {CVE-2025-38094}
  - sch_hfsc: make hfsc_qlen_notify() idempotent (Cong Wang) [task:491937] {CVE-2025-38177}
  - wifi: mac80211: Purge vif txq in ieee80211_do_stop() (Remi Pommarel) [task:460303] {CVE-2025-37794}
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Kyungwook Boo) [task:491963] {CVE-2025-38200}
  - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads (Minsuk Kang) [task:448783] {CVE-2022-49740}
  - atm: Revert atm_account_tx() if copy_from_iter_full() fails. (Kuniyuki Iwashima) [task:491903] {CVE-2025-38190}
  - linkdata: fix some code style errors (Gang Yan) [task:495093]
  - net: atm: fix /proc/net/atm/lec handling (Eric Dumazet) [task:491983] {CVE-2025-38180}
  - net: atm: add lec_mutex (Eric Dumazet) [task:497319] {CVE-2025-38323}
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (Ye Bin) [task:459580] {CVE-2025-22121}
  - ext4: introduce ITAIL helper (Ye Bin) [task:459580]
  - ext4: improve xattr consistency checking and error reporting (Theodore Ts'o) [task:459580]
  - set linkdata ps3/ps3stor to m in x86, arm and loongarch (Cao Guanghui) [task:449995]
  - LINKDATA: ps3/ps3stor: update driver support for linkdata (liujie) [task:449995]
  - bpf: Fix a data-race around bpf_jit_limit. (Kuniyuki Iwashima) [task:482243] {CVE-2022-49967}
  - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Dong Chenchen) [task:494275] {CVE-2025-38129}
  - page_pool: fix inconsistency for page_pool_ring_[un]lock() (Yunsheng Lin) [task:494275]
  - net: page_pool: use in_softirq() instead (Qingfang DENG) [task:494275]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.28.v2401
changelog:
  - block: Revert "block: add blk_alloc_disk and blk_cleanup_disk APIs" (Wang Yan) [task:476737]
  - update changelog for incoming 4.19.90-89.28.v2401 (Zhengyuan Liu)
  - change_mnt_propagation(): calculate propagation source only if we'll need it (Al Viro) [task:527715]
  - change_mnt_propagation(): move ->mnt_master assignment into MS_SLAVE case (Al Viro) [task:527715]
  - turn do_make_slave() into transfer_propagation() (Al Viro) [task:527715]
  - do_make_slave(): choose new master sanely (Al Viro) [task:527715]
  - change_mnt_propagation(): do_make_slave() is a no-op unless IS_MNT_SHARED() (Al Viro) [task:527715]
  - change_mnt_propagation() cleanups, step 1 (Al Viro) [task:527715]
  - ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init() (Dan Carpenter) [task:488955]
  - net: loopback: Avoid sending IP packets without an Ethernet header (Ido Schimmel) [task:488955]
  - ipv4: give an IPv4 dev to blackhole_netdev (Xin Long) [task:488955]
  - loopback: fix lockdep splat (Mahesh Bandewar) [task:488955]
  - ipv6: blackhole_netdev needs snmp6 counters (Ido Schimmel) [task:488955]
  - ipv6: give an IPv6 dev to blackhole_netdev (Eric Dumazet) [task:488955]
  - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Mahesh Bandewar) [task:488955]
  - loopback: create blackhole net device similar to loopack. (Mahesh Bandewar) [task:488955]
  - kprobes: Fix the KABI issue (Feng Yang) [task:485647]
  - EDAC/amd64: Use cached data when checking for ECC (Yazen Ghannam) [bug:412285]
  - xfs: punch out data fork delalloc blocks on COW writeback failure (Brian Foster) [task:536187]
  - Revert "gpio: add support for gpio on ft-2000+ based on ACPI" (zhouyuhang) [bug:417541]
  - ext4: don't block for O_DIRECT if IOCB_NOWAIT is set (Jens Axboe) [task:539423]
  - ext4: fix warning when submitting superblock in ext4_commit_super() (Zhang Yi) [task:539973]
  - Revert "ext4: Use rbtrees to manage PAs instead of inode i_prealloc_list" (pengyu) [task:449973]
  - Revert "ext4: mballoc: Remove useless setting of ac_criteria" (pengyu) [task:449973]
  - Revert "ext4: fix rbtree traversal bug in ext4_mb_use_preallocated" (pengyu) [task:449973]
  - x86/kernel: fix occasional hang-up during 'reboot -f' on HG4 platform (luoliang) [task:545109]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.29.v2401
changelog:
  - update changelog for incoming 4.19.90-89.29.v2401 (Zhengyuan Liu)
  - btrfs: fix BUG_ON condition in btrfs_cancel_balance (xiaoshoukui) [task:373027]
  - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (Tuo Li) [task:366437] {CVE-2024-23196}
  - ip6mr: Fix skb_under_panic in ip6mr_cache_report() (Yue Haibing) [task:182920]
  - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes (Fedor Pchelkin) [task:371789]
  - igb: Do not bring the device up after non-fatal error (Mohamed Khalfella) [task:371789]
  - igb: Fix igb_down hung on surprise removal (Ying Hsu) [task:371789]
  - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Pin-yen Lin) [task:374297]
  - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Polaris Pi) [task:374297]
  - iommu/amd: Fix ivrs_base memleak in early_amd_iommu_init() (Zhen Ni) [task:583485]
  - ftrace: Fix use-after-free for dynamic ftrace_ops (Li Huafei) [task:461085] {CVE-2022-49892}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.30.v2401
changelog:
  - update changelog for incoming 4.19.90-89.30.v2401 (Zhengyuan Liu)
  - set stream_mu mm_struct MMF_DISABLE_THP (liuqiqi) [task:571159]
  - net: tcp: add tcp no delay ack function (Chenguang Zhao) [task:546453]
  - fs/pipe:dont need wake up self in a single process (liqiang01) [task:554439]
  - net: automatically double tcp_r/wmem  (luoxuanqiang) [task:581109]
  - net: Fix data-races around sysctl_[rw]mem(_offset)?. (Kuniyuki Iwashima) [task:581109]
  - net: automatically set sk_ll_usec  for netperf/netserver (luoxuanqiang) [task:581109]
  - sched/fair: Optimize the path select (Can Peng) [task:557483]
  - Disable state2 by default for Hygon servers (liqiang01) [task:554439]
  - Revert "ACPI: Limit max_cstate to 1 on Hygon platforms" (liqiang01) [task:554439]
  - remove sysctl parameter sysctl_sched_more_cachehot (liqiang01) [task:554439]
  - net: automatically set CPU affinity for PID in the sock layer (luoxuanqiang) [task:554603]
  - sched: Parallel boost for mm (link) [task:554493]
  - Optimize the process lookup (duanchenghao) [task:554441]
  - Allocate file data on stack & limit to 512B (duanchenghao) [task:554441]
  - Support encryption and decryption strings (duanchenghao) [task:554441]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.31.v2401
changelog:
  - fourthly update changelog for incoming 4.19.90-89.31.v2401 (Zhengyuan Liu)
  - scsi: restrict softirq rerun deferral to Phytium S5000C/S5000C-E (Yang Xiuwei) [task:603047]
  - thirdly update changelog for incoming 4.19.90-89.31.v2401 (Zhengyuan Liu)
  - scsi/ps3: Fix compile error for high version gcc (Bing Huang) [task:588907]
  - ZHAOXIN: KVM: x86: fix soft lockup in pauseopt by avoiding guest memory read (Ewanhaioc) [task:549047, bug:499505]
  - ZHAOXIN: KVM: x86: fix zx_tertiary_exec_control cache not being updated (Ewanhaioc) [task:549047, bug:499505]
  - secondly update changelog for incoming 4.19.90-89.31.v2401 (Zhengyuan Liu)
  - Revert "net: auto affinity to exclude isolated CPU cores" (Zhengyuan Liu)
  - update changelog for incoming 4.19.90-89.31.v2401 (Zhengyuan Liu)
  - mm/hugetlb: add mempolicy check in the reservation routine (Muchun Song) [task:595137]
  - hfs: validate record offset in hfsplus_bmap_alloc (Yang Chenzhi) [task:573411] {CVE-2025-40349}
  - hfsplus: fix to avoid false alarm of circular locking (Chao Yu) [task:573411]
  - mm/migrate: Fix copy_mc_highpages parameter order in __copy_huge_page (liuye) [task:571065]
  - arm64: enable error recovery support (Wang Yan) [task:571065]
  - arm64: Fix build errors (liuye) [task:571065]
  - OPENEULER: uce: get_user scenario support kernel recovery (Tong Tiangen) [task:571065]
  - OPENEULER: uce: pagecache reading scenario support kernel recovery (Tong Tiangen) [task:571065]
  - OPENEULER: mm/memory-failure: support disabling soft offline for HugeTLB pages (Kyle Meyer) [task:571065]
  - mm/memory-failure: userspace controls soft-offlining pages (Jiaqi Yan) [task:571065]
  - OPENEULER: arm64: mm: Add copy mc support for migrate_page (Wupeng Ma) [task:571065]
  - OPENEULER: uce: add copy_mc_highpage{s} (Wupeng Ma) [task:571065]
  - OPENEULER: uce: cow scenario support kernel recovery (Tong Tiangen) [task:571065]
  - OPENEULER: arm64/ras: save error address from memory section for recovery (Xie XiuQi) [task:571065]
  - OPENEULER: GHES: add a notify chain for process memory section (Xie XiuQi) [task:571065]
  - OPENEULER: arm64/ras: support sea error recovery (Xie XiuQi) [task:571065]
  - bonding: avoid send_ns_work UAF when toggling ns_probe_active (pengyu) [task:558047]
  - KVM: arm64: limit PMU version to PMUv3 for ARMv8.1 (Andrew Murray) [task:571857]
  - arm64: cpufeature: Extract capped perfmon fields (Andrew Murray) [task:571857]
  - blk-mq: remove hybrid polling (Keith Busch) [task:576189, task:559773, bug:458277]
  - block: ignore RWF_HIPRI hint for sync dio (Ming Lei) [task:576189, task:559773, bug:458277]
  - block: blkcg: avoid extending blkcg_gq to preserve kABI (chengkaitao) [task:575765]
  - block: avoid calling blkg_free() in atomic context (Ming Lei) [task:575765]
  - ip_tunnel: Add tnl_update_pmtu in ip_md_tunnel_xmit (wenxu) [task:576251]
  - Revert "ip_tunnel: Add tnl_update_pmtu in ip_md_tunnel_xmit" (taowei) [task:576251]
  - net/sched: Abort __tc_modify_qdisc if parent is a clsact/ingress qdisc (Victor Nogueira) [task:573535]
  - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads (Xianglai Li) [task:596205]
  - arm64: cpufeature: Enable LSE for FT5000C-E processors (liqiang01) [task:587261]
  - blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none (Ming Lei) [task:532123] {CVE-2023-53292}
  - blk-mq: protect q->elevator by ->sysfs_lock in blk_mq_elv_switch_none (Ming Lei) [task:532123]
  - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. (Kuniyuki Iwashima) [task:540449] {CVE-2025-39913}
  - net: Remove acked SYN flag from packet in the transmit queue correctly (Dong Chenchen) [task:455283]
  - X86: configs: Enable CONFIG_NUMA_AWARE_SPINLOCKS macro (Wang Yan) [task:547479]
  - Arch: X86: Restrict numa spinlock to take effect only on the Hygon (Can Peng) [task:547479]
  - spinlock: Add a detection switch in the intrusive function to enhance security. (Can Peng) [task:547479]
  - driver core: add device probe log helper (Andrzej Hajda) [task:537003]
  - net: rose: convert 'use' field to refcount_t (Takamitsu Iwai) [task:532201] {CVE-2025-39826}
  - net: rose: split remove and free operations in rose_remove_neigh() (Takamitsu Iwai) [task:532201]
  - net/rose: fix races in rose_kill_by_device() (Eric Dumazet) [task:397891]
  - net/rose: remove redundant assignment to variable failed (Colin Ian King) [task:532201]
  - tracing: Fix the missing smp_store_release issue (chenyuan) [task:535437]
  - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Yuan Chen) [task:546811] {CVE-2025-40042}
  - tpm: Actually fail on TPM errors during "get random" (Kees Cook) [task:530851]
  - tpm: tpm1: rewrite tpm1_get_random() using tpm_buf structure (Tomas Winkler) [task:530851]
  - tpm: factor out tpm1_get_random into tpm1-cmd.c (Tomas Winkler) [task:530851]
  - tpm: move tpm_getcap to tpm1-cmd.c (Tomas Winkler) [task:530851]
  - tpm: move tpm1_pcr_extend to tpm1-cmd.c (Tomas Winkler) [task:530851]
  - tpm: factor out tpm_get_timeouts() (Tomas Winkler) [task:530851]
  - tpm: add tpm_calc_ordinal_duration() wrapper (Tomas Winkler) [task:530851]
  - tpm: factor out tpm 1.x duration calculation to tpm1-cmd.c (Tomas Winkler) [task:530851]
  - tpm: sort objects in the Makefile (Tomas Winkler) [task:530851]
  - tpm2: add new tpm2 commands according to TCG 1.36 (Tomas Winkler) [task:530851]
  - net: macb: call pm_runtime_put_sync on failure path (Claudiu Beznea) [task:532055]
  - net: macb: Fix runtime PM refcounting (Andy Shevchenko) [task:532055]
  - net: macb: Disable clocks once (Neil Mandir) [task:532055]
  - net: macb: add function to disable all macb clocks (Claudiu Beznea) [task:532055]
  - net: macb: fix wakeup test in runtime suspend/resume routines (Nicolas Ferre) [task:532055]
  - net: macb: ensure interface is not suspended on at91rm9200 (Alexandre Belloni) [task:532055]
  - net: macb: Add support for suspend/resume with full power down (Harini Katakam) [task:532055]
  - net: macb: Add pm runtime support (Harini Katakam) [task:532055]
  - net: macb: Support clock management for tsu_clk (Harini Katakam) [task:532055]
  - net: macb: Check MDIO state before read/write and use timeouts (Harini Katakam) [task:537643]
  - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() (Xuanqiang Luo) [task:524251]
  - inet: Avoid ehash lookup race in inet_ehash_insert() (Xuanqiang Luo) [task:524251]
  - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() (Xuanqiang Luo) [task:524251]
  - net: tcp: un-pin the tw_timer (Florian Westphal) [task:524251]
  - net: tcp/dccp: prepare for tw_timer un-pinning (Valentin Schneider) [task:524251]
  - Revert "tcp: avoid the lookup process failing to get sk in ehash table" (Kuniyuki Iwashima) [task:524251]
  - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (Takashi Iwai) [task:554289] {CVE-2025-40154}
  - net: auto affinity to exclude isolated CPU cores (Xiangqian Zhang) [task:550259]
  - fs: quota: create dedicated workqueue for quota_release_work (Shashank A P) [task:547337]
  - media: rc: fix races with imon_disconnect() (Larshin Sergey) [task:542879] {CVE-2025-39993}
  - media: imon: reorganize serialization (Tetsuo Handa) [task:542879]
  - HID: asus: fix UAF via HID_CLAIMED_INPUT validation (Qasim Ijaz) [task:532169] {CVE-2025-39824}
  - HID: multitouch: Add NULL check in mt_input_configured (Charles Han) [task:540621]
  - HID: multitouch: Correct devm device reference for hidinput input_dev name (Rahul Rameshbabu) [task:540621] {CVE-2023-53454}
  - i40e: Fix potential invalid access when MAC list is empty (Zhen Ni) [task:534327] {CVE-2025-39853}
  - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (Kuniyuki Iwashima) [task:534337] {CVE-2025-39860}
  - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Lu Wei) [task:578201] {CVE-2022-50865}
  - tcp: minor optimization in tcp_add_backlog() (Eric Dumazet) [task:578201]
  - tcp: do not mess with cloned skbs in tcp_add_backlog() (Eric Dumazet) [task:578201]
  - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() (Minsuk Kang) [task:577645] {CVE-2022-50881}
  - ath9k: Fix typo in function name (Pavel Machek) [task:577645]
  - perf/core: Exit early on perf_mmap() fail (Thomas Gleixner) [task:520585] {CVE-2025-38565}
  - comedi: das16m1: Fix bit shift out of bounds (Ian Abbott) [task:507041] {CVE-2025-38483}
  - fs/buffer: fix use-after-free when call bh_read() helper (Ye Bin) [task:527973] {CVE-2025-39691}
  - jfs: truncate good inode pages when hard link is 0 (Lizhi Xu) [task:530221] {CVE-2025-39743}
  - ftrace: Also allocate and copy hash for reading of filter files (Steven Rostedt) [task:528081] {CVE-2025-39689}
  - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Youngjun Lee) [task:527673] {CVE-2025-38680}
  - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() (Viacheslav Dubeyko) [task:527591] {CVE-2025-38714}
  - f2fs: fix to avoid out-of-boundary access in devs.path (Chao Yu) [task:523433] {CVE-2025-38652}
  - pptp: fix pptp_xmit() error path (Eric Dumazet) [task:520779]
  - pptp: ensure minimal skb length in pptp_xmit() (Eric Dumazet) [task:520779] {CVE-2025-38574}
  - usb: gadget : fix use-after-free in composite_dev_cleanup() (Tao Xue) [task:520579] {CVE-2025-38555}
  - usb: core: config: Prevent OOB read in SS endpoint companion parsing (Xinyu Liu) [task:530219] {CVE-2025-39760}
  - USB: core: Change configuration warnings to notices (Alan Stern) [task:530219]
  - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify (Wupeng Ma) [task:491653] {CVE-2025-38102}
  - VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF (George Kennedy) [task:491653]
  - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (Sravan Kumar Gundu) [task:527585] {CVE-2025-38685}
  - lwt: Fix return values of BPF xmit ops (Yan Zhai) [task:532829] {CVE-2023-53338}
  - f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() (Chao Yu) [task:460243] {CVE-2025-37739}
  - f2fs: lost matching-pair of trace in f2fs_truncate_inode_blocks (Yubo Feng) [task:460243]
  - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (Abhishek Mainkar) [task:533643] {CVE-2023-53395}
  - net: ipv4: fix one memleak in __inet_del_ifa() (Liu Jian) [task:576891] {CVE-2023-53995}
  - net: ipv4: fix rcu lockdep splat due to wrong annotation (Florian Westphal) [task:358305]
  - net: ipv4: remove erroneous advancement of list pointer (Florian Westphal) [task:358305]
  - net: ipv4: fix infinite loop on secondary addr promotion (Florian Westphal) [task:358305]
  - plip: avoid rcu debug splat (Florian Westphal) [task:358305]
  - net: ipv4: provide __rcu annotation for ifa_list (Florian Westphal) [task:358305]
  - drivers: use in_dev_for_each_ifa_rtnl/rcu (Florian Westphal) [task:358305]
  - net: use new in_dev_ifa iterators (Florian Westphal) [task:358305]
  - devinet: use in_dev_for_each_ifa_rcu in more places (Florian Westphal) [task:358305]
  - sched/fair: Add rcu_read_lock() to protect select_idle_sibling() (Zhao Mengmeng) [task:584055]
  - i40e: fix input validation logic for action_meta (Lukasz Czapnik) [task:542887] {CVE-2025-39970}
  - i40e: Fix filter input checks to prevent config with invalid values (Sudheer Mogilappagari) [task:542887]
  - vxlan: Annotate FDB data races (Ido Schimmel) [task:482121] {CVE-2025-38037}
  - vxlan: reduce dirty cache line in vxlan_find_mac (Li RongQing) [task:210575]
  - nfsd: remove non-existent struct in flexfiles (liuyunchen) [task:569939]
  - hinic3: Fix the compilation error (luoqing) [task:598019]
  - ZHAOXIN: efi/cper: Add Zhaoxin mem error decode for KH-50000 (leoliu-oc) [task:574565]
  - ZHAOXIN: efi/cper: Add Zhaoxin cache error decode (leoliu-oc) [task:574565]
  - ZHAOXIN: efi/cper: Add Zhaoxin micro-architectural error decode (leoliu-oc) [task:574565]
  - ZHAOXIN: efi/cper: Add Zhaoxin non standard cper error decode (leoliu-oc) [task:574565]
  - ZHAOXIN: efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000 (leoliu-oc) [task:574565]
  - ACPI: APEI: Better fix to avoid spamming the console with old error logs (Tony Luck) [task:574565]
  - x86/mce: Fix compile error of implicit declaration (lifangxu) [task:577583]
  - ZHAOXIN: x86/mce: Improve conditional NMI context handling for MCE (leoliu-oc) [task:574565]
  - ZHAOXIN: x86/hpet: Set dynamic IRQ feature for HPET for KH-50000 (leoliu-oc) [task:549047]
  - ZHAOXIN: ACPI: processor: idle: Set timer broadcast state on C3 for KH-50000 (leoliu-oc) [task:549047]
  - ZHAOXIN: Add platform-specific quirks for ZX-200 device (leoliu-oc) [task:549047]
  - xhci: fix memory leak regression when freeing xhci vdev devices depth first (Mathias Nyman) [task:549047]
  - usb: xhci: Fix slot_id resource race conflict (Weitao Wang) [task:549047]
  - ZHAOXIN: hwmon: zhaoxin-cputemp: Update for KH-50000 (leoliu-oc) [task:549047]
  - ZHAOXIN: perf/zhaoxin/core: Tailor FMS for KH-50000 (leoliu-oc) [task:549047]
  - usb: xhci: Enable the TRB overfetch quirk on VIA VL805 (Michal Pecio) [task:549047]
  - xhci: Fix TRB prefetch issue of ZHAOXIN hosts (Weitao Wang) [task:549047]
  - xhci: Fix resume issue of some ZHAOXIN hosts (Weitao Wang) [task:549047]
  - Revert "xhci: fix issue of cross page boundary in TRB prefetch" (lifangxu) [task:549047]
  - ZHAOXIN: ata: ahci: Fix Zhaoxin SATA LED quirk for KH-50000 (leoliu-oc) [task:549047]
  - ZHAOXIN: pinctrl: Zhaoxin: Add KH-50000 support (leoliu-oc) [task:549047]
  - KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs (Ewan Hai) [task:549047]
  - ZHAOXIN: x86/microcode: Add Zhaoxin cpu microcode update driver (leoliu-oc) [task:549047]
  - ZHAOXIN: KVM: x86: Introduce support for Zhaoxin PAUSEOPT instruction (leoliu-oc) [task:549047]
  - ZHAOXIN: x86/delay: add support for Zhaoxin PAUSEOPT instruction (leoliu-oc) [task:549047]
  - Revert "ZHAOXIN: KVM: x86: Introduce support for Zhaoxin ZXPAUSE instruction" (leoliu-oc) [task:549047]
  - ZHAOXIN: perf/zhaoxin/uncore: Enhance uncore support and fix related bugs (leoliu-oc) [task:549047]
  - ZHAOXIN: i2c: zhaoxin: Enhancements and Modifications to SMBus Driver (leoliu-oc) [task:471465]
  - ZHAOXIN: perf/x86/zhaoxin/uncore: Add support for processors with irregular core numbers (leoliu-oc) [task:471465]
  - ZHAOXIN: crypto: sm3 - Refactor code and harden security (leoliu-oc) [task:471465]
  - ZHAOXIN: crypto: sm4 - Refactor mode handling and optimize performance (leoliu-oc) [task:471465]
  - ZHAOXIN: pinctrl: Zhaoxin: Update GPIO pinctrl driver for stability and reliability (leoliu-oc) [task:471465]
  - USB: core: Disable remote wakeup for freeze/quiesce (Evan Green) [task:471465]
  - ZHAOXIN: perf/x86/zhaoxin/uncore: Remove the uncore support for special processor (leoliu-oc) [task:471465]
  - ZHAOXIN: perf/x86/zhaoxin/uncore: update KX-7000 support (leoliu-oc) [task:471465]
  - ZHAOXIN: Move SM4 Block Cipher algorithm driver to the arch directory (leoliu-oc) [task:471465]
  - ZHAOXIN: Move SM3 Secure Hash algorithm driver to the arch directory (leoliu-oc) [task:471465]
  - ZHAOXIN: x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors (leoliu-oc) [task:471465]
  - ZHAOXIN: x86/mce: Set bios_cmci_threshold for CMCI threshold (leoliu-oc) [task:471465]
  - ZHAOXIN: perf/x86/zhaoxin/uncore: add KX-7000 support (leoliu-oc) [task:471465]
  - USB: UAS: return ENODEV when submit urbs fail with device not attached (Weitao Wang) [task:471465]
  - ZHAOXIN: Update cputemp driver with using the same MSR uniformly (leoliu-oc) [task:471465]
  - hwmon: Introduce SENSOR_DEVICE_ATTR_{RO, RW, WO} and variants (Guenter Roeck) [task:471465]
  - x86/cpu: Remove pointless evaluation of x86_coreid_bits (Thomas Gleixner) [task:471465]
  - PCI: Add ACS quirk for more Zhaoxin Root Ports (LeoLiuoc) [task:471465]
  - ZHAOXIN: crypto: x86/sm2: update SM2 algorithm driver using inline assembly (leoliu-oc) [task:471465]
  - ZHAOXIN: i2c: smbus: Add support for Zhaoxin SMBUS controller (leoliu-oc) [task:471465]
  - ZHAOXIN: efi: cper: Add Zhaoxin/Centaur ZDI/ZPI error decode (leoliu-oc) [task:471465]
  - ZHAOXIN: ata: ahci: Add support for AHCI SGPIO Enclosure Management (leoliu-oc) [task:471465]
  - ZHAOXIN: hwrng: add Zhaoxin rng driver base on rep_xstore instruction (Yongzhen Zhang) [task:471465]
  - Revert "ipv6: Fix soft lockups in fib6_select_path under high next hop churn" (Gang Yan) [task:520985]
  - PHYTIUM: gpio: phytium: Add Phytium GPIO driver (zhouyuhang) [bug:417541]
  - txgbe: update release note to 1.3.6.5 (linglingzhang) [task:523317]
  - txgbe: fix: delay free buffer cause ptp timeout (duanqiangwen) [task:523317]
  - txgbe: FIX: fix compile error (linyuexie) [task:523317]
  - txgbe: fix: alloc rx skb failed may cause page refcount abnormal (duanqiangwen) [task:523317]
  - txgbe: FIX: fix may calltrace when XDP_TX (linyuexie) [task:523317]
  - txgbe: fix: solve problems about smmu event 0x10 and packet data being tampered with on kunpeng920 (linglingzhang) [task:523317]
  - txgbe: set version 1.3.6.4 (juxiahe) [task:523317]
  - txgbe: FIX: fix calltrace out of range after repeatly unbind and bind (Linyue Xie) [task:523317]
  - txgbe: feat: VF receive all VLAN tags in all-multicast mode (Jiawen Wu) [task:523317]
  - security: smack and tomoyo not support stacking (penghuaihe) [task:535691]
  - security: support extend modules request label slot (penghuaihe) [task:535691]
  - security: do hook support checking while register (penghuaihe) [task:535691]
  - security: fix memleak in sem_alloc_security hook (penghuaihe) [task:535691]
  - security: fix memleak in shm_alloc_security hook (penghuaihe) [task:535691]
  - security: fix memleak in msg_queue_alloc_security hook (penghuaihe) [task:535691]
  - security: fix memleak in msg_msg_alloc_security hook (penghuaihe) [task:535691]
  - security: fix memleak in file_alloc_security hook (penghuaihe) [task:535691]
  - security: fix memleak in inode_alloc_security hook (penghuaihe) [task:535691]
  - security: fix memleak in sb_alloc_security (penghuaihe) [task:535691]
  - security: fix memleak in cred_alloc_blank (penghuaihe) [task:535691]
  - security: fix memleak in sk_alloc_security hook (penghuaihe) [task:535691]
  - security: fix memleak in key_alloc hook (penghuaihe) [task:535691]
  - security: support task_alloc stacking (penghuaihe) [task:535691]
  - security: support audit rules stacking (penghuaihe) [task:535691]
  - block, bfq: don't break merge chain in bfq_split_bfqq() (Yu Kuai) [task:515911]
  - block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() (Yu Kuai) [task:515911]
  - blk-cgroup: dropping parent refcount after pd_free_fn() is done (Yu Kuai) [task:515911]
  - blkcg: blkcg_activate_policy() should initialize ancestors first (Tejun Heo) [task:515911]
  - locking/qspinlock: use xchg with _mb in slowpath for arm64 (pengyu) [task:524633, task:526703, task:535495]
  - Arm64: add USBIP_CORE=m&USBIP_VHCI_HCD=m (Li Jun) [task:551337]
  - Amd64: add USBIP_CORE=m&USBIP_VHCI_HCD=m (Li Jun) [task:551337]
  - ipv6: mcast: extend RCU protection in igmp6_send() (Eric Dumazet) [task:440728] {CVE-2025-21759}
  - Revert "ipv6: mcast: extend RCU protection in igmp6_send()" (taowei) [task:440728]
  - net: phy: Fix "link partner" information disappear issue (Yonglong Liu) [task:502961]
  - net: phy: fix race in genphy_update_link (Heiner Kallweit) [task:502961]
  - net: phy: fix setting autoneg_complete in genphy_update_link (Heiner Kallweit) [task:502961]
  - net: phy: don't double-read link status register if link is up (Heiner Kallweit) [task:502961]
  - net: phy: fix autoneg mismatch case in genphy_read_status (Heiner Kallweit) [task:502961]
  - net: phy: avoid unneeded MDIO reads in genphy_read_status (Heiner Kallweit) [task:502961]
  - net: bridge: fix soft lockup in br_multicast_query_expired() (Wang Liang) [task:527513, task:530247] {CVE-2025-39773}
  - net: bridge: mcast: add and enforce query interval minimum (Nikolay Aleksandrov) [task:527513, task:530247]
  - net: bridge: mcast: add and enforce startup query interval minimum (Nikolay Aleksandrov) [task:527513, task:530247]
  - KVM: x86: use array_index_nospec with indices that come from guest (Thijs Raymakers) [task:532349] {CVE-2025-39823}
  - KVM: APIC: add helper func to remove duplicate code in kvm_pv_send_ipi (Miaohe Lin) [task:532349]
  - KVM: X86: Yield to IPI target if necessary (Wanpeng Li) [task:532349]
  - KVM: X86: Implement PV sched yield hypercall (Wanpeng Li) [task:532349]
  - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). (Kuniyuki Iwashima) [task:532365] {CVE-2025-39828}
  - atm: atmtcp: Free invalid length skb in atmtcp_c_send(). (Kuniyuki Iwashima) [task:532365]
  - bpf, sockmap: fix race in sock_map_free() (Eric Dumazet) [task:352421]
  - md/raid10: prevent soft lockup while flush writes (Yu Kuai) [task:371789]
  - md: fix resync softlockup when bitmap size is less than array size (Yu Kuai) [task:371789]
  - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (Li Nan) [task:371789]
  - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). (Kuniyuki Iwashima) [task:371789]
  - vrf: Increment Icmp6InMsgs on the original netdev (Stephen Suryaputra) [task:371789]
  - scsi: core: raid_class: Remove raid_component_add() (Zhu Wang) [task:371789]
  - scsi: core: Fix possible memory leak if device_add() fails (Zhu Wang) [task:371789]
  - crypto: hisilicon/hpre - fix resource leak in remove process (Zhiqi Song) [task:540073]
  - OPENEULER: xfs: fix sb write verify for lazysbcount (Shida Zhang) [task:583267]
  - xfs: update superblock counters correctly for !lazysbcount (Dave Chinner) [task:583267]
  - xfs: reduce free inode accounting overhead (Dave Chinner) [task:583267]
  - xfs: gut error handling in xfs_trans_unreserve_and_mod_sb() (Dave Chinner) [task:583267]
  - ACPI: CPPC: Assume no transition latency if no PCCT (Pierre Gondois) [bug:474457]
  - REDHAT: kernel.spec: avoid keeping two copies of vmlinux (Ondrej Mosnacek) [task:556803]
  - REDHAT: spec: speed up "cp -r" when it overwrites existing files. (Denys Vlasenko) [task:556803]
  - REDHAT: kernel.spec: Force remove tmp file (Prarit Bhargava) [task:556803]
  - REDHAT: kernel.spec: remove some temporary files early (Ondrej Mosnacek) [task:556803]
  - REDHAT: kernel.spec: Remove unnecessary output from pathfix.py (Prarit Bhargava) [task:556803]
  - ANOLIS: alinux: mm: memcontrol: enable oom.group on cgroup-v1 (Wenwei Tao) [task:559143]
  - SUNRPC: prevent port reuse on transports which don't request it. (NeilBrown) [task:566683]
  - md/raid0, raid10: Don't set discard sectors for request queue (Xiao Ni) [task:569813] {CVE-2022-50583}
  - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (Shay Drory) [task:576227] {CVE-2023-54015}
  - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (Edward Adam Davis) [task:573827] {CVE-2025-68305}
  - HYGON: EDAC: Change hash value to 2bits family 18h model 6h (allenli) [task:571437]
  - HYGON: EDAC: Fix address translation family 18h model 4h (allenli) [task:571437]
  - team: Move team device type change at the end of team_port_add (Nikola Z. Ivanov) [task:575753] {CVE-2025-68340}
  - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (Ian Forbes) [task:567355] {CVE-2025-40277}
  - fbdev: bitblit: bound-check glyph index in bit_putcs* (Junjie Cao) [task:570205] {CVE-2025-40322}
  - xprtrdma: Ensure MRs are DMA-unmapped when posting LOCAL_INV fails (Chuck Lever) [task:570023]
  - xprtrdma: Explicitly resetting MRs is no longer necessary (Chuck Lever) [task:570023]
  - fs: use do_splice_direct() for nfsd/ksmbd server-side-copy (Amir Goldstein) [task:540123]
  - mm/memory.c: skip spurious TLB flush for retried page fault (Yang Shi) [task:572449]
  - i40e: remove read access to debugfs files (Jacob Keller) [task:552823] {CVE-2025-39901}
  - sched: Fix race between yield_to() and try_to_wake_up() (Tianchen Ding) [task:564633]
  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (Albin Babu Varghese) [task:570029] {CVE-2025-40304}
  - USB: usbtmc: Fix direction for 0-length ioctl control messages (Alan Stern) [task:569979] {CVE-2023-53761}
  - OPENEULER: proc: fix use-after-free in proc_get_inode() (Ye Bin) [task:451122] {CVE-2025-21999}
  - smb: client: fix use-after-free in cifs_oplock_break (Wang Zhaolong) [task:519691] {CVE-2025-38527}
  - PHYTIUM: i2c-2.0: phytium: Fixed the bug of combining two interrupts. (Wu Jinyong) [task:550751]
  - PHYTIUM: i2c: phytium: Combine normal mode into master-slave switching mode (Wu Jinyong) [task:550751]
  - PHYTIUM: i2c-2.0: phytium: Add phytium i2c_v2 driver (Wu Jinyong) [task:550751]
  - PHYTIUM: i2c: phytium: Modify the version management (Wu Jinyong) [task:550751]
  - PHYTIUM: i2c: phytium: Add driver version information (Wu Jinyong) [task:550751]
  - PHYTIUM: iommu/arm-smmu-v3: Change pm interface during system sleep transition (Xiao Cong) [task:550751]
  - REDHAT: scsi_sysfs: make unpriv_sgio queue attribute accessible for non-block devices (Ewan Milne) [bug:433547]
  - ipv6: reject malicious packets in ipv6_gso_segment() (Eric Dumazet) [task:520773] {CVE-2025-38572}
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (Jonathan Curley) [task:576577] {CVE-2025-68349}
  - scsi: qla2xxx: Wait for io return on terminate rport (Quinn Tran) [task:532105] {CVE-2023-53322}
  - proc/osinfo: Replace wrong Workbench version SP4 with SP3 2403 (Qingshuang Fu) [task:597597]
  - scsi: fix KABI breakage in struct scsi_device (Yang Xiuwei) [task:536563]
  - scsi: core: Handle devices which return an unusually large VPD page count (Martin K. Petersen) [task:536563]
  - scsi: megaraid_sas: Block zero-length ATA VPD inquiry (Chandrakanth Patil) [task:536563]
  - scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (Lee Duncan) [task:536563]
  - scsi: core: Consult supported VPD page list prior to fetching page (Martin K. Petersen) [task:536563]
  - scsi: core: Query VPD size before getting full page (Martin K. Petersen) [task:536563]
  - scsi: mpt3sas: Use cached ATA Information VPD page (Martin K. Petersen) [task:536563]
  - scsi: core: Add sysfs attributes for VPD pages 0h and 89h (Ryan Attard) [task:536563]
  - scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp() (Qianfeng Rong) [task:536567]
  - scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES() (Qianfeng Rong) [task:536567]
  - scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database() (Thomas Fourier) [task:536567]
  - scsi: qla2xxx: Fix NVMe and NPIV connect issue (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Fix abort in bsg timeout (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Use QP lock to search for bsg (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Fix optrom version displayed in FDMI (Shreyas Deodhar) [task:536567]
  - scsi: qla2xxx: Fix flash read failure (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds (Saurav Kashyap) [task:536567]
  - scsi: qla2xxx: Fix debugfs output for fw_resource_count (Himanshu Madhani) [task:536567]
  - scsi: qla2xxx: Fix N2N stuck connection (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Fix system crash due to bad pointer access (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Fix double free of dsd_list during driver load (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() (Jinjie Ruan) [task:536567]
  - scsi: qla2xxx: Correct endianness for rqstlen and rsplen (Nilesh Javali) [task:536567]
  - scsi: qla2xxx: Fix unused variable warning in qla2xxx_process_purls_pkt() (Nathan Chancellor) [task:536567]
  - scsi: qla2xxx: Fix nvme_fc_rcv_ls_req() undefined error (Nilesh Javali) [task:536567]
  - Revert "scsi: qla2xxx: Fix buffer overrun" (Nilesh Javali) [task:536567]
  - scsi: qla2xxx: Error code did not return to upper layer (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Fix firmware resource tracking (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Flush mailbox commands on chip reset (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Add Unsolicited LS Request and Response Support for NVMe (Manish Rangankar) [task:536567]
  - scsi: qla2xxx: Move resource to allow code reuse (Quinn Tran) [task:536567]
  - scsi: qla2xxx: fix inconsistent TMF timeout (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Fix TMF leak through (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Fix erroneous link up failure (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Fix command flush during TMF (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Limit TMF to 8 per function (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Fix error code in qla2x00_start_sp() (Dan Carpenter) [task:536567]
  - scsi: qla2xxx: Fix end of loop test (Dan Carpenter) [task:536567]
  - scsi: qla2xxx: Fix NULL pointer dereference in target mode (Gleb Chesnokov) [task:536567]
  - scsi: qla2xxx: Fix mem access after free (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Fix hang in task management (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Fix task management cmd fail due to unavailable resource (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Fix task management cmd failure (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Multi-que support for TMF (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Fix printk() format string (Arnd Bergmann) [task:536567]
  - scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called (Shreyas Deodhar) [task:536567]
  - scsi: qla2xxx: edif: Fix stall session after app start (Quinn Tran) [task:536567]
  - scsi: qla2xxx: edif: Fix performance dip due to lock contention (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Fix stalled login (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Initialize vha->unknown_atio_[list, work] for NPIV hosts (Gleb Chesnokov) [task:536567]
  - scsi: qla2xxx: Fix serialization of DCBX TLV data request (Rafael Mendonca) [task:536567]
  - scsi: qla2xxx: Remove unused declarations for qla2xxx (Gaosheng Cui) [task:536567]
  - scsi: qla2xxx: Add debug prints in the device remove path (Arun Easi) [task:536567]
  - scsi: qla2xxx: edif: Fix slow session teardown (Quinn Tran) [task:536567]
  - scsi: qla2xxx: Increase max limit of ql2xnvme_queues (Shreyas Deodhar) [task:536567]
  - scsi: qla2xxx: Stop using the SCSI pointer (Bart Van Assche) [task:536567]
  - scsi: qla2xxx: Add ql2xnvme_queues module param to configure number of NVMe queues (Shreyas Deodhar) [task:536567]
  - qla2xxx: add ->map_queues support for nvme (Saurav Kashyap) [task:536567]
  - nvme-fc: add support for ->map_queues (Saurav Kashyap) [task:536567]
  - scsi: qla2xxx: Call scsi_done() directly (Bart Van Assche) [task:536567]
  - scsi: qla2xxx: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (Bart Van Assche) [task:536567]
  - scsi: qla2xxx: Add support for mailbox passthru (Bikash Hazarika) [task:536567]
  - Add list_is_first function to drivers/scsi/qla2xxx/qla_init.c (Cao Guanghui) [task:536567]
  - scsi: qla2xxx: Fix buffer overrun (Quinn Tran) [task:577017] {CVE-2023-54054}
  - net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() (Yang Yingliang) [task:536557]
  - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (Jiri Pirko) [task:536557]
  - net/mlx5: Avoid recovery in probe flows (Shay Drory) [task:536557]
  - net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default (Dragos Tatulea) [task:536557]
  - scsi: lpfc: Remove redundant assignment to avoid memory leak (Jiasheng Jiang) [task:536565]
  - scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk (Justin Tee) [task:536565]
  - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Justin Tee) [task:536565]
  - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Justin Tee) [task:536565]
  - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Justin Tee) [task:536565]
  - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Justin Tee) [task:536565]
  - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Justin Tee) [task:536565]
  - scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails (Justin Tee) [task:536565]
  - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Justin Tee) [task:536565]
  - scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (Justin Tee) [task:536565]
  - scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (Justin Tee) [task:536565]
  - scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE before BSG flag (Justin Tee) [task:536565]
  - scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths (Justin Tee) [task:536565]
  - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Justin Tee) [task:536565]
  - scsi: lpfc: Modify CGN warning signal calculation based on EDC response (Justin Tee) [task:536565]
  - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Justin Tee) [task:536565]
  - scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE (Justin Tee) [task:536565]
  - scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd() (Justin Tee) [task:536565]
  - scsi: lpfc: Update PRLO handling in direct attached topology (Justin Tee) [task:536565]
  - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Justin Tee) [task:536565]
  - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Justin Tee) [task:536565]
  - scsi: lpfc: Cancel ELS WQE instead of issuing abort when SLI port is inactive (Justin Tee) [task:536565]
  - scsi: lpfc: Correct size for cmdwqe/rspwqe for memset() (Muhammad Usama Anjum) [task:536565]
  - scsi: lpfc: Correct size for wqe for memset() (Muhammad Usama Anjum) [task:536565]
  - scsi: lpfc: Fix failure to delete vports when discovery is in progress (Justin Tee) [task:536565]
  - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Justin Tee) [task:536565]
  - scsi: lpfc: Qualify ndlp discovery state when processing RSCN (Justin Tee) [task:536565]
  - scsi: lpfc: Use unsigned type for num_sge (Hannes Reinecke) [task:536565]
  - scsi: lpfc: Move determination of vmid_flag after VMID reinitialization completes (Justin Tee) [task:536565]
  - scsi: lpfc: Reinitialize an NPIV's VMID data structures after FDISC (Justin Tee) [task:536565]
  - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Justin Tee) [task:536565]
  - scsi: lpfc: Validate ELS LS_ACC completion payload (Justin Tee) [task:536565]
  - scsi: lpfc: Fix possible file string name overflow when updating firmware (Justin Tee) [task:536565]
  - scsi: lpfc: Remove reftag check in DIF paths (Justin Tee) [task:536565]
  - scsi: lpfc: Fix lpfc_name struct packing (Arnd Bergmann) [task:536565]
  - scsi: lpfc: Fix incorrect big endian type assignments in FDMI and VMID paths (Justin Tee) [task:536565]
  - scsi: lpfc: Replace one-element array with flexible-array member (Gustavo A. R. Silva) [task:536565]
  - scsi: lpfc: Fix use-after-free rport memory access in lpfc_register_remote_port() (Justin Tee) [task:536565]
  - scsi: lpfc: Silence an incorrect device output (Jun Chen) [task:536565]
  - scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (Justin Tee) [task:536565]
  - scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (Justin Tee) [task:536565]
  - scsi: lpfc: Reinitialize internal VMID data structures after FLOGI completion (Justin Tee) [task:536565]
  - scsi: lpfc: Fix crash involving race between FLOGI timeout and devloss handler (Justin Tee) [task:536565]
  - scsi: lpfc: Fix WQ|CQ|EQ resource check (Justin Tee) [task:536565]
  - xfs: Retry allocating space in xfs_bmap_extents_to_btree (Chi Zhiling) [task:566335, task:587243, task:589957, task:593187, task:594873, task:595621]
  - net/mlx5: Prevent high-rate FW commands from populating all slots (Tariq Toukan) [task:583189]
  - vfio/type1: Handle different mdev isolation type (Lu Baolu) [task:570447]
  - vfio/type1: Add domain at(de)taching group helpers (Lu Baolu) [task:570447]
  - vfio/mdev: Add iommu related member in mdev_device (Lu Baolu) [task:570447]
  - iommu: Add APIs for multiple domains per device (Lu Baolu) [task:570447]
  - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Justin Tee) [task:571029]
  - scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (Justin Tee) [task:571029]
  - scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (Justin Tee) [task:571029]
  - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Shay Drory) [task:536557]
  - net/mlx5: Remove redundant error on reclaim pages (Moshe Shemesh) [task:536557]
  - net/mlx5: cmdif, Add new api for command execution (Saeed Mahameed) [task:536557]
  - net/mlx5: Stop polling for command response if interface goes down (Moshe Shemesh) [task:536557]
  - net/mlx5: Fix handling of entry refcount when command is not issued to FW (Moshe Shemesh) [task:536557]
  - net/mlx5: cmdif, Avoid skipping reclaim pages if FW is not accessible (Saeed Mahameed) [task:536557]
  - net/mlx5: Fix a race when moving command interface to events mode (Eran Ben Elisha) [task:536557]
  - sched: Solve KABI error issues and add partial comment information (gonglinkai) [task:554493]
  - dm: Fix inaccurate iostat statistics that occur when I/O requests are split (zhanggenjian) [task:560365]
  - libceph: fix potential use-after-free in have_mon_and_osd_map() (Ilya Dryomov) [task:573593] {CVE-2025-68285}
  - net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set (Mike Manning) [task:583459]
  - ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() (Eric Dumazet) [task:583459]
  - inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() (Eric Dumazet) [task:583459]
  - OPENEULER: net: Add Huawei Intelligent Network Card Driver (zhoubin) [task:544303]
  - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (Jiayuan Chen) [task:520567] {CVE-2025-38608}
  - bpf, sockmap: Fix sk_msg_reset_curr (Zijian Zhang) [task:520567]
  - bpf, sockmap: Several fixes to bpf_msg_push_data (Zijian Zhang) [task:520567]
  - bpf: Sockmap/tls, msg_push_data may leave end mark in place (John Fastabend) [task:520567]
  - bpf: sockmap, updating the sg structure should also update curr (John Fastabend) [task:520567]
  - bpf: Sockmap/tls, fix pop data with SK_DROP return code (John Fastabend) [task:520567]
  - bpf: Sockmap, skmsg helper overestimates push, pull, and pop bounds (John Fastabend) [task:520567]
  - bpf: helper to pop data from messages (John Fastabend) [task:520567]
  - usb: xhci: Fix NULL pointer dereference on certain command aborts (Michal Pecio) [task:440504] {CVE-2024-57981}
  - net_sched: qfq: Fix double list add in class with netem as child qdisc (Victor Nogueira) [task:476203]
  - net_sched: drr: Fix double list add in class with netem as child qdisc (Victor Nogueira) [task:476203]
  - net/sched: Always pass notifications when child class becomes empty (Lion Ackermann) [task:476203]
  - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Pedro Tammela) [task:476203] {CVE-2025-38001}
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Cong Wang) [task:476217] {CVE-2025-38000}
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Victor Nogueira) [task:476203]
  - sched: Fix detection of empty queues in child qdiscs (Toke Høiland-Jørgensen) [task:476203]
  - ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports (Takashi Iwai) [task:440634]
  - ALSA: usb-audio: Cancel pending work at closing a MIDI substream (Takashi Iwai) [task:440634] {CVE-2022-49545}
  - ALSA: usb-audio: Replace tasklet with work (Takashi Iwai) [task:440634]
  - netlink: Fix rmem check in netlink_broadcast_deliver(). (Kuniyuki Iwashima) [task:505933]
  - netlink: make sure we allow at least one dump skb (Jakub Kicinski) [task:505933]
  - netlink: Fix wraparounds of sk->sk_rmem_alloc. (Kuniyuki Iwashima) [task:505933] {CVE-2025-38465}
  - netlink: annotate lockless accesses to nlk->max_recvmsg_len (Eric Dumazet) [task:505933]
  - sch_htb: make htb_deactivate() idempotent (Cong Wang) [task:466415] {CVE-2025-37953}
  - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create (Yang Chenzhi) [task:589039] {CVE-2025-68774}
  - hfsplus: Verify inode mode when loading from disk (Tetsuo Handa) [task:589047] {CVE-2025-68767}
  - ipvs: fix ipv4 null-ptr-deref in route error path (Slavin Liu) [task:589523] {CVE-2025-68813}
  - btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer (Tetsuo Handa) [task:576527] {CVE-2022-50766}
  - btrfs: fix race when deleting free space root from the dirty cow roots list (Filipe Manana) [task:576625] {CVE-2023-54067}
  - usbnet: Fix using smp_processor_id() in preemptible code warnings (Zqiang) [task:553671] {CVE-2025-40164}
  - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode (Gokul Sivakumar) [task:569685] {CVE-2025-40321}
  - brcmfmac: Add P2P Action Frame retry delay to fix GAS Comeback Response failure issue (Justin Li) [task:569685]
  - brcmfmac: Fix P2P Group Formation failure via Go-neg method (Joseph Chuang) [task:569685]
  - brcmfmac: p2p cert 6.1.9-support GOUT handling p2p presence request (Madhan Mohan R) [task:569685]
  - net: fix stack overflow when LRO is disabled for virtual interfaces (Taehee Yoo) [task:576549] {CVE-2023-54012}
  - tipc: Fix use-after-free in tipc_mon_reinit_self(). (Kuniyuki Iwashima) [task:567289] {CVE-2025-40280}
  - crypto: af_alg - Set merge to zero early in af_alg_sendmsg (Herbert Xu) [task:540405] {CVE-2025-39931}
  - apparmor: Fix memleak in alloc_ns() (Xiu Jianfeng) [task:578001] {CVE-2022-50860}
  - net/net_failover: fix txq exceeding warning (Faicker Mo) [task:577763] {CVE-2023-54236}
  - objtool: Fix SEGFAULT (Christophe Leroy) [task:577749] {CVE-2022-50879}
  - dm cache: free background tracker's queued work in btracker_destroy (Joe Thornber) [task:567625] {CVE-2023-53765}
  - ext4: fix deadlock when converting an inline directory in nojournal mode (Theodore Ts'o) [task:578181] {CVE-2023-54311}
  - ext4: refresh inline data size before write operations (Deepanshu Kartikey) [task:572651] {CVE-2025-68264}
  - media: af9005: Fix null-ptr-deref in af9005_i2c_xfer (Zhang Shurong) [task:577843] {CVE-2023-54314}
  - btrfs: fix lockdep splat and potential deadlock after failure running delayed items (Filipe Manana) [task:577835] {CVE-2023-54224}
  - scsi: target: iscsit: Free cmds before session free (Dmitry Bogdanov) [task:577935] {CVE-2023-54184}
  - scsi: iscsi: target: fix spelling mistake "entires" -> "entries" (Colin Ian King) [task:577935]
  - drm/i915/gvt: fix gvt debugfs destroy (Zhenyu Wang) [task:576469] {CVE-2023-54098}
  - nvme-core: fix memory leak in dhchap_secret_store (Chaitanya Kulkarni) [task:570223] {CVE-2023-53852}
  - iavf: use internal state to free traffic IRQs (Ahmed Zaki) [task:570137] {CVE-2023-53850}
  - drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (Min Li) [task:578229] {CVE-2023-54202}
  - f2fs: fix potential corruption when moving a directory (Jaegeuk Kim) [task:578145] {CVE-2023-54187}
  - f2fs: report ENOENT correctly in f2fs_rename (Jaegeuk Kim) [task:578145]
  - amba: bus: fix refcount leak (Peng Fan) [task:578027] {CVE-2023-54230}
  - bpf: Prevent decl_tag from being referenced in func_proto arg (Stanislav Fomichev) [task:578175] {CVE-2022-50883}
  - media: tuners: qt1010: replace BUG_ON with a regular error (Hans Verkuil) [task:577985] {CVE-2023-54282}
  - scsi: qedf: Fix NULL dereference in error handling (Jinhong Zhu) [task:577959] {CVE-2023-54289}
  - scsi: qedf: Fix error codes in qedf_alloc_global_queues() (Dan Carpenter) [task:577959]
  - Revert "IB/isert: Fix incorrect release of isert connection" (Leon Romanovsky) [task:577895] {CVE-2023-54219}
  - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (Christophe JAILLET) [task:577885] {CVE-2023-54266}
  - crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr (Ye Weihua) [task:577881] {CVE-2022-50814}
  - RDMA/srpt: Add a check for valid 'mad_agent' pointer (Saravanan Vajravel) [task:577875] {CVE-2023-54274}
  - RDMA/srpt: Fix disabling device management (Kamal Heib) [task:577875]
  - nilfs2: fix shift-out-of-bounds due to too large exponent of block size (Ryusuke Konishi) [task:577823] {CVE-2022-50864}
  - tracing: Fix incomplete locking when disabling buffered events (Petr Pavlu) [task:578221]
  - tracing: Fix warning in trace_buffered_event_disable() (Zheng Yejian) [task:578221] {CVE-2023-54211}
  - scsi: qla2xxx: Array index may go out of bound (Nilesh Javali) [task:578169] {CVE-2023-54179}
  - bpf: Fix issue in verifying allow_ptr_leaks (Yafang Shao) [task:577649] {CVE-2023-54181}
  - ipv6/sit: use DEV_STATS_INC() to avoid data-races (Eric Dumazet) [task:576945] {CVE-2022-50764}
  - sit: replace 68 with micro IPV4_MIN_MTU (zhang kai) [task:576945]
  - sit: use dst_cache in ipip6_tunnel_xmit (Haishuang Yan) [task:576945]
  - configfs: fix possible memory leak in configfs_create_dir() (Chen Zhongjin) [task:576961] {CVE-2022-50751}
  - configfs: factor dirent removal into helpers (Christoph Hellwig) [task:576961]
  - bpf: Do not let BPF test infra emit invalid GSO types to stack (Daniel Borkmann) [task:577033] {CVE-2025-68725}
  - ext4: silence the warning when evicting inode with dioread_nolock (Zhang Yi) [task:577027] {CVE-2022-50730}
  - audit: fix possible soft lockup in __audit_inode_child() (Gaosheng Cui) [task:576981] {CVE-2023-54045}
  - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Fedor Pchelkin) [task:576959] {CVE-2023-54134}
  - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (Nilesh Javali) [task:576931] {CVE-2023-54014}
  - btrfs: fix race when deleting quota root from the dirty cow roots list (Filipe Manana) [task:576951] {CVE-2023-54032}
  - nbd: defer config put in recv_work (Zheng Qixing) [task:576921] {CVE-2025-68372}
  - nbd: defer config unlock in nbd_genl_connect (Zheng Qixing) [task:576883] {CVE-2025-68366}
  - media: anysee: fix null-ptr-deref in anysee_master_xfer (Zhang Shurong) [task:576879] {CVE-2023-54093}
  - scsi: smartpqi: Fix device resources accessed after device removal (Mike McGowen) [task:576711] {CVE-2025-68371}
  - scsi: qla2xxx: Clear cmds after chip reset (Tony Battersby) [task:576985] {CVE-2025-68745}
  - nvmet-tcp: add bounds check on Transfer Tag (Varun Prakash) [task:576893] {CVE-2022-50717}
  - nvmet-tcp: Fix NULL dereference when a connect data comes in h2cdata pdu (Ziye Yang) [task:576893]
  - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (Thorsten Blum) [task:576567] {CVE-2025-68724}
  - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() (Abdun Nihaal) [task:576581] {CVE-2025-68734}
  - usb: potential integer overflow in usbg_make_tpg() (Chen Yufeng) [task:576543] {CVE-2025-68750}
  - fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() (Andrew Kanner) [task:576553] {CVE-2023-54127}
  - RDMA/core: Fix GID entry ref leak when create_ah fails (Saravanan Vajravel) [task:576593] {CVE-2023-54003}
  - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (Ryusuke Konishi) [task:576337] {CVE-2023-54140}
  - macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (Long Li) [task:577049] {CVE-2025-68367}
  - ice: set tx_tstamps when creating new Tx rings via ethtool (Jacob Keller) [task:576467] {CVE-2022-50710}
  - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() (Dmitry Antipov) [task:576289] {CVE-2025-68364}
  - atm/fore200e: Fix possible data race in fore200e_open() (Gui-Dong Han) [task:575751] {CVE-2025-68339}
  - ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (Alexey Nepomnyashih) [task:573201] {CVE-2025-68261}
  - usb: storage: Fix memory leak in USB bulk transport (Desnes Nunes) [task:573401] {CVE-2025-68288}
  - usb: gadget: f_eem: Fix memory leak in eem_unwrap (Kuen-Han Tsai) [task:574005] {CVE-2025-68289}
  - udp_tunnel: use netdev_warn() instead of netdev_WARN() (Alok Tiwari) [task:573277] {CVE-2025-68191}
  - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers (Seungjin Bae) [task:573259] {CVE-2025-68308}
  - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() (Hamza Mahfooz) [task:573675] {CVE-2025-68229}
  - hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() (Viacheslav Dubeyko) [task:573523] {CVE-2025-40351}
  - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing (Al Viro) [task:573519] {CVE-2025-68185}
  - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup (Qendrim Maxhuni) [task:573407] {CVE-2025-68192}
  - bfs: Reconstruct file type when loading from disk (Tetsuo Handa) [task:573225] {CVE-2025-68266}
  - media: imon: make send_packet() more robust (Tetsuo Handa) [task:573221] {CVE-2025-68194}
  - jfs: fix uninitialized waitqueue in transaction manager (Shaurya Rane) [task:573105] {CVE-2025-68168}
  - ALSA: dice: fix buffer overflow in detect_stream_formats() (Junrui Luo) [task:576229] {CVE-2025-68346}
  - drm/amdgpu: fix nullptr err of vm_handle_moved (Heng Zhou) [task:569749] {CVE-2025-40339}
  - drm/amdgpu: update mappings not managed by KFD (Felix Kuehling) [task:569749]
  - drm/amdkfd: keep BOs in system memory if restore failed (Philip Yang) [task:569749]
  - drm/amdgpu: KFD Restore process: Optimize waiting (Harish Kasiviswanathan) [task:569749]
  - drm/amdgpu: Remove explicit wait after VM validate (Harish Kasiviswanathan) [task:569749]
  - usbnet: Prevents free active kevent (Lizhi Xu) [task:573207] {CVE-2025-68312}
  - timers: Fix NULL function pointer race in timer_shutdown_sync() (Yipeng Zou) [task:573247] {CVE-2025-68214}
  - scsi: core: Fix a regression triggered by scsi_host_busy() (Bart Van Assche) [task:572887] {CVE-2025-68224}
  - page_pool: always add GFP_NOWARN for ATOMIC allocations (Jakub Kicinski) [task:573099] {CVE-2025-68321}
  - mm/huge_memory: fix dereferencing invalid pmd migration entry (Gavin Guo) [task:466416] {CVE-2025-37958}
  - usb: storage: sddr55: Reject out-of-bound new_pba (Tianchu Chen) [task:571709] {CVE-2025-40345}
  - sctp: Fix MAC comparison to be constant-time (Eric Biggers) [task:554169] {CVE-2025-40204}
  - Bluetooth: bcsp: receive data only if registered (Ivan Pravdin) [task:569903] {CVE-2025-40308}
  - sctp: Prevent TOCTOU out-of-bounds write (Stefan Wiehler) [task:570215] {CVE-2025-40331}
  - usb: early: xhci-dbc: Fix a potential out-of-bound memory access (Christophe JAILLET) [task:569807] {CVE-2023-53840}
  - net: read sk->sk_family once in sk_mc_loop() (Eric Dumazet) [task:569859] {CVE-2023-53831}
  - crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (Mark O'Donovan) [task:570033] {CVE-2023-53817}
  - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (Dmitry Antipov) [task:570061] {CVE-2023-53808}
  - pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() (Ma Ke) [task:534325] {CVE-2025-39846}
  - ppp: fix memory leak in pad_compress_skb (Qingfang Deng) [task:534321] {CVE-2025-39847}
  - jfs: Verify inode mode when loading from disk (Tetsuo Handa) [task:569317] {CVE-2025-40312}
  - usb: gadget: f_fs: Fix epfile null pointer access after ep enable. (Owen Gu) [task:569459] {CVE-2025-40315}
  - RDMA/hns: fix memory leak in hns_roce_alloc_mr() (Zhengchao Shao) [task:569467] {CVE-2022-50662}
  - Bluetooth: SCO: Fix UAF on sco_conn_free (Luiz Augusto von Dentz) [task:569293] {CVE-2025-40309}
  - driver core: fix resource leak in device_add() (Zhengchao Shao) [task:539843] {CVE-2023-53594}
  - trace/blktrace: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) [task:533251] {CVE-2023-53408}
  - blktrace: fix use after free for struct blk_trace (Yu Kuai) [task:533251]
  - drivers: base: dd: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) [task:533259] {CVE-2023-53390}
  - driver core: dd: remove deferred_devices variable (Greg Kroah-Hartman) [task:533259]
  - ocfs2: fix recursive semaphore deadlock in fiemap call (Mark Tinguely) [task:535625] {CVE-2025-39885}
  - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount (Liu Shixin via Jfs-discussion) [task:539047] {CVE-2023-53616}
  - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer (Hans de Goede) [task:539117] {CVE-2025-39937}
  - net: rfkill: gpio: add DT support (Philipp Zabel) [task:539117]
  - btrfs: output extra debug info if we failed to find an inline backref (Qu Wenruo) [task:539195] {CVE-2023-53672}
  - ring-buffer: Fix deadloop issue on reading trace_pipe (Zheng Yejian) [task:539297] {CVE-2023-53668}
  - scsi: qla4xxx: Add length check when parsing nlattrs (Lin Ma) [task:539903] {CVE-2023-53456}
  - iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() (Dan Carpenter) [task:539905] {CVE-2023-53476}
  - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (Konstantin Shelekhin) [task:540563] {CVE-2023-53676}
  - scsi: qla2xxx: Fix deletion race condition (Quinn Tran) [task:540555] {CVE-2023-53615}
  - scsi: qla2xxx: Avoid fcport pointer dereference (Nilesh Javali) [task:540103] {CVE-2023-53603}
  - gfs2: Fix possible data races in gfs2_show_options() (Tuo Li) [task:540557] {CVE-2023-53622}
  - iommu: Fix error unwind in iommu_group_alloc() (Jason Gunthorpe) [task:540195] {CVE-2023-53482}
  - pcmcia: Add error handling for add_interval() in do_validate_mem() (Wentao Liang) [task:540201] {CVE-2025-39920}
  - kobject: Add sanity check for kset->kobj.ktype in kset_register() (Zhen Lei) [task:540453] {CVE-2023-53480}
  - fbcon: Fix OOB access in font allocation (Thomas Zimmermann) [task:542821]
  - fbcon: fix integer overflow in fbcon_do_set_font (Samasth Norway Ananda) [task:542821] {CVE-2025-39967}
  - scsi: target: target_core_configfs: Add length check to avoid buffer overflow (Wang Haoran) [task:542893] {CVE-2025-39998}
  - i40e: fix idx validation in i40e_validate_queue_map (Lukasz Czapnik) [task:542885] {CVE-2025-39972}
  - i40e: add max boundary check for VF filters (Lukasz Czapnik) [task:542889] {CVE-2025-39968}
  - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove (Duoming Zhou) [task:542891] {CVE-2025-39996}
  - drm/omap: dss: Fix refcount leak bugs (Liang He) [task:544551] {CVE-2022-50574}
  - drm/omap: dss: Cleanup DSS ports on initialisation failure (Laurent Pinchart) [task:544551]
  - drm/omap: dss: Handle DPI and SDI port initialization failures (Laurent Pinchart) [task:544551]
  - soc: qcom: qmi_encdec: Restrict string length in decode (Chris Lew) [task:544625] {CVE-2023-53729}
  - ipvs: Defer ip_vs_ftp unregister during netns cleanup (Slavin Liu) [task:546067] {CVE-2025-40018}
  - Squashfs: fix uninit-value in squashfs_get_parent (Phillip Lougher) [task:546583] {CVE-2025-40049}
  - fs: udf: fix OOB read in lengthAllocDescs handling (Larshin Sergey) [task:546611] {CVE-2025-40044}
  - net: dlink: handle copy_thresh allocation failure (Yeounsu Moon) [task:546803] {CVE-2025-40053}
  - net: dl2k: switch from 'pci_' to 'dma_' API (Christophe JAILLET) [task:546803]
  - ocfs2: fix double free in user_cluster_connect() (Dan Carpenter) [task:546813] {CVE-2025-40055}
  - pinctrl: check the return value of pinmux_ops::get_function_name() (Bartosz Golaszewski) [task:546825] {CVE-2025-40030}
  - perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (Leo Yan) [task:546827] {CVE-2025-40081}
  - net/9p: fix double req put in p9_fd_cancelled (Nalivayko Sergey) [task:546995] {CVE-2025-40027}
  - bpf: Explicitly check accesses to bpf_sock_addr (Paul Chaignon) [task:546823] {CVE-2025-40078}
  - NFSD: Define a proc_layoutcommit for the FlexFiles layout type (Chuck Lever) [task:547733] {CVE-2025-40087}
  - hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() (Viacheslav Dubeyko) [task:547751] {CVE-2025-40088}
  - usb: gadget: f_ecm: Refactor bind path to use __free() (Kuen-Han Tsai) [task:547759] {CVE-2025-40093}
  - usb: gadget: remove max support speed info in bind operation (Linyu Yuan) [task:547759]
  - usb: gadget: f_acm: Refactor bind path to use __free() (Kuen-Han Tsai) [task:547763] {CVE-2025-40094}
  - net/ip6_tunnel: Prevent perpetual tunnel growth (Dmitry Safonov) [task:554173] {CVE-2025-40173}
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist (Victor Nogueira) [task:505935] {CVE-2025-38457}
  - net: sched: simplify the qdisc_leaf code (Tonghao Zhang) [task:505935]
  - md/raid1: fix error: ISO C90 forbids mixed declarations (Nigel Croxon) [task:544627]
  - md: raid1: fix potential OOB in raid1_remove_disk() (Zhang Shurong) [task:544627] {CVE-2023-53722}
  - bpf: Sync pending IRQ work before freeing ring buffer (Noorain Eqbal) [task:567631] {CVE-2025-40319}
  - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation (Lu Wei) [task:540241] {CVE-2023-53477}
  - net/sched: sch_qfq: Fix null-deref in agg_dequeue (Xiang Mei) [task:547995] {CVE-2025-40083}
  - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast (I Viswanath) [task:554197] {CVE-2025-40140}
  - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (Alexandr Sapozhnikov) [task:554269] {CVE-2025-40187}
  - pid: Add a judgment for ns null in pid_nr_ns (gaoxiang17) [task:554209] {CVE-2025-40178}
  - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx (Li Nan) [task:554213] {CVE-2025-40125}
  - scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() (Ranjan Kumar) [task:554257] {CVE-2025-40115}
  - mm: hugetlb: avoid soft lockup when mprotect to large memory area (Yang Shi) [task:554271] {CVE-2025-40153}
  - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Daniel Borkmann) [task:554313] {CVE-2025-40183}
  - Squashfs: reject negative file sizes in squashfs_read_inode() (Phillip Lougher) [task:555251] {CVE-2025-40200}
  - Squashfs: add additional inode sanity checking (Phillip Lougher) [task:555251]
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() (Yuhao Jiang) [task:559713] {CVE-2025-40211}
  - ocfs2: clear extent cache after moving/defragmenting extents (Deepanshu Kartikey) [task:566411] {CVE-2025-40233}
  - hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() (Viacheslav Dubeyko) [task:566403] {CVE-2025-40243}
  - ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd (Haein Lee) [task:567267] {CVE-2025-40275}
  - do_change_type(): refuse to operate on unmounted/not ours mounts (Al Viro) [task:508235] {CVE-2025-38498}
  - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (Justin Tee) [task:527679] {CVE-2025-38695}
  - scsi: qla4xxx: Prevent a potential error pointer dereference (Dan Carpenter) [task:527979] {CVE-2025-39676}
  - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (Yury Norov [NVIDIA]) [task:530267] {CVE-2025-39742}
  - scsi: qla2xxx: Pointer may be dereferenced (Shreyas Deodhar) [task:531899] {CVE-2023-53150}
  - net: dcb: choose correct policy to parse DCB_ATTR_BCN (Lin Ma) [task:533859] {CVE-2023-53369}
  - wifi: mwifiex: avoid possible NULL skb pointer dereference (Dmitry Antipov) [task:533893] {CVE-2023-53384}
  - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (Li Nan) [task:533857] {CVE-2023-53380}
  - nvme: fix multipath crash caused by flush request when blktrace is enabled (Yanjun Zhang) [task:533641] {CVE-2022-50388}
  - Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure (Tetsuo Handa) [task:533075] {CVE-2022-50374}
  - Bluetooth: hci_serdev: Close UART port if NON_PERSISTENT_SETUP is set (Venkata Lakshmi Narayana Gubba) [task:533075]
  - RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish() (Nikita Zhandarovich) [task:532845] {CVE-2023-53335}
  - USB: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) [task:532729] {CVE-2023-53359}
  - USB: core: no need to save usb_devices_root (Greg Kroah-Hartman) [task:532729]
  - USB: move usb debugfs directory creation to the usb common core (Greg Kroah-Hartman) [task:532729]
  - HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() (Minjong Kim) [task:532225] {CVE-2025-39808}
  - btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() (Filipe Manana) [task:531815] {CVE-2025-39800}
  - btrfs: unfold transaction abort at btrfs_copy_root() (Filipe Manana) [task:531815]
  - USB: uhci: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) [task:531787] {CVE-2023-53197}
  - USB: host: uhci: remove dentry pointer for debugfs (Greg Kroah-Hartman) [task:531787]
  - md/raid10: fix wrong setting of max_corr_read_errors (Li Nan) [task:532129] {CVE-2023-53313}
  - ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (Tengda Wu) [task:532363] {CVE-2025-39813}
  - ext4: fix i_disksize exceeding i_size problem in paritally written case (Zhihao Cheng) [task:532121] {CVE-2023-53270}
  - mISDN: hfcpci: Fix warning when deleting uninitialized timer (Vladimir Riabchun) [task:532231] {CVE-2025-39833}
  - ipv6/addrconf: fix a potential refcount underflow for idev (Ziyang Xuan) [task:531859] {CVE-2023-53189}
  - fs: Prevent file descriptor table allocations exceeding INT_MAX (Sasha Levin) [task:530329] {CVE-2025-39756}
  - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (Theodore Ts'o) [task:527339] {CVE-2025-38701}
  - net: kcm: Fix race condition in kcm_unattach() (Sven Stegemann) [task:527571] {CVE-2025-38717}
  - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO (Thomas Weißschuh) [task:527669] {CVE-2025-38696}
  - pNFS: Fix uninited ptr deref in block/scsi layout (Sergey Bashirov) [task:527579] {CVE-2025-38691}
  - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (Showrya M N) [task:527691] {CVE-2025-38700}
  - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() (Tetsuo Handa) [task:527561] {CVE-2025-38712}
  - jfs: Regular file corruption check (Edward Adam Davis) [task:527667] {CVE-2025-38698}
  - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (Alex Guo) [task:527379] {CVE-2025-38694}
  - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar (Alex Guo) [task:527341] {CVE-2025-38693}
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (Viacheslav Dubeyko) [task:527343] {CVE-2025-38713}
  - i2c: qup: jump out of the loop in case of timeout (Yang Xiwen) [task:522999] {CVE-2025-38671}
  - nilfs2: reject invalid file types when reading inodes (Ryusuke Konishi) [task:522913] {CVE-2025-38663}
  - hfsplus: remove mutex_lock check in hfsplus_free_extents (Yangtao Li) [task:523427] {CVE-2025-38650}
  - netfilter: xt_nfacct: don't assume acct name is null-terminated (Florian Westphal) [task:523363] {CVE-2025-38639}
  - drm/sched: Increment job count before swapping tail spsc queue (Matthew Brost) [task:520109] {CVE-2025-38515}
  - HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras (Chia-Lin Kao (AceLan)) [task:519339] {CVE-2025-38540}
  - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request (NeilBrown) [task:506037] {CVE-2025-38430}
  - hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() (Viacheslav Dubeyko) [task:566437] {CVE-2025-40244}
  - be2net: pass wrb_params in case of OS2BMC (Andrey Vatoropin) [task:566439] {CVE-2025-40264}
  - s390/ctcm: Fix double-kfree (Aleksei Nikiforov) [task:566387] {CVE-2025-40253}
  - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path (Pauli Virtanen) [task:567195] {CVE-2025-40282}
  - tun: Fix memory leak for detached NAPI queue. (Kuniyuki Iwashima) [task:539057] {CVE-2023-53685}
  - tun: support NAPI for packets received from batched XDP buffs (Harold Huang) [task:539057]
  - net: tun: rebuild error handling in tun_get_user (Chuang Wang) [task:539057]
  - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (Manish Rangankar) [task:532367] {CVE-2023-53280}
  - dm: fix NULL pointer dereference in __dm_suspend() (Zheng Qixing) [task:554253] {CVE-2025-40134}
  - nvme-core: fix dev_pm_qos memleak (Chaitanya Kulkarni) [task:539301] {CVE-2023-53670}
  - nvme-auth: don't ignore key generation failures when initializing ctrl keys (Sagi Grimberg) [task:539301]
  - null_blk: Always check queue mode setting from configfs (Chaitanya Kulkarni) [task:540445] {CVE-2023-53576}
  - xen/events: Return -EEXIST for bound VIRQs (Jason Andryuk) [task:553675] {CVE-2025-40160}
  - xen/events: Cleanup find_virq() return codes (Jason Andryuk) [task:553675]
  - xen: Use evtchn_type_t as a type for event channels (Yan Yankovskyi) [task:553675]
  - media: mceusb: Use new usb_control_msg_*() routines (Alan Stern) [task:482237] {CVE-2022-49937}
  - USB: correct API of usb_control_msg_send/recv (Oliver Neukum) [task:482237]
  - USB: core: message.c: use usb_control_msg_send() in a few places (Greg Kroah-Hartman) [task:482237]
  - USB: add usb_control_msg_send() and usb_control_msg_recv() (Greg Kroah-Hartman) [task:482237]
  - USB: move snd_usb_pipe_sanity_check into the USB core (Greg Kroah-Hartman) [task:482237]
  - IB/mad: Don't call to function that might sleep while in atomic context (Leonid Ravich) [task:539101] {CVE-2022-50472}
  - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping (Takashi Iwai) [task:554195] {CVE-2025-40121}
  - drm/vmwgfx: Fix a null-ptr access in the cursor snooper (Zack Rusin) [task:553045] {CVE-2025-40110}
  - netdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() failed (Zhengchao Shao) [task:540047] {CVE-2022-50500}
  - can: peak_usb: fix shift-out-of-bounds issue (Stéphane Grosjean) [task:546085] {CVE-2025-40020}
  - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak (Zhen Ni) [task:546817] {CVE-2025-40035}
  - scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list (Xingui Yang) [task:540093] {CVE-2023-53627}
  - usb: gadget: f_rndis: Refactor bind path to use __free() (Kuen-Han Tsai) [task:547767] {CVE-2025-40095}
  - KVM: arm64: Prevent access to vCPU events before init (Oliver Upton) [task:547765] {CVE-2025-40102}
  - drm/gma500: Fix null dereference in hdmi teardown (Zabelin Nikita) [task:543789] {CVE-2025-40011}
  - drm: Fix potential null-ptr-deref due to drmm_mode_config_init() (Shang XiaoJing) [task:544705] {CVE-2022-50556}
  - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Li Qiong) [task:539857] {CVE-2025-39902}
  - qed: Don't collect too many protection override GRC elements (Jamie Bainbridge) [task:539015] {CVE-2025-39949}
  - bnxt: avoid overflow in bnxt_get_nvram_directory() (Maxim Korotkov) [task:539303] {CVE-2023-53661}
  - dm-stripe: fix a possible integer overflow (Mikulas Patocka) [task:538939] {CVE-2025-39940}
  - ALSA: ac97: Fix possible error value of *rac97 (Su Hui) [task:540131]
  - ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer (Su Hui) [task:540131] {CVE-2023-53648}
  - IB/hfi1: Fix possible panic during hotplug remove (Douglas Miller) [task:540451] {CVE-2023-53488}
  - wifi: mt7601u: fix an integer underflow (Jisoo Jang) [task:539337] {CVE-2023-53679}
  - mt7601u: do not use WARN_ON in the datapath (Lorenzo Bianconi) [task:539337]
  - jbd2: check 'jh->b_transaction' before removing it from checkpoint (Zhihao Cheng) [task:539839] {CVE-2023-53526}
  - lib/fonts: fix undefined behavior in bit shift for get_default_font (Gaosheng Cui) [task:539359] {CVE-2022-50511}
  - serial: 8250: fix panic due to PSLVERR (Yunhui Cui) [task:528079] {CVE-2025-39724}
  - x86/MCE: Always save CS register on AMD Zen IF Poison errors (Yazen Ghannam) [task:533313] {CVE-2023-53438}
  - iavf: Fix use-after-free in free_netdev (Ding Hui) [task:539329] {CVE-2023-53556}
  - bpf: reject unhashed sockets in bpf_sk_assign (Lorenz Bauer) [task:539295] {CVE-2023-53585}
  - drm/radeon: Fix integer overflow in radeon_cs_parser_init (hackyzh002) [task:532389] {CVE-2023-53309}
  - wifi: iwlwifi: mvm: don't trust firmware n_channels (Johannes Berg) [task:540147] {CVE-2023-53589}
  - net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (Cezar Bulinaru) [task:481987] {CVE-2022-50073}
  - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (Baokun Li) [task:539011] {CVE-2022-50485}
  - ext4: avoid deadlock in fs reclaim with page writeback (Jan Kara) [task:532081] {CVE-2023-53149}
  - RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (Shay Drory) [task:533401] {CVE-2023-53393}
  - PCI: pnv_php: Clean up allocated IRQs on unplug (Timothy Pearson) [task:522801] {CVE-2025-38624}
  - cifs: prevent NULL pointer dereference in UTF16 conversion (Makar Semyonov) [task:534323] {CVE-2025-39838}
  - NFS: Fix an Oops in nfs_d_automount() (Trond Myklebust) [task:533901] {CVE-2022-50385}
  - atm: clip: Fix memory leak of struct clip_vcc. (Kuniyuki Iwashima) [task:519707] {CVE-2025-38546}
  - ipv4: use RCU protection in __ip_rt_update_pmtu() (Eric Dumazet) [task:515369] {CVE-2025-21766}
  - e1000e: fix heap overflow in e1000_set_eeprom (Vitaly Lifshits) [task:539845] {CVE-2025-39898}
  - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Kuniyuki Iwashima) [task:540117] {CVE-2025-39955}
  - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() (Duoming Zhou) [task:540515] {CVE-2022-50422}
  - scsi: sg: Do not sleep in atomic context (Bart Van Assche) [task:566401] {CVE-2025-40259}
  - scsi: lpfc: Fix buffer free/clear order in deferred receive path (John Evans) [task:534335] {CVE-2025-39841}
  - pstore/ram: Check start of empty przs during init (Enlin Mu) [task:532113] {CVE-2023-53331}
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (Li Nan) [task:532215] {CVE-2025-39817}
  - sched/fair: Don't balance task to its current running CPU (Yicong Yang) [task:531901] {CVE-2023-53215}
  - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (Trond Myklebust) [task:527961] {CVE-2025-39730}
  - sctp: linearize cloned gso packets in sctp_rcv (Xin Long) [task:527687] {CVE-2025-38718}
  - md/raid1: Fix stack memory use after return in raid1_reshape (Wang Jinchao) [task:505915] {CVE-2025-38445}
  - sctp: avoid NULL dereference when chunk data buffer is missing (Alexey Simakov) [task:566441] {CVE-2025-40240}
  - PHYTIUM: drm/phytium: Avoid NULL PTR issue when setting gamma (YuDa) [task:562451]
  - PHYTIUM: drm: Phytium: Add DC driver module_device_table (Liu Tianyu) [task:562451]
  - PHYTIUM: drm/phytium: Bugfix lane count parameter can't be set problem (WangHao) [task:562451]
  - PHYTIUM: drm/phytium: read EDID in bmc mode (WangHao) [task:562451]
  - PHITIUM: drm/phytium: Enable dither function (YuDa) [task:562451]
  - PHYTIUM: drm/phytium: Fix gpio resource release logic (YuDa) [task:562451]
  - PHYTIUM: drm/phytium: Change the maximum resolution supported by pe220x (YuDa) [task:550747]
  - add a NULL check for ring/ring->desc in NIC rnp (Gang Yan) [task:562563]
  - HYGON: crypto: ccp: SM2 ccp encryption failed on D3, prompting ILLEGAL_BUFFER_LENGTH. (Yabin Li) [task:556059]
  - HYGON: HCT: update hct module to support hct2.1 (yangdepei) [task:556059]
  - HYGON: crypto: ccp: ensure kvm_bind_vtkm is only executed once for csv guest (xiongmengbiao) [task:556059]
  - HYGON: crypto: ccp: support vtkm live migration (xiongmengbiao) [task:556059]
  - HYGON: crypto: ccp - Fix crash when rebind ccp device for ccp.ko (Mengbiao Xiong) [task:556059]
  - HYGON: crypto: ccp: use time_after() instead of time_before() to checks schedule condition (xiongmengbiao) [task:556059]
  - HYGON: crypto: ccp: Fix master PSP pointer null setting on unbind (Xiangyu Xu) [task:556059]
  - HYGON: optimize TDM driver code logic to avoid warning (chench) [task:556059]
  - HYGON: crypto: ccp: add "tdm_guard" as kernel and module parameter (niuyongwen) [task:556059]
  - HYGON: drivers/crypto/ccp: fix soft lockup warning in psp_mutex_lock_timeout() (xiongmengbiao) [task:556059]
  - HYGON: crypto: ccp: fix The high priority queue changes cmd_id of the queued elements (xiongmengbiao) [task:556059]
  - HYGON: crypto: ccp: support psp generic ringbuffer (xiongmengbiao) [task:556059]
  - HYGON: crypto: ccp: Remove vpsp's dependency on sev module (xiongmengbiao) [task:556059]
  - HYGON: crypto: ccp: add new pci device id for D3 (chench) [task:556059]
  - HYGON: crypto: ccp: Support userspace mmap psp mmio (xiongmengbiao) [task:556059]
  - HYGON: crypto: ccp: Support vpsp ringbuffer overcommit (xiongmengbiao) [task:556059]
  - HYGON: crypto: ccp: Use a workqueue to clean up the vpsp ringbuffer (xiongmengbiao) [task:556059]
  - HYGON: crypto: ccp: move vpsp-related functions to vpsp.c (xiongmengbiao) [task:556059]
  - HYGON: drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn (niuyongwen) [task:556059]
  - ZHAOXIN: usb: pci-quirks: Fix TBT USB Enumeration Long Blocking Issue (leoliu-oc) [task:557201]
  - ZHAOXIN: PCI: Fix PCIe unplug Enumeration Long Blocking Issue (leoliu-oc) [task:557201]
  - OPENEULER: notifiers: Add oops check in blocking_notifier_call_chain() (Yi Yang) [task:551737]
  - OPENEULER: PCI/sysfs: Prohibit unaligned access to I/O port on non-x86 (Yongqiang Liu) [task:551727]
  - Loongarch: crypto: loongson: add cbc(sm4) support (Zhao Qunqin) [task:523799]
  - Loongarch: drivers/iommu: Enhance the robustness of the iommu module (Xianglai Li) [task:523799]
  - Loongarch: driver/vfio: disable vfio pci intx (Xianglai Li) [task:523799]
  - Loongarch: loongarch/configs: enable vfio mdev config (Xianglai Li) [task:523799]
  - Loongarch: drivers/iommu: Add the "iommu disable" probe (Xianglai Li) [task:523799]
  - Loongarch: drivers/pci: Enable pci bridge acs capability (Xianglai Li) [task:523799]
  - LoongArch: config: enable pci host controller fdt driver (Xianglai Li) [task:523799]
  - LoongArch: fix migrate issue (Song Gao) [task:523799]
  - Loongarch: Adjust the saving process of FPU_CSR_TM (zhangtianyang) [task:523799]
  - EDAC: Add an EDAC driver for the Loongson memory controller (Zhao Qunqin) [task:523799]
  - Loongarch: crypto: add sm3 and ecb(sm4) support (Zhao Qunqin) [task:523799]
  - Loongarch: net: phy: add Linkyum support (Zhao Qunqin) [task:523799]
  - Loongarch: tpm: Add a driver for Loongson TPM device (Zhao Qunqin) [task:523799]
  - LoongArch: Preserve firmware configuration if ACPI requires. (Gao Qihang) [task:523799]
  - Loongarch: input: keyboard: do not init atkbd_reset variable to true on Loongson (Zhao Qunqin) [task:523799]
  - xfs: dump log about filesystem when allocation failed (Chi Zhiling) [task:540343]
  - xfs: use XFS_ALLOCTYPE_START_BNO in xfs_bmap_extents_to_btree (Chi Zhiling) [task:540343]
  - fs: fix lock belance in fget_many (Chi Zhiling) [task:540343]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.32.v2401
changelog:
  - OPENEULER: crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers) [task:622625] {CVE-2026-31431}
  - OPENEULER: icrypto: algif_aead - snapshot IV for async AEAD requests (Douya Le) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c (Randy Dunlap) [task:622625] {CVE-2026-31431}
  - OPENEULER: crypto: algif_aead - Only wake up when ctx->more is zero (Herbert Xu) [task:622625]
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Taeyang Lee) [task:593631] {CVE-2026-23060}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.33.v2401
changelog:
  - thirdly update changelog for incoming 4.19.90-89.33.v2401 (Zhengyuan Liu)
  - Revert "PHYTIUM: pswiotlb: Pass dma direction to pswiotlb straightly" (taowei) [task:601439]
  - Revert "PHYTIUM: pswiotlb: Check if min_align_mask of dma is valid" (taowei) [task:601439]
  - Revert "PHYTIUM: pswiotlb: Fix kabi breakage due to "dma: phytium: Add PSWIOTLB mechanism to improve DMA performance"" (taowei) [task:601439]
  - Revert "PHYTIUM: pswiotlb: Move pswiotlb dma functions behind dma_map_ops" (taowei) [task:601439]
  - Revert "PHYTIUM: pswiotlb: Adjust the location of the platform-identification process" (taowei) [task:601439]
  - Revert "PHYTIUM: pswiotlb: Fix a issue of member variable force not being initialized" (taowei) [task:601439]
  - Revert "PHYTIUM: pswiotlb: Bypass pswiotlb when the numa node the device belongs to is invalid" (taowei) [task:601439]
  - Revert "net/mlx5e: Rx, Update page pool numa node when changed" (taowei) [task:601439]
  - Revert "PHYTIUM: pswiotlb: Use fast DMA domain lookup" (taowei) [task:601439]
  - Revert "PHYTIUM: pswiotlb: Move platform-identification to cpu errata" (taowei) [task:601439]
  - secondly update changelog for incoming 4.19.90-89.33.v2401 (Zhengyuan Liu)
  - PHYTIUM: pswiotlb: Move platform-identification to cpu errata (Cui Chao) [bug:533139]
  - Revert "PHYTIUM: pswiotlb: Move platform-identification to cpu errata" (taowei) [bug:533139]
  - update changelog for incoming 4.19.90-89.33.v2401 (Zhengyuan Liu)
  - sched/core: Extend struct cfs_rq (Bing Huang) [task:588907]
  - sched/core: Fix RQCF_ACT_SKIP leak (Hao Jia) [task:588907]
  - sched/core: Avoid multiple calling update_rq_clock() in __cfsb_csd_unthrottle() (Hao Jia) [task:588907]
  - sched: Async unthrottling for cfs bandwidth (Josh Don) [task:588907]
  - sched: Provide raw_spin_rq_*lock*() helpers (Peter Zijlstra) [task:588907]
  - sched/fair: Remove superfluous lock section in do_sched_cfs_slack_timer() (Hui Su) [task:588907]
  - sched/fair: Remove distribute_running from CFS bandwidth (Josh Don) [task:588907]
  - sched/fair: Fix race between runtime distribution and assignment (Huaixin Chang) [task:588907]
  - sched/fair: Don't push cfs_bandwith slack timers forward (bsegall@google.com) [task:588907]
  - fix kabi issue for "clocksource: Reduce clocksource-skew threshold" (Wang Yan) [task:618319]
  - ipmi: ssif: add soft dependency on hisi_ipmi_pso (jianghaoran) [task:604185]
  - OPENEULER: ipmi: Add HiSilicon IPMI Page Soft Offline driver (hewanhan) [task:604185]
  - OPENEULER: uce: Prevent kernel panic for kernel-context UCE with recovery path (Qi Xi) [task:604185]
  - ext4: fix e4b bitmap inconsistency reports (Yongjian Sun) [task:604185]
  - OPENEULER: apei/ghes: Add sysctl interface to control soft-offline page isolation (Qi Xi) [task:604185]
  - OPENEULER: arm64: mm: Add copy mc support for migrate_page (Wupeng Ma) [task:604185]
  - OPENEULER: Revert "OPENEULER: arm64: mm: Add copy mc support for migrate_page" (Qi Xi) [task:604185]
  - f2fs: invalidate dentry cache on failed whiteout creation (Deepanshu Kartikey) [task:590061] {CVE-2025-71069}
  - regulator: core: Fix resolve supply lookup issue (ChiYuan Huang) [task:569843]
  - regulator: core: Use different devices for resource allocation and DT lookup (ChiYuan Huang) [task:569843] {CVE-2022-50616}
  - regulator: gpio: Convert to devm_regulator_register (Axel Lin) [task:569843]
  - regulator: dummy: Use devm_regulator_register() (Zenghui Yu) [task:569843]
  - regulator: Avoid a double 'of_node_get' in 'regulator_of_get_init_node()' (Christophe JAILLET) [task:569843]
  - regulator: of: Add of_node_put() before return in function (Nishka Dasgupta) [task:569843]
  - regulator: Factor out location of init data OF node (Charles Keepax) [task:569843]
  - locks: fix TOCTOU race when granting write lease (Amir Goldstein) [task:606289]
  - locks: eliminate false positive conflicts for write lease (Amir Goldstein) [task:606289]
  - locks: Use inode_is_open_for_write (Nikolay Borisov) [task:606289]
  - PHYTIUM: pswiotlb: Use fast DMA domain lookup (Cui Chao) [task:601439]
  - net/mlx5e: Rx, Update page pool numa node when changed (Saeed Mahameed) [task:601439]
  - PHYTIUM: pswiotlb: Bypass pswiotlb when the numa node the device belongs to is invalid (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Fix a issue of member variable force not being initialized (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Adjust the location of the platform-identification process (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Move platform-identification to cpu errata (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Move pswiotlb dma functions behind dma_map_ops (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Fix kabi breakage due to "dma: phytium: Add PSWIOTLB mechanism to improve DMA performance" (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Check if min_align_mask of dma is valid (Cui Chao) [task:601439]
  - PHYTIUM: pswiotlb: Pass dma direction to pswiotlb straightly (Cui Chao) [task:601439]
  - clocksource: Reduce watchdog readout delay limit to prevent false positives (Thomas Gleixner) [task:608211]
  - clocksource: Set cs_watchdog_read() checks based on .uncertainty_margin (Paul E. McKenney) [task:608211]
  - clocksource: Reduce clocksource-skew threshold (Paul E. McKenney) [task:608211]
  - bfq: Avoid false marking of bic as stably merged (Jan Kara) [task:579359]
  - block, bfq: reset last_bfqq_created on group change (Paolo Valente) [task:579359]
  - block, bfq: avoid delayed merge of async queues (Paolo Valente) [task:579359]
  - block, bfq: boost throughput by extending queue-merging times (Pietro Pedroni) [task:579359]
  - block, bfq: consider also creation time in delayed stable merge (Paolo Valente) [task:579359]
  - block, bfq: fix delayed stable merge check (Luca Mariotti) [task:579359]
  - block, bfq: avoid circular stable merges (Paolo Valente) [task:579359]
  - mm/khugepaged: fix ->anon_vma race (Jann Horn) [task:448841] {CVE-2023-52935}
  - vga: ignore gpu which support SRIOV to use as boot_vga. (Lu Yao) [task:603255]
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Kuniyuki Iwashima) [task:554177] {CVE-2025-40149}
  - net: Add locking to protect skb->dev access in ip_output (Sharath Chandra Vurukala) [task:554177]
  - net/tls: Device offload to use lowest netdevice in chain (Tariq Toukan) [task:554177]
  - net: netdevice: Add operation ndo_sk_get_lower_dev (Tariq Toukan) [task:554177]
  - PHYTIUM: gpio: phytium: Get the max IRQ number from device tree (Li Yuze) [task:562453]
  - PHYTIUM: drivers/perf: phytium: Rename DDR PMU event names (Tan Rui) [task:562453]
  - PHYTIUM: drivers/perf: phytium: Fix issue with PS23X00 DDR PMU on PBF < 1.20. (Tan Rui) [task:562453]
  - PHYTIUM: drivers/perf: phytium: Modify the name of PMU cycles event (Tan Rui) [task:562453]
  - PHYTIUM: i2c-2.0: phytium: Fixed the bug that processed unupdated data (Wu Jinyong) [task:562453]
  - PHYTIUM: i2c-2.0: phytium: Fixed the bug of delayed response to interrupts (Wu Jinyong) [task:562453]
  - PHYTIUM: i2c: phytium: Support MCTP over I2C (Wu Jinyong) [task:562453]
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Yuan Tan) [task:606589] {CVE-2026-23274}
  - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (Takashi Iwai) [task:567349] {CVE-2025-40269}
  - ALSA: usb-audio: Replace s/frame/packet/ where appropriate (Alexander Tsoy) [task:567349]
  - ALSA: usb-audio: Fix packet size calculation (Alexander Tsoy) [task:567349]
  - ALSA: usb-audio: Improve frames size computation (Alexander Tsoy) [task:567349]
  - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Aditya Garg) [task:593597, task:604597] {CVE-2026-23054}
  - hv_netvsc: Allocate rx indirection table size dynamically (Shradha Gupta) [task:593597, task:604597]
  - cnic: Fix use-after-free bugs in cnic_delete_task (Duoming Zhou) [task:539197, task:604597] {CVE-2025-39945}
  - wifi: mwifiex: Initialize the chan_stats array to zero (Qianfeng Rong) [task:539911, task:604597] {CVE-2025-39891}
  - Bluetooth: L2CAP: Fix use-after-free (Zhengping Jiang) [task:532589, task:604597] {CVE-2023-53305}
  - drbd: add missing kref_get in handle_write_conflicts (Sarah Newman) [task:527683, task:604597] {CVE-2025-38708}
  - jfs: upper bound check of tree index in dbAllocAG (Arnaud Lecomte) [task:527301, task:604597] {CVE-2025-38697}
  - fbdev: fix potential buffer overflow in do_register_framebuffer() (Yongzhen Zhang) [task:527563, task:604597] {CVE-2025-38702}
  - net/sched: cls_u32: use skb_header_pointer_careful() (Eric Dumazet) [task:597119] {CVE-2026-23204}
  - net: add skb_header_pointer_careful() helper (Eric Dumazet) [task:597119]
  - bonding: limit BOND_MODE_8023AD to Ethernet devices (Eric Dumazet) [task:593609] {CVE-2026-23099}
  - bonding: combine netlink and console error messages (Jonathan Toppins) [task:593609]
  - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (Michal Schmidt) [task:539841] {CVE-2025-39911}
  - tcp: add a fast path in tcp_delack_timer() (Eric Dumazet) [task:603877]
  - tcp: add a fast path in tcp_write_timer() (Eric Dumazet) [task:603877]
  - tcp: annotate data-races around icsk->icsk_pending (Eric Dumazet) [task:603877]
  - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Miaohe Lin) [task:535605] {CVE-2025-39883}
  - vsock: Ignore signal/timeout on connect() if already established (Michal Luczaj) [task:566429] {CVE-2025-40248}
  - mm: hugetlb: fix UAF in hugetlb_handle_userfault (Liu Shixin) [task:569275] {CVE-2022-50630}
  - xfs: make inode reclaim almost non-blocking (Dave Chinner) [task:603105]
  - tls: separate no-async decryption request handling from async (Sabrina Dubroca) [task:525255] {CVE-2024-58240}
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [task:596501] {CVE-2026-23216}
  - scsi: qla2xxx: Fix bsg_done() causing double free (Anil Gurumurthy) [task:600165] {CVE-2025-71238}
  - scsi: qla2xxx: Add bsg interface to support firmware img validation (Manish Rangankar) [task:600165]
  - scsi: qla2xxx: Fix sparse warning for dport_data (Nilesh Javali) [task:600165]
  - scsi: qla2xxx: Add a new v2 dport diagnostic feature (Bikash Hazarika) [task:600165]
  - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (Berk Cem Goksel) [task:593557] {CVE-2026-23089}
  - net/sched: Enforce that teql can only be used as root qdisc (Jamal Hadi Salim) [task:593593] {CVE-2026-23074}
  - wifi: rsi: Fix memory corruption due to not set vif driver data size (Marek Vasut) [task:593625] {CVE-2026-23073}
  - ALSA: ctxfi: Fix potential OOB access in audio mixer handling (Takashi Iwai) [task:593607] {CVE-2026-23076}
  - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (Will Rosenberg) [task:589013] {CVE-2025-71085}
  - sfc: complete the next packet when we receive a timestamp (Tom Zhao) [task:582061]
  - OPENEULER: livepatch: support for super-long symbol repositioning (caixiaomeng 00662745) [task:479611]
  - sched: move the process identification module to the proper place (gonglinkai) [task:554493]
  - fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Kuniyuki Iwashima) [task:593627] {CVE-2026-23083}
  - netdevsim: fix a race issue related to the operation on bpf_bound_progs list (Yun Lu) [task:583035]
  - ACPICA: Avoid walking the Namespace if start_node is NULL (Cryolitia PukNgae) [task:589059] {CVE-2025-71118}
  - net: Fix kabi caused linux/sched/isolation.h (Xiangqian Zhang) [task:550259]
  - net: auto affinity to exclude isolated CPU cores (Xiangqian Zhang) [task:550259]
  - ext4: guard against EA inode refcount underflow in xattr update (Ahmet Eray Karadag) [task:554287] {CVE-2025-40190}
  - wifi: mt76: do not run mt76u_status_worker if the device is not running (Lorenzo Bianconi) [task:576303] {CVE-2022-50735}
  - vsock/virtio: cap TX credit to local buffer size (Melbin K Mathew) [task:593641] {CVE-2026-23086}
  - vsock/virtio: fix potential underflow in virtio_transport_get_credit() (Melbin K Mathew) [task:593641]
  - vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() (Nikolay Kuratov) [task:593641]
  - x86/unwind/orc: Fall back to using frame pointers for generated code (Josh Poimboeuf) [task:605427]
  - bpf: Fix invalid prog->stats access when update_effective_progs fails (Pu Lehui) [task:577043] {CVE-2025-68742}
  - drm/client: Fix memory leak in drm_client_target_cloned (Jocelyn Falempe) [task:371789]
  - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (Jeongjun Park) [task:497317] {CVE-2025-38337}
  - hwtracing: hisi_ptt: Move type check to the beginning of hisi_ptt_pmu_event_init() (Yang Jihong) [task:592331]
  - sched: add lightweight tracing for rq lock (liwanwu) [task:569877]
  - sched/core: Extend struct rq (Bing Huang) [task:569877]
  - xfs: check buffer pin state after locking in delwri_submit (Dave Chinner) [task:602811]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.34.v2401
changelog:
  - MAILLIST: esp: Force skb_cow_data() on RX when the skb is non-linear (Hyunwoo Kim) [task:626683]
  - seg6: separate dst_cache for input and output paths in seg6 lwtunnel (Andrea Mayer) [task:623091] {CVE-2026-31668}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.35.v2401
changelog:
  - MAILLIST: net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [task:629903] {CVE-2026-46300}


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.36.v2401
changelog:
  - Revert "sched/fair: Don't push cfs_bandwith slack timers forward" (Bing Huang)
  - Revert "sched/fair: Fix race between runtime distribution and assignment" (Bing Huang)
  - Revert "sched/fair: Remove distribute_running from CFS bandwidth" (Bing Huang)
  - Revert "sched/fair: Remove superfluous lock section in do_sched_cfs_slack_timer()" (Bing Huang)
  - Revert "sched: Provide raw_spin_rq_*lock*() helpers" (Bing Huang)
  - Revert "sched: Async unthrottling for cfs bandwidth" (Bing Huang)
  - Revert "sched/core: Avoid multiple calling update_rq_clock() in __cfsb_csd_unthrottle()" (Bing Huang)
  - Revert "sched/core: Fix RQCF_ACT_SKIP leak" (Bing Huang)
  - Revert "sched/core: Extend struct cfs_rq" (Bing Huang)


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.37.v2401
changelog:
  - sched: fix issues introduced by the previous commit. (cuitao) [task:630943]
  - sched: fix kabi problem due to dot (Zhengyuan Liu)
  - ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds) [task:630943]
  - crypto: af_alg - Fix request acceptance condition in af_alg_tsgl_sendmsg (chengang) [task:629353]
  - crypto: algif_aead - fix uninitialized ctx->init (Ondrej Mosnacek) [task:629353]


author: jinzhiguang <jinzhiguang@kylinos.cn> - 0.11.0-8.p01
changelog:
  - Type: update
  - ID:   TASK#183701
  - SUG:  NA
  - DESC: rebuild and addpatch:
  	0001-fix-non-trivial-designated-initializers.patch
  	0001-use-btf_dump__new_deprecated.patch


author: lijian1 <lijian1@kylinos.cn> - 0.11.0-8.p02
changelog:
  - Type: Bugfix
  - ID: TASK#218577
  - SUG: NA
  - DESC: fix percpu map without args, c07f23af3507e0b4971ec4343523d976a048b078,
          3f2b438c8b497129f952531375429b1a93e7620d,39f3996d17f88124acc0170b8659e0856555043a
          3fbe73909e009a6741faed1c444daffed478395e;add patch 0005 for so path;add 0006 for tcpdrop.bt.


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-13
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 CVE-2021-42386


author: liuxu <liuxu156@huawei.com> - 1:1.31.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: lijian <lijian2@kylinos.cn> - 1:1.31.1-35
changelog:
  - Type:cves
  - ID:CVE-2026-38754
  - SUG:NA
  - DESC:re-fix CVE-2026-38754, clear stale IFS state on expansion error


author: xinghe <xinghe2@h-partners.com> - 1.16.1-7
changelog:
  - Type:cves
  - CVE:CVE-2023-31130 CVE-2023-31124 CVE-2023-31147
  - SUG:NA
  - DESC:fix CVE-2023-31130 CVE-2023-31124 CVE-2023-31147


author: lutianxiong<lutianxiong@huawei.com> - 1.16.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix invalid read in ares_parse_soa_reply.c found during fuzzing


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p26
changelog:
  - add patch28:caja-1.12.7-kylin-fix-bugzilla-8197-Udisk-file-system-is-inconsistent.patch
  - 修复caja显示U盘文件系统格式与命令行查看不一致问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p27
changelog:
  - Type:fixbug
  - ID  :[bug#8460][bugzilla]
  - SUG :NA
  - DESC:add patch31:caja-1.12.7-kylin-fix-icon-overlap-when-creating-a-new-file.patch
         删除对于桌面图标大小等级SMALLEST,SMALLER的屏蔽，解决等级SMALLEST,SMALLER,SMALL，
         三种模式下新建文件，图标重叠问题然.解决缩放图标时，SMALLER,SMALL两个级别形态相
         同问题.修改图标间距，解决SMALLER,SMALL两个级别，桌面图标与标题重叠问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p28
changelog:
  - Type:fixbug
  - ID  :[bug#113327]
  - SUG :NA
  - DESC:add patch32:caja-1.12.7-kylin-fix-Unable-to-remount-after-Udisk-is-unmounted.patch
         修复当U盘没有UUID时，手动卸载，再挂载caja崩溃问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p29
changelog:
  - Type:fixbug
  - ID  :[Task#160363]
  - SUG :NA
  - DESC:add patch33:caja-1.12.7-kylin-change-the-dvd-capacity-display.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p31
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add caja-update-translations-for-hk-and-tw.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p33
changelog:
  - Type: bugfix
  - ID:   [TASK#205172]
  - SUG:  NA
  - DESC: add caja-update-Secure-translations-for-hk-and-tw.patch


author: huayadong <huayadong@kylinos.cn> - 01.12.7-1kord0k233.p35
changelog:
  - Type: bugfix
  - ID:   [BUG#217322]
  - SUG:  NA
  - DESC: delete Requires: redhat-menus ,add Requires: kylin-menu


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p36
changelog:
  - Type: bugfix
  - ID:   [BUG#240575]
  - SUG:  NA
  - DESC: fix an used after free problem which caused disk format failure


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p37
changelog:
  - Type: bugfix
  - ID:   [BUG#340468]
  - SUG:  NA
  - DESC: don't free memory that was not dynamically allocated


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p39
changelog:
  - Type: update
  - ID:   [TASK#500863]
  - SUG:  NA
  - DESC: fix nonremovable disks incorrectly placed under removable disks


author: hanshuang <hanshuang@kylinos.cn> - 1:12.2.8-8.p01
changelog:
  - Modify spec file fix python34-devel  python34-setuptools  python34-Cython openEuler-rpm-config problem


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0000-Add-missing-position-handling-to-mount-parameters-gi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0001-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-CVE-2021-20208.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-cifs-utils-fix-probabilistic-compiling-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-mount.cifs-fix-max-buffer-size-when-parsing-snapshot.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-cifs.upcall-update-the-cap-bounding-set-only-when-CA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-mount.cifs-update-the-cap-bounding-set-only-when-CAP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-mount.cifs-fix-crash-when-mount-point-does-not-exist.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-cifs.upcall-fix-regression-in-kerberos-mount.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-cifs.upcall-remove-getpwuid-dependency.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: wangqiang <wangqiang1@kylinos.cn> - 10.0.1-4.p01
changelog:
  - Type:BUGFIX
  - ID:[bug#172007]
  - SUG:NA
  - DESC:Add compile option -DCLANG_LINK_CLANG_DYLIB=ON, -DBUILD_SHARED_LIBS=OFF


author: caiyinan <caiyinan@kylinos.cn> - 196.3-1.p06
changelog:
  - Type:bugfix
  - ID:[bug#186959]
  - SUG:NA
  - DESC:fix unlinked other OS branding file by excluding from packages


author: Xiao Zai<xiaozai@kylinos.cn> - 8.32-5.p04
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: backport three patches: backport-ls-fix-crash-printing-SELinux-context-for-unstatable.patch,backport-tr-fix-crash-validating-c-with-some-case-char-classe.patch,backport-timeout-ensure-foreground-k-exits-with-status-137.patch


author: Lihx <lihaoxiang@kylinos.cn> - 8.32-1.p03
changelog:
  - update to 8.32 for kylin
  - Migrate patch p01 and p02 to version 8.32-1
  - Add color display.zhangqiang <zhangqiang@kylinos.cn>
  - disable check.ouyangkang <ouyangkang@kylinos.cn>


author: fuanan <fuanan3@huawei.com> - 2.13-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add 'autoconf automake' to BuildRequires to use autoreconf command


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-10
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches


author: houhongxun <houhongxun@kylinos.cn> - 1:2.2.13-20.p08
changelog:
  - Type: cves
  - ID:   CVE-2026-39316 CVE-2026-39314 CVE-2026-34979 CVE-2026-34980 CVE-2026-34978 CVE-2026-34990 CVE-2026-27447 CVE-2026-41079
  - SUG:  NA
  - DESC: fix CVE-2026-39316 CVE-2026-39314 CVE-2026-34979 CVE-2026-34980 CVE-2026-34978 CVE-2026-34990 CVE-2026-27447 CVE-2026-41079


author: xingwei <xingwei14@h-partners.com> - 7.71.1-23
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dynbuf: provide curlx_ names for reuse by the curl tool
         curl: use curlx_dynbuf for realloc when loading config files
         curl: make file2string use dynbuf
         paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-38
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: xingwei <xingwei14@h-partners.com> - 7.71.1-41
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         test391: verify --path-as-is with redirect
         urlapi: fix redirect to a new fragment or query (only)


author: xinghe <xinghe2@h-partners.com> - 7.71.1-42
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:curl_path: bring back support for SFTP path ending in /~
         curl_path: make SFTP handle a path like /~ properly


author: gaoyukun <gaoyukun@kylinos.cn> - 7.71.1-43.p01
changelog:
  - Type:bugfix
  - ID:TASK#414527
  - SUG:NA
  - DESC: add configure options '--enable-ares' to support feature '-dns-servers', resolve test1592,507,534 failure.


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-45
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-46
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-47
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-48
changelog:
  - Type:CVE
  - CVE:CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168
  - SUG:NA
  - DESC:fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: zhouyihang <zhouyihang_z@163.com> - 7.71.1-50
changelog:
  - Type:CVE
  - CVE:CVE-2026-8286 CVE-2026-8924 CVE-2026-8927 CVE-2026-9547
  - SUG:NA
  - DESC:fix CVE-2026-8286 CVE-2026-8924 CVE-2026-8927 CVE-2026-9547


author: zhaoqingyou<zhaoqingyou@kylinos.com> - 1:1.12.16-19.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#85132]
  - SUG:NA
  - DESC: Add Patch7000:dbus-fix-security-label-trailing-comma.patch to remove trailing comma of security-label.


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-8
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC: Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-9
changelog:
  - Type:cves
  - ID:CVE-2022-2928, CVE-2022-2929
  - SUG:restart
  - DESC: Fix CVE-2022-2928 and CVE-2022-2929


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-10
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-8
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC:Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-9
changelog:
  - Type:cves
  - ID:CVE-2022-2928, CVE-2022-2929
  - SUG:restart
  - DESC:Fix CVE-2022-2928 and CVE-2022-2929


author: lijiaan <lijiaan@kylinos.cn> - 1.0.0.rc16-52.p01
changelog:
  - modify spec  after %build  add cp /usr/lib/rpm/kylin/confit.* ./autoconf
  - DESC: config.guess and config.sub ensure the software can be compiled and
    run correctly in a variety of different system env.


author: yanshuai <yanshuai01@kylinos.cn> - 1.0.0.rc16-52.p03
changelog:
  - Type: bugfix
  - ID: [BUG#302327]
  - SUG: NA
  - DESC: fix dmraid help info display incomplete problem'


author: zengwefeng <zwfeng@huawei.com> - 2.82-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add missing check for NULL return from allocate_rfd
         Fix DNS reply when asking for DNSSEC and a validated


author: gaihuiying <gaihuiying1@huawei.com> - 2.82-8
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: Handle caching with EDNS options better
          Fix to 75e2f0aec33e58ef5b8d4d107d821c215a52827c
          Fix for 12af2b171de0d678d98583e2190789e544440e02
          Fix problem with DNS retries in 2.83 2.84 version
          Simplify preceding fix
          Update to new struct frec fields in conntrack code
          Use the values of min port and max port in TCP connection
          Correct occasional bind dynamic synchronization
          Move fd into frec_src fixes 15b60ddf935a531269bb8c68
          fix CVE-2021-3448


author: renmingshuai <renmingshuai@huawei.com> - 2.82-14
changelog:
  - Type:bugfix
  - Id:
  - SUG:NA
  - DESC:Reduce code duplication, reuse existing functions
         Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.82-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         adapt bugfix allow binding mac with ipv6


author: luoguocui <luoguocui@h-partners.com> - 2.82-19
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Fix bad reply to DHCPCONFIRM messages (wrong message type)
         Fix reply confirm packet when binding-mac-with-ip6 on


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.82-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
    Fix bounds checking in check_ia
    Fix SEGV in Dbus code
    More fixes for DHCP ops in Dbus when DHCP not configured


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.82-21
changelog:
  - Type:CVE
  - CVE:CVE-2026-2291 CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893
  - SUG:NA
  - DESC:Fix buffer overflow in struct bigname (CVE-2026-2291)
         Fix NSEC bitmap parsing infinite loop (CVE-2026-4890)
         Verify rdlen field in RRSIG packets (CVE-2026-4891)
         Fix buffer overflow in helper with large CLIDs (CVE-2026-4892)
         Fix broken client subnet validation (CVE-2026-4893)


author: wanglixing <wanglixing@kylinos.cn> -1.0.0.rc3-205.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix connect container failed when reading partially written state.json content


author: lijian <lijian2@kylinos.cn> - 1.0.0.rc3-223.p02.03
changelog:
  - Type:cves
  - ID:CVE-2025-31133 CVE-2025-52565 CVE-2025-52881
  - SUG:NA
  - DESC:upgrade to 1.0.0.rc3-223.p02
         fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881


author: zhangbowei <zhangbowei@kylinos.cn> -1.0.0.rc3-103.p04
changelog:
  - Type: bugfix
  - ID:   [bug#210840]
  - SUG:  NA
  - DESC: update golang.org/x/sys/unix and fix bug#210840


author: wangshuo <wangshuo@kylinos.cn> - 1.0.0.rc3-103.p05
changelog:
  - Type:CVE-2024-21626
  - ID:[TASK#198073]
  - SUG:NA
  - DESC:add patch 0120-runc-fix-CVE-2024-21626-without-close_range.patch, fix RootDir fd leaks


author: lijian <lijian2@kylinos.cn> - 1.0.0.rc3-229.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport from openEuler
         support loongarch64 and mips64el


author: lijian <lijian2@kylinos.cn> - 1.0.0.rc3-229.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport missing rlimit mapping patch to fix runc error on mips


author: gaoyukun <gaoyukun@kylinos.cn> - 1:2.3.15-6.p01
changelog:
  - Type:NA
  - ID:TASK#156265
  - SUG:NA
  - DESC:add patch:0001-dovecot-2.3.15-kylin-remove-sensitive-characters.patch


author: gaoyukun <gaoyukun@kylinos.cn> - 1:2.3.15-6.p02
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:add the dovecot-2.3.10.1-surpport-mips64el.patch[liu feng] to compile smoothly


author: wuchangsheng <wuchangsheng2@huawei.com> - 19.11-15
changelog:
  - backport pathes from community
  - net/softnic fix memory leak as profile is freed
  - net/virtio fix interrupt handle leak
  - vhost fix crash on reconnect
  - net/virtio report maximum MTU in device info
  - bus/dpaa fix freeing in FMAN interface destructor
  - distributor fix 128 bit write alignment


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p01
changelog:
  - Type:updated
  - ID:[BUG#112885]
  - SUG:NA
  - DESC:
  Modify to get the value of the kernel and BuildRequires:kernel-core


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p02
changelog:
  - Type:bugfix
  - ID:[BUG#121835]
  - SUG:NA
  - DESC:
  - add patch kylin-0001-support-dpdk-cross-compile-in-x86-platform.patch
  1) The patch restricts specific instruction sets when compiling dpdk, in order to ensure normal operation on all x86 platforms.
  2) Due to kylin-rpm-config updating, the patch changes python interpreter version to python3.
  3) Openvswitch service starts stably after dpdk is repaired.


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p03
changelog:
  - Type:bugfix
  - ID:[BUG#112885]
  - SUG:NA
  - DESC:
  - 1.The igb_uio.ko and rte_kni.ko modules generated by dpdk reuquire the same kernel version to be compiled and installed, otherwise it cannot be loaded correctly.
    2.The kernel version will be continuously updated. It will be troublesome to rebuild dpdk while kernel updating. Therefore, it is best to decoule dpdk from kernel.
    3.DKMS (Dynamic kernel module system) can automatically compile modules after kernel changes and adpat to the new kenrel. So igb_uio and rte_kni in dpdk can be handed over to DKMS for management, and dpdk.spec is modified according to DKMS specification to generate dpdk-igb-uio and dpdk-rte-kni binary packages.


author: ningjin <ningjin@kylinos.cn> - 19.11-15.p04
changelog:
  - Type:bugfix
  - ID:[BUG#132923]
  - SUG:NA
  - DESC:
  - add patch kylin-0002-support-dpdk-cross-compile-in-hygon-platform.patch
  The patch restricts specific instruction sets when compiling dpdk, in order to ensure normal operation on hygon platforms，reduce dpdk compiling cpu instruction set to corei7.corei7 is the minimum instruction set supported by dpdk.


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p05
changelog:
  - Type:task
  - ID:[TASK#118976]
  - SUG:NA
  - DESC:
  - Since there is no ko module in the main rpm package, delete /usr/sbin/depmod from post.


author: wangjiawei <wangjiawei@kylinos.cn> - 19.11-15.p08
changelog:
  - Type:task
  - ID:[TASK#206722]
  - SUG:NA
  - DESC:
  - add dependency of rte-kni and igb-uio on dpdk-devel
  - fix CVE-2021-3839 CVE-2022-0669


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 添加kysec设置relabel脚本
  -         add patch: dracut-kylin-add-relabel-scripts.patch
  -       将kysec_sync_notify改为kysec_sync_daemon
  -         add patch: dracut-change-kysec-sync-notify-to-kysec-sync-daemon.patch
  -       将3adm的enable改为和桌面一致
  -         add patch: dracut-change-3adm_enable-to-be-same-as-desktop.patch
  -       更改数据库文件属主
  -         add patch: dracut-change-chown-db.patch
  -       修复加载31-32policy
  -         add patch: dracut-fix-load-policy-31-or-32.patch
  -       添加kysec_tpm配置，grub未配置时，将配置文件中的状态写入内核
  -         add patch: dracut-add-kysec-tpm-status.patch
  -       将kylin-security.conf改名为kysec.conf
  -         add patch: dracut-change-libsecurity1-config-file-name.patch
  -       修改字体
  -         add patch: dracut-change-font.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.02
changelog:
  - Type:update
  - ID:[Task#81148]
  - SUG:NA
  - DESC: 从数据库中读取relabel_status，如果是0，修改数据库中的值为1
  -         add patch: dracut-set-relabel_status-1-after-read-relabel_status.patch
  - Type:update
  - ID:[Task#81149]
  - SUG:NA
  - DESC: 将dracut.conf中安全相关的配置移动到modules.d/98relable/security.conf中
  -         add patch: dracut-move-dracut.conf-security-configure-to-98relable-security.conf.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.03
changelog:
  - Type: bugfix
  - ID:[Bug#135593]
  - SUG:NA
  - DESC: 修复修改删除audit.log后日志为空的问题
  -         add patch: dracut-fix-modify-or-del-audit-log-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.04
changelog:
  - Type: bugfix
  - ID:[Bug#161996]
  - SUG:NA
  - DESC: 修复执行控制白名单和文件防篡改列表为空的问题
  -         add patch: dracut-fix-whlist-init-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.05
changelog:
  - Type: update
  - ID:[任务#157794]
  - SUG:NA
  - DESC: 将修改audit.log的权限恢复至开源状态
  -         add patch: dracut-050-restore-file-permission-settings.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.06
changelog:
  - Type: update
  - ID:[任务#137354]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -         add patch: dracut-050-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.07
changelog:
  - Type: bugfix
  - ID:[BUG#188380][BUG#192256]
  - SUG:NA
  - DESC: 修复selinux策略为targeted时切换strict模式失败的问题[BUG#188380]
  -	  add patch: dracut-050-fix-selinux-targeted-change-strict-error.patch
  -	解决auditadm用户无法查看/var/log/目录下的文件的问题[BUG#192256]
  -	  add patch: dracut-050-fix-auditadm-read-var-log-file-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.07.02
changelog:
  - Type: update
  - ID:[任务#189429]
  - SUG:NA
  - DESC: 删除关闭三员时密码过期时间的设置
  -	  add patch: dracut-050-del-user-passwd-validity-period-set.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 050-5.se.07.02.p01
changelog:
  - Type:bugfix
  - ID:[BUG#211690]
  - SUG:NA
  - DESC:add kernel/kylin in 90kernel-modules-extra/module-setup.sh, support kylin kernel
  -      add patch: dracut-050-support-kylin-kernel.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 050-5.se.07.02.p02
changelog:
  - Type:bugfix
  - ID:[BUG#209238]
  - SUG:NA
  - DESC:  自定义分区安装系统后,切换安全模式后重启打标过程home var 分区无法挂载
           add dracut-fix-mount-home-failed.patch
           dracut-add-os-partition-judge-in-kyseclabel-script.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 050-5.se.07.02.p03
changelog:
  - Type:update
  - ID:[TASK#174208]
  - SUG:NA
  - DESC: nvme 安装盘系统在安装dracut-config-generic 软件包重新生成initramfs.img 系统重启失败
  -	  add patch: dracut-fix-lvm-pv-scan-nvme-mpath.patch


author: weishaokun<weishaokun@kylinos.cn> - 202002-8.p02
changelog:
  - Type: update
  - ID:   84913
  - SUG:  NA
  - DESC: KYLIN, ArmVirtPkg, add Kylin-Support-virtual-AHCI-and-NVMe-drives.patch


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202002-8.p05
changelog:
  - Type: Update
  - ID:   [TASK#138646]
  - SUG:  NA
  - Desc: fix CVE-2022-4450 CVE-2023-0286 CVE-2023-0215 CVE-2023-0401
          from src-openeuler/edk2 openEuler-20.03-LTS-SP3 branch.


author: yanjianqing <yanjianqing@kylinos.cn> - 202002-8.p07
changelog:
  - Type: Update
  - ID:   [TASK#163005]
  - SUG:  NA
  - Desc: fix CVE-2022-4304 
          from src-openeuler/edk2 openEuler-20.03-LTS-SP3 branch.


author: wangguochun <wangguochun@kylinos.cn> - 202011-11.p07.s5kb01
changelog:
  - Type Update
  - ID: [TASK#204644]
  - SUG: NA
  - DESC: fix CVE-2023-0464/CVE-2023-0465/CVE-2023-0466/CVE-2023-2650/CVE-2023-3446/CVE-2023-3817
  -           CVE-2024-0727/CVE-2022-36763/CVE-2022-36764/CVE-2022-36765
  -           CVE-2023-45229/CVE-2023-45230/CVE-2023-45231/CVE-2023-45232/CVE-2023-45233/CVE-2023-45234/CVE-2023-45235


author: yanjianqing <yanjianqing@kylinos.cn> -202011-11.p07.s5kb03
changelog:
  - Type: Update
  - ID:   [TASK#363445]
  - SUG:  NA
  - DESC: fix CVE-2024-1298/CVE-2024-5535/CVE-2021-3712/CVE-2022-0778


author: lijunwei <lijunwei@kylinos.cn> - 202011-11.p07.s5kb04
changelog:
  - Type: Update
  - ID:   [TASK#388581]
  - SUG:  NA
  - DESC: Fix CVE-2024-38796/CVE-2023-45236/CVE-2023-45237


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202011-11.p07.s5kb05
changelog:
  - Type: Update
  - ID:   [TASK#442231]
  - SUG:  NA
  - DESC: Fix CVE-2024-13176/CVE-2024-4741/CVE-2024-9143


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202011-11.p07.s5kb10
changelog:
  - Type: cves
  - ID:   CVE-2026-22795,CVE-2026-22796,CVE-2025-69421,CVE-2025-69420,CVE-2025-68160,CVE-2025-69418,CVE-2025-69419
  - SUG:  NA
  - DESC: Fix CVE-2026-22795,CVE-2026-22796,CVE-2025-69421,CVE-2025-69420,
  	CVE-2025-68160,CVE-2025-69418,CVE-2025-69419


author: lijunwei <lijunwei@kylinos.cn> - 202011-11.p07.s5kb11
changelog:
  - Types: cves
  - ID:    [BUG#622591][BUG#622601]
  - SUG:   NA
  - DECS:  Fix CVE-2026-9076 CVE-2026-42766


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202011-11.p07.s5kb14
changelog:
  - Types: cves
  - ID:    [BUG#535377]
  - SUG:   NA
  - DECS:  Fix CVE-2022-1292 CVE-2022-2068 CVE-2026-7383 CVE-2026-34180 CVE-2026-45447


author: panxiaohe <panxh.life@foxmail.com> - 0.180-7
changelog:
  - Get instance correctly for eu-ar -N option
  - Use make macros
  - Use upstream patch for no stdin flag


author: panxiaohe <panxh.life@foxmail.com> - 0.180-9
changelog:
  - change the permission of eu-* to 750
  - add elfutils-extra
  - move eu-objdump, eu-readelf, eu-nm to elfutils-extra


author: fuanan <fuanan3@h-partners.com> - 0.180-11
changelog:
  - Fix "/usr/lib64/libdebuginfod.so.1" not found when uninstall elfutils-debuginfod-client-devel
  - Fix Obsoletes in spec


author: fuanan <fuanan3@h-partners.com> - 0.180-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix segfault in eu-ar -m
         Use upstream patch for Fix error of parsing object file perms


author: wangshuo <wangshuo@kylinos.cn> - 0.180-15.p01
changelog:
  - Type:[update/bugfix]
  - ID:[TASK#186441][BUG#203894]
  - SUG:NA
  - DESC:x86_64/aarch64: The kernel parameter 'kernel.yama.ptrace_scope = 0' has been commented out.
  -      loongarch64: Add Patch1001-1003, support loongarch64


author: wangshuo <wangshuo@kylinos.cn> - 0.180-15.p02
changelog:
  - Type:[update]
  - ID:[TASK#186441]
  - SUG:NA
  - DESC:p01 build already exists at 239 Koji, causing ctdy-build task failure


author: wangqiang <wangqiang1@kylinos.cn> - 0.180-15.p03
changelog:
  - Type:[bugfix]
  - ID:[TASK#351059] 
  - SUG:NA                                                                     
  - DESC:Add buildrequire to support compress


author: houzhiwei <houzhiwei@kylinos.cn> - 0.180-15.p04
changelog:
  - Type:[update]
  - ID:[TASK#414525]
  - SUG:NA
  - DESC:correctly fix libdebuginfod.so requirement，fix CVE-2025-1352 CVE-2025-1372 CVE-2025-1376 CVE-2025-1377


author: Mark Wielaard <mark@klomp.org> 0.177-1
changelog:
  - elfclassify: New tool to analyze ELF objects.
  - readelf: Print DW_AT_data_member_location as decimal offset.
             Decode DW_AT_discr_list block attributes.
  - libdw: Add DW_AT_GNU_numerator, DW_AT_GNU_denominator and DW_AT_GNU_bias.
  - libdwelf: Add dwelf_elf_e_machine_string.
              dwelf_elf_begin now only returns NULL when there is an error
              reading or decompressing a file. If the file is not an ELF file
              an ELF handle of type ELF_K_NONE is returned.
  - backends: Add support for C-SKY.


author: yangcheng <yangcheng87@huawei.com> - 1:27.1-6
changelog:
  - fixed the upgrade error caused by the info file in the emacs-common software package being repackaged


author: zhangxiaolu <zhangxiaolu@kylinos.com> - 1:27.1-14.p01
changelog:
  - type bug fix
  - ID bug fix
  - add patch:kylin-change-translation-emacs.patch
  - DESC: add translate bug add modify spec


author: gaoyukun <gaoyukun@kylinos.com> - 1:27.1-15.p01
changelog:
  - type: bugfix 
  - ID: NA
  - DESC: add patch:kylin-change-translation-emacs.patch, add translate bug add modify spec and add config.guess and config.sub in build dir for compile.


author: wangkerong <wangkerong@huawei.com> - 1:27.1-5
changelog:
  - Type: improvement
  - DESC: use /usr/bin/make -O -j8 V=1 VERBOSE=1 instead of make for building bootstrap


author: lijiaan <lijiaan@kylinos.cn> - 1.12.0-2kord0k41.04
changelog:
  - Add modified-parameters-appear-at-the-same-time.patch
  - modified limit appear -k --keep-newer-files at the same time
  - 03 version number was occupied by zj


author: GuoCe <guoce@kylinos.cn> - 1.12.0-2kord0k41.05
changelog:
  - Add resolve_position_display_chinese_character_garbled_code.patch
  - 使用归档管理器打开一个压缩文件，点击归档文件-属性，当位置信息有汉字时显示乱码
  - Add fix-just-add-file-without-directory.patch
  - 空文件夹压缩后，使用归档文件器打开再另存为时，提示信息一闪而过且没有保存成功


author: huayadong <huayadong@kylinos.cn> - 1.12.0-2kord0k41.p08
changelog:
  - add patch41, engrampa-1.12.0-kylin-fix-bug-failed-to-save-the-file-with-the-same-name.patch.
  - fix chandao bug 46607.


author: peijiankang <peijiankang@kylinos.cn> - 1.12.0-2kord0k41.p09
changelog:
  - Type: bugfix
  - ID:   [TASK#185071]
  - SUG:  NA
  - DESC: add engrampa-add-translation-for-tw-and-hk.patch


author: douyan <douyan@kylinos.cn> - 1.12.0-2kord0k41.p10
changelog:
  - Type: bugfix
  - ID:   [TASK#187126]
  - SUG:  NA
  - DESC: engrampa-1.12.0-kylin-add-zh_HK-translation.patch


author: huayadong <huayadong@kylinos.cn> - 1.12.2-2kord7.p03
changelog:
  - Type: bugfix
  - ID:   [Bug#156426]
  - SUG:  NA
  - DESC: add Patch2:eom-1.12.2-kylin-Repair-g_object_New-destruction-results-in-core.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.2-2kord7.p04
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-eom-add-some-missing-traditional-translations-for-HK.patch


author: hanguanqiang <hanguanqiang@kylinos.cn> - 21.3.3-7.p02
changelog:
  - Type: CVE
  - ID:   Bug#524979
  - SUG:  NA
  - DESC: Fix CVE-2025-48038,CVE-2025-48039,CVE-2025-48040,CVE-2025-48041
  -       p02 only for SP2, not for others


author: hanguanqiang <hanguanqiang@kylinos.cn> - 21.3.3-7.p03
changelog:
  - Type: CVE
  - ID:   Bug#524887
  - SUG:  NA
  - DESC: Fix CVE-2025-48038,CVE-2025-48039,CVE-2025-48040,CVE-2025-48041
  -       adjust configure.in for new autoconf in sp4
  -       p03 for SP3 SP4, not for SP2


author: dillon chen <dillon.chen@gmail.com> - 2.4.5-5
changelog:
  - CVE-2020-18651,CVE-2020-18652
  - CVE-2021-36048,CVE-2021-39847,CVE-2021-42530,CVE-2021-36046,CVE-2021-36055
  - CVE-2021-40716,CVE-2018-12648,CVE-2021-36054,CVE-2021-36047,CVE-2021-36052
  - CVE-2021-36058,CVE-2021-36045,CVE-2021-42531,CVE-2021-36064,CVE-2021-42529
  - CVE-2021-42528,CVE-2021-36050,CVE-2021-40732
  - CVE-2021-36056,CVE-2021-42532,CVE-2021-36053,CVE-2021-36051


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29464 CVE-2021-29463 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29464,CVE-2021-29463,CVE-2021-29473


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29463 CVE-2021-29464 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29463,CVE-2021-29464,CVE-2021-29473


author: wangjie <wangjie375@huawei.com> - 2.2.9-4
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.2.9-6
changelog:
  - Type:CVE
  - ID:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: Yangdacheng <yangdacheng@kylinos.cn> - 4.0.2-9.p03
changelog:
  - Type: cves
  - ID: [TASK#333142]
  - SUG: NA
  - DESC: Fix CVE-2024-31578,CVE-2024-32230,CVE-2021-3566,CVE-2021-38291,CVE-2021-38114,CVE-2022-3109,CVE-2022-3341,CVE-2023-51794,CVE-2024-31578,CVE-2023-50010,CVE-2023-51793,CVE-2021-28429,CVE-2021-38171,CVE-2022-1475,CVE-2022-48434


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p05
changelog:
  - Type: cves
  - ID: [TASK#402117]
  - SUG: NA
  - DESC: Fix CVE-2024-35366,CVE-2024-35367,CVE-2024-35368,CVE-2024-36616,CVE-2024-36617,CVE-2024-36618


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p07
changelog:
  - Type: cves
  - ID: [TASK#480707]
  - SUG: NA
  - DESC: Fix CVE-2017-9994,CVE-2019-12730,CVE-2019-17542,CVE-2019-17539,CVE-2019-11339,CVE-2018-15822


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p08
changelog:
  - Type: cves
  - ID: [TASK#494103]
  - SUG: NA
  - DESC: Fix CVE-2020-22019,CVE-2020-22021,CVE-2020-22026,CVE-2020-22038,CVE-2020-22039,CVE-2020-22043,CVE-2020-22044


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p09
changelog:
  - Type: cves
  - ID: [TASK#500913]
  - SUG: NA
  - DESC: Fix CVE-2020-21697,CVE-2020-22020,CVE-2020-22037,CVE-2020-22051,CVE-2020-22054


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p10
changelog:
  - Type: cves
  - ID: [TASK#507127]
  - SUG: NA
  - DESC: Fix CVE-2020-21688,CVE-2020-22042,CVE-2025-22919,CVE-2025-22921


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p17
changelog:
  - Type: cves
  - ID: [BUG#597617] [BUG#597615] [BUG#597613] [BUG#599939] 
  - SUG: NA
  - DESC: Fix CVE-2020-20445, CVE-2020-21041, CVE-2020-23906, CVE-2025-10256


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p21
changelog:
  - Type: cves
  - ID: CVE-2020-22025, CVE-2020-22017, CVE-2025-1594, CVE-2026-30999
  - SUG: NA
  - DESC: Fix CVE-2020-22025, CVE-2020-22017, CVE-2025-1594, CVE-2026-30999


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p23
changelog:
  - Type: cves
  - ID: CVE-2025-59728, CVE-2020-20448, CVE-2026-6385, CVE-2023-6603
  - SUG: NA
  - DESC: Fix CVE-2025-59728, CVE-2020-20448, CVE-2026-6385, CVE-2023-6603


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p25
changelog:
  - Type: cves
  - ID: CVE-2026-64834, CVE-2026-64830, CVE-2026-64833, CVE-2026-65703, CVE-2026-65706, CVE-2026-65704, CVE-2026-66039, CVE-2026-65705
  - SUG: NA
  - DESC: Fix CVE-2026-64834, CVE-2026-64830, CVE-2026-64833, CVE-2026-65703, CVE-2026-65706,CVE-2026-65704, CVE-2026-66039, CVE-2026-65705


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p27
changelog:
  - Type: cves
  - ID: CVE-2020-22032, CVE-2020-22031, CVE-2020-22023
  - SUG: NA
  - DESC: CVE-2020-22032, CVE-2020-22031, CVE-2020-22023


author: Tangsha <tangsha@kylinos.cn> - 4.0.2-9.p29
changelog:
  - Type: cves
  - ID: CVE-2026-70628, CVE-2026-70629, CVE-2026-70630, CVE-2026-70631
  - SUG: NA
  - DESC: Fix CVE-2026-70628, CVE-2026-70629, CVE-2026-70630, CVE-2026-70631


author: xu_ping <xuping33@huawei.com> - 3.0.3.32900-9
changelog:
  - Fix connect linking to web database by modifying the firebird.conf items to make client and server compatible


author: lvfei <lvfei@kylinos.cn> - 3.0.3.32900-9.p01
changelog:
  - Type:NA
  - ID:bug#134276
  - SUG:NA
  - DESC: remove executable permission bits for firebird-superserver.service


author: cuiyudong <cuiyudong@kylinos.cn> - 3.0.3.32900-9.p02
changelog:
  - Type:NA
  - ID:bug#134298
  - SUG:NA
  - DESC: Add Patch0009 for support loongarch and Same source code as other arch for solve bug 134298


author: lvfei <lvfei@kylios.cn> - 79.0-7.p01
changelog:
  - type bug fix
  - ID bug fix
  - add patch:Patch700:            0001-kylin-modify-the-first-url.patch
  -           0001-kylin-firefox-modify-firstrunURL.patch
  -            0001-firefox-modify-newtabel-top-site.patch
  -            firefox-modify-firsturl-http-to-https.patch
  -            0001-modify-taiwan-to-taiwansheng.patch
  - modify firefox desktop 
  - modify firefox.js
  - DESC: fix chandao bug add spec


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p02
changelog:
  - type bug fix
  - ID bug 114400 
  - add patch:Patch705:     0001-fix-chandao-bug-114400.patch
  - DESC: fix chandao bug 114400  add spec


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p03
changelog:
  - type bug fix
  - ID bug 129652
  - add patch:Patch705:     0001-defaultSearchEngine-baidu-bug129652.patch
  - DESC: fix chandao bug 129652  add spec


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p04
changelog:
  - type cve fix
  - ID NA
  - add Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315
  - DESC: cve fix


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p10
changelog:
  - Type:CVE
  - ID:TASK#162235 
  - SUG:NA
  - DESC: Fix fix CVE-2021-45960 CVE-2021-46143
          CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: lipengyu <lipengyu@kylinos.cn> - 79.0-7.p16
changelog:
  - Type: bugfix
  - ID: [BUG#231659]
  - SUG: NA
  - DESC:Change the default search engine in Firefox to Baidu


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p17
changelog:
  - Type: cves
  - ID: CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946 CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406 CVE-2020-15675  
        CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998
  - SUG: restart
  - DESC: fix CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946  CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406   
              CVE-2020-15675  CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p17
changelog:
  - Type: cves
  - ID: CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946 CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406 CVE-2020-15675  
        CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998 CVE-2022-29912
  - SUG: restart
  - DESC: fix CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946  CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406   
              CVE-2020-15675  CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998 CVE-2022-29912


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p19
changelog:
  - Type: cves
  - ID:CVE-2021-29970.patch  CVE-2021-43539.patch  CVE-2023-1945.patch
  - SUG: restart
  - DESC: patch  CVE-2021-29970.patch  CVE-2021-43539.patch  CVE-2023-1945.patch


author: huayadong <huayadong@kylinos.cn> - 2.13.92-1.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#251085]
  - SUG : NA
  - DESC: add Patch9001:fontconfig-2.13.92-kylin-backport-Report-more-detailed-logs-instead-of-assertion.patch


author: baizhonggui <baizhonggui@huawei.com> - 20200314-5
changelog:
  - Fix building error: Could not open %files file /home/abuild/rpmbuild/BUILD/fontforge-20200314/FontForge.lang:No such file or directory
  - Add glib in BuildRequires


author: wangyue <wangyue92@huawei.com> - 20200314-6
changelog:
  - remove useless glib buildrequire
  - move /usr/lib/rpm/find-lang.sh /builddir/build/BUILDROOT/fontforge-20200314-7.p02.ky10.aarch64 to correct stage


author: Like <like@kylinos.cn> - 20200314-7.p02
changelog:
  - Type:cves
  - ID:CVE-2024-25081 CVE-2024-25082
  - SUG:NA
  - DESC:add patch3 fix CVE-2024-25081 CVE-2024-25082


author: wangyue <wangyue92@huawei.com> - 20200314-6
changelog:
  - remove useless glib buildrequire
  - move /usr/lib/rpm/find-lang.sh /builddir/build/BUILDROOT/fontforge-20200314-7.p03.ky10.aarch64 to correct stage


author: gaoyukun<gaoyukun@kylinos.cn> - 3.0.15-28.p01
changelog:
  - Type: bugfix
  - ID: [BUG#278033、278023]
  - SUG:NA
  - DESC: Add sed -i '/^95$/d' /etc/uid_list,resolve the issue of installation failure after uninstallation.


author: gaoyukun<gaoyukun@kylinos.cn> - 3.0.15-28.p02
changelog:
  - Type: bugfix、compile
  - ID: [BUG#278033、278023]
  - SUG:NA
  - DESC: solve compilation problems,  remove "


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: wangkai <13474090681@163.com> - 2:2.11.8-3
changelog:
  - Fix CVE-2026-26955, CVE-2026-26965, CVE-2026-31806, CVE-2026-31883, CVE-2026-31885,
    CVE-2026-33984, CVE-2026-33983


author: wangkai <13474090681@163.com> - 2:2.11.8-5
changelog:
  - Fix CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-27951,
    CVE-2026-29774, CVE-2026-29775, CVE-2026-31884, CVE-2026-33985


author: eastb233 <xiezhiheng@huawei.com> - 7.3.0-20210628.41
changelog:
  - fix-PR83666-punt-BLKmode-when-expand_debug_expr.patch: New patch for bugfix
  - fix-AArch64-128-bit-immediate-ICEs.patch: Likewise
  - gcc.spec: Add new patch


author: <majian@kylinos.cn> - 9.2-7.p01
changelog:
  - Type: update
  - ID: [TASK#186426]
  - SUG: NA
  - DESC: Init package for Kylin V10 sp4 and add Kylin patches.
  - [BUG#112827] fix replace manufacturer string from openEuler to KylinOS in version info.
  - [BUG#199946] fix gdb hangup crash issue when attach running process debug.


author: majian <majian@kylinos.cn> - 9.2-7.p02
changelog:
  - Type: bugfix
  - ID: [BUG#218056]
  - SUG: NA
  - DESC: Add 0002-Set-entry-point-when-text-segment-is.patch.


author: gaoyukun <gaoyukun@kylinos.cn> - 9.52-20.p03
changelog:
  - Type:cves
  - ID:CVE-2025-27832, CVE-2025-27835, CVE-2025-27836 CVE-2025-27837 CVE-2023-52722
  - SUG:NA
  - DESC:fix CVE-2025-27832, CVE-2025-27835, CVE-2025-27836 CVE-2025-27837, CVE-2023-52722


author: hugel <gengqihu2@h-partners.com> - 9.52-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Sync some patches from community
         backport-Fix-memory-leak-in-pdfwrite-device.patch
         backport-Fix-memory-leak-on-error-in-bitmap_paint-and-its-cal.patch
         backport-Fix-memory-leaks-in-tiffsep.patch


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: houhongxun <houhongxun@kylinos.cn> - 2:2.10.6-12.p02
changelog:
  - Type: cves
  - ID  : [TASK#489699]
  - SUG : NA
  - DESC: fix CVE-2022-32990 CVE-2025-48797 CVE-2025-48798 CVE-2025-5473


author: houhongxun <houhongxun@kylinos.cn> - 2:2.10.6-12.p04
changelog:
  - Type: cves
  - ID  : [TASK#489699]
  - SUG : NA
  - DESC: fix CVE-2022-32990 CVE-2025-48797 CVE-2025-48798 CVE-2025-5473
          rebuild for version problem


author: houhongxun <houhongxun@kylinos.cn> - 2:2.10.6-12.p08
changelog:
  - Type: cves
  - ID  : [TASK#580833]
  - SUG : NA
  - DESC: fix CVE-2025-14422 CVE-2025-14425 CVE-2025-6035


author: Qin Fandong <qinfandong@kylinos.cn> - 2:2.10.6-12.p10
changelog:
  - Type: CVE
  - ID  : [TASK#596375]
  - CVE : CVE-2026-2271, CVE-2026-2272, CVE-2026-2239, CVE-2026-4152, CVE-2026-2045, CVE-2026-2044, CVE-2026-4887
  - SUG : NA
  - DESC: fix CVE-2026-2271, CVE-2026-2272, CVE-2026-2239, CVE-2026-4152, CVE-2026-2045, CVE-2026-2044, CVE-2026-4887


author: fuanan <fuanan3@h-partners.com> - 2.27.0-13
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.27.0-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.27.0-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.27.0-16
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.27.0-25
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA 
  - DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.27.0-26
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.27.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:modify patch
         backport-CVE-2025-27613-CVE-2025-46334-CVE-2025-46835.patch


author: fandeyuan <fandeyuan@kylinos.cn> - 2.66.8-12.p03
changelog:
  - Type: Bugfix
  - ID: [TASK#200965]
  - SUG: NA
  - DESC: add change-g_error-terminate-signal-to-abort.patch


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.66.8-12.p04
changelog:
  - Type: cve fix
  - ID: NA
  - SUG: NA
  - DESC: add backport-glocalfilemonitor-Avoid-file-monitor-destruction-from-event-thread.patch
   backport-CVE-2024-34397.patch backport-gdbusconnection-Allow-name-owners-to-have-the-syntax-of-a-well-known-name.patch


author: wuxiaolei <wuxiaolei@kylinos.cn> - 2.66.8-12.p08
changelog:
  - Type:cves
  - ID: CVE-2025-3360  CVE-2025-4373
  - SUG:NA
  - DESC: fix CVE-2025-3360, fix CVE-2025-4373


author: Changwei Liang <liangchangwei@kylinos.cn> - 2.28-88-p02
changelog:
  - Type:	update & bugfix
  - ID:	[TASK#74132]
  - SUG: 	NA
  - DESC:	Added kylin patch merged from glibc-2.28-49.p02 of v10sp2


author: Changwei Liang <liangchangwei@kylinos.cn> - 2.28-88-p04
changelog:
  - Type:	bugfix
  - ID:	[bug#119200]
  - SUG: 	NA
  - DESC:	Provide compatibility support for linking against libpthread_nonshared.a


author: Changwei Liang <liangchangwei@kylinos.cn> - 2.28-88-p05
changelog:
  - Type:	update
  - ID:	[TASK#101352]
  - SUG: 	NA
  - DESC:	Add Give-a-chance-to-reload-gl_path-when-dlopen patch


author: Zhenneng Li <lizhenneng@kylinos.cn> - 2.28-88-p06
changelog:
  - Type:	update
  - ID:  	[TASK#105748]
  - SUG: 	NA
  - DESC: Delete 9001-kylin-glibc-add-mesa_func-in-midr-way.patch


author: majian <majian@kylinos.cn> - 2.28-88-p07
changelog:
  - cves: CVE-2023-0687
  - ID: [TASK#141422]
  - SUG: NA
  - DESC: Fix CVE-2023-0687.
          https://gitee.com/src-openeuler/glibc/pulls/555


author: majian <majian@kylinos.cn> - 2.28-88-p09
changelog:
  - Type:	update
  - ID:  	[TASK#165761]
  - SUG: 	NA
  - DESC: Add Kylin_fix_localesdata_countryname_v10sp3.patch .


author: majian <majian@kylinos.cn> - 2.28-88-p10.s5kb02
changelog:
  - Type: cves
  - ID:   [TASK#180596]
  - SUG:  NA
  - DESC: fix CVE-2023-4806 CVE-2023-5156 CVE-2023-4813 .


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.28-88-p10.s5kb04
changelog:
  - Type:cves
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:Fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: panzhe <panzhe@kylinos.cn> - 2.28-88-p10.s5kb06
changelog:
  - Type: bugfix
  - ID: [BUG#280777]
  - SUG:  NA
  - DESC: fix pthread_once hangs when init routine throws an exception


author: Yu Peng <yupeng@kylinos.cn> - 2.28-88-p12.s5kb07
changelog:
  - Type:bugfix
  - ID:[Task#571025]
  - SUG:NA
  - DESC: Fix /etc/resolv.conf reloading defects backport from glibc 2.32
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=6c80c6e8767b860a5e18e136d04a80be2a8dce15
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=9642b85fd0dfa5731020a3271c08e33e1dc05c85
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=a1a20f029299dc27170912bb9233070c8403444d
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=dd0b4df329ff7ff2a656404db271c8ee8379ff9d
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=fa00db0a6eb755837ae5d413515e0da582b304f3
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=631cf64bc1d8306e011ef39f60b8cb6de91bd271


author: panzhe <panzhe@kylinos.cn> - 2.28-88-p13.s5kb07
changelog:
  - Type:update
  - ID:[Task#588463]
  - SUG:NA
  - DESC: resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)


author: litenglong <litenglong@kylinos.cn> - 2.28-88-p14.s5kb07
changelog:
  - Type:update
  - ID:[Task#595081]
  - SUG:NA
  - DESC: posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281)


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 7.0-10.p03
changelog:
  - Type:cves
  - ID:CVE-2022-48340
  - SUG:NA
  - DESC:Backport v10-sp3-updates-sc p02 patch to fix CVE-2022-48340


author: anyunhao <anyunhao@kylinos.cn> - 3.6.14-11.p01
changelog:
  - Type:update
  - ID:[Task#186398]
  - SUG:NA
  - DESC:Update to 3.6.14-11 and sync sp3 changes
  - add patch add_support_generate_sm2_certificate.patch and add_support_sm4.patch


author: anyunhao <anyunhao@kylinos.cn> - 3.6.14-11.p02
changelog:
  - Type:CVE fix
  - ID:[Task#202568]
  - SUG:NA
  - DESC:fix CVE-2024-0553
  - add patch backport-CVE-2024-0553-rsa-psk-minimize-branching-after-decryption.patch


author: jiaocong <jiaocong@kylinos.cn> - 3.6.14-16.p05
changelog:
  - Type:cves
  - ID:CVE-2025-32988,CVE-2025-32990,CVE-2025-6395
  - SUG:NA
  - DESC:backport upstream patch,fix CVE-2025-32988,CVE-2025-32990,CVE-2025-6395


author: jiaocong <jiaocong@kylinos.cn> - 3.6.14-16.p08
changelog:
  - Type:cves
  - ID:[BUG#560111]
  - SUG:NA
  - DESC:backport upstream patch,fix CVE-2026-33845,CVE-2026-33846,CVE-2026-42009,CVE-2026-42010,CVE-2026-42013,CVE-2026-42014,CVE-2026-42015,CVE-2026-5260


author: anyunhao<anyunhao@kylinos.cn> - 3.6.14-7.p02
changelog:
  - Type:update
  - ID:[Task#85463]
  - SUG:NA
  - DESC:split package gnutls-utils,reduce main package installation dependencies


author: Like <like@kylinos.cn> - 2.44.0-5.p01
changelog:
  - Type: bugfix
  - ID:   NA
  - SUG:  NA
  - DESC: add patch9000: 0001-Support-loongarch64.patch
          sync from 2.44.0-3.p01


author: gaihuiying <eaglegai@163.com> - 1.31.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix adjust to abseil-cpp 20210324,since it dont provides absl_dynamic_annotations library anymore


author: gaoyukun <gaoyukun@kylinos.cn> - 1.31.0-9.p02
changelog:
  - Type:bugfix
  - ID:[BUG#289897&289867&289847&289811&289669&289659]
  - SUG:NA
  - DESC:rebuild due to protobuf


author: Xiao Zai <xiaozai@kylinos.cn> - 2.04-21.se.01.p08
changelog:
  - Type:NA
  - ID:bug#134276
  - SUG:NA
  - DESC: remove executable permission bits for grub-boot-indeterminate.service


author: kangyu <kangyu@kylinos.cn> - 2.04-21.se.03.p08
changelog:
  - Type:NA
  - ID:bug#144461
  - SUG:NA
  - DESC: measurefile.mod failed to load after x86qcow start message was displayed


author: Xiao Zai <xiaozai@kylinos.cn> - 2.04-21.se.03.p09
changelog:
  - Type:bugfix
  - ID:task#143178
  - SUG:NA
  - DESC: move the password from spec file into 00_header.in file


author: kangyu <kangyu@kylinos.cn> - 2.04-21.se.04.p09
changelog:
  - Type:bugfix
  - ID:task#148830
  - SUG:NA
  - DESC: Troubleshoot the nested virtualization installation exception


author: liuyang <liuyang01@kylinos.cn> - 2.04-21.se.04.p14.01
changelog:
  - Type:CVE
  - ID:TASK#338411
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity
         kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: bianxiuning <bianxiuning@kylinos.cn> - 2.04-21.se.05.p13
changelog:
  - Type:update
  - ID:TASK#184209
  - SUG:NA
  - DESC:add kylin-add-trust_measurefiles.mod.patch
             optimize-trust_measurefiles.mod.patch


author: andy <liuyang01@kylinos.cn> - 2.04-21.se.05.p14.01
changelog:
  - Type:update
  - ID:TASK#381521
  - SUG:NA
  - DESC: porting patches from bianxiuning and rebuild
  	add kylin-add-trust_measurefiles.mod.patch
             optimize-trust_measurefiles.mod.patch


author: andy <liuyang01@kylinos.cn> - 2.04-21.se.05.p14.02
changelog:
  - Type:update
  - ID:TASK#381521
  - SUG:NA
  - DESC: porting patches form xiaozai
  	enable http and https boot, add backport-enable-http-and-https-boot.patch


author: andy <liuyang01@kylinos.cn> - 2.04-21.se.05.p14.03
changelog:
  - Type:CVE
  - ID:TASK#381521
  - SUG:NA
  - DESC: Fix for CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2021-3981 CVE-2022-2601
          CVE-2022-28733 CVE-2022-28734 CVE-2022-28736 CVE-2022-3775


author: andy <liuyang01@kylinos.cn> - 2.04-21.se.05.p14.04
changelog:
  - Type:CVE
  - ID:task#441494
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-2024-45774,
        CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-2025-1118,
        CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025-0678,CVE-2025-1125
  - SUG:NA
  - DESC:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-2024-45774,
        CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-2025-1118,
        CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025-0678,CVE-2025-1125


author: xiaozai <xiaozai@kylinos.cn> - 2.04-21.se.05.p14
changelog:
  - Type:bugfix
  - ID:BUG#204716
  - SUG:NA
  - DESC: enable http and https boot, add backport-enable-http-and-https-boot.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 2.04-21.se.07.p14.05
changelog:
  - Type:bugfix
  - ID:BUG#352197
  - SUG:NA
  - DESC: 1.trust boot modify the handling logic for missing configuration files


author: yujingbo <yujingbo@kylinos.cn> - 2.04-21.se.07.p14.06
changelog:
  - Type:TASK
  - ID:task#462916
  - SUG:NA
  - DESC:Modify grub-boot-success.service and grub-boot-success.timer file permission to 644


author: Qin Fandong <qinfandong@kylinos.cn> - 2.04-21.se.07.p14.07
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-61663,CVE-2025-61664
  - ID:TASK#571799
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload


author: huayadong <huayadong@kylinos.cn> - 1.16.2-3.p01
changelog:
  - Type:bugfix
  - ID:[Task#199901]
  - SUG:NA
  - DESC:Sync SP2 patches,fix gstreamer1-plugins-good-gtk no provides(element-gtksink)


author: huayadong <huayadong@kylinos.cn> - 1.16.2-3.p02
changelog:
  - Type:bugfix
  - ID:[BUG#216576]
  - SUG:NA
  - DESC:change gstreamer1-devel-docs to gstreamer1-help,fix update error.


author: Funda Wang <fundawang@yeah.net> - 1.16.2-6
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: Funda Wang <fundawang@yeah.net> - 1.16.2-12
changelog:
  - fix CVE-2026-1940, CVE-2026-3083, CVE-2026-3085
  - fix GStreamer-SA-2026-0002: Out-of-bounds read in MP4 demuxer


author: peijiankang <peijiankang@kylinos.cn> 2.24.32-11.p01
changelog:
  - Type: cves
  - ID:   [TASK#356995]
  - SUG:  NA
  - DESC: modify spec file enable_immodules_package 1  build gtk2-immodules packages
          add file gtk+-2.24.32-kylin-13336.patch
          add patch 0001-fix-chandao-bug47120.patch
          add patch:0001-add-some-translate.patch
          sync from 2.24.32-7.p03


author: peijiankang <peijiankang@kylinos.cn> - 3.24.21-6.p01
changelog:
  - Type: cves
  - ID:   [TASK#356907]
  - SUG:  NA
  - DESC: add gtk3-update-translations-for-hk.patch
          Handle the mouse block problem of virt-manager virtual machine
          modify gtk3 spec file enable_immodules_package 1
          sync from 3.24.21-1.p03


author: panzhe <panzhe@kylinos.cn> - 1.40.2-8.p01
changelog:
  - Type:bugfix/compile
  - ID:NA
  - SUG:NA
  - DESC:Solve the problem that coldplug does not hava "safe remove" issue.
  - BuildRequires: libwbclient-devel 
  - Add Patch02, Fixed "Favorites" error in "My Computer".
  - Add Patch03, Solve the problem that usb flash drive sometimes fails to mount automatically.
  - Add Patch04, Solve the problem that the window displays "Network".


author: lilu <lilu@kylinos.cn> - 1.12-6.p01
changelog:
  - Type: cves
  - ID: CVE-2026-41991,CVE-2026-41992
  - SUG: NA
  - DESC: fix CVE-2026-41991 and CVE-2026-41992


author: xinghe <xinghe2@h-partners.com> - 2.2.16-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p01
changelog:
  - Type:bugfix
  - ID:[Bug#114844]
  - SUG:NA
  - DESC:add patch1:hardinfo-kylin-fix-vendor-unknown-bug.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p02
changelog:
  - Type:bugfix
  - ID:[Bug#127017][Bug#127010]
  - SUG:NA
  - DESC:add patch2:hardinfo-0.6.1-kylin-solve-segment-error-and-survival-reporting-problems.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p03
changelog:
  - Type:bugfix
  - ID:[Bug#130569]
  - SUG:NA
  - DESC:add patch3:hardinfo-0.6.1-kylin-change-x11-vendor.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p04
changelog:
  - Type:bugfix
  - ID:[Bug#130569]
  - SUG:NA
  - DESC:add patch4:hardinfo-0.6.1-kylin-fix-the-segment-error-when-executing-hardinfo-without-display.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p05
changelog:
  - Type:bugfix
  - ID:[Bug#140774]
  - SUG:NA
  - DESC:add patch5:hardinfo-0.6.1-kylin-fix-core-file-appears-in-the-report-generation-function.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p06
changelog:
  - Type:bugfix
  - ID:[Bug#171872]
  - SUG:NA
  - DESC:add patch6:hardinfo-0.6.1-kylin-add-the-name-YMTC-for-oui-id-a428b7.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p07
changelog:
  - Type:bugfix
  - ID:[Bug#177860]
  - SUG:NA
  - DESC:add patch7:hardinfo-0.6.1-kylin-fix-ft2000-cpu-no-speed.patch


author: wangshuo <wangshuo@kylinos.cn> - 0.6.1-1.p08
changelog:
  - Type:bugfix
  - ID:[BUG#182817]
  - SUG:NA
  - DESC:add patch8, retrieve the motherboard info for arm and loongarch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p09
changelog:
  - Type:bugfix
  - ID:[TASK#178533]
  - SUG:NA
  - DESC:add patch9,hardinfo-0.6.1-kylin-hard-disk-sorting.patch


author: houhongxun <houhongxun@kylinos.cn> - 0.6.1-1.p10
changelog:
  - Type:bugfix
  - ID:[BUG#197180]
  - SUG:NA
  - DESC:add patch10,0001-fix-pci-info-showing-wrong-link-width.patch
         fix that pci info showed wrong current link width


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p11
changelog:
  - Type:bugfix
  - ID:[BUG#197179]
  - SUG:NA
  - DESC:add patch9,hardinfo-0.6.1-kylin-hard-disk-sorting.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p11
changelog:
  - Type:bugfix
  - ID:[BUG#197179]
  - SUG:NA
  - DESC:add patch11,hardinfo-0.6.1-kylin-hard-disk-sorting.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p12
changelog:
  - Type:bugfix
  - ID:[BUG#199256]
  - SUG:NA
  - DESC:add patch12,hardinfo-0.6.1-kylin-hide-Firmware.patch


author: houhongxun <houhongxun@kylinos.cn> - 0.6.1-1.p13
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-hardinfo-add-traditional-chinese-translation.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p14
changelog:
  - Type: bugfix
  - ID  : [BUG#208197]
  - SUG : NA
  - DESC: add patch14:hardinfo-0.6.1-kylin-fix-sensors-driver-unknow.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p15
changelog:
  - Type: bugfix
  - ID  : [BUG#225214]
  - SUG : NA
  - DESC: add patch15:hardinfo-0.6.1-kylin-fix-temperature-label-display-error.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.6.1-1.p16
changelog:
  - Type: bugfix
  - ID  : [BUG#234629]
  - SUG : NA
  - DESC: add patch16:hardinfo-0.6.1-kylin-update-HK-translation-of-Server.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p17
changelog:
  - Type: bugfix
  - ID  : [BUG#245937][BUG#245949]
  - SUG : NA
  - DESC: add patch17:hardinfo-0.6.1-kylin-change-int-to-long-int-in-memory_usage.patch


author: peijiankang <peijiankang@kylinos.cn> - 2.8.1-5.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#186429]
  - SUG:  NA
  - DESC: add 0002-modify-gb18030-encoding.patch
          sync from 2.8.1-4.p01


author: caodongxia <caodongxia@huawei.com> - 1.8.20-12
changelog:
  - add sub packages hdf5-openmpi-static, hdf5-openmpi-devel, hdf5-openmpi,
  - hdf5-mpich-static, hdf5-mpich-devel, hdf5-mpich


author: yaoxin <yaoxin30@h-parters.com> - 1.12.1-1
changelog:
  - Update to 1.12.1 and fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: gongxingliang <gongxingliang@kylinos.cn> - 1.14.5-1.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:Remove compile options (-fallow-argument-mismatch -fallow-invalid-boz) to fix compilation failure


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-21
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:restart
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.43-24
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-25
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.4.43-25.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.
          add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: yanglu <yanglu72@h-partners.com> - 2.4.43-28
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: lifeifei <lifeifei@kylinos.cn> - 2.4.43-28.p02
changelog:
  - Type:bugfix
  - ID:[Task#500427]
  - SUG:NA
  - DESC: merge 2.4.43-26.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.43-31
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: wanggang <wanggang1@kylinos.cn> - 2.4.43-32.p01
changelog:
  - Type:bugfix
  - ID:[Task#579609]
  - SUG:NA
  - DESC:update index.html for kylin. 
         fix build error on loongarch64.
         Change httpd.conf to achive: Hide httpd version and Turn TraceEnable off.


author: tangce <tangce1@h-partners.com> - 2.4.43-34
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.4.43-35
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: wanggang <wanggang1@kylinos.cn> - 2.4.43-35.p01
changelog:
  - Type:bugfix
  - ID:[Task#579609]
  - SUG:NA
  - DESC:update index.html for kylin. 
         Change httpd.conf to achive: Hide httpd version and Turn TraceEnable off.


author: tangce <tangce1@h-partners.com> - 2.4.43-36
changelog:
  - Type:CVE
  - CVE:CVE-2026-29167,CVE-2026-42535,CVE-2026-44631
  - SUG:NA
  - DESC:fix CVE-2026-29167,CVE-2026-42535,CVE-2026-44631


author: tangce <tangce1@h-partners.com> - 2.4.43-37
changelog:
  - Type:CVE
  - CVE:CVE-2026-44186,CVE-2026-44185,CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170
  - SUG:NA
  - DESC:fix CVE-2026-44186,CVE-2026-44185,CVE-2026-42536,CVE-2026-34356,CVE-2026-34355,CVE-2026-29170


author: wangjie1 <wangjie1@kylinos.cn> - 2.4.43-37.p01
changelog:
  - Type:bugfix
  - ID:[Task#579609]
  - SUG:NA
  - DESC: update index.html for kylin. 
          fix build error on loongarch64.
          Change httpd.conf to achive: Hide httpd version and Turn TraceEnable off.


author: gaoxingwang<gaoxingwang@huawei.com> - 10.04-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon


author: hexiaole <hexiaole@kylinos.cn> - 10.04-3.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:Patch10:add-check-before-arping.patch:add interface state check before arping from 10.04-1.p02:0001-fix-restart-network-server-fail.patch and 10.04-1.p02:0002-modify-wait-time-to-30s.patch


author: jiangjixiang <jiangjixiang@kylinos.cn> - 10.04-3.p02
changelog:
  - Type:bugfix
  - ID:[task#150862]
  - SUG:NA
  - DESC:Add patch11 to resolve the issue of resolv.conf being cleared.
         this issue is introduced by patch0 and patch5.


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: yanglu <yanglu72@h-partners.com> - 20190709-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix ping6 binding to VRF and address
         Avoid binding to non-VRF
         Fix ARP protocol field for AX.25 and NETROM


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.382-b05.9
changelog:
  - add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
  - add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
  - add Record-the-number-of-processes-to-errlog-file.patch.patch
  - add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
  - add The-OverWriteOldestGCLog-option-is-added-to-control.patch
  - add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
  - add add-make-Appcds-jsa-rw-region-deterministic.patch
  - add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - add add-8198423-Improve-metaspace-chunk-allocation.patch
  - add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
  - add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - add add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - add add-8226530-test-case-fixed.patch
  - add add-8147940-Modify-testcase-this-test-does-not-assum.patch
  - add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
  - add add-Do-not-collect_class-when-DynamicCDS-dump.patch
  - add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
  - add add-Adapting-IOException-of-Zip-to-ZipException.patch
  - add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
  - add add-fix-windows-build-Dynamic-CDS-failure.patch
  - add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.392-b08.0
changelog:
  - add 8308682-Enhance-AES-performance.patch
  - add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
  - add Add-metaspace-memory-allocation-failure-validation.patch
  - add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
  - del 8202952.patch
  - del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
  - modified Dynamic-CDS-Archive.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase1.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - upgrade to jdk8u392-b08


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.2
changelog:
  - remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - remove add-8226530-test-case-fixed.patch
  - remove add-Adapting-IOException-of-Zip-to-ZipException.patch


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 1:1.8.0.392-b08.2.p01
changelog:
  - Type: cves
  - ID: [TASK#183363]
  - SUG: NA
  - fix install fail caused by %pretrans reporting error 
  	add 8268361-Fix-the-infinite-loop-in-next_line.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.402-b06.0
changelog:
  - modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified g1gc-numa-aware-Implementation.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8203699.patch
  - add Add-CaptchaTest-and-fix-KAE-Testcases.patch
  - add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
  - add Add-compiling-option-GS-when-building-windows-JDK.patch
  - add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
  - add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
  - add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
  - add 8057967-CallSite-dependency-tracking-scales-devastat.patch
  - add 8079205-CallSite-dependency-tracking-is-broken-after.patch


author: Benshuai5D <benshuai5d@163.com> - 1:1.8.0.402-b06.4
changelog:
  - add 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - add 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
  - add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
  - add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
  - add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
  - add GCC-12-reports-some-compiler-warnings.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.412-b08.0
changelog:
  - del 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - del 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase2.patch
  - modified support-numactl-for-hadoop-yarn.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.412-b08.3
changelog:
  - add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
  - add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.412-b08.4
changelog:
  - fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
  - fix loongson vendor error


author: Xiang Gao <gaoxiang@kylinos.cn> -1:1.8.0.412-b08.5.p02
changelog:
  - Type:update
  - ID:TASK#205860,TASK#218926
  - SUG:NA
  - DESC:1.Add Hygon dhyana processor support
         2.fix atomic operation issus when cpu scaling
         3.Add Zhaoxin processor support


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.422-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8136577_Make_AbortVMOnException_available_in_product_builds.patch
  - modified Dynamic-CDS-Archive.patch
  - modified add-safe-compilation-flags.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified openjdk-1.8.0.spec
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - Add Backport-6956385-URLConnection.getLastModified-leaks-file-han.patch
  - Add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - Add Backport-8068864-C2-failed-modified-node-is-not-on-IGVN._work.patch
  - Add Backport-8151845-Comment-in-globals.hpp-for-MetaspaceSize-is-.patch
  - Add Backport-8209362-sun-security-ssl-SSLSocketImpl-ReuseAddr.jav.patch
  - Add Backport-8210706-G1-may-deadlock-when-starting-a-concurrent-c.patch
  - Add Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - Add Huawei-Add-Aggressive-CDS.patch
  - Add Huawei-Keep-objects-when-remove-unshareable-info.patch
  - Add Huawei-improve-GCTR-performance.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.3.p01
changelog:
  - Type: update
  - ID:   TASK#337667
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Fix atomic operation issus when cpu scaling
          3.Add Zhaoxin processor support


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: gaoxiang <gaoxiang@kylinos.cn> -1:1.8.0.422-b05.6.p02
changelog:
  - JDK8 supports 8074981-Integer-FP-scalar-reduction-optimization
  - backport AVX512 support, disable by default.


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC: 1.JDK8u432 GA release
  	2.Default parameter updates for x86
  	3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
  	4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC:	1.JDK8u432 GA release
  	2.Default parameter updates for x86
  	3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
  	4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.432.b06-2
changelog:
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8253072-XERCES-version-is-displayed-incorrect.patch
  - add 8159461-8288556-getComponentType.patch
  - add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
  - add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.442.b06-0.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-1.8.0.442.b06 GA release with kylin support:
          1.Support Hygon, Zhaoxin, Atomic operation
          2.Default parameter updates for x86


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC: 1.JDK8u432 GA release
          2.Default parameter updates for x86
          3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
          4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.452.b09-0
changelog:
  - update to 8u452
  - modified add-missing-test-case.patch
  - modified GCC-12-reports-some-compiler-warnings.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.452.b09-1.p01
changelog:
  - Type: update
  - ID:   [TASK#466871]
  - SUG:  NA
  - DESC: openjdk-1.8.0.452 GA release with kylin support


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.462.b08-0
changelog:
  - update to 8u462
  - deleted 8026976-ECParameters-Point-does-not-match-field-size.patch
  - deleted 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.462.b08-1
changelog:
  - deleted 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add Fix-tests-for-OS-with-64k-page-size.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.462.b08-4.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-1.8.0.462 GA release with kylin support
          fix date errors in changelog


author: Benshuai5D <benshuai5d@163.com> -1:1.8.0.462.b08-5
changelog:
  - add 8287432-C2-assert-tn-in-0-__null-failed-must-have-li.patch
  - add 8210389-C2-assert-n-outcnt-0-C-top-n-n-is_Proj-faile.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.472.b08-0
changelog:
  - update to 8u472
  - add 8268366-C1-Incorrect-calculation-of-has_fpu_register.patch
  - deleted 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.472.b08-2.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-1.8.0.472 GA release with kylin support


author: zhaosaisai <zhaosaisai@kylinos.cn> -1:1.8.0.482.b08-7.p01
changelog:
  - Type: update
  - ID:   [TASK#598989]
  - SUG:  NA
  - DESC: openjdk-1.8.0.482 GA release with kylin support


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.15.10-0
changelog:
  - modified 8231441-3-AArch64-Initial-SVE-backend-support.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.16.8-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
  - modified fast-serializer-jdk11.patch
  - modified dfx-enhancement-of-FastSerializer.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
  - modified add-missing-inline.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix_X509TrustManagerImpl_symantec_distrust.patch
  - add fix_Internal_and_external_code_inconsistency.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.6-0
changelog:
  - update to 11.0.17+5
  - modified NUMA-Aware-Implementation-humongous-region.patch
  - modified Add-KAE-implementation.patch
  - modified fast-serializer-jdk11.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.8-0
changelog:
  - update to 11.0.17+8(GA)
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.21.9-0
changelog:
  - update to 11.0.21+9(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified 8214527-AArch64-ZGC-for-Aarch64.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.22.7-0
changelog:
  - update to 11.0.22+7(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: huangjie <huangjie150@huawei.com> - 1:11.0.23.9-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified delete_expired_certificates.patch


author: songliyang <songliyang@kylinos.cn> - 1.11.0.24.8-3.p01
changelog:
  - Type: update
  - ID:   [TASK#337669]
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Add Zhaoxin processor support


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC: 1.openjdk-11.0.25.9 GA release
  	2.add Hygon dhyana processor support
          3.add Zhaoxin processor support
  	4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC:	1.openjdk-11.0.25.9 GA release
  	2.add Hygon dhyana processor support
  	3.add Zhaoxin processor support
  	4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: songliyang <songiyang@kylinos.cn> - 1:11.0.26.4-1.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-11.0.26.4 GA release with kylin support:
          1.Support Hygon, Zhaoxin CPU


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC: 1.openjdk-11.0.25.9 GA release
          2.add Hygon dhyana processor support
          3.add Zhaoxin processor support
          4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: songliyang <songiyang@kylinos.cn> - 1:11.0.27.6-1.p01
changelog:
  - Type: update
  - ID:   [TASK#459119]
  - SUG:  NA
  - DESC: openjdk-11.0.27.6 GA release with kylin support


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.28.6-0
changelog:
  - update to 11.0.28+6(GA)
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch


author: songliyang <songiyang@kylinos.cn> - 1:11.0.28.6-1.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-11.0.28.6 GA release with kylin support
  	obsoletes java-11-openjdk-static-libs* which are nolonger used


author: songliyang <songiyang@kylinos.cn> - 1:11.0.29.7-1.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-11.0.29.7 GA release with kylin support


author: DXwangg <wangjiawei80@huawei.com> -1:11.0.29.7-0
changelog:
  - update to 11.0.29+7(GA)
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - add Enable-optimizations-upon-detecting-Phytium-CPU.patch


author: douyiwang <douyiwang@huawei.com> -1:11.0.29.7-2
changelog:
  - add fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch to fix CVE-2025-66293


author: zhaosaisai <zhaosaisai@kylinos.cn> - 1:11.0.30.7-4.p01
changelog:
  - Type: update
  - ID:   [TASK#598989]
  - SUG:  NA
  - DESC: openjdk-11.0.30.7 GA release with kylin support


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.31.11-0
changelog:
  - update to 11.0.31+11(GA)
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - delete fix-libpng-CVE-2026-22695.patch
  - delete 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - delete fix-libpng-CVE-2026-25646.patch
  - add Use-stlr-for-putOrdered.patch


author: zhaosaisai <zhaosaisai@kylinos.cn> - 1:11.0.31.11-4.p01
changelog:
  - Type: update
  - ID:   [TASK#635259]
  - SUG:  NA
  - DESC: sync openEuler openjdk-11.0.31.11 GA release with kylin patch


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 1.6-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: wanghao <wanghao2@kylinos.cn> - 27-10.se.01
changelog:
  - Type: update
  - ID: #75532
  - SUG: NA
  - DESC: 移植kysec补丁
  -         add patch: kmod-27-kylin-security.patch
  -       添加kysec检查
  -         add patch: kmod-27-add-kysec-kmod-check.patch
  -       使用kysec检查函数
  -         add patch: kmod-27-using-kysec-check-kmod-func.patch


author: wanghao <wanghao2@kylinos.cn> - 27-10.se.02
changelog:
  - Type: bugfix
  - ID: [BUG#157423]
  - SUG: NA
  - DESC: 修复当kmod关闭时，insmod插入模块异常的问题
  -         add patch: kmod-27-fix-insmod-abnormal-when-close-kmod.patch


author: wanghao <wanghao2@kylinos.cn> - 27-10.se.03
changelog:
  - Type: bugfix
  - ID: [BUG#165082]
  - SUG: NA
  - DESC: 修复当修改内核模块文件后，仍可以insmod成功的问题
  -         add patch: kmod-27-fix-insmod-success-when-modify-ko-file-after.patch


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p24
changelog:
  - Type:bugfix
  - ID:[BUG#89131&&BUG128952]
  - SUG:NA
  - DESC:fix show qr code err and import License err


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p25
changelog:
  - Type:update
  - ID:[TASK#105221]
  - SUG:NA
  - DESC:Venue authorization limited time unlimited demand support


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p27
changelog:
  - Type:bugfix
  - ID:[BUG#139688]
  - SUG:NA
  - DESC:fix kms client not show deactivation button while config serverip is url(patch27)


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p31
changelog:
  - Type:bugfix
  - ID:[BUG#178000] [TASK#176779] [TASK#179475]
  - SUG:NA
  - DESC: add get trial date fuction for dbus
  - DESC: open auto activation for kms privatization
  - DESC: add ipv6 support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p33.02
changelog:
  - Type: bugfix
  - ID:[bug#216077]
  - SUG: NA
  - DESC: add tips when inputed activation code is too short


author: Wenhua Huang <huangwenhua@kylinos.cn> - 1.3.2-1.p33.07
changelog:
  - Type:update
  - ID:[TASK#495229][BUG#387985][BUG#390917]
  - SUG:NA
  - DESC: mv autostart to libkylin-activation
          fix kms ui miss deactivate button
          fix kms ui deactivate set autoactivated=0


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.01
changelog:
  - 新增无事务数据加载接口
  -   add patch: kysec-common-add-without-transaction-retrieve-interface-for-sqlite.patch
  - 修复调用path_is_mount_bind接口失败的bug
  -   add patch: kysec-common-fix-bug-of-call-path_is_mount_bind.patch
  - Bug:  #66918
  - 参数为空时日志为none
  -   add patch: kysec-common-update-unknown-to-none.patch
  - Bug:  #69396 #70642
  - 二进制程序覆盖python脚本，python脚本状态变成“已损坏”
  - 安全中心打印kysec.log日志的时间格式，以/etc/default/locale中的语言环境为准
  -   add patch: kysec-common-optimize-script-file-parse-move-to-end.patch
  - Bug:  #80484
  - 语言环境变量错误，导致英文模式下，执行控制弹框为中文
  -   add patch: kysec-common-fix-other-app-lang-env-error-caused-by-time.patch
  - kysec日志添加日志轮询功能
  -   add patch: kysec-common-add-logrotate-for-kysec-log.patch
  - 应用桌面补丁到：1.0.1-21kylin


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.03
changelog:
  - Type: update 
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -         add patch: kysec-common-fix-fortify.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.04
changelog:
  - Type: bugfix
  - ID:[BUG#141967]
  - SUG:NA
  - DESC: 修复无效日志数据导致kyseclogd崩溃问题
  -         add patch: kysec-common-fix-kyseclogd-coredump-caused-by-invalid-msg.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.05
changelog:
  - Type: bugfix
  - ID:[BUG#143870]
  - SUG:NA
  - DESC: 修改kysec_logd服务的监听ip为127.0.0.1
  -         add patch: kysec-common-modify-kysec-log-server-listen-ip.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.06
changelog:
  - Type: bugfix
  - ID:[BUG#165526]
  - SUG:NA
  - DESC: 解决获取所有进程防杀死列表不全的问题
  -         add patch: kysec-common-fix-get-ppro-list-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.07
changelog:
  - Type: bugfix
  - ID:[BUG#184694]
  - SUG:NA
  - DESC: 修复secadm用户获取进程防杀死信息失败的问题
  -	  add patch: kysec-common-fix-secadm-ppro-get-pid-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.08
changelog:
  - Type: bugfix
  - ID:[BUG#184694]
  - SUG:NA
  - DESC: 修复secadm用户无法通过pid获取进程管控状态的问题
  -	  add patch: kysec-common-fix-secadm-can-not-get-ppro-by-pid.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.09
changelog:
  - Type: update
  - ID:[任务#189436]
  - SUG:NA
  - DESC: 修改解压xz文件的方式,提高解析文件类型的速度,修改spec文件，添加xz依赖
  -	  add patch: kysec-common-modify-decompress-xz-file.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.10
changelog:
  - Type: bugfix
  - ID:[BUG#184694]
  - SUG:NA
  - DESC: 修复当secadm使用kysec_get查询指定路径的ppro状态时,若selinux拦截
  -	了pid的查询,获取的pid会是kysec_get进程的pid的问题
  -	  add patch: kysec-common-fix-get-pid-error-when-selinux-prevent.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-16.se.11
changelog:
  - Type: CVE
  - ID: KVE-2026-0206
  - SUG: NA
  - DESC: 修复函数在处理文件操作时，存在条件竞争缺陷的问题，合入补丁
  -     add patch: KVE-2026-0206.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.0.3-36.se.08
changelog:
  - Type:update
  - ID: [Task#90054]
  - SUG:NA
  - DESC: 添加支持chpolicy的服务接口
  -         add patch: kysec-daemon-add-chpolicy.patch
  - Type: bugfix
  - ID: [Bug#122953]
  - SUG:NA
  - DESC: 修复添加内核防卸载时，Qstring导致的乱码的问题
  -         add patch: kysec-daemon-fix-add-kmod-protect-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.09
changelog:
  - Type: bugfix
  - ID: [Bug#131435][Bug#131574]
  - SUG:NA
  - DESC: 修复security-switch加固后切换strict模式失败的问题
  -       修复strict模式下，切换selinux模式为permissive失败的问题
  -         add patch: kysec-daemon-fix-kysec-command-bug.patch
  - Type:update
  - ID: NA
  - SUG:NA
  - DESC: 将kysec-module的dbus通信移植到kysec-daemon
  -         add patch: kysec-daemon-modify-dbus-module-to-daemon.patch
  - Type: bugfix
  - ID: [bug#132371][bug#132368]
  - SUG:NA
  - DESC: spec文件中Conflicts改成Obsoletes,修复yum update失败的问题


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.10
changelog:
  - Type: bugfix
  - ID: [Bug#135772]
  - SUG:NA
  - DESC: 修复应用程序执行控制解除失败的bug
  -         add patch: kysec-daemon-fix-failed-to-remove-exectl.patch
  - Type: update 
  - ID: []
  - SUG:NA
  - DESC: netctl添加pkg path的dbus接口
  -         add patch: kysec-daemon-netctl-add-pkg-path-dbus-interface.patch 
  - Type: bugfix
  - ID: [Bug#135098]
  - SUG:NA
  - DESC: 删除devctl相关内容
  -         add patch: kysec-daemon-delete-devctl.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.11
changelog:
  - Type: bugfix
  - ID: [Bug#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: kysec-daemon-fix-not-set-status-when-close-3adm.patch 
  - Type: update
  - ID: [TASK#111368]
  - SUG:NA
  - DESC: 为security-switch加入回滚机制
  -       add patch: kysec-daemon-security-switch-add-rollback.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.12
changelog:
  - Type: bugfix
  - ID: [Bug#144683]
  - SUG:NA
  - DESC: 修复在strict模式下，关闭box重启后security-switch和getstatus失败的问题
  -         add patch: kysec-daemon-fix-security-switch-get-error-when-set-box-disable.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.13
changelog:
  - Type: bugfix
  - ID: [Bug#144594]
  - SUG:NA
  - DESC: 修复安全优先模式切换其他模式，未重启前模式显示错误的问题
  -         add patch: kysec-daemon-fix-security-switch-get-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.14
changelog:
  - Type: update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: kysec-daemon-netctl-set-off.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#157216]
  - SUG:NA
  - DESC: 解决添加白名单后whlist.db文件无法关闭的问题
  -         add patch: kysec-daemon-fix-whlist-db-close-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#161996]
  - SUG:NA
  - DESC: 修复执行控制白名单和文件防篡改列表为空的问题
  -         add patch: kysec-daemon-fix-whlist-init-failed.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 1.0.3-36.se.17
changelog:
  - Type: bugfix
  - ID: [BUG#151059]
  - SUG:NA
  - DESC: 切换selinux的permissive及enforcing模式实时生效
  -         add patch: kysec-daemon-fix-selinux-status-changenow.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.18
changelog:
  - Type: update
  - ID: [任务#137354]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -         add patch: kysec-daemon-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.20
changelog:
  - Type: bugfix
  - ID: [BUG#205663][BUG#206934]
  - SUG:NA
  - DESC: 修复security-switch --set strict设置三元密码时，dbus通信超时导致密码设置失败的问题[BUG#205663]
  -	  add patch: kysec-daemon-fix-set-passwd-dbus-timeout-failed.patch
  -	修复三员用户家目录删除后,stirct模式仍然可以成功切换,但无法登录的问题[BUG#206934]
  -	  add patch: kysec-daemon-fix-login-failed-when-del-3adm-home-dir.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.3-36.se.21
changelog:
  - Type: bugfix
  - ID: [BUG#220612]
  - SUG:NA
  - DESC: 【kysec】kysec状态关闭再打开后，重启系统后可以修改或删除受保护文件.
  -	  add patch:  kysec-daemon-fix-readonly-tag-loss-error.patch


author: lengchunying <lengchunying@kylinos.cn> - 1.0.3-36.se.22
changelog:
  - Type: update
  - ID: [任务#566261]
  - SUG:NA
  - DESC: 修复中危漏洞KVE-2025-1202等1个漏洞--kysec-daemon
  -         add patch:  kysec-daemon-fix-cve-2025-1202.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.18
changelog:
  - Type: update
  - ID: [任务#137354]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -         add patch: kysec-utils-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.22
changelog:
  - Type: bugfix
  - ID: [BUG#190352]
  - SUG:NA
  - DESC: 修复kysec设置disable后，提示重启生效的问题
  -	  add patch: kysec-utils-fix-kysec-set-disable-tips-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.23
changelog:
  - Type: update
  - ID: [任务#180316]
  - SUG:NA
  - DESC: 将load_policy命令加入到secadm_list文件中
  -	  add patch: kysec-utils-load_policy-add-secadm_list-file.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.24
changelog:
  - Type: bugfix
  - ID: [BUG#200000]
  - SUG:NA
  - DESC: 修改切换状态时提示kill用法错误
  -	  add patch: kysec-utils-fix-setstatus-tips-kill-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.25
changelog:
  - Type: bugfix
  - ID: [BUG#184694]
  - SUG:NA
  - DESC: 修复secadm用户无法通过pid获取进程管控状态的问题
  -	  add patch: kysec-utils-fix-secadm-can-not-get-ppro-by-pid.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.26
changelog:
  - Type: bugfix
  - ID: [BUG#206934]
  - SUG:NA
  - DESC: 修复三员用户家目录删除后,stirct模式仍然可以成功切换,但无法登录的问题
  -	  add patch: kysec-utils-fix-login-failed-when-del-3adm-home-dir.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.3.6-33.se.27
changelog:
  - Type: bugfix
  - ID: [BUG#215075]
  - SUG:NA
  - DESC: 【授权管控】【S2500】系统安全切换至strict或者default模式后，切换tty后未显示授权管控提示语句
  -	  add patch: kysec-utils-fix-unetdns-service-start-failed.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.3.6-33.se.28
changelog:
  - Type: bugfix
  - ID: [BUG#218250]
  - SUG:NA
  - DESC:  【52.36】【访问控制】【白名单访问控制】kysec配置-进程保护标签列表查看
  -         回退由国防bug引入的改动.
  -	  add patch: kysec-utils-fix-ppro-get-not-running-process-info.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.3.6-33.se.29
changelog:
  - Type: bugfix
  - ID: [BUG#220613]
  - SUG:NA
  - DESC: 【kysec】insmod被篡改的内核模块，没有产生拒绝日志.
  -     add patch: kysec-utils-fix-no-kysec-deny-logs-when-insmod-hash-not-verified-ko.patch


author: fuanan <fuanan3@huawei.com> - 551-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Minor memory leak.
         Remove unnecessary and incorrectly used variable same_pos_bell.
         Fix erroneous EOF calculation when F command is interrupted.
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: peijiankang <peijiankang@kylinos.cn> - 1.6.9-8.p01
changelog:
  - Type: bugfix
  - Id  : [bug#260937]
  - SUG : NA
  - DESC: add libX11-1.6.9-fix-imDefLkup-coredump.patch


author: lingsheng <lingsheng1@h-partners.com> - 3.4.3-10
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: chenyanpanHW <chenyanpan@huawei.com> - 2.24-7
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-lvm-Add-missing-attribute-to-bd_lvm_pvdata_copy-in-L.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-module.c-Fix-error-message-when-loading-module-witho.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-exec-Fix-setting-locale-for-util-calls.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-lvm-Fix-checking-for-LVM-VDO-dependencies.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-lvm-dbus-Fix-memory-leak-in-bd_lvm_cache_attach.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-lvm-Fix-memory-leak-bd_lvm_cache_create_cached_lv.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-fs-Fix-return-values-in-bd_fs_ntfs_get_info.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-fs-Fix-return-values-in-bd_fs_xfs_get_info.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-dm-Fix-comparing-DM-RAID-member-devices-UUID.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-dm-Fix-memory-leak-in-the-DM-plugin-and-DM-logging-r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-fs-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-kbd-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-lvm-dbus-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-mdraid-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-swap-Fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0016-vdo-Do-not-use-g_memdup-in-bd_vdo_stats_copy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0017-Don-t-allow-suid-and-dev-set-on-fs-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: capsh better error handling for integer parsing
          setcap clean up error handling of the ns rootid argument


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: If needed search PATH for capsh (==) self-execution
          Guarantee sufficient memory for scratch pathname


author: xuhe <xuhe@kylinos.cn> - 5.3.28-36.p01
changelog:
  - Rebuild for Kylin
  - Add BuildRequires:  java       >= 1:1.6.0
  - Add BuildRequires:  java-devel <  1:1.11.0
  - Add BuildRequires:  java       <  1:1.11.0


author: zhengxiaoxiao <zhengxiaoxiao@huawei.com> - 1.9.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add backport-Fix-the-behavior-for-child-process.patch
             backport-Clear-AESWRAP-scratch-area-immediately-after-use.patch


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p52
changelog:
  - Type: upadate
  - ID:[TASK#153883]
  - SUG:NA
  - DESC: change service enable way in postinstall and posttrans


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p58
changelog:
  - Type: update
  - ID:[TASK#176779]
  - SUG:NA
  - DESC: add auto activation for kms privatization and fix bug 199947
  - DESC: cancel read hardinfo from khwid and five m extension


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p61.02
changelog:
  - Type: bugfix
  - ID:[BUG#211902]
  - SUG: NA
  - DESC: gather together kms cmd 
  - DESC: add writable port and decoupling echoip from kms server


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p61.08
changelog:
  - Type: bugfix
  - ID:[BUG#235198][BUG#235203][TASK#336625][TASK#335500][BUG#242309][BUG#241968]
  - SUG: NA
  - DESC: fix translation errors for bug#235198 and bug#235203
  	fix get activation status error  for task#336625
  	fix get sn code error for task#335500
  	fix kylin_kms delay failed for bug#242309
  	fix kylin_kms -c failed for bug#241968


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.64.p61.15
changelog:
  - Type:update
  - ID:[TASK#495229][BUG#387899][BUG#387025]
  - SUG:NA
  - DESC: hwid not use bios uuid
          vm client not use disk


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.64.p61.21
changelog:
  - Type:update
  - ID:[TASK#642797]
  - SUG:NA
  - DESC:fix cpu=100% when can not connect to kms server 
         fix delete_post and KVE-2026-05155


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.64.p61.22
changelog:
  - Type:bugfix
  - ID:[BUG#510541][BUG#510541][TASK#642797]
  - SUG:NA
  - DESC: optimize the mechanism for obtaining unique hardware identifiers
          fix mem leak and get virtio net pci addr
          fix get raid disk and is network disk
          fix cpu=100% when can not connect to kms server
          fix delete_post and KVE-2026-05155


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p51
changelog:
  - Type: bugfix
  - ID:[BUG#178000]
  - SUG:NA
  - DESC: fix get expiration time error and add get trial time fuction


author: xinghe <xinghe2@h-partners.com> - 2:1.6.37-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: Caolán McNamara <caolanm@redhat.com> - 1:6.3.5.2-5
changelog:
  - rhbz#1796893 spreadsheetml2ooo.xsl was not well formed xml
  - rhbz#1796893 fix impress print dialog range


author: peijiankang <peijiankang@kylinos.cn> - 2.50.5-2.p01
changelog:
  - Type: update
  - ID:   [Task#171031]
  - SUG:  NA
  - DESC: add loongarch support patch in vendor libc (sync from  2.50.5-1.p01)


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.02
changelog:
  - 1、kylin-security.conf改名为kysec.conf
  - 2、kysec.conf默认配置改为开启
  -    libsecurity1-change-config-file-name.patch
  - 1、添加security_config_module_status_get()接口
  -    libsecurity1-add-security-module-status-get-interface.patch
  - 1、添加devctl配置项
  - 2、security_set添加devctl状态初始化
  -    libsecurity1-add-devctl-conf-and-status-init.patch
  - 同步桌面版本到：1.1-23kylin


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.03
changelog:
  - kysec.conf添加kysec_tpm=0的配置
  -   add patch: libsecurity1-add-kysec-tpm-status-config.patch
  - 修改kysec.conf的路径
  -   add patch: libsecurity1-change-kysec-conf-path.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.06
changelog:
  - Type:update
  - ID: [TASK#116058]
  - SUG:NA
  - DESC: 修复函数会覆盖errno问题
  -         add patch: libsecurity1-fix-errno-will-be-overwritten.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.07
changelog:
  - Type:update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: libsecurity1-netctl-set-off.patch


author: hanhuijie <hanhuijie@kylinos.cn> - 3.1-4-se.01
changelog:
  - Type:update
  - ID:[Task#]
  - SUG:NA
  - DESC:
  - 增加libselinux补丁
  -         add patch: libselinux-20200318.patch
  -       增加security宏定义
  -         add patch: add-selinux_restorecon.patch
  -       修改selinux_restorecon.c文件
  -         add patch: libselinux-20200427.patch
  -       Audit cannot be controlled by policy.
  -         add patch: libselinux-fix-ston-wrong.patch
  -       放开USER_AVC checks


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.1-4-se.03
changelog:
  - Type:update
  - ID:[BUG#157746] 
  - SUG:NA
  - add Patch6: libselinux-keep-getpeercon-errorno.patch
  - DESC: 157746 【虚拟化】libvirtd服务报错，virt-manager虚拟机管理器连接失败
    keep errorno value of function getsockopt before function security_lsm_is_enable change it.


author: xingxing <xingxing9@h-partners.com> - 0.7.14-6
changelog:
  - Type:cves
  - CVE:CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-20
  21-44576-CVE-2021-44577
  - SUG:NA
  - DESC:fix CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-C
  VE-2021-44576-CVE-2021-44577


author: nickyang <nickyang228@163.com> - 2.71.0-11
changelog:
  - Type:cves
  - ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
  - SUG:NA
  - DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716


author: nickyang <nickyang228@163.com> - 2.71.0-12
changelog:
  - Type:cves
  - ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
  - SUG:NA
  - DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369


author: wangjie1 <wangjie1@kylinos.cn> - 2.71.0-18.p01
changelog:
  - Type:cves
  - ID:CVE-2025-4945
  - SUG:NA
  - DESC:fix CVE-2025-4945; Failed to fix websocket-test case (backport-0003-CVE-2024-52532)


author: xinghe <xinghe2@h-partners.com> - 2.71.0-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: houzhiwei <houzhiwei@kylinos.cn> - 2.71.0-4.p02
changelog:
  - Type:cves
  - Id:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: houzhiwei <houzhiwei@kylinos.cn> - 2.71.0-4.p03
changelog:
  - Type:cves
  - Id:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: houzhiwei <houzhiwei@kylinos.cn> - 2.71.0-4.p06
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: houhongxun <houhongxun@kylinos.cn> - 2.71.0-4.p09
changelog:
  - Type:cves
  - ID:[TASK#593047][TASK#595441]
  - SUG:NA
  - DESC:fix CVE-2026-0719 CVE-2025-14523 CVE-2026-1761 CVE-2026-1539 CVE-2026-1467
         CVE-2026-0716 CVE-2026-2369 CVE-2026-1801 CVE-2026-1760


author: gaihuiying <eaglegai@163.com> - 0.9.4-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport upstream patches:
         add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: renmingshuai <renmingshuai@huawei.com> - 0.9.4-9
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: gaihuiying <eaglegai@163.com> - 0.9.4-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-4877 CVE-2025-4878 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877 CVE-2025-4878 CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.9.4-15
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: yuboyun<yuboyun@huawei.com> - 1.9.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix heap-buffer-overflow in _libssh2_ntohu32 and wild-addr-read in _libssh2_ntohu32


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.9.0-10
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: gaoyukun <gaoyukun@kylinos.cn> - 4.16.0-3.p01
changelog:
  - Type:compile
  - ID:TASK#414527
  - SUG:NA
  - DESC:Add 'BuildRequires gtk-doc',repair compilation failure.


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-9
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: wanfeng <wanfeng@kylinos.cn> - 1.2.6-2.p01
changelog:
  - Type:BUGFIX
  - ID:Task#145401
  - SUG:NA
  - DESC:add 0001-__rpc_dtbsize-rlim_cur-instead-of-rlim_max.patch
         add 0003-libtirpc-replace-array-with-list-for-per-fd-locks.patch
         fix oom bug


author: Like <like@kylinos.cn> - 1.2.6-4.p01
changelog:
  - Type:BUGFIX
  - ID:Task#150867,Task#145401
  - SUG:NA
  - DESC:Updated to the latest upstream release
  -- add 0001-__rpc_dtbsize-rlim_cur-instead-of-rlim_max.patch
     add 0003-libtirpc-replace-array-with-list-for-per-fd-locks.patch
     fix oom bug


author: hy-euler <eulerstoragemt@huawei.com> - 1.0.22-3
changelog:
  - delete -Sgit in 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-descriptor-Fix-two-memory-safety-bugs-in-malformed-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0 for fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - virDevMapperGetTargets: Don't ignore EBADF
  - virdevmapper: Don't cache device-mapper major
  - virdevmapper: Handle kernel without device-mapper support


author: lijunwei <lijunwei@kylinos.cn> 6.2.0-16.p01
changelog:
  - Type update
  - ID:NA
  - SUG:NA
  - DESC:KYLIN-add-Phytium-support-host-model.patch 增加飞腾使用host-model启动虚拟机功能


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p02
changelog:
  - Type:update
  - ID:[TASK#84925]
  - SUG:NA
  - DESC:Enable esx support to support virt-v2v from esx to kvm


author: lizhanchun <lizhanchun@kylinos.cn> 6.2.0-16.p03
changelog:
  - Type update
  - ID:[BUG:132676]
  - SUG:NA
  - DESC:libvirt-6.2.0 add computing baseline hypervisor CPU for arm


author: lilong <lilong@kylinos.cn> - 6.2.0-16.p09.s5kb01
changelog:
  - Type: Update
  - ID:   [TASK#211377]
  - SUG:  NA
  - DESC: fix CVE-2024-1441,CVE-2024-2494,CVE-2024-2496


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 6.2.0-16.p09.s5kb03
changelog:
  - Type: cves
  - ID:   CVE-2025-12748 CVE-2025-13193
  - SUG:  NA
  - DESC: Fix CVE-2025-12748 CVE-2025-13193


author: Cai Yinan <caiyinan@kylinos.cn> - 1.7.0-10.p01
changelog:
  - Type:update
  - ID:[task#186399]
  - SUG:NA
  - DESC: mv /usr/bin/tools/tiny_ssim to /usr/bin/tiny_ssim required by FHS standard


author: fuanan <fuanan3@h-partners.com> - 2.9.10-28
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: Funda Wang <fundawang@yeah.net> - 2.9.10-43
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: panzhe <panzhe@kylinos.cn> - 2.9.10-43.p04
changelog:
  - Type:CVE
  - CVE:CVE-2025-32415
  - CVE:CVE-2025-32414
  - SUG:NA
  - DESC: fix CVE-2025-32415, CVE-2025-32414


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.9.10-43.p08
changelog:
  - Type:CVE
  - CVE:CVE-2025-49794、CVE-2025-49796、CVE-2025-6170
  - SUG:NA
  - DESC: fix CVE-2025-49794、CVE-2025-49796、CVE-2025-6170


author: zuo <zuohongsheng@kylinos.cn> - 2.9.10-43.p14
changelog:
  - Type:CVE
  - CVE:[task#590091
  - SUG:NA
  - DESC: fix CVE漏洞CVE-2026-0989（低危）CVE-2026-0992（低危）CVE-2026-0990（中危）


author: fuanan <fuanan3@h-partners.com> - 1.1.34-9
changelog:
  - fix xsltCleanupSourceDoc function:
    Clean up attributes in source doc
    Avoid null deref on documents without root


author: huayadong <huayadong@kylinos.cn> - 1.30.0-8.p05
changelog:
  - Type: bugfix
  - ID  : [Bug#162010]
  - SUG : NA
  - DESC: add Patch5:lightdm-1.30.0-kylin-fix-create-a-user-with-the-same-name-after-deleting-the-user,-and-the-login-will-flash-back.patch


author: hexiaole <hexiaole@kylinos.cn> - 8:2.03.09-12.p01
changelog:
  - Type:compile
  - ID:[任务#74797]
  - SUG:NA
  - DESC:Patch18:0018-LD_LIBRARY_PATH-add-extra-dir.patch:add patch to resolve running-time error of test/unit/unit-test: error while loading shared libraries: libdevmapper-event.so.1.02: cannot open shared object file: No such file or directory


author: Xiaole He <hexiaole@kylinos.cn> - 8:2.03.09-12.p02
changelog:
  - Type:task
  - ID:[任务#116460]
  - SUG:NA
  - DESC:add Patch19-23 for supporting intel vroc raid(vitual raid on cpu)


author: baiguo <baiguo@kylinos.cn> - 8:2.03.09-12.p07
changelog:
  - Type: bugfix
  - ID: [任务#346081]
  - SUG: NA
  - DESC: fix an double free in the error path from _stats_creat_group
          because sp4-ha occupies p06,so p07 is used.


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.16.0-2
changelog:
  - fix for https://github.com/mate-desktop/marco/issues/251
  - https://bugzilla.redhat.com/show_bug.cgi?id=1419634


author: huayadong <huayadong@kylin.cn> - 1.16.1-4.p01
changelog:
  - add Patch2:marco-kylin-Fix-bug-60212-the-interface-of-Firefox-browser-and-drag-shadow-appears.patch


author: huayadong <huayadong@kylinos.cn>- 1.16.1-4.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#224312]
  - SUG:  NA
  - DESC: add patch3:marco-1.16.1-kylin-Add-the-_NET_WM_WINDOW_OPACITY-attribute-to-the-root-window.patch


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.34-1
changelog:
  - Bump version to latest 10.3.34 version
  - For resolving the CVEs, which includes:
  - CVE-2021-46659
  - CVE-2021-46664
  - CVE-2021-46665
  - CVE-2021-46663
  - CVE-2021-46662
  - CVE-2021-46666
  - CVE-2021-46667
  - CVE-2021-46661
  - CVE-2021-46669
  - CVE-2021-46657
  - Above all CVEs needs to bump to the latest version for resolve.
  - Refresh all patches relies on the latest tar package.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.35-1
changelog:
  - Bump version to 10.3.35 for resolving CVEs as below
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387


author: sunjialin <sunjialin@kylinos.cn> - 3:10.3.39-1.p01
changelog:
  - Type: bugfix
  - ID: BUG#208296
  - SUG: NA
  - DESC: Modify the epoch version to fix the upgrade failure


author: zhangjun <zhangjun@kylinos.cn> - 1.12.1-1kord32.p08
changelog:
  - Add patch: mate-desktop-1.12.1-del-service-time.patch
  - TASK#66061 子 KMS2.2需求实现 /授权激活后界面上的支持服务时间隐藏
  - 本次更新在关于界面隐藏支持服务时间


author: huayadong <huayadong@kylinos.cn> - 1.12.1-1kord32.p09
changelog:
  - Add patch: mate-desktop-kylin-fix-bug-68049-translation-of-tchinese.patch -  wangqiang <wangqiang1@kylinos.cn>
  - 合并龙芯补丁


author: huayadong<huayadong@kylinos.cn> - 1.12.1-1kord32.p13
changelog:
  - Type:bugfix
  - ID  :[Bug#166650]
  - SUG :NA
  - DESC:add Patch6:mate-desktop-1.12.1-kylin-update-copyright-time-for-sp3.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.1-1kord32.p16
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-mate-desktop-add-some-missing-traditional-chinese-tr.patch


author: houhongxun<houhongxun@kylinos.cn> - 1.12.1-1kord32.p17
changelog:
  - Type:update
  - ID  :[Task#187074]
  - SUG :NA
  - DESC:add Patch8:0001-add-sp4-support-for-copy-right.patch


author: houhongxun<houhongxun@kylinos.cn> - 1.12.1-1kord32.p18
changelog:
  - Type:bugfix
  - ID  :[Bug#211927]
  - SUG :NA
  - DESC:add Patch9:0001-mate-desktop-fix-memory-leak-problem.patch


author: huayadong<huayadong@kylinos.cn> - 1.12.1-1kord32.p19
changelog:
  - Type:bugfix
  - ID  :[Bug#216068]
  - SUG :NA
  - DESC:add Patch10:mate-desktop-1.12.1-kylin-fix-authorization-expiration-without-prompt.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.1-1kord32.p21
changelog:
  - Type: bugfix
  - ID:   [TASK#220038]
  - SUG:  NA
  - DESC: don't repeatedly reset desktop background which was used by caja


author: huayadong <huayadong@kylinos.cn> -20150918kord0ukui58-10.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#104488]
  - SUG : NA
  - DESC: change %build for add debuginfo,rebuild for loongarch64.


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#197212]
  - SUG : NA
  - DESC: add patch 0001-use-utc-time-to-calculate-date-difference.patch
          to fix calendar display problem for some timezones


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#117285]
  - SUG : NA
  - DESC: add Patch07 mate-system-monitor-1.24.0-kylin-adaptive-kysec-process-anti-unloading.patch
          适配kysec进程防杀死机制.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#93745]
  - SUG : NA
  - DESC: add Patch08 mate-system-monitor-1.24.0-fix-bug-93745.patch
          当三权分立开启，非超级用户不可操作系统监视器.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#117553]
  - SUG : NA
  - DESC: add Patch09 mate-system-monitor-1.24.0-fix-firefox-79.0-process-name-as-MainThread.patch
          修复firefox-79.0版本进程名称显示为MainThread.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#75897]
  - SUG : NA
  - DESC: add Patch10 mate-system-monitor-1.24.0-fix-unable-to-internationalize.patch
          修复系统监视器无法国际化问题.


author: HouHongxun <houhongxun@kylinos.cn> 1.24.0-1.p11
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-modify-traditional-chinese-translation-for-HK-and-TW.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p12
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC:add patch12: mate-system-monitor-1.24.0-kylin-HK-po-update.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p13
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch13: mate-system-monitor-1.24.0-kylin-update-zh-HK-po.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p14
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch14: mate-system-monitor-1.24.0-kylin-change-translate-seat.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p15
changelog:
  - Type: update
  - ID: [TASK#201339]
  - SUG: NA
  - DESC:add patch15: 0001-fix-mate-system-monitor-memory-leaks.patch
         sync mips64el chandao116445:add mate-system-monitor-1.24.0-kylin-fix-stop-process.patch


author: Zhenneng Li <lizhenneng@kylinos.cn> - 20.1.4-1.p05
changelog:
  - Type:BUG
  - ID:[BUG#95676]
  - SUG:NA
  - DESC: add loongarch patch to fix sigment fault when running glxgears


author: Zhenneng Li <lizhenneng@kylinos.cn> - 20.1.4-1.p06
changelog:
  - Type: update
  - ID:   [TASK#105748]
  - SUG:  NA
  - DESC: Delete -D__KYLIN_FT1500A_DISPLAY__ for CFLAGS/CXXFLAGS
  	Fix some compile warning


author: pengfuyuan <pengfuyuan@kylinos.cn> - 20.1.4-1.p07.s5kb01
changelog:
  - Type: update
  - ID:   [TASK#185720]
  - SUG:  NA
  - DESC: Add -D__KYLIN_FT1500A_DISPLAY__ for CFLAGS/CXXFLAGS


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: yinyongkang <yinyongkang@kylinos.cn> - 0.8.4-18.p02
changelog:
  - Type: bugfix
  - ID: [TASK#176871]
  - SUG: NA
  - DESC: Add 0042-libmultipath-fix-checker-detection-for-nvme-devices.patch


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 0.8.4-18.p03
changelog:
  - Type: update
  - ID: [TASK#190984]
  - SUG: NA
  - DESC: Backport oe -19 and -20 patches:
          -fix build failure caused by new compliation parametes
          -fix multipath -u not recognize multipath devices


author: Yu Peng <yupeng@kylinos.cn> - 0.8.4-18.p05
changelog:
  - Type:bugfix
  - ID:[Task#453521]
  - SUG:NA
  - DESC:fix check_path errors with removed map.
         sync community patches:
         multipathd-fix-check_path-errors-with-removed-map.patch
         libmultipath-make-dm_get_map-status-return-codes-sym.patch


author: kouwenqi <kouwenqi@kylinos.cn> - 0.8.4-18.p06
changelog:
  - Type:bugfix
  - ID:[Task#514047]
  - SUG:NA
  - DESC:libmultipath: check if user_friendly_name is in use


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: Funda Wang <fundawang@yeah.net> - 5:2.2.12-4
changelog:
  - fix CVE-2026-43859, CVE-2026-43860, CVE-2026-43861, CVE-2026-43862,
    CVE-2026-43863, CVE-2026-43864


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: yaoxin <yao_xin001@hoperun.com> - 2.15.05-1
changelog:
  - Update to 2.15.05
    * fix %ifid with $ and $$
    * Add --reproducible option to suppress NASM version numbers and timestamps in output files


author: openEuler Buildteam <buildteam@openeuler.org> - 6.1-12
changelog:
  - Type:cves
  - ID:CVE-2019-17594  CVE-2019-17595
  - SUG:NA
  - DESC:fix CVE-2019-17594 and CVE-2019-17595


author: zhangchaorui <zhangchaorui@kylinos.cn> - 6.2-7.p01
changelog:
  - Add patch: ncurses-support-loongarch.patch
  - Modify config.sub/config.guess for supporting loongarch


author: gaihuiying <gaihuiying1@huawei.com> - 5.9-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix undefined behavior in asn_build_int()
         libsnmp: Rework parse_imports()
         libsnmp: Increase MAX_IMPORTS
         libsnmp: Allocate the module import list on the heap
         libsnmp: Fix a memory leak in a MIB parser error path
         libsnmp: Fix the getoid() error path


author: wangshuo <wangshuo@kylinos.cn> - 5.9-4.p03
changelog:
  - Type:bugfix
  - ID:[Bug#154748]
  - SUG:NA
  - DESC:Delete useless so file, see also:
  -        https://gitee.com/src-openeuler/net-snmp/commit/50d96cd21868c4b37f4629f34f37dfbd3be37592
  -      To fix bug, the LoongArch platform must use the newly compiled so library file.


author: baiguo <baiguo@kylinos.cn> - 5.9-4.p04
changelog:
  -Type:bugfix
  -ID:[Task#164834]
  -SUG:NA
  -DESC:fix create snmp user unusual when encryption key is null


author: Like <like@kylinos.cn> - 3.6-5.p02
changelog:
  - Type:CVE
  - ID:CVE-2021-20305 and CVE-2021-3580
  - SUG:NA
  - DESC:Fix CVE-2021-20305 and CVE-2021-3580


author: openEuler Buildteam <buildteam@openeuler.org> - 2.4.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:stop the var-lib-nfs-rpc_pipefs.mount before remove the package


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.21.5-2.p09
changelog:
  - Type: cves
  - ID: CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256
  - SUG: NA
  - DESC: fix CVE-2026-40701 CVE-2026-42934 CVE-2026-42946 CVE-2026-9256


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.21.5-2.p10
changelog:
  - Type: cves
  - ID: CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753
  - SUG: NA
  - DESC: fix CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.21.5-2.p13
changelog:
  - Type: cves
  - ID: CVE-2026-42055 CVE-2026-42533 CVE-2026-56434 CVE-2026-60005
  - SUG: NA
  - DESC: fix CVE-2026-42055 CVE-2026-42533 CVE-2026-56434 CVE-2026-60005


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p01
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10sp1 to support loongarch64 platform,
          add patch 0001-node-v12.22.11-add-loong64-support.patch


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p02
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10-2203sp2-hpc to fix sensitive fields,
          add patch Kylin-fix-sensitive-fields-to-prevent-political-ambi.patch


author: zhangchaorui <zhangchaorui@kylinos.cn> - 1:12.22.11-5.p04
changelog:
  - Type: cves
  - ID: NA
  - SUG: NA
  - DESC: Fix CVE-2023-46809,CVE-2024-22019,CVE-2024-22025,CVE-2024-27982 and CVE-2024-27983


author: hanguanqiang <hanguanqiang@kylinos.cn> - 1:12.22.11-5.p06
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:1.fix an error in CVE-2025-23085.2.fix conflicts between help and docs packages


author: hanguanqiang <hanguanqiang@kylinos.cn> - 1:12.22.11-5.p07
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:1.fix conflicts between npm in 12.22.xx and nodejs in 12.19.0-1.0.1


author: lvfei <lvfei@kylinos.cn> - 3.54.0-8.p01
changelog:
  - Type: bugfix
  - ID: BUG#126432
  - SUG: NA
  - DESC: fix the bug Untrusted sites cannot be accessed 
  - add Patches:6001 kylinos-nss-fix-chandao-bug-126432.patch


author: songjuntao <songjuntao@kylinos.cn> - 3.54.0-8.p04
changelog:
  - Type:update
  - ID:TASK#181401
  - SUG:NA
  - DESC:add smx algorithm support and fix import pkcs12 file error


author: houzhiwei<houzhiwei@kylinos.cn>- 3.54.0-10.p07
changelog:
  - Type:update
  - ID:TASK#其它
  - SUG:NA
  - DESC: Add PK11_Pub{Wrap, Unwrap}SymkeyWithMechanism r=mt,rrelyea Summary


author: wangkai <13474090681@163.com> - 2:2022.5.17-5
changelog:
  - Fix CVE-2026-42616, CVE-2026-42617, CVE-2026-42618, CVE-2026-46569,
    CVE-2026-46570, CVE-2026-46571, CVE-2026-46572, CVE-2026-56135, CVE-2026-56136


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-7
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: wanfeng<wanfeng@kylinos.cn> - 4.2.8p14-8.p01
changelog:
  - Type:bugfix
  - ID:task#180465
  - SUG:NA
  - DESC:add script of post, make sure sntp/kod  for sntp service


author: haowenchao <haowenchao@huawei.com> - 2.1.1-8
changelog:
  - backport one patch for solving install problem, sync from branch openEuler-20.09
    which commit id is 81fd136


author: yanshuai <yanshuai01@kylinos.cn> - 2.1.1-11.p03
changelog:
  - Type:bugfix
  - ID:[TASK#337735]
  - SUG:NA
  - DESC: iscsid: stop connection for recovery if error is not timeout in iscsi_login_eh


author: chenjianhu <chenjianhu@kylinos.cn> - 3.10.0-2.p01
changelog:
  - Type:compile
  - ID:[BUG#273633]
  - SUG:NA
  - DESC:Add --enable-locks flags for aarch64 compile,no using libitm-devel


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: changtao <changtao@kylinos.cn> - 2.3.1-15.p01
changelog:
  - Type: complie
  - CVE: NA
  - SUG: NA
  - DESC:fix openjpeg2-help noarch package built differently on different architectures


author: Funda Wang <fundawang@yeah.net> - 0.20.0-15
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: WangShuo <wangshuo@kylinos.cn> - 8.2P1-16.p05
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Kylin delete configure "--with-sandbox=seccomp_filter" support loongarch64


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p09
changelog:
  - Type:update
  - ID: TASK#184873
  - SUG: NA
  - DESC: fix ssh-agent coredump when ssh-add exec add library


author: yuejiayuan <yuejiayuan@kylinos.cn> - 8.2P1-16.p10
changelog:
  - Type:update
  - ID: TASK#189950
  - SUG: NA
  - DESC: fix CVE-2023-51385
  	add backport-CVE-2023-51385-upstream-ban-user-hostnames-with-most-shell-metachar.patch


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p12
changelog:
  - Type:update
  - ID:TASK#193814
  - SUG:NA
  - DESC:support sm3 hmac feature, update ssh change mode script and 
         and fix memory leak


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p16
changelog:
  - Type: bugfix
  - ID:[BUG#294265]
  - SUG:NA
  - DESC:fix login error after use the qingyun special config


author: liuming <liuming@kylinos.cn> - 8.2P1-16.p21
changelog:
  - Type: update
  - ID: TASK#554963
  - SUG: NA
  - DESC: backport feature of ChannelTimeout/UnusedConnectionTimeout


author: liuming <liuming@kylinos.cn> - 8.2P1-16.p22
changelog:
  - Type: update
  - ID: TASK#567487;BUG#247641;BUG#345532
  - SUG: NA
  - DESC: remove abandoned configs: RSAAuthentication/RhostsRSAAuthentication;
          rm sha1 in MACs and KexAlgorithms, and mv etm to MACs head


author: jiaocong <jiaocong@kylinos.cn> - 8.2P1-16.p25
changelog:
  - Type: update
  - ID: TASK#608701
  - SUG: NA
  - DESC: add comment for strict scp check option in sshd_config


author: liuming <liuming@kylinos.cn> - 8.2P1-16.p27
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388
  - SUG:NA
  - DESC:Fix CVE-2026-35414 CVE-2026-3497 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: liuming <liuming@kylinos.cn> - 8.2P1-16.p29
changelog:
  - Type:CVE
  - CVE:CVE-2026-59995 CVE-2026-59997 CVE-2026-59998 CVE-2026-59999 CVE-2026-60000 CVE-2026-60001
  - SUG:NA
  - DESC:fix CVE-2026-59995 CVE-2026-59997 CVE-2026-59998 CVE-2026-59999 CVE-2026-60000 CVE-2026-60001


author: wangshuo <wangshuo@kylinos.cn> - 1:1.1.1f-15.p04
changelog:
  - Type: update
  - ID: [TASK#78310]
  - SUG: NA
  - DESC: Add Patch85, Kylin add openssl loongarch64 support
  -       Modify spec, Kylin modify configure command for build on loongarch64


author: Xu Xiangyu <xuxiangyu@hygon.cn> - 1:1.1.1f-15.p05
changelog:
  - Type: update
  - ID: [Task#84503]
  - SUG: NA
  - DSEC: add hygoncpp engine and speed test for openssl support hygon cipher coprocessor hardware


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1f-15.p06
changelog:
  - Type:cves
  - ID:CVE-2022-2097, CVE-2022-2068, CVE-2022-1292
  - SUG:NA
  - DESC:Fix CVE-2022-2097, CVE-2022-2068 and CVE-2022-1292


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1f-15.p07
changelog:
  - Type:cves
  - ID:CVE-2022-4450, CVE-2022-4304, CVE-2023-0215, CVE-2023-0286
  - SUG:NA
  - DESC:Fix CVE-2022-4450, CVE-2022-4304, CVE-2023-0215 and CVE-2023-0286


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p09
changelog:
  - Type:cves
  - ID:CVE-2023-0464, CVE-2023-0465, CVE-2023-0466
  - SUG:NA
  - DESC: Fix CVE-2023-0464, CVE-2023-0465 and CVE-2023-0466


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1f-15.p12
changelog:
  - Type: update
  - ID: [TASK#167670]
  - SUG: NA
  - DSEC: add Patch108, add TLCP support
  -       add Patch109, add GDCA gm cert verification support
  -       add Patch110, add sm2 encryptedkey(password) support
  -       add Patch111, bugfix null-pointer in ec_pmeth
  -       add Patch112, add comment for ec_pkey_meth
  -       add Patch113, update certs for TLCP testcases
  -       add Patch114, set TLCP interface version


author: bianxiuning <bianxiuning@kylinos.cn> - 1:1.1.1f-15.p14
changelog:
  - Type: update
  - ID: [TASK#172146]
  - SUG: NA
  - DESC: add Patch117, add zhao-xin gmi suport for sm3 sm4 and random


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p21
changelog:
  - Type: update
  - ID: TASK#193265
  - SUG: NA
  - DESC: port sm2utl command tool code , support default user id, 
  	and optimize the return code, optimize dgst keyform for PEM,
  	support pkeyutl verify function for sm2 cert.


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1f-15.p22
changelog:
  - Type: update
  - ID: TASK#198465
  - SUG: NA
  - DESC: Fix CVE-2024-0727 PKCS12 Decoding crashes
  	add backport-CVE-2024-0727-fix-pkcs12-decoding-crashes.patch


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p31
changelog:
  - Type:update
  - ID:TASK#560665
  - SUG:NA
  - DESC:solve some issues regarding the tlcp protocol, tls, and the use
         of national encryption suites under kylin server V10 and V11 systems


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p32
changelog:
  - Type:update
  - ID:TASK#593863
  - SUG:NA
  - DESC:fix CVE-2025-68160、CVE-2026-22796、CVE-2026-22795、
             CVE-2025-69418、CVE-2025-69421、CVE-2025-69419、
             CVE-2025-69420


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p33
changelog:
  - Type:update
  - ID:TASK#616231
  - SUG:NA
  - DESC:fix CVE-2026-28390,CVE-2026-28389,CVE-2026-28388,CVE-2026-28387


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p34
changelog:
  - Type:update
  - ID:TASK#640713
  - SUG:NA
  - DESC:fix CVE-2026-7383,CVE-2026-9076,CVE-2026-34180,CVE-2026-42766,
             CVE-2026-45447


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p01
changelog:
  - Add patch:Paho-c-add-kylin-env-port-bind.patch 
  - TASK#65925 子 KMS2.2需求实现 / 解决MQTT支持的依赖
  - 本次更新将mqtt本地连接绑定环境变量KY_KMS_PORT的值 之前为随机的端口


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p02
changelog:
  - Add patch:Paho-c-add-kylin-port-reuse.patch 
  - TASK#66261 子 KMS2.2需求实现 / 解决paho-c 重复端口的使用
  - 本次更新支持多个进程或者线程绑定到同一端口，提高服务器程序的性能


author: mengchaoming <mengchaoming@kylinos.com> - 1.4.0-8.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:sync from sp2 patch: 0001-pam-13.1-8-loacal-chinese.patch;
  - DESC:resolve "Account temporarily locked due to %d failed logins" chinese local


  - Type:bugfix
  - ID:38353
  - SUG:sync from sp2 patch:0001-fix-chandao-bug-38353.patch
  - DESC:NA

  - Type:bugfix
  - ID:26337
  - SUG:sync from sp2 patch:Linux-PAM-1.4.0-kylin-fix-bug26337.patch
  - DESC:NA

  - Type:bugfix
  - ID:19898
  - SUG:modify spec
  - DESC:Modify system-auth.pamd to add 'use_first_pass'


author: wanghao <wanghao2@kylinos.com> - 1.4.0-8.p03.se.01
changelog:
  - Type:update
  - ID:[Task#80734]
  - SUG:NA
  - DESC: 添加登录检查相同UID的功能
  -         add patch: pam-login-check-same-uid.patch


author: xieyuxing <xieyuxing@kylinos.com> - 1.4.0-8.p02
changelog:
  - Type:bugfix
  - ID:121657
  - SUG:NA
  - DESC:add patch KYLIN-add-sm3-hash-function-for-passwd-cmd.patch


author: wanghao <wanghao2@kylinos.com> - 1.4.0-8.p03.se.02
changelog:
  - Type: bugfix
  - ID:[BUG#136126]
  - SUG:NA
  - DESC: 对于相同的uid的两个账户，允许uid和username匹配的账户登录
  -       add patch: pam-fix-right-uid-not-login-bug.patch


author: zhangzhou<zhangzhou@kylinos.cn> - 1.4.0-8.p03.se.03
changelog:
  - Type:update
  - ID:[Task#133684]
  - SUG:NA
  - DESC: 提供状态检查接口
          add patch:pam-get-chkuid-state.patch


author: anyunhao<anyunhao@kylinos.cn> - 1.4.0-8.p04.se05
changelog:
  - Type:update
  - ID:[Bug#189847]
  - SUG:NA
  - DESC: add patch: 0001-Kylin-fix-bug163994-and-bug26337.patch


author: hanzhengyun <hanzhengyun@kylinos.cn> - 1.4.0-8.p04.se06
changelog:
  - Type:update
  - ID:[Bug#203691]
  - SUG:NA
  - DESC: 使用开源sm3算法
          delete patch: KYLIN-add-sm3-hash-function-for-passwd-cmd.patch


author: liyue <liyue01@kylinos.cn> - 1.4.0-8.p05.se06
changelog:
  - Type:update
  - ID:[Task#185449]
  - SUG:NA
  - DESC:   add patch: pam-1.4.0-kylin-modify-zh-HK-po.patch


author: xuchenchen <xuchenchen@kylinos.cn> - 4.1.3-13.p07
changelog:
  - Type: Bugfix
  - ID: [TASK#161277]
  - SUG: NA
  - DESC:
  - 修复解析IPI0字段异常引起的coredump问题
  - add 0001-fix-analysis-proc-interrupts-name-error.patch


author: liudy <liudingyao@kylinos.cn> - 1:3.04-7.p01
changelog:
  - Add 'export PERL_CANARY_STABILITY_NOPROMPT=1' before perl Makefile.PL
  - Skip the Canary::Stability COMPATIBILITY AND SUPPORT CHECK prompt


author: wanghao<wanghao2@kylinos.cn> - 4:5.28.3-7.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 加入kysec执行控制检查
  -         add patch: perl-5.28.3-add-kysec-exectl-check.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 4:5.28.3-7.se.01.p04
changelog:
  - Type:bugfix
  - ID:Bug#190774
  - SUG:NA
  - DESC:fix-perl-libs-re.so-undefined-symbol-error
  - Synchronize with Loongarch64 version, Skip 5.28.3-7.se.01.p03 version


author: Funda Wang <fundawang@yeah.net> - 7.2.34-3
changelog:
  - Fix php BUG#81740 / CVE-2022-31631
  - Fix php BUG#81744 / CVE-2022-0567
  - Fix php BUG#81746 / CVE-2022-0568
  - Fix CVE-2023-0662
  - Fix CVE-2023-3247
  - Fix CVE-2023-3823
  - Fix CVE-2023-3824


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p03
changelog:
  - Type:cves
  - ID:CVE-2024-8925、CVE-2024-8926、CVE-2024-8927、CVE-2024-9026
  - SUG:NA
  - DESC:fix CVE-2024-8925, CVE-2024-8926, CVE-2024-8927, CVE-2024-9026


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p05
changelog:
  - Type:cves
  - ID:CVE-2024-2756,CVE-2024-3096,CVE-2024-5458
  - SUG:NA
  - DESC:fix CVE-2024-2756,CVE-2024-3096,CVE-2024-5458


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p07
changelog:
  - Type:cves
  - ID:CVE-2024-8929,CVE-2024-8932,CVE-2024-11236,CVE-2024-11234,CVE-2024-11233
  - SUG:NA
  - DESC:fix CVE-2024-8929,CVE-2024-8932,CVE-2024-11236,CVE-2024-11234,CVE-2024-11233


author: Funda Wang <fundawang@yeah.net> - 8.0.30-7
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233


author: gaoyukun <gaoyukun@kylinos.cn> - 8.0.30-10.p02
changelog:
  - Type:rebuild
  - ID:[BUG#338391]
  - SUG:NA
  - Desc: 1.Add --without-pcre-jit to resolve loongarch compilation failure
          2.Replace BuildRequires: postgresql-devel with postgresql-private-devel to make postgresql info contains libpq-fe.h


author: Funda Wang <fundawang@yeah.net> - 8.0.30-11
changelog:
  - Fix Null byte termination in dns_get_record()
    GHSA-www2-q4fc-65wf
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - Fix Information Leak of Memory in getimagesize
    CVE-2025-14177


author: Funda Wang <fundawang@yeah.net> - 8.0.30-12
changelog:
  - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
    CVE-2026-7259
  - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
    CVE-2026-6722
  - Fix Broken Apache map value NULL check
    CVE-2026-7262
  - Fix Signed integer overflow of char array offset
    CVE-2026-7568


author: Funda Wang <fundawang@yeah.net> - 8.0.30-13
changelog:
  - Fix XSS within status endpoint
    CVE-2026-6735
  - Fix SQL injection via NUL bytes in quoted strings
    CVE-2025-14179
  - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
    CVE-2026-7261
  - Fix Consistently pass unsigned char to ctype.h functions
    CVE-2026-7258


author: lipengyu <lipengyu@kylinos.cn> - 8.0.30-13.p01
changelog:
  - Type:update
  - ID:[BUG#613853]
  - SUG:NA
  - Desc: 1.Add --without-pcre-jit to resolve loongarch compilation failure
          2.Replace BuildRequires: postgresql-devel with postgresql-private-devel to make postgresql info contains libpq-fe.h


author: Funda Wang <fundawang@yeah.net> - 8.0.30-14
changelog:
  - fix CVE-2026-14355: Memory corruption (zend_mm_heap corrupted) in
    openssl_encrypt with AES-WRAP-PAD


author: songliyang <songliyang@kylinos.cn> - 8.0.30-15.p01
changelog:
  - Type: update
  - ID:   [BUG#679579]
  - SUG:  NA
  - Desc: 1.Backport BuildRequires postgresql to resolve build errors
          2.Backport configure --without-pcre-jit to support loongarch64


author: xuhe <xuhe@kylinos.cn> - 0.9.5-2.p01
changelog:
  - Rebuild for Kylin
  - Migrates patch from v10sp2 to v10sp3 to fix default theme on FT-1500A platform


author: duyiwei <duyiwei@kylinos.cn> - 1:0.10.1-10
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC:  fix CVE in batches through rebuild


author: zhangbowei<zhangbowei@kylinos.cn> - 1:0.10.1-10.p03
changelog:
  - Type:bugfix
  - ID:[Bug#374071]
  - SUG:NA
  - DESC:change exec path from /usr/bin to /usr/local/bin about podman-docker,change man file from docker to podman


author: weiyucheng<weiyucheng@kylinos.cn> - 1:0.10.1-10.p05
changelog:
  - Type:CVE
  - CVE: CVE-2025-58058
  - SUG:NA
  - DESC:fix CVE-2025-58058 and add containers-common version limit


author: songliyang <songlyang@kylinos.cn> - 0.116-12.p01
changelog:
  - Type: update
  - ID:   [TASK#612227]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2026-4897
          2.Backport Patch100: polkit-0.116-backport-Fix-two-minor-memory-leaks.patch. Author: mengchaoming
          3.Revert port polkit to mozjs78, use mozjs60 on v10 sp1


author: songliyang <songlyang@kylinos.cn> - 0.116-12.p02
changelog:
  - Type: update
  - ID:   [TASK#612227]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2026-4897
          2.Backport Patch100: polkit-0.116-backport-Fix-two-minor-memory-leaks.patch. Author: mengchaoming
          3.Use p02 on v10 sp3, because p01 is used by v10 sp1


author: Like <like@kylinos.cn> - 0.67.0-8.p01
changelog:
  - Type:CVE
  - Id:CVE-2022-37050,CVE-2022-37051
  - SUG:NA
  - DESC:add backport-CVE-2022-37051-CVE-2022-37050.patch


author: HouHongxun <houhongxun@kylinos.cn> - 0.67.0-8.p02
changelog:
  - Type:cves
  - ID:CVE-2020-23804 CVE-2022-27337 CVE-2022-37052 CVE-2022-38349
  - SUG:NA
  - DESC:fix CVE-2020-23804 CVE-2022-27337 CVE-2022-37052 CVE-2022-38349


author: lichenguang <lichenguang@kylinos.cn> - 0.67.0-8.p03
changelog:
  - Type: cves
  - ID: CVE-2025-32364 CVE-2025-32365 CVE-2024-4141
  - SUG: NA
  - DESC: fix CVE-2025-32364 CVE-2025-32365 CVE-2024-4141


author: huayadong <huayadong@kylinos.cn> - 0.67.0-8.p04
changelog:
  - Type: cves
  - ID: [Task#460978]
  - SUG: NA
  - DESC: add Patch10008: poppler-0.67.0-kylin-backport-CVE-2024-6239.patch


author: lilu <lilu@kylinos.cn> - 10.5-22.p03
changelog:
  - Type: cves/bugfix
  - ID: [task#494175]
  - SUG: NA
  - DESC: fix CVE-2023-39417 and move libpq.so* to avoid file conflict with libpq package


author: lilu <lilu@kylinos.cn> - 10.5-22.p06
changelog:
  - Type: cves
  - ID: [TASK#599479]
  - SUG: NA
  - DESC: fix CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 and CVE-2026-2006


author: gaihuiying <eaglegai@163.com> - 2.4.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 1.3.8b-2.p01
changelog:
  - Type:cves
  - ID:CVE-2024-48651、CVE-2024-57392
  - SUG:NA
  - DESC:fix CVE-2024-48651、CVE-2024-57392,and solve the loongarch compilation issue


author: lijian2 <lijian2@kylinos.cn> - 3.12.3-14.p02
changelog:
  - Type:cves
  - ID:CVE-2025-4565
  - SUG:NA
  - DESC: 1.fix CVE-2025-4565
          2.Add obsoletes items to fix install conflict error


author: songliyang <songliyang@kylinos.cn> - 3.12.3-14.p03
changelog:
  - Type:bugfix
  - ID:TASK#487853
  - SUG:NA
  - DESC:Completely obsoletes protobuf2* to fix install conflict error


author: gongxingliang <gongxingliang@kylinos.cn> - 3.6.0-2.p02
changelog:
  - Type: compile
  - ID: NA 
  - SUG: NA
  - DESC: fix build error due to hdf5 upgrade(patch1 patch2 patch3)


author: shixuantong <shixuantong@huawei.com> - 4.5.2-6
changelog:
  - Cleaner: cover some more cases where scripts could sneak through in specially crafted style content.


author: wangkai <13474090681@163.com> - 9.0.1-5
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.04
changelog:
  - Type: update
  - ID:[Task#84294]
  - SUG:NA
  - DESC: 修复python2加-c或者-m参数时kysec无法管控的问题
  -         add patch: python2-fix-parameter-c-or-m-kysec-exectl.patch


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.05.p01
changelog:
  - Type: bugfix
  - ID:[BUG#162241]
  - SUG:NA
  - DESC: -c命令行参数加入exectl状态检查
  -         add patch: python2-parameter-c-add-exectl-status-check.patch


author: wanghao<wanghao2@kylinos.cn> - 3.7.9-18.se.01
changelog:
  - Type:bugfix
  - ID:[BUG#104619]
  - SUG:NA
  - DESC: python3添加kysec检查
  -         add patch: Python3-judge-python-file-run.patch


author: wanghao<wanghao2@kylinos.cn> - 3.7.9-18.se.03
changelog:
  - Type: update
  - ID:[Task#84294]
  - SUG:NA
  - DESC: 修复python3加-c或者-m参数时kysec无法管控的问题
  -         add patch: python3-fix-parameter-c-or-m-kysec-exectl.patch


author: xiaozai<xiaozai@kylinos.cn> - 3.7.9-18.se.04.p01
changelog:
  - Type:CVE
  - CVE:CVE-2020-10735 CVE-2022-37454, CV-2022-45061
  - SUG:NA
  - DESC:fix CVE-2020-10735 CVE-2022-37454, CV-2022-45061


author: wanghao<wanghao2@kylinos.cn> - 3.7.9-18.se.05.p01
changelog:
  - Type: bugfix
  - ID:[BUG#162241]
  - SUG:NA
  - DESC: -c命令行参数加入exectl状态检查
  -         add patch: python3-parameter-c-add-exectl-status-check.patch


author: GuoCe <guoce@kylinos.cn> - 3.7.9-18.se.05.p04
changelog:
  - Type:CVE
  - ID:[TASK#165452]
  - SUG:NA
  - DESC:fix CVE-2021-4189,CVE-2022-0391
         support loongarch64


author: GuoCe <guoce@kylinos.cn> - 3.7.9-37
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Modify the spec file to synchronize the version information of
         CHANGLOG and VERSION.


author: GuoCe <guoce@kylinos.cn> - 3.7.9-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: add loongarch64 support and disable valgrind-devel for loongarch64


author: GuoCe <guoce@kylinos.cn> - 3.7.9-39.se.01
changelog:
  - Type: bugfix
  - ID: [BUG#193772]
  - SUG: NA
  - DESC: From: @wanghao
          移植kysec执行控制检查补丁
          add patch: python3-7.9-add-kysec-exectl-check.patch


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-40.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2007-4559
  - SUG:NA
  - DESC:Add Patch9007-9008, fix CVE-2007-4559
  -      Add Patch9009, fix test_xml_etree error with expat versions that fix CVE-2023-52425


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-41.se.01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patches
  -      gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler
  -      gh-99889: Fix directory traversal security flaw in uu.decode()


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-43.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
  -      gh-124651: Quote template strings in `venv` activation scripts


author: lipengyu <lipengyu@kylinos.cn> - 3.7.9-44.se.01.p02
changelog:
  - Type:CVE
  - ID:CVE-2025-4517 CVE-2025-4138 CVE-2024-12718
       CVE-2025-4330 CVE-2025-4435
  - SUG:NA
  - DESC:fix CVE-2025-4517 CVE-2025-4138 CVE-2024-12718
         CVE-2025-4330 CVE-2025-4435


author: lipengyu <lipengyu@kylinos.cn> - 3.7.9-44.se.01.p04
changelog:
  - Type:CVE
  - ID:CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084
  - SUG:NA
  - DESC:fix CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084


author: lipengyu <lipengyu@kylinos.cn> - 3.7.9-44.se.01.p07
changelog:
  - Type:CVE
  - ID:CVE-2025-11468 CVE-2026-0864 CVE-2026-11972 CVE-2026-1299  
       CVE-2026-4224 CVE-2026-4519 CVE-2026-4786  CVE-2026-8328
  - DESC:fix CVE-2025-11468 CVE-2026-0864 CVE-2026-11972 
             CVE-2026-1299  CVE-2026-4224 CVE-2026-4519
             CVE-2026-4786  CVE-2026-8328


author: lizhanchun <lizhanchun@kylinos.cn> -2:4.1.0-63.p12
changelog:
  - Type:bug
  - ID:[BUG#135672]
  - SUG:NA
  - DESC: Boot guest with multiple e1000 devices, qemu will crash after several guest reboots: kvm_mem_ioeventfd_add: error adding ioeventfd: No space left on device (28)


author: lizhanchun <lizhanchun@kylinos.cn> -2:4.1.0-63.p13
changelog:
  - Type:	bug
  - ID:	[BUG#143805]
  - SUG:	NA
  - DESC: Bugfix. When the virtual machine is restarted repeatedly, it may cause qemu-kvm crash.


author: weishaokun <weishaokun@kylinos.cn> -2:4.1.0-63.p14
changelog:
  - Type:bug
  - ID:[BUG#132317]
  - SUG:NA
  - DESC:Fix the bug use virtio-gpu can not start vm with error 'egl-headless is not available'


author: xiaoyuliang <xiaoyuliang@kylinos.cn> -2:4.1.0-63.p16
changelog:
  - Type:Update
  - ID:[TASK#116597]
  - SUG:NA
  - DESC:to fix CVE-2021-3507 CVE-2021-20257 CVE-2020-13253 CVE-2021-3607 CVE-2021-3608, add openeuler qemu-4.1.0-70 version patches.
  - softmmu: Always initialize xlat in address_space_translate_for_iotlb (CVE-2022-35414)
  - hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-63.p17
changelog:
  - Type: Update
  - ID:   [TASK#132801]
  - SUG:  NA
  - DESC: fix CVE-2022-0216 CVE-2022-4144
  -       add Patch: 0001-Revert-qxl-add-migration-blocker-to-avoid-pre-save-a.patch
          to fix CVE-2022-4144 build error from GitLab commit dcc5fc2a3adb9ec4b196f82ebe4079bc88f3c91e


author: wangdi <wangdi@kylinos.cn> - 2:4.1.0-63.p18
changelog:
  - Type: bug
  - ID:   [TASK#132773]
  - SUG:  NA
  - DESC: Fix qemu-nbd child daemon connection process wont close stderr file


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-63.p19
changelog:
  - Type: cve
  - ID:   CVE-2022-1050
  - SUG:  NA
  - DESC:	hw/pvrdma: Protect against buggy or malicious guest driver (CVE-2022-1050)


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-63.p23
changelog:
  - Type: Update
  - ID: [TASK#166472]
  - SUG: NA
  - DESC: to fix CVE-2023-0664 and CVE-2023-2861
  -       qga/win32: Use rundll for VSS installation(CVE-2023-0664)
  -       qga/win32: Remove change action from MSI installer(CVE-2023-0664)
  -       9pfs: prevent opening special files (CVE-2023-2861)


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-63.p25
changelog:
  - Type: Update
  - ID: [TASK#174977]
  - SUG: NA
  - DESC: to fix CVE-2023-3354 CVE-2020-24165 CVE-2020-13791
  - accel/tcg: fix race in cpu_exec_step_atomic (CVE-2020-24165)
  - pci: assert configuration access is within bounds(CVE-2020-13791)
  - io: remove io watch if TLS channel is closed during handshake(CVE-2023-3354)


author: wangdi <wangdi@kylinos.cn> - 2:4.1.0-63.p27
changelog:
  - Type: Update
  - ID: [TASK#180246]
  - SUG: NA
  - DESC: 
  - Apply patches to fix CVE-2022-3872
  - Disable virtfs to fix CVE-2023-1386


author: lizhanchun <lizhanchun@kylinos.cn> - 2:4.1.0-63.p29
changelog:
  - Type: Update
  - ID: [TASK#180246]
  - SUG: NA
  - DESC: fix CVE-2022-36648 CVE-2018-18438 CVE-2023-0330
  - Disable (deprecated upstream) pvrdma to fix CVE-2023-1544


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-63.p30
changelog:
  - Type: Bug
  - ID: [BUG#206215]
  - SUG: NA
  - DESC: target/arm: fix typo in cpu.h ID_AA64PFR1 field name
  - 	change "sbss" to "ssbs" to fix this error.
  -	enable virtfs, undo the CVE-2023-1544


author: lijunwei <lijunwei@kylinos.cn> - 2:4.1.0-63.p30.s5kb01
changelog:
  - Type: update
  - ID:   [BUG#206061]
  - SUG:  NA
  - DESC: Merge Phytium' Patch to support S5000c host-model


author: lijunwei <lijunwei@kylinos.cn> - 2:4.1.0-63.p30.s5kb04
changelog:
  - Type: Update
  - ID:   [TASK#219131]
  - SUG:  NA
  - DESC: fix CVE-2023-0330 CVE-2024-3446 CVE-2024-3447


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-63.p30.s5kb05
changelog:
  - Type: Update
  - ID:   [TASK#352309]
  - SUG:  NA
  - DESC: fix CVE-2024-4467 CVE-2024-7409 CVE-2023-5088


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-6330.s5kb10
changelog:
  - Type: cves
  - ID:   CVE-2025-11234
  - SUG:  NA
  - DESC: Fix CVE-2025-11234 io:release active GSource in TLS channel finalizer


author: malike <malike@kylinos.cn> - 2:4.1.0-63.p30.s5kb11
changelog:
  - Type: Update
  - ID:   [TASK#642435]
  - SUG:  NA
  - DESC: drop dirty rect update to fix memory allocation error


author: malike <malike@kylinos.cn> - 2:4.1.0-63.p30.s5kb14
changelog:
  - Type: cves
  - ID:   CVE-2026-48914
  - SUG:  NA
  - DESC: Fix CVE-2026-48914 heap buffer overflow in virtio-blk scsi request handling


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-63.p30.s5kb15
changelog:
  - Type: cves
  - ID:   CVE-2026-5763
  - SUG:  NA
  - DESC: Fix CVE-2026-5763
          virtio-scsi: pass the same cdb_size to virtio_scsi_pop_req and virtio_scsi_handle_cmd_req_prepare


author: malike <malike@kylinos.cn> - 2:4.1.0-63.p30.s5kb16
changelog:
  - Type: cves
  - ID:   CVE-2026-48003
  - SUG:  NA
  - DESC: ui/vnc: fix OOB read updating VNC update frequency stats(CVE-2026-48003)


author: liwenchong <liwenchong@kylinos.cn> - 1.39.0-1.p02
changelog:
  - Type:bugfix
  - ID:BUG#131966
  - SUG:NA
  - DESC:fix bug#131966 rebuild in tag v10-sp2-updates
  - for qpid-cpp-client depend libboost_program_options.so.1.73.0


author: liwenchong <liwenchong@kylinos.cn> - 4.9.2-4.p02
changelog:
  - Type:bugfix
  - ID:BUG#131963
  - SUG:NA
  - DESC:fix bug#131963 rebuild in tag v10-sp3;
  -      add llvm version differentit for make error.


author: wangqiang <wangqiang1@kylinos.cn> - 4.9.2-4.p03
changelog:
  -Type:UPDATE
  -ID:NA
  -SUG:NA
  -DESC:Rebuild for clang base library change, add patch5 fix ld error on clang-10


author: xiehongyu <xiehongyu@kylinos.cn> - 1:4.8.7-47.p05
changelog:
  - Type:cves
  - ID:CVE-2020-0570 CVE-2020-17507
  - SUG:restart
  - DESC: fix CVE-2020-0570 CVE-2020-17507


author: wanglixing <wanglixing@kylinos.cn> - 1:4.8.7-47.p08
changelog:
  - Type:cves
  - ID:CVE-2023-34410,CVE-2023-38197,CVE-2023-37369,CVE-2023-43114
  - SUG:NA
  - DESC:add patch6016,patch6017,patch6018,patch6019.skip the release p07 due to an occupation


author: zhangxiaolu <zhangxiaolu@kylinos.cn> - 6.2.7-1.p01
changelog:
  - Type:cves
  - Id:CVE-2022-36021 CVE-2022-24834 CVE-2023-28856
  - SUG:NA
  - DESC:回合低版本补丁CVE-2022-36021 CVE-2022-24834 CVE-2023-28856 and fix-building-error-of-malloc.patch
     Fix redis.spec and redis.service


author: gaoyukun <gaoyukun@kylinos.cn> - 6.2.7-1.p03
changelog:
  - Type:cves
  - Id:CVE-2023-45145,CVE-2024-31228,CVE-2024-31449
  - SUG:NA
  - DESC:Fix CVE-2023-45145,CVE-2024-31228 and CVE-2024-31449


author: lifeifei <lifeifei@kylinos.cn>
changelog:
  - Type:update
  - ID:[Task#494581]
  - SUG:NA
  - DESC:1.Update to 7.2.10: Fix CVE-2025-32023 CVE-2025-48367.
         2.Obsoletes: redis-devel and redis-doc: Resolve redis yum update upgrade issues.


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.11-1.p01
changelog:
  - Type:update
  - ID:[Task#540289]
  - SUG:NA
  - DESC:Obsoletes: redis-devel and redis-doc: Resolve redis yum update upgrade issues.


author: Shi Jingying <shijingying@kylinos.cn> - 4.15.1-37.p01
changelog:
  - Type:bugfix
  - ID:[TASK#118520]
  - SUG:NA
  - DESC: Remove rpm daily scheduled tasks,and add loongarch support


author: zhangzhou <zhangzhou@kylinos.cn> - 4.15.1-37.p01.se.01
changelog:
  - Type:bugfix
  - ID:[BUG#164925]
  - SUG:NA
  - DESC: 保持rpm安装文件原安全标记
  -       add patch rpm-remainoldtag-kysec.patch


author: wanfeng <wanfeng@kylinos.cn> - 4.15.1-37.p02.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#118520]
  - SUG:NA
  - DESC: Fix install of block and character FIFO special files
  -       add patches backport-Fix-install-of-block-and-character-special-files-219.patch
  -                   backport-Use-fd-based-ops-for-metadata-in-FA_TOUCH-mode-too-w.patch
  -                   backport-Add-a-test-for-special-device-node-installation.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 4.15.1-37.p02.se.03
changelog:
  - Type:update
  - ID:[TASK#187240]
  - SUG:NA
  - DESC: 【4.19】xtb需求合入 / 应用安装控制
  - 		add patches:rpm-add-install-pkg-bw.patch


author: shixuantong <shixuantong@huawei.com> - 2.5.8-114
changelog:
  - Type:cves
  - ID:CVE-2021-31799 CVE-2021-31810 CVE-2021-32066
  - SUG:NA
  - DESC:fix CVE-2021-31799 CVE-2021-31810 CVE-2021-32066


author: chenjianhu <chenjianhu@kylinos.cn> - 2.5.8-136.p01
changelog:
  - Type:compile
  - ID:[Task#564099]
  - SUG:NA
  - DESC:add requires elfutils-extra and add CVE-2025-58767 test case


author: lijian1<lijian1@kylinos.cn> - 1.51.0-6.p01
changelog:
  - Type: cves
  - ID: [TASK#393895]
  - SUG:  NA
  - DESC:  Fix CVE-2024-24577, CVE-2022-36113, CVE-2022-36114, fix kernel copy panic.


author: xinghe <xinghe2@h-partners.com> - 4.11.12-31
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: changtao <changtao@kylinos.cn> - 4.11.12-32.p03
changelog:
  - Type:bugfix
  - ID:[BUG#220458]
  - CVE:NA
  - SUG:NA
  - DESC:fix require satisfied libldb version for samba-client


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 4.11.12-32.p08
changelog:
  - Type:bugfix
  - ID:[BUG#550911]
  - SUG:NA
  - DESC:Fix duplicate SMB file_ids leading to client cache poisoning


author: yueyuankun <yueyuankun@kylinos.cn> - 1.0.28-11.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:Cancel the noarch attribute of "sane backends help" package


author: shenyangyang <shenyangyang4@huawei.com> - 1:4.6.2-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add build requires of texinfo to solve the problem of build


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.08
changelog:
  - Type:update
  - ID:[TASK#100149]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0721）
  -   修正上一个版本遗留的bug,包括密码期限还原失效，gsetting加固未生效，其权限用户无法操作模板等bug
  -       添加补丁security-reinforce-update-20220721.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.09
changelog:
  - Type:update
  - ID:[TASK#99843][Bug#134347][Bug#134228][Bug#130320][Bug#119204][Bug#132763]
  - SUG:NA
  - DESC: 安全加固命令行功能优化
  -       修复security-reinforce 帮助手册与实际不符的问题
  -       修复还原操作，界面与命令行上次操作结果内容不一致的问题
  -       修复单字母用户名的用户不适用口令更改最小间隔天数策略的问题
  -       修复加固后的完成加固项数与还原后的上次加固项数不一致的问题
  -       修复选择模板后返回时提示无效的选项请重新选择的问题
  -       添加补丁security-reinforce-update-20220811.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.10
changelog:
  - Type:update
  - ID:[TASK#105459][Bug#135048][Bug#134148][Bug#133979][Bug#135646][Bug#129410]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0818）
  -       【安全加固】【终端命令】default模式root用户只能扫描无法加固
  -       【安全加固】【终端命令】三级项范围与全部项一样
  -       【安全加固】【终端命令】扫描过程中是用快捷键ctrl+d，扫描继续且异常
  -       【安全加固】【系统设置】将grub.cfg中的系统引导管理器密码注释掉，安全加固未扫描出待加固项
  -       【安全加固】【系统设置】安全加固后系统ctrl+alt+del组合键未禁用
  -       添加补丁security-reinforce-update-20220818.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.11
changelog:
  - Type:update
  - ID:[TASK#108128][Bug#136311][Bug#136809][Bug#135646][Bug#136207]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji（0907）
  -       调整阻止root通过telnet登录的加固方法
  -       【安全加固】【终端命令】多个用户开启终端命令，其中一个进行扫描\加固\还原时，其他用户终端会同步输出
  -       【安全加固】【终端命令】命令行选择模板后无提示信息并且模板菜单连续出现两次
  -       【系统设置】将grub.cfg中的系统引导管理器密码注释掉，安全加固未扫描出待加固项
  -       调试 strict模式下，cvs服务未禁用加固项加固失败
  -       修改vsftp禁止root登录的加固方法，将配置文件/etc/ftpusers修改为/etc/vsftpd/ftpuser
  -       将用到vector的类在每次扫描前进行情况操作，放置获取的是之前扫描的数据
  -       修复日志文件非全局可写加固测试，日志文件权限都为600时依旧需要加固的bug
  -       psacct判断服务修改与grub判断修改 
  -       安全加固sp1\sp2\sp3同源改造
  -       添加补丁security-reinforce-update-20220906.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.12
changelog:
  - Type:update
  - ID:[Bug#122949][Bug#129235]
  - SUG:NA
  - DESC:
  -     【安全加固】【密码强度】密码复杂度策略检测--加固后需要四种字符类型可以修改成功
  -     【安全加固】【密码强度】密码复杂度策略安全加固后未恢复最佳策略
  -      同步主机加固安全bug，将硬盘所有分区修改为根分区使用率的扫描
  -      同步主机加固安全bug，修复最小口令长度加固无效bug
  -      同步修复v10问题
  -      添加补丁security-reinforce-update-20221009.patch


author: zhaoyun <zhaoyun@kylinos.cn> 1.0.0-se.13
changelog:
  - Type:update
  - ID:[TASK#119587][Bug#146522][Bug#146702]
  - SUG:NA
  - DESC:去掉安全加固子项-应用联网控制
  -     【安全加固】环境进行过多次安全加固，切换成普通用户，无法进行安全加固
  -     【安全加固】【系统审计】检查是否记录用户对设备的操作加固报告显示异常
  -      添加补丁security-reinforce-update-20221103.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.14
changelog:
  - Type:update
  - ID:[TASK#124465][Bug#150309][Bug#150305][Bug#141728][Bug#146729][Bug#144179][Bug#158573]
  - SUG:NA
  - DESC: 安全加固优化包入库（238和239）
  -     【安全加固】应用防护控制功能加固项，加固状态显示异常
  -     【安全加固】【系统安全】关闭ppro，一键加固后，显示应用防护控制功能开启
  -     【安全加固】一键加固后未重启系统，即刻进行一键还原，界面提示语错误
  -     【安全加固】【系统设置】定时自动屏幕锁定加固失败 
  -     【安全加固】【系统设置】strict模式和custom模式系统ctrl+alt+del组合键禁用，加固失败
  -     【uid唯一性检验】安全加固项中没有“uid唯一性检验”项
  -      完善vsftpd的禁用root加固项扫描方法，修复禁用不必要别名加固重启还原不生效的问题
  -      同步修复南瑞继保问题
  -      添加补丁security-reinforce-update-20230223.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.15
changelog:
  - Type:update
  - ID:[Bug#160433]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji
  -      【sp3】【uid唯一性检验】多个普通用户uid相同，加固后未禁用
  -       在需要开启三员的场景下，需要先升级至selinux-policy-3.14.2-76.se.20.ky10.noarch版本
  -       添加补丁security-reinforce-update-20230303.patch


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.16
changelog:
  - Type:update
  - ID:[Bug#162226]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji
  -       [uid控制]多个用户uid相同，加固后登录提示信息不一致
  -       添加补丁security-reinforce-update-20230328.patch
  -       在需要开启三员的场景下，需要先升级至selinux-policy-3.14.2-76.se.20.ky10.noarch版本


author: sunjin <sunjin@kylinos.cn> 1.0.0-se.17
changelog:
  - Type:update
  - ID:[Bug#173908]
  - SUG:NA
  - DESC: security-reinforce走流程提交koji
  -       【安全加固】【系统审计】 psacct已安装.psacct服务未开启，进行加固扫描，扫描结果错误修改
  -       添加补丁security-reinforce-update-20230001.patch
  -       在需要开启三员的场景下，需要先升级至selinux-policy-3.14.2-76.se.20.ky10.noarch版本


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.09
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:彻底删除auto-resetpw选项
  -      添加补丁security-switch-delete-auto-resetpw-completely.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.10
changelog:
  - Type:update
  - ID: Task#81148
  - SUG:NA
  - DESC: 当kysec_status的状态从disable到enable是，将数据库中relabel_status的值改为0，全盘打标记
  -         add patch: security-switch-change-relabel_status-to-0.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.11
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC: security-switch改造成c实现，分离客户端和服务端，服务端放到kysec-daemon包
  -      添加补丁security-switch-to-c-language.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.12
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC: 优化security-switch命令行提示
  -       调用kysec-module的dbus服务改为kysec-daemon
  -         add patch: security-switch-command-usage-optimize.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.13
changelog:
  - Type: bugfix
  - ID: [BUG#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: security-switch-fix-not-set-status-when-close-3adm.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.14
changelog:
  - Type: bugfix
  - ID: [BUG#145103]
  - SUG:NA
  - DESC: 关闭kysec后,不重启机器的情况下，在root用户下使用security-switch切换strict模式，保证kysec-daemon的启动用户是secadm
  -         add patch: security-switch-fix-not-reboot-set-strict-when-kysec-disable.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#146928]
  - SUG:NA
  - DESC: 修复强制重启后，kysec-daemon无法启动的问题，修改com.kylin.kysec.service后，执行sync让数据落盘
  -         add patch: security-switch-fix-security-switch-disable-after-force-reboot-bug.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#147592]
  - SUG:NA
  - DESC: 解决切换模式失败后，无法再次切换的问题
  -       add patch: security-switch-fix-can-not-excute-after-switch-failed.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.2.7-6.se.17
changelog:
  - Type: bugfix
  - ID: [BUG#157825]
  - SUG:NA
  - DESC: 【安全模式】切换default模式后，概率性报核心已转储提示
  -       add patch: security-switch-add-client-thread-wait.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.18
changelog:
  - Type: update
  - ID: [任务#137354]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -         add patch: security-switch-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.19
changelog:
  - Type: bugfix
  - ID: [BUG#200000]
  - SUG:NA
  - DESC: 修改切换状态时提示kill用法错误
  -	  add patch: security-switch-fix-setstatus-tips-kill-error.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.7-6.se.20
changelog:
  - Type: bugfix
  - ID: [BUG#205663]
  - SUG:NA
  - DESC: 修复security-switch --set strict设置三元密码时，dbus通信超时导致密码设置失败的问题，
  -	已合并secadm输错三次密码后仍可以切换状态的补丁
  -	  add patch: security-switch-fix-secadm-set-passwd-error-still-switch-mode.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.8.1-10.se.01
changelog:
  - Type:update
  - ID:[Task#185579]
  - SUG:NA
  - DESC: shadow-utils修复无效路经的问题
  -         add patch: shadow-utils-fix-invalid-path.patch
  -       加入kysec和user检查
  -         add patch: shadow-4.7-kysec-and-user-check.patch
  -       恢复-o命令选项
  -         add patch: shadow-recover-o-option-and-move-real-operate.patch
  -       修复newuid不能加入uid_list的问题
  -         add patch: shadow-fix-newuid-not-into-uid_list.patch
  -       修正了参数u不使用时的唯一uid
  -         add patch: shadow-fix-unique-uid-when-arg-u-not-used.patch
  -       chpasswd使用pam
  -         add patch: shadow-chpasswd-use-pam.patch
  -       修复添加用户错误和uid_list重复的问题
  -         add patch: shadow-4.7-fix-mock-add-user-err-fix-uid_list-duplication.patch
  -       修复使用pam引发的问题
  -         add patch: shadow-fix-use-pam-patch.patch
  -       超过1000，不检查uid
  -         add patch: shadow-change-do-not-check-uid-if-bigger-than-1000.patch
  -       添加登录检查相同UID的功能
  -         add patch: shadow-login-check-same-uid.patch
  -       修复bug#71437：security-switch切换模式，default模式切换到strict模式，报错的问题
  -         add patch: shadow-reserved-admin-uids.patch
  -       useradd中将uid>1000的判断改为>=1000,否则创建uid为1000的用户不会写入uid_list中
  -         add patch: shadow-useradd-modify-uid-great-than-or-equal-to-1000.patch
  -       off状态,-u参数默认getpwuid; on状态,-u使用uid_used
  -          add patch: shadow-chkuid-off-oflg-pwuid.patch
  -         add patch: shadow-get-chkuid-state.patch


author: mengchaogming<mengchaoming@kylinos.cn>-- 2:4.8.1-10.se.01.p01
changelog:
  - Type:update
  - ID:[Task#198754]
  - SUG:NA
  - DESC:支持香港繁体中文
  - add patch:shadow-4.8.1-add-zh_HK.po.patch
  - add patch:shadow-4.8.1-add-zh_HK_1.patch


author: wanghao<wanhao2@kylinos.cn> - 2:4.8.1-5.p01.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: shadow-utils修复无效路经的问题
  -         add patch: shadow-utils-fix-invalid-path.patch
  -       加入kysec和user检查
  -         add patch: shadow-4.7-kysec-and-user-check.patch
  -       恢复-o命令选项
  -         add patch: shadow-recover-o-option-and-move-real-operate.patch
  -       修复newuid不能加入uid_list的问题
  -         add patch: shadow-fix-newuid-not-into-uid_list.patch
  -       修正了参数u不使用时的唯一uid
  -         add patch: shadow-fix-unique-uid-when-arg-u-not-used.patch
  -       chpasswd使用pam
  -         add patch: shadow-chpasswd-use-pam.patch
  -       修复添加用户错误和uid_list重复的问题
  -         add patch: shadow-4.7-fix-mock-add-user-err-fix-uid_list-duplication.patch
  -       修复使用pam引发的问题
  -         add patch: shadow-fix-use-pam-patch.patch
  -       超过1000，不检查uid
  -         add patch: shadow-change-do-not-check-uid-if-bigger-than-1000.patch


author: wanghao<wanhao2@kylinos.cn> - 2:4.8.1-5.se.02.p01
changelog:
  - Type:update
  - ID:[Task#80734]
  - SUG:NA
  - DESC: 添加登录检查相同UID的功能
  -         add patch: shadow-login-check-same-uid.patch
  -       修复bug#71437：security-switch切换模式，default模式切换到strict模式，报错的问题
  -         add patch: shadow-reserved-admin-uids.patch


author: wanghao<wanhao2@kylinos.cn> - 2:4.8.1-5.se.03.p01
changelog:
  - Type: bugfix 
  - ID: [BUG#136126]
  - SUG:NA
  - DESC: useradd中将uid>1000的判断改为>=1000,否则创建uid为1000的用户不会写入uid_list中
  -         add patch: shadow-useradd-modify-uid-great-than-or-equal-to-1000.patch


author: zhangzhou<zhangzhou@kylinos.cn> - 2:4.8.1-5.se.04.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: off状态,-u参数默认getpwuid; on状态,-u使用uid_used
          add patch: shadow-chkuid-off-oflg-pwuid.patch
          add patch: shadow-get-chkuid-state.patch


author: zhangzhou<zhangzhou@kylinos.cn> - 2:4.8.1-5.se.06.p01
changelog:
  - Type:update
  - ID:[Task#152862]
  - SUG:NA
  - DESC: fix CVE-2023-29383
  -     add patch:backport-Added-control-character-check.patch backport-Overhaul-valid_field.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.8.1-5.se.07.p01
changelog:
  - Type:update
  - ID:[Task#176674]
  - SUG:NA
  - DESC: fix CVE-2023-4641
  -     add patch(from cve):shadow-fix-password-leak.patch


author: jinlun <jinlun@huawei.com> - 15-23
changelog:
  - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
    CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
    CVE-2021-23841 CVE-2022-0778


author: wanglixing <wanglixing@kylinos.cn> - 15-23.p01
changelog:
  - Types: update
  - ID:NA
  - SUG:NA
  - DESC:transplant patch from -15-18.p01 - fix bug Bios引入openEuler标签


author: songjuntao <songjuntao@kylinos.cn> - 15-23.p03
changelog:
  - Type:update
  - ID:NA
  - ID:NA
  - DESC: add 0001-shim-Properly-generate-absolute-paths-from-relative-.patch and
          0002-shim-Prevent-shim-to-set-itself-as-a-second-stage-lo.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 15-23.p06
changelog:
  - Types:CVE
  - ID:TASK#207009
  - SUG:NA
  - DESC:fix CVE-2023-0464 CVE-2023-3817
         CVE-2023-40547 CVE-2023-40551
         CVE-2023-3446 CVE-2023-0465 CVE-2023-2650


author: yueyuankun <yueyuankun@kylinos.cn> - 15-23.p08
changelog:
  - Types:bugfix
  - ID:BUG#500861
  - SUG:NA
  - DESC:spec: Remove debugsource requirement from debuginfo
         Allow debuginfo to be installed alone without pulling in the debugsource package.


author: wangqiang <wangqaing1@kylinos.cn> - 1.1.0-8.dev.git63085f5.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add patch: 0001-skopeo-1.1.0-kylin-add-loongarch64-support.patch


author: lijian <lijian2@kylinos.cn> - 1.1.0-8.dev.git63085f5.p02
changelog:
  - Type:cves
  - ID:CVE-2023-39325 CVE-2023-44487 CVE-2025-27144
  - SUG:NA
  - DESC:fix CVE-2023-39325 CVE-2023-44487 CVE-2025-27144


author: lijian<lijian2@kylinos.cn> - 1:1.1.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: chenyanpanHW <chenyanpan@huawei.com> - 14.4.2.0-28
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-lsx_symbols.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-lpc10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-fsf_address_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1500570_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1500554_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1500553_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1510923_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-hcom_stopwrite_big_endian_bug_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1226675_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-bug_1480678_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2017-18189.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-33844.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2023-32627.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-23159.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-3643.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2022-31650.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2022-31651.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2021-40426.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8354.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8355.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8356.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-8357.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/CVE-2019-13590.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/sox-14.4.2-installcheck_fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: xinghe <xinghe2@h-partners.com> - 7:4.9-25
changelog:
  - Type:cves
  - ID:CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168
  - SUG:NA
  - DESC:fix CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168


author: mengchaoming <mengchaoming@kylinos.com> - 2.2.2-10.p01
changelog:
  - Type:UPDATE
  - ID:NA
  - SUG:NA
  - DESC:sync from sp2 modification:Merge packages from ARM and Loongson;Enable sssd.service after successful installation


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-10.p02
changelog:
  - Type:Bugfix
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add Patch6 to fix the error in closing the application program's
         fd by SSSD during PID rewind.


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-10.p03
changelog:
  - Type:update
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add a version number to be homologous with loongarch.


author: duanhongtao <duanhongtao@kylinos.cn> - 5.7.2-10.p03
changelog:
  - Type:CVE
  - CVE:CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334
  - SUG:NA
  - DESC:Fix CVE-2026-35329/CVE-2026-35330/CVE-2026-35331/CVE-2026-35332/CVE-2026-35333/CVE-2026-35334


author: yangmingtai <yangmingtai@huawei.com> - 243-52
changelog:
  - fix some issue: 1.fix set blkio.bfq.weight 
                    2.udevadm fix --tag-match
                    3.fix check of Listen* arguments


author: caiyinan <caiyinan@kylinos.cn> - 243-55.p01
changelog:
  -- add Patch10001: 0002-Change-the-NTP-server.patch(import changes from 243-31.se.p06)
     Change NTP server.
  -- add patch10002:systemd-243-kylin-init5-hang.patch(import changes from 243-31.se.p06)
     Modify ctrl+alt+F2 switch to init5 stuck problem
  -- add patch10003:systemd-243-kylin-init1-add-check-console-tty1.patch(import changes from 243-31.se.p06)
     fix bug 1568:Input init1 in the graphical interface, switching to single user is abnormal, the screen is black, the cursor in the upper left corner flickers, and the graphical interface cannot be switched


author: wanghao <wanghao2@kylinos.cn> - 243-55.p01.se.01
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 修复了当LSM堆叠启用时systemctl的selinux拒绝错误
  -         add patch: systemd-fix-selinux-denied-error-for-systemctl-when-lsm-stacking-is-enable.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p02.se.01
changelog:
  - Type:bugfix
  - ID:rhbz#1819868
  - SUG:NA
  - DESC: fix create pod container fail and systemd timeout (rhbz #1819868)


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p04.se.01
changelog:
  - Type:compile
  - ID:TASK#142824
  - SUG:NA
  - DESC: Support loongarch64
          Remove gnu-efi check in loongarch64


author: yinyongkang <yinyongkang@kylinos.cn> - 243-55.p08.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#192741]
  - SBUG:NA
  - DESC: add patch10030: 0001-network-do-not-drop-foreign-config-if-interface-is-i.patch
          network: do not drop foreign config if interface is in initialized state.


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 243-55.p09.se.01
changelog:
  - Type:bugfix
  - ID:[Bug#210134]
  - SUG:NA
  - DESC:add backport-donot-open-CD-rom-use-exclusive-mode.patch，for ejecjt button


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p10.se.01
changelog:
  - Type:bugfix
  - ID:[Bug#220276]
  - SUG:NA
  - DESC: Add backport-core-add-possibility-to-not-track-certain-unit-types.patch
          Sync upstream community patches , optimization user login time for too long in some case


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p11.se.01
changelog:
  - Type:bugfix
  - ID:[Bug#223633]
  - SUG:NA
  - DESC: Revert backport-udev-make-algorithm-that-selects-highest-priority-de.patch
          Revert patch to fix update device symlinks issue (similar #1942299)


author: wangshuo <wangshuo@kylinos.cn> - 243-55.p12.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#329354]
  - SUG:NA
  - DESC:add patch rc-local-order-after-network-online.target.patch
         fix rc-local service start failed


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p14.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#375571]
  - SUG:NA
  - DESC: Add pid1-set-SYSTEMD_NSS_DYNAMIC_BYPASS-env-var-for-dbus-daemon.patch
          Fix deadlock between pid1 and dbus-daemon


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p15.se.01
changelog:
  - Type:update
  - ID:[TASK#400549]
  - SUG:NA
  - DESC: Print the PID and cmdline to the system log when run systemctl command.


author: lijian <lijian01@kylinos.cn> - 243-55.p16.se.01
changelog:
  - Type:update
  - ID:[TASK#455059]
  - SUG:NA
  - DESC: fix wrong suffix assignment on putting dead process


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p17.se.01
changelog:
  - Type:update
  - ID:[TASK#489897]
  - SUG:NA
  - DESC: Fix mount units failed issue, which mount process finished, but there is no mount.


author: andy <liuyang01@kylinos.cn> - 243-55.p18.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#541799]
  - SUG:NA
  - DESC: backport upstream patch: Avoid spurious realization of unit cgroups


author: fandeyuan <fandeyuan@kylinos.cn> - 243-55.p19.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#559935]
  - SUG:NA
  - DESC: systemctl: do not print items twice in list-dependencies


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-55.p20.se.01
changelog:
  - Type: update
  - ID:   [BUG#568359]
  - SUG:  NA
  - DESC: fix CVE-2022-4415, CVE-2025-4598, CVE-2026-4105, CVE-2026-29111, CVE-2026-40226, CVE-2026-40225


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-77.p01
changelog:
  - Type: bugfix
  - ID  : [Task#557721]
  - SUG : NA
  - DESC: Fix telnet crashes on stack overflow due to infinite recursion.


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p01
changelog:
  - Modify spec to enable disable-luajittex disable-mfluajit
  - add texlive-base-m-tx-0.63a-buffer-overflow.patch
  - disable format-security


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p02
changelog:
  - Type: task
  - ID: 162915
  - SUG: NA
  - DESC: fix CVE-2023-32700: CVE-2023-32700.patch
          sp3 同源处理，删除补丁:
          texlive-base-m-tx-0.63a-buffer-overflow.patch


author: songliyang <songliyang@kylinos.cn> - 7:20180414-40.p01
changelog:
  - Type: updates
  - ID:   [TASK#561625]
  - SUG:  NA
  - DESC: 1. Update to fix CVE-2023-62668 CVE-2024-25262
          2. Add mips64el support and fix a build error on mips64el


author: Shi Jingying <shijingying@kylinos.cn> - 1.10.1-5.p01
changelog:
  - add patch 101：tigervnc-1.10.1-kylin-xstart.patch
  - remote link vncserver cannot show desktop, log message error
  - add patch 102: tigervnc-1.10.1-kylin-xstart1.patch
  - the autokill parameter cannot creat port


author: Yue Jiayuan <yuejiayuan@kylinos.cn> - 5.0-3.p02
changelog:
  - Type:update 
  - ID:[84598]
  - SUG:NA
  - DESC:add 0001-newfeature-tpm-Add-gm-support.patch, 0002-newfeature-tpm-Add-gm-test-case-for-all-commands.patch provided by HYGON, 0003-newfeature-tpm-Add-gm-adapt-for-kylin-openssl-sm2.patch, 0004-newfeature-tpm-Add-gm-pandoc-configure-modify.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 5.0-5.p01
changelog:
  - Type:update
  - ID:[176526]
  - SUG:NA
  - DESC:
  -       1.add 0001-newfeature-tpm-Add-gm-support.patch, 0002-newfeature-tpm-Add-gm-test-case-for-all-commands.patch provided by HYGON, 0003-newfeature-tpm-Add-gm-adapt-for-kylin-openssl-sm2.patch, 0004-newfeature-tpm-Add-gm-pandoc-configure-modify.patch
  -	2.add 0001-bugfix-tpm-fix-policy-test-case-error.patch provided by HYGON


author: mengchaoming<mengchaoming@kylinos.cn> -5.0-5.p02
changelog:
  -Type:Update
  -ID:[Task#186427]
  -SUG:NA
  -DESC:backport patches from upstream:remove rpath and runpath of exec files


author: zhangfan <zhangfan4@kylinos.cn> - 5.0-5.p04
changelog:
  - Type:update
  - ID:[TASK#374825]
  - SUG:NA
  - DESC: 1.添加TCM测试case
          2.修复test_tcm2_capability.sh测试case的错误


author: Hugel<gengqihu1@huawei.com> - 3.0.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 3.0.3
         use proper rundir tmpfilesdir and sysusersdir, so proper directories are used


author: yuejiayuan<yuejiayuan@kylinos.cn> - 3.0.3-1.p01
changelog:
  - Type:update
  - ID:84598
  - SUG:NA
  - DESC:add 0001-newfeature-tpm-Add-gm-support.patch provided by HYGON


author: yuejiayuan<yuejiayuan@kylinos.cn> - 3.0.3-2.p01
changelog:
  - Type:update
  - ID:TASK#175727
  - SUG:NA
  - DESC:add 0001-newfeature-tpm-Add-gm-support.patch provided by HYGON


author: yueyuankun <yueyuankun@kylinos.cn> - 2021.10-8.p02
changelog:
  - Type:CVE
  - ID:BUG#580819
  - SUG:NA
  - DESC: fix CVE-2024-57254 CVE-2024-57255 CVE-2024-57256 CVE-2024-57257
          fix CVE-2024-57258 CVE-2024-57259 CVE-2026-33243 CVE-2024-42040


author: openEuler Buildteam <buildteam@openeuler.org> - 2.8.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revise the bogus date in changelog and delete the unnecessary subpackage "udisks2-iscsi"


author: huayadong <huayadong@kylinos.cn> - 0.3.62-1s2.p17
changelog:
  - Type: bugfix
  - ID  : [TASK#90719]
  - SUG : NA
  - DESC: Patch15:ukui-screensaver-0.3.62-kylin-fix-fortify-problem.patch 
  	修改spec文件增加man文件安装,修复fortify扫描问题.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p18
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: Patch16 ukui-screensaver-0.3.62-kylin-automatically-unlock-and-add-syslog-during-login.patch 
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p19
changelog:
  - Type: bugfix
  - ID  : [Task#135672]
  - SUG : NA
  - DESC: Patch17 ukui-screensaver-0.3.62-kylin-fix-core-dump.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p20
changelog:
  - Type: bugfix
  - ID  : [Task#111645]
  - SUG : NA
  - DESC: Patch18 ukui-screensaver-0.3.62-kylin-Adapt-for-pam-1.4.0-8.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p21
changelog:
  - Type: bugfix
  - ID  : [Bug#160870]
  - SUG : NA
  - DESC: Patch19 ukui-screensaver-0.3.62-kylin-fix-that-the-same-uid-user-has-no-avatar-when-locking-the-screen.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p22
changelog:
  - Type: bugfix
  - ID  : [Bug#165506]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-0.3.62-kylin-prohibit-startup-in-other-types-of-desktop-environments.patch
          禁止在其他桌面环境启动.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p23
changelog:
  - Type: bugfix
  - ID  : [Bug#169307]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-0.3.62-kylin-prevent-lock-screen-wallpaper-from-being-deleted.patch
  	防止所有锁屏图片都被删除，出现无图可用的现象.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p24
changelog:
  - Type: bugfix
  - ID  : [Task#177133]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-0.3.62-kylin-abnormal-process-after-VNC-session-ends.patch


author: houhongxun<houhongxun@kylinos.cn> - 0.3.62-1s2.p25
changelog:
  - Type: bugfix
  - ID  : [Bug#203190]
  - SUG : NA
  - DESC: Patch23:0001-re-grab-input-focus-when-got-pam-prompt.patch
  	re grab input focus in case window was deactivated


author: yanglu<yanglu72@h-partners.com> - 1.11.0-6
changelog:
  - Type:cves
  - CVE:CVE-2022-30698 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30698 and CVE-2022-30699


author: gaihuiying <eaglegai@163.com> - 1.11.0-21
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: gaihuiying <eaglegai@163.com> - 1.11.0-22
changelog:
  - Type:cves
  - CVE:CVE-2026-33278,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960
  - SUG:NA
  - DESC:fix CVE-2026-33278,CVE-2026-41292,CVE-2026-42959,CVE-2026-42960


author: Like <like@kylinos.cn> - 1.11.0-4.p02
changelog:
  - Type:cves
  - CVE:CVE-2022-3204 CVE-2023-50387 CVE-2023-50868 CVE-2024-1488
  - SUG:NA
  - DESC:add patch 6,7 fix CVE-2022-3204,CVE-2023-50387,CVE-2023-50868,CVE-2024-1488


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 2.35.2-10.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add patch 9100,9300, Fix hwclock wrong time in aarch64 when reboot 200 times


author: wanfeng <wanfeng@kylinos.cn> - 2.35.2-10.p05
changelog:
  - Type:bugfix
  - ID:[BUG#153935]
  - SUG:NA
  - DESC:add patch:9400 for supporting utf-8 to fix problematic output when
  -      executing below commands at /dev/ttyN(N>1):
  -      systemctl restart rescue.service
  -      systemctl set-default rescue.target and reboot


author: zhangzikang <zhangzikang@kylinos.cn> - 2.35.2-10.p09
changelog:
  - Type:update
  - ID:[TASK#209796]
  - SUG:NA
  - DESC: Remove ft_part S5000C, CPU model name obtained from the kernel
          remove patch 0001-lscpu-add-ft_part-S5000C.patch
                       0002-lscpu-fix-ft_part-S5000C.patch


author: Yu Peng <yupeng@kylinos.cn> - 2.35.2-10.p11
changelog:
  - Type:bugfix
  - ID:[TASK#360847]
  - SUG:NA
  - DESC:sync community patches
         backport-libfdisk-fix-fdisk_reread_changes-for-extended-partitions.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 2.35.2-10.p12
changelog:
  - Type:bugfix
  - ID:[TASK#497341]
  - SUG:NA
  - DESC:add patch:backport-libfdisk-dos-fix-default-partition-start.patch
         backport-tests-sfdisk-fill-correctly-gaps-if-default-start-re.patch
         backport-libfdisk-fix-last-free-sector-detection-if-partition.patch
         fix default partition offset creates overlapping partitions


author: kouwenqi <kouwenqi@kylinos.cn> - 2.35.2-10.p13
changelog:
  - Type:bugfix
  - ID:[TASK#542963]
  - SUG:NA
  - DESC:libblkid: (xfs) external log: check for ceph_bluestore


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-17
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: sunjin <sunjin@kylinos.cn> - 2:9.0-19.p01.se.01
changelog:
  - Type: NA
  - ID: [Task#180410]
  - SUG: NA
  - DESC:  AQKK服务器项目重新集成双内核版本移植vim安全补丁
  -   修改sepc文件，将python相关的编译参数设置为no,解决bug#101652:vim绕过exectl执行未在白名单内的python脚本的问题


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2:9.0-19.p05
changelog:
  - Type:cves
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802
  - SUG:NA
  - DESC:Fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802


author: mengchaoming<mengchaoming@kylinos.cn> - 2:9.0-35.p01
changelog:
  - Type:update
  - ID:[TASK#509419]
  - SUG:NA
  - DESC:AQKK服务器项目重新集成双内核版本移植vim安全补丁
  -   修改sepc文件，将python相关的编译参数设置为no,解决bug#101652:vim绕过exectl执行未在白名单内的python脚本的问题
  -   add patch vim-add-zh_HK.patch
  -   kylin modify sensitive words
  -   revise the expression of sensitive words
  -   Adapt unit tests for CVE-2025-53905


author: zuohongsheng <zuohongsheng@kylinos.cn> -2:9.0-45.p01
changelog:
  - Type:update
  - ID:[task#512917]
  - SUG:NA
  - DESC: 1.modify sensitive words
          2.modify compilation parameters
          3.add zh_HK fonts support


author: zuohongsheng <zuohongsheng@kylinos.cn> -2:9.0-45.p02
changelog:
  - Type:update
  - ID:[bug#610811]
  - SUG:NA
  - DESC: fix CVE: CVE-2026-41411,CVE-2026-42307,CVE-2026-43961,CVE-2026-44656,CVE-2026-45130,CVE-2026-46483,CVE-2026-47162,CVE-2026-47167,CVE-2026-52858,CVE-2026-52859,CVE-2026-52860, consistent with 9.0-50


author: zuohongsheng <zuohongsheng@kylinos.cn> -2:9.0-45.p04
changelog:
  - Type:update
  - ID:[task#655139]
  - SUG:NA
  - DESC: More productized modifications for vim help information.


author: zuohongsheng <zuohongsheng@kylinos.cn> -2:9.0-45.p05
changelog:
  - Type:update
  - ID:[bug#646971]
  - SUG:NA
  - DESC: fix CVE:  CVE-2026-55693,CVE-2026-55892,CVE-2026-55895,CVE-2026-57452,CVE-2026-57455,CVE-2026-57456,CVE-2026-59856,CVE-2026-59857,CVE-2026-59858,consistent with 9.0-53


author: zuohongsheng <zuohongsheng@kylinos.cn> -2:9.0-45.p06
changelog:
  - Type:update
  - ID:[task#655139]
  - SUG:NA
  - DESC: fix tags creating problem caused by productized modifications.


author: houhongxun <houhongxun@kylinos.cn> - 0.28.2-14.p01
changelog:
  - Type:bugfix
  - ID  :[Bug#203586]
  - SUG :NA
  - DESC:add Patch6:0001-vte-swallow-hyperlink-control-sequence-and-make-it-n.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.28.2-14.p02
changelog:
  - Type:bugfix
  - ID  :[TASK#532381]
  - SUG :NA
  - DESC:add Patch7: 0002-vte-fix-max-bytes-mate-terminal.patch


author: wangzhishun <wangzhishun1@huawei.com> - 5.1.0-11
changelog:
  - Make sure sample rate is specified and non-zero in DFF files
  - Fix potential out-of-bounds heap read


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1:3.6.14-12
changelog:
  - Delete /usr/share/man/man1/wireshark.* in wireshark package because wireshark-help package also contains this files


author: Like<like@kylinos.cn> - 1.51.06-2.p01
changelog:
  - Type:NA
  - Id:NA
  - SUG:NA
  - DESC: Reference  1.51.06-1.p01 modify, splits sub packages client,c++,client++,apps


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1.51.06-2.p04
changelog:
  - Type:cves
  - Id:TASK#480193
  - SUG:NA
  - DESC:backport CVE-2024-8176 patch and sync v11 modify to remove duplicate man file in xml-rpc-c-apps packages


author: Zhenneng Li <lizhenneng@kylinos.cn> - 1.20.8-10.p03
changelog:
  - Type:CVE
  - Id:CVE-2021-4008,CVE-2021-4009,CVE-2021-4010,CVE-2021-4011
  - SUG:NA
  - DESC:fix CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011


author: Zhenneng Li <lizhenneng@kylinos.cn> - 1.20.8-10.p06
changelog:
  - Type: update
  - ID:   [TASK#105748]
  - SUG:  NA
  - DESC: Delete -D__KYLIN_FT1500A_DISPLAY__ for CFLAGS/CXXFLAGS


author: xurui <xurui@kylinos.cn> - 1.20.8-3.p04
changelog:
  - Id:CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344
  - SUG:NA
  - DESC:fix CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-3.p09.s5kb01
changelog:
  - Type: update
  - Id:[TASK#185720]
  - SUG:NA
  - DESC: Add -D__KYLIN_FT1500A_DISPLAY__ for CFLAGS/CXXFLAGS


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-10.p09.s5kb02
changelog:
  - Type:CVE
  - Id:CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886
  - SUG:NA
  - DESC:fix CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-10.p09.s5kb04
changelog:
  - Type: CVE
  - ID:   [TASK#550943]
  - SUG:  NA
  - DESC: fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-10.p09.s5kb05
changelog:
  - Type: CVE
  - ID:   [TASK#593649]
  - SUG:  NA
  - DESC: fix CVE-2025-62229,CVE-2025-62231,CVE-2025-62230,CVE-2025-49180,CVE-2025-49179,CVE-2025-49176,CVE-2025-49178,CVE-2025-49175,CVE-2022-49737


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-10.p09.s5kb06
changelog:
  - Type: CVE
  - ID:   [BUG#567381]
  - SUG:  NA
  - DESC: fix CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003, CVE-2024-31081, CVE-2024-31082, CVE-2024-31083, CVE-2024-9632


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-10.p09.s5kb09
changelog:
  - Type: CVE
  - ID:   [BUG#552387]
  - SUG:  NA
  - DESC: fix tigervnc-server test failed (revert CVE-2023-5574 patch)


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-10.p09.s5kb10
changelog:
  - Type: cves
  - ID:   CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260,
          CVE-2026-50261, CVE-2026-50262, CVE-2026-50253, CVE-2026-50254, CVE-2023-6377
  - SUG:  NA
  - DESC: fix CVE.


author: Shixiong Ou <oushixiong@kylinos.cn> - 1.20.8-10.p09.s5kb10
changelog:
  - Type: cves
  - ID:   CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260,
          CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264, CVE-2023-6377
  - SUG:  NA
  - DESC: fix CVE.


author: lichenguang <lichenguang@kylinos.cn> - 0.2.35-9.p02
changelog:
  - Type:cves
  - ID: CVE-2025-2173 CVE-2025-2174 CVE-2025-2176 CVE-2025-2177
  - SUG:NA
  - DESC: fix CVE-2025-2173 CVE-2025-2174 CVE-2025-2176 CVE-2025-2177


