# changelog

author: Han Jinpeng <hanjinpeng@kylinos.cn> - 2.3.2-6.p01
changelog:
  - Type:bugfix
  - ID:[BUG#240328]
  - SUG:NA
  - DESC: Translate: and add zh_CN translate support for cockpit 389 directory


author: lvying<lvying6@huawei.com> - 1.0.0-1
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC: Init A-Tune-BPF-Collection repo and add readahead_tune service


author: lvying<lvying6@huawei.com> - 1.0.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: use generated vmlinux.h instead of bpftool gen vmlinux.h in compile env


author: li-miaomiao_zhr<mmlidc@isoftstone.com> - 1.0.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix wrong file name referenced in spec file causing build failure,remove spec file from the source package


author: maminjie <maminjie1@huawei.com> - 1.3.30-7
changelog:
  - fix some CVEs: CVE-2018-18544 CVE-2019-7397 CVE-2019-11005 CVE-2019-11006
    CVE-2019-11010 CVE-2019-12921 CVE-2020-10938 CVE-2020-12672


author: yaoxin <yaoxin30@huawei.com> 2.4.3-5
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-44228 is fixed, the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> 2.4.3-6
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-45105 is fixed, the version needs to be rebuild.


author: panchenbo <panchenbo@kylinsec.com.cn> - 1.22.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix build error: add missing BuildRequires:pkgconfig(polkit-gobject-1)


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:1.42.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:NetworkManager-dispatcher.service not enabled when installed due to systemd_units not defined


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:1.42.8-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync bugfix patch: delete lease file when connection deleted and 
         update the way to get ppp version because patchlevel.h no more provided in  ppp-2.5.0


author: liuzhilin <liuzhilin@uniontech.com> - 1:1.44.2-2
changelog:
  - add NM to support wifi6(fix dde-network-core build error)
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:Support wireless networks connecting WIFI6 encryption methods,
         so this demand is achieved in NetworkManager, KF5-NetworkManager-QT,
         DDE-Network-Core software package


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: chenyanpanHW <chenyanpan@huawei.com> - 2.14.19-25
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ORBit2-2.14.3-multilib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ORBit2-2.14.3-ref-leaks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ORBit2-make-j-safety.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ORBit2-allow-deprecated.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0005-Fix-link_protocol_is_local_ipv46-for-ipv4-on-some-ip.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0014-Commit-patch-from-bug-662623-to-fix-connection-failu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0016-bug-732274-fix-parallel-build-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xihaochen <xihaochen@huawei.com> - 2.0.31-1
changelog:
  - Type:requirements                                                                                                                                            
  - Id:NA
  - SUG:NA
  - DESC:update OpenIPMI to 2.0.31


author: gaihuiying <eaglegai@163.com> - 2.0.31-3
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Add the judgment on the validity of length in emu_cmd.c and session in lanserv_ipmi.c


author: chengguipeng <chengguipeng1@huawei.com> - 1.1.12-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:solove the problem that no message is displayed when running a uninstalled command.


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.8-2
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: pkcon: Use appropriate callbacks for client / task async calls


author: lingsheng <lingsheng1@h-partners.com> - 1.2.8-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Revert PkClient: Replace the GSimpleAsyncResult with the GTask API


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 4.0.5-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.15-38
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.15-add_sdl_config_man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7637.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7636.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7635_1.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7635_2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7573_CVE-2019-7576.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7578.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-7577.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.10-GrabNotViewable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.15-const_XData32.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.15-ignore_insane_joystick_axis.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.15-no-default-backing-store.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.15-SDL_EnableUNICODE_drops_keyboard_events.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/SDL-1.2.15-vec_perm-ppc64le.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-13616.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2019-7572-Fix-a-buffer-overread-in-IMA_ADPCM_nibble.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2019-7574-Fix-a-buffer-overread-in-IMA_ADPCM_decode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2019-7572-Fix-a-buffer-overwrite-in-IMA_ADPCM_decode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-CVE-2019-7575-Fix-a-buffer-overwrite-in-MS_ADPCM_decode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Nicolas Chauvet <kwizart@gmail.com> - 0.7.4-24
changelog:
  - Multilibs support - rhbz#1433758
  - Simplify description
  - Convert AUTHORS to UTF-8
  - Drop Groups
  - Add Obsoletes/Provides for a52dec-devel


author: peijiankang <peijiankang@kylinos.cn> - 23.13.9-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#238402]
  - SUG:  NA
  - DESC: add accountsservice-23.13.9-add-language-tools.patch


author: peijiankang <peijiankang@kylinos.cn> - 23.13.9-1.p02
changelog:
  - Type: update
  - ID:   [TASK#371117]
  - SUG:  NA
  - DESC: add accountsservice-23.13.9-sync-openkylin-23.13.9-ok4.patch


author: huayadong <huayadong@kylinos.cn> - 23.13.9-2.p01
changelog:
  - Type: update
  - ID:   [TASK#425693]
  - SUG:  NA
  - DESC: update to 23.13.9-2 
          add BuildRequires python3-dbusmock to fix local build failed


author: openEuler Buildteam <buildteam@openeuler.org> -20190730-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Increase the ability to provide adobe-mappings-cmap-deprecated


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: majianhan <majianhan@kylinos.cn> - 36.16.5-34.p13
changelog:
  - Type:bugfix
  - ID:[BUG#277445]
  - SUG:NA
  - DESC:Remove shortcut when set root password to avoid hotkey conflict


author: majianhan <majianhan@kylinos.cn> - 36.16.5-34.p16
changelog:
  - Type:update
  - ID:[TASK#381853]
  - SUG:NA
  - DESC:backport adjust some requires and config for derived os


author: majianhan <majianhan@kylinos.cn> - 36.16.5-45.p01
changelog:
  - Type:update
  - ID:[TASK#425071]
  - SUG:NA
  - DESC:[kylin]Add tiger-vnc-minimal requires back
         [backport]configure only-append-fanalyzer
         [backport]check-that-the-password-contains-the-username
         [backport]bugfix-set-metacity-with-LIBGL_KOPPER_DISABLE-as-yes


author: yueyuankun <yueyuankun@kylinos.cn> - 36.16.5-45.p02
changelog:
  - Type:update
  - ID:[TASK#433557]
  - SUG:NA
  - DESC: aarch64: add 'smmu.bypassdev=0xffe1:0xd200' in /etc/default/grub


author: lixiaoyong <lixiaoyong@kylinos.cn> - 2.9.27-6.p01
changelog:
  - Type: update
  - ID: [Task#424643]
  - SUG: NA
  - DESC: Add support for KylinOS in ansible hostname module


author: mengchaoming <mengchaoming@kylinos.cn>- 2.13.4-2-p01
changelog:
  - Type:update
  - ID:TASK#222536
  - SUG:NA
  - DESC:add patch:apparmor-v2.13.4-Adapted-for-KylinOS.patch
  - apparmor-v2.13.4,修改编译问题;


author: lin zhang <lin.zhang@turbolinux.com.cn> - 0.15.2-2
changelog:
  - fix build error
  - File listed twice libappstream-compose.so.0.15.2
  - uppackaged /usr/share/gtk-doc/html/appstream-compose


author: shenyangyang<shenyangyang4@huawei.com> - 1.7.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
         to /usr/lib/xxxx


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-healing capabilities for service


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 3.2.5-2
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: Roberto Sassu <roberto.sassu@huawei.com> - 0.2.92-1
changelog:
  - Remove dependency on openssl_tpm2_engine
  - Add support for PGP keys
  - Move configuration files to /etc/attest-tools
  - Obtain CA files from openssl configuration
  - Make primary key persistent
  - Add systemd units and requirements examples
  - Add SKAE DATA URL extension to CSR
  - Bug fixes


author: baizhonggui <baizhonggui@huawei.com> - 0.2.92-3
changelog:
  - Fix building error: File must begin with "/": /usr/lib/systemd/system/attest_ra_server.service
  - Add systemd in BuildRequires


author: chenyanpanHW <chenyanpan@huawei.com> - 2.4.48-14
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-bypass-wrong-output-when-enabled-selinux.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-dont-skip-security.evm-when-copy-xattr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-attr-eliminate-a-dead-store-in-attr_copy_action.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-fix-stale-attr-references.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: dongjiao <dongjiao@kylinos.cn> - 1.2.0-2.p03
changelog:
  - Type:bugfix
  - ID:[BUG#282581,BUG#282119]
  - SUG:NA
  - DESC: 1) support loongarch64
          2) fix scikit-optimize-incompatible-with-numpy-1.24 bug


author: dongjiao <dongjiao@kylinos.cn> - 1.2.0-2.p04
changelog:
  - Type:bugfix
  - ID:[BUG#334861]
  - SUG:NA
  - DESC: add  0003-scikit-learn-1.2-rename-the-parameter-base_estimator.patch


author: shixuantong<shixuantong@huawei.com> - 0.3.6-25
changelog:
  - Type:cves
  - ID:CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839
  - SUG:NA
  - DESC:fix CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839


author: zhangzikang <zhangzikang@kylinos.cn> - 1:3.1.2-7.p01
changelog:
  - Type: update
  - ID: [TASK#424647]
  - SUG: NA
  - DESC: Add audit-kycompat subpackage.
          Supply follow symbols to solve the API/ABI compatibility issue:
            audit_add_dir


author: litianhao <litianhao@kylinos.cn> - 1:3.1.2-7.p01.se.01
changelog:
  - Type: update
  - ID: [TASK#431219] audit合入安全补丁
  - SUG: NA
  - DESC: 合入kysec补丁
          audit-add-kysec.patch
          audit-refactor-dep-kysec.patch


author: litianhao <litianhao@kylinos.cn> - 1:3.1.2-7.p01.se.02
changelog:
  - Type: update
  - ID: [BUG#332988]【V11 2503】【b01】审计管理开启后自动停
  - SUG: NA
  - DESC: 未加载上kysec时不退出服务
          audit-skip-kysec-check-if-not-loaded.patch


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1:3.1.2-7.p01.se.03
changelog:
  - Type: update
  - ID: [TASK#439186] kysec2.0审计日志输出
  - SUG: NA
  - DESC: 适配ksaf日志
          audit-add-support-for-ksaf-log.patch


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1:3.1.2-7.p01.se.04
changelog:
  - Type: update
  - ID: [TASK#474839] 【v11 2503】审计包功能优化
  - SUG: NA
  - DESC: ksaf审计日志变动
          audit-trigger-by-ksaf-audit-log-update.patch


author: mengyuan <mengyuan@kylinos.cn> - 1:3.1.2-7.p01.se.05
changelog:
  - Type: update
  - ID: [BUG#369603]【V11-2503】审计规则配置删除后重启auditd规则依然存在
  - SUG: NA
  - DESC: 更新默认审计规则，与红帽、ubuntu保持一致
          audit.spec


author: litianhao <litianhao@kylinos.cn> - 1:3.1.2-7.p01.se.06
changelog:
  - Type: update
  - ID: [TASK#443733]增加kydima日志类型
  - SUG: NA
  - DESC: 日志事件类型增加kydima类型
          audit-add-kydima-msg-type.patch


author: mengyuan <mengyuan@kylinos.cn> - 1:3.1.2-7.p01.se.07
changelog:
  - Type: update
  - ID: [BUG#381503]【V11 2503】auditadm-审计相关目录权限划分错误
  - SUG: NA
  - DESC: 修复三权状态下生成的audit.rules文件属主异常问题
  	audit-fix-audit-rule-perm-when-3adm.patch


author: mengyuan <mengyuan@kylinos.cn> - 1.0.1-07
changelog:
  - Type: update
  - ID: [TASK#435244] 提升单元测试覆盖率
  - SUG: NA
  - DESC: 提升单元测试覆盖率
  -       audit-status-libs-add-gcov-comment.patch


author: mengyuan <mengyuan@kylinos.cn> - 1.0.1-08
changelog:
  - Type: update
  - ID: [BUG#368109]【B15】【V11-2503】【安全SDK】【安全审计】安全审计状态配置测试失败
  - SUG: NA
  - DESC:修复审计状态配置接口可能会配置多条审计状态的问题
          audit-status-libs-fix-cmdline.patch


author: wangkerong <wangkerong@huawei.com> - 1.13.0-3
changelog:
  - Fix OOM during fuzz test
  - We don't run some testcase,because the patch of fuzz test will lead to the failure of testcase


author: panxiaohe <panxh.life@foxmail.com> - 2.71-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Update autoconf to 2.71
         Add perl to resolve compilation failure
         Add gcc-c++ to solve test failure


author: liyancheng <412998149@qq.com> - 0.19-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Support parsing multiple events and process repeat function


author: fuanan <fuanan3@h-partners.com> - 1.16.5-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Bump release and Cleanup useless comments and License compliance rectification


author: Ge Wang <wang__ge@126.com> - 1.0-0.34
changelog:
  - Replace buildrequire kde-filesystem with kde4-filesystem due to kde-filesytem updated to version 5-1


author: wangkai <wangkai385@huawei.com> - 0:4.3-23
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0:4.3-24
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: chenyanpanHW <chenyanpan@huawei.com> - 2.9.1-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-Freeze-format_time-tests-to-a-specific-date-to-fix-t.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-Use-aware-UTC-datetimes-internally.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhoupengcheng <zhoupengcheng11@huawei.com> - 2.12.1-1
changelog:
  - update to 2.12.1 
  - backport two patches from upstream to fix testcase failure after upgrade 2.12.1
      backport-Freeze-format_time-tests-to-a-specific-date-to-fix-t.patch
      backport-Use-aware-UTC-datetimes-internally.patch


author: yueyaoqiang<yueyaoqiang@kylinos.cn> - 1:2.12.0-1.p01
changelog:
  - Type:bugfix
  - ID:[BUG#235243]
  - SUG:NA
  - DESC: fix available_interfaces returns trailing colon
  	add backport-fix-available_interfaces-returns-trailing-colon.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.17-1
changelog:
  - Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730


author: liequan che <cheliequan@inspur.com> - 1.1-4
changelog:
  - add bcache-export-cached to export CACHED_UUID and CACHED_LABEL,so that 69-bcache.rules
  udev rules can correctly create uuid and label links for bcache devices


author: liuh <liuhuan01@kylinos.cn> - 1.7.0-1.p01
changelog:
  - Type: compile
  - ID:[TASK#226385]
  - SUG:NA
  - DESC: Modify the spec file to solve compilation problems


author: liuh <liuhuan01@kylinos.cn> - 1.7.0-1.p02
changelog:
  - Type:bugfix
  - ID:[TASK#240326]
  - SUG:NA
  - DESC:
  - Fix bug no information during mount with a single device
  - Add Patch1004: Handle mount with FS with 1 device
  - Add Patch1003: Add env. variable BCACHEFS_BLOCK_SCAN
  - Add Patch1002: mount: Leverage udev db
  - Add Patch1001: remove redundant "cmd_" prefix from functions in "commands"


author: zhangzikang <zhangzikang@kylinos.cn> - 0.29.1-2.p02
changelog:
  - Type:bugfix
  - ID:BUG#256609
  - SUG:NA
  - DESC:Fix patch is ineffective for loongarch64 repo noarch packages


author: songliyang <songliyang@kylinos.cn> -0.29.1-2.p04
changelog:
  - Type: update
  - ID:   TASK#393729
  - SUG:  NA
  - DESC: Add clang-libs install dependency
  	Fix some bugs for JDK probes detector in 'extend' dir


author: zhangzikang <zhangzikang@kylinos.cn> - -0.29.1-3.p01
changelog:
  - Type:update
  - ID:[TASK#424647]
  - SUG:NA
  - DESC: Remove clang-libs install dependency
          Fix CVE-2024-2314


author: songliyang <songliyang@kylinos.cn> - -0.29.1-3.p03
changelog:
  - Type: bugfix
  - ID:   [BUG#336580]
  - SUG:  NA
  - DESC: 1.fix thread detect error
          2.optimize output


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.37-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: pengxu <pengxu@kylinos.cn> - 2.41-12.p02
changelog:
  - Type:compile
  - ID:BUG#335025
  - SUG:NA
  - DESC: 1.LoongArch: keep compatible with older gcc.
          2.Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying symbols without version info.
          3.Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes.


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.0-20
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-blktrace-remove-python2-dedpendency.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-blktrace-Makefile-add-fstack-protector-strong-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-blktrace-fix-exit-directly-when-nthreads-running.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-blkparse-skip-check_cpu_map-with-pipe-input.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0005-blkparse-fix-incorrectly-sized-memset-in-check_cpu_m.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0006-fix-hang-when-BLKTRACESETUP-fails-and-o-is-used.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 1.8.18-17
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-CVE-2011-4339-OpenIPMI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-openssl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-ipmitool-1.8.11-set-kg-key.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-slowswid.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0005-zero-initialize-the-recv-structure-on-the-stack.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ID-480-Call-EVP_CIPHER_CTX_free-instead-of-EVP_CIPHE.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ID-472-Fix-The-Most-recent-Addition-Erase-date.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ID-508-Fix-segfaults-in-dcmi-command-handlers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ID-508-Refix-6d9c540-Forgotten-changes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Re-apply-commit-58d510f90feb.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fru-internaluse-Fix-segmentation-fault-9.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Replace-user_id-masks-with-a-macro-8.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/plugins-open-Fix-for-interrupted-select.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/plugins-open-Properly-enable-event-receiver-35.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/lanplus-Cleanup.-Refix-6dec83ff-fix-be2c0c4b.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/lanplus-Fix-segfault-for-truncated-dcmi-response.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/helper-add-free_n-method-to-handle-clearing-pointers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/sol-Make-interface-timeout-obey-the-N-option.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/hpm-Fix-resource-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fru-fixup-array-bounds-checking.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fru-swap-free-calls-for-free_n.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Refactor-free_n-function.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/open-checking-received-msg-id-against-expectation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ipmitool-CVE-2020-5208-Fix-buffer-overflow-vulnerabilities.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ipmitool-CVE-2020-5208-Fix-buffer-overflow-in-ipmi_spd_print_fru.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ipmitool-CVE-2020-5208-Fix-buffer-overflow-in-ipmi_get_session_info.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ipmitool-CVE-2020-5208-Fix-buffer-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ipmitool-CVE-2020-5208-Fix-buffer-overflows-in-get_lan_param_select.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/ipmitool-CVE-2020-5208-Fix-id_string-buffer-overflows.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fix-variable-definition-error-with-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-lanplus-Realloc-the-msg-if-the-payload_length-gets-u.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-lan-channel-Fix-set-alert-on-off.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-fru-Fix-crashes-on-6-bit-ASCII-strings.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0006-Fix-get_bmc_ip-failure-caused-by-search-rule-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaihuiying <gaihuiying1@huawei.com> - 1.8.18-18
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:separate exchange-bmc-os-info,bmc-snmp-proxy from ipmitool


author: mengkanglai <mengkanglai2@huawei.com> - 1.8.18-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lan channel fix set alert on off and lanplus realloc the msg if the payload_length gets update


author: Huang Yang <huangyang@loongson.cn> - 1.8.18-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolve malloc aborted error raised when executing ipmitool fru.


author: liu_yi <liu_yi@kylinos.cn> - 3.1.3-2.se.04
changelog:
  - Type:update
  - ID:[Task# 366161][Task# 366329]Task# 365729]
  - SUG:NA
  - DESC: 增加安全编译参数
  		修复sonarcube扫描漏洞
  		fortify扫描问题修复
  - 添加补丁:
  - TASK-366161-add-security-compile-parameters.patch
  - TASK-366329-fix-sonarcube-scan-bugs.patch
  - TASK-365729-fortify-issues.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.05
changelog:
  - Type:update
  - ID:[Task# 365725]
  - SUG:NA
  - DESC: unit test
  - 添加补丁:
  - TASK-365725-remove-redundant-class.patch
  - TASK-365725-add-unit-test-libboxmanage.patch
  - TASK-365725-refactor-libboxmanage-unit-test-improve.patch


author: shuzetian <shuzetian@kylinos.cn> - 3.1.3-2.se.06
changelog:
  - Type:update
  - ID:[Bug#302085,300875]
  - SUG:NA
  - DESC: fix bugs
  - 添加补丁:
  - BUG-302085-fix-box-create-error-message-show.patch
  - BUG-300875-fix-pamauthenticDialog-lost-focus.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.07
changelog:
  - Type:update
  - ID:[Task# 421387]
  - SUG:NA
  - DESC: update copyright for all source files
  - 添加补丁:
  - TASK-421387-copyright-for-all-source-file.patch
  - TASK-421387-fix-copyright-and-add-some-comments.patch
  - TASK-421387-add-copyright-qtsingleapp.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.08
changelog:
  - Type:update
  - ID:[Task# 434209]
  - SUG:NA
  - DESC: delete unused widgets,and increase unit-test coverage to 70%; add security and compiliance policy check
  - 添加补丁:
  - TASK-434209-improve-delete-unused-widgets-v11-server-unit-test.patch
  - refactor-safe-and-compiliance-policy-check.patch
  - remove-commons.patch


author: liu_yi <liu_yi@kylinos.cn> - 3.1.3-2.se.09
changelog:
  - Type:update
  - ID:[BUG#249477,304851]
  - SUG:NA
  - DESC: linkage psw verify editor and error tips; update user guide image and doc
  - 添加补丁:
  - BUG-249477-linkage-psw-verify-editor-and-error-tips.patch
  - BUG-304851-update-user-guide-docs.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.10
changelog:
  - Type:update
  - ID:[TASK# 458348]
  - SUG:NA
  - DESC: solve some leak issues from fortify check.
  - 添加补丁:
  - operation-leak-issue-solve.patch


author: shuzetian <shuzetian@kylinos.cn> - 3.1.3-2.se.11
changelog:
  - Type:update
  - ID:[Bug# 363533,352157,352309,352202]
  - SUG:NA
  - DESC: fix bugs
  - 添加补丁:
  - BUG352202-update-icon-color-to-white.patch
  - BUG-352309-optimize-focus.patch
  - BUG-352157-update-ts-file.patch
  - BUG363533-update-save-button-ts.patch
  - BUG352202-update-icon-color-to-system.patch


author: shuzetian <shuzetian@kylinos.cn> - 3.1.3-2.se.12
changelog:
  - Type:update
  - ID:[Bug# 364541]
  - SUG:NA
  - DESC: fix bugs
  - 添加补丁:
  - Patch40:fix-tmp-acl.patch
  - Patch41:BUG-364541-fix-box-sort-tableview.patch


author: liu_yi <liu_yi@kylinos.cn> - 4.0.3-2.se.02
changelog:
  - Type:update
  - ID:[Task#333491]
  - SUG:NA
  - DESC:
  - File Safe Function fixed
  - 添加补丁	TASK-333491-fix-global-key-create-failed.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.03
changelog:
  - Type:update
  - ID:[Task#332808]
  - SUG:NA
  - DESC:
  - 添加单元测试用例
  - 添加补丁	TASK-332808-add-cunit-test.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.04
changelog:
  - Type:update：
  - ID:[Task#332808]
  - SUG:NA
  - DESC:
  - 修改makefile.am使覆盖率达标
  - 添加补丁	update-makefile.patch


author: liu_yi <liu_yi@kylinos.cn> - 4.0.3-2.se.05
changelog:
  - Type:update
  - ID:[Task#361227][Task#366325][Task#367585]
  - SUG:NA
  - DESC:	添加安全编译参数
  		安全函数整改
  		修复sonarcube扫描漏洞
  		ksaf2.0保护箱接口兼容适配
  - 添加补丁:
  - TASK-361227-add-security-compile-parameters.patch
  - TASK-366325-use-security-funcs-and-fix-sonarcube-bugs.patch
  - TASK-367585-adapt-to-ksaf-kbox-framework-funcs.patch
  - KYLIN-supplement-file-header-comment.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.06
changelog:
  - Type:update
  - ID:[Task#360917 Bug#291793,290515,296749,290423]
  - SUG:NA
  - DESC:
  - 添加代码使覆盖率提升
  - fix bugs
  - 添加补丁	
  - TASK-360917-add_cunit.patch
  - BUG-291793-update-changepw.patch
  - BUG-290515-can-not-open-encrypted-box.patch
  - BUG-296749-add-printf-help-info.patch
  - BUG-290423-add-new-box-module-judge.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.07
changelog:
  - Type:update
  - ID:[Bug#290515]
  - SUG:NA
  - DESC:
  - fix bugs
  - 添加补丁	
  - BUG-290515-refix-retval-judge.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.08
changelog:
  - Type:update
  - ID:[Task#421385][Task#386411]
  - SUG:NA
  - DESC:
  - 门禁合规修改
  - 添加补丁	
  - TASK-421385-update-copyright.patch 
  - TASK-386411-fix-fortify.patch
  - update-copyright-year.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.09
changelog:
  - Type:update
  - ID:[Bug#327994][Bug#327997]
  - SUG:NA
  - DESC:
  - fix bugs
  - 添加补丁	
  - BUG-327994-327997-fix-fuzz-crashes.patch 
  - BUG-327994-327997-fix-fuzz-crashes1.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.10
changelog:
  - Type:update
  - ID:[Bug#352437][Bug#352432][Bug#351901][Task#434210]
  - SUG:NA
  - DESC:
  - fix bugs
  - 添加补丁	
  - Patch25:TASK-434210-update-sonarqube-coverage-70%.patch
  - Patch26:fuzz.patch
  - Patch27:BUG-352437-underscore-should-not-be-special-character.patch
  - Patch28:BUG-352432-password-cannot-exceed-32-digitals.patch
  - Patch29:BUG-351901-update-boxadm-v.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.11
changelog:
  - Type:update
  - ID:[Bug#364339]
  - SUG:NA
  - DESC:
  - fix bugs
  - 添加补丁
  - Patch30:fix-tmp-acl.patch
  - Patch31:BUG-364339-update-boxadm-l-info.patch


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-30.v2504
changelog:
  - Revert "xfs: Use two-state-lock to prevent DIO and buffered IO concurrency" (Jiangshan Yi) [task:422879]
  - Revert "xfs: Enable concurrency when writing within block size" (Jiangshan Yi) [task:422879]
  - disable CONFIG_RANDSTRUCT_FULL to avoid duplicate BTF info (chenyuan) [task:452703]
  - fs: Optimize performance by inlining new_sync_read and new_sync_write (liqiang01) [task:447145]
  - OPENEULER: sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util() (Li Zetao) [task:447145]
  - init/main: Remove the effect of macro CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT (liqiang01) [task:447145]
  - xfs: Enable concurrency when writing within block size (Chi Zhiling) [task:422879]
  - xfs: Use two-state-lock to prevent DIO and buffered IO concurrency (Chi Zhiling) [task:422879]
  - security/ksaf: add interface to get usb raw port number (zhubing) [task:450579]
  - security/ksaf: add super_block blob for ksaf (zhubing) [task:450937]
  - loongarch/config: Enable CONFIG_DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT=y (Jiangshan Yi) [task:455681]
  - drm/amdgpu: memset_io and memcpy_toio/fromio for iomem for sw (yaolu) [bug:338831]
  - drm/amdgpu: FT1500A not support 128-bit VRAM operation instructions (wangyongjun) [bug:338831]
  - scsi: ufs: core: Add OPP support for scaling clocks and regulators (Manivannan Sadhasivam) [task:441331]
  - scsi: ufs: core: Fix abnormal scale up after scale down (Peter Wang) [task:441331]
  - scsi: ufs: core: Fix abnormal scale up after last cmd finish (Peter Wang) [task:441331]
  - scsi: ufs: core: Only suspend clock scaling if scaling down (Peter Wang) [task:441331]
  - scsi: ufs: core: Remove dev cmd clock scaling busy (Peter Wang) [task:441331]
  - scsi: ufs: dt-bindings: common: Add OPP table (Krzysztof Kozlowski) [task:441331]
  - crypto: hisilicon/sec2 - fix for sec spec check (Wenkai Lin) [task:453977]
  - tracing: Do not use PERF enums when perf is not defined (Steven Rostedt) [task:453977]
  - NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up (Chuck Lever) [task:453977]
  - nfsd: put dl_stid if fail to queue dl_recall (Li Lingfeng) [task:453977]
  - media: streamzap: fix race between device disconnection and urb callback (Murad Masimov) [task:453977]
  - exec: fix the racy usage of fs_struct->in_exec (Oleg Nesterov) [task:453977]
  - jfs: add index corruption check to DT_GETPAGE() (Roman Smirnov) [task:453977]
  - jfs: fix slab-out-of-bounds read in ea_get() (Qasim Ijaz) [task:453977]
  - ext4: fix OOB read when checking dotdot dir (Acs, Jakub) [task:453977]
  - ext4: don't over-report free space or inodes in statvfs (Theodore Ts'o) [task:453977]
  - arm64: Don't call NULL in do_compat_alignment_fixup() (Angelos Oikonomopoulos) [task:453977]
  - tracing/osnoise: Fix possible recursive locking for cpus_read_lock() (Ran Xiaokai) [task:453977]
  - tracing: Fix synth event printk format for str fields (Douglas Raillard) [task:453977]
  - tracing: Ensure module defining synth event cannot be unloaded while tracing (Douglas Raillard) [task:453977]
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching (Tengda Wu) [task:453977]
  - ksmbd: validate zero num_subauth before sub_auth is accessed (Norbert Szetei) [task:453977]
  - ksmbd: fix session use-after-free in multichannel connection (Namjae Jeon) [task:453977]
  - ksmbd: fix use-after-free in ksmbd_sessions_deregister() (Namjae Jeon) [task:453977]
  - ksmbd: add bounds check for create lease context (Norbert Szetei) [task:453977]
  - ksmbd: add bounds check for durable handle context (Namjae Jeon) [task:453977]
  - mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD (Ulf Hansson) [task:453977]
  - mmc: sdhci-pxav3: set NEED_RSP_BUSY capability (Karel Balej) [task:453977]
  - mmc: omap: Fix memory leak in mmc_omap_new_slot (Miaoqian Lin) [task:453977]
  - ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (Paul Menzel) [task:453977]
  - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl (Murad Masimov) [task:453977]
  - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Jann Horn) [task:453977]
  - x86/tsc: Always save/restore TSC sched_clock() on suspend/resume (Guilherme G. Piccoli) [task:453977]
  - perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read (Kan Liang) [task:453977]
  - perf/x86/intel: Apply static call for drain_pebs (Peter Zijlstra (Intel)) [task:453977]
  - ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk() (Markus Elfring) [task:453977]
  - platform/x86: ISST: Correct command storage data length (Srinivas Pandruvada) [task:453977]
  - ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers (Hans de Goede) [task:453977]
  - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Boris Ostrovsky) [task:453977]
  - x86/hyperv: Fix check of return value from snp_set_vmsa() (Tianyu Lan) [task:453977]
  - LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC (Hengqi Chen) [task:453977]
  - LoongArch: BPF: Don't override subprog's return value (Hengqi Chen) [task:453977]
  - LoongArch: BPF: Fix off-by-one error in build_prologue() (Hengqi Chen) [task:453977]
  - LoongArch: Increase ARCH_DMA_MINALIGN up to 16 (Huacai Chen) [task:453977]
  - usbnet:fix NPE during rx_complete (Ying Lu) [task:453977]
  - tracing: Correct the refcount if the hist/hist_debug file fails to open (Tengda Wu) [task:453977]
  - tracing/hist: Support POLLPRI event for poll on histogram (Masami Hiramatsu (Google)) [task:453977]
  - tracing/hist: Add poll(POLLIN) support on hist file (Masami Hiramatsu (Google)) [task:453977]
  - tracing: Switch trace_events_hist.c code over to use guard() (Steven Rostedt) [task:453977]
  - tracing: Allow creating instances with specified system events (Steven Rostedt (Google)) [task:453977]
  - perf/core: Fix child_total_time_enabled accounting bug at task exit (Yeoreum Yun) [task:453977]
  - drm/amdgpu/gfx11: fix num_mec (Alex Deucher) [task:453977]
  - net: ibmveth: make veth_pool_store stop hanging (Dave Marquardt) [task:453977]
  - arcnet: Add NULL check in com20020pci_probe() (Henry Martin) [task:453977]
  - ipv6: Do not consider link down nexthops in path selection (Ido Schimmel) [task:453977]
  - ipv6: Start path selection from the first nexthop (Ido Schimmel) [task:453977]
  - net: fix geneve_opt length integer overflow (Lin Ma) [task:453977]
  - net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy (David Oberhollenzer) [task:453977]
  - ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS (Fernando Fernandez Mancera) [task:453977]
  - netfilter: nft_tunnel: fix geneve_opt type confusion addition (Lin Ma) [task:453977]
  - net: decrease cached dst counters in dst_release (Antoine Tenart) [task:453977]
  - tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu(). (Guillaume Nault) [task:453977]
  - vsock: avoid timeout during connect() if the socket is closing (Stefano Garzarella) [task:453977]
  - udp: Fix memory accounting leak. (Kuniyuki Iwashima) [task:453977]
  - net: mvpp2: Prevent parser TCAM memory corruption (Tobias Waldekranz) [task:453977]
  - net_sched: skbprio: Remove overly strict queue assertions (Cong Wang) [task:453977]
  - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (Debin Zhu) [task:453977]
  - netfilter: nf_tables: don't unregister hook when table is dormant (Florian Westphal) [task:453977]
  - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Pablo Neira Ayuso) [task:453977]
  - e1000e: change k1 configuration on MTP and later platforms (Vitaly Lifshits) [task:453977]
  - ASoC: imx-card: Add NULL check in imx_card_probe() (Henry Martin) [task:453977]
  - riscv: Fix hugetlb retrieval of number of ptes in case of !present pte (Alexandre Ghiti) [task:453977]
  - ASoC: codecs: rt5665: Fix some error handling paths in rt5665_probe() (Christophe JAILLET) [task:453977]
  - x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs (Herton R. Krzesinski) [task:453977]
  - RISC-V: errata: Use medany for relocatable builds (Palmer Dabbelt) [task:453977]
  - ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA (Takashi Iwai) [task:453977]
  - firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success (Richard Fitzgerald) [task:453977]
  - ntb: intel: Fix using link status DB's (Nikita Shubin) [task:453977]
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Yajun Deng) [task:453977]
  - riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra (Juhan Jin) [task:453977]
  - spufs: fix a leak in spufs_create_context() (Al Viro) [task:453977]
  - spufs: fix gang directory lifetimes (Al Viro) [task:453977]
  - spufs: fix a leak on spufs_new_file() failure (Al Viro) [task:453977]
  - hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9} (Tasos Sahanidis) [task:453977]
  - memory: omap-gpmc: drop no compatible check (Roger Quadros) [task:453977]
  - can: statistics: use atomic access in hot path (Oliver Hartkopp) [task:453977]
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx (Navon John Lukose) [task:453977]
  - drm/amd: Keep display off while going into S4 (Mario Limonciello) [task:453977]
  - nvme-pci: fix stuck reset on concurrent DPC and HP (Keith Busch) [task:453977]
  - x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled (Vladis Dronov) [task:453977]
  - x86/hyperv: Fix output argument to hypercall that changes page visibility (Michael Kelley) [task:453977]
  - locking/semaphore: Use wake_q to wake up processes outside lock critical section (Waiman Long) [task:453977]
  - wifi: mac80211: flush the station before moving it to UN-AUTHORIZED state (Emmanuel Grumbach) [task:453977]
  - x86/hyperv/vtl: Stop kernel from probing VTL0 low memory (Naman Jain) [task:453977]
  - sched/deadline: Use online cpus for validating runtime (Shrikanth Hegde) [task:453977]
  - ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA (Stefan Binding) [task:453977]
  - ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using CS35L41 HDA (Stefan Binding) [task:453977]
  - HID: i2c-hid: improve i2c_hid_get_report error message (Wentao Guan) [task:453977]
  - platform/x86/intel/vsec: Add Diamond Rapids support (David E. Box) [task:453977]
  - platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet (Dmitry Panchenko) [task:453977]
  - cifs: fix incorrect validation for num_aces field of smb_acl (Namjae Jeon) [task:453977]
  - perf/core: Fix perf_pmu_register() vs. perf_init_event() (Peter Zijlstra) [task:453977]
  - ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0 (Daniel Bárta) [task:453977]
  - ALSA: hda/realtek: Fix Asus Z13 2025 audio (Antheas Kapenekakis) [task:453977]
  - affs: don't write overlarge OFS data block size fields (Simon Tatham) [task:453977]
  - affs: generate OFS sequence numbers starting at 1 (Simon Tatham) [task:453977]
  - wifi: brcmfmac: keep power during suspend if board requires it (Matthias Proske) [task:453977]
  - nvme-pci: skip CMB blocks incompatible with PCI P2P DMA (Icenowy Zheng) [task:453977]
  - nvme-pci: clean up CMBMSC when registering CMB fails (Icenowy Zheng) [task:453977]
  - nvme-tcp: fix possible UAF in nvme_tcp_poll (Sagi Grimberg) [task:453977]
  - wifi: iwlwifi: mvm: use the right version of the rate API (Emmanuel Grumbach) [task:453977]
  - wifi: iwlwifi: fw: allocate chained SG tables for dump (Johannes Berg) [task:453977]
  - rcu-tasks: Always inline rcu_irq_work_resched() (Josh Poimboeuf) [task:453977]
  - context_tracking: Always inline ct_{nmi,irq}_{enter,exit}() (Josh Poimboeuf) [task:453977]
  - sched/smt: Always inline sched_smt_active() (Josh Poimboeuf) [task:453977]
  - objtool: Fix verbose disassembly if CROSS_COMPILE isn't set (David Laight) [task:453977]
  - octeontx2-af: Free NIX_AF_INT_VEC_GEN irq (Geetha sowjanya) [task:453977]
  - octeontx2-af: Fix mbox INTR handler when num VFs > 64 (Geetha sowjanya) [task:453977]
  - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Giovanni Gherdovich) [task:453977]
  - LoongArch: Rework the arch_kgdb_breakpoint() implementation (Yuli Wang) [task:453977]
  - LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig (谢致邦 (XIE Zhibang)) [task:453977]
  - objtool: Fix segfault in ignore_unreachable_insn() (Josh Poimboeuf) [task:453977]
  - ring-buffer: Fix bytes_dropped calculation issue (Feng Yang) [task:453977]
  - net/mlx5e: SHAMPO, Make reserved size independent of page size (Lama Kayal) [task:453977]
  - ksmbd: fix r_count dec/increment mismatch (Namjae Jeon) [task:453977]
  - ksmbd: fix multichannel connection failure (Namjae Jeon) [task:453977]
  - ksmbd: use aead_request_free to match aead_request_alloc (Miaoqian Lin) [task:453977]
  - rndis_host: Flag RNDIS modems as WWAN devices (Lubomir Rintel) [task:453977]
  - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Mark Zhang) [task:453977]
  - exfat: fix the infinite loop in exfat_find_last_cluster() (Yuezhang Mo) [task:453977]
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Wang Zhaolong) [task:453977]
  - NFS: Shut down the nfs_client only after all the superblocks (Trond Myklebust) [task:453977]
  - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() (Josh Poimboeuf) [task:453977]
  - perf tools: annotate asm_pure_loop.S (Marcus Meissner) [task:453977]
  - fs/procfs: fix the comment above proc_pid_wchan() (Bart Van Assche) [task:453977]
  - tty: n_tty: use uint for space returned by tty_write_room() (Jiri Slaby (SUSE)) [task:453977]
  - staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES (谢致邦 (XIE Zhibang)) [task:453977]
  - perf python: Check if there is space to copy all the event (Arnaldo Carvalho de Melo) [task:453977]
  - perf python: Don't keep a raw_data pointer to consumed ring buffer space (Arnaldo Carvalho de Melo) [task:453977]
  - perf python: Decrement the refcount of just created event on failure (Arnaldo Carvalho de Melo) [task:453977]
  - perf python: Fixup description of sample.id event member (Arnaldo Carvalho de Melo) [task:453977]
  - i3c: master: svc: Fix missing the IBI rules (Stanley Chu) [task:453977]
  - um: hostfs: avoid issues on inode number reuse by host (Benjamin Berg) [task:453977]
  - um: remove copy_from_kernel_nofault_allowed (Benjamin Berg) [task:453977]
  - selftests/mm/cow: fix the incorrect error handling (Cyan Yang) [task:453977]
  - fuse: fix dax truncate/punch_hole fault path (Alistair Popple) [task:453977]
  - NFSv4: Don't trigger uneccessary scans for return-on-close delegations (Trond Myklebust) [task:453977]
  - arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig (Anshuman Khandual) [task:453977]
  - ocfs2: validate l_tree_depth to avoid out-of-bounds access (Vasiliy Kovalev) [task:453977]
  - kexec: initialize ELF lowest address to ULONG_MAX (Sourabh Jain) [task:453977]
  - kernel/events/uprobes: handle device-exclusive entries correctly in __replace_page() (David Hildenbrand) [task:453977]
  - perf units: Fix insufficient array space (Arnaldo Carvalho de Melo) [task:453977]
  - perf evlist: Add success path to evlist__create_syswide_maps (Ian Rogers) [task:453977]
  - iio: adc: ad7124: Fix comparison of channel configs (Uwe Kleine-König) [task:453977]
  - iio: adc: ad4130: Fix comparison of channel setups (Uwe Kleine-König) [task:453977]
  - dmaengine: fsl-edma: cleanup chan after dma_async_device_unregister (Peng Fan) [task:453977]
  - fs/ntfs3: Prevent integer overflow in hdr_first_de() (Dan Carpenter) [task:453977]
  - fs/ntfs3: Fix a couple integer overflows on 32bit systems (Dan Carpenter) [task:453977]
  - usb: xhci: correct debug message page size calculation (Niklas Neronin) [task:453977]
  - perf bench: Fix perf bench syscall loop count (Thomas Richter) [task:453977]
  - perf arm-spe: Fix load-store operation checking (Leo Yan) [task:453977]
  - iio: accel: msa311: Fix failure to release runtime pm if direct mode claim fails. (Jonathan Cameron) [task:453977]
  - iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio (Jonathan Cameron) [task:453977]
  - ucsi_ccg: Don't show failed to get FW build information error (Mario Limonciello) [task:453977]
  - perf pmu: Don't double count common sysfs and json events (James Clark) [task:453977]
  - coresight-etm4x: add isb() before reading the TRCSTATR (Yuanfang Zhang) [task:453977]
  - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint (Mike Christie) [task:453977]
  - coresight: catu: Fix number of pages while using 64k pages (Ilkka Koskinen) [task:453977]
  - soundwire: slave: fix an OF node reference leak in soundwire slave device (Joe Hattori) [task:453977]
  - isofs: fix KMSAN uninit-value bug in do_isofs_readdir() (Qasim Ijaz) [task:453977]
  - perf stat: Fix find_stat for mixed legacy/non-legacy events (Ian Rogers) [task:453977]
  - clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock (Barnabás Czémán) [task:453977]
  - pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm() (Andy Shevchenko) [task:453977]
  - crypto: hisilicon/sec2 - fix for aead auth key length (Wenkai Lin) [task:453977]
  - x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment (Jann Horn) [task:453977]
  - leds: Fix LED_OFF brightness race (Remi Pommarel) [task:453977]
  - mfd: sm501: Switch to BIT() to mitigate integer overflows (Nikita Zhandarovich) [task:453977]
  - pinctrl: renesas: rzv2m: Fix missing of_node_put() call (Fabrizio Castro) [task:453977]
  - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Patrisious Haddad) [task:453977]
  - crypto: nx - Fix uninitialised hv_nxc on error (Herbert Xu) [task:453977]
  - power: supply: max77693: Fix wrong conversion of charge input threshold value (Artur Weber) [task:453977]
  - x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1 (Jann Horn) [task:453977]
  - clk: amlogic: g12a: fix mmc A peripheral clock (Jerome Brunet) [task:453977]
  - clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents (Laurentiu Mihalcea) [task:453977]
  - selftests/bpf: Select NUMA_NO_NODE to create map (Saket Kumar Bhaskar) [task:453977]
  - clk: amlogic: gxbb: drop non existing 32k clock parent (Jerome Brunet) [task:453977]
  - clk: amlogic: g12b: fix cluster A parent data (Jerome Brunet) [task:453977]
  - pinctrl: tegra: Set SFIO mode to Mux Register (Prathamesh Shete) [task:453977]
  - IB/mad: Check available slots before posting receive WRs (Maher Sanalla) [task:453977]
  - remoteproc: qcom_q6v5_mss: Handle platforms with one power domain (Luca Weiss) [task:453977]
  - RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() (Cheng Xu) [task:453977]
  - RDMA/mlx5: Fix calculation of total invalidated pages (Chiara Meiohas) [task:453977]
  - RDMA/core: Don't expose hw_counters outside of init net namespace (Roman Gushchin) [task:453977]
  - clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent (Peter Geis) [task:453977]
  - pinctrl: renesas: rzg2l: Fix missing of_node_put() call (Fabrizio Castro) [task:453977]
  - pinctrl: renesas: rza2: Fix missing of_node_put() call (Fabrizio Castro) [task:453977]
  - lib: 842: Improve error handling in sw842_compress() (Tanya Agarwal) [task:453977]
  - bpf: Use preempt_count() directly in bpf_send_signal_common() (Hou Tao) [task:453977]
  - remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226 (Luca Weiss) [task:453977]
  - RDMA/mana_ib: Ensure variable err is initialized (Kees Bakker) [task:453977]
  - clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock (Vladimir Lypak) [task:453977]
  - clk: samsung: Fix UBSAN panic in samsung_clk_init() (Will McVicker) [task:453977]
  - x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() (David Hildenbrand) [task:453977]
  - selftests/bpf: Fix string read in strncmp benchmark (Viktor Malik) [task:453977]
  - libbpf: Fix hypothetical STT_SECTION extern NULL deref case (Andrii Nakryiko) [task:453977]
  - remoteproc: qcom_q6v5_pas: Make single-PD handling more robust (Luca Weiss) [task:453977]
  - of: property: Increase NR_FWNODE_REFERENCE_ARGS (Zijun Hu) [task:453977]
  - remoteproc: core: Clear table_sz when rproc_shutdown (Peng Fan) [task:453977]
  - crypto: hisilicon/sec2 - fix for aead authsize alignment (Wenkai Lin) [task:453977]
  - clk: amlogic: gxbb: drop incorrect flag on 32k clock (Jerome Brunet) [task:453977]
  - fbdev: sm501fb: Add some geometry checks. (Danila Chernetsov) [task:453977]
  - mdacon: rework dependency list (Arnd Bergmann) [task:453977]
  - fbdev: au1100fb: Move a variable assignment behind a null pointer check (Markus Elfring) [task:453977]
  - PCI: pciehp: Don't enable HPIE when resuming in poll mode (Ilpo Järvinen) [task:453977]
  - PCI: histb: Fix an error handling path in histb_pcie_probe() (Christophe JAILLET) [task:453977]
  - drm/amd/display: avoid NPD when ASIC does not support DMUB (Thadeu Lima de Souza Cascardo) [task:453977]
  - drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer() (Dan Carpenter) [task:453977]
  - drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr (Douglas Anderson) [task:453977]
  - PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe (Thippeswamy Havalige) [task:453977]
  - PCI: Remove stray put_device() in pci_register_host_bridge() (Dan Carpenter) [task:453977]
  - drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters() (Vitaliy Shevtsov) [task:453977]
  - PCI: Avoid reset when disabled via sysfs (Nishanth Aravamudan) [task:453977]
  - PCI/portdrv: Only disable pciehp interrupts early when needed (Feng Tang) [task:453977]
  - PCI: brcmstb: Fix potential premature regulator disabling (Jim Quinlan) [task:453977]
  - PCI: brcmstb: Fix error path after a call to regulator_bulk_get() (Jim Quinlan) [task:453977]
  - PCI: brcmstb: Use internal register to change link capability (Jim Quinlan) [task:453977]
  - PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload (Hans Zhang) [task:453977]
  - drm/amdkfd: Fix Circular Locking Dependency in 'svm_range_cpu_invalidate_pagetables' (Srinivasan Shanmugam) [task:453977]
  - drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host (Marijn Suijten) [task:453977]
  - drm/msm/dsi: Use existing per-interface slice count in DSC timing (Marijn Suijten) [task:453977]
  - drm/msm/dpu: don't use active in atomic_check() (Dmitry Baryshkov) [task:453977]
  - PCI/ASPM: Fix link state exit during switch upstream function removal (Daniel Stodden) [task:453977]
  - drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member (AngeloGioacchino Del Regno) [task:453977]
  - drm/mediatek: mtk_hdmi: Unregister audio platform device on failure (AngeloGioacchino Del Regno) [task:453977]
  - PCI: Use downstream bridges for distributing resources (Kai-Heng Feng) [task:453977]
  - drm/vkms: Fix use after free and double free on init error (José Expósito) [task:453977]
  - drm: xlnx: zynqmp: Fix max dma segment size (Tomi Valkeinen) [task:453977]
  - drm/bridge: it6505: fix HDCP V match check is not performed correctly (Hermes Wu) [task:453977]
  - drm/dp_mst: Fix drm RAD print (Wayne Lin) [task:453977]
  - drm/bridge: ti-sn65dsi86: Fix multiple instances (Geert Uytterhoeven) [task:453977]
  - ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible (Jayesh Choudhary) [task:453977]
  - ALSA: hda/realtek: Always honor no_shutup_pins (Takashi Iwai) [task:453977]
  - dt-bindings: vendor-prefixes: add GOcontroll (Maud Spierings) [task:453977]
  - HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER (Jiri Kosina) [task:453977]
  - ASoC: cs35l41: check the return value from spi_setup() (Vitaliy Shevtsov) [task:453977]
  - platform/x86: dell-ddv: Fix temperature calculation (Armin Wolf) [task:453977]
  - media: platform: allgro-dvt: unregister v4l2_device on the error path (Joe Hattori) [task:453977]
  - media: verisilicon: HEVC: Initialize start_bit field (Benjamin Gaignard) [task:453977]
  - x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures (Chao Gao) [task:453977]
  - x86/traps: Make exc_double_fault() consistently noreturn (Josh Poimboeuf) [task:453977]
  - perf/ring_buffer: Allow the EPOLLRDNORM flag for poll (Tao Chen) [task:453977]
  - lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*() (Sebastian Andrzej Siewior) [task:453977]
  - PM: sleep: Fix handling devices with direct_complete set on errors (Rafael J. Wysocki) [task:453977]
  - thermal: int340x: Add NULL check for adev (Chenyuan Yang) [task:453977]
  - EDAC/ie31200: Fix the error path order of ie31200_init() (Qiuxu Zhuo) [task:453977]
  - EDAC/ie31200: Fix the DIMM size mask for several SoCs (Qiuxu Zhuo) [task:453977]
  - EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer (Qiuxu Zhuo) [task:453977]
  - selinux: Chain up tool resolving errors in install_policy.sh (Tim Schumacher) [task:453977]
  - RISC-V: KVM: Disable the kernel perf counter during configure (Atish Patra) [task:453977]
  - PM: sleep: Adjust check before setting power.must_resume (Rafael J. Wysocki) [task:453977]
  - lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock (Peter Zijlstra) [task:453977]
  - x86/sev: Add missing RIP_REL_REF() invocations during sme_enable() (Kevin Loughlin) [task:453977]
  - x86/platform: Only allow CONFIG_EISA for 32-bit (Arnd Bergmann) [task:453977]
  - x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct() (Benjamin Berg) [task:453977]
  - x86/fpu: Fix guest FPU state buffer allocation size (Stanislav Spassov) [task:453977]
  - EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids (Qiuxu Zhuo) [task:453977]
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() (Jie Zhan) [task:453977]
  - smack: dont compile ipv6 code unless ipv6 is configured (Konstantin Andreev) [task:453977]
  - cpufreq: scpi: compare kHz instead of Hz (zuoqian) [task:453977]
  - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Mike Rapoport (Microsoft)) [task:453977]
  - watch_queue: fix pipe accounting mismatch (Eric Sandeen) [task:453977]
  - arm64: rsi: Add automatic arm-cca-guest module loading (Jeremy Linton)
  - KVM: x86/xen: Use guest's copy of pvclock when starting timer (Sean Christopherson)
  - KVM: Drop unused @may_block param from gfn_to_pfn_cache_invalidate_start() (Sean Christopherson)
  - KVM: Simplify error handling in __gfn_to_pfn_memslot() (Anish Moorthy)
  - KVM: Add function comments for __kvm_read/write_guest_page() (Anish Moorthy)
  - KVM: Clarify meaning of hva_to_pfn()'s 'atomic' parameter (Anish Moorthy)
  - KVM: Explicitly disallow activatating a gfn_to_pfn_cache with INVALID_GPA (Sean Christopherson)
  - KVM: Check validity of offset+length of gfn_to_pfn_cache prior to activation (Sean Christopherson)
  - KVM: Add helpers to consolidate gfn_to_pfn_cache's page split check (Sean Christopherson)
  - KVM: x86/xen: fix recursive deadlock in timer injection (David Woodhouse)
  - KVM: pfncache: simplify locking and make more self-contained (David Woodhouse)
  - KVM: x86/xen: remove WARN_ON_ONCE() with false positives in evtchn delivery (David Woodhouse)
  - KVM: x86/xen: improve accuracy of Xen timers (David Woodhouse)
  - vDPA: code clean for vhost_vdpa uapi (Zhu Lingshan) [task:451637]
  - vDPA: report virtio-blk flush info to user space (Zhu Lingshan) [task:451637]
  - vDPA: report virtio-block read-only info to user space (Zhu Lingshan) [task:451637]
  - vDPA: report virtio-block write zeroes configuration to user space (Zhu Lingshan) [task:451637]
  - vDPA: report virtio-block discarding configuration to user space (Zhu Lingshan) [task:451637]
  - vDPA: report virtio-block topology info to user space (Zhu Lingshan) [task:451637]
  - vDPA: report virtio-block MQ info to user space (Zhu Lingshan) [task:451637]
  - vDPA: report virtio-block max segments in a request to user space (Zhu Lingshan) [task:451637]
  - vDPA: report virtio-block block-size to user space (Zhu Lingshan) [task:451637]
  - vDPA: report virtio-block max segment size to user space (Zhu Lingshan) [task:451637]
  - vDPA: report virtio-block capacity to user space (Zhu Lingshan) [task:451637]
  - virtio: Add support for no-reset virtio PCI PM (David Stevens) [task:451625]
  - OPENEULER: RDMA/hns: Fix mbox timing out by adding retry mechanism (Junxian Huang) [task:435538]
  - OPENEULER: RDMA/hns: Fix some mutex UAF (wenglianfa) [task:435538]
  - OPENEULER: RDMA/hns: Fix sleeping in spin_lock critical section (wenglianfa) [task:435538]
  - OPENEULER: RDMA/hns: Fix new mmaped pages during resetting (Chengchang Tang) [task:435538]
  - RDMA/hns: Fix mismatch exception rollback (wenglianfa) [task:435538]
  - OPENEULER: RDMA/hns: Remove useless NULL check in hns_roce_get_netdev() (Chengchang Tang) [task:435538]
  - OPENEULER: net: hns3: delete redundant enabling actions for Layer 2 fowarding (Yonglong Liu) [task:435538]
  - RDMA/hns: Modify debugfs name (Yuyu Li) [task:435538]
  - OPENEULER: RDMA/hns: Fix ah error counter in sw stat not increasing (Junxian Huang) [task:435538]
  - net: hns3: move constants from hclge_debugfs.h to hclge_debugfs.c (Jijie Shao) [task:435538]
  - OPENEULER: net: hns3: fix concurrent setting vlan filter issue (Jian Shen) [task:435538]
  - OPENEULER: net: hns3: using cpumask_copy when set value to cpumask_t (Peiyang Wang) [task:435538]
  - OPENEULER: net: hns3: set irq affinity directly (Peiyang Wang) [task:435538]
  - OPENEULER: net: hns3: fix snprintf() is printing too much problem (Yonglong Liu) [task:435538]
  - OPENEULER: net: hns3: add support for Hisilicon ptp sync device (Yonglong Liu) [task:435538]
  - OPENEULER: net: hns3:support enable or disable pfc strom prevent (Peiyang Wang) [task:435538]
  - OPENEULER: RDMA/hns: Support for ROH (Chengchang Tang) [task:435538]
  - OPENEULER: net: hns3: initialize reset_timer before hclgevf_misc_irq_init() (Jian Shen) [task:435538]
  - OPENEULER: net: hns3: add \n at the end when print msg (Peiyang Wang) [task:435538]
  - OPENEULER: net: hns3: add sync command to sync io-pgtable (Jian Shen) [task:435538]
  - OPENEULER: net: hns3: default enable tx bounce buffer when smmu enabled (Peiyang Wang) [task:435538]
  - OPENEULER: net: hns3: add mac tunnel number query (Jian Shen) [task:435538]
  - OPENEULER: net: hns3: don't need to check an unsigned number is less than 0 (Peiyang Wang) [task:435538]
  - OPENEULER: RDMA/hns: Add mutex_destroy() to destroy the mutex (wenglianfa) [task:435538]
  - OPENEULER: RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE EXT_SGE (wenglianfa) [task:435538]
  - OPENEULER: RDMA/hns: Use one CQ bank per context (Chengchang Tang) [task:435538]
  - OPENEULER: RDMA/hns: Fix the modification of max_send_sge (wenglianfa) [task:435538]
  - RDMA/hns: Fix mbx timing out before CMD execution is completed (Chengchang Tang) [task:435538]
  - OPENEULER: RDMA/hns: Fix accessing invalid dip_ctx during destroying QP (Chengchang Tang) [task:435538]
  - OPENEULER: RDMA/hns: Fix different dgids mapping to the same dip_idx (Feng Fang) [task:435538]
  - OPENEULER: RDMA/hns: Add mutex_destroy() (wenglianfa) [task:435538]
  - OPENEULER: RDMA/hns: Use macro instead of magic number (Yangyang Li) [task:435538]
  - RDMA/hns: Fix flush cqe error when racing with destroy qp (wenglianfa) [task:435538]
  - OPENEULER: RDMA/hns: Fix unmatch exception handling when request_irq() fails (Junxian Huang) [task:435538]
  - OPENEULER: RDMA/hns: Fix null pointer when alloc_scc_param() fails (wenglianfa) [task:435538]
  - OPENEULER: RDMA/hns: Fix scc_param delay_work to execute after sysfs shutdown (wenglianfa) [task:435538]
  - OPENEULER: RDMA/hns: Fix incorrect variable usage in scc_attr_is_visible() (Juan Zhou) [task:435538]
  - OPENEULER: net: hns3: Fix ROH mac address initialization. (laodazhao) [task:435538]
  - fbdev: Introduce devm_register_framebuffer() (Thomas Weißschuh) [task:452954]
  - vfio/nvgrace-gpu: Add a new GH200 SKU to the devid table (Ankit Agrawal) [task:451681]
  - iov_iter: Convert iterate*() to inline funcs (David Howells) [task:388445]
  - fs: rearrange general fastpath check now that O_CREAT uses it (Christian Brauner) [task:388445]
  - fs: remove audit dummy context check (Christian Brauner) [task:388445]
  - fs: pull up trailing slashes check for O_CREAT (Christian Brauner) [task:388445]
  - fs: move audit parent inode (Christian Brauner) [task:388445]
  - fs: try an opportunistic lookup for O_CREAT opens too (Jeff Layton) [task:388445]
  - mm, page_alloc: put should_fail_alloc_page() back behing CONFIG_FAIL_PAGE_ALLOC (Vlastimil Babka) [task:388445]
  - mm, slab: put should_failslab() back behind CONFIG_SHOULD_FAILSLAB (Vlastimil Babka) [task:388445]
  - mm: support poison recovery from copy_present_page() (Kefeng Wang) [task:388445]
  - mm: support poison recovery from do_cow_fault() (Kefeng Wang) [task:388445]
  - vfs: Convert BUG_ON to WARN_ON_ONCE in open_last_lookups (Bernd Schubert) [task:388445]
  - sched: Fix put_prev_set_next_task (Huang Bing) [task:447318]
  - sched/eevdf: Force propagating min_slice of cfs_rq when {en,de}queue tasks (Tianchen Ding) [task:340825]
  - psi: Fix race when task wakes up before psi_sched_switch() adjusts flags (Chengming Zhou) [task:340825]
  - sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Peter Zijlstra) [task:340825]
  - sched/dlserver: Fix dlserver time accounting (Vineeth Pillai (Google)) [task:340825]
  - sched/dlserver: Fix dlserver double enqueue (Vineeth Pillai (Google)) [task:340825]
  - sched/fair: Fix NEXT_BUDDY (K Prateek Nayak) [task:340825]
  - sched/deadline: Fix replenish_dl_new_period dl_server condition (Juri Lelli) [task:340825]
  - sched: psi: pass enqueue/dequeue flags to psi callbacks directly (Johannes Weiner) [task:340825]
  - sched: Fix pick_next_task_fair() vs try_to_wake_up() race (Peter Zijlstra) [task:340825]
  - sched: Split out __schedule() deactivate task logic into a helper (John Stultz) [task:340825]
  - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running (Chen Yu) [task:340825]
  - sched/fair: Fix external p->on_rq users (Peter Zijlstra) [task:340825]
  - sched/psi: Fix mistaken CPU pressure indication after corrupted task state bug (Johannes Weiner) [task:340825]
  - sched/core: Dequeue PSI signals for blocked tasks that are delayed (Peter Zijlstra) [task:340825]
  - sched: Fix delayed_dequeue vs switched_from_fair() (Peter Zijlstra) [task:340825]
  - sched: Fix sched_delayed vs cfs_bandwidth (Mike Galbraith) [task:340825]
  - sched: Fix sched_delayed vs sched_core (Peter Zijlstra) [task:340825]
  - sched/core: Introduce SM_IDLE and an idle re-entry fast-path in __schedule() (Peter Zijlstra) [task:340825]
  - sched/fair: Properly deactivate sched_delayed task upon class change (Valentin Schneider) [task:340825]
  - sched/eevdf: Propagate min_slice up the cgroup hierarchy (Peter Zijlstra) [task:340825]
  - sched/eevdf: Use sched_attr::sched_runtime to set request/slice suggestion (Peter Zijlstra) [task:340825]
  - sched/fair: Avoid re-setting virtual deadline on 'migrations' (Peter Zijlstra) [task:340825]
  - sched/eevdf: Fixup PELT vs DELAYED_DEQUEUE (Peter Zijlstra) [task:340825]
  - sched/eevdf: Allow shorter slices to wakeup-preempt (Peter Zijlstra) [task:340825]
  - sched/fair: Prepare exit/cleanup paths for delayed_dequeue (Peter Zijlstra) [task:340825]
  - sched/fair: Prepare pick_next_task() for delayed dequeue (Peter Zijlstra) [task:340825]
  - sched/fair: Implement DELAY_ZERO (Peter Zijlstra) [task:340825]
  - sched/fair: Implement ENQUEUE_DELAYED (Peter Zijlstra) [task:340825]
  - sched/fair: Implement delayed dequeue (Peter Zijlstra) [task:340825]
  - sched: Teach dequeue_task() about special task states (Peter Zijlstra) [task:340825]
  - sched,freezer: Mark TASK_FROZEN special (Peter Zijlstra) [task:340825]
  - sched/fair: Assert {set_next,put_prev}_entity() are properly balanced (Peter Zijlstra) [task:340825]
  - sched/uclamg: Handle delayed dequeue (Peter Zijlstra) [task:340825]
  - sched: Prepare generic code for delayed dequeue (Peter Zijlstra) [task:340825]
  - sched: Split DEQUEUE_SLEEP from deactivate_task() (Peter Zijlstra) [task:340825]
  - sched/fair: Re-organize dequeue_task_fair() (Peter Zijlstra) [task:340825]
  - sched/eevdf: Add feature comments (Peter Zijlstra) [task:340825]
  - sched/eevdf: Remove min_vruntime_copy (Peter Zijlstra) [task:340825]
  - sched/rt: Rename realtime_{prio, task}() to rt_or_dl_{prio, task}() (Qais Yousef) [task:340825]
  - sched/rt, dl: Convert functions to return bool (Qais Yousef) [task:340825]
  - sched/rt: Clean up usage of rt_task() (Qais Yousef) [task:340825]
  - sched/fair: Make balance_fair() test sched_fair_runnable() instead of rq->nr_running (Tejun Heo) [task:340825]
  - sched/debug: Fix fair_server_period_max value (Dan Carpenter) [task:340825]
  - sched/fair: Cleanup fair_server (Peter Zijlstra) [task:340825]
  - sched/rt: Remove default bandwidth control (Peter Zijlstra) [task:340825]
  - sched/core: Fix picking of tasks for core scheduling with DL server (Joel Fernandes (Google)) [task:340825]
  - sched/core: Fix priority checking for DL server picks (Joel Fernandes (Google)) [task:340825]
  - sched/fair: Fair server interface (Daniel Bristot de Oliveira) [task:340825]
  - sched/deadline: Deferrable dl server (Daniel Bristot de Oliveira) [task:340825]
  - sched/fair: Add trivial fair server (Peter Zijlstra) [task:340825]
  - sched/deadline: Comment sched_dl_entity::dl_server variable (Daniel Bristot de Oliveira) [task:340825]
  - sched/fair: Remove cfs_rq::nr_spread_over and cfs_rq::exec_clock (Chuyi Zhou) [task:340825]
  - sched/core: Add WARN_ON_ONCE() to check overflow for migrate_disable() (Peilin He) [task:340825]
  - sched: Initialize the vruntime of a new task when it is first enqueued (Zhang Qiao) [task:340825]
  - sched: remove HZ_BW feature hedge (Phil Auld) [task:340825]
  - sched/fair: Fix typos in comments (Ingo Molnar) [task:340825]
  - sched/nohz: Update comments about NEWILB_KICK (Joel Fernandes (Google)) [task:340825]
  - vsock: enable SOCK_SUPPORT_ZC bit (Arseniy Krasnov) [task:451609]
  - vsock: check for MSG_ZEROCOPY support on send (Arseniy Krasnov) [task:451609]
  - KVM: x86/xen: allow vcpu_info content to be 'safely' copied (Paul Durrant)
  - KVM: pfncache: check the need for invalidation under read lock first (Paul Durrant)
  - KVM: x86/xen: advertize the KVM_XEN_HVM_CONFIG_SHARED_INFO_HVA capability (Paul Durrant)
  - KVM: selftests: re-map Xen's vcpu_info using HVA rather than GPA (Paul Durrant)
  - KVM: selftests: map Xen's shared_info page using HVA rather than GFN (Paul Durrant)
  - KVM: x86/xen: allow vcpu_info to be mapped by fixed HVA (Paul Durrant)
  - KVM: x86/xen: allow shared_info to be mapped by fixed HVA (Paul Durrant)
  - KVM: x86/xen: re-initialize shared_info if guest (32/64-bit) mode is set (Paul Durrant)
  - KVM: x86/xen: separate initialization of shared_info cache and content (Paul Durrant)
  - KVM: pfncache: allow a cache to be activated with a fixed (userspace) HVA (Paul Durrant)
  - KVM: s390: Refactor kvm_is_error_gpa() into kvm_is_gpa_in_memslot() (Sean Christopherson)
  - KVM: pfncache: include page offset in uhva and use it consistently (Paul Durrant)
  - KVM: pfncache: stop open-coding offset_in_page() (Paul Durrant)
  - KVM: pfncache: remove KVM_GUEST_USES_PFN usage (Paul Durrant)
  - KVM: pfncache: add a mark-dirty helper (Paul Durrant)
  - KVM: x86/xen: mark guest pages dirty with the pfncache lock held (Paul Durrant)
  - KVM: pfncache: remove unnecessary exports (Paul Durrant)
  - KVM: pfncache: Add a map helper function (Paul Durrant)
  - treewide: remove CONFIG_HAVE_KVM (Paolo Bonzini)
  - vfio: replace CONFIG_HAVE_KVM with IS_ENABLED(CONFIG_KVM) (Paolo Bonzini)
  - x86: replace CONFIG_HAVE_KVM with IS_ENABLED(CONFIG_KVM) (Paolo Bonzini)
  - MIPS: introduce Kconfig for MIPS VZ (Paolo Bonzini)
  - kvm: move "select IRQ_BYPASS_MANAGER" to common code (Paolo Bonzini)
  - KVM: remove unnecessary #ifdef (Paolo Bonzini)
  - kvm: replace __KVM_HAVE_READONLY_MEM with Kconfig symbol (Paolo Bonzini)
  - KVM: arm64: move ARM-specific defines to uapi/asm/kvm.h (Paolo Bonzini)
  - KVM: s390: move s390-specific structs to uapi/asm/kvm.h (Paolo Bonzini)
  - KVM: powerpc: move powerpc-specific structs to uapi/asm/kvm.h (Paolo Bonzini)
  - KVM: x86: move x86-specific structs to uapi/asm/kvm.h (Paolo Bonzini)
  - KVM: remove more traces of device assignment UAPI (Paolo Bonzini)
  - kvm: x86: use a uapi-friendly macro for GENMASK (Paolo Bonzini)
  - kvm: x86: use a uapi-friendly macro for BIT (Dionna Glaze)
  - uapi: introduce uapi-friendly macros for GENMASK (Paolo Bonzini)
  - OPENEULER: irqchip/gic-v4.1:Check whether indirect table is supported in allocate_vpe_l1_table (Kunkun Jiang) [task:435539]
  - OPENEULER: KVM: arm64: vgic-v3: Fix a issue of hip10 erratum 162200806 (Kunkun Jiang) [task:435539]
  - OPENEULER: irqchip/gic-v3: Exclude GICv4.1 for hip10 erratum 162200803 (Zhou Wang) [task:435539]
  - OPENEULER: irqchip: gicv3: Add workaround for hip09 erratum 162200806 (Kunkun Jiang) [task:435539]
  - OPENEULER: irqchip: gicv3: Add workaround for hip09 erratum 162200803 (Xiang Chen) [task:435539]
  - add phytium sram driver support. (xiongxin) [task:441149]
  - cpci_3544 fix build error in cpci_3544com.c (tianyaxiong) [task:441149]
  - cpci_8554: fix build error (xiaopei01) [task:441149]
  - cpci_8554 fix build error in cpci8554_drv.c (tianyaxiong) [task:441149]
  - cpci_8554 fix build waring in cpci8554_drv.c (tianyaxiong) [task:441149]
  - diox96: Solve compilation problems (tianyaxiong) [task:441149]
  - diox96: Added diox96 driver (tianyaxiong) [task:441149]
  - cpci_8554 Added cpci_8554 driver (tianyaxiong) [task:441149]
  - cpci_3544: Added cpci_3544 serial driver (tianyaxiong) [task:441149]
  - buf2dma: add buf2dma controller support (XiongXin) [task:441149]
  - kv_input: add virtual input driver (Hongyu Xie) [task:441149]
  - vtscreen: Added virtual touchscreen driver (tianyaxiong) [task:441149]
  - vtty: Added virtual tty driver (tianyaxiong) [task:441149]
  - char: fix compile error when enable CONFIG_KYLIN_OSAL (huangchao) [task:441149]
  - Panic: show bluescreen on panic (huanglei) [task:441149]
  - char: Add kylin osal support (Huang Chao) [task:441149]
  - Panic: Use normal file as pstore backend to storage dmesg log after machine on panic (xubo) [task:441149]
  - lowmemorykiller: add sysfs interface for lowmemory (limiao) [task:441149]
  - lowmemorykiller: add lowmemory killer driver to klad (limiao) [task:441149]
  - arm64: generic_defconfig: disable ARM-FFA (huanfuxi) [task:446854]
  - vfio/migration: Add debugfs to live migration driver (Longfang Liu) [task:451629]
  - iommu/arm-smmu-v3: add missing MODULE_DESCRIPTION() macro (Jeff Johnson) [task:435539]
  - iommu/arm-smmuv3: Update comments about ATS and bypass (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Fix a NULL vs IS_ERR() check (Dan Carpenter) [task:435539]
  - iommu/arm-smmu-v3: Enable HTTU for stage1 with io-pgtable mapping (Kunkun Jiang) [task:435539]
  - iommu/arm-smmu-v3: Add support for dirty tracking in domain alloc (Joao Martins) [task:435539]
  - iommu/io-pgtable-arm: Add read_and_clear_dirty() support (Shameer Kolothum) [task:435539]
  - iommu/arm-smmu-v3: Add feature detection for HTTU (Jean-Philippe Brucker) [task:435539]
  - iommu/arm-smmu-v3: Add support for domain_alloc_user fn (Shameer Kolothum) [task:435539]
  - iommu/arm-smmu-v3: Allow setting a S1 domain to a PASID (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Allow a PASID to be set when RID is IDENTITY/BLOCKED (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Allow IDENTITY/BLOCKED to be set while PASID is used (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Put the SVA mmu notifier in the smmu_domain (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Keep track of arm_smmu_master_domain for SVA (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Make SVA allocate a normal arm_smmu_domain (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Thread SSID through the arm_smmu_attach_*() interface (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Do not use master->sva_enable to restrict attaches (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Add ssid to struct arm_smmu_master_domain (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Make changing domains be hitless for ATS (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Make smmu_domain->devices into an allocated list (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Start building a generic PASID layer (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Convert to domain_alloc_sva() (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Avoid uninitialized asid in case of error (Mostafa Saleh) [task:435539]
  - iommu/arm-smmu-v3: Make the kunit into a module (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Add unit tests for arm_smmu_write_entry (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Build the whole CD in arm_smmu_make_s1_cd() (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Move the CD generation for SVA into a function (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Allocate the CD table entry in advance (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Make arm_smmu_alloc_cd_ptr() (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Consolidate clearing a CD table entry (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Move the CD generation for S1 domains into a function (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Make CD programming use arm_smmu_write_entry() (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Add an ops indirection to the STE code (Jason Gunthorpe) [task:435539]
  - iommu: Add ops->domain_alloc_sva() (Jason Gunthorpe) [task:435539]
  - iommu: Pass domain to remove_dev_pasid() op (Yi Liu) [task:435539]
  - iommu/arm-smmu-v3: Add a type for the CD entry (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Do not ATC invalidate the entire domain (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Do not allow a SVA domain to be set on the wrong PASID (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Fix access for STE.SHCFG (Mostafa Saleh) [task:435539]
  - iommu/arm-smmu-v3: Add cpu_to_le64() around STRTAB_STE_0_V (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Convert to domain_alloc_paging() (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Pass arm_smmu_domain and arm_smmu_device to finalize (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Use the identity/blocked domain during release (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Add a global static BLOCKED domain (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Add a global static IDENTITY domain (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Check that the RID domain is S1 in SVA (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Remove arm_smmu_master->domain (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Pass smmu_domain to arm_enable/disable_ats() (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Put writing the context descriptor in the right order (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Do not change the STE twice during arm_smmu_attach_dev() (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Compute the STE only once for each master (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Hold arm_smmu_asid_lock during all of attach_dev (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Build the whole STE in arm_smmu_make_s2_domain_ste() (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Move the STE generation for S1 and S2 domains into functions (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Consolidate the STE generation for abort/bypass (Jason Gunthorpe) [task:435539]
  - iommu/arm-smmu-v3: Make STE programming independent of the callers (Jason Gunthorpe) [task:435539]
  - iommu: Introduce iommu_group_mutex_assert() (Vasant Hegde) [task:435539]
  - iommu/arm-smmu-v3: disable stall for quiet_cd (Wenkai Lin) [task:435539]
  - vfio/mtty: Enable migration support (Alex Williamson) [task:451613]
  - HYGON: perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4h-7h and 10h (Qi Liu) [bug:340114]
  - CIFS: New mount option for cifs.upcall namespace resolution (Ritvik Budhiraja) [task:452659] {CVE-2025-2312}
  - virtio_pmem: Add freeze/restore callbacks (Philip Chen) [task:451626]
  - nvdimm: virtio_pmem: drop owner assignment (Krzysztof Kozlowski) [task:451626]
  - virtio_pmem: support feature SHMEM_REGION (Changyuan Lyu) [task:451626]
  - KVM: arm64: PMU: Set raw values from user to PM{C,I}NTEN{SET,CLR}, PMOVS{SET,CLR} (Akihiko Odaki)
  - arm64/sysreg: Enforce whole word match for open/close tokens (James Clark)
  - arm64/sysreg: Allow a 'Mapping' descriptor for system registers (Marc Zyngier)
  - KVM: arm64: Fix kvm_has_feat*() handling of negative features (Marc Zyngier)
  - KVM: arm64: Destroy mpidr_data for 'late' vCPU creation (Oliver Upton)
  - KVM: arm64: Don't initialize idreg debugfs w/ preemption disabled (Oliver Upton)
  - KVM: arm64: Add debugfs file for guest's ID registers (Marc Zyngier)
  - KVM: arm64: Snapshot all non-zero RES0/RES1 sysreg fields for later checking (Marc Zyngier)
  - KVM: arm64: Make FEAT_MOPS UNDEF if not advertised to the guest (Marc Zyngier)
  - KVM: arm64: Make AMU sysreg UNDEF if FEAT_AMU is not advertised to the guest (Marc Zyngier)
  - KVM: arm64: Make PIR{,E0}_EL1 UNDEF if S1PIE is not advertised to the guest (Marc Zyngier)
  - KVM: arm64: Make TLBI OS/Range UNDEF if not advertised to the guest (Marc Zyngier)
  - KVM: arm64: Streamline save/restore of HFG[RW]TR_EL2 (Marc Zyngier)
  - KVM: arm64: Move existing feature disabling over to FGU infrastructure (Marc Zyngier)
  - KVM: arm64: Propagate and handle Fine-Grained UNDEF bits (Marc Zyngier)
  - KVM: arm64: Add Fine-Grained UNDEF tracking information (Marc Zyngier)
  - KVM: arm64: Rename __check_nv_sr_forward() to triage_sysreg_trap() (Marc Zyngier)
  - KVM: arm64: Use the xarray as the primary sysreg/sysinsn walker (Marc Zyngier)
  - KVM: arm64: Register AArch64 system register entries with the sysreg xarray (Marc Zyngier)
  - KVM: arm64: Always populate the trap configuration xarray (Marc Zyngier)
  - KVM: arm64: nv: Move system instructions to their own sys_reg_desc array (Marc Zyngier)
  - KVM: arm64: Drop the requirement for XARRAY_MULTI (Marc Zyngier)
  - KVM: arm64: nv: Turn encoding ranges into discrete XArray stores (Marc Zyngier)
  - KVM: arm64: nv: Correctly handle negative polarity FGTs (Marc Zyngier)
  - KVM: arm64: Unify HDFG[WR]TR_GROUP FGT identifiers (Marc Zyngier)
  - KVM: arm64: nv: Drop sanitised_sys_reg() helper (Marc Zyngier)
  - KVM: arm64: nv: Add sanitising to VNCR-backed HCRX_EL2 (Marc Zyngier)
  - KVM: arm64: nv: Add sanitising to VNCR-backed FGT sysregs (Marc Zyngier)
  - KVM: arm64: nv: Add sanitising to EL2 configuration registers (Marc Zyngier)
  - KVM: arm64: nv: Add sanitising to VNCR-backed sysregs (Marc Zyngier)
  - KVM: arm64: Add feature checking helpers (Marc Zyngier)
  - arm64: sysreg: Add missing ID_AA64ISAR[13]_EL1 fields and variants (Marc Zyngier)
  - kselftest/arm64: Don't probe the current VL for unsupported vector types (Mark Brown)
  - KVM: arm64: nv: Handle virtual EL2 registers in vcpu_read/write_sys_reg() (Marc Zyngier)
  - KVM: arm64: nv: Map VNCR-capable registers to a separate page (Marc Zyngier)
  - KVM: arm64: Trap external trace for protected VMs (Fuad Tabba)
  - KVM: arm64: Mark PAuth as a restricted feature for protected VMs (Fuad Tabba)
  - KVM: arm64: Fix which features are marked as allowed for protected VMs (Fuad Tabba)
  - KVM: arm64: Macros for setting/clearing FGT bits (Fuad Tabba)
  - KVM: arm64: Define FGT nMASK bits relative to other fields (Fuad Tabba)
  - KVM: arm64: Use generated FGT RES0 bits instead of specifying them (Fuad Tabba)
  - KVM: arm64: Add build validation for FGT trap mask values (Fuad Tabba)
  - KVM: arm64: Update and fix FGT register masks (Fuad Tabba)
  - KVM: arm64: Handle HAFGRTR_EL2 trapping in nested virt (Fuad Tabba)
  - KVM: arm64: Add bit masks for HAFGRTR_EL2 (Fuad Tabba)
  - KVM: arm64: Add missing HFGITR_EL2 FGT entries to nested virt (Fuad Tabba)
  - KVM: arm64: Add missing HFGxTR_EL2 FGT entries to nested virt (Fuad Tabba)
  - KVM: arm64: Explicitly trap unsupported HFGxTR_EL2 features (Fuad Tabba)
  - KVM: selftests: aarch64: vPMU test for validating user accesses (Raghavendra Rao Ananta)
  - KVM: selftests: aarch64: vPMU register test for unimplemented counters (Reiji Watanabe)
  - KVM: selftests: aarch64: vPMU register test for implemented counters (Reiji Watanabe)
  - KVM: selftests: aarch64: Introduce vpmu_counter_access test (Reiji Watanabe)
  - tools: Import arm_pmuv3.h (Raghavendra Rao Ananta)
  - KVM: arm64: PMU: Allow userspace to limit PMCR_EL0.N for the guest (Reiji Watanabe)
  - KVM: arm64: Sanitize PM{C,I}NTEN{SET,CLR}, PMOVS{SET,CLR} before first run (Raghavendra Rao Ananta)
  - KVM: arm64: Add {get,set}_user for PM{C,I}NTEN{SET,CLR}, PMOVS{SET,CLR} (Raghavendra Rao Ananta)
  - KVM: arm64: PMU: Set PMCR_EL0.N for vCPU based on the associated PMU (Raghavendra Rao Ananta)
  - KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0 (Reiji Watanabe)
  - KVM: arm64: Select default PMU in KVM_ARM_VCPU_INIT handler (Reiji Watanabe)
  - KVM: arm64: Add PMU event filter bits required if EL3 is implemented (Oliver Upton)
  - KVM: arm64: Make PMEVTYPER<n>_EL0.NSH RES0 if EL2 isn't advertised (Oliver Upton)
  - KVM: arm64: PMU: Introduce helpers to set the guest's PMU (Reiji Watanabe)
  - KVM: arm64: Move VTCR_EL2 into struct s2_mmu (Marc Zyngier)
  - KVM: arm64: Use mtree_empty() to determine if SMCCC filter configured (Oliver Upton)
  - KVM: arm64: Only insert reserved ranges when SMCCC filter is used (Oliver Upton)
  - KVM: arm64: Add a predicate for testing if SMCCC filter is configured (Oliver Upton)
  - KVM: arm64: Advertise selected DebugVer in DBGDIDR.Version (Oliver Upton)
  - KVM: arm64: Clarify the ordering requirements for vcpu/RD creation (Marc Zyngier)
  - KVM: arm64: vgic-v3: Optimize affinity-based SGI injection (Marc Zyngier)
  - KVM: arm64: Fast-track kvm_mpidr_to_vcpu() when mpidr_data is available (Marc Zyngier)
  - KVM: arm64: Build MPIDR to vcpu index cache at runtime (Marc Zyngier)
  - KVM: arm64: Simplify kvm_vcpu_get_mpidr_aff() (Marc Zyngier)
  - KVM: arm64: Use vcpu_idx for invalidation tracking (Marc Zyngier)
  - KVM: arm64: vgic: Use vcpu_idx for the debug information (Marc Zyngier)
  - KVM: arm64: vgic-v3: Refactor GICv3 SGI generation (Marc Zyngier)
  - KVM: arm64: vgic-its: Treat the collection target address as a vcpu_id (Marc Zyngier)
  - KVM: arm64: vgic: Make kvm_vgic_inject_irq() take a vcpu pointer (Marc Zyngier)
  - kselftest/arm64: Verify HWCAP2_SVE_B16B16 (Mark Brown)
  - arm64/sve: Report FEAT_SVE_B16B16 to userspace (Mark Brown)
  - Revert "KVM: arm64: Calculate cptr_el2 traps on activating traps" (Jackie Liu)
  - Revert "KVM: arm64: Eagerly switch ZCR_EL{1,2}" (Jackie Liu)
  - scsi: ufs: core: Fix use-after free in init error and remove paths (André Draszik) [task:441331] {CVE-2025-21739}
  - scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove() (Manivannan Sadhasivam) [task:441331]
  - scsi: ufs: core: Store min and max clk freq from OPP table (Nitin Rawat) [task:441331]
  - scsi: ufs: pltfrm: Disable runtime PM during removal of glue drivers (Manivannan Sadhasivam) [task:441331]
  - scsi: ufs: Convert all platform drivers to return void (Uwe Kleine-König) [task:441331]
  - scsi: ufs: core: Add support for parsing OPP (Manivannan Sadhasivam) [task:441331]
  - fbdev: hyperv_fb: Allow graceful removal of framebuffer (Saurabh Sengar) [task:450275] {CVE-2025-21976}
  - fbdev: hyperv_fb: Simplify hvfb_putmem (Saurabh Sengar) [task:450275]
  - fbdev/hyperv_fb: Use fb_ops helpers for deferred I/O (Thomas Zimmermann) [task:450275]
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush() (John Keeping) [task:451901]
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (Luo Qiu) [task:451901]
  - net: usb: usbnet: restore usb%d name exception for local mac addresses (Dominique Martinet) [task:451901]
  - net: usb: qmi_wwan: add Telit Cinterion FE990B composition (Fabio Porcedda) [task:451901]
  - net: usb: qmi_wwan: add Telit Cinterion FN990B composition (Fabio Porcedda) [task:451901]
  - tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers (Sherry Sun) [task:451901]
  - tty: serial: 8250: Add Brainboxes XC devices (Cameron Williams) [task:451901]
  - tty: serial: 8250: Add some more device IDs (Cameron Williams) [task:451901]
  - counter: microchip-tcb-capture: Fix undefined counter channel state on probe (William Breathitt Gray) [task:451901]
  - counter: stm32-lptimer-cnt: fix error handling when enabling (Fabrice Gasnier) [task:451901]
  - ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx (Dhruv Deshpande) [task:451901]
  - netfilter: socket: Lookup orig tuple for IPv6 SNAT (Maxim Mikityanskiy) [task:451901]
  - mm/page_alloc: fix memory accept before watermarks gets initialized (Kirill A. Shutemov) [task:451901]
  - drm/amd/display: Don't write DP_MSTM_CTRL after LT (Wayne Lin) [task:451901]
  - drm/dp_mst: Add a helper to queue a topology probe (Imre Deak) [task:451901]
  - drm/dp_mst: Factor out function to queue a topology probe work (Imre Deak) [task:451901]
  - ARM: Remove address checking for MMUless devices (Yanjun Yang) [task:451901]
  - ARM: 9351/1: fault: Add "cut here" line for prefetch aborts (Kees Cook) [task:451901]
  - ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed() (Kees Cook) [task:451901]
  - atm: Fix NULL pointer dereference (Minjoong Kim) [task:451901]
  - HID: hid-plantronics: Add mic mute mapping and generalize quirks (Terry Junge) [task:451901]
  - ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names (Terry Junge) [task:451901]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-31.v2505
changelog:
  - configs/fs: enable ecryptfs build (mengdehui) [bug:346892]
  - configs/tpm: disable tpm hmac build config (mengdehui) [bug:346438]
  - kabi: modify the position of the reserved field of kabi (jianghaoran) [task:339533]
  - YUTAI: Solves compiler 64-bit and 32-bit definition data type problems (luoqing) [task:457310]
  - net: yt6801: compatible with 32bit system (Frank Sae) [task:457310]
  - yt6801: mark YT6801 module support by partner (luoqing) [task:457310]
  - YUTAI: yt6801: add yt6801 driver support (Frank Sae) [task:457310]
  - config: enable CONFIG_GPU_709_LJMCORE (Shixiong Ou) [task:403741]
  - 3rd/csmcore: add GP20* support (Shixiong Ou) [task:403741]
  - iommu: fix compile error by unused label (Yufeng Wang) [task:457757]
  - hda/sn6186: add CONFIG_SND_HDA_CODEC_SENARYTECH to m (songxiebing) [task:456885]
  - ALSA: hda/senarytech: add senarytech codec support (bo liu) [task:343587]
  - md: fix mddev uaf while iterating all_mddevs list (Yu Kuai) [task:458964] {CVE-2025-22126}
  - bpf: Fix array bounds error with may_goto (Jiayuan Chen) [task:458950] {CVE-2025-22087}
  - ext4: goto right label 'out_mmap_sem' in ext4_setattr() (Baokun Li) [task:458931] {CVE-2025-22120}
  - wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path (Manivannan Sadhasivam) [task:458901] {CVE-2025-23129}
  - memcg-v1: remove memcg move locking code (Shakeel Butt) [task:447145]
  - memcg-v1: no need for memcg locking for MGLRU (Shakeel Butt) [task:447145]
  - memcg-v1: no need for memcg locking for writeback tracking (Shakeel Butt) [task:447145]
  - memcg-v1: no need for memcg locking for dirty tracking (Shakeel Butt) [task:447145]
  - memcg-v1: remove charge move code (Shakeel Butt) [task:447145]
  - memcg-v1: fully deprecate move_charge_at_immigrate (Shakeel Butt) [task:447145]
  - mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify() (Yu Zhao) [task:447145]
  - mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats (Yu Zhao) [task:447145]
  - memcg: make v1 only functions static (Shakeel Butt) [task:447145]
  - memcg: move v1 events and statistics code to v1 file (Shakeel Butt) [task:447145]
  - memcg: move mem_cgroup_charge_statistics to v1 code (Shakeel Butt) [task:447145]
  - memcg: move mem_cgroup_event_ratelimit to v1 code (Shakeel Butt) [task:447145]
  - memcg: move v1 only percpu stats in separate struct (Shakeel Butt) [task:447145]
  - doc: improve the description of __folio_mark_dirty (Matthew Wilcox (Oracle)) [task:447145]
  - fs: use kmem_cache_create_rcu() (Christian Brauner) [task:444220]
  - mm: add kmem_cache_create_rcu() (Christian Brauner) [task:444220]
  - mm: remove unused argument from create_cache() (Christian Brauner) [task:444220]
  - file: reclaim 24 bytes from f_owner (Christian Brauner) [task:444220]
  - mm/slab: Introduce kmem_buckets_create() and family (Kees Cook) [task:444220]
  - mm/slab: Introduce kvmalloc_buckets_node() that can take kmem_buckets argument (Kees Cook) [task:444220]
  - mm/slab: Plumb kmem_buckets into __do_kmalloc_node() (Kees Cook) [task:444220]
  - mm/slab: Introduce kmem_buckets typedef (Kees Cook) [task:444220]
  - LOONGSON: drm/loongson: To replace the drm_ast driver with the drm_ast_loongson driver (gaojuxin) [task:396165]
  - LoongArch: drm/radeon: Workaround radeon driver bug for Loongson (Huacai Chen) [task:396165]
  - LOONGSON: drm/loongson: use old version of ast driver for LoongArch platform (gaojuxin) [task:396165]
  - bpf: Add bpf_task_from_vpid() kfunc (Juntong Deng)
  - f2fs: quota: fix to avoid warning in dquot_writeback_dquots() (Chao Yu) [task:458576] {CVE-2025-23132}
  - f2fs: fix double free of f2fs_sb_info (Eric Biggers) [task:458576]
  - f2fs: move release of block devices to after kill_block_super() (Eric Biggers) [task:458576]
  - bpf/selftests: coverage for tp and perf event progs using kfuncs (JP Kobryn)
  - bpf: allow kfuncs within tracepoint and perf event programs (JP Kobryn)
  - bpf: use type_may_be_null() helper for nullable-param check (Shung-Hsi Yu)
  - selftests/bpf: Test bpf_kptr_xchg stashing into local kptr (Dave Marchevsky)
  - bpf: Support bpf_kptr_xchg into local kptr (Dave Marchevsky)
  - bpf: Rename ARG_PTR_TO_KPTR -> ARG_KPTR_XCHG_DEST (Dave Marchevsky)
  - bpf: Search for kptrs in prog BTF structs (Dave Marchevsky)
  - bpf: Let callers of btf_parse_kptr() track life cycle of prog btf (Amery Hung)
  - bpf: Unmask upper DSCP bits in bpf_fib_lookup() helper (Ido Schimmel)
  - bpf: Fix percpu address space issues (Uros Bizjak)
  - bpf: Use kmemdup_array instead of kmemdup for multiple allocation (Yu Jiaoliang)
  - bpf: Allow bpf_current_task_under_cgroup() with BPF_CGROUP_* (Matteo Croce)
  - bpf: Enable generic kfuncs for BPF_CGROUP_* programs (Matteo Croce)
  - bpf/bpf_get,set_sockopt: add option to set TCP-BPF sock ops flags (Alan Maguire)
  - mm/util: Swap kmemdup_array() arguments (Jean-Philippe Brucker)
  - string: Add additional __realloc_size() annotations for "dup" helpers (Kees Cook)
  - kunit/fortify: Rename tests to use recommended conventions (Kees Cook)
  - fortify: Improve buffer overflow reporting (Kees Cook)
  - fortify: Add KUnit tests for runtime overflows (Kees Cook)
  - fortify: Provide KUnit counters for failure testing (Kees Cook)
  - fortify: Split reporting and avoid passing string pointer (Kees Cook)
  - fortify: Allow KUnit test to build without FORTIFY (Kees Cook)
  - soc/tegra: fuse: Add function to add lookups (Kartik)
  - mm/util: Introduce kmemdup_array() (Kartik)
  - config/tpm: set tpm driver into kernel for ima (mengdehui) [task:442061]
  - Revert "OPENEULER: crypto: ccp: Add Hygon CSV support" (mengdehui) [task:453020]
  - Set the default loongarch cpu_hwmon option is n (sunshaojie) [task:454291]
  - usb: xhci: Apply the link chain quirk on NEC isoc endpoints (Michal Pecio) [task:458303] {CVE-2025-22022}
  - usb: xhci: move link chain bit quirk checks into one helper function. (Niklas Neronin) [task:458303]
  - mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true (Yuanchu Xie) [task:447145]
  - mm: shrink skip folio mapped by an exiting process (Zhiguo Jiang) [task:447145]
  - mm: memcg1: convert charge move flags to unsigned long long (Roman Gushchin) [task:447145]
  - mm: memcg: put struct task_struct::in_user_fault under CONFIG_MEMCG_V1 (Roman Gushchin) [task:447145]
  - mm: memcg: put struct task_struct::memcg_in_oom under CONFIG_MEMCG_V1 (Roman Gushchin) [task:447145]
  - mm: memcg: guard memcg1-specific members of struct mem_cgroup_per_node (Roman Gushchin) [task:447145]
  - mm: memcg: put memcg1-specific struct mem_cgroup's members under CONFIG_MEMCG_V1 (Roman Gushchin) [task:447145]
  - mm: memcg: guard memcg1-specific fields accesses in mm/memcontrol.c (Roman Gushchin) [task:447145]
  - mm: memcg: gather memcg1-specific fields initialization in memcg1_memcg_init() (Roman Gushchin) [task:447145]
  - mm: memcg: guard cgroup v1-specific code in mem_cgroup_print_oom_meminfo() (Roman Gushchin) [task:447145]
  - mm: memcg: factor out legacy socket memory accounting code (Roman Gushchin) [task:447145]
  - mm: memcg: move memcg_account_kmem() to memcontrol-v1.c (Roman Gushchin) [task:447145]
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (Maurizio Lombardi) [task:450245] {CVE-2025-21927}
  - mm/mglru: improve swappiness handling (Kinsey Ho) [task:447145]
  - mm/mglru: improve struct lru_gen_mm_walk (Kinsey Ho) [task:447145]
  - mm/mglru: improve reset_mm_stats() (Kinsey Ho) [task:447145]
  - mm/mglru: improve should_run_aging() (Kinsey Ho) [task:447145]
  - mm/mglru: drop unused parameter (Kinsey Ho) [task:447145]
  - mm/mglru: remove CONFIG_TRANSPARENT_HUGEPAGE (Kinsey Ho) [task:447145]
  - mm/mglru: add dummy pmd_dirty() (Kinsey Ho) [task:447145]
  - mm/mglru: remove CONFIG_MEMCG (Kinsey Ho) [task:447145]
  - mm/mglru: add CONFIG_LRU_GEN_WALKS_MMU (Kinsey Ho) [task:447145]
  - mm/mglru: add CONFIG_ARCH_HAS_HW_PTE_YOUNG (Kinsey Ho) [task:447145]
  - vfs: support statx(..., NULL, AT_EMPTY_PATH, ...) (Mateusz Guzik) [task:444220]
  - stat: use vfs_empty_path() helper (Christian Brauner) [task:444220]
  - fs: new helper vfs_empty_path() (Christian Brauner) [task:444220]
  - slab: don't put freepointer outside of object if only orig_size (Chengming Zhou) [task:444220]
  - slab: make check_object() more consistent (Chengming Zhou) [task:444220]
  - vfs: retire user_path_at_empty and drop empty arg from getname_flags (Mateusz Guzik) [task:444220]
  - vfs: stop using user_path_at_empty in do_readlinkat (Mateusz Guzik) [task:444220]
  - file: add fd_raw cleanup class (Christian Brauner) [task:444220]
  - fs: WARN when f_count resurrection is attempted (Kees Cook) [task:444220]
  - block, fs: Restore the per-bio/request data lifetime fields (Bart Van Assche) [task:444220]
  - fs: Propagate write hints to the struct block_device inode (Bart Van Assche) [task:444220]
  - fs: Move enum rw_hint into a new header file (Bart Van Assche) [task:444220]
  - fs: Split fcntl_rw_hint() (Bart Van Assche) [task:444220]
  - fs: Verify write lifetime constants at compile time (Bart Van Assche) [task:444220]
  - drm/vmwgfx: Add basic support for external buffers (Zack Rusin) [task:455369]
  - drm/vmwgfx: Fix handling of dumb buffers (Zack Rusin) [task:455369]
  - drm/vmwgfx: Make sure the screen surface is ref counted (Zack Rusin) [task:455369]
  - drm/vmwgfx: Remove unused code (Ian Forbes) [task:455369]
  - virtio_net: xdp_features add NETDEV_XDP_ACT_XSK_ZEROCOPY (Xuan Zhuo) [task:451679]
  - vdpa: support set mac address from vdpa tool (Cindy Lu) [task:451671]
  - Modify bzwx configuration (Feng Yang) [task:455763]
  - xfs: Add mount option nocbw to disable concurrent buffered write (Chi Zhiling) [task:422879]
  - xfs: Enable concurrency when writing within block size (Chi Zhiling) [task:422879]
  - xfs: Use two-state-lock to prevent DIO and buffered IO concurrency (Chi Zhiling) [task:422879]
  - xfs: Introduce two-state-lock (Chi Zhiling) [task:422879]
  - packet_filter: add a strict ipaddr check when modprobe (YANGANG) [task:456633]
  - init/Kconfig: Disable CONFIG_SCHED_MM_CID  macro default (liqiang01) [task:447145]
  - KVM: x86/mmu: Use gfn_to_page_many_atomic() when prefetching indirect PTEs (Sean Christopherson)
  - KVM: x86/mmu: Mark page/folio accessed only when zapping leaf SPTEs (Sean Christopherson)
  - KVM: x86/mmu: Mark folio dirty when creating SPTE, not when zapping/modifying (Sean Christopherson)
  - KVM: x86/mmu: Mark new SPTE as Accessed when synchronizing existing SPTE (Sean Christopherson)
  - KVM: x86/mmu: Invert @can_unsync and renamed to @synchronizing (Sean Christopherson)
  - KVM: x86/mmu: Don't overwrite shadow-present MMU SPTEs when prefaulting (Sean Christopherson)
  - KVM: Add kvm_release_page_unused() API to put pages that KVM never consumes (Sean Christopherson)
  - KVM: Allow calling kvm_release_page_{clean,dirty}() on a NULL page pointer (Sean Christopherson)
  - KVM: Drop KVM_ERR_PTR_BAD_PAGE and instead return NULL to indicate an error (Sean Christopherson)
  - KVM: VMX: Set PFERR_GUEST_{FINAL,PAGE}_MASK if and only if the GVA is valid (Sean Christopherson)
  - KVM: x86/mmu: Use KVM_PAGES_PER_HPAGE() instead of an open coded equivalent (Sean Christopherson)
  - KVM: x86/mmu: Add KVM_RMAP_MANY to replace open coded '1' and '1ul' literals (Sean Christopherson)
  - KVM: x86/mmu: Fold mmu_spte_age() into kvm_rmap_age_gfn_range() (Sean Christopherson)
  - KVM: x86/mmu: Morph kvm_handle_gfn_range() into an aging specific helper (Sean Christopherson)
  - KVM: x86/mmu: Honor NEED_RESCHED when zapping rmaps and blocking is allowed (Sean Christopherson)
  - KVM: x86/mmu: Add a helper to walk and zap rmaps for a memslot (Sean Christopherson)
  - KVM: x86/mmu: Plumb a @can_yield parameter into __walk_slot_rmaps() (Sean Christopherson)
  - KVM: x86/mmu: Move walk_slot_rmaps() up near for_each_slot_rmap_range() (Sean Christopherson)
  - mm: replace set_pte_at_notify() with just set_pte_at() (Paolo Bonzini)
  - mmu_notifier: remove the .change_pte() callback (Paolo Bonzini)
  - KVM: remove unused argument of kvm_handle_hva_range() (Paolo Bonzini)
  - KVM: delete .change_pte MMU notifier callback (Paolo Bonzini)
  - KVM: fix kvm_mmu_memory_cache allocation warning (Arnd Bergmann)
  - KVM: x86/mmu: Free TDP MMU roots while holding mmy_lock for read (Sean Christopherson)
  - KVM: x86/mmu: Alloc TDP MMU roots while holding mmu_lock for read (Sean Christopherson)
  - KVM: x86/mmu: Check for usable TDP MMU root while holding mmu_lock for read (Sean Christopherson)
  - KVM: x86/mmu: Skip invalid TDP MMU roots when write-protecting SPTEs (Sean Christopherson)
  - KVM: x86/mmu: Skip invalid roots when zapping leaf SPTEs for GFN range (Sean Christopherson)
  - KVM: x86/mmu: Allow passing '-1' for "all" as_id for TDP MMU iterators (Sean Christopherson)
  - KVM: x86/mmu: Don't do TLB flush when zappings SPTEs in invalid roots (Sean Christopherson)
  - KVM: x86/mmu: Zap invalidated TDP MMU roots at 4KiB granularity (Sean Christopherson)
  - KVM: Add a comment explaining the directed yield pending interrupt logic (Sean Christopherson)
  - KVM: x86: Clean up directed yield API for "has pending interrupt" (Sean Christopherson)
  - KVM: x86: Rely solely on preempted_in_kernel flag for directed yield (Sean Christopherson)
  - KVM: Add dedicated arch hook for querying if vCPU was preempted in-kernel (Sean Christopherson)
  - KVM: x86: Sanity check that kvm_has_noapic_vcpu is zero at module_exit() (Sean Christopherson)
  - KVM: x86: Move "KVM no-APIC vCPU" key management into local APIC code (Sean Christopherson)
  - KVM: x86: Fully defer to vendor code to decide how to force immediate exit (Sean Christopherson)
  - KVM: VMX: Handle KVM-induced preemption timer exits in fastpath for L2 (Sean Christopherson)
  - KVM: x86: Move handling of is_guest_mode() into fastpath exit handlers (Sean Christopherson)
  - KVM: VMX: Handle forced exit due to preemption timer in fastpath (Sean Christopherson)
  - KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer exits (Sean Christopherson)
  - KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint (Sean Christopherson)
  - KVM: Harden copying of userspace-array against overflow (Philipp Stanner)
  - KVM: s390: Harden copying of userspace-array against overflow (Philipp Stanner)
  - KVM: x86/mmu: fix comment about mmu_unsync_pages_lock (Paolo Bonzini)
  - KVM: x86/mmu: always take tdp_mmu_pages_lock (Paolo Bonzini)
  - KVM: x86/mmu: remove unnecessary "bool shared" argument from iterators (Paolo Bonzini)
  - KVM: x86/mmu: remove unnecessary "bool shared" argument from functions (Paolo Bonzini)
  - KVM: x86/mmu: Check for leaf SPTE when clearing dirty bit in the TDP MMU (David Matlack)
  - KVM: x86/mmu: Fix off-by-1 when splitting huge pages during CLEAR (David Matlack)
  - KVM: x86: Get CPL directly when checking if loaded vCPU is in kernel mode (Like Xu)
  - KVM: x86: Update the variable naming in kvm_x86_ops.sched_in() (Mingwei Zhang)
  - vduse: enable Virtio-net device type (Maxime Coquelin) [task:451651]
  - filelock: split leases out of struct file_lock (Jeff Layton) [task:444220]
  - filelock: remove temporary compatibility macros (Jeff Layton) [task:444220]
  - smb/server: adapt to breakup of struct file_lock (Jeff Layton) [task:444220]
  - smb/client: adapt to breakup of struct file_lock (Jeff Layton) [task:444220]
  - ocfs2: adapt to breakup of struct file_lock (Jeff Layton) [task:444220]
  - nfsd: adapt to breakup of struct file_lock (Jeff Layton) [task:444220]
  - nfs: adapt to breakup of struct file_lock (Jeff Layton) [task:444220]
  - lockd: adapt to breakup of struct file_lock (Jeff Layton) [task:444220]
  - fuse: adapt to breakup of struct file_lock (Jeff Layton) [task:444220]
  - gfs2: adapt to breakup of struct file_lock (Jeff Layton) [task:444220]
  - dlm: adapt to breakup of struct file_lock (Jeff Layton) [task:444220]
  - ceph: adapt to breakup of struct file_lock (Jeff Layton) [task:444220]
  - ceph: print cluster fsid and client global_id in all debug logs (Xiubo Li) [task:444220]
  - libceph: add doutc and *_client debug macros support (Xiubo Li) [task:444220]
  - afs: adapt to breakup of struct file_lock (Jeff Layton) [task:444220]
  - 9p: adapt to breakup of struct file_lock (Jeff Layton) [task:444220]
  - filelock: convert seqfile handling to use file_lock_core (Jeff Layton) [task:444220]
  - filelock: convert locks_translate_pid to take file_lock_core (Jeff Layton) [task:444220]
  - filelock: convert locks_insert_lock_ctx and locks_delete_lock_ctx (Jeff Layton) [task:444220]
  - filelock: convert locks_wake_up_blocks to take a file_lock_core pointer (Jeff Layton) [task:444220]
  - filelock: make assign_type helper take a file_lock_core pointer (Jeff Layton) [task:444220]
  - filelock: reorganize locks_delete_block and __locks_insert_block (Jeff Layton) [task:444220]
  - filelock: clean up locks_delete_block internals (Jeff Layton) [task:444220]
  - filelock: convert fl_blocker to file_lock_core (Jeff Layton) [task:444220]
  - filelock: convert __locks_insert_block, conflict and deadlock checks to use file_lock_core (Jeff Layton) [task:444220]
  - filelock: make __locks_delete_block and __locks_wake_up_blocks take file_lock_core (Jeff Layton) [task:444220]
  - filelock: convert locks_{insert,delete}_global_blocked (Jeff Layton) [task:444220]
  - filelock: make locks_{insert,delete}_global_locks take file_lock_core arg (Jeff Layton) [task:444220]
  - filelock: convert posix_owner_key to take file_lock_core arg (Jeff Layton) [task:444220]
  - filelock: make posix_same_owner take file_lock_core pointers (Jeff Layton) [task:444220]
  - filelock: convert more internal functions to use file_lock_core (Jeff Layton) [task:444220]
  - filelock: have fs/locks.c deal with file_lock_core directly (Jeff Layton) [task:444220]
  - filelock: split common fields into struct file_lock_core (Jeff Layton) [task:444220]
  - filelock: drop the IS_* macros (Jeff Layton) [task:444220]
  - smb/server: convert to using new filelock helpers (Jeff Layton) [task:444220]
  - smb/client: convert to using new filelock helpers (Jeff Layton) [task:444220]
  - ocfs2: convert to using new filelock helpers (Jeff Layton) [task:444220]
  - nfsd: convert to using new filelock helpers (Jeff Layton) [task:444220]
  - nfs: convert to using new filelock helpers (Jeff Layton) [task:444220]
  - lockd: convert to using new filelock helpers (Jeff Layton) [task:444220]
  - gfs2: convert to using new filelock helpers (Jeff Layton) [task:444220]
  - dlm: convert to using new filelock helpers (Jeff Layton) [task:444220]
  - ceph: convert to using new filelock helpers (Jeff Layton) [task:444220]
  - afs: convert to using new filelock helpers (Jeff Layton) [task:444220]
  - 9p: rename fl_type variable in v9fs_file_do_lock (Jeff Layton) [task:444220]
  - filelock: add some new helper functions (Jeff Layton) [task:444220]
  - filelock: rename fl_pid variable in lock_get_status (Jeff Layton) [task:444220]
  - filelock: rename some fields in tracepoints (Jeff Layton) [task:444220]
  - filelock: fl_pid field should be signed int (Jeff Layton) [task:444220]
  - RDMA/mlx5: Fix the recovery flow of the UMR QP (Yishai Hadas) [task:448791] {CVE-2025-21892}
  - cgroup/rstat: Optimize cgroup_rstat_updated_list() (Waiman Long) [task:455682]
  - LOONGSON: LoongArch: Preserve firmware configuration if ACPI requires. (Gao Qihang) [task:456238]
  - LOONGSON: LoongArch: Revert "LoongArch: Fix cpu hotplug issue" (Xianglai Li) [task:456238]
  - ALSA: hda: Add AZX_DCAPS_NO_TCSEL flag for Loongson HDA devices (Qunqin Zhao) [task:456238]
  - LOONGSON: LoongArch: drivers/char: add ACPI firmware support for Loongson SE driver (Juxin Gao) [task:456238]
  - LOONGSON: LoongArch: eiointc:Fix ext irq route error. (wanghongliang) [task:456238]
  - LOONGSON: LoongArch: net/stmmac: dwmac-loongson: fix Mac DMA reset (gaojuxin) [task:456238]
  - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed (Bibo Mao) [task:456238]
  - LoongArch: Correct the cacheinfo sharing information (Huacai Chen) [task:456238]
  - LOONGSON: LoongArch: adjust the calc method of number of packages. (wanghongliang) [task:456238]
  - LOONGSON: LoongArch: Export some signal functions (Tiezhu Yang) [task:456237]
  - LOONGSON: LoongArch: Make some signal and ptrace functions non-static (Tiezhu Yang) [task:456237]
  - LOONGSON: LoongArch: Handle fp, lsx, lasx and lbt assembly symbols (Tiezhu Yang) [task:456237]
  - LoongArch: Set hugetlb mmap base address aligned with pmd size (Bibo Mao) [task:450281] {CVE-2025-21949}
  - mm/mmap: teach generic_get_unmapped_area{_topdown} to handle hugetlb mappings (Oscar Salvador) [task:450281]
  - KVM: x86/mmu: Sanity check that __kvm_faultin_pfn() doesn't create noslot pfns (Sean Christopherson)
  - KVM: x86/mmu: Initialize kvm_page_fault's pfn and hva to error values (Sean Christopherson)
  - KVM: x86/mmu: Set kvm_page_fault.hva to KVM_HVA_ERR_BAD for "no slot" faults (Sean Christopherson)
  - KVM: x86/mmu: Handle no-slot faults at the beginning of kvm_faultin_pfn() (Sean Christopherson)
  - KVM: x86/mmu: Move slot checks from __kvm_faultin_pfn() to kvm_faultin_pfn() (Sean Christopherson)
  - KVM: x86/mmu: Explicitly disallow private accesses to emulated MMIO (Sean Christopherson)
  - KVM: x86/mmu: Don't force emulation of L2 accesses to non-APIC internal slots (Sean Christopherson)
  - KVM: x86/mmu: WARN and skip MMIO cache on private, reserved page faults (Sean Christopherson)
  - KVM: x86/mmu: check for invalid async page faults involving private memory (Paolo Bonzini)
  - KVM: x86/mmu: Use synthetic page fault error code to indicate private faults (Sean Christopherson)
  - KVM: x86/mmu: WARN if upper 32 bits of legacy #PF error code are non-zero (Sean Christopherson)
  - KVM: x86/mmu: Pass full 64-bit error code when handling page faults (Isaku Yamahata)
  - KVM: x86: Move synthetic PFERR_* sanity checks to SVM's #NPF handler (Sean Christopherson)
  - KVM: x86: Define more SEV+ page fault error bits/flags for #NPF (Sean Christopherson)
  - KVM: x86: Remove separate "bit" defines for page fault error code masks (Sean Christopherson)
  - KVM: x86/mmu: Exit to userspace with -EFAULT if private fault hits emulation (Sean Christopherson)
  - drm/vmwgfx: Standardize use of kibibytes when logging (Ian Forbes) [task:454535]
  - virtio-net: support rx netdim (Heng Qi) [task:455063]
  - virtio-net: extract virtqueue coalescig cmd for reuse (Heng Qi) [task:455063]
  - virtio-net: separate rx/tx coalescing moderation cmds (Heng Qi) [task:455063]
  - virtio-net: returns whether napi is complete (Heng Qi) [task:455063]
  - virtio-net: a tiny comment update (Heng Qi) [task:455063]
  - drm/uapi: add explicit virtgpu context debug name (Gurchetan Singh) [task:454516]
  - drm/virtio: use uint64_t more in virtio_gpu_context_init_ioctl (Gurchetan Singh) [task:454516]
  - drm/bridge/analogix/anx6345: switch to struct drm_edid (Jani Nikula) [task:455023]
  - KVM: x86: Add CONFIG_KVM_MAX_NR_VCPUS to allow up to 4096 vCPUs (Kyle Meyer) [task:451612]
  - drm/vmwgfx: Implement virtual crc generation (Zack Rusin) [task:454530]
  - drm/vmwgfx: Implement virtual kms (Zack Rusin) [task:454530]
  - cgroup/rstat: Reduce cpu_lock hold time in cgroup_rstat_flush_locked() (Waiman Long) [task:455683]
  - ZHAOXIN: i2c: Enhancements and Modifications to SMBus Driver (leoliu-oc) [bug:343985]
  - ZHAOXIN: Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume (leoliu-oc) [bug:343985]
  - ZHAOXIN: pinctrl: Zhaoxin: Update GPIO pinctrl driver for stability and reliability (leoliu-oc) [bug:343985]
  - KVM: arm64: Force injection of a data abort on NISV MMIO exit (Marc Zyngier)
  - KVM: arm64: Restrict supported capabilities for protected VMs (Fuad Tabba)
  - KVM: arm64: Refactor setting the return value in kvm_vm_ioctl_enable_cap() (Fuad Tabba)
  - KVM: arm64: Reformat/beautify PTP hypercall documentation (Will Deacon)
  - KVM: arm64: Clarify rationale for ZCR_EL1 value restored on guest exit (Fuad Tabba)
  - KVM: arm64: Introduce and use predicates that check for protected VMs (Fuad Tabba)
  - KVM: arm64: Add is_pkvm_initialized() helper (Quentin Perret)
  - KVM: arm64: Simplify vgic-v3 hypercalls (Marc Zyngier)
  - KVM: arm64: Move setting the page as dirty out of the critical section (Fuad Tabba)
  - KVM: arm64: Fix comment for __pkvm_vcpu_init_traps() (Fuad Tabba)
  - KVM: arm64: Prevent kmemleak from accessing .hyp.data (Quentin Perret)
  - KVM: arm64: Do not map the host fpsimd state to hyp in pKVM (Fuad Tabba)
  - KVM: arm64: Rename __tlb_switch_to_{guest,host}() in VHE (Fuad Tabba)
  - KVM: arm64: Support TLB invalidation in guest context (Will Deacon)
  - KVM: arm64: Avoid BBM when changing only s/w bits in Stage-2 PTE (Will Deacon)
  - KVM: arm64: Check for PTE validity when checking for executable/cacheable (Marc Zyngier)
  - KVM: arm64: Avoid BUG-ing from the host abort path (Quentin Perret)
  - KVM: arm64: Issue CMOs when tearing down guest s2 pages (Quentin Perret)
  - KVM: arm64: Refactor checks for FP state ownership (Fuad Tabba)
  - KVM: arm64: Move guest_owns_fp_regs() to increase its scope (Fuad Tabba)
  - KVM: arm64: Initialize the kvm host data's fpsimd_state pointer in pKVM (Fuad Tabba)
  - KVM: arm64: Do not re-initialize the KVM lock (Fuad Tabba)
  - KVM: arm64: Exclude FP ownership from kvm_vcpu_arch (Marc Zyngier)
  - KVM: arm64: Exclude host_fpsimd_state pointer from kvm_vcpu_arch (Marc Zyngier)
  - KVM: arm64: Exclude mdcr_el2_host from kvm_vcpu_arch (Marc Zyngier)
  - KVM: arm64: Exclude host_debug_data from vcpu_arch (Marc Zyngier)
  - KVM: arm64: Add accessor for per-CPU state (Marc Zyngier)
  - Revert "KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state" (Jackie Liu)
  - Revert "KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN" (Jackie Liu)
  - Revert "KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN" (Jackie Liu)
  - Revert "KVM: arm64: Remove host FPSIMD saving for non-protected KVM" (Jackie Liu)
  - fs/pipe: Use pipe_buf() helper to retrieve pipe buffer (K Prateek Nayak)
  - kernel/watch_queue: Use pipe_buf() to retrieve the pipe buffer (K Prateek Nayak)
  - fs/pipe: Limit the slots in pipe_resize_ring() (K Prateek Nayak)
  - fs/pipe: add simpler helpers for common cases (Linus Torvalds)
  - fs/pipe: do not open-code pipe head/tail logic in FIONREAD (Linus Torvalds)
  - pipe: change pipe_write() to never add a zero-sized buffer (Oleg Nesterov)
  - pipe: reduce padding in struct pipe_inode_info (Max Kellermann)
  - pipe: drop an always true check in anon_pipe_write() (Mateusz Guzik)
  - pipe: don't update {a,c,m}time for anonymous pipes (Oleg Nesterov)
  - pipe: introduce struct file_operations pipeanon_fops (Oleg Nesterov)
  - fs/pipe: Read pipe->{head,tail} atomically outside pipe->mutex (Linus Torvalds)
  - iommu/vt-d: Remove struct intel_svm (Lu Baolu) [task:451650]
  - iommu/vt-d: Remove intel_svm_dev (Lu Baolu) [task:451650]
  - iommu/vt-d: Remove treatment for revoking PASIDs with pending page faults (Tina Zhang) [task:451650]
  - iommu/vt-d: Remove initialization for dynamically heap-allocated rcu_head (Tina Zhang) [task:451650]
  - iommu/vt-d: Merge intel_svm_bind_mm() into its caller (Tina Zhang) [task:451650]
  - iommu/vt-d: Use cache helpers in arch_invalidate_secondary_tlbs (Lu Baolu) [task:451650]
  - iommu/vt-d: Use cache_tag_flush_range() in cache_invalidate_user (Lu Baolu) [task:451650]
  - iommu/vt-d: Remove private data use in fault message (Jingqi Liu) [task:451650]
  - iommu/vt-d: Remove debugfs use of private data field (Jingqi Liu) [task:451650]
  - iommu/vt-d: Cleanup use of iommu_flush_iotlb_psi() (Lu Baolu) [task:451650]
  - iommu/vt-d: Use cache_tag_flush_range_np() in iotlb_sync_map (Lu Baolu) [task:451650]
  - iommu/vt-d: Use cache_tag_flush_range() in tlb_sync (Lu Baolu) [task:451650]
  - iommu/vt-d: Use cache_tag_flush_all() in flush_iotlb_all (Lu Baolu) [task:451650]
  - iommu/vt-d: Add cache tag invalidation helpers (Lu Baolu) [task:451650]
  - iommu/vt-d: Add cache tag assignment interface (Lu Baolu) [task:451650]
  - iommu/vt-d: Remove caching mode check before device TLB flush (Lu Baolu) [task:451650]
  - iommu/vt-d: Use try_cmpxchg64{,_local}() in iommu.c (Uros Bizjak) [task:451650]
  - iommu/vt-d: add wrapper functions for page allocations (Pasha Tatashin) [task:451650]
  - hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (Ma Wupeng) [task:450240] {CVE-2025-21931}
  - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers (Kashyap Desai) [task:448816] {CVE-2025-21885}
  - drm/vmwgfx: Make all surfaces shareable (Maaz Mombasawala) [task:454528]
  - drm/vmwgfx: Add SPDX header to vmwgfx_drm.h (Maaz Mombasawala) [task:454528]
  - vfio/nvgrace-gpu: Add GB200 SKU to the devid table (Ankit Agrawal) [task:451696]
  - vfio/nvgrace-gpu: Check the HBM training and C2C link status (Ankit Agrawal) [task:451696]
  - vfio/nvgrace-gpu: Expose the blackwell device PF BAR1 to the VM (Ankit Agrawal) [task:451696]
  - vfio/nvgrace-gpu: Read dvsec register to determine need for uncached resmem (Ankit Agrawal) [task:451696]
  - vfio/pci: Expose setup ROM at ROM bar when needed (Yunxiang Li) [task:451696]
  - vfio/pci: Remove shadow ROM specific code paths (Yunxiang Li) [task:451696]
  - vfio/pci: Remove #ifdef iowrite64 and #ifdef ioread64 (Ramesh Thomas) [task:451696]
  - vfio/pci: Fix typo in macro to declare accessors (Gerd Bayer) [task:451696]
  - vfio/pci: Support 8-byte PCI loads and stores (Ben Segal) [task:451696]
  - vfio/pci: Extract duplicated code into macro (Gerd Bayer) [task:451696]
  - drm/virtio: add definition for venus capset (Huang Rui) [task:454527]
  - vDPA/ifcvf: implement vdpa_config_ops.get_vq_num_min (Zhu Lingshan) [task:451639]
  - vDPA/ifcvf: get_max_vq_size to return max size (Zhu Lingshan) [task:451639]
  - virtio_vdpa: create vqs with the actual size (Zhu Lingshan) [task:451639]
  - vduse: implement vdpa_config_ops.get_vq_size for vduse (Zhu Lingshan) [task:451639]
  - vdpa_sim: implement vdpa_config_ops.get_vq_size for vDPA simulator (Zhu Lingshan) [task:451639]
  - eni_vdpa: implement vdpa_config_ops.get_vq_size (Zhu Lingshan) [task:451639]
  - vp_vdpa: implement vdpa_config_ops.get_vq_size (Zhu Lingshan) [task:451639]
  - vDPA/ifcvf: implement vdpa_config_ops.get_vq_size (Zhu Lingshan) [task:451639]
  - vDPA: introduce get_vq_size to vdpa_config_ops (Zhu Lingshan) [task:451639]
  - vhost-vdpa: uapi to support reporting per vq size (Zhu Lingshan) [task:451639]
  - vhost-vdpa: uAPI to get dedicated descriptor group id (Si-Wei Liu) [task:451639]
  - vhost-vdpa: introduce descriptor group backend feature (Si-Wei Liu) [task:451639]
  - vdpa: introduce dedicated descriptor group for virtqueue (Si-Wei Liu) [task:451639]
  - Improve __fget_files_rcu() code generation (and thus __fget_light()) (Linus Torvalds) [task:444220]
  - dlm: implement EXPORT_OP_ASYNC_LOCK (Alexander Aring) [task:444220]
  - dlm: use FL_SLEEP to determine blocking vs non-blocking (Alexander Aring) [task:444220]
  - dlm: use fl_owner from lockd (Alexander Aring) [task:444220]
  - lockd: add doc to enable EXPORT_OP_ASYNC_LOCK (Alexander Aring) [task:444220]
  - lockd: fix race in async lock request handling (Alexander Aring) [task:444220]
  - lockd: don't call vfs_lock_file() for pending requests (Alexander Aring) [task:444220]
  - lockd: introduce safe async lock op (Alexander Aring) [task:444220]
  - add unique mount ID (Miklos Szeredi) [task:444220]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.v2505
changelog:
  - arm64: config: enable bnx2fc driver (xiaolinkui) [bug:348721]
  - x86/config: Disable CONFIG_COMPILE_TEST (Super User) [task:460841]
  - kalert: fix a redundant message problem when report event of ALL (Huiwen He) [task:339643]
  - loongarch: configs: Enable kalert feature (Huiwen He) [bug:350573]
  - Revert "LOONGSON: drm/loongson: use old version of ast driver for LoongArch platform" (Li ZhiGang) [bug:350717]
  - Revert "LOONGSON: drm/loongson: To replace the drm_ast driver with the drm_ast_loongson driver" (Li ZhiGang) [bug:350717]
  - kabi: drm/ttm: Add kabi reserve in ttm_tt.h (Qingshuang Fu) [task:457490]
  - kabi: drm/ttm: Add kabi reserve in ttm_resource.h (Qingshuang Fu) [task:457490]
  - kabi: drm/ttm: Add kabi reserve in ttm_bo.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_syncobj.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_plane.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_modeset_lock.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_mode_config.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_gpu_scheduler.h (Qingshuang Fu) [task:457490]
  - kabi: cgroup: add more reserve kabi (Qingshuang Fu) [task:457490]
  - kabi: seq_file: KABI reservation for seq_file (Qingshuang Fu) [task:457490]
  - kabi: statx: KABI reservation for kstat (Qingshuang Fu) [task:457490]
  - kabi: ima: KABI reservation for IMA (Qingshuang Fu) [task:457490]
  - kabi: kabi reserver space for i2c (Qingshuang Fu) [task:457490]
  - kabi: reserve space for uprobes.h (Qingshuang Fu) [task:457490]
  - kabi: Reserve space for fwnode.h (Qingshuang Fu) [task:457490]
  - kabi: Add reserve space for sched structures (Qingshuang Fu) [task:457490]
  - kabi: net: reserve space for net related structure (Qingshuang Fu) [task:457490]
  - kabi: reserve space for internal.h (Qingshuang Fu) [task:457490]
  - kabi: reserve space for perf_event.h (Qingshuang Fu) [task:457490]
  - kabi: net: reserve space for xdp subsystem related structure (Qingshuang Fu) [task:457490]
  - kabi: reserve space for struct acpi_device and acpi_scan_handler (Qingshuang Fu) [task:457490]
  - kabi: reserve space for struct rate_sample (Qingshuang Fu) [task:457490]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.1.v2505
changelog:
  - LOONGSON: drivers/iommu: add iommu support (Xianglai Li) [bug:348286]
  - LOONGSON: driver/vfio: disable vfio pci intx (Xianglai Li) [bug:348286]
  - LOONGSON: loongarch/configs: enable vfio mdev config (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Fix PMU pass-through issue if VM exits to host finally (Bibo Mao) [bug:348286]
  - LOONGSON: drivers/pci: Enable pci bridge acs capability (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Repair the restart pressure test virtual machine hang dead problem (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add interrupt checking with Loongson AVEC (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Reload guest CSR registers after S4 (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: add virt extioi cpu encode support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Fixed VM migration failure after ptw was enabled (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add reset function for irqchip (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: arch/loongarch/kvm: Fix extioi restart issue (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: enable ptw for kvm (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add irqfd support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add PCHPIC user mode read and write functions (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add PCHPIC read and write functions (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add PCHPIC device support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add EXTIOI user mode read and write functions (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add EXTIOI read and write functions (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add EXTIOI device support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add IPI user mode read and write function (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add IPI read and write function (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add IPI device support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add iocsr and mmio bus simulation in kernel (Xianglai Li) [bug:348286]
  - Revert "LoongArch: KVM: Add iocsr and mmio bus simulation in kernel" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add IPI device support" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add IPI read and write function" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add IPI user mode read and write function" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add EIOINTC device support" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add EIOINTC read and write functions" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add EIOINTC user mode read and write functions" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add PCHPIC device support" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add PCHPIC read and write functions" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add PCHPIC user mode read and write functions" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add irqfd support" (cuitao) [bug:348286]
  - LOONGSON: irqchip/loongson-eiointc: Add virt extension support (Bibo Mao) [bug:348286]
  - HYGON: tpm: Fixed the bug that tcm driver cannot be initialized normally (chench246) [task:462020]
  - HYGON: crypto: ccp: Support userspace mmap psp mmio (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: Support vpsp ringbuffer overcommit (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: Use a workqueue to clean up the vpsp ringbuffer (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: move vpsp-related functions to vpsp.c (xiongmengbiao) [bug:346243]
  - HYGON: drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn (niuyongwen) [bug:346243]
  - HYGON: drivers/crypto/ccp: memmove is used instead of memcpy in overlapped memmory for tkm (niuyongwen) [bug:346243]
  - HYGON: drivers/crypto/ccp: add ioctl API to pin TKM hugepage (xiongmengbiao) [bug:346243]
  - HYGON: driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: support TKM run on CSV (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: remove multi-level pointers processing for vpsp (xiongmengbiao) [bug:346243]
  - configs: Rename inspur-drm to yhgch-drm (Shixiong Ou) [bug:344261, bug:350729, bug:344066]
  - INSPUR: 3rd/inspur: Rename inspur-drm to yhgch-drm (Shixiong Ou) [bug:344261, bug:350729, bug:344066]
  - inet6: constify 'struct net' parameter of various lookup helpers (Eric Dumazet) [task:441338]
  - inet: constify 'struct net' parameter of various lookup helpers (Eric Dumazet) [task:441338]
  - inet: constify inet_sk_bound_dev_eq() net parameter (Eric Dumazet) [task:441338]
  - mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (Yosry Ahmed) [task:459564] {CVE-2025-22030}
  - sw64/config: rename generic_defconfig to openkylin_generic_defconfig (Jackie Liu)
  - filelock: fix name of file_lease slab cache (Omar Sandoval) [task:444220]
  - nfsd: nfsd_file_lease_notifier_call gets a file_lease as an argument (Jeff Layton) [task:444220]
  - filelock: fix deadlock detection in POSIX locking (Jeff Layton) [task:444220]
  - slab: Fix too strict alignment check in create_cache() (Geert Uytterhoeven) [task:444220]
  - io_uring: specify freeptr usage for SLAB_TYPESAFE_BY_RCU io_kiocb cache (Jens Axboe) [task:444220]
  - io_uring: port to struct kmem_cache_args (Christian Brauner) [task:444220]
  - filelock: always define for_each_file_lock() (Jeff Layton) [task:444220]
  - fs: port files to file_ref (Christian Brauner) [task:444220]
  - file: massage cleanup of files that failed to open (Al Viro) [task:444220]
  - fs: add file_ref (Christian Brauner) [task:444220]
  - fs: protect backing files with rcu (Christian Brauner) [task:444220]
  - eth: bnxt: fix truesize for mb-xdp-pass case (Taehee Yoo) [task:450243] {CVE-2025-21961}
  - drm/vmwgfx: Disable coherent dumb buffers without 3d (Zack Rusin) [task:461067] {CVE-2024-46712}
  - drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle (Chen Ridong) [task:461324] {CVE-2024-53115}
  - cpuidle, sched: Use smp_mb__after_atomic() in current_clr_polling() (Yujun Dong) [task:390083]
  - sched: idle: Optimize the generic idle loop by removing needless memory barrier (Zhongqiu Han) [task:390083]
  - sched/psi: Optimise psi_group_change a bit (Tvrtko Ursulin) [task:390083]
  - percpu_counter: add a cmpxchg-based _add_batch variant (Mateusz Guzik) [task:390083]
  - SUNWAY: receive new boot params from firmware (Jing Li) [task:382309]
  - SUNWAY: setup stackframe at kernel entry point (Mao Minkai) [task:382309]
  - SUNWAY: save and restore CSR_WR_FREGS for SIMD libs (Mao Minkai) [task:382309]
  - SUNWAY: rename copy and set lib functions (Mao Minkai) [task:382309]
  - SUNWAY: rename copy and set lib files (Mao Minkai) [task:382309]
  - SUNWAY: choose lib at compile time (Mao Minkai) [task:382309]
  - SUNWAY: store topology and numa info by each cpu itself (Mao Minkai) [task:382309]
  - SUNWAY: work around suspend for C4 (Tang Jinyang) [task:382309]
  - SUNWAY: employ trick on regs.pc for specific exception (Zhi Tongze) [task:382309]
  - SUNWAY: fix syscall_fallback() for vdso gettimeofday (Mao Minkai) [task:382309]
  - perf/dwc_pcie: fix duplicate pci_dev devices (Yunhui Cui) [task:460280] {CVE-2025-37746}
  - perf/dwc_pcie: Qualify RAS DES VSEC Capability by Vendor, Revision (Bjorn Helgaas) [task:460280]
  - perf/dwc_pcie: Add support for Ampere SoCs (Ilkka Koskinen) [task:460280]
  - perf/dwc_pcie: Add support for QCOM vendor devices (Krishna chaitanya chundru) [task:460280]
  - perf/dwc_pcie: Always register for PCIe bus notifier (Krishna chaitanya chundru) [task:460280]
  - perf/dwc_pcie: Fix registration issue in multi PCIe controller instances (Krishna chaitanya chundru) [task:460280]
  - drivers/perf: add DesignWare PCIe PMU driver (Shuai Xue) [task:460280]
  - objtool: Silence more KCOV warnings, part 2 (Josh Poimboeuf) [task:460826]
  - objtool: Ignore end-of-section jumps for KCOV/GCOV (Josh Poimboeuf) [task:460826]
  - nvme: fixup scan failure for non-ANA multipath controllers (Hannes Reinecke) [task:460826]
  - MIPS: cm: Fix warning if MIPS_CM is disabled (Thomas Bogendoerfer) [task:460826]
  - net: dsa: mv88e6xxx: enable STU methods for 6320 family (Marek Behún) [task:460826]
  - net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family (Marek Behún) [task:460826]
  - net: dsa: mv88e6xxx: enable PVT for 6321 switch (Marek Behún) [task:460826]
  - net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family (Marek Behún) [task:460826]
  - comedi: jr3_pci: Fix synchronous deletion of timer (Ian Abbott) [task:460826]
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (Daniel Borkmann) [task:460826]
  - driver core: fix potential NULL pointer dereference in dev_uevent() (Dmitry Torokhov) [task:460826]
  - driver core: introduce device_set_driver() helper (Dmitry Torokhov) [task:460826]
  - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Dmitry Torokhov) [task:460826]
  - spi: spi-imx: Add check for spi_imx_setupxfer() (Tamura Dai) [task:460826]
  - md/raid1: Add check for missing source disk in process_checks() (Meir Elisha) [task:460826]
  - x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores (Pi Xiange) [task:460826]
  - ubsan: Fix panic from test_ubsan_out_of_bounds (Mostafa Saleh) [task:460826]
  - spi: tegra210-quad: add rate limiting and simplify timeout error message (Breno Leitao) [task:460826]
  - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Breno Leitao) [task:460826]
  - loop: aio inherit the ioprio of original request (Yunlong Xing) [task:460826]
  - riscv: Provide all alternative macros all the time (Andrew Jones) [task:460826]
  - iomap: skip unnecessary ifs_block_is_uptodate check (Gou Hao) [task:460826]
  - x86/i8253: Call clockevent_i8253_disable() with interrupts disabled (Fernando Fernandez Mancera) [task:460826]
  - scsi: pm80xx: Set phy_attached to zero when device is gone (Igor Pylypiv) [task:460826]
  - scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init() (Peter Griffin) [task:460826]
  - scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes (Xingui Yang) [task:460826]
  - ext4: make block validity check resistent to sb bh corruption (Ojaswin Mujoo) [task:460826]
  - cifs: Fix querying of WSL CHR and BLK reparse points over SMB1 (Pali Rohár) [task:460826]
  - timekeeping: Add a lockdep override in tick_freeze() (Sebastian Andrzej Siewior) [task:460826]
  - cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode (Pali Rohár) [task:460826]
  - nvmet-fc: put ref when assoc->del_work is already scheduled (Daniel Wagner) [task:460826]
  - nvmet-fc: take tgtport reference only once (Daniel Wagner) [task:460826]
  - x86/bugs: Don't fill RSB on context switch with eIBRS (Josh Poimboeuf) [task:460826]
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Josh Poimboeuf) [task:460826]
  - x86/bugs: Use SBPB in write_ibpb() if applicable (Josh Poimboeuf) [task:460826]
  - gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment (Andy Shevchenko) [task:460826]
  - objtool: Stop UNRET validation on UD2 (Josh Poimboeuf) [task:460826]
  - nvme: multipath: fix return value of nvme_available_path (Uday Shankar) [task:460826]
  - nvme: re-read ANA log page after ns scan completes (Hannes Reinecke) [task:460826]
  - ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls (Jean-Marc Eurin) [task:460826]
  - ACPI: EC: Set ec_no_wakeup for Lenovo Go S (Mario Limonciello) [task:460826]
  - nvme: requeue namespace scan on missed AENs (Hannes Reinecke) [task:460826]
  - xen: Change xen-acpi-processor dom0 dependency (Jason Andryuk) [task:460826]
  - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init (Gabriel Shahrouzi) [task:460826]
  - selftests: ublk: fix test_stripe_04 (Ming Lei) [task:460826]
  - KVM: s390: Don't use %pK through debug printing (Thomas Weißschuh) [task:460826]
  - KVM: s390: Don't use %pK through tracepoints (Thomas Weißschuh) [task:460826]
  - sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP (Oleg Nesterov) [task:460826]
  - io_uring: always do atomic put from iowq (Pavel Begunkov) [task:460826]
  - rtc: pcf85063: do a SW reset if POR failed (Lukas Stockmann) [task:460826]
  - 9p/net: fix improper handling of bogus negative read/write replies (Dominique Martinet) [task:460826]
  - ntb_hw_amd: Add NTB PCI ID for new gen CPU (Basavaraj Natikar) [task:460826]
  - ntb: reduce stack usage in idt_scan_mws (Arnd Bergmann) [task:460826]
  - qibfs: fix _another_ leak (Al Viro) [task:460826]
  - objtool, lkdtm: Obfuscate the do_nothing() pointer (Josh Poimboeuf) [task:460826]
  - objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc() (Josh Poimboeuf) [task:460826]
  - objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler() (Josh Poimboeuf) [task:460826]
  - objtool, panic: Disable SMAP in __stack_chk_fail() (Josh Poimboeuf) [task:460826]
  - objtool: Silence more KCOV warnings (Josh Poimboeuf) [task:460826]
  - thunderbolt: Scan retimers after device router has been enumerated (Mika Westerberg) [task:460826]
  - usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func (Théo Lebrun) [task:460826]
  - usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() (Chenyuan Yang) [task:460826]
  - usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running (Michal Pecio) [task:460826]
  - dmaengine: dmatest: Fix dmatest waiting less when interrupted (Vinicius Costa Gomes) [task:460826]
  - sound/virtio: Fix cancel_sync warnings on uninitialized work_structs (John Stultz) [task:460826]
  - usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield (Andy Shevchenko) [task:460826]
  - usb: dwc3: gadget: Refactor loop to avoid NULL endpoints (Andy Shevchenko) [task:460826]
  - fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size (Edward Adam Davis) [task:460826]
  - usb: host: max3421-hcd: Add missing spi_device_id table (Alexander Stein) [task:460826]
  - mailbox: pcc: Always clear the platform ack interrupt first (Sudeep Holla) [task:460826]
  - mailbox: pcc: Fix the possible race in updation of chan_in_use flag (Huisong Li) [task:460826]
  - bpf: Reject attaching fexit/fmod_ret to __noreturn functions (Yafang Shao) [task:460826]
  - bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage (Martin KaFai Lau) [task:460826]
  - bpf: bpftool: Setting error code in do_loader() (Sewon Nam) [task:460826]
  - s390/tty: Fix a potential memory leak bug (Haoxiang Li) [task:460826]
  - s390/sclp: Add check for get_zeroed_page() (Haoxiang Li) [task:460826]
  - parisc: PDT: Fix missing prototype warning (Yu-Chun Lin) [task:460826]
  - clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec() (Heiko Stuebner) [task:460826]
  - bpf: Fix deadlock between rcu_tasks_trace and event_mutex. (Alexei Starovoitov) [task:460826]
  - crypto: null - Use spin lock instead of mutex (Herbert Xu) [task:460826]
  - crypto: ccp - Add support for PCI device 0x1134 (Devaraj Rangasamy) [task:460826]
  - MIPS: cm: Detect CM quirks from device tree (Gregory CLEMENT) [task:460826]
  - pinctrl: renesas: rza2: Fix potential NULL pointer dereference (Chenyuan Yang) [task:460826]
  - USB: wdm: add annotation (Oliver Neukum) [task:460826]
  - USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context (Oliver Neukum) [task:460826]
  - USB: wdm: close race between wdm_open and wdm_wwan_port_stop (Oliver Neukum) [task:460826]
  - USB: wdm: handle IO errors in wdm_wwan_port_start (Oliver Neukum) [task:460826]
  - USB: VLI disk crashes if LPM is used (Oliver Neukum) [task:460826]
  - usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive (Miao Li) [task:460826]
  - usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive (Miao Li) [task:460826]
  - usb: dwc3: xilinx: Prevent spike in reset signal (Mike Looijmans) [task:460826]
  - usb: dwc3: gadget: check that event count does not exceed event buffer length (Frode Isaksen) [task:460826]
  - USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02) (Huacai Chen) [task:460826]
  - usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling (Fedor Pchelkin) [task:460826]
  - usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines (Fedor Pchelkin) [task:460826]
  - usb: chipidea: ci_hdrc_imx: fix usbmisc handling (Fedor Pchelkin) [task:460826]
  - usb: cdns3: Fix deadlock when using NCM gadget (Ralph Siemsen) [task:460826]
  - usb: xhci: Fix invalid pointer dereference in Etron workaround (Michal Pecio) [task:460826]
  - USB: serial: simple: add OWON HDS200 series oscilloscope support (Craig Hesling) [task:460826]
  - USB: serial: option: add Sierra Wireless EM9291 (Adam Xue) [task:460826]
  - USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe (Michael Ehrenreich) [task:460826]
  - serial: sifive: lock port in startup()/shutdown() callbacks (Ryo Takakura) [task:460826]
  - serial: msm: Configure correct working mode before starting earlycon (Stephan Gerhold) [task:460826]
  - misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack (Rengarajan S) [task:460826]
  - misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration (Rengarajan S) [task:460826]
  - char: misc: register chrdev region with all possible minors (Thadeu Lima de Souza Cascardo) [task:460826]
  - KVM: x86: Reset IRTE to host control if *new* route isn't postable (Sean Christopherson) [task:460826]
  - KVM: x86: Explicitly treat routing entry type changes as changes (Sean Christopherson) [task:460826]
  - mei: me: add panther lake H DID (Alexander Usyskin) [task:460826]
  - scsi: Improve CDL control (Damien Le Moal) [task:460826]
  - USB: storage: quirk for ADATA Portable HDD CH94 (Oliver Neukum) [task:460826]
  - ata: libata-scsi: Fix ata_msense_control_ata_feature() (Damien Le Moal) [task:460826]
  - ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type (Damien Le Moal) [task:460826]
  - ata: libata-scsi: Improve CDL control (Damien Le Moal) [task:460826]
  - mcb: fix a double free bug in chameleon_parse_gdd() (Haoxiang Li) [task:460826]
  - cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports (Smita Koralahalli) [task:460826]
  - KVM: SVM: Allocate IR data using atomic allocation (Sean Christopherson) [task:460826]
  - io_uring: fix 'sync' handling of io_fallback_tw() (Jens Axboe) [task:460826]
  - LoongArch: Remove a bogus reference to ZONE_DMA (Petr Tesarik) [task:460826]
  - LoongArch: Return NULL from huge_pte_offset() for invalid PMD (Ming Wang) [task:460826]
  - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (Suzuki K Poulose) [task:460826]
  - drm/amd/display: Force full update in gpu reset (Roman Li) [task:460826]
  - drm/amd/display: Fix gpu reset in multidisplay config (Roman Li) [task:460826]
  - net: phy: microchip: force IRQ polling mode for lan88xx (Fiona Klute) [task:460826]
  - net: selftests: initialize TCP header and skb payload with zero (Oleksij Rempel) [task:460826]
  - xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() (Alexey Nepomnyashih) [task:460826]
  - crypto: atmel-sha204a - Set hwrng quality to lowest possible (Marek Behún) [task:460826]
  - virtio_console: fix missing byte order handling for cols and rows (Halil Pasic) [task:460826]
  - LoongArch: Make do_xyz() exception handlers more robust (Tiezhu Yang) [task:460826]
  - LoongArch: Make regs_irqs_disabled() more clear (Tiezhu Yang) [task:460826]
  - LoongArch: Select ARCH_USE_MEMTEST (Yuli Wang) [task:460826]
  - perf/x86: Fix non-sampling (counting) events on certain x86 platforms (Luo Gengkun) [task:460826]
  - splice: remove duplicate noinline from pipe_clear_nowait (T.J. Mercier) [task:460826]
  - iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE (Sean Christopherson) [task:460826]
  - pds_core: make wait_context part of q_info (Shannon Nelson) [task:460826]
  - pds_core: Remove unnecessary check in pds_client_adminq_cmd() (Brett Creeley) [task:460826]
  - pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result (Brett Creeley) [task:460826]
  - net: dsa: mt7530: sync driver-specific behavior of MT7531 variants (Daniel Golle) [task:460826]
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (Cong Wang) [task:460826]
  - net_sched: hfsc: Fix a UAF vulnerability in class handling (Cong Wang) [task:460826]
  - fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount() (Al Viro) [task:460826]
  - net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration (Bo-Cun Chen) [task:460826]
  - tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (Tung Nguyen) [task:460826]
  - net: phy: leds: fix memory leak (Qingfang Deng) [task:460826]
  - net: lwtunnel: disable BHs when required (Justin Iurman) [task:460826]
  - scsi: core: Clear flags for scsi_cmnd that did not complete (Anastasia Kovaleva) [task:460826]
  - btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range() (Qu Wenruo) [task:460826]
  - cpufreq: cppc: Fix invalid return value in .get() callback (Marc Zyngier) [task:460826]
  - scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort() (Chenyuan Yang) [task:460826]
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Henry Martin) [task:460826]
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (Henry Martin) [task:460826]
  - cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() (Henry Martin) [task:460826]
  - dma/contiguous: avoid warning about unused size_bytes (Arnd Bergmann) [task:460826]
  - ceph: Fix incorrect flush end position calculation (David Howells) [task:460826]
  - cpufreq/sched: Explicitly synchronize limits_changed flag handling (Rafael J. Wysocki) [task:460826]
  - scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get (Tudor Ambarus) [task:460826]
  - PCI: Fix reference leak in pci_register_host_bridge() (Ma Ke) [task:460826]
  - of: resolver: Fix device node refcount leakage in of_resolve_phandles() (Zijun Hu) [task:460826]
  - of: resolver: Simplify of_resolve_phandles() using __free() (Rob Herring (Arm)) [task:460826]
  - clk: renesas: r9a07g043: Fix HP clock source for RZ/Five (Lad Prabhakar) [task:460826]
  - clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable (Claudiu Beznea) [task:460826]
  - clk: renesas: r9a07g04[34]: Use SEL_SDHI1_STS status configuration for SD1 mux (Claudiu Beznea) [task:460826]
  - clk: renesas: rzg2l: Refactor SD mux driver (Claudiu Beznea) [task:460826]
  - clk: renesas: rzg2l: Remove CPG_SDHI_DSEL from generic header (Claudiu Beznea) [task:460826]
  - clk: renesas: rzg2l: Add struct clk_hw_data (Claudiu Beznea) [task:460826]
  - clk: renesas: rzg2l: Use u32 for flag and mux_flags (Claudiu Beznea) [task:460826]
  - arm64: tegra: Remove the Orin NX/Nano suspend key (Ninad Malwade) [task:460826]
  - iio: adc: ad7768-1: Fix conversion result sign (Sergiu Cuciurean) [task:460826]
  - iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check (Jonathan Cameron) [task:460826]
  - ASoC: q6apm-dai: make use of q6apm_get_hw_pointer (Srinivas Kandagatla) [task:460826]
  - ASoC: qcom: Fix trivial code style issues (Krzysztof Kozlowski) [task:460826]
  - ASoC: qcom: lpass: Make asoc_qcom_lpass_cpu_platform_remove() return void (Uwe Kleine-König) [task:460826]
  - ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs (Srinivas Kandagatla) [task:460826]
  - ASoC: qcom: q6apm-dai: drop unused 'q6apm_dai_rtd' fields (Krzysztof Kozlowski) [task:460826]
  - net: dsa: mv88e6xxx: fix VTU methods for 6320 family (Marek Behún) [task:460826]
  - net: dsa: mv88e6xxx: fix internal PHYs for 6320 family (Marek Behún) [task:460826]
  - auxdisplay: hd44780: Fix an API misuse in hd44780.c (Haoxiang Li) [task:460826]
  - auxdisplay: hd44780: Convert to platform remove callback returning void (Uwe Kleine-König) [task:460826]
  - mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get (Tudor Ambarus) [task:460826]
  - soc: qcom: ice: introduce devm_of_qcom_ice_get (Tudor Ambarus) [task:460826]
  - media: subdev: Add v4l2_subdev_is_streaming() (Tomi Valkeinen) [task:460826]
  - media: subdev: Improve v4l2_subdev_enable/disable_streams_fallback (Tomi Valkeinen) [task:460826]
  - media: subdev: Fix use of sd->enabled_streams in call_s_stream() (Tomi Valkeinen) [task:460826]
  - tracing: Verify event formats that have "%*p.." (Steven Rostedt) [task:460826]
  - tracing: Add __print_dynamic_array() helper (Steven Rostedt) [task:460826]
  - tracing: Add __string_len() example (Steven Rostedt (Google)) [task:460826]
  - x86/mce: use is_copy_from_user() to determine copy-from-user context (Shuai Xue) [task:460826]
  - x86/extable: Remove unused fixup type EX_TYPE_COPY (Tong Tiangen) [task:460826]
  - module: sign with sha512 instead of sha1 by default (Thorsten Leemhuis) [task:460826]
  - bonding: check xdp prog when set bond mode (Wang Liang) [task:458962] {CVE-2025-22105}
  - bonding: return detailed error when loading native XDP fails (Hangbin Liu) [task:458962]
  - udmabuf: fix a buf size overflow issue during udmabuf creation (Xiaogang Chen) [task:460826]
  - ksmbd: fix use-after-free in __smb2_lease_break_noti() (Namjae Jeon) [task:460142] {CVE-2025-37777}
  - drm/virtio: Use drm_gem_plane_helper_prepare_fb() (Dongwon Kim) [task:455029]
  - drm/virtio: Don't create a context with default param if context_init is supported (Pierre-Eric Pelloux-Prayer) [task:455029]
  - drm/vmwgfx: Unreserve BO on error (Ian Forbes) [task:455027]
  - slab: ensure slab->obj_exts is clear in a newly allocated slab page (Suren Baghdasaryan) [task:460162] {CVE-2025-37774}
  - mm, slab: move prepare_slab_obj_exts_hook under CONFIG_MEM_ALLOC_PROFILING (Suren Baghdasaryan) [task:460162]
  - mm, slab: move allocation tagging code in the alloc path into a hook (Suren Baghdasaryan) [task:460162]
  - mm, slab: move slab_memcg hooks to mm/memcontrol.c (Vlastimil Babka) [task:460162]
  - mm, slab: move memcg charging to post-alloc hook (Vlastimil Babka) [task:460162]
  - slab: make __kmem_cache_create() static inline (Christian Brauner) [task:444220]
  - slab: make kmem_cache_create_usercopy() static inline (Christian Brauner) [task:444220]
  - slab: remove kmem_cache_create_rcu() (Christian Brauner) [task:444220]
  - file: port to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: create kmem_cache_create() compatibility layer (Christian Brauner) [task:444220]
  - slab: port KMEM_CACHE_USERCOPY() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: port KMEM_CACHE() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: remove rcu_freeptr_offset from struct kmem_cache (Christian Brauner) [task:444220]
  - slab: pass struct kmem_cache_args to do_kmem_cache_create() (Christian Brauner) [task:444220]
  - slab: pull kmem_cache_open() into do_kmem_cache_create() (Christian Brauner) [task:444220]
  - slab: pass struct kmem_cache_args to create_cache() (Christian Brauner) [task:444220]
  - slab: port kmem_cache_create_usercopy() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: port kmem_cache_create_rcu() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: port kmem_cache_create() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: add struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: s/__kmem_cache_create/do_kmem_cache_create/g (Christian Brauner) [task:444220]
  - SUNWAY: dts: add Junzhang (Xu Chenjiao) [task:382309]
  - SUNWAY: lpc: work around hardware flaws (Xu Chenjiao) [task:382309]
  - SUNWAY: improve cpu bring up method (Zhi Tongze) [task:382309]
  - SUNWAY: introduce new entry framework for C4 (Wu Liliu) [task:382309]
  - SUNWAY: irq: update the initial value of nr_irqs (Zheng Chongzhen) [task:382309]
  - SUNWAY: dynamically switch between lib implementation (Mao Minkai) [task:382309]
  - SUNWAY: msi: remove redundant interrupt enables (Zheng Chongzhen) [task:382309]
  - SUNWAY: add unaligned access support for C4 new instructions (Zhi Tongze) [task:382309]
  - SUNWAY: acpi: fix missed upper bits of rcid for junzhang (Jing Li) [task:382309]
  - SUNWAY: pci: remove duplicate pcie operations (Jing Li) [task:382309]
  - udp: Deal with race between UDP socket address change and rehash (Stefano Brivio) [task:441338] {CVE-2024-57974}
  - ipv6: udp: constify 'struct net' parameter of socket lookups (Eric Dumazet) [task:441338]
  - udp: constify 'struct net' parameter of socket lookups (Eric Dumazet) [task:441338]
  - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode (Kang Yang) [task:459656] {CVE-2024-58096}
  - ax25: Remove broken autobind (Murad Masimov) [task:459548] {CVE-2025-22109}
  - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() (Vladimir Oltean) [task:459708] {CVE-2025-22107}
  - iommu/vt-d: Remove cache tags before disabling ATS (Lu Baolu) [task:459625] {CVE-2024-56669}
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails (Edward Adam Davis) [task:459661] {CVE-2025-22119}
  - ext4: avoid journaling sb update on error if journal is destroying (Ojaswin Mujoo) [task:459702] {CVE-2025-22113}
  - ext4: define ext4_journal_destroy wrapper (Ojaswin Mujoo) [task:459702]
  - Bluetooth: btnxpuart: Fix kernel panic during FW release (Neeraj Sanjay Kale) [task:459942] {CVE-2025-22102}
  - jfs: add check read-only before txBeginAnon() call (Vasiliy Kovalev) [task:459938] {CVE-2024-58095}
  - vmxnet3: unregister xdp rxq info in the reset path (Sankararaman Jayaraman) [task:459703] {CVE-2025-22106}
  - bcachefs: bch2_ioctl_subvolume_destroy() fixes (Kent Overstreet) [task:459940] {CVE-2025-22019}
  - md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb (Su Yue) [task:459657] {CVE-2025-22124}
  - media: vimc: skip .s_stream() for stopped entities (Nikita Zhandarovich) [task:459568] {CVE-2025-22028}
  - jfs: reject on-disk inodes of an unsupported type (Dmitry Antipov) [task:459660] {CVE-2025-37925}
  - net: libwx: fix Tx L4 checksum (Jiawen Wu) [task:459624] {CVE-2025-22101}
  - f2fs: fix potential deadloop in prepare_compress_overwrite() (Chao Yu) [task:459706] {CVE-2025-22127}
  - md/raid10: wait barrier before returning discard request with REQ_NOWAIT (Xiao Ni) [task:459410] {CVE-2025-40325}
  - ksmbd: fix overflow in dacloffset bounds check (Norbert Szetei) [task:459562] {CVE-2025-22039}
  - smb: common: change the data type of num_aces to le16 (Namjae Jeon) [task:459562]
  - wifi: ath11k: fix RCU stall while reaping monitor destination ring (P Praneesh) [task:459546] {CVE-2024-58097}
  - dlm: prevent NPD when writing a positive value to event_done (Thadeu Lima de Souza Cascardo) [task:459658] {CVE-2025-23131}
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (Ye Bin) [task:459580] {CVE-2025-22121}
  - ext4: introduce ITAIL helper (Ye Bin) [task:459580]
  - ibmvnic: Use kernel helpers for hex dumps (Nick Child) [task:459569] {CVE-2025-22104}
  - net: fix NULL pointer dereference in l3mdev_l3_rcv (Wang Liang) [task:459407] {CVE-2025-22103}
  - jfs: add check read-only before truncation in jfs_truncate_nolock() (Vasiliy Kovalev) [task:459936] {CVE-2024-58094}
  - smb: client: fix UAF in decryption with multichannel (Paulo Alcantara) [task:460233] {CVE-2025-37750}
  - smb: client: allocate crypto only for primary server (Enzo Matsumiya) [task:460233]
  - net: stmmac: Fix accessing freed irq affinity_hint (Qingfang Deng) [task:460178] {CVE-2025-23155}
  - landlock: Add the errata interface (Mickaël Salaün)
  - Fix mmu notifiers for range-based invalidates (Piotr Jaroszynski)
  - mptcp: sockopt: fix getting freebind & transparent (Matthieu Baerts (NGI0))
  - iommufd: Fail replace if device has not been attached (Yi Liu)
  - ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (Takashi Iwai) [task:458731]
  - drm/tests: Build KMS helpers when DRM_KUNIT_TEST_HELPERS is enabled (Karolina Stolarek) [task:458731]
  - btrfs: fix the length of reserved qgroup to free (Haisu Wang) [task:458731]
  - MIPS: ds1287: Match ds1287_set_base_clock() function types (WangYuli) [task:458731]
  - MIPS: cevt-ds1287: Add missing ds1287.h include (WangYuli) [task:458731]
  - MIPS: dec: Declare which_prom() as static (WangYuli) [task:458731]
  - xdp: Reset bpf_redirect_info before running a xdp's BPF prog. (Sebastian Andrzej Siewior) [task:458731]
  - nvmet-fc: Remove unused functions (WangYuli) [task:458731]
  - wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit (Ping-Ke Shih) [task:458731]
  - wifi: rtw89: pci: add pre_deinit to be called after probe complete (Ping-Ke Shih) [task:458731]
  - usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (GONG Ruiqi) [task:458731]
  - LoongArch: Eliminate superfluous get_numa_distances_cnt() (Yuli Wang) [task:458731]
  - powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (Nathan Lynch) [task:458731]
  - x86/split_lock: Fix the delayed detection logic (Maksim Davydov) [task:458731]
  - x86/tdx: Fix arch_safe_halt() execution for TDX VMs (Vishal Annapurve) [task:458731]
  - efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32 (Hamza Mahfooz) [task:458731]
  - misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type (Kunihiko Hayashi) [task:458731]
  - misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error (Kunihiko Hayashi) [task:458731]
  - misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (Kunihiko Hayashi) [task:458731]
  - kbuild: Add '-fno-builtin-wcslen' (Nathan Chancellor) [task:458731]
  - cpufreq: Reference count policy in cpufreq_update_limits() (Rafael J. Wysocki) [task:458731]
  - io_uring/net: fix accept multishot handling (Pavel Begunkov) [task:458731]
  - drm/i915/gvt: fix unterminated-string-initialization warning (Jani Nikula) [task:458731]
  - drm/sti: remove duplicate object names (Rolf Eike Beer) [task:458731]
  - drm/nouveau: prime: fix ttm_bo_delayed_delete oops (Chris Bainbridge) [task:458731]
  - drm/amdgpu/dma_buf: fix page_link check (Matthew Auld) [task:458731]
  - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm/smu11: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm/powerplay: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd: Handle being compiled without SI or CIK support better (Mario Limonciello) [task:458731]
  - drm/msm/a6xx: Fix stale rpmh votes from GPU (Akhil P Oommen) [task:458731]
  - drm/repaper: fix integer overflows in repeat functions (Nikita Zhandarovich) [task:458731]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR (Kan Liang) [task:458731]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX (Kan Liang) [task:458731]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR (Kan Liang) [task:458731]
  - perf/x86/intel: Allow to update user space GPRs from PEBS records (Dapeng Mi) [task:458731]
  - RDMA/cma: Fix workqueue crash in cma_netevent_work_handler (Sharath Srinivasan) [task:458731]
  - scsi: ufs: exynos: Ensure consistent phy reference counts (Peter Griffin) [task:458731]
  - scsi: megaraid_sas: Block zero-length ATA VPD inquiry (Chandrakanth Patil) [task:458731]
  - x86/boot/sev: Avoid shared GHCB page for early memory acceptance (Ard Biesheuvel) [task:458731]
  - x86/cpu/amd: Fix workaround for erratum 1054 (Sandipan Das) [task:458731]
  - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Borislav Petkov (AMD)) [task:458731]
  - virtiofs: add filesystem context source name check (Xiangsheng Hou) [task:458731]
  - tracing: Fix filter string testing (Steven Rostedt) [task:458731]
  - string: Add load_unaligned_zeropad() code path to sized_strscpy() (Peter Collingbourne) [task:458731]
  - smb3 client: fix open hardlink on deferred close file error (Chunjie Zhu) [task:458731]
  - selftests/mm: generate a temporary mountpoint for cgroup filesystem (Mark Brown) [task:458731]
  - riscv: Avoid fortify warning in syscall_get_arguments() (Nathan Chancellor) [task:458731]
  - Revert "smb: client: fix TCP timers deadlock after rmmod" (Kuniyuki Iwashima) [task:458731]
  - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Kuniyuki Iwashima) [task:458731]
  - ksmbd: fix the warning from __kernel_write_iter (Namjae Jeon) [task:458731]
  - ksmbd: Prevent integer overflow in calculation of deadtime (Denis Arefev) [task:458731]
  - ksmbd: fix use-after-free in smb_break_all_levII_oplock() (Namjae Jeon) [task:458731]
  - ksmbd: Fix dangling pointer in krb_authenticate (Sean Heelan) [task:458731]
  - ovl: don't allow datadir only (Miklos Szeredi) [task:458731]
  - mm: fix apply_to_existing_page_range() (Kirill A. Shutemov) [task:458731]
  - mm: fix filemap_get_folios_contig returning batches of identical folios (Vishal Moola (Oracle)) [task:458731]
  - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Baoquan He) [task:458731]
  - loop: LOOP_SET_FD: send uevents for partitions (Thomas Weißschuh) [task:458731]
  - loop: properly send KOBJ_CHANGED uevent for disk device (Thomas Weißschuh) [task:458731]
  - isofs: Prevent the use of too small fid (Edward Adam Davis) [task:458731]
  - i2c: cros-ec-tunnel: defer probe if parent EC is not present (Thadeu Lima de Souza Cascardo) [task:458731]
  - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key (Vasiliy Kovalev) [task:458731]
  - crypto: caam/qi - Fix drv_ctx refcount bug (Herbert Xu) [task:458731]
  - btrfs: correctly escape subvol in btrfs_show_options() (Johannes Kimmel) [task:458731]
  - Bluetooth: vhci: Avoid needless snprintf() calls (Kees Cook) [task:458731]
  - Bluetooth: l2cap: Process valid commands in too long frame (Frédéric Danis) [task:458731]
  - ftrace: fix incorrect hash size in register_ftrace_direct() (Menglong Dong) [task:458731]
  - i2c: atr: Fix wrong include (Andy Shevchenko) [task:458731]
  - nfsd: decrease sc_count directly if fail to queue dl_recall (Li Lingfeng) [task:458731]
  - nfs: add missing selections of CONFIG_CRC32 (Eric Biggers) [task:458731]
  - asus-laptop: Fix an uninitialized variable (Denis Arefev) [task:458731]
  - ASoC: qcom: Fix sc7280 lpass potential buffer overflow (Evgeny Pimenov) [task:458731]
  - ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels (Srinivas Kandagatla) [task:458731]
  - ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate (Srinivas Kandagatla) [task:458731]
  - Revert "PCI: Avoid reset when disabled via sysfs" (Alex Williamson) [task:458731]
  - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [task:458731]
  - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS (Rafael J. Wysocki) [task:458731]
  - riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break (WangYuli) [task:458731]
  - riscv: KGDB: Do not inline arch_kgdb_breakpoint() (WangYuli) [task:458731]
  - kunit: qemu_configs: SH: Respect kunit cmdline (Thomas Weißschuh) [task:458731]
  - riscv: Properly export reserved regions in /proc/iomem (Björn Töpel) [task:458731]
  - net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings (Bo-Cun Chen) [task:458731]
  - net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 100Mbps (Bo-Cun Chen) [task:458731]
  - net: ti: icss-iep: Fix possible NULL pointer dereference for perout request (Meghana Malladi) [task:458731]
  - net: ti: icss-iep: Add phase offset configuration for perout signal (Meghana Malladi) [task:458731]
  - net: ti: icss-iep: Add pwidth configuration for perout signal (Meghana Malladi) [task:458731]
  - ptp: ocp: fix start time alignment in ptp_ocp_signal_set (Sagi Maimon) [task:458731]
  - net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails (Vladimir Oltean) [task:458731]
  - net: dsa: free routing table on probe failure (Vladimir Oltean) [task:458731]
  - net: dsa: clean up FDB, MDB, VLAN entries on unbind (Vladimir Oltean) [task:458731]
  - net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (Vladimir Oltean) [task:458731]
  - net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered (Vladimir Oltean) [task:458731]
  - net: bridge: switchdev: do not notify new brentries as changed (Jonas Gorski) [task:458731]
  - net: b53: enable BPDU reception for management port (Jonas Gorski) [task:458731]
  - netlink: specs: rt-link: adjust mctp attribute naming (Jakub Kicinski) [task:458731]
  - netlink: specs: rt-link: add an attr layer around alt-ifname (Jakub Kicinski) [task:458731]
  - cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path (Abdun Nihaal) [task:458731]
  - ata: libata-sata: Save all fields from sense data descriptor (Niklas Cassel) [task:458731]
  - net: ethernet: ti: am65-cpsw: fix port_np reference counting (Michael Walle) [task:458731]
  - net: ethernet: ti: am65-cpsw-nuss: rename phy_node -> port_np (Alexander Sverdlin) [task:458731]
  - net: ngbe: fix memory leak in ngbe_probe() error path (Abdun Nihaal) [task:458731]
  - net: openvswitch: fix nested key length validation in the set() action (Ilya Maximets) [task:458731]
  - block: fix resource leak in blk_register_queue() error path (Zheng Qixing) [task:458731]
  - net: mctp: Set SOCK_RCU_FREE (Matt Johnston) [task:458731]
  - pds_core: fix memory leak in pdsc_debugfs_add_qcq() (Abdun Nihaal) [task:458731]
  - test suite: use %zu to print size_t (Matthew Wilcox (Oracle)) [task:458731]
  - igc: add lock preventing multiple simultaneous PTM transactions (Christopher S M Hall) [task:458731]
  - igc: cleanup PTP module if probe fails (Christopher S M Hall) [task:458731]
  - igc: handle the IGC_PTP_ENABLED flag correctly (Christopher S M Hall) [task:458731]
  - igc: move ktime snapshot into PTM retry loop (Christopher S M Hall) [task:458731]
  - igc: increase wait time before retrying PTM (Christopher S M Hall) [task:458731]
  - igc: fix PTM cycle trigger logic (Christopher S M Hall) [task:458731]
  - Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (Johannes Berg) [task:458731]
  - Bluetooth: l2cap: Check encryption key size on incoming connection (Frédéric Danis) [task:458731]
  - Bluetooth: btrtl: Prevent potential NULL dereference (Dan Carpenter) [task:458731]
  - Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address (Luiz Augusto von Dentz) [task:458731]
  - RDMA/core: Silence oversized kvmalloc() warning (Shay Drory) [task:458731]
  - ASoC: cs42l43: Reset clamp override on jack removal (Charles Keepax) [task:458731]
  - RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe() (Yue Haibing) [task:458731]
  - ovl: remove unused forward declaration (Giuseppe Scrivano) [task:458731]
  - ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() (Henry Martin) [task:458731]
  - ASoC: dwc: always enable/disable i2s irqs (Brady Norander) [task:458731]
  - md/md-bitmap: fix stats collection for external bitmaps (Zheng Qixing) [task:458731]
  - md/raid10: fix missing discard IO accounting (Yu Kuai) [task:458731]
  - scsi: iscsi: Fix missing scsi_host_put() in error path (Miaoqian Lin) [task:458731]
  - wifi: wl1251: fix memory leak in wl1251_tx_work (Abdun Nihaal) [task:458731]
  - wifi: mac80211: Purge vif txq in ieee80211_do_stop() (Remi Pommarel) [task:458731]
  - wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() (Remi Pommarel) [task:458731]
  - wifi: at76c50x: fix use after free access in at76_disconnect (Abdun Nihaal) [task:458731]
  - scsi: hisi_sas: Enable force phy when SATA disk directly connected (Xingui Yang) [task:458731]
  - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition (Kaixin Wang) [task:458731]
  - Bluetooth: hci_uart: Fix another race during initialization (Arseniy Krasnov) [task:458731]
  - media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline (Arnd Bergmann) [task:458731]
  - x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() (Myrrh Periwinkle) [task:458731]
  - ACPI: platform-profile: Fix CFI violation when accessing sysfs files (Nathan Chancellor) [task:458731]
  - x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT (Kirill A. Shutemov) [task:458731]
  - arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Douglas Anderson) [task:458731]
  - selftests: mptcp: fix incorrect fd checks in main_loop (Cong Liu) [task:458731]
  - selftests: mptcp: close fd_in before returning in main_loop (Geliang Tang) [task:458731]
  - pinctrl: qcom: Clear latched interrupt status when changing IRQ type (Stephan Gerhold) [task:458731]
  - phy: freescale: imx8m-pcie: assert phy reset and perst in power off (Stefan Eichenberger) [task:458731]
  - PCI: Fix reference leak in pci_alloc_child_bus() (Ma Ke) [task:458731]
  - PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe() (Stanimir Varbanov) [task:458731]
  - of/irq: Fix device node refcount leakages in of_irq_init() (Zijun Hu) [task:458731]
  - of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() (Zijun Hu) [task:458731]
  - of/irq: Fix device node refcount leakages in of_irq_count() (Zijun Hu) [task:458731]
  - of/irq: Fix device node refcount leakage in API of_irq_parse_raw() (Zijun Hu) [task:458731]
  - of/irq: Fix device node refcount leakage in API of_irq_parse_one() (Zijun Hu) [task:458731]
  - ntb: use 64-bit arithmetic for the MSI doorbell mask (Fedor Pchelkin) [task:458731]
  - KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (Sean Christopherson) [task:458731]
  - KVM: x86: Explicitly zero-initialize on-stack CPUID unions (Sean Christopherson) [task:458731]
  - gve: handle overflow when reporting TX consumed descriptors (Joshua Washington) [task:458731]
  - gpio: zynq: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski) [task:458731]
  - gpio: tegra186: fix resource handling in ACPI probe path (Guixin Liu) [task:458731]
  - ftrace: Add cond_resched() to ftrace_graph_set_hash() (zhoumin) [task:458731]
  - dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg' (Krzysztof Kozlowski) [task:458731]
  - dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg' (Krzysztof Kozlowski) [task:458731]
  - dm-verity: fix prefetch-vs-suspend race (Mikulas Patocka) [task:458731]
  - dm-integrity: set ti->error on memory allocation failure (Mikulas Patocka) [task:458731]
  - dm-ebs: fix prefetch-vs-suspend race (Mikulas Patocka) [task:458731]
  - crypto: ccp - Fix check for the primary ASP device (Tom Lendacky) [task:458731]
  - clk: qcom: gdsc: Set retain_ff before moving to HW CTRL (Taniya Das) [task:458731]
  - clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code (Bryan O'Donoghue) [task:458731]
  - clk: qcom: gdsc: Release pm subdomains in reverse add order (Bryan O'Donoghue) [task:458731]
  - clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks (Ajit Pandey) [task:458731]
  - cifs: Ensure that all non-client-specific reparse points are processed by the server (Pali Rohár) [task:458731]
  - cifs: fix integer overflow in match_server() (Roman Smirnov) [task:458731]
  - cifs: avoid NULL pointer dereference in dbg call (Alexandra Diupina) [task:458731]
  - thermal/drivers/rockchip: Add missing rk3328 mapping entry (Trevor Woerner) [task:458731]
  - tracing: Do not add length to print format in synthetic events (Steven Rostedt) [task:458731]
  - x86/xen: fix balloon target initialization for PVH dom0 (Roger Pau Monne) [task:458731]
  - sctp: detect and prevent references to a freed transport in sendmsg (Ricardo Cañuelo Navarro) [task:458731]
  - mm/hugetlb: move hugetlb_sysctl_init() to the __init section (Marc Herbert) [task:458731]
  - mm/hwpoison: do not send SIGBUS to processes with recovered clean pages (Shuai Xue) [task:458731]
  - mm/userfaultfd: fix release hang over concurrent GUP (Peter Xu) [task:458731]
  - mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock (Mathieu Desnoyers) [task:458731]
  - mm/mremap: correctly handle partial mremap() of VMA starting at 0 (Lorenzo Stoakes) [task:458731]
  - mm: fix lazy mmu docs and usage (Ryan Roberts) [task:458731]
  - mm: make page_mapped_in_vma() hugetlb walk aware (Jane Chu) [task:458731]
  - mm/rmap: reject hugetlb folios in folio_make_device_exclusive() (David Hildenbrand) [task:458731]
  - sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes (Ryan Roberts) [task:458731]
  - sparc/mm: disable preemption in lazy mmu mode (Ryan Roberts) [task:458731]
  - iommufd: Fix uninitialized rc in iommufd_access_rw() (Nicolin Chen) [task:458731]
  - btrfs: zoned: fix zone finishing with missing devices (Johannes Thumshirn) [task:458731]
  - btrfs: zoned: fix zone activation with missing devices (Johannes Thumshirn) [task:458731]
  - btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers (Filipe Manana) [task:458731]
  - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() (Herve Codina) [task:458731]
  - arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string (Chen-Yu Tsai) [task:458731]
  - arm64: mm: Correct the update of max_pfn (Zhenhua Huang) [task:458731]
  - mtd: rawnand: Add status chack in r852_ready() (Wentao Liang) [task:458731]
  - mtd: inftlcore: Add error check for inftl_read_oob() (Wentao Liang) [task:458731]
  - mptcp: only inc MPJoinAckHMacFailure for HMAC failures (Matthieu Baerts (NGI0)) [task:458731]
  - mptcp: fix NULL pointer in can_accept_new_subflow (Gang Yan) [task:458731]
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets (T Pratham) [task:458731]
  - locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() (Boqun Feng) [task:458731]
  - mailbox: tegra-hsp: Define dimensioning masks in SoC data (Kartik Rajput) [task:458731]
  - mfd: ene-kb3930: Fix a potential NULL pointer dereference (Chenyuan Yang) [task:458731]
  - leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs (Abel Vesa) [task:458731]
  - leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs (Abel Vesa) [task:458731]
  - jbd2: remove wrong sb->s_sequence check (Jan Kara) [task:458731]
  - i3c: Add NULL pointer check in i3c_master_queue_ibi() (Manjunatha Venkatesh) [task:458731]
  - i3c: master: svc: Use readsb helper for reading MDB (Stanley Chu) [task:458731]
  - smb311 client: fix missing tcon check when mounting with linux/posix extensions (Steve French) [task:458731]
  - soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() (Chenyuan Yang) [task:458731]
  - tpm: do not start chip while suspended (Thadeu Lima de Souza Cascardo) [task:458731]
  - udf: Fix inode_getblk() return value (Jan Kara) [task:458731]
  - vdpa/mlx5: Fix oversized null mkey longer than 32bit (Si-Wei Liu) [task:458731]
  - f2fs: fix to avoid atomicity corruption of atomic file (Yeongjin Gil) [task:458731]
  - ext4: fix off-by-one error in do_split (Artem Sadovnikov) [task:458731]
  - bus: mhi: host: Fix race between unprepare and queue_buf (Jeff Hugo) [task:458731]
  - ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path (Alexey Klimov) [task:458731]
  - ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns. (Srinivas Kandagatla) [task:458731]
  - ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment. (Srinivas Kandagatla) [task:458731]
  - ASoC: q6apm: add q6apm_get_hw_pointer helper (Srinivas Kandagatla) [task:458731]
  - io_uring/kbuf: reject zero sized provided buffers (Jens Axboe) [task:458731]
  - wifi: mac80211: fix integer overflow in hwmp_route_info_get() (Gavrilov Ilia) [task:458731]
  - wifi: mt76: Add check for devm_kstrdup() (Haoxiang Li) [task:458731]
  - clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup (Alexandre Torgue) [task:458731]
  - mtd: Replace kcalloc() with devm_kcalloc() (Jiasheng Jiang) [task:458731]
  - net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family (Marek Behún) [task:458731]
  - mtd: Add check for devm_kcalloc() (Jiasheng Jiang) [task:458731]
  - mptcp: sockopt: fix getting IPV6_V6ONLY (Matthieu Baerts (NGI0)) [task:458731]
  - media: i2c: imx219: Rectify runtime PM handling in probe and remove (Sakari Ailus) [task:458731]
  - media: venus: hfi_parser: refactor hfi packet parsing logic (Vikash Garodia) [task:458731]
  - media: venus: hfi_parser: add check to avoid out of bound access (Vikash Garodia) [task:458731]
  - media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO (Sakari Ailus) [task:458731]
  - media: i2c: ov7251: Set enable GPIO low in probe (Sakari Ailus) [task:458731]
  - media: i2c: ccs: Set the device's runtime PM status correctly in probe (Sakari Ailus) [task:458731]
  - media: i2c: ccs: Set the device's runtime PM status correctly in remove (Sakari Ailus) [task:458731]
  - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Karina Yankevich) [task:458731]
  - media: platform: stm32: Add check for clk_enable() (Jiasheng Jiang) [task:458731]
  - media: visl: Fix ERANGE error when setting enum controls (Nicolas Dufresne) [task:458731]
  - media: streamzap: prevent processing IR data on URB failure (Murad Masimov) [task:458731]
  - tpm, tpm_tis: Fix timeout handling when waiting for TPM status (Jonathan McDowell) [task:458731]
  - mtd: rawnand: brcmnand: fix PM resume warning (Kamal Dasu) [task:458731]
  - spi: cadence-qspi: Fix probe on AM62A LP SK (Miquel Raynal) [task:458731]
  - KVM: arm64: Tear down vGIC on failed vCPU creation (Will Deacon) [task:458731]
  - arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Douglas Anderson) [task:458731]
  - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Douglas Anderson) [task:458731]
  - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Douglas Anderson) [task:458731]
  - arm64: cputype: Add MIDR_CORTEX_A76AE (Douglas Anderson) [task:458731]
  - xenfs/xensyms: respect hypervisor's "next" indication (Jan Beulich) [task:458731]
  - media: siano: Fix error handling in smsdvb_module_init() (Yuan Can) [task:458731]
  - media: vim2m: print device name after registering device (Matthew Majewski) [task:458731]
  - media: venus: hfi: add check to handle incorrect queue size (Vikash Garodia) [task:458731]
  - media: venus: hfi: add a check to handle OOB in sfr region (Vikash Garodia) [task:458731]
  - media: i2c: adv748x: Fix test pattern selection mask (Niklas Söderlund) [task:458731]
  - media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning (Arnd Bergmann) [task:458731]
  - media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (Jiasheng Jiang) [task:458731]
  - dt-bindings: media: st,stmipid02: correct lane-polarities maxItems (Alain Volmat) [task:458731]
  - ext4: don't treat fhandle lookup of ea_inode as FS corruption (Jann Horn) [task:458731]
  - bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags (Willem de Bruijn) [task:458731]
  - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Uwe Kleine-König) [task:458731]
  - pwm: rcar: Improve register calculation (Uwe Kleine-König) [task:458731]
  - pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() (Josh Poimboeuf) [task:458731]
  - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Jonathan McDowell) [task:458731]
  - ktest: Fix Test Failures Due to Missing LOG_FILE Directories (Ayush Jain) [task:458731]
  - tracing: probe-events: Add comments about entry data storing code (Masami Hiramatsu (Google)) [task:458731]
  - fbdev: omapfb: Add 'plane' value check (Leonid Arapov) [task:458731]
  - drm/amdgpu: grab an additional reference on the gang fence v2 (Christian König) [task:458731]
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Ryo Takakura) [task:458731]
  - drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() (Wentao Liang) [task:458731]
  - drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off (AngeloGioacchino Del Regno) [task:458731]
  - drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data (AngeloGioacchino Del Regno) [task:458731]
  - drm/amdkfd: debugfs hang_hws skip GPU with MES (Philip Yang) [task:458731]
  - drm/amdkfd: Fix pqm_destroy_queue race with GPU reset (Philip Yang) [task:458731]
  - drm/amdkfd: Fix mode1 reset crash issue (Philip Yang) [task:458731]
  - drm/amdkfd: clamp queue size to minimum (David Yat Sin) [task:458731]
  - drivers: base: devres: Allow to release group on device release (Lucas De Marchi) [task:458731]
  - drm/bridge: panel: forbid initializing a panel with unknown connector type (Luca Ceresoli) [task:458731]
  - drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel) (Andrew Wyatt) [task:458731]
  - drm: panel-orientation-quirks: Add new quirk for GPD Win 2 (Andrew Wyatt) [task:458731]
  - drm: panel-orientation-quirks: Add quirk for AYA NEO Slide (Andrew Wyatt) [task:458731]
  - drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB (Andrew Wyatt) [task:458731]
  - drm: panel-orientation-quirks: Add support for AYANEO 2S (Andrew Wyatt) [task:458731]
  - drm/amd/display: add workaround flag to link to force FFE preset (Brendan Tam) [task:458731]
  - drm/amd/display: Update Cursor request mode to the beginning prefetch always (Zhikai Zhai) [task:458731]
  - drm: allow encoder mode_set even when connectors change for crtc (Abhinav Kumar) [task:458731]
  - Bluetooth: qca: simplify WCN399x NVM loading (Dmitry Baryshkov) [task:458731]
  - Bluetooth: hci_uart: fix race during initialization (Arseniy Krasnov) [task:458731]
  - tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER (Gabriele Paoloni) [task:458731]
  - net: vlan: don't propagate flags on open (Stanislav Fomichev) [task:458731]
  - wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table (Icenowy Zheng) [task:458731]
  - scsi: st: Fix array overflow in st_setup() (Kai Mäkisara) [task:458731]
  - cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk (Philipp Hahn) [task:458731]
  - ext4: ignore xattrs past end (Bhupesh) [task:458731]
  - Revert "f2fs: rebuild nat_bits during umount" (Chao Yu) [task:458731]
  - ext4: protect ext4_release_dquot against freezing (Ojaswin Mujoo) [task:458731]
  - ahci: add PCI ID for Marvell 88SE9215 SATA Controller (Daniel Kral) [task:458731]
  - f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() (Chao Yu) [task:458731]
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (Manish Dharanenthiran) [task:458731]
  - net: sfp: add quirk for 2.5G OEM BX SFP (Birger Koblitz) [task:458731]
  - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode (Niklas Cassel) [task:458731]
  - jfs: add sanity check for agwidth in dbMount (Edward Adam Davis) [task:458731]
  - jfs: Prevent copying of nlink with value 0 from disk inode (Edward Adam Davis) [task:458731]
  - fs/jfs: Prevent integer overflow in AG size calculation (Rand Deeb) [task:458731]
  - fs/jfs: cast inactags to s64 to prevent potential overflow (Rand Deeb) [task:458731]
  - jfs: Fix uninit-value access of imap allocated in the diMount() function (Zhongqiu Han) [task:458731]
  - page_pool: avoid infinite loop to schedule delayed worker (Jason Xing) [task:458731]
  - net: usb: asix_devices: add FiberGecko DeviceID (Max Schulze) [task:458731]
  - scsi: target: spc: Fix RSOC parameter data header size (Chaohai Chen) [task:458731]
  - f2fs: don't retry IO for corrupted data scenario (Chao Yu) [task:458731]
  - wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process (P Praneesh) [task:458731]
  - ASoC: amd: yc: update quirk data for new Lenovo model (Syed Saba kareem) [task:458731]
  - ASoC: amd: Add DMI quirk for ACP6X mic support (keenplify) [task:458731]
  - ALSA: usb-audio: Fix CME quirk for UF series keyboards (Ricard Wanderlof) [task:458731]
  - mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves (Kaustabh Chakraborty) [task:458731]
  - media: uvcvideo: Add quirk for Actions UVC05 (Ricardo Ribalda) [task:458731]
  - ASoC: fsl_audmix: register card device depends on 'dais' property (Shengjiu Wang) [task:458731]
  - ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist (Maxim Mikityanskiy) [task:458731]
  - ALSA: hda: intel: Fix Optimus when GPU has no sound (Maxim Mikityanskiy) [task:458731]
  - HID: pidff: Fix null pointer dereference in pidff_find_fields (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add PERIODIC_SINE_ONLY quirk (Tomasz Pakuła) [task:458731]
  - HID: Add hid-universal-pidff driver and supported device ids (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add FIX_WHEEL_DIRECTION quirk (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add PERMISSIVE_CONTROL quirk (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add MISSING_PBO quirk and its detection (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add MISSING_DELAY quirk and its detection (Tomasz Pakuła) [task:458731]
  - HID: pidff: Do not send effect envelope if it's empty (Tomasz Pakuła) [task:458731]
  - HID: pidff: Convert infinite length from Linux API to PID standard (Tomasz Pakuła) [task:458731]
  - ASoC: SOF: topology: Use krealloc_array() to replace krealloc() (Zhang Heng) [task:458731]
  - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault (Ingo Molnar) [task:458731]
  - xen/mcelog: Add __nonstring annotations for unterminated strings (Kees Cook) [task:458731]
  - arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD (Douglas Anderson) [task:458731]
  - perf: arm_pmu: Don't disable counter in armpmu_add() (Mark Rutland) [task:458731]
  - x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine (Max Grobecker) [task:458731]
  - x86/ia32: Leave NULL selector values 0~3 unchanged (Xin Li (Intel)) [task:458731]
  - x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW (Matthew Wilcox (Oracle)) [task:458731]
  - pm: cpupower: bench: Prevent NULL dereference on malloc failure (Zhongqiu Han) [task:458731]
  - umount: Allow superblock owners to force umount (Trond Myklebust) [task:458731]
  - fs: consistently deref the files table with rcu_dereference_raw() (Mateusz Guzik) [task:458731]
  - iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (Louis-Alexis Eyraud) [task:458731]
  - nft_set_pipapo: fix incorrect avx2 match of 5th field octet (Florian Westphal) [task:458731]
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung (Arnaud Lecomte) [task:458731]
  - ipv6: Align behavior across nexthops during path selection (Ido Schimmel) [task:458731]
  - net_sched: sch_sfq: move the limit validation (Octavian Purdila) [task:458731]
  - net_sched: sch_sfq: use a temporary work area for validating configuration (Octavian Purdila) [task:458731]
  - nvmet-fcloop: swap list_add_tail arguments (Daniel Wagner) [task:458731]
  - drm/i915/huc: Fix fence not released on early probe errors (Janusz Krzysztofik) [task:458731]
  - ata: sata_sx4: Add error handling in pdc20621_i2c_read() (Wentao Liang) [task:458731]
  - net: libwx: handle page_pool_dev_alloc_pages error (Chenyuan Yang) [task:458731]
  - drm/tests: probe-helper: Fix drm_display_mode memory leak (Maxime Ripard) [task:458731]
  - drm/tests: modes: Fix drm_display_mode memory leak (Maxime Ripard) [task:458731]
  - drm/tests: cmdline: Fix drm_display_mode memory leak (Maxime Ripard) [task:458731]
  - drm/tests: helpers: Create kunit helper to destroy a drm_display_mode (Maxime Ripard) [task:458731]
  - drm/tests: helpers: Fix compiler warning (Yu-Chun Lin) [task:458731]
  - drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic() (Jinjie Ruan) [task:458731]
  - drm/tests: Add helper to create mock crtc (Maxime Ripard) [task:458731]
  - drm/tests: Add helper to create mock plane (Maxime Ripard) [task:458731]
  - drm/tests: helpers: Add atomic helpers (Maxime Ripard) [task:458731]
  - drm/tests: modeset: Fix drm_display_mode memory leak (Maxime Ripard) [task:458731]
  - net: ethtool: Don't call .cleanup_data when prepare_data fails (Maxime Chevallier) [task:458731]
  - tc: Ensure we have enough buffer space when sending filter netlink notifications (Toke Høiland-Jørgensen) [task:458731]
  - net/sched: cls_api: conditional notification of events (Pedro Tammela) [task:458731]
  - rtnl: add helper to check if a notification is needed (Victor Nogueira) [task:458731]
  - rtnl: add helper to check if rtnl group has listeners (Jamal Hadi Salim) [task:458731]
  - octeontx2-pf: qos: fix VF root node parent queue index (Hariprasad Kelam) [task:458731]
  - net: tls: explicitly disallow disconnect (Jakub Kicinski) [task:458731]
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Cong Wang) [task:458731]
  - tipc: fix memory leak in tipc_link_xmit (Tung Nguyen) [task:458731]
  - objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret() (Josh Poimboeuf) [task:458731]
  - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() (Henry Martin) [task:458731]
  - drm/i915: Disable RPG during live selftest (Badal Nilawar) [task:458731]
  - drm/i915/dg2: wait for HuC load completion before running selftests (Daniele Ceraolo Spurio) [task:458731]
  - selftests/futex: futex_waitv wouldblock test should fail (Edward Liaw) [task:458731]
  - fix missing file error in sw64 (liuyunchen) [task:382309]
  - support stackprotector in sw64 (leechm) [task:382309]
  - fix some compile error in sw64 (kylin) [task:382309]
  - SUNWAY: irq: remove unnecessary initialization (Jing Li) [task:382309]
  - SUNWAY: acpi: enable generic GSI (Jing Li) [task:382309]
  - SUNWAY: irqchip: support ACPI-based interrupt controller initialization (Jing Li) [task:382309]
  - SUNWAY: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC (Jing Li) [task:382309]
  - SUNWAY: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC (Jing Li) [task:382309]
  - SUNWAY: fix compilation warning (He Chuyue) [task:382309]
  - SUNWAY: fix kconfig selections (Mao Minkai) [task:382309]
  - SUNWAY: use a new wrap_asid hmcall when asid wraps (Mao Minkai) [task:382309]
  - SUNWAY: rewrite fpcr and swcr conversion (Mao Minkai) [task:382309]
  - SUNWAY: enable hardware denorm by default (Mao Minkai) [task:382309]
  - SUNWAY: add four-socket system support (Wu Liliu) [task:382309]
  - SUNWAY: add a new kernel parameter to override mclk (Mao Minkai) [task:382309]
  - SUNWAY: msi: fix bugs in multi-msi interrupts allocation and release (Zheng Chongzhen) [task:382309]
  - SUNWAY: pci: change pci transaction ordering rule settings (Zheng Chongzhen) [task:382309]
  - SUNWAY: irqchip: fix virtual PINTC not working properly (Jing Li) [task:382309]
  - SUNWAY: dts: improve properties for PINTC (Jing Li) [task:382309]
  - SUNWAY: dts: improve properties for LPC-INTC (Jing Li) [task:382309]
  - SUNWAY: dts: fix interrupt related properties for GPIO (Jing Li) [task:382309]
  - SUNWAY: dts: add chosen node (Jing Li) [task:382309]
  - SUNWAY: dts: fix properties for spi controller device node (Jing Li) [task:382309]
  - SUNWAY: acpi: fix coding style and typos (Jing Li) [task:382309]
  - SUNWAY: fix rd_f compatibility issue for C4 (He Chuyue) [task:382309]
  - SUNWAY: fix macro definition compilation error (Tang Jinyang) [task:382309]
  - SUNWAY: pci: fix compile error when CONFIG_ACPI=n (Jing Li) [task:382309]
  - SUNWAY: smp: suppress function setup_smp() when ACPI enabled (Jing Li) [task:382309]
  - SUNWAY: acpi: parse SW CINTC for SMP initialization (Jing Li) [task:382309]
  - SUNWAY: acpi: support MADT entry print for SW CINTC (Jing Li) [task:382309]
  - SUNWAY: acpi: add ACPI-style structures for SW CINTC (Jing Li) [task:382309]
  - SUNWAY: smp: add new structure to record rcid information (Jing Li) [task:382309]
  - SUNWAY: smp: modify function smp_rcb_init() to receive base address (Jing Li) [task:382309]
  - SUNWAY: pci: synchronize the OEM table ID of MCFG with BIOS (Jing Li) [task:382309]
  - SUNWAY: iommu: fix the bug when vfio_iommu unpin pages (Zheng Chongzhen) [task:382309]
  - SUNWAY: use rvpcr() to setup run mode (Wu Liliu) [task:382309]
  - SUNWAY: kgdb: add single-step debug support (Zhi Tongze) [task:382309]
  - SUNWAY: fix lockdep error (He Chuyue) [task:382309]
  - SUNWAY: perf: do all event checks in sw64_pmu_event_init() (He Chuyue) [task:382309]
  - SUNWAY: numa: fix compile error when CONFIG_ACPI_NUMA=n (Jing Li) [task:382309]
  - SUNWAY: pci: export some pci functions (Jing Li) [task:382309]
  - SUNWAY: uapi: fix a compile error for headers_install (Gu Zitao) [task:382309]
  - SUNWAY: perf: hide hardware performance events in guest os (He Chuyue) [task:382309]
  - SUNWAY: fix hugepage support (Wu Liliu) [task:382309]
  - SUNWAY: extern vdso_start and vdso_end as char[] (Mao Minkai) [task:382309]
  - SUNWAY: remove useless current_policy (Tang Jinyang) [task:382309]
  - SUNWAY: add arch-specific SYM_END definition (Gu Zitao) [task:382309]
  - SUNWAY: add vfio support (liuyunchen) [task:382309]
  - SUNWAY: add usb support (liuyunchen) [task:382309]
  - SUNWAY: add platform drivers (liuyunchen) [task:382309]
  - SUNWAY: add gpio support (liuyunchen) [task:382309]
  - SUNWAY: add misc drivers (liuyunchen) [task:382309]
  - SUNWAY: add hwmon driver (liuyunchen) [task:382309]
  - SUNWAY: add mfd driver support (liuyunchen) [task:382309]
  - SUNWAY: add iommu support (liuyunchen) [task:382309]
  - SUNWAY: add firmware support (liuyunchen) [task:382309]
  - SUNWAY: add pci bus support (liuyunchen) [task:382309]
  - SUNWAY: add acpi support (liuyunchen) [task:382309]
  - SUNWAY: add i2c bus driver support (liuyunchen) [task:382309]
  - SUNWAY: add irq controller support (liuyunchen) [task:382309]
  - SUNWAY: add cpufreq driver support (liuyunchen) [task:382309]
  - SUNWAY: add clocksource support (liuyunchen) [task:382309]
  - SUNWAY: add spi support (liuyunchen) [task:382309]
  - SUNWAY: add rtc support (liuyunchen) [task:382309]
  - SUNWAY: add 8250 serial support (liuyunchen) [task:382309]
  - SUNWAY: add perf support (Mao Minkai) [task:382309]
  - SUNWAY: add build infrastructure (Mao Minkai) [task:382309]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.2.v2505
changelog:
  - CCUSR: scsi/ccusr: avoid CCore RAID card exceptions caused by I/O (Zeng Fu) [task:456510]
  - Add JIT_ALWAYS_ON config to Loongarch (Feng Yang) [bug:353232]
  - Revert "fs: protect backing files with rcu" (Zhou Yuhang) [bug:354726]
  - Revert "fs: add file_ref" (Zhou Yuhang) [bug:354726]
  - Revert "fs: port files to file_ref" (Zhou Yuhang) [bug:354726]
  - virtcca/vgic: Fix the issue where QEMU fails to load the image. (Hao Ge) [task:369181]
  - OPENEULER: Bug fix: Resolve the issue of host hard lockup (Hao Ge) [task:369181]
  - OPENEULER: VirtCCA: The cvm removes the vcpu binding limit. (gongchangsui) [task:369181]
  - OPENEULER: VirtCCA: Improve nfs workqueue bind method (gongchangsui) [task:369181]
  - OPENEULER: VirtCCA: Intercept the situation where devices with both NVM adn CVM passthrough under same PCIe root port (gongchangsui) [task:369181]
  - OPENEULER: VirtCCA: an interface to retrieve the TMI version is added (gongchangsui) [task:369181]
  - OPENEULER: VirtCCA: cvm support UEFI boot (gongchangsui) [task:369181]
  - OPENEULER: virtCCA Feature: remove unused interfaces and add cpumask check (panhengchang) [task:369181]
  - OPENEULER: virtcca feature : security rectification (yangxiangkai) [task:369181]
  - iommu/arm-smmu-v3: Retire disable_bypass parameter (Robin Murphy) [task:369181]
  - OPENEULER: virtcca bugfix: correct array copy for hpre_addr (liupingwei) [task:369181]
  - OPENEULER: virtcca feature : disable swiotlb for passthrough device (panhengchang) [task:369181]
  - OPENEULER: virtcca feature : force vring alloc use dma api (panhengchang) [task:369181]
  - OPENEULER: virtcca feature: enable unmap swiotlb buffer to save iotlb cvm memory (panhengchang) [task:369181]
  - OPENEULER: virtcca feature : SM Cryptographic Aacceleration. (liupingwei) [task:369181]
  - OPENEULER: virtcca feature : transfer smmu_vmid (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature : GPU supports maximum 1G page table mapping. (yangxiangkai) [task:369181]
  - OPENEULER: virtcca bugfix: compile warning clean (yangxiangkai) [task:369181]
  - OPENEULER: virtcca bugfix: clear device msi address (yangxiangkai) [task:369181]
  - OPENEULER: virtcca bugfix: compile warning clean (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: msi place modify (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: fix msi iova map (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: extract the function to the virtcca_coda.c file (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: virtcca feature: read or write msi forwarding to the secure world (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: read or write bar space forwarding to the secure world (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: read or write config space forwarding to secure world (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: activate confidential vm to set security device s_s2ttbr (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: set device security properties (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: secure device page fault (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: vfio driver dma map (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: bind the kvm handle of cvm with smmu domain (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: vfio attach the device list to secure world (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: fix warnings (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: secure smmu doc (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: secure smmu init (yangxiangkai) [task:369183]
  - OPENEULER: virtcca bugfix: compile warning clean (yangxiangkai) [task:369181]
  - OPENEULER: cvm_tsi: add support virtcca attestation (chenzheng) [task:369181]
  - OPENEULER: gicv3: add lpi support for cvm guest (Jingxian He) [task:369181]
  - OPENEULER: mm: enable swiotlb alloc for cvm share mem (Jingxian He) [task:369181]
  - OPENEULER: pmu: enable pmu phys irq inject for cvm (Jingxian He) [task:369181]
  - OPENEULER: kvm: add virtcca cvm host feature (Jingxian He) [task:369181]
  - OPENEULER: kvm: add new kvm_type for cvm (Ju Fu) [task:369181]
  - sockmap: Fix crash issue caused by the uninitialized skb->sockmap (Yun Lu) [task:466225]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.3.v2505
changelog:
  - sched/deadline: Fix schedstats vs deadline servers (Huang Shijie) [task:354674]
  - EULER: sched/sysctl: Add CFTYPE_NOT_ON_ROOT for qos_level (Wang Tao) [task:467360]
  - EULER: sched/qos: Fix qos throttling in SMT expelled (Liu Kai) [task:467360]
  - EULER: sched: fixed offline group hung task issue under high load scenarios (Liu Kai) [task:467360]
  - EULER: sched/fair: Fix qos_timer deadlock when cpuhp offline (Wenyu Huang) [task:467360]
  - EULER: sched: Introduce qos smt expeller for co-location (Guan Jing) [task:467360]
  - EULER: sched/fair: Add cmdline nosmtexpell (Guan Jing) [task:467360]
  - EULER: sched/fair: Introduce QOS_SMT_EXPELL priority reversion mechanism (Guan Jing) [task:467360]
  - EULER: sched/fair: Start tracking qos_offline tasks count in cfs_rq (Guan Jing) [task:467360]
  - EULER: sched: Add tracepoint for qos smt expeller (Guan Jing) [task:467360]
  - EULER: sched: Add statistics for qos smt expeller (Guan Jing) [task:467360]
  - EULER: sched: Implement the function of qos smt expeller (Guan Jing) [task:467360]
  - EULER: sched: Introduce priority load balance for qos scheduler (Song Zhang) [task:467360]
  - config: Enable qos scheduler config (liwanwu) [task:467360]
  - EULER: sched: Introduce handle priority reversion mechanism (Zhang Qiao) [task:467360]
  - EULER: sched: Support kill boost for offline task (Zhang Qiao) [task:467360]
  - EULER: sched: Throttle qos cfs_rq when current cpu is running online task (Zhang Qiao) [task:467360]
  - EULER: sched: Introduce qos scheduler for co-location (Zhang Qiao) [task:467360]
  - sched/syscall: Make __setscheduler_params non-static (liwanwu) [task:467360]
  - filemap: move prefaulting out of hot write path (Dave Hansen) [task:456354]
  - arch/arm64: Add a 5000C series SOC_ID_PS23064 processing (liyouhong) [bug:347952]
  - kernel.spec: Fixing an extra abi package in packaging. (lihaofeng) [task:470205]
  - entry: Inline syscall_exit_to_user_mode() (Charlie Jenkins) [task:456354]
  - LoongArch: entry: Migrate ret_from_fork() to C (Charlie Jenkins) [task:456354]
  - riscv: entry: Split ret_from_fork() into user and kernel (Charlie Jenkins) [task:456354]
  - riscv: entry: Convert ret_from_fork() to C (Charlie Jenkins) [task:456354]
  - treewide: context_tracking: Rename CONTEXT_* into CT_STATE_* (Valentin Schneider) [task:456354]
  - fs: port files to file_ref (Christian Brauner) [task:444220]
  - fs: add file_ref (Christian Brauner) [task:444220]
  - fs: protect backing files with rcu (Christian Brauner) [task:444220]
  - fs: remove f_version (Christian Brauner) [bug:354726]
  - pipe: use f_pipe (Christian Brauner) [bug:354726]
  - fs: add f_pipe (Christian Brauner) [bug:354726]
  - ubifs: store cookie in private data (Christian Brauner) [bug:354726]
  - ufs: store cookie in private data (Christian Brauner) [bug:354726]
  - udf: store cookie in private data (Christian Brauner) [bug:354726]
  - proc: store cookie in private data (Christian Brauner) [bug:354726]
  - ocfs2: store cookie in private data (Christian Brauner) [bug:354726]
  - input: remove f_version abuse (Christian Brauner) [bug:354726]
  - ext4: store cookie in private data (Christian Brauner) [bug:354726]
  - ext2: store cookie in private data (Christian Brauner) [bug:354726]
  - affs: store cookie in private data (Christian Brauner) [bug:354726]
  - fs: add generic_llseek_cookie() (Christian Brauner) [bug:354726]
  - fs: use must_set_pos() (Christian Brauner) [bug:354726]
  - fs: add must_set_pos() (Christian Brauner) [bug:354726]
  - fs: add vfs_setpos_cookie() (Christian Brauner) [bug:354726]
  - s390: remove unused f_version (Christian Brauner) [bug:354726]
  - ceph: remove unused f_version (Christian Brauner) [bug:354726]
  - adi: remove unused f_version (Christian Brauner) [bug:354726]
  - include: linux: Inline the topology_get_cpu_scale function (Can Peng) [task:443191]
  - OPENEULER: mm/oom_kill: fix NULL pointer dereference in memcg_print_bad_task() (Jinjiang Tu) [task:467362]
  - memcg: enable CONFIG_MEMCG_OOM_PRIORITY by default (lihongfu) [task:467362]
  - OPENEULER: memcg: Add sysctl memcg_qos_enable (Jing Xiangfeng) [task:467362]
  - OPENEULER: memcg: support priority for oom (Jing Xiangfeng) [task:467362]
  - config: enable CONFIG_MEMCG_V1_RECLAIM and CONFIG_CGROUP_V1_KILL (lihongfu) [task:467362]
  - OPENEULER: memcg: introduce per-memcg reclaim interface (Lu Jialin) [task:467362]
  - OPENEULER: memcg: export high_async_ratio to userland (Lu Jialin) [task:467362]
  - OPENEULER: memcg: enable memcg async reclaim (Lu Jialin) [task:467362]
  - OPENEULER: memcg: Export memory.events{local} from cgroupv2 to cgroupv1 (Lu Jialin) [task:467362]
  - OPENEULER: memcg: Export memcg.{min/low/high} from cgroupv2 to cgroupv1 (Lu Jialin) [task:467362]
  - OPENEULER: cgroup: Export cgroup.kill from cgroupv2 to cgroupv1 (Lu Jialin) [task:467362]
  - Revert "configs/arm64: open some virtcca config" (Hao Ge) [task:369181]
  - configs/arm64: open some virtcca config (Hao Ge) [task:369181]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.4.v2505
changelog:
  - ksaf: keep server code consistent with desktop (penghuaihe) [task:470513]
  - ksaf: realize ksaf_d_path interface (penghuaihe) [task:392829]
  - configs/arm64: open some virtcca config (Hao Ge) [task:369181]
  - arm64: add PHYTIUM series into spectre_v4 safe list (hehuiwen) [bug:353746]
  - arm64: add PHYTIUM into spectre_v2 safe list (Jackie Liu) [bug:353746]
  - LeapIoRaid: Update verion to 1.02.02.00 (tanzheng) [task:462896]
  - memcg: fix compile error on biv_defconfig (lihongfu) [task:472699]
  - fs: place f_ref to 3rd cache line in struct file to resolve false sharing (Pan Deng) [task:456354]
  - LoongArch: tpm: Add a driver for Loongson TPM device (Qunqin Zhao) [task:466348]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.5.v2505
changelog:
  - spec: Add Module.kabi_loongarch64 to kernel source package (Jiangshan Yi) [task:443413]
  - kabi: Add kabi extended symvers for x86_64 and aarch64 (Jiangshan Yi) [task:443413]
  - kabi: initialize kabi list and symvers for x86_64 and aarch64 (Jiangshan Yi) [task:443413]
  - loongarch/kabi: Add kabi extended whitelist for loongarch (lifangxu) [task:482379]
  - loongarch/kabi: Add kabi whitelist for loongarch (lifangxu) [task:482379]
  - kabi: reserve space for struct kernel_param_ops (Wang Yan) [task:467006]
  - kabi: reserve space for struct uts_namespace (Wang Yan) [task:467006]
  - kabi: reserve space for kthread and workqueue (Wang Yan) [task:467006]
  - kabi: include/msi: reserve space for msi expansion (lifangxu) [task:448261]
  - arm64: config: enable CONFIG_COMPAT (pengyu) [bug:364829]
  - arm64/cputype: Remove the redundant cputype (Riwen Lu) [task:453488, task:472129]
  - PHYTIUM: arm/arm64: Bugfix the CPU MPIDR definition of phytium FTC303 core (Wang Yinfeng) [task:453488, task:472129]
  - OPENEULER: 3snic: use sssnic as kernel driver name (weiwei1) [bug:361125]
  - OPENEULER: improve 3SNIC 910/920/930 NIC driver (weiwei1) [bug:361125]
  - PCI/VGA: add change boot vga device support v2 (Shixiong Ou) [task:347429]
  - tcp/dccp: Add another way to allocate local ports in bind() (luoxuanqiang) [task:452905]
  - PHYTIUM: spi: phytium: Fix SPI IRQ panic on boot issue (Liu Dalin) [bug:367933]
  - PHYTIUM: spi: phytium: Bugfix phytium_spi_irq panic on boot (Peng Min) [bug:367933]
  - perf/x86/zhaoxin: Fix instructions error by missing fixedctr member (tanze) [bug:365143]
  - kabi: pad anon_vma for kabi (Qingshuang Fu) [task:461339]
  - kernel.spec: Fixing compiling 64k page size kernel has compilation issues (lihaofeng) [task:472819]
  - x86: Implement Hygon's LMC to support both SSE2 and AVX2 (Can Peng) [bug:358867]
  - config: open FS_ENCRYPTION on x86 (chengang) [bug:364375, bug:347118]
  - drm/ast: use DRM_GEM_SHMEM_DRIVER_OPS_NO_MAP_SGT (Shixiong Ou) [task:449981]
  - drm/shmem-helper: Import dmabuf without mapping its sg_table (Shixiong Ou) [task:449981]
  - PHYTIUM: PCI: Add ACS quirk for phytium root and switch ports (Xiao Cong) [task:477923]
  - iommu: make ft2500 iommu domain IDENTITY by default (Zheng Tan) [bug:353158]
  - locking: The Zhaoxin NUMA lock is disabled by default (Can Peng) [task:468935]
  - HYGON: optimize TDM driver code logic to avoid warning (chench) [bug:346920]
  - LOONGSON: LoongArch: 2K3000 GMAC support. (wanghongliang) [task:474031]
  - HYGON: crypto: ccp: add "tdm_guard" as kernel and module parameter (niuyongwen) [bug:358365]
  - LOONGSON: LoongArch: megaraid: Add udelay to avoid data error caused by dma sequence (zhangtianyang) [task:469297]
  - LOONGSON: LoongArch: nvme: Add udelay to avoid data error caused by dma sequence (Juxin Gao) [task:469297]
  - LOONGSON: LoongArch: Add pwm driver support. (Juxin Gao) [task:469297]
  - LOONGSON: LoongArch: support CONFIG_SCHED_MC (wanghongliang) [task:469297]
  - LOONGSON: LoongArch: CONFIG_NR_CPUS expanded to 2048 (Juxin Gao) [task:469297]
  - Maintainer: update KYLIN-MAINTAINERS (huhai)
  - Maintainer: update KYLIN-MAINTAINERS (huhai)
  - kabi: kvm: reserve some space for kABI (Qingshuang Fu) [task:461337]
  - kabi: pad the free_area struct (Qingshuang Fu) [task:461339]
  - kabi: pad the deferred_split queue for the kabi checker (Qingshuang Fu) [task:461339]
  - kabi: hide capture_control from kabi checker (Qingshuang Fu) [task:461339]
  - kabi: net: reserve some space for kABI (Qingshuang Fu) [task:461337]
  - kabi: bpf: reserve some space for kABI (Qingshuang Fu) [task:461337]
  - kabi: pad the page_frag_cache for the kabi (Qingshuang Fu) [task:461339]
  - kabi: pad mmu_notifier functions for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the memory_failure_stats for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the kmem_cache structure (Qingshuang Fu) [task:461339]
  - kabi: pad the folio_batch struct (Qingshuang Fu) [task:461339]
  - kabi: pad the zone structures for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the wait_page_queue for the kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the lru_gen functions for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the tlbflush_unmap_batch struct for the KABI (Qingshuang Fu) [task:461339]
  - kabi: pad the swap_cluster_info structure for KABI (Qingshuang Fu) [task:461339]
  - kabi: pad the shrink_control structure for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the percpu structures (Qingshuang Fu) [task:461339]
  - kabi: reserve space for RCU (Wang Yan) [task:461338]
  - kabi: reserve space for device model (Wang Yan) [task:461338]
  - kabi: reserve space for tty subsystem (Wang Yan) [task:461338]
  - kabi: reserve space for encryption algorithm framework (Wang Yan) [task:461338]
  - kabi: reserve space for rt_mutex_waiter (Wang Yan) [task:461338]
  - kabi: reserve space for workqueue (Wang Yan) [task:461338]
  - kabi: reserve space for watchdog device drivers (Wang Yan) [task:461338]
  - kabi: reserve space for tracking and debugging (Wang Yan) [task:461338]
  - kabi: reserve space for sunrpc (Wang Yan) [task:461338]
  - kabi: reserve space for module_sect_attr (Wang Yan) [task:461338]
  - kabi: reserve space for keys/keyrings (Wang Yan) [task:461338]
  - kabi: reserve space for iommu_iotlb_gather (Wang Yan) [task:461338]
  - kabi: reserve space for I2C subsystem (Wang Yan) [task:461338]
  - kabi: reserve space for fwnode_handle (Wang Yan) [task:461338]
  - kabi: reserve space for terminal mechanism (Wang Yan) [task:461338]
  - kabi: reserve space for task_delay_info (Wang Yan) [task:461338]
  - kabi: reserve space for cpuidle (Wang Yan) [task:461338]
  - kabi: reserve space for linux_binprm (Wang Yan) [task:461338]
  - kabi: reserve space for PCI subsystem (Wang Yan) [task:461338]
  - kabi: reserve space for process management and scheduling (Wang Yan) [task:461338]
  - kabi: time: Add kabi reserve time (lihaofeng) [task:461336]
  - kabi: mm: Add kabi reserve memory management (lihaofeng) [task:461336]
  - kabi: power: Add kabi reserve energy management (lihaofeng) [task:461336]
  - kabi: vfs: File system and vfs add kabi reserve (lihaofeng) [task:461336]
  - kabi: scsi: Add kabi reserve (lihaofeng) [task:461336]
  - kabi: block: Add kabi reserve (lihaofeng) [task:461336]
  - ACPI: PPTT: Fix processor subtable walk (Jeremy Linton) [bug:363349]
  - mm/codetag: clear tags before swap (David Wang)
  - mm/codetag: swap tags when migrate pages (David Wang)
  - filemap_alloc: warp filemap_alloc_folio_node function with alloc_hooks (Jackie Liu)


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.6.v2505
changelog:
  - LOONGSON: LoongArch: loongarch/kvm: fix pch pic spinlock dead lock (Xianglai Li) [bug:346647]
  - LOONGSON: LoongArch: sync kvm head file from upstream (Xianglai Li) [task:482361]
  - LOONGSON: LoongArch: fix migrate issue (Song Gao) [task:482361]
  - LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset() (Tianyang Zhang) [bug:368017]
  - loongarch: config: enable CONFIG_COMPAT (pengyu) [bug:371643]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.7.v2505
changelog:
  - fs: export some overlayfs interface (penghuaihe) [task:392829]
  - tpm: tpm_tis: Adapt spi tcm2 card ZIC0603 to x86 (wudandan) [task:220240]
  - loongarch: disable CONFIG_DM_VDO (zhanggenjian) [bug:363685]
  - Revert "EULER: scheduler: Create SDTL_SKIP flag to skip topology level" (liwanwu) [task:485185]
  - Revert "EULER: scheduler: Add runtime knob sysctl_sched_cluster" (liwanwu) [task:485185]
  - Revert "EULER: scheduler: Add boot time enabling/disabling of cluster scheduling" (liwanwu) [task:485185]
  - Revert "EULER: scheduler: Disable cluster scheduling by default" (liwanwu) [task:485185]
  - gitmessage: update template for git commit message (Jiangshan Yi) [task:488923]
  - EULER: scheduler: Disable cluster scheduling by default (Yicong Yang) [task:485185]
  - EULER: scheduler: Add boot time enabling/disabling of cluster scheduling (Tim Chen) [task:485185]
  - EULER: scheduler: Add runtime knob sysctl_sched_cluster (Tim Chen) [task:485185]
  - EULER: scheduler: Create SDTL_SKIP flag to skip topology level (Tim Chen) [task:485185]
  - nvmet: remove old function prototype (Maurizio Lombardi) [bug:289269]
  - nvmet: Fix crash when a namespace is disabled (Hannes Reinecke) [bug:289269]
  - nvmet-loop: avoid using mutex in IO hotpath (Nilay Shroff) [bug:289269]
  - nvmet: support reservation feature (Guixin Liu) [bug:289269]
  - nvme: add reservation command's defines (Guixin Liu) [bug:289269]
  - nvme: host: fix double-free of struct nvme_id_ns in ns_update_nuse() (Shin'ichiro Kawasaki) [bug:289269]
  - nvme: add csi, ms and nuse to sysfs (Daniel Wagner) [bug:289269]
  - nvme: rename ns attribute group (Daniel Wagner) [bug:289269]
  - nvme: refactor ns info helpers (Daniel Wagner) [bug:289269]
  - nvme: move ns id info to struct nvme_ns_head (Daniel Wagner) [bug:289269]


author: wangjie<wangjie294@huawei.com> -1.0.7-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Synchronize patches from community
         Verbose-CLI-start-pulling-Shared-Brotli.patch
         Ensure-decompression-consumes-all-input.patch
         fix-MSVC-configuration-and-c++-compilation-fails.patch
         fix-executable-mode-of-decode-js.patch
         Fix-include-for-EMCC-build.patch
         Add-an-option-to-avoid-building-shared-libraries.patch
         Disable-PIC-in-EMCC-mode.patch
         Add-missing-const-to-a-couple-of-kConstants.patch
         Move-TZCNT-and-BSR-intrinsics-and-add-MSVC-versions.patch


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-12
changelog:
  - btrfs-progs: convert: insert a dummy inode item before inode ref for ext2/4
  - btrfs-progs: convert: for ext2, fix possible tree-checker error when converting a large fs


author: liuxu <liuxu156@huawei.com> - 1:1.36.1-6
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: xinghe <xinghe2@h-partners.com> - 1.18.1-5
changelog:
  - Type:CVE
  - CVE:CVE-2023-32067 CVE-2023-31130
  - SUG:restart
  - DESC:fix CVE-2023-32067 CVE-2023-31130


author: wangjiang <wangjiang37@h-partners.com> - 2023.2.64-2
changelog:
  - remove expired and sync new certificates
    Removing:
      Security Communication Root CA
    Adding:
      D-Trust SBR Root CA 1 2022
      D-Trust SBR Root CA 2 2022
      Telekom Security SMIME ECC Root 2021
      Telekom Security SMIME RSA Root 2023
      Telekom Security TLS ECC Root 2020
      Telekom Security TLS RSA Root 2023


author: chenyanpanHW <chenyanpan@huawei.com> - 0.10.10-8
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-cachefilesd-fix-abort-in-decant_cull_table.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: sunhai<sunhai10@huawei.com> - 1.17.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:cairo_truetype_reverse_cmap detected memory leaks
         fix read memory access
         fix call get_unaligned_be32 heap buffer overflow
         fix heap buffer overflow in cairo_cff_parse_charstring


author: wangjie<wangjie294@huawei.com> - 4.0.2-2
changelog:
  - DESC:remove capstone-4.0.1.tar.gz and 0001-Fix-include-path-in-pkg-config-for-Makefile-too-1339.patch after upgrade 4.0.2


author: lijian1<lijian1@kylinos.cn> - 1.82.0-7.p01
changelog:
  - Type: update
  - ID: [TASK#426751]
  - SUG: NA
  - DESC: Add source whether target is noarch or cpu;add loongarch64 for bootstrap.


author: zhangxianjun <zhangxianjun@kylinos.cn> - 1.3.3-4.p01
changelog:
  - Type:compile
  - ID:TASK#204872
  - SUG:NA
  - DESC:modify require from java-latest-openjdk-headless to java-21-openjdk-headless,because java-latest-openjdk not support loongarch64


author: yangyun <yangyun50@huawei.com> - 1.5.5-1
changelog:
  - update to 1.5.5 version
  	- add support of readers (see README.md)
  	- configure.ac: disable the use of --disabele-usbdropdir
  	- parse: create output.bin file
  	- udev: Disable USB-persist for CCID devices
  	- configure: fail if flex is not found
  	- some other minor improvments


author: zhoupengcheng <zhoupengcheng11@huawei.com> - 0.2.4-4
changelog:
  - packing chatglm_convert.py file
  - install python models for chatglm_convert.py int dockerfile
  - update long-term yum.repo in dockerfile


author: yueyuankun <yueyuankun@kylinos.cn> - 0.2.4-5.p01
changelog:
  - Type:compile
  - ID:TASK#221071
  - SUG:NA
  - DESC: LoongArch64: fix missing patch in source code package


author: xuyujun <xuyujun@kylinos.com.cn> -1.0.0-3.skl3.ft.ns7_4.se.05
changelog:
  - Type: update
  - ID: [Task#90054]
  - SUG:NA
  - DESC: 设置策略接口由kysec-utils实现
  - 	  add patch: chpolicy-20220527.patch


author: wanghao <wanghao2@kylinos.com.cn> -1.0.0-3.skl3.se.06
changelog:
  - Type: bugfix
  - ID: [BUG#142670]
  - SUG:NA
  - DESC: 使用chpolicy切换策略，强制重启后，策略切换失败
  -         add patch: chpolicy-fix-selinux-error-after-force-reboot.patch


author: wanghao <wanghao2@kylinos.com.cn> -1.0.0-3.skl3.se.08
changelog:
  - Type: bugfix
  - ID: [BUG#177892]
  - SUG:NA
  - DESC: 修改帮助信息描述
  -	  add patch: chpolicy-modify-help-information.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 1.0.0-3.skl3.se.10
changelog:
  - Type:update
  - ID:[BUG#191506]
  - SUG:NA
  - DESC:处理bug191506，兼容policy.33
  - add patch: chpolicy-fix-bug191506-compatible-se33.patch


author: chengang <chengang@kylinos.cn> - 1.0.0-3.skl3.se.12
changelog:
  - Type: update
  - ID: [TASK#375187] 代码覆盖率提升
  - SUG: NA
  - DESC: 代码覆盖率提升
  -      chpolicy-add-unit-test.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.0-3.skl3.se.13
changelog:
  - Type: update
  - ID: [TASK#422677]
  - SUG: NA
  - DESC: 解决安全热点问题 增加license声明
  -      chpolicy-add-unit-test.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.0-01
changelog:
  - Type: update
  - ID: [TASK#381843]
  - SUG: NA
  - DESC: 解决执行chpolcy命令时由单元覆盖率提示信息
  -      chpolicy-fix-gcda-tip-msg.patch


author: lijian <lijian01@kylinos.cn> - 4.3-2.p01
changelog:
  - Type:Update
  - ID:[TASK#327348]
  - SUG:NA
  - DESC:fix bug 45754,should not use foreign ntp server update time


author: chenyanpanHW <chenyanpan@huawei.com> - 6.12-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-cifs.upcall-fix-UAF-in-get_cachename_from_process_en.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-cifs-utils-Make-automake-treat-sbin-as-exec-not-data.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix growpart race
         handle error when log file is empty
         ec2: Do not enable dhcp6 on EC2


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable use-dns for secondary nics
         Make duplicate route add succeed
         Fix predictable interface rename issue


author: dongyuzhen <dongyuzhen@h-partners.com> - 23.4.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: lijunwei <lijunwei@kylinos.cn> - 23.4.1-11.p01
changelog:
  - Type: Update
  - ID:   [TASK#425200]
  - SUG:  NA
  - DESC: Backport v11-2409 Kylin's patch to Support KylinOS


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4.p01
changelog:
  - Type:update
  - ID:[TASK#424801]
  - SUG:NA
  - DESC: 1. enable pcp packages for cockpit
          2. add Patch: 0001-part1-support-and-add-zh_CN-translate-for-playground.patch
             add Patch: 0002-part2-support-and-add-zh_CN-translate-for-playground.patch
             Translate: and add zh_CN translate support for module playground
          3. add Patch: 0001-fix-zh_CN-translation-issue-of-storage-module.patch
             zh_CN translate for storaged module
          4. add Patch: 0001-kylin-fix-zh_CN-translation-issue-of-autoupdates.patch
             fix zh_CN translate of autoupdates
          5. add Patch: 0001-fix-wrong-invalid-format-error-when-setting-datetime.patch
             fix wrong invalid format error when setting datetime


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 320-1.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#361185]
  - SUG : NA
  - DESC: add require virt-install to support creating virtual machines and modify vm config parameter


author: zengjianqi <zengjianqi@kylinos.cn> - 62.1-7.p01
changelog:
  - Type: compile
  - ID: TASK#431301
  - SUG: NA
  - DESC: Add loongarch64.patch.
          Fix %check error and MKINSTALLDIRS issue.


author: zengjianqi <zengjianqi@kylinos.cn> - 3.14.0-7.p01
changelog:
  - Type:compile
  - ID:TASK#431301
  - SUG:NA
  - DESC: Fix rpm build error with -Wno-deprecated-declarations.


author: xinghe <xinghe2@h-partners.com> - 34.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ensure that the src package contains the loongson and sw patches


author: chenyanpanHW <chenyanpan@huawei.com> - 2.138-4
changelog:
  - DESC: delete -Sgit from 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "container-selinux-2.230.0 base"
  /usr/bin/git checkout --track -b rpm-build
  , and delete BuildRequires git


author: lijian <lijian2@kylinos.cn> - 2:2.230.0-1
changelog:
  - Update container-selinux to v2.230.0
  - Allow containers to unmount file systems
  - Add buildah as a container_runtime_exec_t label
  - Additional rules for container_user_t
  - Add some MLS rules to policy
  - Add container_file_t and container_ro_file_t as user_home_type


author: jiangchuangang <jiangchuangang@huawei.com> - 9.4-2
changelog:
  - skip testcase for overlay filesystem because of no inotify_add_watch
    add test-skip-overlay-filesystem-because-of-no-inotify_add_watch.patch


author: huyubiao <huyubiao@huawei.com> - 9.4-9
changelog:
  - fix alias sm3sum not working on bash
    delete redundant backport-chmod-fix-exit-status-when-ignoring-symlinks.patch


author: huyubiao <huyubiao@huawei.com> - 9.4-10
changelog:
  - sync patches from community
  - add backport-pinky-fix-string-size-calculation.patch
        backport-cksum-consistently-validate-length-attributes.patch
        backport-timeout-fix-race-where-we-might-kill-arbitrary-proce.patch
        backport-timeout-fix-narrow-race-in-failing-to-kill-processes.patch
        backport-maint-basenc-consistently-check-buffer-bounds-when-e.patch
        backport-putenv-Don-t-crash-upon-out-of-memory.patch
        backport-head-off_t-not-uintmax_t-for-file-offset.patch
        backport-shuf-avoid-integer-overflow-on-huge-inputs.patch
        backport-shuf-fix-randomness-bug.patch


author: fuanan <fuanan3@huawei.com> - 2.13-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add 'autoconf automake' to BuildRequires to use autoreconf command


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: pengxu <pengxu@kylinos.cn> - 12.3.1-62.p01
changelog:
  - Type: bugfix
  - ID: [TASK#424661]
  - SUG:  NA
  - DESC:  Add kylin patches.

           author: zhaojingyu <zhaojingyu@kylinos.cn>
           Support for zhaoxin.
           0001-support-for-zhaoxin.patch

           author: wangqiang <wangqiang1@kylinos.cn>
           Support for hygon3/4 processor series.
           kylin-gcc-add-support-for-hygon3-4-processor-series.patch

           author: pengxu <pengxu@kylinos.cn>
           Support for accelerating stream.
           kylin-gcc-add-support-for-accelerating-stream.patch

           author: pengxu <pengxu@kylinos.cn>
           Support optimization of set fpnm.
           kylin-gcc-Add-optimization-of-set-fpnm.patch

           author: wangqiang <wangqiang1@kylinos.cn>
           Support phytium s5000 processor.
           kylin-gcc-Add-support-for-phytium-s5000c-processor.patch

           author: pengxu <pengxu@kylinos.cn>
           Add pie option for g++-mapper-server.
           kylin-gcc-add-pie-option-for-g++-mapper-server.patch


author: pengxu <pengxu@kylinos.cn> - 12.3.1-62.p02
changelog:
  - Type: bugfix
  - ID: [TASK#465014]
  - SUG:  NA
  - DESC: Add support for hygon arch dhyana and dharma.
          Fix bugs of stream when use -ftree-parallelize-loops=24 option.


author: yixiangzhike <zhangxingliang3@huawei.com> - 1.15.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the compilation failure with new version glibc (glibc-2.34)


author: yixiangzhike <yixiangzhike007@163.com> - 1.17.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the failure of testcase when building with python-setuptools>=66.0.0


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2.9.11-1.p01
changelog:
  - Type: update
  - ID: [BUG#382649]
  - SUG: NA
  - DESC: Add Traditional Chinese (Hong Kong) translation support


author: shaojiansong <shaojiansong@kylinos.cn> - 8.0.4-3
changelog:
  - Fix lack of loongarch64 and sw_64 patch files in src.rpm package which is build from any platform.


author: shenzhongwei <shenzhongwei@kylinos.cn> - 8.0.4-10
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: Hewenliang <hewenliang4@huawei.com> - 3.16.1-7
changelog:
  - fix the null pointer of get_tty_driver.
  - criu files Dont cache fd ids for device files.
  - pre dump call vmsplice with SPLICE_F_GIFT.


author: chenyanpanHW <chenyanpan@huawei.com> - 1.5.5-4
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/bugfix-cronie-systemd-alias.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-Support-reloading-with-SIGURG-in-addition-to-SIGHUP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-anacron-Use-xclose-instead-of-fclose.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: lijian <lijian2@kylinos.cn> - 1.8.7-1
changelog:
  - update to 1.8.7
  - crun: new command "crun features".
  - linux: support io_priority from the OCI specs.
  - cgroup: allow setting swap to 0.
  - cgroup, systemd: set the memory limit on the system scope.


author: yixiangzhike <yixiangzhike007@163.com> - 20230614-1.git5f3458e
changelog:
  - update version to 20230614
    - DEFAULT policy drop DH<2048bits,TLS1.0,TLS1.1,SHA-1
    - Remove the CBC ciphers from DEFAULT policy in openssh
    - FIPS policy drop the CBC ciphersuites
    - Enable RSA-PSK algorithms in DEFAULT and LEGACY policies
    - Add the diffie-hellman-group14-sha256 to libssh
    - Add --check option to update-crypto-policies
    - Add AES-192 algorithms support
    - Use allowlisting config for gnutls
    - Enable SHAKE algorithms for gnutls,java and nss
    - Openssl disable SHA-1 signatures in FUTURE policy
    - Openssh add HostbasedAcceptedAlgorithms and RequiresRSASize config options


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-fix-potential-null-pointer-dereference.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-Update-file-cryptsetup-ssh.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xinghe <xinghe2@h-partners.com> - 4.18.5-2
changelog:
  - Type:cves
  - ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
  - SUG:NA
  - DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: senlin <xiasenlin1@huawei.com> - 1.0.0-19
changelog:
  - Type: Correction of bad behavior
  - ID: NA
  - SUG: NA
  - DESC: Specify the specific sudo commands for abuild users


author: xu_ping <xuping33@h-partners.com> - 1.0.0-20
changelog:
  - Type: fix warning
  - ID: NA
  - SUG: NA
  - DESC: fix install custom_build_tool warning due to new rpm-build not provides find-debuginfo.sh


author: chenyanpanHW <chenyanpan@huawei.com> - 71.1-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-zero_info_block-skip-seed-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-exclude-cxl_monitor_service.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: wuyifeng <wuyifeng10@huawei.com> - 78-1
changelog:
  - upgrade to version 78:
  	-incorporate up to 6.5 kernel
  	-add new cxl commands
  	-fix some bugs detail see:github.com/pmem/ndctl


author: yaoxin <yaoxin30@huawei.com> - 3.2.15-4
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: hongjinghao <hongjinghao@huawei.com> - 1:1.14.8-3
changelog:
  - sync patch from upstream
  	backport-bus-Don-t-crash-if-bus_context_create_client_policy-.patch
  	backport-bus-When-failing-to-reload-client-policy-continue-it.patch
  	backport-test-Add-a-targeted-test-for-_dbus_unix_groups_from_.patch
  	backport-userdb-Add-proper-error-reporting-when-getting-group.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 1:1.14.8-3.p01
changelog:
  - Type:update
  - ID:[TASK#424801]
  - SUG:NA
  - DESC: add 0001-adjusting-maximum-number-of-connections-for-per-user.patch
          Adjust the maximum number of connections for dbus users, fix the issue of insufficient connections


author: licunlong<licunlong1@huawei.com> - 29-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:don't enable/disable dbus.socket when install/uninstall dbus-broker.


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: chenyanpanHW <chenyanpan@huawei.com> - 9.28.0-6
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/dcraw-9.21-lcms2-error-reporting.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/dcraw-CVE-2018-5801.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/dcraw-CVE-2017-13735.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/dcraw-CVE-2017-14608.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/dcraw-CVE-2018-19655.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: shenzhongwei <shenzhongwei@kylinos.cn> -5.0-9.p01
changelog:
  - Type:compile
  - ID:[TASK#425068]
  - SUG:NA
  - DESC:[kylin]skip some unsupported tests for loongarcharch64


author: zhoushuiqing <zhoushuiqing2@huawei.com> - 3.6.3-2
changelog:
  - Type:CVE
  - CVE:CVE-2005-1849,CVE-2016-9840,CVE-2016-9841,CVE-2016-9843,CVE-2018-25032,CVE-2022-37434
  - SUG:NA
  - DESC:backport patchs fix zlib cves: CVE-2005-1849 CVE-2016-9840
         CVE-2016-9841 CVE-2016-9843 CVE-2018-25032 CVE-2022-37434
         backport-fix-CVE-2005-1849.patch
         backport-fix-CVE-2016-9840.patch
         backport-fix-CVE-2016-9841.patch
         backport-fix-CVE-2016-9843.patch
         backport-fix-CVE-2018-25032.patch
         backport-fix-CVE-2022-37434-1.patch
         backport-fix-CVE-2022-37434-2.patch


author: wangxiao <wangxiao65@huawei.com> - 10.13.1.1-2
changelog:
  - fix CVE-2018-1313
  - a specially-crafted network packet can be used to request the
  - Derby Network Server to boot a database whose location and contents
  - are under the user's control.


author: yuanchao <1050706328@qq.com> - 8:2.03.21-13
changelog:
  - support clang build:
    - fix function undeclared in libdm-common.c and dev-cache.c
    - fix changelog to be in descending chronological order


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: hanhuihui <hanhuihui5@huawei.com> - 4.16.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver


author: LuWu <2398491106@qq.com> - 4.16.2-5
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: majianhan <majianhan@kylinos.cn> - 4.16.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix dnf-automatic service to apply security updates the same way as dnf tool


author: majianhan <majianhan@kylinos.cn> - 4.16.2-8.p01
changelog:
  - Type:update
  - ID:[TASK#425071]
  - SUG:NA
  - DESC: [kylin] support loongarch
          [kylin] update bugzilla url to kylin


author: majianhan <majianhan@kylinos.cn> - 4.16.2-8.p02
changelog:
  - Type:update
  - ID:TASK#3382453
  - SUG:NA
  - DESC: dnf upgrade and updateinfo support --start-date and --end-date
          parameters to filter RPM packages and CVE information by date range


author: majianhan<majianhan@kylinos.cn> - 4.16.2-8.p04
changelog:
  - Type:bugfix
  - ID:BUG#285373
  - SUG:NA
  - DESC: Fix kycompatguard transaction error when use dnf group operations


author: chenhaixing <chenhaixing@huawei.com> - 4.3.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value


author: zhangjun <zhangjun@kylinos.cn> - 2.86-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix logic when a SERVFAIL reply is received after good replt for DNSSEC
         Free sockets awaiting upstream DNS replies ASAP
         Fix a problem in overload handling


author: renmingshuai <renmingshuai@huawei.com> - 2.86-4
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix parsing of IPv6 addresses with peer from netlink
         Fix bad interaction between --address=/#/<ip> and
              --server=/some.domain/#
         Fix --address=/#/...... which was lost in 2.86


author: renmingshuai <renmingshuai@huawei.com> - 2.89-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: yanglongkang <yanglongkang@h-partners.com> - 7.5.2-1
changelog:
  - Update package to version 7.5.2
  - Dos2unix can print info about the line break type of the last line, or indicate there is none.
  - Updated documentation about the ASCII conversion mode.
  - Fixed problem of converting a symbolic link target that is on another file system.
  - Updated Chinese and Serbian translations.


author: yinzhiwei <yinzhiwei5@huawei.com> - 4.1-6.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix signed integer overflow in FSTART
         Avoid returning deleted directory entries as labels
         src check.c: Fix up mtools created bad dir entries
         Remove long file name when changing short file name
         Fix gcc sprintf length warnings
         fsck.fat: Fix Year 2038 Bug
         mkfs.fat: Fix parsing of block number
         device_info: Fix parsing partition number
  -Package init


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 4.1-10
changelog:
  - backport patches to fix two memory leak problems, rename patch names,
    and set release num to 9 for CI.


author: chenyanpanHW <chenyanpan@huawei.com> - 4.1-11
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-Fix-vasprintf-implementation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhouming<zhouming@kylinos.cn> 2.3-2.se.07.ky11
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 1.合入Patch以 优化用户交互显示、添加国际化支持、修复关闭用户ukey开关时需要重新插拔ukey才能生效的问题
  -       2.fix bug 293687 【v11-B14】【本地双因子】开启本地双因子后，未插入ukey，可正常进行登录


author: zhouming<zhouming@kylinos.cn> 2.3-2.se.09.ky11
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 340033 【安全风险】双因子登录-本地双因子配置信息加密处理-test用户可以修改配置文件
  -       337809 【V11-2409】【SW-B03】【渗透测试】可疑后门-系统中存在setuid后门，结果不为空


author: zhouming<zhouming@kylinos.cn> 2.3-2.se.10.ky11
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 456745 【模糊测试】douauth修复crash问题
  -       327840 【v11-b19】【UKEY双因子】开启本地双因子后-图形界面登录后自动退出


author: chenyanpanHW <chenyanpan@huawei.com> - 1.0.5-3
changelog:
  - DESC: delete -S git_am from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Change-assert-in-ringbuffer-to-a-return-code-492.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Make-some-logs-less-noisy-495.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-doxygen2man-Include-libxml-parser.h-494.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-doxygen2man-Fix-typos-and-inconsistencies-in-help-te.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git-core


author: zouzhimin <zouzhimin@kylinos.cn> - 2.0.7-2
changelog:
  - Type:cves
  - ID:CVE-2023-39976
  - SUG:NA
  - DESC:fix CVE-2023-39976
    Community Patch Link:
    https://github.com/ClusterLabs/libqb/commit/1bbaa929b77113532785c408dd1b41cd0521ffc8


author: bixiaoyan <bixiaoyan@kylinos.cn> - 2.0.8-2
changelog:
  - Change assert in ringbuffer to a return code
    Community Patch Link:
    https://github.com/ClusterLabs/libqb/pull/492/commits/88d3eeacc64a059fcb8e2d329ddeafa63b24edfb


author: ningjin <ningjin@kylinos.cn> - 23.11-25.p01
changelog:
  - Type: task
  - ID: task#438452
  - SUG: NA
  - DESC:change kern_devel_ver from 'uname -r' to kernel-devel rpm version .


author: wangjiawei <wangjiawei@kylinos.cn> - 23.11-25.p03
changelog:
  - Type:BUG
  - ID:[BUG#336243]
  - SUG:NA
  - DESC: backport CVE-2024-11614: fix Rx checksum calculation of net/virtio.


author: litianhao <litianhao@kylinos.cn> - 059-6.p02.se.02
changelog:
  - Type: update
  - ID: [TASK#334132] pxe安装有报错
  - SUG: NA
  - DESC: 不再尝试加载已不使用的ko
  -       dracut-remove-unused-ko.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.03
changelog:
  - Type: bugfix
  - ID: [BUG#242191][TASK#337083] 
  - SUG: NA
  - DESC: 修复strict 模式 selinux打标问题以及3adm未开启问题
  -       dracut-fix-switch-strict-3adm-disable.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.04
changelog:
  - Type: bugfix
  - ID: [BUG#244069]
  - SUG: NA
  - DESC: v11内核不支持中文,将打标脚本中输出的中文替换成英文
  -       relabel-script-add-en-translation.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.05
changelog:
  - Type: bugfix
  - ID: [BUG#249291]
  - SUG: NA
  - DESC: selinux-loadpolicy.sh脚本中增加对selinux目录恢复标记动作
  -       dracut-seloadpolicy-add-restore-selinux-dir-action.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.06
changelog:
  - Type: bugfix
  - ID: [BUG#249879][BUG#249601]
  - SUG: NA
  - DESC: 三员开启时,audit目录及日志文件dac权限不正确
  -       dracut-fix-audit-log-owner-when-enable-3adm.patch


author: andy <liuyang01@kylinos.cn> - 059-6.p02.se.07
changelog:
  - Type: bugfix
  - ID: [BUG#252025]
  - SUG: NA
  - DESC: open-iscsi 已经不再支持及维护iscsiuio工具, 将其相关代码移除
  -       0001-remove-iscsi-related-code-since-it-is-no-longer-main.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.08
changelog:
  - Type: update
  - ID: [TASK#379845]
  - SUG: NA
  - DESC: 适配ksaf框架改动
  -       dracut-compatible-ksaf.patch


author: andy lau <liuyang01@kylinos.cn> - 059-11.p01.se.08
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC: [backport] backport update stream fix zfcp_rules
          [backport] add backport-fix-dracut-install-copy-xattr-when-use-clone-ioctl.patch
          [backport] fix(dracut-install): copy mode when use clone ioctl
          [backport] add backport-feat-dracut-init.sh-give-force-add-precedence-over-o.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.09
changelog:
  - Type: update
  - ID: [BUG#328705][BUG#335827]
  - SUG: NA
  - DESC: 解决kysec增加自保护后,initrd中初始化三权配置错误问题,defualt 模式 ksyec为permissive
  -       dracut-fix-3adm-settings.patch
  -       dracut-fix-initrd-set-kysec-status-error.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.10
changelog:
  - Type: update
  - ID: [BUG#372101]
  - SUG: NA
  - DESC: 解决在未加载selinux时 修改passwd文件后 se标记未unlabeled_t的问题
  -       dracut-fix-passwd-selinux-context-is-unlabel.patch


author: Matej Chalk <mchalk@redhat.com> 0.3.0-3
changelog:
  - Now contains makedeltarpm and applydeltarpm functionality
  - Added lzlib-devel dependency for OpenSUSE


author: Neal Gompa <ngompa13@gmail.com> 0.4.0-1
changelog:
  - Add support for zstd drpms
  - CMake cleanups
  - Make running tests optional
  - Small spec improvements


author: chenyanpanHW <chenyanpan@huawei.com> - 1.6.0-4
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/openEuler-add-secure-compile-option-in-Makefile.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/remove-ldflags-in-cflags.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fix-secure-compile-option-error-in-Makefile.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-Fix-build-err-on-loongarch.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: - Kai Liu <kai.liu@suse.com> - 1.22-1
changelog:
  - Upgrade to v1.22. Also upgrade bundled libbpf to commit 393a058,
    the same as upstream submodule version.
    Introduce a patch from upstream commit 73383b3a3 to avoid using
    deprecated libbpf APIs.


author: - Kai Liu <kai.liu@suse.com> - 1.22-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix spew of warnings if build kernel with LLVM and
    CONFIG_DEBUG_INFO_BTF after commit 32ef9e5054ec
    ("Makefile.debug: re-enable debug info for .S files")


author: - Chenxi Mao <chenxi.mao@suse.com> - 1.25-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Upgrade dwarves version to 1.25 to fix build error
          if kernel version upgrade to 6.4


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 1.47.0-2
changelog:
  - For openeuler 24.03 LTS, remove metadata_csum_seed and orphan_file
    to keep same with openeuler 22.03 LTS.


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.47.0-8.p01
changelog:
  - Type: update
  - ID: [TASK#424751]
  - SUG: NA
  - DESC: Add e2fsprogs-kycompat subpackage.
          Supply follow symbols to solve the API/ABI compatibility issue:
            ext2fs_rb_augment_erase_begin
            ext2fs_rb_augment_insert
            ext2fs_rb_augment_erase_end


author: gaihuiying <eaglegai@163.com> - 2.0.11-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-config file access permisson
         fix ebt_print_error for prints null


author: lifeifei<lifeifei@kylinos.cn> - 2.0.11-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: lifeifei <lifeifei@kylinos.cn> - 2.0.11-12.p01
changelog:
  - Type:compile
  - ID:TASK#424653
  - SUG:NA
  - DESC:replaced ebtables-save perl script by bash script to get rid of the perl requirement


author: chenchen <chen_aka_jan@163.com> - 1:4.11-4
changelog:
  - switch to the new httpclient45 ECF provider
  - remove ECF httpclient dependency from p2 test
  - build failed with compilation failure in org.eclipse.test


author: liyanan <liyanan32@h-partners.com> - 1:4.11-8
changelog:
  - Add security compile options pie, relro and -fstack-protector-strong
  - Add glassfish-jsp and glassfish-servlet-api and glassfish-el-api version limit


author: zhaojingyu <zhaojingyu@kylinos.cn> - 1:4.11-11.p01
changelog:
  - Type:update
  - ID:[BUG#239286]
  - SUG:NA
  - DESC:add loongarch support for resolve Cannot load 32-bit SWT libraries on 64-bit JVM error


author: Michal Hlavinka <mhlavink@redhat.com> - 111-1
changelog:
  - ecryptfs-utils updated to 111
  - fix ecryptfs-setup-swap improperly configures encrypted swap when using GPT 
    partitioning on a NVMe or MMC drive (CVE-2016-6224, rhbz#1356828)


author: Raphael Groner <projects.rg@smart.ms> - 111-5
changelog:
  - add patch for openssl 1.1.x, rhbz#1384023
  - mark patches of upstream and downstream
  - fix legacy patches to still work, drop obsolete patch for memcpyfix
  - general modernization according to guidelines, drop obsolete commands


author: liu_yi <liu_yi@kylinos.cn> - 111-5.p02
changelog:
  - Type:update
  - ID:[Task#226901]
  - SUG:NA
  - DESC:
  - 适配v11版本
  - 添加补丁	TASK-226901-transplant-ecryptfs-utils-to-v11.patch


author: Xiaotian Wu <wuxiaotian@loongson.cn> - 202308-17
changelog:
  - Update LoongArch virtual machine
  - 0080-Platform-Loongson-Remove-minimium-memory-size-limita.patch
  - 0081-Platform-Loongson-Modify-loongarch-uefi-firmware-siz.patch
  - 0082-fixup-fdt-parse-error.patch


author: lijunwei <lijunwei@kylinos.cn> - 202308-17.p01
changelog:
  - Type: Update
  - ID:   [TASK#425200]
  - SUG:  NA
  - DESC: Backport v11-2409 Kylin's patch to support sata cdrom


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202308-17.p02
changelog:
  - Type: Update
  - ID:   [BUG#332197]
  - SUG:  NA
  - DESC: Fix loongarch64 0082-fixup-fdt-parse-error.patch error


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202308-17.p03
changelog:
  - Type: Update
  - ID:   [TASK#442231]
  - SUG:  NA
  - DESC: Fix CVE-2024-13176/CVE-2024-4741/CVE-2024-9143


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: fuanan <fuanan3@h-partners.com> - 0.189-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Remove unnecessary patch because this patch is contained in elfutils-0.189.tar


author: lifeifei <lifeifei@kylinos.cn> - 0.190-3
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add noreplace to /usr/lib/sysctl.d/10-default-yama-scope.conf


author: wangqiang <wangqiang1@kylinos.cn> - 0.190-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: Fix handling of corefiles with non-contiguous .so segments


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: chenyanpanHW <chenyanpan@huawei.com> - 0.21-5
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/gettext-0.22-disable-libtextstyle.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/gettext-0.21.1-covscan.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhaoyuxing <zhaoyuxing2@huawei.com> - 2.2.15-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: split aspell and voikko subpackage & backport patch that enchant2 use hunspell


author: wangchong <wangchong56@huawei.com> - 3.2.0-9
changelog:
  - ID:NA
  - SUG:NA
  - DESC: add kernel-rt, raspberrypi-kernel, raspberrypi-kernel-rt and haoc-kernel to the exclude tag


author: majianhan <majianhan@kylinos.cn> - 3.2.0-10.p01
changelog:
  - Type:update
  - ID:[TASK#425071]
  - SUG:NA
  - DESC:[kylin]isomaker/envmaker/isocut support kylinos
         [kylin]set default menu with 'Install @PRODUCT@ @VERSION@'
         [kylin]fix(isomaker): Fix CD/DVD cannot automatically eject after ISO installation is completed
         [kylin]fix(isomaker): Dont't exit when packages are missing
         [kylin]fix(isocut.py): obtain the correct label
         [kylin]update README.md
         [kylin]set rescue environment language to en_US.UTF-8
         [kylin]fix cannot enter rescue mode bug
         [kylin]isomaker: add /etc/.productinfo
         [kylin]add /etc/kylin-release, /usr/bin/nkvers
         [kylin]fix(isomaker): modify the product information to kylin
         [kylin]fix(isomaker): fix netif not consist issue


author: yueyuankun <yueyuankun@kylinos.cn> - 3.2.0-10.p03
changelog:
  - Type:update
  - ID:[TASK#433557]
  - SUG:NA
  - DESC:[kylin]aarch64: add smmu.bypassdev=0xffe1:0xd200 for xlnid driver


author: yueyuankun <yueyuankun@kylinos.cn> - 3.2.0-10.p04
changelog:
  - Type:update
  - ID:[TASK#433802]
  - SUG:NA
  - DESC:[kylin]add linux-firmware-netronome
                aarch64: add mwv207-dev ljmgp


author: xiaojiantao <xiaojiantao1@h-partners.com> - 2:5.15-3
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:add support to set or get rx buf len and tx push by ethtool


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29464 CVE-2021-29463 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29464,CVE-2021-29463,CVE-2021-29473


author: lifeifei <lifeifei@kylinos.cn> - 1.0.2-1.p01
changelog:
  - Type:fix
  - ID:[Task#415565]
  - SUG:NA
  - DESC:Fix Security Hotspots in SonarQube
         Fix oss_licenses error
         Fix zombie test failure in docker
         Add network test for docker


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1.0.2-1.p02
changelog:
  - Type:update
  - ID:[Task#415565]
  - SUG:NA
  - DESC:add test for sonarqube coverage
         add fuzz test
         add fuzzy test adapts CI flow


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1.0.2-1.p05
changelog:
  - Type:bugfix
  - ID:[BUG#357681]
  - SUG:NA
  - DESC:sync p04 patch: fix parse configure error
         add copyright for process.h


author: wangchen <wangchen137@huawei.com> - 1:5.45.4-6
changelog:
  - Delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/expect-5.43.0-log_file.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/expect-5.43.0-pkgpath.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/expect-5.45-man-page.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/expect-5.45-match-gt-numchars-segfault.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/expect-5.45-re-memleak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/expect-5.45-exp-log-buf-overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/expect-5.45-segfault-with-stubs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/expect-5.45-fd-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/expect-5.32.2-random.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/expect-5.45-mkpasswd-dash.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/expect-5.45-passmass-su-full-path.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/expect-5.45-mkpasswd-man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/expect-5.45-format-security.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-expect-5.45-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: dongjiao <dongjiao@kylinos.cn> - 1.2.2-3
changelog:
  - Type: update
  - ID: [Task#366969]
  - SUG: NA
  - DESC: 1)Modify minor code ,add testcases, and update coverage.xml
  		2)add Buildrequires for pytest


author: dongjiao <dongjiao@kylinos.cn> - 1.2.2-7
changelog:
  - Type: update
  - ID: [Task#415553] [Task#417791]
  - SUG: NA
  - DESC: Fix readcfg init bug and sonar code bug.
  	add tox.ini and change dir tree.
  	fix secure compile problem.
          fix kylin copyright.


author: dongjiao <dongjiao@kylinos.cn> - 1.2.2-9
changelog:
  - Type: update
  - ID: [Task#433530]
  - SUG: NA
  - DESC: update version to 1.2.2-9, add net analyze,packet analyze,iops analyze.


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1.2.2-9.p01
changelog:
  - Type: bugfix
  - ID: [Bug#337326] [Bug#337329]
  - SUG: NA
  - DESC: Fix collection error and analysis error


author: dongjiao <dongjiao@kylinos.cn> - 1.2.2-9.p02
changelog:
  - Type: bugfix
  - ID: [Bug#347345] 
  - SUG: NA
  - DESC: Modify dm profile configuration file to move unused sched parameters.


author: wangyue <wangyue92@huawei.com> - 1.14.0-1
changelog:
  - Update to 1.14.0 to fix CVE-2020-6106 and CVE-2020-6104 and CVE-2020-6107 and CVE-2020-6108 and CVE-2020-6105


author: laokz <zhangkai@iscas.ac.cn> - 1.6.2-2
changelog:
  - Let valgrind BuildRequire following system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le


author: peijiankang <peijiankang@kylinos.cn> - 5.1.11-1
changelog:
  - Type: update
  - ID  : [TASK#411577]
  - SUG : NA
  - DESC: sync code from desktop fcitx5-5.1.11-ok0.10k0.5


author: peijiankang <peijiankang@kylinos.cn> - 5.1.11-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#374505]
  - SUG : NA
  - DESC: add fcitx5-5.1.11-remove-sensitive-info.patch


author: peijiankang <peijiankang@kylinos.cn> - 5.1.3-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop fcitx5-chinese-addons-5.1.3-ok5k0.2
          upstream commtid:9334a2ec6c7f54951c37c9d82e6621d506ad412d


author: peijiankang <peijiankang@kylinos.cn> - 5.1.4-1.p01
changelog:
  - Type: update
  - ID  : [TASK#411577]
  - SUG : NA
  - DESC: sync code from desktop fcitx5-qt-5.1.4-ok0.8k0.2


author: peijiankang <peijiankang@kylinos.cn> - 5.0.12-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop fcitx5-gb18030-5.0.12-1ok4.3k0.7
          upstream commtid:26369c140ab0a037c2bead0b1dcb3e46d0081de1


author: liupei <liupei@kylinos.cn> - 4.12.1-8
changelog:
  - fence_scsi: Automatically detect devices for shared VGs
  - fence_scsi: Add support for space-separated devices and update in meta-data


author: liupei <liupei@kylinos.cn> - 4.12.1-9
changelog:
  - fence_azure_arm:add stack cloud support
  - azure_fence: use correct credential_scope and profile for stack hub


author: liupei <liupei@kylinos.cn> - 4.12.1-11
changelog:
  - fence_aliyun: support filter for list-action
  - fence_aliyun: add credentials file support
  - fence_aliyun: update order for new parameters


author: wangqiang <wangqiang1@kylinos.cn> - 1.96-46.p02
changelog:
  - Type: bugfix
  - ID: [bug#279587]
  - SUG: NA
  - DESC: Use C++98 and disable NULL pointer check optimizations


author: chenyanpanHW <chenyanpan@huawei.com> - 5.39-6
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-file-localmagic.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Pavel Raiskup <praiskup@redhat.com> - 3.14-4
changelog:
  - /proc and /sys made %ghost to allow filesystem package updates in rootless
    container environments (rhbz#1548403)

  -* Fri Jul 17 2020 Ruijun Ge <geruijun@huawei.com> - 3.14-2
  -- update to 3.14 version


author: openEuler Buildteam <buildteam@openeuler.org> - 2:4.7.0-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Fix test failures ran as root and enable -xautofs and disable leaf opt


author: openEuler Buildteam <buildteam@openeuler.org> - 2:4.7.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert remove S_MAGIC_XFS and remove NOSTAT_LEAF_OPTIMIZATION to fix coredump


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:chore nftables add delete table helper
         fix nftables always flush main table on start


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload related ko when stopping firewalld service
         To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: lifeifei <lifeifei@kylinos.cn> - 1.2.6-7.p01
changelog:
  - Type:bugfix
  - ID:TASK#424653
  - SUG:NA
  - DESC:split package firewall-config、firewalld-filesystem,reduce main package installation dependencies;
         fix firewall-cmd execution failed when firewalld stopped[BUG#238862];
         add fix-patch:
         firewalld-0.6.6-kylin-add-cockpit.patch
         firewalld-0.6.6-kylin-fix-bug48533.patch


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.10.2-1
changelog:
  - Upgrade to 1.10.2
  - Delete patches that existed in this version 1.10.2, delete sed option
    cause no file flatpak-docs.html
  - Reserve three patches that still effictive
  - Add patch 0001-OCI-Switch-to-pax-format-for-tar-archives.patch


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 2.6.4-3
changelog:
  - The autoreconf command is used during compilation.
    Therefore,the automake and autoconf compilation dependencies need to added.


author: baizhonggui <baizhonggui@huawei.com> - 20200314-5
changelog:
  - Fix building error: Could not open %files file /home/abuild/rpmbuild/BUILD/fontforge-20200314/FontForge.lang:No such file or directory
  - Add glib in BuildRequires


author: wangyue <wangyue92@huawei.com> - 20200314-6
changelog:
  - remove useless glib buildrequire
  - move /usr/lib/rpm/find-lang.sh /builddir/build/BUILDROOT/fontforge-20230101-3.p01.ky11.aarch64 to correct stage


author: wangkai <13474090681@163.com> - 3.18.0-13
changelog:
  - Fix CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-33367
    CVE-2021-40263 CVE-2021-40266 CVE-2023-47995 CVE-2023-47997


author: baizhonggui <baizhonggui@huawei.com> - 1.6.2-5
changelog:
  - Fix building error: configure: error: no acceptable C compiler found in $PATH
  - Add gcc in BuildRequires


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: yangyun <yangyun50@huawei.com> -3.16.2-1
changelog:
  - upgrade to 3.16.2
  	- fix some issues (see: https://github.com/libfuse/libfuse/releases) 
  	- improved support for some less common systems (32bit, alternative libcs)
  	- unsupported mount options are no longer silently accepted
  	- auto_unmount is now compatible with allow_other
  	- readdir kernel cache can be enabled from high-level API


author: chenyanpanHW <chenyanpan@huawei.com> - 5.1.0-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Disable-pma-test.awk.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Jiayi Chen <chenjiayi22@huawei.com> - 5.2.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport five patches from upstream to fix double free bug in 5.2.0-1
         backport-Fix-a-bug-with-Node_elem_new.patch
         backport-Additional-fix-for-Node_elem_new.patch
         backport-Yet-another-fix-and-test-for-Node_elem_new.patch
         backport-Fix-a-memory-leak.patch
         backport-Code-simplification-in-interpret.h.patch


author: yinbin <jiangheng14@huawei.com> - 1.0.2-74
changelog:
  - LOG: Optimize some log displays
  - remove: code about nobolck mode for mysql
  - interrupt: fix timeout events cannot be counted


author: yinbin <yinbin8@huawei.com> - 1.0.2-77
changelog:
  - openGauss: support kernel connnect
  - xdp: support stack bind numa
  - CFG: fix xdp iface check error
  - fix build error in 2003SP4
  - cfg: show dpdk args after dpdk_adjust_args
  - fix free null pointer when no matching device is found
  - update test/unitest/ltran/ltran_param_test.c.
  - Fix the wrong spelling description in the notes and logs
  - LWIP: adjust position of shutdown in callback of connect
  - fix socket of control thread is overwirtten due to another primary process start


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: lijian1<lijian1@kylinos.cn> - 1.0-0.12.p01
changelog:
  - Type:Enhance
  - ID:[TASK#210879]
  - SUG:NA
  - DESC:Add gcc_secure_exclude macros file, print gcc param in detail and deal with build.command or gcc_secure_exclude miss.


author: yueyuankun<yueyuankun@kylinos.cn> - 1.0-0.12.p02
changelog:
  - Type:Enhance
  - ID:[TASK#204872]
  - SUG:NA
  - DESC:Add docker-engine runc rhash automake to gcc_secure_exclude


author: liuchao <liuchao173@huawei.com> - 14.1-1
changelog:
  - upgrade GDB version to 14.1:
    - GDB no longer support AiX 4.x, 5.x and 6.x. The minimum version supported is AiX 7.1.
    - GDB/MI version 1 support has been removed
    - Initial built-in support for Debugger Adapter Protocol (DAP)
    - GDB now recognizes the NO_COLOR environment variable
    - Initial support for integer types larger than 64 bits
    - Breakpoints can now be inferior-specific
    - New convenience function "$_shell", to execute a shell command and return its result.
    - Python support
    - Support for enabling or disabling individual remote target features
    - New 'no-history' stop reason
    - Support for inferior-specific breakpoints
    - The bkpt tuple, which appears in breakpoint-created notifications, and in the result of the -break-insert command can now include an optional 'inferior' field for both the main breakpoint, and each location, when the breakpoint is inferior-specific.
    - Trying to create a thread-specific breakpoint using a non-existent thread ID now results in an error
    - New "simple-values-ref-types" -list-feature value indicating how the --simple-values option in various commands take reference types into account.
    - Initial support for Scalable Matrix Extension (SME) and for Scalable Matrix Extension 2 (SME2)
    - The 'org.gnu.gdb.aarch64.pauth' Pointer Authentication feature is now deprecated in favor of the 'org.gnu.gdb.aarch64.pauth_v2' feature string
    - Support for the Ada 2022 target name symbol ('@')
    - Support for the The Ada 2022 'Enum_Rep and 'Enum_Val attributes
    - The 'list' command now accepts '.' as an argument, telling GDB to print the location around the point of execution within the current frame
    - New '%V' output format for printf and dprintf commands.
    - The printf command now limits the size of strings fetched from the inferior to the value of the 'max-value-size' setting.
    - Support for extending at configure time the default value of the 'debug-file-directory' GDB parameter via the new --additional-debug-dirs=PATHs configure option.
    - New command "info main"
    - New command "set tui mouse-events [on|off]" (on by default)
    - New command "set always-read-ctf on|off" (off by default)
    - Various new debug and maitenance commands


author: wangqiang <wangqiang1@kylinos.cn> - 14.1-2.p02
changelog:
  - Type: update
  - ID: [TASK#424649]
  - SUG: NA
  - DESC: modify gdb-help package's license GFDL to GFDL-1.3-or-later


author: lijian1 <lijian1@kylinos.cn> - 14.1-2.p03
changelog:
  - Type: bugfix
  - ID: [Bug#382413]
  - SUG: NA
  - DESC: Modify loongarch64 general registers layout for gdbserver-init process.


author: chenyanpanHW <chenyanpan@huawei.com> - 1.0.5-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-Fix-failure-crash-of-sgdisk-when-compiled-with-lates.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-Fix-NULL-dereference-when-duplicating-string-argumen.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-Updated-guid.cc-to-deal-with-minor-change-in-libuuid.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: peijiankang <peijiankang@kylinos.cn> - 2.7.1-1.p01
changelog:
  - Type: update
  - ID:   [TASK#327373]
  - SUG:  NA
  - DESC: add geoclue-2.7.1-kylin-fix-the-problem-that-the-program-does-not-exit-after-the-user-logs-off.patch


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: houhongxun <houhongxun@kylinos.cn> - 2:2.99.10-2.p02
changelog:
  - Type: cves
  - ID  : [TASK#489699]
  - SUG : NA
  - DESC: fix CVE-2022-32990 CVE-2025-48797 CVE-2025-48798 CVE-2025-5473


author: huyubiao <huyubiao@huawei.com> - 2.39.1-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.43.0-4
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: shaojiansng <shaojiansong@kylinos.cn> - 2.3.3-1.p02
changelog:
  - Type:compile
  - ID:TASK#221072
  - SUG:NA
  - DESC:revert incorrect compile fix, use glassfish-servlet-api instead of jakarta-servlet-api


author: yanglu <yanglu72@h-partners.com> - 2.78.0-1
changelog:
  - update glib-networking version to 2.78.0:
    - disable PKCS#11 tests when GNuTLS is built without PKCS#11 support
    - fix connection tests on 32-bit systems with 64-bit time_t
    - updated translations


author: zhangzikang <zhangzikang@kylinos.cn> - 2.78.3-3
changelog:
  - backport patch:
      backport-gdbusmessage-Clean-the-cached-arg0-when-setting-the-message-body.patch
      backport-gsocketclient-Fix-a-use-after-free-in-g_socket_client_connected_callback.patch
      backport-gcontextspecificgroup-Wait-until-stop_func-is-done.patch
      backport-gresources-fix-memory-leak-from-libelf.patch


author: litenglong <litenglong@kylinos.cn> - 2.38-47.p01
changelog:
  - Type:update
  - ID:[Task#424805]
  - SUG:NA
  - DESC:
         author:  lipengyu <lipengyu@kylinos.cn>
         improve memset perf and add strstr-avx2
         10004--Improve-large-memset-perf-with-non-temporal-stores.patch
         10005-add-strstr-avx2.patch

         author: litenglong <litenglong@kylinos.cn>
         Add tcache_count and stack_cache_size dynamic
         10003-add-dynamic-tunable-for-tcache_count-and-stack-cache.patch

         author: lipengyu <lipengyu@kylinos.cn>
         Optimizing memcpy for KH-40000 and KX-7000-Zhaox
         10002-x86-Optimizing-memcpy-for-KH-40000-and-KX-7000-Zhaox.patch

         author: yueyaoqiang <yueyaoqiang@kylinos.cn>
         backport from sp4,add multi gl support and fix localesdata countryname
         10000-kylin-add-multi-gl-support-for-glibc.patch
         10001-Kylin_fix_localesdata_countryname-2.38-29.patch


author: litenglong <litenglong@kylinos.cn> - 2.38-47.p03
changelog:
  - Type:bugfix
  - ID:[Task#432639]
  - SUG:NA
  - DESC: fix rust compile problem by modify tcache_count counting bug.


author: wuxiaolei <wuxiaolei@kylinos.cn> -2.38-47.p07
changelog:
  - Type:bugfix
  - ID:[BUG#371909]
  - SUG:NA
  - DESC: zh_TW: update locale title and territory descriptors


author: wuguanghao <wuguanghao3@huawei.com> - 11.1-1
changelog:
  - upgrade to 11.1
    - add simple-quota xattr to afr and ec ignore list
    - fix asan use-after-free bug
    - fix error not supported for ipv6
    - support OpenSSL 3.0
    - drop libglusterd
    - O_PATH support over protocol
    - Enable AES cipher for SSL by default
    - glusterd: add stripe_count in volume info
    - snapshots: Support for ZFS Snapshots
    - gfapi: Add support for 'AT_EMPTY_PATH' and 'AT_REMOVEDIR' flag


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 11.1-2
changelog:
  - fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.2-1
changelog:
  - Upgrade to 3.38.2
  - Delete 0001-Fix-compiler-errors.patch which existed in version 3.38.2
  - Add sub package gnome-calculator-devel


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.5.0-1
changelog:
  - Upgrade to 0.5.0
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install'


author: xuraoqing <xuraoqing@huawei.com> - 3.8.2-1
changelog:
  - update to 3.8.2
  - some API and ABI modifications, see NEWS for details
  - New option --attime to specify current time
  - libgnutls: Add a mechanism to control whether to enforce extended master secret (RFC 7627)
  - libgnutls: Add additional PBKDF limit checks in FIPS mode as defined in SP 800-132
  - libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to %GNUTLS_NO_DEFAULT_EXTENSIONS.
  - libgnutls: Add support for RFC 9258 external PSK importer.
  - libgnutls: ClientHello extensions are randomized by default,
               To make fingerprinting harder, TLS extensions in ClientHello messages are shuffled.
  - gnutls-cli: New option --starttls-name.
  - libgnutls: transparent KTLS support is extended to FreeBSD kernel.
  - libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452).
  - libgnutls: Add API functions to perform ECDH and DH key agreement.
  - libgnutls: Fix timing side-channel inside RSA-PSK key exchange(CVE-2023-5981).


author: songjuntao <songjuntao@kylinos.cn> - 3.8.2-4.p01
changelog:
  - Type: update
  - ID: TASK#223527
  - SUG: NA
  - DESC: add certtool generate cert and tls1.3 protocol smx algorithm support


author: zhangzikang <zhangzikang@kylinos.cn> - 3.8.2-4.p02
changelog:
  - Type: update
  - ID: [TASK#372985]
  - SUG: NA
  - DESC: Fix gnutlsxx.h file, add set_credentials and db_check_entry functions.
          Supply follow symbols to solve the API/ABI compatibility issue:
            _ZNK6gnutls14server_session14db_check_entryER14gnutls_datum_t
            _ZN6gnutls7session15set_credentialsERNS_11credentialsE


author: wangshuo <wangshuo@kylinos.cn> - 1.21.4-25
changelog:
  - Type:CVE
  - CVE:CVE-2024-34158
  - SUG:NA
  - DESC:fix CVE-2024-34158
  -      optimize the names of the first two patch files


author: wangshuo <wangshuo@kylinos.cn> - 1.21.4-28.p01
changelog:
  - Type:update
  - ID:[TASK#424815]
  - SUG:NA
  - DESC:add patch6027, fix Config.Time in tests using expired certificates, v11-2503
  -      add patch6028, skip TestUnshare if there's nothing more to unshare, v11-2503
  -      add patch9007, for TestSetuidEtc, skipping within a mock with root privileges
  -      backport upstream patches 10001-10003 to implement buildmode=plugin for linux/loong64
  -      add patch10004 to fix write barrier control value error for linux/loong64
  -      remove BuildArch: noarch for golang-devel


author: songliyang <songliyang@kylinos.cn> - 1.21.4-28.p02
changelog:
  - Type: update
  - ID:   [TASK#493381]
  - SUG:  NA
  - DESC: add patch6029 and patch6030 to fix runtime.netpollWaiters overflow


author: Dominik Mierzejewski <dominik@greysector.net> - 2.2.1-6
changelog:
  - re-enable zlib and nvdec
  - fix build with zlib-ng
  - fix building nvdec on aarch64
  - fix OSS audio disablement
  - enable Nghttp2 support
  - list manpages and libraries explicitly
  - clean up, avoid using rm -f


author: Dominik Mierzejewski <dominik@greysector.net> - 2.2.1-7
changelog:
  - switch to standard %bcond_* macros
  - build without FAAD2 by default
  - use SPDX license identifier
  - update URL


author: Dominik Mierzejewski <dominik@greysector.net> - 2.4.0-3
changelog:
  - drop unused build dependency on libfreenect (it's never enabled even if
    detected, see https://github.com/gpac/gpac/issues/1494)
  - jack support builds fine on EPEL9, too, so drop the conditional
  - use upstream URL for accepted patch


author: laokz <zhangkai@iscas.ac.cn> - 2.15-2
changelog:
  - riscv64: force --enable-frame-pointers due to unsupported
    -momit-leaf-frame-pointer compile option until gcc14


author: chenyanpanHW <chenyanpan@huawei.com> - 4.4.1-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-Gradle-local-mode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-Remove-Class-Path-from-manifest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-Implement-XMvn-repository-factory-method.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-Use-unversioned-dependency-JAR-names.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0005-Port-to-Maven-3.3.9-and-Eclipse-Aether.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0006-Disable-code-quality-checks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0007-Port-to-Kryo-3.0.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0008-Port-to-Ivy-2.4.0.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0009-Port-to-Polyglot-0.1.8.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0010-Port-from-Simple-4-to-Jetty-9.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0011-Disable-benchmarks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0012-Disable-patching-of-external-modules.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0013-Add-missing-transitive-dependencies.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0014-Disable-ideNative-module.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0015-Disable-docs-build.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0016-Port-to-guava-20.0.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0017-Set-core-api-source-level-to-8.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0018-Use-HTTPS-for-GoogleAPIs-repository.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2019-16370.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: panxiaohe <panxh.life@foxmail.com> - 3.7-5
changelog:
  - grep: Don't limit jitstack_max to INT_MAX
  - grep: speed up, fix bad-UTF8 check with -P
  - grep: fix minor -P memory leak


author: yueyuankun <yueyuankun@kylinos.cn> - 1:2.12-21.se.05.p04
changelog:
  - Type:update
  - ID:[BUG#242176]
  - SUG:NA
  - DESC:acpi: Fix out of bounds access in grub_acpi_xsdt_find_table()


author: andy lau <liuyang01@kylinos.cn> - 1:2.12-31.se.05.p01
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC: [backport] fix bug about petitboot doesn't ignore EFI entries for ppc64le
          [backport] Inherit 'Add BLS Support' patch from grub-2.06
          [backport] 10_linux: fix missing "ro" in kernel boot parameters Disable LTO
          [backport] use confidential computing provisioned secrets for disk decryption
          [backport] commands/efi/tpm: Re-enable measurements on confidential computing platforms
          [backport] revert sohpgo's modify-efi_max_usable-addr.patch
          [backport] commands/legacycfg: Avoid closing file twice
          [backport] fix not verifying grub.cfg when loading it


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.12-31.se.05.p02
changelog:
  - Type:update
  - ID:TAKS#435953
  - SUG:NA
  - DESC:Remove the kylin_tpm.mod module and unused code in the trusted boot mode.


author: Qin Fandong <qinfandong@kylinos.cn> - 1:2.12-31.se.05.p03
changelog:
  - Type:Update
  - ID:TASK#457741
  - SUG:NA
  - DESC:i386: Check for cpuid family when flush cache only on VIA CPUs


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.12-21.se.06.p05
changelog:
  - Type:bugfix
  - ID:BUG#352094
  - SUG:NA
  - DESC:Cancel the interception prompt during startup when an abnormal configuration file is detected


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.12-31.se.07.p06
changelog:
  - Type:Update
  - ID:BUG#357087
  - SUG:NA
  - DESC:trust boot revise the prompt for scenarios where the TCM device not found


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 8.40-27
changelog:
  - Remove unnecessary buildrequires:gdb

  - Thu Jan 1 2021 yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 8.40-26
  - Fix the following problem:The grub.cfg file is modified.As a result,the system fails to start.


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.3-1
changelog:
  - Upgrade to 1.2.3
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install', 'check' and 'files'


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.18.4-1
changelog:
  - Upgrade to 1.18.4
  - Delete Adapt-to-backwards-incompatible-change-in-GUN.patch whose target
    patch file doesn't exist in this version 1.18.4
  - Add gstreamer-inspect-rpm-format.patch
  - Use meson rebuild


author: baizhonggui <baizhonggui@huawei.com> - 1.16.2-3
changelog:
  - Fix building error: File not found: /home/abuild/rpmbuild/BUILDROOT/gstreamer1-plugins-bad-free-1.16.2-2.oe1.aarch64/usr/lib64/gstreamer-1.0/libgstwebrtcdsp.so
  - Add gcc-g++ in BuildRequires


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.18.4-1
changelog:
  - Upgrade to 1.18.4
  - Delete Adapt-to-backwards-incompatible-change-in-GUN.patch whose target
    patch file doesn't exist in this version 1.18.4
  - Use meson rebuild


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 3.24.41-2.p01
changelog:
  - Type: bugfix
  - ID: [BUG#344842]
  - SUG:  NA
  - DESC:  fix traditional chinese translation of credits and licenses


author: huayadong <huayadong@kylinos.cn> - 4.10.5-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#241679]
  - SUG:  NA
  - DESC: add Patch1:gtk-4.10.5-kylin-WidgetFactory4-NoDisplay.patch


author: lin zhang <lin.zhang@turbolinux.com.cn> - 3.24.7-1
changelog:
  - Update to 3.24.7

  -* Mon Jun 20 2022 liukuo <liukuo@kylinos.cn> - 3.24.6-2
  -- License compliance rectification


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.4-1
changelog:
  - Upgrade to 1.2.4
  - Update Version, Release, Source0, BuildRequires
  - Delete sed operation which existed in this version
  - Add patch for fix CVE-2021-33516
  - Update stage 'prep', 'build', 'install', 'check', 'files'


author: litianhao <litianhao@kylinos.cn> - 1.50.2-7.se.01
changelog:
  - Type: update
  - ID: [TASK#226811] 合入安全套件功能
  - SUG: NA
  - DESC: 合入sm设备管控补丁
  -       gvfs-add-sm-devctl.patch


author: huayadong<huayadong@kylinos.cn> - 1.50.2-7.p01.se.01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: remove BuildRequires: libsmbclient-devel Provides: gvfs-smb


author: huayadong<huayadong@kylinos.cn> - 1.50.2-7.se.01.p02
changelog:
  - Type: update
  - ID  : [TASK#422649]
  - SUG : NA
  - DESC: add BuildRequires: libsmbclient-devel Provides: gvfs-smb


author: luhuaxin <luhuaxin@huawei.com> - 1.3-39
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move gxvattr to main package, move AUTHORS to license folder


author: xinghe <xinghe2@h-partners.com> - 2.6.6-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:backport to fix potential coredump:
         errors: handle malloc failure in usermsgs_put
         ssl_sock: add check for ha_meth
         thread: add a check for pthread_creat


author: xinghe <xinghe2@h-partners.com> - 2.9.5-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: xinghe <xinghe2@h-partners.com> - 2.9.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: chenyanpanHW <chenyanpan@huawei.com> - 9.58-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-hdparm-fallocate-close-fd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-hdparam-Remove-security_password-printing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-hdparm-fix-fd-leak-in-sysfs_write_attr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: baizhonggui <baizhonggui@huawei.com> - 540.1.linux3-18
changelog:
  - Fix building error: make[1]: cc: No such file or directory
  - Add gcc in BuildRequires 
  - Add hfsplus-tools-sysctl.patch


author: baizhonggui <baizhonggui@huawei.com> - 3.0.2-2
changelog:
  - Fix building error: ./autogen.sh: line 3: autoreconf: command not found
  - Add autoconf/automake/gcc in BuildRequires


author: yixiangzhike <yixiangzhike007@163.com> - 3.3.0-1
changelog:
  - Update version to 3.3.0
    - htop add '-n/--max-itrations' option
    - implement zswap support
    - add IRQ PSI meter
    - refactor /proc/<pid>/status parsing
    - add option to shadow path prefixes
    - fix linux Platform_getProcessLocks() for file-description locks
    - fix format specifier warning on 32 bit
    - prevent null pointer dereference on ealy error


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.58-2
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: zhangyaqi <zhagnyaqi@kylinos.cn> - 2.4.58-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:allocate a heap buffer if the configured size is greater than the stack-allocated buffer.


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: gaoyukun <gaoyukun@kylinos.cn> - 2.4.58-7.p01
changelog:
  - Type: updates
  - ID: task#327387
  - SUG: NA
  - DESC: Add kylin support and fix htcacheclean.service start error(patch from 2.4.43-23.p01 and 2.4.51-17.p01)


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 50.0-10
changelog:
  - Type: requirement
  - ID: NA
  - SUG: NA
  - DESC: Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: Funda Wang <fundawang@yeah.net> - 50.0-14
changelog:
  - adopt to new cmake macro
  - migrated to SPDX license
  - drop useless setup macro, cause it duplicates with autosetup
  - drop useless ldconfig_scriptlets, it has been done through glibc's
    filetriggers since openeuler 1.0


author: Xinghai Cen <cenxinghai@h-partners.com> - 50.0-17
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Fix coredump during QP destruction when send_cq == recv_cq


author: chenyanpanHW <chenyanpan@huawei.com> - 1.8.4-8
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fix-for-cargo-test-sometimes-fails-when-make-runs-with-several-simultaneous-jobs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/add-dunce-lib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/del-some-testcases-who-need-network-but-cannot-connect-smoothly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: wangguochun <wangguochun@kylinos.cn> - 2.2.0-1.p02
changelog:
  - Type: Update
  - ID:   [TASK#223180]
  - SUG:  NA
  - DESC: add kylin aarch64 x86_64 loongarch qcow2 build


author: wangguochun <wangguochun@kylinos.cn> - 2.2.0-1.p03
changelog:
  - Type: Update
  - ID:   [TASK#223180]
  - SUG:  NA
  - DESC: 1.Initialize qcow2.img with target os' mkfs and parted tool.fix unknown filesystem error while executing grub-install in build qcow2 workspec.now,you can build kylin advance v10 qcow2 in kylin advance v11 which arch is x86_64.
          2.solve the bug of missing rpm in qcow2


author: herengui <herengui@uniontech.com> - 1.7.3-11
changelog:
  - Fix: fix issue that change language in deepin-control-center cannot affect the fcitx
  - Bug: #I47HF0


author: shenzhongwei <shenzhongwei@kylinos.cn> -0.3.94-1.p02
changelog:
  - Type: bugfix
  - ID: [BUG#234707]
  - SUG: NA
  - DESC: Resolve minimal installation initial-setup garbled code problem


author: shenzhongwei <shenzhongwei@kylinos.cn> -0.3.94-1.p03
changelog:
  - Type: update
  - ID: [TASK#327341] 
  - SUG: NA
  - DESC: Modify the SPEC file to detach the gui from initial-setup


author: Wenhua Huang <huangwenhua@kylinos.cn> -0.3.94-1.p05
changelog:
  - Type: bugfix
  - ID: [BUG#234543]
  - SUG: NA
  - DESC: 把INPUT_KICKSTART_PATH恢复为"/root/anaconda-ks.cfg"
  -


author: yueyuankun <yueyuankun@kylinos.cn> -0.3.94-1.p09
changelog:
  - Type:bugfix
  - ID:[BUG#373659]
  - SUG:NA
  - DESC: display product info using NAME and VERSION_ID instead of PRETTY_NAME


author: lifeifei <lifeifei@kylinos.cn> - 3.16-3.p01
changelog:
  - Type:bugfix
  - ID:TASK#424653
  - SUG:NA
  - DESC:add MPTCPv1 support
         Fix the coredump problem generated by iperf


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 3.18-1.p01
changelog:
  - Type:updates
  - ID:BUG#372041
  - SUG:NA
  - DESC:update to 3.18 for fix CVE-2024-53580 and sync 3.16-3.p01 patch to add MPTCPv1 support


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:6.1.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add epoch version in changelog to fix check_spec_file ci failure


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:6.1.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix testsuite build failure and delete libcap-devel dependency


author: yanglu <yanglu72@h-partners.com> - 1.8.9-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ebtables translate Print flush command after parsing is finished
         fix crash when opts isn't reallocated
         Fix handling of non-existent chains
         nft: Special casing for among match in compare_matches
         extensions: libipt_icmp: Fix confusion between 255/255 and any
         Revert libiptc: fix wrong maptype of base chain counters on restore
         extensions: Fix checking of conntrack --ctproto 0
         libxtables: xtoptions: Fix for non-CIDR-compatible hostmasks
         libxtables: xtoptions: Prevent XTOPT_PUT with XTTYPE_HOSTMASK
         libiptc: Fix for another segfault due to chain index NULL pointer


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: zengweifeng <zwfeng@huawei.com> - 20210722-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix ping2 bingding to VRF and address
          Avoid binding to non-VRF
          Fix ARP protocol field for AX.25 and NETROM


author: eaglegai <eaglegai@163.com> - 20210722-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport to fix no reply when ping6 from Subnet-Router anycast address


author: wangkerong <wangkerong@huawei.com> - 1.21.1-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: round commmunity patch fix Avoid infinite loop on allocation failure


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:1.21.1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:[pci] Ensure that pci_read_config() initialises all fields
         [image] Do not clear current working URI when executing embedded image
         [uri] Retain original encodings for path, query, and fragment fields
         [uri] Allow for relative URIs that include colons within the path


author: Wenhua Huang <huangwenhua@kylinos.cn> - 1:1.21.1-5.p01
changelog:
  - Type:compile
  - ID:TASK#221069
  - SUG:NA
  - DESC: Replace the build directory path with /builddir/build/BUILD


author: Liu Chao <liuchao173@huawei.com> - 3:1.8.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: fix irqbalance-ui build error when ncuses upgrades to 6.3


author: qinyu <qinyu32@huawei.com> - 3:1.9.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: procinterrupts: Fix IRQ name parsing on certain arm64 SoC


author: langfei <langfei@huawei.com> - 3:1.9.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: Fix socket API being blocked for 10s;
  -	Flush file brfore closing;
  -	Check fflush() return value.


author: chenyanpanHW <chenyanpan@huawei.com> - 4.5.0-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-Modify-sensitive-information-fields.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-BUG-285059-Revise-the-expression-of-more-sensitive-w.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yubo<yubo1@kylinos.com> - 1.0.0-01
changelog:
  - Type:update
  - ID:Task#439191
  - SUG:NA
  - DESC:first commit for itrustee_client_v1.6.0, with upstream commit 810002de


author: yubo<yubo1@kylinos.com> - 1.0.0-01
changelog:
  - Type:update
  - ID:Task#439191
  - SUG:NA
  - DESC:first commit for itrustee_tzdriver_v1.6.0, with upstream commit 965cf10


author: Ge Wang <wangge20@huawei.com> - 5.0.0-2
changelog:
  - Fix install confilict with glassfish-servlet-api due to provides same file glassfish-servlet-api.jar


author: wutao <wutao61@huawei.com> - 2.0.14-9
changelog:
  - fix folllowing CVE in this revision
    CVE-2018-18873
    CVE-2018-19541 
    CVE-2018-9055
    CVE-2018-9154 
    CVE-2018-19539 
    CVE-2018-20570
    CVE-2018-9252 
    CVE-2018-19540 
    CVE-2018-20622
    CVE-2018-19139


author: gaoxiang <gaoxiang@kylinos.cn> - 1:1.8.0.432.b06-1.p02
changelog:
  - Type: bugfix
  - ID:   TASK#381413
  - SUG:  NA
  - DESC: 1.fix evex prefix for x86.
          2.fix C2 compile issue by pextr assembler.


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.432.b06-2
changelog:
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8253072-XERCES-version-is-displayed-incorrect.patch
  - add 8159461-8288556-getComponentType.patch
  - add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
  - add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.442.b06-0.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: 1.openjdk-1.8.0.442.b06 GA release.
          2.add support for vector api and avx512.
          3.adjust the order of backport-8170039-change-UseAVX-to-not-emit-evec-vector-check.patch 
            and fix-x86-assembler-of-pextr.patch to facilitate the integration of subsequent patches.
          4.add backport-8074717-Merge-interp-masm-files-for-x86_32-and_64.patch
          5.add backport-8013393-Merge-x86-template-files.patch
          6.add basic-intrisic-support-for-vector-api-v3.patch
          7.add basic-library-support-for-vector-api-v3.patch
          8.modified backport-8170039-change-UseAVX-to-not-emit-evec-vector-check.patch
          9.modified fix-x86-assembler-of-pextr.patch
          10.add backport-8142980-SKX-SpecJvm2008-Derby.patch
          11.add backport-8151003-Remove-nds-is_valid-checks-from-assembler_x86.patch
          12.add backport-8178033-C1-crashes-with-UseAVX3.patch
          13.add backport-8153998-Masked-vector-post-loops.patch
          14.add backport-8210764-8256220-Update-avx512-implementation.patch
          15.add backport-8290964-C2-compilation-fails-with-assert-non-reduction-loop.patch
          16.add backport-8132207-update-for-x86-exp-in-the-math-lib.patch
          17.add backport-8139575-update-for-x86-log-in-the-math-lib.patch
          18.add backport-8145688-update-for-x86-pow-in-the-math-lib.patch
          19.add backport-8143353-update-for-x86-sin-and-cos-in-the-math-lib.patch
          20.add backport-8136421-JEP-243-Java-Level-JVM-Compiler-Interface-partially.patch
          21.add backport-8141133-crash-during-safepoint-deopt.patch
          22.add backport-8151002-Make-Assembler-methods-vextract-and-vinsert-match-actual.patch
          23.add backport-8152907-Update-for-x86-tan-and-log10-in-the-math-lib.patch
          24.add fix-badAdFile-and-adjustUseAVXToExperimental.patch
          25.add adjust-no_mask_reg-to-true-when-no-KReg-Param.patch


author: zhaosaisai <zhaosaisai@kylinos.cn> - 1:1.8.0.442-b06-0.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#436573]
  - SUG:  NA
  - DESC: add fix-vector-index-no-including-zero.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.452.b09-0
changelog:
  - update to 8u452
  - modified add-missing-test-case.patch
  - modified GCC-12-reports-some-compiler-warnings.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.452.b09-1.p01
changelog:
  - Type: update
  - ID:   [TASK#468871]
  - SUG:  NA
  - DESC: openjdk-1.8.0.452 GA release with kylin support:
          1.fix CVE-2025-21587 CVE-2025-30691 CVE-2025-30698
          2.fix test issues and bugs
          3.update timezone
          4.enhance TLS connection and function on compiler
          5.add test for vector api


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC: 1.openjdk-11.0.25.9 GA release
          2.add Hygon dhyana processor support
          3.add Zhaoxin processor support
          4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: songliyang <songiyang@kylinos.cn> - 1:11.0.26.4-1.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-11.0.26.4 GA release with kylin support:
          1.Support Hygon, Zhaoxin CPU


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: songliyang <songiyang@kylinos.cn> - 1:11.0.27.6-1.p01
changelog:
  - Type: update
  - ID:   [TASK#459119]
  - SUG:  NA
  - DESC: openjdk-11.0.27.6 GA release with kylin support


author: Benshuai5D <benshuai5d@huawei> - 1:17.0.14.7-0
changelog:
  - update to 17.0.14
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8280872-Reorder-code-cache-segments-to-improv.patch
  - modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch


author: songliyang <songliyang@kylinos.cn> - 1:17.0.14.7-1.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-17.0.14.7 GA release with kylin support:
          1.Upgrade Hygon TreeMap patch port to 17.0.14
          2.Fix LoongArch64 support patch applying error
          3.Support Zhaoxin CPU


author: songliyang <songliyang@kylinos.cn> - 1:17.0.15.6-2.p01
changelog:
  - Type: update
  - ID:   [TASK#460975]
  - SUG:  NA
  - DESC: openjdk-17.0.15.6 GA release with kylin support


author: Benshuai5D <zhangyunbo7@huawei.com> - 1:21.0.6.7-0
changelog:
  - update to jdk21.0.6-ga
  - delete Backport-JDK-8207908-JMXStatusTest.java-fails-assert.patch
  - delete Backport-JDK-8320682-[AArch64]-C1-compilation-fails-.patch
  - delete Backport-JDK-8331391-Enhance-the-keytool-code-by-inv.patch
  - delete Backport-JDK-8332866-Crash-in-ImageIO-JPEG-decoding-.patch
  - delete Backport-of-8337067-Test-runtime-classFileParserBug-.patch
  - delete Backport-of-JDK-8316895-SeenThread-print_action_que.patch
  - delete Backport-of-JDK-8328723-IP-Address-error-when-client.patch
  - modify Backport-JDK-8329174-update-CodeBuffer-layout-in-com.patch
  - modify Backport-JDK-8340623-Remove-outdated-PROCESSOR_ARCHI.patch


author: wulongyao <wulongyao1@huawei.com> - 1:21.0.6.7-2
changelog:
  - add huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add huawei-Add-KAE-Provider.patch
  - add huawei-Add-KAE-zip-feature.patch
  - add huawei-Fix-arm32-build-failed-undefined-reference.patch
  - add huawei-Add-Fast-Serialzer.patch
  - add huawei-Add-Hashmap-frontCache-opt.patch
  - add huawei-1-add-port-jbolt-feature.patch
  - add huawei-heap-dump-redact-support.patch
  - add huawei-Adapt-to-clang-build-toolchain.patch
  - add huawei-Add-KAE-SM2.patch


author: Dingli Zhang <dingli@iscas.ac.cn> - 1:21.0.6.7-3
changelog:
  - add RVA23 profile and disable auto-enable Vector on buggy kernels for riscv64
  - add Backport-JDK-8315338-RISC-V-Change-flags-for-stable-.patch
  - add Backport-JDK-8329083-RISC-V-Update-profiles-supporte.patch
  - add Backport-JDK-8343555-RISC-V-make-some-verified-on-ha.patch
  - add Backport-JDK-8348554-Enhance-Linux-kernel-version-ch.patch
  - add Backport-JDK-8348384-RISC-V-Disable-auto-enable-Vect.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:21.0.7.6-0
changelog:
  - update to jdk21.0.7-ga
  - delete Backport-JDK-8328553-Get-rid-of-JApplet-in-test-jdk-.patch
  - delete Backport-JDK-8336012-Fix-usages-of-jtreg-reserved-pr.patch
  - delete huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
  - modify huawei-Adapt-to-clang-build-toolchain.patch
  - add huawei-fix-build-fail-realpath.patch
  - modify huawei-heap-dump-redact-support.patch


author: Dingli Zhang <dingli@iscas.ac.cn> - 1:21.0.7.6-4
changelog:
  - add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
  - add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch


author: lipengyu <lipengyu@kylinos.cn>-5.3.0-1.p01
changelog:
  - Type:Requirement
  - ID:[REQ#34645]
  - SUG:NA
  - DMSC:jemalloc optimize for spec2017 
         jemalloc-optimize-for-spec2017-base-v530.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.5.4-1
changelog:
  - Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
    CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.15-17
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/jfsutils-1.1.15-linux-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/jfsutils_sysmacros.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-fix-building-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/jfsutils-reslove-build-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: shenzhongwei <shenzhongwei@kylinos.cn> - 0.82-2.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:config.guess filepath from "/usr/lib/rpm/openEuler/" to "/usr/lib/rpm/kylin/"


author: fengtao <fengtao40@huawei.com> - 0.15-5
changelog:
  - we got upgrade error when upgrade json-c from very low version,
    for example json-c-0.11-5. because old version has a softlink:
    /usr/include/json-c  --> /usr/include/json
    and now, softlink has been removed. so, we fix this in pretrans


author: mengkanglai <mengkanglai2@huawei.com> - 0.16-2
changelog:
  - add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
  - add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
  - add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 0.17-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Disallow control characters in strict mode
          Fix the expected output for test_parse
          Fix causing the strict-mode control characters check to incorrectly trigger


author: sunhai <sunhai10@huawei.com> - 0.17-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict.


author: chenyanpanHW <chenyanpan@huawei.com> - 4.6.2-5
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/support-clang-build.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 2.6.1-2.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#371773]
  - SUG:  NA
  - DESC: rebuild to fix sensitive words of keyboard layout


author: penghuaihe <penghuaihe@kylinos.cn> 1.0.0-1.se.04
changelog:
  - Type: bugfix
  - ID: [bug#242191]
  - SUG: NA
  - DESC: 修复inode_init_security钩子中获取标签后，却又未赋值，导致其他模块标签没打上问题


author: yangzhao <yangzhao@kylinos.cn> 1.0.0-1.se.05
changelog:
  - Type: bugfix
  - ID: [bug#242191] [bug#242752] [bug#242828] [bug#242839]
  - SUG: NA
  - DESC: 修复kbox模块不能通过grub参数进行开关的问题


author: yanglu <yanglu72@h-partners.com> - 006-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add crashkernel auto for Arm 
         enable kdump and set default reserve memory 512MB
         fix test failed due to default value change


author: yueyuankun <yueyuankun@kylinos.cn> - 30-56.p01
changelog:
  - Type:update
  - ID:TASK#204872
  - SUG:NA
  - DESC:support kylinos
         fix the issue of missing changelog during compilation
         add some macros in macros and macros.python files


author: andy lau <liuyang01@kylinos.cn> - 30-57.p01
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC:[backport] Fix for "undefine _auto_set_build_XX" usage


author: Jackie Liu <liuyun01@kylinos.cn> - 1.0-1
changelog:
  - inject: add missing -h args
  - filesnoop: fix crash when -o OPEN
  - Add dbstat support
  - Add ustat support
  - Add inject support
  - tcplinks: fix typo for helps
  - Add icstat support
  - memleak: Tiny fixes
  - memleak: Fix memory leak
  - Fix memory leak when using getline()
  - dbslower: Fixes build errors caused by uninitialized variables in bpf program
  - Add dbslower support
  - Add ugc support
  - Add mysqld-qslower support
  - javagc: fix some attach errors
  - Add uflow support
  - ucalls: Correct 'phpccalls' to 'phpcalls'
  - Add cachetop support
  - biotop/filetop: Fix 'count' print count
  - Add get_uid_name() implementation
  - Add trace support
  - Display UID in username format
  - libbpf-tools: update arm vmlinux with missing perf_event, BPF_PROG_TYPE_PERF_EVENT
  - setuids: rename UID to SU_UID
  - filegone: convert errno to error string
  - filegone: Increase the buffer for filename
  - filegone: Add return code support
  - Expand the print width of pid
  - libbpf-tools/filelife: Check btf struct field for CO-RE
  - tplist: Use tracefs_path()
  - Add reset-trace support
  - Tiny fixes
  - libbpf-tools/tcprtt: use the same options to filter IPv4 and IPv6 addresses
  - tools, libpf-tools: increase IPv6 address width to 39 characters
  - Fix memory leak in capable.c
  - libbpf-tools/execsnoop: fix ret type of bpf_probe_read_user*.
  - libbpf-tools: add block_io_{start,done} tracepoints support to bio tools
  - libbpf-tools: fix tcppktlat show wrong ports
  - Tiny fix we meet
  - funcslower/profile/stackcount: Add folded format output
  - filegone: rewrite filegone base on unlinksnoop
  - offwaketime/wakeuptime: Add folded format output
  - offcputime: Add folded format output
  - Add offwaketime support
  - offcputime: Change the tracepoint mode to kprobe to repair the calltrace display
  - ketones: reword new software tagline
  - dcstat: fix macro err defined
  - Add uthreads support
  - Fix potential double fclose warning
  - Use bpf_core_filed_exist for bpf_ringbuf exist
  - Fix allocating and freeing memory in {probe,free}_usdt_notes
  - Add shmsnoop support
  - uobjnew: Adjust this program to better match the BCC version
  - Add uobjnew support
  - Add tplist support
  - package: Prompt for compilation dependencies
  - Add unlinksnoop support
  - Add dcstat support
  - core_fixes: Fix __builtin_preserve_enum_value not defined issue
  - libbpf-tools: Allow tcppktlat to run on old kernels
  - libbpf-tools: Add support for IPv6 to tcprtt.
  - libbpf-tools: fallback to tracefs mount point if debugfs is not mounted
  - libbpf-tools: add filter for biosnoop
  - cpufreq: read initial freqs only of valid links
  - libbpf-tools: Avoid virtual memory area [uprobes] warning
  - statsnoop: print parent pid
  - opensnoop: print parent pid
  - filesnoop: drop opensnoop and statsnoop in filesnoop
  - Revert "statsnoop: Remove specially designed statsnoop"
  - filesnoop: extend parent pid
  - debian rules to package ketones
  - prepare for make project
  - statsnoop: Remove specially designed statsnoop
  - libbpf: Support POSIX regular expressions for multi kprobe
  - Add tcprst support
  - Add ucalls support
  - uprobe_helpers: Fix path acquisition function
  - libbpf-tools: syscount: Add syscall lookup table for arm64 and riscv
  - Add profile support
  - Add tcpdrop support
  - tcplinks: use ncurses for draw UI
  - libbpf: tiny fixup of libbpf
  - Add tcpsubnet support
  - Add tcplinks support
  - libbpf: don't attach to non-attachable kprobes
  - Add stackcount support
  - libbpf: don't need zero res in exit path
  - libbpf: available_filter_functions_addrs for filter functions
  - Fix the function to get the sk_protocol
  - tcpaccept: Delete redundant code to make more compact
  - tcp: Delete unnecessary parameters
  - Add zfsslower support
  - Add zfsdist support
  - Add funcslower support
  - signal: fix undefined behavior of signal handler
  - commons: Simplified time_since_start function
  - Add tcpaccept support
  - Makefile: fix compile error for bpflist
  - Add tcpretrans support
  - ttysnoop: Implement new way for CO-RE
  - libbpf: rewrite kprobe.multi filter with available_filter_functions
  - Add funccount support
  - Resolve compilation errors on loongarch
  - libbpf: support record count of functions has been traced
  - Makefile: bpflist: remove unnecessary compilation dependencies
  - libbpf: filter by available functions
  - Add vfscount support and cleanup unused variable
  - Add README
  - Add filesnoop support
  - Add bpflist support
  - Add stacksnoop support
  - Add writeback support
  - vfsstat: fix exit value when SIGINT
  - Add threadsnoop support
  - trace_helpers: fix proc maps with [uprobes] entry
  - Add syncsnoop support
  - Cleanup vmlinux and others
  - loads: register perf event on all cpus
  - klockstat: fix running on un-implement down_read_interruptible kernel
  - loads: Remove unnecessary assign 0 operations
  - readahead: fix CO-RE on running without fentry
  - memleak: fix kmalloc and kmalloc_node's hook running on old kernel
  - Makefile: fix foo.bpf.o build without foo.h
  - libbpf-tools: Add loongarch support
  - libbpf-tools: use fentry in funclatency
  - libbpf-tools: Filter with kprobe blacklist for kprobe_exists() api.
  - libbpf-tools/memleak: support ksyms and syms_cache
  - libbpf-tools/memleak: make it run on old kernel
  - change storage type of helper err to int
  - libbpf-tools/memleak: remove unused arg "PERCPU"
  - libbpf-tools/memleak: fix 'show allocs'
  - Makefile: fix binary depends on includes file update
  - ttysnoop: fix co-re on struct iov_iter hasn't ubuf
  - loads: sample_period works on ns, convert to second
  - Add setuids support
  - Sync upstream bpftool libbpf blazesym without submodules
  - Redefine the global name of the project and its representative meanings
  - Add ttysnoop support
  - Move various tracing programs to his directory
  - Move binary to ./bin directory
  - Spit includes and libs into directory
  - Add pidpersec support
  - Add naptime support
  - Add cpuwalk support
  - Add dcsnoop support
  - Add loads support
  - Add swapin support
  - Add tcppktlat support
  - Add javagc support
  - Add tcpstates support
  - Add tcprtt support
  - Add tcplife support
  - tcpconnect: Drop unused ts_us
  - Add tcpconnect support
  - Fix some string features must be done in _GNU_SOURCE
  - Fix potential early exit of the program
  - Add tcpsynbl support
  - Add tcptop support
  - Add tcptracer support
  - Use strftime_now for cleanup
  - Add vfsstat support
  - Use BPF_CORE_READ_STR_INTO to instead of bpf_probe_read_kernel_str
  - Add syscount support
  - Merge changes If1eb510b,I220234bb
  - tcpconnlat: Remove entries from map in all cases
  - execsnoop: add execveat support
  - Fix load of ringbuffer is not support
  - Add tcpconnlat support
  - Add statsnoop support
  - Add solisten support
  - Add support slabratetop
  - Add sigsnoop support
  - Add support readahead
  - Add opensnoop support
  - update submodules url into gitee.com
  - Add support oomkill
  - Add support mountsnoop
  - Use argp_parse_pid and do_process_running wrapper for cleanup
  - memleak: use blazesym for show symbols
  - Add support blazesym
  - Makefile: Generate a symlink for different ebpf programs
  - Add support memleak
  - Add support mdflush
  - Update submodules
  - Add support llcstat
  - Add support ksnoop
  - rename bpf_map_lookup_and_delete to bpf_map_lookup_and_delete_elem
  - Add support klockstat
  - biostacks: fix wrong function name of __blk_account_io_start
  - biosnoop.bpf: fix run by inline functions
  - cpufreq: fix typo from raw_btf to raw_tp
  - biostacks: support run on kernel without btf
  - offcputime: work on kernel without btf
  - fsdist: fix crash on kernel without bss support
  - cpufreq: work on kernel without btf
  - bitesize: fix run on kernel without btf
  - biosnoop: support kernel without fentry
  - numamove: fix initial of num and latency
  - Add fsslower support
  - Drop libbpf_set_strict_mode() calls
  - Add support fsdist
  - bitesize: add missing partitions__load
  - Add support filetop
  - Use bpf_get_current_ns_pid_tgid for WSL or container
  - Add support filelife
  - Add support exitsnoop
  - Add drsnoop support
  - Add support capable
  - Add support cachestat
  - Add support bitesize
  - Add support biostacks
  - Add support biosnoop
  - Add support biopattern
  - Add support biolatency
  - Add support bindsnoop
  - Add support cpufreq
  - Add biotop support
  - Add support funclatency
  - Add gethostlatency support
  - Add bash readline support
  - numamove: only work for numa node > 1
  - runqlen: Add run queue length support
  - execsnoop: convert to use bpf_core_read_xxx
  - Add numasched support
  - execsnoop: works on !(tracepoint/syscalls)
  - numamove: fixes BPF_KRETPROBE for kretprobe
  - update vmlinux.h
  - Add numamove support
  - Fix wrong patch of uapi/linux/bpf.h
  - Add wakeuptime support
  - Add execsnoop support
  - Add support offcputime
  - Add support cpudist
  - Add support runqueue-latency
  - Add support hardirqs
  - use warning instead of fprintf stderr
  - Add softirqs support
  - runqslower support thread id
  - Add .gitreview for git-review
  - Add README.md for build binary
  - Add runqslower tools
  - Init submodules
  - Initial LICENSE


author: Youling Tang <tangyouling@kylinos.cn> - 1.0-2
changelog:
  - softirqs: Fix the naming error
  - Revert "ksnoop: use bpf_get_func_ip() where helper is available"
  - Add criticalstat support
  - ttysnoop: fix iov_iter.ubuf CO-RE mismatch
  - libbpf-tools/gethostlatency: Resolve the path of libc for different namespaces
  - libbpf-tools: Fix misaligned pointer accesses in exitsnoop
  - libbpf-tools/filelife: Fix error tracking caused by failed unlink
  - Added support for f2fs to fsdist and fsslower tools.
  - libbpf-tools: Check biolatency tracepoints using BTF
  - libbpf-tools: Add s390x support
  - libbpf-tools: Fix bindsnoop types usage
  - libbpf-tools: Fix -Wformat errors for 32bit systems
  - ksnoop: use bpf_get_func_ip() where helper is available
  - use tid instead of tgid
  - Add sofdsnoop support
  - spec: mark ketones need clang >= 10
  - package ketones for RPM


author: Youling Tang <tangyouling@kylinos.cn> - 1.0-3
changelog:
  - Add adaptive readahead support
  - Add wqlat support
  - libbpf-tools: fix syscall tracepoints
  - Fix bashreadline
  - libbpf-tools/offcputime, futexctn: Fix incorrect DSO information in stacktrace
  - libbpf-tools/memleak: Add verbose option
  - libbpf: Some advanced features customized for ketones
  - Update libbpf to 1.4.0
  - Add netqtop support
  - Add kvmexit support
  - Add dddos support
  - cpuunclaimed: Add cpuunclaimed support
  - libbpf-tools/ksnoop: perf buffer fix unnecessary junk bits output
  - libbpf-tools: Fix bindsnoop for kernel v6.6+
  - libbpf-tools: Fix trace_helper symbol search bug
  - libbpf-tools/biotop: Add PID filter support
  - libbpf-tools: Fix misaligned pointer accesses in drsnoop
  - libbpf-tools: Fix misaligned pointer accesses in tcptracer
  - libbpf-tools: Fix misaligned pointer accesses in tcpstates
  - libbpf-tools: Fix misaligned pointer accesses in filegone
  - libbpf-tools: Fix misaligned pointer accesses in tcplife
  - libbpf-tools: Fix misaligned pointer accesses in tcpconnect
  - libbpf-tools: Fix misaligned pointer accesses in statsnoop
  - libbpf-tools: Fix misaligned pointer accesses in runqslower
  - libbpf-tools: Fix misaligned pointer accesses in opensnoop
  - libbpf-tools: Fix misaligned pointer accesses in gethostlatency
  - libbpf-tools: Fix misaligned pointer accesses in fsslower
  - libbpf-tools: Fix misaligned pointer accesses in filelife
  - libbpf-tools: Fix misaligned pointer accesses in biosnoop
  - Add futexctn support
  - libbpf-tools/memleak: correct key size of memptrs
  - Sync ketones.spec to v1.0-2


author: Feng Yang <yangfeng@kylinos.cn> - 1.0-4
changelog:
  - tcpmemory: Fix -P filter
  - trace: Fix Segmentation fault
  - icstat: Fix -i error
  - softirqs: Fix compilation optimization issues
  - Correct copyright statements across multiple files
  - retsnoop: capture call stacks of kernel functions that return errors
  - Use kfunc bpf_log2l instead
  - softirqs: Fix R1 unbounded memory access
  - ugc: Fix usdt: no USDT notes section (.note.stapsdt) found in '/usr/bin/python3.11'
  - uflow: Fix get binary file path failed
  - ucalls: Fix get binary file path failed
  - ustat: Fix get binary file path failed
  - ustat: Ability to add Python3
  - provide string helpers
  - Update errno functions
  - Use newer version log2 function
  - Update .clang-format
  - fslatency: Use bpf buffer for compatibility with perf and ring buffer
  - Add fslatency support


author: chenguokai <chenguokai123@live.com> - 2.0.26-9
changelog:
  - Fix multiple issues of riscv image format & initrd support
  - Rebase and test by Mingzheng Xing <xingmingzheng@iscas.ac.cn>


author: zhangzikang <zhangzikang@kylinos.cn> - 2.0.26-9.p01
changelog:
  - Type:update
  - ID:[TASK#424647]
  - SUG:NA
  - DESC:one src.rpm support different arch
         fix kdump.service enable failed in loongarch64
         Fix failure of hugetlb pages exclusion on Linux 6.9 and later
         Fix incorrect PFN exclusion when LOAD segments overlap


author: zhangzikang <zhangzikang@kylinos.cn> - 2.0.26-9.p02
changelog:
  - Type:bugfix
  - ID:[BUG#340820]
  - SUG:NA
  - DESC:Fix incorrect page exclusion in exclude_nodata_pages()


author: zhangzikang <zhangzikang@kylinos.cn> - 2.0.26-9.p03
changelog:
  - Type:bugfix
  - ID:[BUG#341381]
  - SUG:NA
  - DESC:Modify kdump.sysconfig.loongarch64 configuration, resolve the issue of partial Loongson machine kdump not generating vmcore


author: peijiankang <peijiankang@kylinos.cn> - 5.113.0-2.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add kglobalaccel-5.113.0-kylin-fix-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 5.113.0-2.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: update kglobalaccel-5.113.0-kylin-fix-coredump.patch


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-kylin-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/builddir/build/BUILDROOT/kf5-plasma-5.113.0-2.ky11.aarch64" /usr/bin/cmake --install "aarch64-kylin-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-kylin-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/builddir/build/BUILDROOT/kf5-sonnet-5.113.0-2.ky11.aarch64" /usr/bin/cmake --install "aarch64-kylin-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-kylin-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    /usr/bin/cmake --build "aarch64-kylin-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose


author: liuming <liuming@kylinos.cn> 1.0.0.0-0k2.9
changelog:
  - 用户手册中入侵检测工具图标显示异常
  - 增加对软链接/硬链接/设备文件创建的监控，并修复hook点重复的问题
  - 修复loong64/sw64上ringbuffer映射错误，以及loong64不支持fentry/fexit导致的程序无法启动的的问题


author: Qin Fandong <qinfandong@kylinos.cn> - 9.25.1-2.p01
changelog:
  - Type: update
  - ID: [TASK#469233]
  - SUG: NA
  - Desc: remove unused dependency grub2-efi-ia32-modules


author: litianhao <litianhao@kylinos.cn> - 30-4.se.01
changelog:
  - Type: update
  - ID: [TASK#226811] 通用包合入套件补丁
  - SUG: NA
  - DESC: 合入kysec补丁
  -       kmod-add-kysec-check.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 30-4.se.02
changelog:
  - Type: update
  - ID: [BUG#346402]
  - SUG: NA
  - DESC: 去除kmod 插入模块时 kysec的检查
  -       kmod-remove-insmod-kysec-check.patch


author: wangzhiqiang <wangzhiqiang95@huawei.com> - 0.9.5-1
changelog:
  - upgrade version to 0.9.5:
    - add requires libmount and libmount-devel
    - add multipath.conf multipathc and libmpathutil.so
    - delete README.alua


author: zengjianqi <zengjianqi@kylinos.cn> - 1.21.2-13.p01
changelog:
  - Type: update
  - ID: [TASK#424795]
  - SUG: NA
  - DESC: Add krb5-kycompat subpackage.
          Supply follow symbols to solve the API/ABI compatibility issue:
            krb5_aprof_init
            krb5_aprof_finish
            krb5int_aes_enc_key
            krb5int_aes_enc_blk
            k5_sha256_update
            k5_sha256_final
            k5_sha256_init
            krb5_free_ad_signedpath
            encode_krb5_ad_signedpath_data
            decode_krb5_ad_signedpath
            encode_krb5_ad_signedpath
            krb5int_utf8_next
            krb5int_strlcat
            krb5int_strlcpy


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.0-06.se.01
changelog:
  - Type:update
  - ID:
  - SUG:NA
  - DESC: 修改spec文件及删除一些无用文件
  -       添加状态切换日志
  -       按照打包规范修改版本号
  -       添加异常退出时输出堆栈


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.0-06.se.02
changelog:
  - Type:update
  - ID:[BUG#295657] [v11-B14] [外设管控] 系统初始环境，/var/log/下存在txt格式文本文件
  - SUG:NA
  - DESC: 修改审计应用日志文件名


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-02
changelog:
  - Type: update
  - ID: [任务#439186] kysec2.0审计日志输出
  - SUG: NA
  - DESC: 相关的轮替功能操作由logrotate来管理，提供默认转存配置
          增加fuzz测试
          合规性整改移除ksaf_config


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-03
changelog:
  - Type: update
  - ID: [任务#474839] 【v11 2503】审计包功能优化
        [任务#471091] 【安全红线】整改自研组件第一轮Fortify问题-ksaf-audit-daemon
  - SUG: NA
  - DESC: 优化审计，和内核相关的定义从class-def.conf获取
          合规性整改
          没启动ksaf_main模块，不启动审计日志服务


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-04
changelog:
  - Type: update
  - ID: [任务#490381] 【v11 2503】优化ksaf-audit-daemon相关功能
  - SUG: NA
  - DESC: 去除掉配置文件，不允许修改日志文件名


author: lengchunying <lengchunying@kylinos.cn> 1.0.1-01
changelog:
  - Type:update
  - ID: [任务#434606] 【ksaf】升级kysec2.0包版本至1.0.1-01
  - SUG:NA
  - DESC: 升级kysec2.0包版本至1.0.1-01


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-04
changelog:
  - Type:update
  - ID: [BUG#338617] 【ksaf-policy】【安全风险】文档有未实现功能的描述
  - SUG: NA
  - DESC: 允许所有用户执行ksaf-main-policy-sync
          kysec2.0相关几个模块禁止卸载
          增加保护ksaf标签的策略, 仅允许标记管理器修改


author: zhubing zhubing@kylinos.cn - 1.0.1-02
changelog:
  - Type: update
  - ID: [BUG#327787]【V11-B19】【loongarch】【外设管控】sm-example命令执行失败
  - SUG: NA
  - DESC: 同步v11 2409解决网卡策略及时生效异常问题


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-03
changelog:
  - Type:update
  - ID: [任务#486679] 【v11 2503】优化ksaf-dynamic-uid相关功能
  - SUG:NA
  - DESC: 未加载ksaf_main模块不启动该服务
          修改方案，优化该程序，减少io访问。
          移除无效的监控
  	修改单元测试
          从qmake变为cmake
          修改依赖选项


author: zhubing zhubing@kylinos.cn - 1.0.0-02.se.02
changelog:
  - Type: update
  - ID: [BUG#295015]【V11-B14】【管理员分权】strict模式下，secadm用户无权限执行fdisk命令
  - SUG: NA
  - DESC: 解决由于策略文件太大，导致策略数据写入内核失败问题，在开机时同步id pairs


author: zhubing zhubing@kylinos.cn - 1.0.0-02.se.03
changelog:
  - Type: update
  - ID: [BUG#296941] 【V11-B14】【外设管控】人体工学设备不插拔重启后策略失效
  - SUG: NA
  - DESC: 在加载kbox模块前，判断cmdline是否使能box


author: zhubing zhubing@kylinos.cn - 1.0.0-02.se.04
changelog:
  - Type: update
  - ID: [任务#419047]【安全红线】解决ksaf-init的strip编译选项问题
  - SUG: NA
  - DESC: 去除libksaf_status库文件的符号信息


author: zhubing zhubing@kylinos.cn - 1.0.1-03
changelog:
  - Type: update
  - ID: [BUG#347071]【V11 2503】【需求36791|41559】【执行控制】首次kysec_policy enable开启安全，执行控制不生效 
  - SUG: NA
  - DESC: 修复ksaf-label-manager --sync-path-id 执行失败问题


author: chengang chengang@kylinos.cn - 1.0.1-04
changelog:
  - Type: update
  - ID: [BUG#369687]【执行控制】手动添加启动参数，lsm=ksaf，重启系统后开启kysec功能不生效
  - SUG: NA
  - DESC: ksaf 默认状态从 4 修改为 0


author: chengang <chengang@kylinos.cn> 1.0.se.03
changelog:
  - Type:update
  - ID:[bug#242737]
  - SUG:NA
  - DESC: 修复制造商使用的软件没有准确kysec标记导致无法正常使用的问题
  -	添加security 命令行参数适配


author: wangshengye <wangshengye@kylinos.cn> - 1.1.0-1.se.05
changelog:
  - Type: bugfix
  - ID: [BUG#297115] 【v11-B14】【国密算法】Gnutls协议连接国密支持功能测试失败-5556端口被自研软件包占用
  - SUG: NA
  - DESC: 同步桌面不可变系统相关适配代码
  		删除设备信息配置文件，由ksaf-main维护


author: wangshengye <wangshengye@kylinos.cn> - 1.1.0-1.se.06
changelog:
  - Type: update
  - ID: [任务#397913]【ksaf】优化程序运行时检查程序是否已经运行的机制
  - SUG: NA
  - DESC: 优化程序运行时检查程序是否已经运行的机制，避免多个进程运行导致功能异常
          捕获程序异常信号，出现异常时打印出栈信息
  		添加命令行参数，实现同步path_id到内核


author: wangshengye <wangshengye@kylinos.cn> - 1.1.0-1.se.07
changelog:
  - Type: bugfix
  - ID: [BUG#300787]【V11-B16】【ARM】【安全模式切换】none-strict重启过程中报错
  - SUG: NA
  - DESC: [任务#412519]【ksaf】已运行进程标记更新功能优化
          [任务#415507] ksaf-label-manager安全问题整改


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-02
changelog:
  - Type: update
  - ID: [BUG#340532]【V11-2503】【B05】rpm包vendor信息检查失败
  - SUG: NA
  - DESC: 修改SPEC文件vendor信息
          同步os-release-v11分支最新代码


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-03
changelog:
  - Type: update
  - ID: [BUG#346402]【V11-2503】【B09】【需求36791】【执行控制】加载无执行权限的内核模块，无审计日志
  - SUG: NA
  - DESC: tid配置文件中添加/usr/bin/kmod,值设置为4


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-04
changelog:
  - Type: bugfix
  - ID: [BUG#364225]【v11-2503】【B14】【需求36795|41839|41835】【文件保护】移除软件包文件保护后被移动后还原的文件，再次添加保护不生效
  -     [BUG#364165]【v11-2503】【B14】【需求36795|41549】【文件保护】移除包方式添加的保护的例外后，文件保护不生效
  - SUG: NA
  - DESC: 优化继承标志设置逻辑
          同步桌面最新代码，桌面独有代码使用条件编译
          优化程序启动时对软件包查询的流程，减少对CPU资源的占用


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-05
changelog:
  - Type: bugfix
  - ID: [BUG#374711]【B17】【v11 2503】【需求36795|41839|41835】【文件保护】添加\删除\查看文件保护策略-软件包-kysec_set，只读策略不生效
  - SUG: NA
  - DES: 全盘打标之前删除包内文件父目录缓存文件


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.1-05
changelog:
  - Type: bugfix
  - ID: [BUG#341984]审计用户执行auditctl命令失败
  - SUG: NA
  - DESC: 解决缓存导致cap授权失效问题;解决动态变量初始化失败问题.


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.1-06
changelog:
  - Type: bugfix
  - ID: [任务#387321]桌面ksaf-main-module联调问题处理
  - SUG: NA
  - DESC: 同步v11桌面修复bug补丁：
  -       移植开明包管控支持补丁;
  -       移植支持策略表达式if部分可视化解析补丁
  -       移植交互支持静默、授权、通知三种模式补丁
  -       移植策略数据库锁更换为互斥锁补丁
  -       移植smatch代码扫描问题修复补丁


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.1-09
changelog:
  - Type: bugfix
  - ID: [BUG#330607]光驱设置只读策略后，再设置禁用策略，移除策略失效
  -     [BUG#347535]插入1次打印机，生成多条连接记录
  -     [BUG#330419]不可变切换到运维模式后，关闭执行控制失败
  -     [BUG#347348]应用安全-删除软件包执行例外设置后程序依旧可执行
  -     [BUG#352767]禁用无线网卡设备策略后，有线网络也会断开重连
  - SUG: NA
  - DESC: 内核升级,重编模块；同时同步v11桌面已修复bug


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-04
changelog:
  - Type:update
  - ID: [任务#443851] 【v11-2503】ksaf1.5-底层开发
  - SUG:NA
  - DESC: 固定函数名和函数ID对应关系解决增量下发函数名会变问题
          内置变量interactive扩展：由bool类型更改为int类型
          删除由配置生成的源文件，改为编译时自动生成
          修改及补充ksaf1.5单元测试


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-06
changelog:
  - Type:update
  - ID: [任务#461412] 策略改动及优化
  - SUG:NA
  - DESC: 优化策略下发速度
          全量下发和增量下发方案调整
          添加策略module_name字段
          代码冗余调整，重复代码合并
          解决当section段没策略全量下发，后加入策略增量下发失败问题
  	修复loongarch初始化下发策略段错误问题


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-07
changelog:
  - Type:update
  - ID: [任务#478961] 【V11 2503】修改ksaf-policy-interpreter和libksaf-policy-sync的单元测试和冗余代码
  - SUG:NA
  - DESC: 去掉ksafpolicy服务，因和dbus启动的服务冗余
          去除注释的冗余代码
          修改编译选项


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-08
changelog:
  - Type:update
  - ID: [任务#487477] 【V11】【内核特性】内核启动时间调优 / 【安全】initrd裁剪-安全的脚本ksaf
        [bug#338197] 【V11 2503需求】【需求41075】【build04】【漏洞扫描】诊脉漏扫测试KVE-2025-0302
        [bug#338196] 【V11 2503需求】【需求41075】【build04】【漏洞扫描】诊脉漏扫测试KVE-2025-0301
  - SUG:NA
  - DESC: 新增ksaf-policy-sync-init只下发初始化策略
          修复脉诊漏洞


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-09
changelog:
  - Type:update
  - ID: [任务#498111] 【v11 2503】修复执行#ldconfig 命令，提示/usr/lib64/libksafinterpreter.so.1不是symbolic link
  - SUG:NA
  - DESC: 库修复，之前不是链接


author: jiaohongjie <jiaohongjie@kylinos.cn> - 3.0.0-3
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 0002补丁:应用联网控制功能优化
  - DESC: 0003补丁:kysec开启接口更改;half状态判断更改;模块操作日志修改


author: hanhuijie <hanhuijie@kylinos.cn> - 3.0.0-6
changelog:
  - Type:update
  - ID:[BUG#347383][BUG#349036][BUG#346870][BUG#346816][BUG#344842][BUG#346423][Bug#346777][BUG#346779][BUG#346822][BUG#347522][BUG#347703][任务#461358]
  - SUG:NA
  - DESC: 添加0010补丁: 修改可信度量bug;添加日志级别;切换开关翻译;同步桌面进程，文件，内核防卸载模块修改。----hanhuijie
  -    [BUG#349036]【V11-2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】管理员关闭可信度量重启后查看详情未置灰 		
  -    [BUG#347383]【V11 2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】切换可信启动开关后显示未达预期	
  -    [BUG#346870]【V11 2503】【B09】【需求41727】【应用程序执行控制】安全日志-关闭应用程序度执行控制功能，日志级别为信息 
  -      添加0009补丁: 同步桌面联网管控状态切换优化，搜索优化，首次加载数据优化                         ----jioahongjie
  -      添加0008补丁: 控制面板的安全中心为英文;【UKUI4.0】设置面板中安全项未汉化;终端和设置中含有英文，未繁体化; 同步桌面kysec切换接口 ----duanhongtao
  -       [BUG#346816] 【UKUI4.0】设置面板中安全项未汉化
  -       [BUG#344842] 【繁体】终端和设置中含有英文，未繁体化
  -       [BUG#346423]  控制面板的安全中心为英文
  -      添加0007补丁，修复以下问题                                                                      -----maqiting
  -    【V11 2503】【B09】【账户保护】密码强度-推荐文案中为“至少包含2类字符”
  -    【V11 2503】【B09】【账户保护】账户锁定-默认状态测试，锁定时长与锁定时间不对
  -    【V11 2503】【B09】【安全设置】安全模式切换（关闭-安全优先-关闭）,选择安全优先后重启，安全变为自定义模式，重启后安全管理员和审计管理员无法登录
  -    【V11 2503】【需求41779】【B09】default模式下test用户打开高级配置后切换root用户无法打开安全中心
  -    【V11 2503】【B09】【需求41779】点击安全中心-设置-切换安全防护设置为安全优先后重启未生效 
  - DESC: 0006补丁:开源合规修改&&删除ksc-exectl，kysec-devctl,PrivatySecurity和SecurityReinforce下的翻译文件  ----hanhuijie


author: maqiting <maqiting@kylinos.cn> - 3.0.0-7
changelog:
  - Type:update
  - ID:[BUG#356165][BUG#353735][BUG#353485][BUG#347924][BUG#347835][BUG#350293]
  - SUG:NA
  - DESC:
  -      添加0011,0012,0013补丁，修复以下问题
  -     【V11-2503】【B09】【安全加固】【安全扫描】安全扫描过程中，点击停止按钮，停止扫描后仍有扫描项的状态是扫描中
  -     【V11-2503】【B09】【日志查看器】审计操作行为日志文件中没有记录
  -     【v11 2503】【B12】【需求41759】【账户保护】密码强度－自定义密码的长度拉伸条取值范围和输入数字的取值范围不一致
  -     【V11 2503】【B11】【需求41769】【安全中心】繁体模式下，安全加固和安全工具为英文
  -     【v11 2503】【B11】【账户保护】密码强度-推荐后面字体未对齐，有空白留存
  -      更新设置下的切换安全模式弹窗逻辑，完善密码检查，更新翻译文件
  -      同步桌面修改，优化服务启动性能


author: maqiting <maqiting@kylinos.cn> - 3.0.0-8
changelog:
  - Type:update
  - ID:[BUG#356165][BUG#353485][BUG#344842][任务#455262][BUG#347416][BUG#346056][BUG#271387]
  - SUG:NA
  - DESC:
  -      添加0014补丁，修复完善以下问题
  -      [BUG#356165]【v11 2503】【B12】【需求41759】【账户保护】密码强度－自定义密码的长度拉伸条取值范围和输入数字的取值范围不一致
  -      [BUG#353485]【v11 2503】【B11】【账户保护】密码强度-推荐后面字体未对齐，有空白留存
  - 
  -      添加0015补丁，修复完善以下问题。----sunjin
  -      [BUG#344842]【V11-2503】【B08】【繁体】终端和设置中含有英文，未繁体化
  -      优化模板名显示不全和没翻译的问题
  -      修复msgstr"之间没空格的问题
  -
  -      添加0016补丁，完成用户手册（中文）编写和相关bug修复。----hanhuijie
  -      [任务#455262]【V11 2503】编写《银河麒麟高级服务器操作系统V11 2503安全中心用户手册》
  -      [BUG#347416]【V11 2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】查看帮助手册关于可信度量说明失败
  -      [BUG#346056]【V11 2503】【B09】【需求41779】应用联网控制-帮助文档验证，帮助文档打不开
  -      [BUG#271387]【V11-2409】【B10】设置的帮助手册部分内容的描述与实际系统不一致
  -
  -      添加0017补丁，修复half打开安全中心时状态切换问题。----jiaohongjie
  -      [BUG#346997]【V11 2503】【B09】【需求41779】应用联网控制-UI状态更新实时更新到命令（关-开-关）-未开启过安全功能
  -      [BUG#346469]【v11 2503】【B09】【需求41775】【内核模块防卸载】首次开启内核模块防卸载，关闭弹框后界面没有提示重启生效
  -      [BUG#346521]【V11 2503】【B09】【需求41773】【文件防篡改】首次开启文件防篡改，点击稍后重启后，界面没有重启提示
  -      [BUG#346649]【v11 2503】【B09】【需求41777】【进程防杀死】off模式开启进程防杀死，点击稍后重启后，界面没有提示重启生效
  - 
  -      添加0018补丁，修复防火墙、联网管控问题。----jiaohongjie
  -      [BUG#363405]【v11-2503】【B14】【账户保护】密码强度默认为自定义
  -      添加多个应用或软件包时，增加交互进程条；优化添加软件包窗口和结果提醒弹窗出现顺序
  -      优化添加软件包对话框：搜索保持选中状态、搜索内容为空时回车关闭问题修复
  - 
  -      添加0019补丁，补充用户手册遗漏内容
  -      添加0020补丁，修复安全热点问题 ----zhaoqingyou
  -      [任务#468465][安全红线]整改自研组件第一轮安全热点扫描的问题-ksc-defender


author: duanhongtao <duanhongtao@kylinos.cn> - 3.0.0-9
changelog:
  - Type:update
  - ID:[BUG#359365][BUG#364657][BUG#364573][BUG#353220][BUG#367341][BUG#353220][BUG#351500][BUG#347416][BUG#347377]
  - SUG:NA
  - DESC:
  -      添加0021补丁，修复完善以下问题
  -      [BUG#359365] off模式下开启内核模块防卸载未立即重启界面选中关闭，无重启生效提示
  -      [BUG#364657]【应用程序执行控制】普通用户访问安全中心，脚本管控开关未置灰
  -      [BUG#364573]【控制面板安全】控制面板-安全中心-安全加固-界面排版存在问题
  -      [BUG#353220]【V11 2503】【B11】【需求41769】【安全中心】【可信度量】【TPM/TCM】开启可信度量，查看可信根、BIOS、GRUB详情，可信根描述有误
  -
  -      添加补丁0022 修复可信度量弹窗以及可信根问题;用户手册删除不存在内容以及调整顺序问题。--hanhuijie
  -      [BUG#367341]【V11 2503】【B15】【需求41769】【安全中心】【可信度量】【KYEE】篡改grub.cfg后，可信度量项UEFI失败，通知是英文	
  -      [BUG#353220]【V11 2503】【B11】【需求41769】【安全中心】【可信度量】【TPM/TCM】开启可信度量，查看可信根、BIOS、GRUB详情，可信根描述有误 
  -      [BUG#351500]【V11 2503】【B10】【需求41769】【安全中心】【可信启动】【TPM/TCM/KYEE】不可信状态下，切换用户后登录系统，未弹出通知 
  -      [BUG#347416]【V11 2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】查看帮助手册内容有问题 	    
  -      [BUG#347377]【V11 2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM】篡改BIOS配置后，系统未给通知
  -
  -      添加补丁0023 修复fortify问题。--zhaoqingyou
  -      [任务#471067][安全红线]整改自研组件第一轮Fortify问题-ksc-defender


author: hanhuijie <hanhuijie@kylinos.cn> - 3.0.0-10
changelog:
  - Type:update
  - ID:[BUG#372255][BUG#372147][BUG#370307] 	
  - SUG:NA
  - DESC:
  -      添加0024补丁，修复完善以下问题     ---jiahongjie
  -      应用联网管控提示语更新、优化删除按钮显示、软件包UI界面图标优化等
  - 
  -      添加0025补丁，修复完善以下问题     ---xuyujun
  -      涉密接管后，应用程序执行控制和应用联网控制修改为还可以继续使用
  - 
  -      添加0026补丁，修复完善以下问题     ---hanhuijie
  -      [BUG#372255]【V11-2503】【B16】【需求41799】【可信启动】【TPM/TCM】命令行开启可信启动为拦截模式，切换安全中心界面，可信度量未选中开关 		    
  -      [BUG#372147]【V11-2503】【B16】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】开启文案长度不应该显示省略号
  -      [BUG#370307]【V11 2503】【B15】【需求41769】【可信度量日志】【KYEE】可信启动日志-在安全中心进行可信状态修改，日志查看器找不到操作日志    
  -
  -      添加0027补丁, 添加麒麟版本声明, 删除未使用代码 ---zhaoqingyou


author: maqiting <maqiting@kylinos.cn> - 3.0.0-11
changelog:
  - Type:update
  - ID:[BUG#377081][BUG#376931][BUG#378261][BUG#378697][BUG#378695]
  - SUG:NA
  - DESC:
  -      添加0028补丁，修复完善以下问题     ---duanhongtao
  -      [BUG#377081] 【B17】【应用程序执行控制】off模式开启应用程序执行控制把box也打开
  -
  -      添加0029，0030补丁，修复完善以下问题     ---maqiting
  -      [BUG#376931] 【V11-2503】【B17】【账户保护】账户锁定-关闭账户锁定登录测试，关闭锁定后重新打开安全中心，账户锁定自动打开
  -      [BUG#378261] 【v11-2503】【B17】【需求41775】【内核模块防卸载】off模式开启内核模块防卸载重启生效提示信息不对 
  -      更新设置-安全模式按钮展示逻辑，删除冗余代码
  -      [BUG#378697] 【V11 2503】【build18】【安全设置】UI上从安全模式从关闭切换成严格模式，未提示重启生效
  -      [BUG#378695] 【V11 2503】【build18】【安全设置】安全模式切换-初始状态从UI上切换到推荐，未提示重启生效


author: sunjin <sunjin@kylinos.cn> - 3.0.0-12
changelog:
  - Type:update
  - ID:[BUG#378983]
  - SUG:NA
  - DESC:
  -      添加0031补丁，修复完善以下问题     ---sunjin
  -      [BUG#378983] 【V11-2503】【B18】【安全加固】【首页显示】安全扫描，扫描结果时间显示省略号


author: wangjiang <wangjiang37@h-partners.com> - 1:2020.0.0-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix backport-Fix-hist_nearend.patch
         backport-functions-with-not-loaded-autoloaded-functions.patch
         backport-Fix-interactive-restricted-shell-behavior.patch


author: wangyuhang <wangyuhang27@huawei.com> - 2:1.0.8-1
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:due to the upstream community no longer maintaining the previous version,
         we have rolled back to the stable branch and switched to an active code repository.
         new upstream release and update version to 1.0.8


author: huayumeng <huayumeng@kylinos.cn> - 0.2.0-1
changelog:
  - Type: update
  - ID: [TASK#223348]
  - SUG: NA
  - DESC: Implement engineering based image construction function


author: huayumeng <huayumeng@kylinos.cn> - 0.2.1-1
changelog:
  - Type: update
  - ID: [TASK#334992]
  - SUG: NA
  - DESC: Supplement ktib unit testing
          The FROM command to supplement dockerfile's functionality can be used for scratch in one step
          Fix the issue of incorrect maintainer retrieval through static scanning function
  	Fix the issue of incorrect label retrieval in static scanning function
  	Fix the issue of incorrect ENV data acquisition in the static scanning function
  	Delete unnecessary functions that have not been called
  	Fixed the issue in the security policy where the image detection returned a non empty value when it was Scratch
  	Fix the ADD and COPY method issue of dockerfile not being detected during non whitelist file detection in the security policy


author: lvxiangcong <lvxiangcong@kylinos.cn> - 0.2.2-1
changelog:
  - Type: bugfix
  - ID: [BUG#243821]
  - SUG: NA
  - DESC: Modify the default config.yml generated by initializing rootfs
  	Fix the issue where the target path does not exist when copying
  	Fix the issue of failed installation of RPM package in container 
  	Fix the issue where images are used by container when building images


author: lvxiangcong <lvxiangcong@kylinos.cn> -0.2.4-1
changelog:
  - Type: update
  - ID: [BUG#334951]
  - SUG: NA
  - DESC: fix error chroot chroot_script.sh file and add kylin copyright


author: lvxiangcong <lvxiangcong@kylinos.cn> - 0.3.0-1
changelog:
  - Type:TASK
  - ID:  [TASK#432698]
  - SUG: NA
  - DESC: Support images manifest manager function
  	Support container images manager function 
  	Imporve and perfect builders build function


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.29.1-10
changelog:
  - TypeLbugfix
  - CVE:NA
  - SUG:NA
  - DECS:remove the architecture judgment in the patches section;
         include all patches in the source package.


author: weiyuan <weiyuan@kylinos.cn> - 1.29.1-10.p01
changelog:
  - Type:update
  - ID:[TASK#427098]
  - SUG:NA
  - DESC:backport v11-2409 patch
         add 1002-add-phytium-tune-for-better-affinity-in-k8s-1.29.patch


author: wangli <3214053332@qq.com> - 1.1.0-1
changelog:
  -   add some test files
  -   prepare corresponding script for ras\rac\rahub to deploy config file respectively
  -   update part of file paths
  -   update to 1.1.0


author: gwei3 <11015100@qq.com> - 1.1.2-1
changelog:
  -   update to 1.1.2
  -   add slice length checks to avoid buffer overflow while extracting and verifying
  -   update integration test data to meet restapi parameter check requirement
  -   modify raagent/main.go file, change log to logger, os.Exit returns different values based on diff errors
  -   close RAS restapi server in signal handler
  -   Add parameter format checking for pcr/bios/ima in POST {id}/newbasevalue API
  -   Fix bugs in v1.1.1
      bug 1: hostintegritytool.sh can only add the 2nd part of ima policy into /etc/ima/ima-policy.
      bug 2: running hostintegritytool.sh multiple times will add duplicated linux cmdlines in /etc/default/grub.
      bug 3: rahub config path was assigned wrong values, which is caused by copy/paste
  -   fix the issue that Makefile not sync vendor
  -   modify readme file


author: gwei3 <11015100@qq.com> - 1.1.2-2
changelog:
  -   update BuildRequires & Requires to replace openssl* with compat-openssl11* to adapt to latest Mainline
  -   remove redundent clean label in spec file


author: leezhenxiang <1172294056@qq.com> - 2.0.0-1
changelog:
  -   update to 2.0.0
  -   add qcaserver, attester, and tas packages
  -   add BuildRequires itrustee_sdk-devel, cjson-devel and Requires itrustee_sdk, cjson
  -   modify makefile to adapt to different architectures
  -   specify the build requires in rac and attester package


author: peijiankang <peijiankang@kylinos.cn> - 5.27.10-2.p01
changelog:
  - Type: update
  - ID:   [TASK#426756]
  - SUG:  NA
  - DESC: fix build error
          add 0001-update-changelog-4-5.27.11-ok2.patch
              0002-update-changelog-4-5.27.11-ok3.patch


author: peijiankang <peijiankang@kylinos.cn> - 5.24.7-2.p01
changelog:
  - Type: update
  - ID:   [TASK#425692]
  - SUG:  NA
  - DESC: sync kylin patch from 5.24.7-1.p01
          add 0001-update-changelog.patch to add strength


author: houhongxun<houhongxun@kylinos.cn> - 5.24.4-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#352453]
  - SUG : NA
  - DESC: fix some windows displaying abnormally for 16bit depth


author: peijiankang<peijiankang@kylinos.cn> - 5.24.4-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add kwin-5.24.4-fix-coredump-when-logout.patch


author: lilu <lilu@kylinos.cn> - 1.0.0-2
changelog:
  - Type: update
  - ID: [Task#366963]
  - SUG: NA
  - DESC: remove python3-ollama, ollama and python3-pandas requires


author: lilu <lilu@kylinos.cn> - 1.0.0-5
changelog:
  - Type: update
  - ID: [Task#420677]
  - SUG: NA
  - DESC: modify code security compilation and security compliance issues


author: lilu <lilu@kylinos.cn> - 1.0.0-6
changelog:
  - Type: update
  - ID: [Task#393939]
  - SUG: NA
  - DESC: add tox.ini, unit test cases and modify the CI process


author: wuzhaomin <wuzhaomin@kylinos.cn> - 1.0.1-1
changelog:
  - Type: update
  - ID: [Task#393941]
  - SUG: NA
  - DESC: Optimize response based on rag scheme and add natural language trigger tuning part


author: lichenguang <lichenguang@kylinos.cn> - 1.0.1-1
changelog:
  - Type: update
  - ID: [Task#442809]
  - SUG: NA
  - DESC:  
  - 1. 使用meson构建工具管理工程;
  - 2. 调整优化服务架构，核心功能代码下沉至安全层； 
  - 3. 调整前端管理工具，使用新接口规划;
  - 4. 新增precheck功能，保证优化服务仅在麒麟系统上运行;
  - 5. 优化模块支持多场景切换；
  - 6. 优化方法支持中断绑核功能；
  - 7. 集成用户手册和优化方案编写规范手册。


author: lichenguang <lichenguang@kylinos.cn> - 1.0.1-2
changelog:
  - Type: update
  - ID: [Task#442809]
  - SUG: NA
  - DESC:  
  - 1. 修复门禁系统兼容性分析问题 
  - 2. 修复门禁系统合规分析问题； 
  - 3. 提升ldop-ext模块的单元测试覆盖率;


author: lichenguang <lichenguang@kylinos.cn> - 1.0.1-4
changelog:
  - Type: update
  - ID: [Task#442809]
  - SUG: NA
  - DESC:  
  - 1. 提升单元测试覆盖率至80%; 
  - 2. 修复sonarqube扫描中的部分问题；


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p16
changelog:
  - Type: update
  - ID:[TASK#436445][TASK#432968]
  - SUG: NA
  - DESC: add fuzz check
          add secret key activation
          add deactivation function
          adjust the configuration file to the/etc directory
          adjust activate the policy to the server


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p17
changelog:
  - Type: bugfix
  - ID: [BUG#336521][BUG#336143] 
  - SUG: NA
  - DESC: update get activation code from kylin


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p18
changelog:
  - Type: bugfix
  - ID: [BUG#336143][TASK#442197][BUG#336809][BUG#339458][BUG#338942]
  - SUG: NA
  - DESC: update spec to fix install error
  	integrate value for added product
  	upate get activation status logic


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p22
changelog:
  - Type: update
  - ID:[TASK#463164][BUG#348859][TASK#466714]
  - SUG: NA
  - DESC: ajust the size of the Confirm Cancel button
  	check license osname locally when kms version lower than 2.5
  	fix security compilation issues


author: lichenguang <lichenguang@kylinos.cn> 1.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#473471]
  - SUG : NA
  - DESC: Fix security hotsposts in the sonarqube report.


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371117]
  - SUG : NA
  - DESC: kylin-process-manager-daemon-4.10.0.0-fix-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-process-manager-4.10.0.0-ok1.33k1.5
          upstream commtid:0038ddf0249de1761514d30db39c7730dc0a1242


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#452549]
  - SUG : NA
  - DESC: remove kylin-process-manager core functionality


author: qiaojijun <qiaojijun@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#473473]
  - SUG : NA
  - DESC: kylin-process-manager fix sonarqube hotpoints


author: douyan<douyan@kylinos.cn> 3.2.0.1kylin1k32.01-1
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: Update upstream version 3.2.0.1kylin1k32.01-1


author: peijiankang <peijiankang@kylinos.cn> - 3.2.0.1kylin1k32.01-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-burner-3.2.0.1kylin1k32.01-ok28k0.15
          upstream commtid:a75a72f1b921070dfeaaae1aed4f80961ddcd4e4


author: houhongxun <houhongxun@kylinos.cn> - 1.2.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 1.2.0.0-ok6.15k0.7
          upstream commitid: 37ab1d619f81aa00f85a1decdfe505518e0f5ddd


author: peijiankang <peijiankang@kylinos.cn> - 1.2.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#250087]
  - SUG : NA
  - DESC: Add patch: kylin-calculator-1.2.0.0-disable-feedback.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-calendar-4.10.0.0-ok2.16k0.12
          upstream commtid:33a3c76c0b50b9058fdebd352de5229ce21d71bb


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#250111]
  - SUG : NA
  - DESC: Patch0002: kylin-calendar-4.10.0.0-kylin-update-zh_HK-translation.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add kylin-calendar-4.10.0.0-Single-instance-addition-of-DISPLAY-judgment.patch


author: huayadong <huayadong@kylinos.cn> - 3.24.0.0-1
changelog:
  - Type: update
  - ID:   [TASK#424335]
  - SUG:  NA
  - DESC: update version to 3.24.0.0-0k0.35
          fix KVE-2024-1102


author: peijiankang <peijiankang@kylinos.cn> - 3.24.0.0-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#289223]
  - SUG:  NA
  - DESC: add kylin-device-daemon-3.24.0.0-fix-coredump-when-quit.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371117]
  - SUG : NA
  - DESC: Update ukui-settings-daemon-4.10.0.0-fix-shortcut-open-terminal-fail.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-fix-save-param-SIGABRT.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#291269]
  - SUG : NA
  - DESC: ukui-settings-daemon-4.10.0.0-fix-targetBrightness-to-100.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#304113]
  - SUG : NA
  - DESC: add Patch5:ukui-settings-daemon-4.10.0.0-kylin-fix-push-power-btn-error.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok4.18k0.9


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: update ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch
          add ukui-settings-daemon-4.10.0.0-add-copyright-info.cpp


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#379967]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-kylin-fix-push-power-btn-error.patch
          add ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch


author: huayadong <huayadong@kylinos.cn> - 1.1.0.13-1.p01
changelog:
  - Type: update
  - ID  : [TASK#442854]
  - SUG : NA
  - DESC: sync code from desktop kylin-font-viewer-1.1.0.13-0k1.29
          upstream commtid:0ae74a01cdd70dde46befbfd78de32da65762861


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-2
changelog:
  - Type:compile
  - ID:372691
  - SUG:NA
  - DESC: release 1.0-2
  	support xfs.
  	add -d to output important logs to syslog.


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-3
changelog:
  - Type:compile
  - ID:372691
  - SUG:NA
  - DESC: release 1.0-3
  	support device mapper
  	fix bug when print wwid


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-5
changelog:
  - Type:compile
  - ID:431407
  - SUG:NA
  - DESC: release 1.0-5
  	supports monitoring of file system mount/umount events.
  	improve program startup speed.
  	adjust license's description.
  	add option `--mask` to enable debug mode.
  	fix coredump when argc == 0.


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-7
changelog:
  - Type:bugfix
  - ID:[bug#381669]
  - SUG:NA
  - DESC: release 1.0-7
  	fix coredump when wwid's length is less than 32.


author: yangxudong <yangxudong@kylinos.cn> - 1.0-2.5.p03
changelog:
  - Type:bugfix
  - ID:[BUG#236047]
  - CVE:NA
  - SUG:NA
  - DESC:modify addons repo url
  - DESC:modify ks10 to v11


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-theme-4.10.0.0-0k0.13
          upstream commtid:dc0ff06586aca10e1729d9b7a4aa2c5f138c72fa


author: jiangping <jiangping@kylinos.cn> - 7-14.1.01
changelog:
  - Add kylin-indexhtml-7-14.1-kylin-change-Desktop-to-Advanced-Server.patch
  - Fixed kylinbz#1360, change Desktop to Advanced Server


author: xuchenchen <xuchenchen@kylinos.cn> - 1.0-6
changelog:
  - Type:
  - ID:372687
  - SUG:NA
  - DESC: release 1.0-6.
  	[bug#296843]Support monitor subprocess.
  	Fix parameter parsing problem.


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.18
changelog:
  - Type: update
  - ID:   [BUG#291723][BUG#295643][BUG#297323]
  - SUG:  NA
  - DESC: 安全日志明细操作字段显示
  - 登录日志同一用户两条日志过滤
  - 登录失败级别修改为错误
  - 添加补丁:
  - bug-291723-kysec-log-information-table-op.patch
  - bug-295643-297323-login-log.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.19
changelog:
  - Type: update
  - ID:   [BUG#293841]
  - SUG:  NA
  - DESC: 
  - strict模式下，所有用户都能查看日志查看器
  - 添加补丁:
  - bug-293841-permission-problems-in-strict-mode.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.20
changelog:
  - Type: update
  - ID:   [BUG#310625][TASK#361225][TASK#420685]
  - SUG:  NA
  - DESC: KVE漏洞修复
  		添加strip编译参数
  		添加copyright
  - 添加补丁:
  - bug-310625-fix-kve-2022-0308.patch
  - TASK-361225-add-strip-security-compile-parameter.patch
  - TASK-420685-supplement-header-comment.patch
  - TASK-420685-supplement-header-comment-update.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.21
changelog:
  - Type: update
  - ID:   [BUG#330366][BUG#297363][BUG#297421]
  - SUG:  NA
  - DESC: 修复崩溃日志无显示
  		更新单元测试文件
  		修复字体样式未随系统切换
  		修复审计日志导出后文件内容存在特殊字符
  		合规性整改
  - 添加补丁:
  - bug-330366-no-crash-log-display-after-crash.patch
  - update-unit-test-file.patch
  - bug-297363-font-update-with-system.patch
  - bug-297421-special-character-displayed-when-export-audit-log.patch
  - update-code-compliance-rectification.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.22
changelog:
  - Type: update
  - ID:   [BUG#338424]
  - SUG:  NA
  - DESC: 添加dbus方法级管控接口
  - 添加补丁:
  - bug-338424-add-dbus-interface-access-control.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.23
changelog:
  - Type: update
  - ID:   [TASK#439187][TASK#439188]
  - SUG:  NA
  - DESC: debug模式下禁用dbus接口管控
  		安全操作日志需求
  		适配kysec2.0内核日志
  - 添加补丁:
  - update-disable-dbus-access-control-in-debug.patch
  - TASK-439187-adapted-to-operation-log.patch
  - TASK-439188-adapted-to-kysec2.0-kernel-log.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.24
changelog:
  - Type: update
  - ID:   [BUG#295643][BUG#314413][BUG#347837][BUG#347838]
  - SUG:  NA
  - DESC: ssh登录失败等级为警告
  		root用户被锁定没有日志
  		复制日志失败
  		数据加载完成后提示窗不会自动退出
  - 添加补丁:
  - bug-295643-level-warning-when-ssh-login-failed.patch
  - bug-314413-no-root-locked-log.patch
  - bug-347837-copy-log-failed.patch
  - bug-347838-dialog-auto-exits-after-loading-completed.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.25
changelog:
  - Type: update
  - ID:   [BUG#347841][BUG#346493]
  - SUG:  NA
  - DESC: 主题适配
  		未知用户登陆等级修改为错误
  		关闭文件防篡改等级修改为警告
  - 添加补丁:
  - bug-347841-adapt-to-system-theme.patch
  - update-unknown-user-login-failed-is-error.patch
  - bug-346493-the-level-is-information-when-close-kysec-fpro.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.26
changelog:
  - Type: update
  - ID:   [BUG#346493][BUG#346442]
  - SUG:  NA
  - DESC: 更改warning级别翻译为告警
  		修复kysec命令行操作在麒麟安全中无显示问题
  		修复测试用例编译问题
  - 添加补丁:
  - update-warning-of-translation-issue.patch
  - update-kysec-cmd-operation-is-not-displayed.patch
  - update-test-case-compilation-issue.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.27
changelog:
  - Type: update
  - ID:   [BUG#375807][BUG#376571]
  - SUG:  NA
  - DESC: 用户手册无法打开、更新用户手册
  		default模式无应用日志：应用日志暂不显示
  		代码通过clang-format格式化
  - 添加补丁:
  - bug-375807-user-guide-cannot-be-opened.patch
  - bug-376571-ordinary-users-do-not-display-app-logs.patch
  - update-standardized-code-format.patch


author: huayadong <huayadong@kylinos.cn> - 1.0-6.8.p02
changelog:
  - Type: bugfix
  - ID  : [Bug#226228]
  - SUG : NA
  - DESC: add Patch01:kylin-logos-1.0-change-KylinSoft-Corporation-COPYING.patch


author: zhangzikang <zhangzikang@kylinos.cn> -12.0.2-12.el8.ks8.02
changelog:
  - Type:update
  - ID:TASK#141930
  - SUG:NA
  - DESC:modify the spec file URL and gettext_package to kylin
  - Add Patches:fix_PACKAGE_name_to_kylin.patch


author: zhouming <zhouming@kylinos.cn> 1.0.0-07
changelog:
  - Type:update
  - ID:
  - SUG:NA
  - DESC:修复BUG:352774;352204;351741;351609;351536;351526;351477;351461;651441;351374;351323;351307


author: zhouming <zhouming@kylinos.cn> 1.0.0-08
changelog:
  - Type:update
  - ID:
  - SUG:NA
  - DESC:修复BUG:354369;354103;353905;362383;353889;363101;354369;新增对免密登录的处理;优化OTP PIN码错误提示不够详细的问题;优化 存在多个UKEY设备时的相关提示


author: zhouming <zhouming@kylinos.cn> 1.0.0-09
changelog:
  - Type:update
  - ID:
  - SUG:NA
  - DESC: 修复BUG:修复开启双因子后，远程SSH登录失败的问题
          去除userAuthMethods dbus接口授权
          优化OTP绑定和PAM认证流程及其相关接口
          优化OTP,UKEY解绑接口
          修复 在服务器版本中，无法开启MFA SSH功能的问题
          优化 在配置SSH MAF的重启SSH服务修改为重新加载SSH配置
          修复 在编译过程中出现的警告信息
          修复 在SSH远程登录账户锁定时出现多次锁定信息的问题
          添加 在UKEY未绑定登录时，提示未绑定的信息
          更新 翻译信息


author: zhouming <zhouming@kylinos.cn> 1.0.0-12
changelog:
  - Type:update
  - ID:
  - SUG:NA
  - DESC: 
          修复 多因子认证-图形化页面-用户管理-删除用户验证：kylin用户绑定安全密钥，删除kylin用户，新建kylin用户，重新绑定初始化的Ukey失败
          添加帮助文档相关内容
          添加 生成证书的脚本


author: peijiankang <peijiankang@kylinos.cn> - 1.1.0.47-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-music-1.1.0.47-ok9.25k0.14
          upstream commtid:6d4626ab05a46fe6f1712a2f06571fb1d0cbd724


author: douyan<douyan@kylinos.cn> 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add patch 0001-fix-kylin-nm-4.10.0.0-add-LANG-env.patch


author: houhongxun <houhongxun@kylinos.cn> 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289795]
  - SUG : NA
  - DESC: dns address from network manager is in network byte order


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok0.13k0.14
          upstream commitid: 52ecaf1e58ae14f32abcc183c92b6c60b0d3e2f9


author: xuchenchen <xuchenchen@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID: [BUG#249127]
  - SUG: NA
  - DESC: kylin-prohibit-non-root-users-from-setting-up-networ.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.0.0.0-ok6k0.3


author: huayadong <huayadong@kylinos.cn> - 1.3.0.3-1.p02
changelog:
  - Type: update
  - ID  : [TASK#442854]
  - SUG : NA
  - DESC: sync code from desktop kylin-photo-viewer-1.3.0.3-ok22.36k0.9
          upstream commtid:2e076623f1ab76a3c6973e4238d6234116c77422


author: peijiankang <peijiankang@kylinos.cn> - 1.3.0.3-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#294723]
  - SUG : NA
  - DESC: add kylin-photo-viewer-1.3.0.3-kylin-disable-startani.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.3.0.3-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#294723]
  - SUG : NA
  - DESC: add kylin-photo-viewer-1.3.0.3-kylin-add-copyright-head.patch


author: zengliwen <zengliwen@kylinos.cn> -3.1-11
changelog:
  - Type: update
  - ID: [TASK#432541]
  - SUG: NA
  - DESC: separate dynamic library files kyabidiff.so as dependencies


author: zengliwen <zengliwen@kylinos.cn> -3.1-13
changelog:
  - Type: update
  - ID: [TASK#432536]
  - SUG: NA
  - DESC: Added API analysis capabilities for C language programs


author: yangxiaodong <yangxiaodong@kylinos.cn> - 11-01.6.p237
changelog:
  - Type:update
  - ID:[TASK#463164]
  - CVE:NA
  - SUG:NA
  - DESC: modify SOURCES/90-default.preset add activation.service


author: ZhaoYu Jiang <jiangzhaoyu@kylinos.cn> - 1.0.1-1
changelog:
  - Update kylin-sbom-generator: with addons author/buildtime in spdx-2.2 json.
  - Update kylin-sbom-generator: with spdx-3.0 support.
  - Update kylin-sbom-generator: Support V11 Release Detection.
  - Update kylin-sbom-generator: Fix go-diskfs GPT-Table Size capacity Overflow.
  - Update kylin-sbom-generator: Exclude Vendor for anchore/go-rpmdb PackageInfo LackDepends & Update VersionInfo


author: houhongxun <houhongxun@kylinos.cn> - 1.0.0.1kylin1k81-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 1.0.0.1kylin1k81-ok8.24k1.3


author: peijiankang <peijiankang@kylinos.cn> - 1.0.0.1kylin1k81-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add kylin-screenshot-1.0.0.1kylin1k81-Single-instance-addition-of-DISPLAY-judgment.patch


author: Wenhua Huang <huangwenhua@kylinos.cn> - 0.1.1-1.p05
changelog:
  - Type:update
  - ID:TASK#222678
  - SUG:NA
  - DESC: Modify License to KylinSoft
          RPM ignore test code


author: Wenhua Huang <huangwenhua@kylinos.cn> - 0.1.1-1.p06
changelog:
  - Type:bugfix
  - ID:[BUG#248111/BUG#247937/BUG#247889/BUG#247883]
  - SUG:NA
  - DESC: Fix bugs cause by sonarQube


author: changtao <changtao@kylinos.cn> - 2.0-6
changelog:
  - Type:compile
  - ID:TASK#369009 #TASK369001
  - SUG:NA
  - DESC:add signal monitor & process state monitor.


author: Deyuan Fan <fandeyuan@kylinos.cn> - 2.0-8
changelog:
  - Type:compile
  - ID:TASK#387157
  - SUG:NA
  - DESC:add unit test code & improve code coverage & modify bpf program.


author: Deyuan Fan <fandeyuan@kylinos.cn> - 2.0-11
changelog:
  - Type:compile
  - ID:TASK#440154 TASK#431721 TASK#429232
  - SUG:NA
  - DESC:monitor of signal & inode & filehandle & number of process


author: Deyuan Fan <fandeyuan@kylinos.cn> - 2.0-12
changelog:
  - Type:compile
  - ID:TASK#440154 TASK#443800 TASK#433604 TASK#431721
  - SUG:NA
  - DESC:fix some known issues and GPL issue


author: changtao <changtao@kylinos.cn> - 2.0-13
changelog:
  - Type:compile
  - ID:BUG#339854 BUG#339852 TASK#446051
  - SUG:NA
  - DESC:fix file monitor failed of rm operation & fix file monitor timestamp problem &fix PenTest


author: changtao <changtao@kylinos.cn> - 2.0-15
changelog:
  - Type:compile
  - ID:TASK#471101 TASK#415537
  - SUG:NA
  - DESC:fix fortify high-level problem & add file license headers


author: houhongxun <houhongxun@kylinos.cn> - 1.2.0.3kord-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 1.2.0.3kord-ok6.13k0.13
          upstream commitid: f1439f4f99b8afd4691d8a401861442be40ca815


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-user-guide-4.10.0.0-ok2.7k0.16
          upstream commtid:7ad757f89f412a5be1d5684048a516c028645671


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-user-guide-4.10.0.0-ok2.7k0.18
          upstream commtid:a780d9a4d36e4f58f6dea3412fc3974c14e5f6ea


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#293701]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-root-start-no-sandbox.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: update
  - ID  : [TASK#475175]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-remove-html-comment.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#363727]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-zh-HK-adapt.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#363723]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-update-zh-HK-ts.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#356895]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-add-ksc-defender-jumpinfo.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.1.4.2k1-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-video-3.1.4.2k1-ok26.21k0.22
          upstream commtid:7a08725bccb3c7938502fb9d7b2e44bd0999078a


author: peijiankang <peijiankang@kylinos.cn> - 3.0.1.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-virtual-keyboard-3.0.1.0-ok0.12k0.4
          upstream commtid:f3b588138f44997947ec3b5c2912a11fcafcd71f


author: zuohsh <zuohongsheng@kylinos.cn> -2.0.1-1
changelog:
  - Type:Task
  - ID:457822
  - SUG:NA
  - DESC: kylin_warm_revert_patch-taget_definition_compatible_with_all_hotpatches.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.3.1.0-1
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-wayland-compositor-1.3.1.0-0k0.5
          upstream commtid:1e12b35019a7339c27fabc4c88c6cee50f566461


author: houhongxun <houhongxun@kylinos.cn> - 1.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 1.0.0-ok3.4k0.1


author: kuangkai <kuangkai@kylinos.cn> - 1.2.1-01
changelog:
  - Type: bug fix
  - DESC: remove the dependency of vendor
  - COMMIT:603bfb4c [bugfix] recover cannot work on panic in goroutine


author: kuangkai <kuangkai@kylinos.cn> - 1.2.1-02
changelog:
  - Type: bug fix
  - DESC: fix the bug of start server error after deploy
  - COMMIT:e1431534 update the deploy
           84d29af6 add the raft iops metric support


author: lifeifei <lifeifei@kylinos.cn> - 0.2-1.p02
changelog:
  - Type:fix
  - ID:[Task#415565]
  - SUG:NA
  - DESC:Fix Security Hotspots in SonarQube
         fix disk and kyBayze oss_licenses error
         Modify Makefile for CI coverage
         remove unused files
         add Copyright
         add fuzz test


author: liyunqing <liyunqing@kylinos.cn> - 0.2-1.p03
changelog:
  - Type:fix
  - ID:[Task#415565]
  - SUG:NA
  - DESC: replace kfifo with ufifo
         add unit test for collect
         fix memleak


author: wanghao <wanghao2@kylinos.cn> 1.0.0-02
changelog:
  - Type: bugfix
  - ID: [BUG#205129][BUG#205129]
  - SUG:NA
  - DESC: 添加默认授权配置,解决清空策略失败的问题
  -	  add patch: kysdk-module-authorize-add-default-authorize-conf.patch


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.0.0-02.p01
changelog:
  - Type:update
  - ID:[任务#328060]
  - SUG:NA
  - add Patch02: kysdk-module-authorize-copyright.patch
  - DESC: 328060 libkysdk-module-authorize在V11上移植适配


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.0.0-02.p02
changelog:
  - Type:update
  - ID:[任务#332809]
  - SUG:NA
  - add Patch03:	kysdk-module-authorize-unit-test.patch
  - DESC: 332809 kysdk-module-authorize单元测试


author: duanhongtao <duanhongtao@kylinos.com> - 1.0.0-02.p03
changelog:
  - Type:update
  - ID:[任务#421367]
  - SUG:NA
  - add Patch04:	kysdk-module-authorize-code-rectification.patch
  - DESC: 421367 kysdk-module-authorize代码整改及合规检查


author: duanhongtao <duanhongtao@kylinos.com> - 1.0.0-02.p04
changelog:
  - Type:update
  - ID:[任务#435323]
  - SUG:NA
  - add Patch05:	kysdk-module-authorize-code-add-more-unit-test.patch
  - DESC: 435323 kysdk-module-authorize提升单元测试覆盖率至70%


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.0.0-02.p05
changelog:
  - Type:update
  - ID:[BUG#353731][BUG#357525]
  - SUG:NA
  - add Patch06:	kysdk-module-authorize-selfprotect.patch
  - DESC: 
  - 353731 [V11-2503][B11][安全SDK]enforcing状态下，kdk-authorize授权过的程序，执行时无法访问授权配置
  - 357525 [V11-2503][安全SDK][安全管控]应用执行控制添加应用,执行报错


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.14
changelog:
  - Type: update
  - ID: [TASK#391721]
  - SUG: NA
  - DESC: 修复安全热点和fortify
  -       kysec-common-fix-sonarqube-bugs.patch
  -       kysec-common-fix-fortify-bugs.patch
  -       kysec-common-fix-test-makefile.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#307245]
  - SUG: NA
  - DESC: 修复parse_file_type函数解析文件类型错误问题
  -       kysec-common-fix-parse-file-type-error.path


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.16
changelog:
  - Type: update
  - ID: [TASK#405875]
  - SUG: NA
  - DESC: 增加单元测试代码
  -       kysec-common-add-unit-test-20241024.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.17
changelog:
  - Type: update
  - ID: [TASK#422679] 合规整改
  - SUG: NA
  - DESC: 合规整改
  -       kysec-common-add-license.patch


author: pengxi <pengxi@kylinos.cn> - 1.1.1-01.se.18
changelog:
  - Type: update
  - ID: [TASK#435234]
  - SUG: NA
  - DESC: 单元测试代码更新
  -       kysec-common-update-unit-test.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.19
changelog:
  - Type: update
  - ID: [TASK#449386]
  - SUG: NA
  - DESC: 修复平台扫描的开源代码引入问题
  -       kysec-common-fix-opensource-introduce.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.1-01
changelog:
  - Type: update
  - ID: [TASK#441731]
  - SUG: NA
  - DESC: kysec2.0命令行开发,添加kysec_policy的日志类型
  -         kysec-common-add-kysec-policy-log-type.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.1-02
changelog:
  - Type: bugfix
  - ID: [BUG#346400]
  - SUG: NA
  - DESC: 修复parse_file_type()解析.ko.xz的错误
  -	  kysec-common-fix-parse-file-type-interface-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.2.1-03
changelog:
  - Type: update
  - ID: [TASK#441570]
  - SUG: NA
  - DESC: 新增kysec-scene日志接口
  -	  kysec-common-add-kysec-scene-log-if.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-04
changelog:
  - Type: update
  - ID: [TASK#468469]
  - SUG: NA
  - DESC: 修复安全热点问题
  -     kysec-common-fix-sonarqube.patch


author: yangguangjing <yangguangjing@kylinos.cn> - 2.0.0-02
changelog:
  - Type: update
  - ID: [BUG#347490]
  - SUG: NA
  - DESC: 增加security-switch的需求
  -      kysec-daemon-security-switch-new-parameter-20250508.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-03
changelog:
  - Type: update
  - ID: [TASK#441731]
  - SUG: NA
  - DESC: 模式切换时 去除kysec中开启box的动作,单独开启box
  -	  kysec-daemon-fix-double-enable-box.patch  
  - 	添加setModuleStatusReboot()接口, 可以直接重启系统
  -         kysec-daemon-add-set-module-status-reboot-interface.patch   
  -   box开启逻辑放在kysec中作为子项
  -         kysec-daemon-fix-change-box-status.patch
  - 修改security-switch --get 状态时 off的状态显示值由none 变为off
  -	  kysec-daemon-get-status-none-2-off.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-04
changelog:
  - Type: update
  - ID: [BUG#352649][BUG#352653][BUG#351149]
  - SUG: NA
  - DESC: 修复调用reboot命令执行错误的问题
  -	  kysec-daemon-fix-excute-reboot-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#353088][BUG#353355]
  - SUG: NA
  - DESC: 安全模式由off切换到strict出现提示完成后立即重启[BUG#353088]
  -	无权限进行模式切换的用户，切换失败后提示信息不友好[BUG#353355]
  -	  kysec-daemon-fix-off-to-strict-need-immediately-reboot-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-06
changelog:
  - Type: bugfix
  - ID: [BUG#354035][BUG#353489]
  - SUG: NA
  - DESC: [BUG#354035]修复开启安全后 audit服务启动失败问题
  -       [BUG#353489]解决安全中心设置中无法关闭安全问题
  -       [其它]修复onoe模式下ksaf是开启状态, 检查切换模式是否需要重启错误的问题
  -          -- kysec-daemon-fix-none-mode-but-ksaf-on-check-reboot-error.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-07
changelog:
  - Type: bugfix
  - ID: [BUG#369811][BUG#368135]
  - SUG: NA
  - DESC: [BUG#369811]修复softmode和enable互相切换时会修改子模块状态的问题
  -	[BUG#368135]推荐模式下，setstatus生效测试-apparmor-enable，失败
  -         -- kysec-daemon-fix-softmode-and-enable-switch-error.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-08
changelog:
  - Type: bugfix
  - ID: [BUG#372191]
  - SUG: NA
  - DESC: [BUG#372191]修改涉密场景禁止设置安全模式和切换kysec、selinux、apparmor状态
  -	[其它]修复setstatus设置状态时, 如果状态出错, 是正常返回的问题
  -	  -- kysec-daemon-modify-sm-scene-forbidden-set-security-mode.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-09
changelog:
  - Type: bugfix
  - ID: [BUG#375127][BUG#372111]
  - SUG: NA
  - DESC: [BUG#375127]修复频繁操作security-switch --get 模式回变成off
  -	[BUG#372111]解决普通用户可以使用systemctl管理服务问题
  -	  -- kysec-daemon-fix-repeatedly-execute-security-switch-get-error.patch


author: litianhao <litianhao@kylinos.cn> - 2.0.0-10
changelog:
  - Type: bugfix
  - ID: [BUG#376773]
  - SUG: NA
  - DESC: [BUG#376773]修复频繁操作security-switch --get 模式回变成off
  -	  kysec-daemon-do-not-disable-audit.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.0-11
changelog:
  - Type: bugfix
  - ID: [BUG#379175]
  - SUG: NA
  - DESC: 修复切换切换strict或default模式后 grub中存在两个audit参数问题
  -	  kysec-daemon-fix-grub-audit-param-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.0-1.se.04
changelog:
  - Type: update
  - ID:[Task#165225]
  - SUG:NA
  - DESC: 为软件包黑白名单kdk接口添加bwlist类型
  -	  add patch: kysec-module-authorize-add-bwlist-type-for-kdk-interface.patch


author: chengang <chengang@kylinos.cn> - 1.0.0-1.se.06
changelog:
  - Type: update
  - ID: [TASK#375187] 代码覆盖率提升
  - SUG: NA
  - DESC: 代码覆盖率提升
  -      kysec-module-authorize-add-unit-test.patch
  -      kysec-module-authorize-add-coverage-tests.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.0-1.se.07
changelog:
  - Type: update
  - ID: [TASK#395911] fortify问题修复
  - SUG: NA
  - DESC: 修复foritfy问题
  -      kysec-module-authorize-fix-fortify-bug.patch
  -      kysec-module-authorize-fix-add-test-build-error.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.0-1.se.08
changelog:
  - Type: update
  - ID: [TASK#422677]
  - SUG: NA
  - DESC: 合规性整改,增加license声明
  -      kysec-module-authorize-add-license.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.09
changelog:
  - Type: update
  - ID: [TASK#435248]
  - SUG: NA
  - DESC: 代码覆盖率提升
  -      kysec-module-authorize-update-coverage-tests.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.08
changelog:
  - Type: update
  - ID: [任务#165232]
  - DESC: kmod使用kdk接口
  -	  add patch: kysec-sync-daemon-modify-kmod-interface-use-kdk.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.09
changelog:
  - Type: bugfix
  - ID: [BUG#218046]
  - DESC: 修复系统重启后kmod的sm策略不生效
  -	  add patch: kysec-sync-daemon-fix-sm-policy-kmod-inoperative-when-reboot.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.10
changelog:
  - Type: bugfix
  - ID: [BUG#218522]
  - DESC: 修复重启后hub管控不生效的问题
  -     add patch: kysec-sync-daemon-fix-hub-policy-not-work-after-reboot.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.11
changelog:
  - Type: bugfix
  - ID: [TASK#217917]
  - DESC: 修复设备管控usb中的段错误
  -     add patch: kysec-sync-daemon-fix-usb-coredump.patch


author: lengchunying <lengchunying@kylinos.cn> - 1.1.1-01.se.13
changelog:
  - Type: update
  - ID: [TASK#226809] 覆盖率测试
  - SUG: NA
  - DESC: 编写覆盖率测试用例，覆盖率>10%
  - 	add patch: kysec-sync-daemon-test-20240729.patch
  - 		kysec-sync-daemon-test1-20240731.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.14
changelog:
  - Type: update
  - ID: [TASK#391719][TASK#395913] 修复安全热点 修复fortify
  - SUG: NA
  - DESC: 修复安全热点
  - 	add patch: kysec-sync-daemon-fix-security-func.patch
  - 		       kysec-sync-daemon-fix-sonarqube-bugs.patch
  -              kysec-sync-daemon-fix-fortify-security-issues.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.15
changelog:
  - Type: update
  - ID: [TASK#401353]
  - SUG: NA
  - DESC: 提升代码覆盖率
  - 	add patch: kysec-sync-daemon-add-unit-test-20241030.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.16
changelog:
  - Type: update
  - ID: [TASK#422677]
  - SUG: NA
  - DESC: 解决安全热点,增加license
  - 	add patch: kysec-sync-daemon-fix-sonarqube-scan.patch
  -   add path: kysec-sync-daemon-add-license.patch


author: pengxi <pengxi@kylinos.cn> - 1.1.1-01.se.17
changelog:
  - Type: update
  - ID: [TASK#435238]
  - SUG: NA
  - DESC: 提升代码覆盖率
  - 	add patch: kysec-sync-daemon-update-unit-code.patch


author: zhangfan<zhangfan4@kylinos.cn> - 1.0.0-05
changelog:
  - Type:bugfix
  - ID:[BUG#334554]
  - SUG:NA
  - DESC:1.服务器v11-2503机密级计算功能集成
         2.增加自动化测试脚本
         3.增加麒麟license和copyright信息


author: tiandongdong <tiandongdong@kylinos.cn> - 4.0.0-04
changelog:
  - Type: update
  - ID: [BUG#346442]
  - SUG: NA
  - DESC: 修复设置子模块开关时日志输出等级
  -       kysec-utils-fix-switch-sub-module-log.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#347304][BUG#346994][BUG#352195][BUG#347171][BUG#346911]
  - SUG: NA
  - DESC: 应用联网控制-命令行状态实时更新到UI测试（关-开-关）-切换过安全功能的none，命令开启联网控制失败[BUG#347304]
  -	普通用户修改保护箱状态失败kysec_policy命令未提示失败原因[BUG#352195]
  -	kysec_policy错误参数未输出帮助信息[BUG#347171]
  -	应用联网控制，首次安装系统后执行kysec_policy net on，提示先开启kysec[BUG#346994]
  -	未开启kysec，输入错误参数未输出帮助信息[BUG#346911]
  -	  kysec-utils-fix-kysec-policy-command-bug3.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-06
changelog:
  - Type: bugfix
  - ID: [BUG#346897]
  - SUG: NA
  - DESC: 修复BUG#346897 文件保护箱打不开
  -	kysec_policy和kysec_set命令交互提示之前,先检查接口调用权限
  -	旧命令加入废弃提示
  -	_get_func_status()接口查询子模块状态之前,先查询kysec状态, kysec为关,子模块都是关
  -	文件保护允许删除不存在的文件、目录和软件包的只读保护策略和例外策略
  -	忽略链接文件的实际文件不存在时的报错
  -	  kysec-utils-fix-kysec-policy-command-bug4.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-07
changelog:
  - Type: bugfix
  - ID: [BUG#360575]
  - SUG: NA
  - DESC: 修复BUG#360575 添加\删除\查看\清除白名单-对象不存在-kysec_set提示信息未换行
  -       同步桌面修改:
  -       1、修复bug#353590 kysec_policy命令行-A添加策略时,不允许设置-v选项, 增加错误提示
  -       2、修复enable和warning的拼写错误
  -       3、修改checkSecuritySwitchReboot_dbus()接口调用函数名错误的问题
  -       4、新增getBootMode_dbus()查询当前系统模式的接口
  -       5、网络保护查询所有策略不检查软件包和文件是否存在
  -       6、网络保护删除文件策略时, 不检查文件是否存在
  -       7、网络保护删除、添加和更新文件策略时，如果文件有所属软件包，需要处理软件包的策略
  -       8、执行控制添加告警弹窗状态设置
  -       9、执行控制和文件只读保护添加在不可变模式下过滤/usr路径下的文件
  -         -- kysec-utils-fix-kysec-policy-command-bug5.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-08
changelog:
  - Type: bugfix
  - ID: [BUG#361691]
  - SUG: NA
  - DESC: [BUG#361691]解决进程保护和文件只读保护例外程序无法删除的问题
  -       同步桌面补丁:
  -       [其它]文件保护和执行控制添加例外程序时，在不可变模式下过滤/usr目录
  -       [其它]删除status_dbus.h中的config.h头文件引用, 解决其它包引用时编包错误
  -         -- kysec-utils-fix-kysec-policy-command-bug6.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-09
changelog:
  - Type: bugfix
  - ID: [BUG#347672][TASK#471077][BUG#346106][BUG#352444][BUG#346106][BUG#364039][BUG#364125][BUG#363959]
  - SUG: NA
  - DESC: [BUG#347672]根据要求去除错误码
  -       [BUG#347672]根据要求去除错误码
  -       [TASK#471077]修复申请的资源未释放问题
  -       [其它]安全热点问题
  -       [BUG#346106]修复使用kysec_set添加文件策略后, kysec_policy更新对应文件策略失败的问题
  -       [BUG#352444]优化kysec关闭时, 开启单独模块耗时长的问题
  -       [BUG#346106]网络控制修改逻辑, 文件有所属软件包, 添加修改软件包策略
  -       [BUG#364039]文件保护的帮助信息不对
  -       [BUG#364125]文件保护添加目录和软件包none标记提示核心已转储
  -       [BUG#363959]目录添加保护，删除文件保护例外失败
  -       [其它]修改setstatus命令, 切换box时ksaf开启不提示重启
  -       同步桌面补丁:
  -       [其它]修改设备管控光驱的状态显示
  -       [其它]优化执行控制查询白名单速度
  -          -- kysec-utils-fix-kysec-policy-command-bug7.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-10
changelog:
  - Type: bugfix
  - ID: 
  - SUG: NA
  - DESC: [BUG#368141]根据路径删除网络管控策略-kysec_set未生效
  -       [BUG#368141]根据路径删除网络管控策略-kysec_set未生效
  -       [BUG#368127]kysec_get netctl -l 无数据
  -       [BUG#367319]帮助信息-kysec_get输出多余信息
  -       [BUG#367069]更新被篡改的文件，有多余的提示信息
  -       [BUG#366955]off->开启kysec，禁止程序执行的子模块显示名称不对
  -       [BUG#366937]开启获取selinux状态，命令提示处于废弃阶段，删除getstatus和setstatus中废弃提示
  -       [BUG#366379]execban禁止程序执行-strict权限测试，root和auditadm用户不可执行
  -       [BUG#366367]strict模式下关闭selinux，出现交互信息
  -       [BUG#365915]清除标签-递归目录-执行命令未达预期，删除提示信息
  -       [BUG#365873]清除标签-目录，执行命令提示不符预期，删除提示信息
  -       [BUG#364687]kysec_policy包名添加的程序，路径方式删除成功提示失败
  -       [BUG#364667]kysec_set添加的策略，kysec_policy更新失败
  -       [BUG#364125]文件保护添加目录和软件包none标记提示核心已转储
  -       [BUG#364017]删除文件保护后，例外程序未被删除
  -       [其它]修改设备管控错误, 修改cdrom设置权限的方式
  -       [其它]修改scripts/init-bottom/3adm_enable文件,解决三员模式下kysec-daemon修改netctl.xml错误的问题
  -          -- kysec-utils-fix-kysec-policy-command-bug8.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-11
changelog:
  - Type: bugfix
  - ID: [BUG#370259]
  - SUG: NA
  - DESC: [BUG#370259]删除服务器的命令行的禁止执行功能
  -	[BUG#369979]解决黑白名单安装控制-黑白名单同时生效时，rpm安装软件包提示核心已转储的问题
  -       [其它]修复编译优化参数是-O0时，编译错误的问题
  -       [其它]涉密场景下kysec_policy禁止设置kysec状态, setstaus禁止设置kysec、selinux和apparmor状态,
                kysec_set和kysec_get禁止和查询设置fpro、ppro和kmod策略
  -         -- kysec-utils-fix-kysec-policy-command-bug9.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-12
changelog:
  - Type: bugfix
  - ID: [BUG#375705]
  - SUG: NA
  - DESC: [BUG#375705]kysec_policy userid --help root用户不展示帮助手册
  -       同步桌面修改：
  -       [BUG#377631]删除开明包标记后，kaiming命令不可用，软件包忽略软链接文件
  -       [BUG#358329]开明包删除标记后，进行标记查询，出现警告弹窗，软件包忽略软链接文件
  -       [其它]隐私保护除设置开关外，其它操作不检查用户权限检查
  -	  -- kysec-utils-fix-kysec-policy-command-bug10.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-13
changelog:
  - Type: bugfix
  - ID: [BUG#378971][BUG#380475][BUG#380117]
  - SUG: NA
  - DESC:[BUG#378971]下发docker中的脚本，无法移除策略, 修改通过pid获取路径接口
  -      [BUG#380475]kysec_policy -V不显示版本信息, 隐藏-V选项
  -      [BUG#380117]更新不存在的管控策略成功, 修改文件和软件包策略都不存在,不添加软件包策略
  -      [BUG#380347]/usr/etc/文件不应存在,修改spec文件,创建命令注释了
  -      spec文件增加libksaf-label-manager-devel依赖
  -	  -- kysec-utils-fix-kysec-policy-command-bug11.patch


author: zhubing <zhubing@kylinos.cn> - 1.0.1-03
changelog:
  - Type: update
  - ID: [任务#448225]【V11 2503】基于6.6.0-28.0内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-03


author: zhubing <zhubing@kylinos.cn> - 1.0.1-04
changelog:
  - Type: update
  - ID: [任务#452593]【V11 2503】基于6.6.0-29.0内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-04


author: zhubing <zhubing@kylinos.cn> - 1.0.1-05
changelog:
  - Type: update
  - ID: [任务#461244]【V11 2503】基于6.6.0-31.0内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-05


author: zhubing <zhubing@kylinos.cn> - 1.0.1-06
changelog:
  - Type: update
  - ID: [任务#463153]【V11 2503】基于6.6.0-32.0内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-06


author: zhubing <zhubing@kylinos.cn> - 1.0.1-07
changelog:
  - Type: update
  - ID: [任务#465109]【V11 2503】基于6.6.0-32.1内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-07


author: zhubing <zhubing@kylinos.cn> - 1.0.1-08
changelog:
  - Type: update
  - ID: [任务#469313]【V11 2503】基于6.6.0-32.2内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-08


author: zhubing <zhubing@kylinos.cn> - 1.0.1-09
changelog:
  - Type: update
  - ID: [任务#472101]【V11 2503】基于6.6.0-32.3内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-09


author: zhubing <zhubing@kylinos.cn> - 1.0.1-10
changelog:
  - Type: update
  - ID: [任务#482713]【V11 2503】基于6.6.0-32.5内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-10


author: zhubing <zhubing@kylinos.cn> - 1.0.1-11
changelog:
  - Type: update
  - ID: [任务#487747]【v11 2503】ksaf模块加载与内核版本号解绑-kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-11


author: zhubing <zhubing@kylinos.cn> - 1.0.1-12
changelog:
  - Type: update
  - ID: [BUG#382147]【自动测试】【v11-2503】0710daily的x86/arm版本安装选择虚拟化主机安装模块kysec2-devctl-module出现异常导致安装失败
  - SUG: NA
  - DESC: 升级包版本至1.0.1-12


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-08
changelog:
  - Type: update
  - ID: [任务#461243]【V11 2503】基于6.6.0-31.0内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-31.0内核重编模块


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-09
changelog:
  - Type: update
  - ID: [任务#463150]【V11 2503】基于6.6.0-32.0内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-32.0内核重编模块


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-10
changelog:
  - Type: update
  - ID: [BUG#347597]添加内核模块度量策略后，加载模块没有度量日志
  - SUG: NA
  - DESC: 修复没有tpm芯片时系统启动初期没有静态度量日志的bug


author: wangchi <wangchi@kylinos.cn> - 1.0.1-10
changelog:
  - Type: update
  - ID: [任务#465108]【V11 2503】基于6.6.0-32.1内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-32.1内核重编模块


author: wangchi <wangchi@kylinos.cn> - 1.0.1-12
changelog:
  - Type: update
  - ID: [任务#469315]【V11 2503】基于6.6.0-32.2内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-32.2内核重编模块


author: wangchi <wangchi@kylinos.cn> - 1.0.1-13
changelog:
  - Type: update
  - ID: [任务#472093]【V11 2503】基于6.6.0-32.3内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-32.3内核重编模块


author: wangchi <wangchi@kylinos.cn> - 1.0.1-15
changelog:
  - Type: update
  - ID: [任务#482719]【V11 2503】基于6.6.0-32.5内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-32.5内核重编模块


author: wangchi <wangchi@kylinos.cn> - 1.0.1-16
changelog:
  - Type: update
  - ID:
  -   [任务#487751]【v11 2503】ksaf模块加载与内核版本号解绑-kysec2-exectl-module
  -   [任务#485691]【v11 2503】开启安全的性能优化
  -   [需求##360361] 【安全套件】运维模式安装smexampleh后，退出运维模式，进入系统失败
  - SUG: NA
  - DESC: 优化静态度量性能，添加执行控制文件类型以及inode为空时的检查


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.0-02.se.07
changelog:
  - Type: update
  - ID: [BUG#290677]【V11-B14】【访问控制】【白名单访问控制】模块防卸载-执行控制标记为unknown内核模块无法修改标识
  - SUG: NA
  - DESC: 修复无法添加ko.xz文件到白名单


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-05
changelog:
  - Type: update
  - ID: [BUG#347949]【执行控制】将空目录加入白名单列表执行失败
  - SUG: NA
  - DESC: 添加空目录时接口返回0；过滤掉路径前面不存在的 /tmproot


author: xinjiahao <xinjiahao@kylinos.cn> - 1.0.0-2
changelog:
  - Type: update
  - ID: [TASK#386231]
  - SUG: NA
  - DESC: 安装后添加执行管控标记，卸载后删除执行管控标记，调试信息等级都改为DEBUG，对ksaf和执行管控接口调用方式改为dlopen，动态库检查失败不作处理，去除对其他安全组件包的安装依赖


author: xinjiahao <xinjiahao@kylinos.cn> - 1.0.0-7
changelog:
  - Type: bugfix
  - ID: [BUG#313455 TASK#420691 TASK#422689 TASK#423777]
  - SUG: NA
  - DESC: 将文件列表数组静态定义方式改为动态分配，解决有文件未打上标记问题
          【安全编译】安全编译整改 zhoukangyu
          【开源合规】开源合规整改 zhoukangyu
          【单元测试】增加单元测试覆盖率 zhoukangyu


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.0.1-0
changelog:
  - Type: update
  - ID: [TASK#471081 BUG#354750 BUG#338995]
  - SUG: NA
  - DESC: 解决fortify问题
          kysec2-scene-1.0.0-01.se.14.ky11.src.rpm卸载后，yum install指令提示核心已转储
          增加单元测试
          【V11 2409】【SW-B04】软件包安装报“Segmentation fault（核心已转储）”，安装失败


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.0-01.se.01
changelog:
  - Type: update
  - ID: [任务#420435]【ksaf】安全编译选项整改-kysec2-rbac-utils和审计
  - SUG:NA
  - DESC: 优化spec文件
          不能删除最后一条用户配置
          移除rpath


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-02
changelog:
  - Type: update
  - ID: [Bug#352562] 【20250513update内网源测试】【v11-2409】kysec2-rbac-utils卸载失败，提示错误信息
  - SUG: NA
  - DESC:	未开启ksaf不用同步内核策略


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-03
changelog:
  - Type: update
  - ID: [任务#471093] 【安全红线】整改自研组件第一轮Fortify问题-kysec2-rbac-utils
  - SUG: NA
  - DESC: fortify整改
          同步fuzz代码


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-07
changelog:
  - Type: update
  - ID: [TASK#469081]
  - SUG: NA
  - DESC: 修复设置模块状态时 每次都会编译boxctl相关策略问题
  -     kysec2-scene-fix-boxctl-compile-when-set-module-status.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-08
changelog:
  - Type: update
  - ID: [BUG#338131]、[BUG#347699]
  - SUG: NA
  - DESC: 解决SM场景自保护失效问题。
  -     kysec2-scene-fix-self-protect-fail.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-09
changelog:
  - Type: update
  - ID: [BUG#364017]
  - SUG: NA
  - DESC: kysec2-scenen升级策略合并, 新增清除例外策略接口,解决自保护相关问题
  -     kysec2-scene-20250613-add-some-features.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-10
changelog:
  - Type: update
  - ID: [BUG#366133]
  - SUG: NA
  - DESC: chronyc命令在strict模式下 只能root执行
  -     kysec2-scene-20250624-fix-some-bugs.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-11
changelog:
  - Type: update
  - ID: [BUG#370845][BUG#368687]
  - SUG: NA 
  - DESC: 修复安装pure-ftpd后ftp无法连接，获取kysec状态时线程阻塞的问题
  -     kysec2-scene-20250626-fix-some-bugs.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-12
changelog:
  - Type: update
  - ID: [BUG#372333]
  - SUG: NA 
  - DESC: 去除secadm的dac override权能
  -     kysec2-scene-remove-secadm-dac-override-cap.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-13
changelog:
  - Type: update
  - ID: [BUG#377637]
  - SUG: NA 
  - DESC: boxctl增加user protect接口
  -     kysec2-scene-20250708-fix-some-bugs.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-14
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA 
  - DESC: sm-authorize添加的授权进程，在文件防护、进程防护、内核防护中例外放行
  -     kysec2-scene-add-sm-authorize-sync-exception-rules.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-15
changelog:
  - Type: update
  - ID: [BUG#379211]
  - SUG: NA 
  - DESC: 修复通过pid获取容器内进程的路径不正确
  -    kysec2-scene-fix-get-program-path-by-pid-error.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-16
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA 
  - DESC: 修复缺kmodctl.h文件中缺失的对scene_common.h的引用问题
  -    kysec2-scene-fix-missing-header-file.patch


author: zhangfan<zhangfan4@kylinos.cn> - 2.0.14.21
changelog:
  - Type:Bug
  - ID:[Bug#289319]
  - SUG:NA
  - DESC:1.修复篡改.bimabase文件中arrest_mode字段后依旧可以更新基准值的问题
         2.增加执行相关操作后同步更新PCR的流程


author: zhangfan<zhangfan4@kylinos.cn> - 2.0.14.22
changelog:
  - Type:update
  - ID:[TASK#415481] [TASK#361223]
  - SUG:NA
  - DESC:1.安全热点问题修改（PCR部分）
         2.增加PCR相关测试用例
         3.安全编译参数增加strip


author: zhangfan<zhangffan4@kylinos.cn> - 2.0.14.24
changelog:
  - Type:update
  - ID:[TASK#435903]
  - SUG:NA
  - DESC:1.同步桌面v10 2503改动
         2.增加错误码
         3.新增卸载包时清理配置文件功能
         4.支持debug版本包编译
         5.修改copyright信息


author: bianxiuning<bianxiuning@kylinos.cn> - 2.0.14.27
changelog:
  - Type:BUG
  - ID:[Bug#353449]
  - SUG:NA
  - DESC:1.修改kybima.service服务失败问题
         2.增加生成度量报告后触发写trust.log的行为
         3.提升单元测试覆盖率


author: zhangxianjun <zhangxianjun@kylinos.cn> -0.0.64-1.p02
changelog:
  - Type: update
  - ID: [Task#204872]
  - SUG: NA
  - DESC: recover the traditional Chinese installation option


author: chenyanpanHW <chenyanpan@huawei.com> - .0-4
changelog:
  - DESC: delete -Sgit from 
  %setup -a 0      -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-fix-lapack-devel-build-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zouzhimin <zouzhimin@kylinos.cn> - 4.13.0-13
changelog:
  - nfsserver: fix "server scope" functionality for both potentially other dropins AND multiple ExecStart


author: zouzhimin <zouzhimin@kylinos.cn> - 4.15.1-1
changelog:
  - update to 4.15.1
  - IPaddr2: dont fail with "IPv4 does not support lvs_ipv6_addrlabel"
    error, as the parameter is not used in IPv4 scenarioes


author: EibzChan <chenbingzhao@huawei.com> - 608-2
changelog:
  - Type:test enhancement
  - ID:NA
  - SUG:NA
  - DESC:backport patches from upstream to enable make check.
         backport-makecheck-0000-add-lesstest.patch
         backport-makecheck-0001-Work-on-lesstest-remove-rstat-add-LESS_DUMP_CHAR.patch
         backport-makecheck-0002-lesstest-correctly-handle-less-exit-during-run_inter.patch
         backport-makecheck-0003-Some-runtest-tweaks.patch
         backport-makecheck-0004-Rearrange-signal-handling-a-little.patch
         backport-makecheck-0005-Don-t-setup_term-in-test-mode.patch
         backport-makecheck-0006-Compile-fixes.patch
         backport-makecheck-0007-Pass-less-specific-env-variables-to-lesstest-get-rid.patch
         backport-makecheck-0008-Move-terminal-init-deinit-to-run_interactive-since.patch
         backport-makecheck-0009-Fix-bug-in-setting-env-vars-from-lt-file-in-test-mod.patch
         backport-makecheck-0010-Make-runtest-work.patch
         backport-makecheck-0011-lesstest-in-interactive-mode-call-setup_term-before-.patch
         backport-makecheck-0012-lesstest-log-LESS_TERMCAP_-vars-so-termcap-keys-etc.patch
         backport-makecheck-0013-lesstest-accommodate-stupid-termcap-design-where-the.patch
         backport-makecheck-0014-lesstest-maketest-should-not-overwrite-existing-lt-f.patch
         backport-makecheck-0015-lesstest-add-O-option-to-maketest-if-textfile-is-not.patch
         backport-makecheck-0016-lesstest-add-O-option-to-lesstest.patch
         backport-makecheck-0017-lesstest-handle-colored-text-with-less-R.patch
         backport-makecheck-0018-lesstest-add-e-option.patch
         backport-makecheck-0019-lesstest-split-display_screen-into-display_screen_de.patch
         backport-makecheck-0020-Add-E-option.patch
         backport-makecheck-0021-Consistent-style.patch
         backport-makecheck-0022-Obsolete-file.patch
         backport-makecheck-0023-Tuesday-style.patch
         backport-makecheck-0024-Tuesday-style.patch
         backport-makecheck-0025-lesstest-add-support-for-combining-and-composing-cha.patch
         backport-makecheck-0026-Minor-runtest-output-tweaks.patch
         backport-makecheck-0027-lesstest-lt_screen-should-clear-param-stack-after-pr.patch
         backport-makecheck-0028-Handle-fg-and-bg-colors.patch
         backport-makecheck-0029-Have-lt_screen-use-ANSI-sequences-for-bold-underline.patch
         backport-makecheck-0030-ESC-m-should-clear-attributes-as-well-as-colors.patch
         backport-makecheck-0031-lesskey-make-lt_screen-treat-ESC-0m-like-ESC-m.patch
         backport-makecheck-0032-Store-2-char-hex-values-in-log-file-rather-than-bina.patch
         backport-makecheck-0033-lesstest-Make-display_screen_debug-write-to-stderr-n.patch
         backport-makecheck-0034-lesstest-Clear-screen-at-end-of-maketest-in-case-ter.patch
         backport-makecheck-0035-lesstest-Verify-that-the-less-binary-is-built-with-D.patch
         backport-makecheck-0036-Add-check-target-to-Makefile-to-run-lesstest.patch
         backport-makecheck-0037-Don-t-set-LESS_TERMCAP_xx-environment-vars-from-term.patch
         backport-makecheck-0038-lesstest-Remove-unnecessary-exit_all_modes-field-fro.patch
         backport-makecheck-0039-lesstest-Add-some-initial-lt-files.patch
         backport-makecheck-0040-lesstest-Remove-empty-lt-file.patch
         backport-makecheck-0041-lesstest-Add-a-couple-more-lt-files.patch
         backport-makecheck-0042-Make-make-check-work-regardless-of-directory-where-l.patch


