# changelog

author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 4.0.5-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: majianhan <majianhan@kylinos.cn> - 36.16.5-34.p13
changelog:
  - Type:bugfix
  - ID:[BUG#277445]
  - SUG:NA
  - DESC:Remove shortcut when set root password to avoid hotkey conflict


author: majianhan <majianhan@kylinos.cn> - 36.16.5-34.p16
changelog:
  - Type:update
  - ID:[TASK#381853]
  - SUG:NA
  - DESC:backport adjust some requires and config for derived os


author: majianhan <majianhan@kylinos.cn> - 36.16.5-45.p01
changelog:
  - Type:update
  - ID:[TASK#425071]
  - SUG:NA
  - DESC:[kylin]Add tiger-vnc-minimal requires back
         [backport]configure only-append-fanalyzer
         [backport]check-that-the-password-contains-the-username
         [backport]bugfix-set-metacity-with-LIBGL_KOPPER_DISABLE-as-yes


author: yueyuankun <yueyuankun@kylinos.cn> - 36.16.5-45.p02
changelog:
  - Type:update
  - ID:[TASK#433557]
  - SUG:NA
  - DESC: aarch64: add 'smmu.bypassdev=0xffe1:0xd200' in /etc/default/grub


author: shixuantong<shixuantong@huawei.com> - 0.3.6-25
changelog:
  - Type:cves
  - ID:CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839
  - SUG:NA
  - DESC:fix CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839


author: zhangzikang <zhangzikang@kylinos.cn> - 1:3.1.2-7.p01
changelog:
  - Type: update
  - ID: [TASK#424647]
  - SUG: NA
  - DESC: Add audit-kycompat subpackage.
          Supply follow symbols to solve the API/ABI compatibility issue:
            audit_add_dir


author: litianhao <litianhao@kylinos.cn> - 1:3.1.2-7.p01.se.01
changelog:
  - Type: update
  - ID: [TASK#431219] audit合入安全补丁
  - SUG: NA
  - DESC: 合入kysec补丁
          audit-add-kysec.patch
          audit-refactor-dep-kysec.patch


author: litianhao <litianhao@kylinos.cn> - 1:3.1.2-7.p01.se.02
changelog:
  - Type: update
  - ID: [BUG#332988]【V11 2503】【b01】审计管理开启后自动停
  - SUG: NA
  - DESC: 未加载上kysec时不退出服务
          audit-skip-kysec-check-if-not-loaded.patch


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1:3.1.2-7.p01.se.03
changelog:
  - Type: update
  - ID: [TASK#439186] kysec2.0审计日志输出
  - SUG: NA
  - DESC: 适配ksaf日志
          audit-add-support-for-ksaf-log.patch


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1:3.1.2-7.p01.se.04
changelog:
  - Type: update
  - ID: [TASK#474839] 【v11 2503】审计包功能优化
  - SUG: NA
  - DESC: ksaf审计日志变动
          audit-trigger-by-ksaf-audit-log-update.patch


author: mengyuan <mengyuan@kylinos.cn> - 1:3.1.2-7.p01.se.05
changelog:
  - Type: update
  - ID: [BUG#369603]【V11-2503】审计规则配置删除后重启auditd规则依然存在
  - SUG: NA
  - DESC: 更新默认审计规则，与红帽、ubuntu保持一致
          audit.spec


author: litianhao <litianhao@kylinos.cn> - 1:3.1.2-7.p01.se.06
changelog:
  - Type: update
  - ID: [TASK#443733]增加kydima日志类型
  - SUG: NA
  - DESC: 日志事件类型增加kydima类型
          audit-add-kydima-msg-type.patch


author: mengyuan <mengyuan@kylinos.cn> - 1:3.1.2-7.p01.se.07
changelog:
  - Type: update
  - ID: [BUG#381503]【V11 2503】auditadm-审计相关目录权限划分错误
  - SUG: NA
  - DESC: 修复三权状态下生成的audit.rules文件属主异常问题
  	audit-fix-audit-rule-perm-when-3adm.patch


author: pengxi <pengxi@kylinos.cn> - 1:3.1.2-7.p01.se.08
changelog:
  - Type: update
  - ID: [BUG#235394]【mugen】loongarch服务器audit测试集的测试子项oe_test_audit_autrace测试失败
  - SUG: NA
  - DESC: autrace在loongarch64下插入规则失败
  	audit-fix-rule-insert-error-on-loongarch64.patch
          添加loongarch64系统调用表
      audit-add-syscall-table-for-loongarch64.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 0.29.1-2.p02
changelog:
  - Type:bugfix
  - ID:BUG#256609
  - SUG:NA
  - DESC:Fix patch is ineffective for loongarch64 repo noarch packages


author: songliyang <songliyang@kylinos.cn> -0.29.1-2.p04
changelog:
  - Type: update
  - ID:   TASK#393729
  - SUG:  NA
  - DESC: Add clang-libs install dependency
  	Fix some bugs for JDK probes detector in 'extend' dir


author: zhangzikang <zhangzikang@kylinos.cn> - -0.29.1-3.p01
changelog:
  - Type:update
  - ID:[TASK#424647]
  - SUG:NA
  - DESC: Remove clang-libs install dependency
          Fix CVE-2024-2314


author: songliyang <songliyang@kylinos.cn> - -0.29.1-3.p03
changelog:
  - Type: bugfix
  - ID:   [BUG#336580]
  - SUG:  NA
  - DESC: 1.fix thread detect error
          2.optimize output


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.37-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: tangce<tangce1@huawei.com> - 32:9.18.21-5
changelog:
  - Type:CVE
  - CVE:CVE-2025-8677,CVE-2025-40778,CVE-2025-40780
  - SUG:NA
  - DESC:fix CVE-2025-8677,CVE-2025-40778,CVE-2025-40780


author: pengxu <pengxu@kylinos.cn> - 2.41-12.p02
changelog:
  - Type:compile
  - ID:BUG#335025
  - SUG:NA
  - DESC: 1.LoongArch: keep compatible with older gcc.
          2.Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying symbols without version info.
          3.Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes.


author: pengxu <pengxu@kylinos.cn> - 2.41-12.p04
changelog:
  - Type:update
  - ID:TASK#482763
  - SUG:NA
  - DESC: Update support for Zhaoxin GMI instructions and add support for PadLock PHE2, RNG2 and XMODX instructions.


author: pengxu <pengxu@kylinos.cn> - 2.41-12.p05
changelog:
  - Type:cves
  - ID:CVE-2025-7545
  - SUG:NA
  - DESC: Fix CVE-2025-7545: heap-based buffer overflow in objcopy.


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.05
changelog:
  - Type:update
  - ID:[Task# 365725]
  - SUG:NA
  - DESC: unit test
  - 添加补丁:
  - TASK-365725-remove-redundant-class.patch
  - TASK-365725-add-unit-test-libboxmanage.patch
  - TASK-365725-refactor-libboxmanage-unit-test-improve.patch


author: shuzetian <shuzetian@kylinos.cn> - 3.1.3-2.se.06
changelog:
  - Type:update
  - ID:[Bug#302085,300875]
  - SUG:NA
  - DESC: fix bugs
  - 添加补丁:
  - BUG-302085-fix-box-create-error-message-show.patch
  - BUG-300875-fix-pamauthenticDialog-lost-focus.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.07
changelog:
  - Type:update
  - ID:[Task# 421387]
  - SUG:NA
  - DESC: update copyright for all source files
  - 添加补丁:
  - TASK-421387-copyright-for-all-source-file.patch
  - TASK-421387-fix-copyright-and-add-some-comments.patch
  - TASK-421387-add-copyright-qtsingleapp.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.08
changelog:
  - Type:update
  - ID:[Task# 434209]
  - SUG:NA
  - DESC: delete unused widgets,and increase unit-test coverage to 70%; add security and compiliance policy check
  - 添加补丁:
  - TASK-434209-improve-delete-unused-widgets-v11-server-unit-test.patch
  - refactor-safe-and-compiliance-policy-check.patch
  - remove-commons.patch


author: liu_yi <liu_yi@kylinos.cn> - 3.1.3-2.se.09
changelog:
  - Type:update
  - ID:[BUG#249477,304851]
  - SUG:NA
  - DESC: linkage psw verify editor and error tips; update user guide image and doc
  - 添加补丁:
  - BUG-249477-linkage-psw-verify-editor-and-error-tips.patch
  - BUG-304851-update-user-guide-docs.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.10
changelog:
  - Type:update
  - ID:[TASK# 458348]
  - SUG:NA
  - DESC: solve some leak issues from fortify check.
  - 添加补丁:
  - operation-leak-issue-solve.patch


author: shuzetian <shuzetian@kylinos.cn> - 3.1.3-2.se.11
changelog:
  - Type:update
  - ID:[Bug# 363533,352157,352309,352202]
  - SUG:NA
  - DESC: fix bugs
  - 添加补丁:
  - BUG352202-update-icon-color-to-white.patch
  - BUG-352309-optimize-focus.patch
  - BUG-352157-update-ts-file.patch
  - BUG363533-update-save-button-ts.patch
  - BUG352202-update-icon-color-to-system.patch


author: shuzetian <shuzetian@kylinos.cn> - 3.1.3-2.se.12
changelog:
  - Type:update
  - ID:[Bug# 364541]
  - SUG:NA
  - DESC: fix bugs
  - 添加补丁:
  - Patch40:fix-tmp-acl.patch
  - Patch41:BUG-364541-fix-box-sort-tableview.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.14
changelog:
  - Type:update
  - ID:[TASK# 553761][BUG# 351907]
  - SUG:NA
  - DESC: box-manager safer compile params
  - 添加补丁:
  - BUG351907-add-update-display-sync-with-boxadm.patch
  - TASK-553761-remove-fstack-protector-all.patch
  - TASK-553761-remove-fstack-protector-all_fix1.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.03
changelog:
  - Type:update
  - ID:[Task#332808]
  - SUG:NA
  - DESC:
  - 添加单元测试用例
  - 添加补丁	TASK-332808-add-cunit-test.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.04
changelog:
  - Type:update：
  - ID:[Task#332808]
  - SUG:NA
  - DESC:
  - 修改makefile.am使覆盖率达标
  - 添加补丁	update-makefile.patch


author: liu_yi <liu_yi@kylinos.cn> - 4.0.3-2.se.05
changelog:
  - Type:update
  - ID:[Task#361227][Task#366325][Task#367585]
  - SUG:NA
  - DESC:	添加安全编译参数
  		安全函数整改
  		修复sonarcube扫描漏洞
  		ksaf2.0保护箱接口兼容适配
  - 添加补丁:
  - TASK-361227-add-security-compile-parameters.patch
  - TASK-366325-use-security-funcs-and-fix-sonarcube-bugs.patch
  - TASK-367585-adapt-to-ksaf-kbox-framework-funcs.patch
  - KYLIN-supplement-file-header-comment.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.06
changelog:
  - Type:update
  - ID:[Task#360917 Bug#291793,290515,296749,290423]
  - SUG:NA
  - DESC:
  - 添加代码使覆盖率提升
  - fix bugs
  - 添加补丁	
  - TASK-360917-add_cunit.patch
  - BUG-291793-update-changepw.patch
  - BUG-290515-can-not-open-encrypted-box.patch
  - BUG-296749-add-printf-help-info.patch
  - BUG-290423-add-new-box-module-judge.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.07
changelog:
  - Type:update
  - ID:[Bug#290515]
  - SUG:NA
  - DESC:
  - fix bugs
  - 添加补丁	
  - BUG-290515-refix-retval-judge.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.08
changelog:
  - Type:update
  - ID:[Task#421385][Task#386411]
  - SUG:NA
  - DESC:
  - 门禁合规修改
  - 添加补丁	
  - TASK-421385-update-copyright.patch 
  - TASK-386411-fix-fortify.patch
  - update-copyright-year.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.09
changelog:
  - Type:update
  - ID:[Bug#327994][Bug#327997]
  - SUG:NA
  - DESC:
  - fix bugs
  - 添加补丁	
  - BUG-327994-327997-fix-fuzz-crashes.patch 
  - BUG-327994-327997-fix-fuzz-crashes1.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.10
changelog:
  - Type:update
  - ID:[Bug#352437][Bug#352432][Bug#351901][Task#434210]
  - SUG:NA
  - DESC:
  - fix bugs
  - 添加补丁	
  - Patch25:TASK-434210-update-sonarqube-coverage-70%.patch
  - Patch26:fuzz.patch
  - Patch27:BUG-352437-underscore-should-not-be-special-character.patch
  - Patch28:BUG-352432-password-cannot-exceed-32-digitals.patch
  - Patch29:BUG-351901-update-boxadm-v.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.11
changelog:
  - Type:update
  - ID:[Bug#364339]
  - SUG:NA
  - DESC:
  - fix bugs
  - 添加补丁
  - Patch30:fix-tmp-acl.patch
  - Patch31:BUG-364339-update-boxadm-l-info.patch


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.1.v2505
changelog:
  - LOONGSON: drivers/iommu: add iommu support (Xianglai Li) [bug:348286]
  - LOONGSON: driver/vfio: disable vfio pci intx (Xianglai Li) [bug:348286]
  - LOONGSON: loongarch/configs: enable vfio mdev config (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Fix PMU pass-through issue if VM exits to host finally (Bibo Mao) [bug:348286]
  - LOONGSON: drivers/pci: Enable pci bridge acs capability (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Repair the restart pressure test virtual machine hang dead problem (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add interrupt checking with Loongson AVEC (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Reload guest CSR registers after S4 (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: add virt extioi cpu encode support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Fixed VM migration failure after ptw was enabled (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add reset function for irqchip (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: arch/loongarch/kvm: Fix extioi restart issue (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: enable ptw for kvm (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add irqfd support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add PCHPIC user mode read and write functions (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add PCHPIC read and write functions (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add PCHPIC device support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add EXTIOI user mode read and write functions (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add EXTIOI read and write functions (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add EXTIOI device support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add IPI user mode read and write function (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add IPI read and write function (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add IPI device support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add iocsr and mmio bus simulation in kernel (Xianglai Li) [bug:348286]
  - Revert "LoongArch: KVM: Add iocsr and mmio bus simulation in kernel" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add IPI device support" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add IPI read and write function" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add IPI user mode read and write function" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add EIOINTC device support" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add EIOINTC read and write functions" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add EIOINTC user mode read and write functions" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add PCHPIC device support" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add PCHPIC read and write functions" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add PCHPIC user mode read and write functions" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add irqfd support" (cuitao) [bug:348286]
  - LOONGSON: irqchip/loongson-eiointc: Add virt extension support (Bibo Mao) [bug:348286]
  - HYGON: tpm: Fixed the bug that tcm driver cannot be initialized normally (chench246) [task:462020]
  - HYGON: crypto: ccp: Support userspace mmap psp mmio (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: Support vpsp ringbuffer overcommit (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: Use a workqueue to clean up the vpsp ringbuffer (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: move vpsp-related functions to vpsp.c (xiongmengbiao) [bug:346243]
  - HYGON: drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn (niuyongwen) [bug:346243]
  - HYGON: drivers/crypto/ccp: memmove is used instead of memcpy in overlapped memmory for tkm (niuyongwen) [bug:346243]
  - HYGON: drivers/crypto/ccp: add ioctl API to pin TKM hugepage (xiongmengbiao) [bug:346243]
  - HYGON: driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: support TKM run on CSV (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: remove multi-level pointers processing for vpsp (xiongmengbiao) [bug:346243]
  - configs: Rename inspur-drm to yhgch-drm (Shixiong Ou) [bug:344261, bug:350729, bug:344066]
  - INSPUR: 3rd/inspur: Rename inspur-drm to yhgch-drm (Shixiong Ou) [bug:344261, bug:350729, bug:344066]
  - inet6: constify 'struct net' parameter of various lookup helpers (Eric Dumazet) [task:441338]
  - inet: constify 'struct net' parameter of various lookup helpers (Eric Dumazet) [task:441338]
  - inet: constify inet_sk_bound_dev_eq() net parameter (Eric Dumazet) [task:441338]
  - mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (Yosry Ahmed) [task:459564] {CVE-2025-22030}
  - sw64/config: rename generic_defconfig to openkylin_generic_defconfig (Jackie Liu)
  - filelock: fix name of file_lease slab cache (Omar Sandoval) [task:444220]
  - nfsd: nfsd_file_lease_notifier_call gets a file_lease as an argument (Jeff Layton) [task:444220]
  - filelock: fix deadlock detection in POSIX locking (Jeff Layton) [task:444220]
  - slab: Fix too strict alignment check in create_cache() (Geert Uytterhoeven) [task:444220]
  - io_uring: specify freeptr usage for SLAB_TYPESAFE_BY_RCU io_kiocb cache (Jens Axboe) [task:444220]
  - io_uring: port to struct kmem_cache_args (Christian Brauner) [task:444220]
  - filelock: always define for_each_file_lock() (Jeff Layton) [task:444220]
  - fs: port files to file_ref (Christian Brauner) [task:444220]
  - file: massage cleanup of files that failed to open (Al Viro) [task:444220]
  - fs: add file_ref (Christian Brauner) [task:444220]
  - fs: protect backing files with rcu (Christian Brauner) [task:444220]
  - eth: bnxt: fix truesize for mb-xdp-pass case (Taehee Yoo) [task:450243] {CVE-2025-21961}
  - drm/vmwgfx: Disable coherent dumb buffers without 3d (Zack Rusin) [task:461067] {CVE-2024-46712}
  - drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle (Chen Ridong) [task:461324] {CVE-2024-53115}
  - cpuidle, sched: Use smp_mb__after_atomic() in current_clr_polling() (Yujun Dong) [task:390083]
  - sched: idle: Optimize the generic idle loop by removing needless memory barrier (Zhongqiu Han) [task:390083]
  - sched/psi: Optimise psi_group_change a bit (Tvrtko Ursulin) [task:390083]
  - percpu_counter: add a cmpxchg-based _add_batch variant (Mateusz Guzik) [task:390083]
  - SUNWAY: receive new boot params from firmware (Jing Li) [task:382309]
  - SUNWAY: setup stackframe at kernel entry point (Mao Minkai) [task:382309]
  - SUNWAY: save and restore CSR_WR_FREGS for SIMD libs (Mao Minkai) [task:382309]
  - SUNWAY: rename copy and set lib functions (Mao Minkai) [task:382309]
  - SUNWAY: rename copy and set lib files (Mao Minkai) [task:382309]
  - SUNWAY: choose lib at compile time (Mao Minkai) [task:382309]
  - SUNWAY: store topology and numa info by each cpu itself (Mao Minkai) [task:382309]
  - SUNWAY: work around suspend for C4 (Tang Jinyang) [task:382309]
  - SUNWAY: employ trick on regs.pc for specific exception (Zhi Tongze) [task:382309]
  - SUNWAY: fix syscall_fallback() for vdso gettimeofday (Mao Minkai) [task:382309]
  - perf/dwc_pcie: fix duplicate pci_dev devices (Yunhui Cui) [task:460280] {CVE-2025-37746}
  - perf/dwc_pcie: Qualify RAS DES VSEC Capability by Vendor, Revision (Bjorn Helgaas) [task:460280]
  - perf/dwc_pcie: Add support for Ampere SoCs (Ilkka Koskinen) [task:460280]
  - perf/dwc_pcie: Add support for QCOM vendor devices (Krishna chaitanya chundru) [task:460280]
  - perf/dwc_pcie: Always register for PCIe bus notifier (Krishna chaitanya chundru) [task:460280]
  - perf/dwc_pcie: Fix registration issue in multi PCIe controller instances (Krishna chaitanya chundru) [task:460280]
  - drivers/perf: add DesignWare PCIe PMU driver (Shuai Xue) [task:460280]
  - objtool: Silence more KCOV warnings, part 2 (Josh Poimboeuf) [task:460826]
  - objtool: Ignore end-of-section jumps for KCOV/GCOV (Josh Poimboeuf) [task:460826]
  - nvme: fixup scan failure for non-ANA multipath controllers (Hannes Reinecke) [task:460826]
  - MIPS: cm: Fix warning if MIPS_CM is disabled (Thomas Bogendoerfer) [task:460826]
  - net: dsa: mv88e6xxx: enable STU methods for 6320 family (Marek Behún) [task:460826]
  - net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family (Marek Behún) [task:460826]
  - net: dsa: mv88e6xxx: enable PVT for 6321 switch (Marek Behún) [task:460826]
  - net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family (Marek Behún) [task:460826]
  - comedi: jr3_pci: Fix synchronous deletion of timer (Ian Abbott) [task:460826]
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (Daniel Borkmann) [task:460826]
  - driver core: fix potential NULL pointer dereference in dev_uevent() (Dmitry Torokhov) [task:460826]
  - driver core: introduce device_set_driver() helper (Dmitry Torokhov) [task:460826]
  - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Dmitry Torokhov) [task:460826]
  - spi: spi-imx: Add check for spi_imx_setupxfer() (Tamura Dai) [task:460826]
  - md/raid1: Add check for missing source disk in process_checks() (Meir Elisha) [task:460826]
  - x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores (Pi Xiange) [task:460826]
  - ubsan: Fix panic from test_ubsan_out_of_bounds (Mostafa Saleh) [task:460826]
  - spi: tegra210-quad: add rate limiting and simplify timeout error message (Breno Leitao) [task:460826]
  - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Breno Leitao) [task:460826]
  - loop: aio inherit the ioprio of original request (Yunlong Xing) [task:460826]
  - riscv: Provide all alternative macros all the time (Andrew Jones) [task:460826]
  - iomap: skip unnecessary ifs_block_is_uptodate check (Gou Hao) [task:460826]
  - x86/i8253: Call clockevent_i8253_disable() with interrupts disabled (Fernando Fernandez Mancera) [task:460826]
  - scsi: pm80xx: Set phy_attached to zero when device is gone (Igor Pylypiv) [task:460826]
  - scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init() (Peter Griffin) [task:460826]
  - scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes (Xingui Yang) [task:460826]
  - ext4: make block validity check resistent to sb bh corruption (Ojaswin Mujoo) [task:460826]
  - cifs: Fix querying of WSL CHR and BLK reparse points over SMB1 (Pali Rohár) [task:460826]
  - timekeeping: Add a lockdep override in tick_freeze() (Sebastian Andrzej Siewior) [task:460826]
  - cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode (Pali Rohár) [task:460826]
  - nvmet-fc: put ref when assoc->del_work is already scheduled (Daniel Wagner) [task:460826]
  - nvmet-fc: take tgtport reference only once (Daniel Wagner) [task:460826]
  - x86/bugs: Don't fill RSB on context switch with eIBRS (Josh Poimboeuf) [task:460826]
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Josh Poimboeuf) [task:460826]
  - x86/bugs: Use SBPB in write_ibpb() if applicable (Josh Poimboeuf) [task:460826]
  - gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment (Andy Shevchenko) [task:460826]
  - objtool: Stop UNRET validation on UD2 (Josh Poimboeuf) [task:460826]
  - nvme: multipath: fix return value of nvme_available_path (Uday Shankar) [task:460826]
  - nvme: re-read ANA log page after ns scan completes (Hannes Reinecke) [task:460826]
  - ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls (Jean-Marc Eurin) [task:460826]
  - ACPI: EC: Set ec_no_wakeup for Lenovo Go S (Mario Limonciello) [task:460826]
  - nvme: requeue namespace scan on missed AENs (Hannes Reinecke) [task:460826]
  - xen: Change xen-acpi-processor dom0 dependency (Jason Andryuk) [task:460826]
  - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init (Gabriel Shahrouzi) [task:460826]
  - selftests: ublk: fix test_stripe_04 (Ming Lei) [task:460826]
  - KVM: s390: Don't use %pK through debug printing (Thomas Weißschuh) [task:460826]
  - KVM: s390: Don't use %pK through tracepoints (Thomas Weißschuh) [task:460826]
  - sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP (Oleg Nesterov) [task:460826]
  - io_uring: always do atomic put from iowq (Pavel Begunkov) [task:460826]
  - rtc: pcf85063: do a SW reset if POR failed (Lukas Stockmann) [task:460826]
  - 9p/net: fix improper handling of bogus negative read/write replies (Dominique Martinet) [task:460826]
  - ntb_hw_amd: Add NTB PCI ID for new gen CPU (Basavaraj Natikar) [task:460826]
  - ntb: reduce stack usage in idt_scan_mws (Arnd Bergmann) [task:460826]
  - qibfs: fix _another_ leak (Al Viro) [task:460826]
  - objtool, lkdtm: Obfuscate the do_nothing() pointer (Josh Poimboeuf) [task:460826]
  - objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc() (Josh Poimboeuf) [task:460826]
  - objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler() (Josh Poimboeuf) [task:460826]
  - objtool, panic: Disable SMAP in __stack_chk_fail() (Josh Poimboeuf) [task:460826]
  - objtool: Silence more KCOV warnings (Josh Poimboeuf) [task:460826]
  - thunderbolt: Scan retimers after device router has been enumerated (Mika Westerberg) [task:460826]
  - usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func (Théo Lebrun) [task:460826]
  - usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() (Chenyuan Yang) [task:460826]
  - usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running (Michal Pecio) [task:460826]
  - dmaengine: dmatest: Fix dmatest waiting less when interrupted (Vinicius Costa Gomes) [task:460826]
  - sound/virtio: Fix cancel_sync warnings on uninitialized work_structs (John Stultz) [task:460826]
  - usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield (Andy Shevchenko) [task:460826]
  - usb: dwc3: gadget: Refactor loop to avoid NULL endpoints (Andy Shevchenko) [task:460826]
  - fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size (Edward Adam Davis) [task:460826]
  - usb: host: max3421-hcd: Add missing spi_device_id table (Alexander Stein) [task:460826]
  - mailbox: pcc: Always clear the platform ack interrupt first (Sudeep Holla) [task:460826]
  - mailbox: pcc: Fix the possible race in updation of chan_in_use flag (Huisong Li) [task:460826]
  - bpf: Reject attaching fexit/fmod_ret to __noreturn functions (Yafang Shao) [task:460826]
  - bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage (Martin KaFai Lau) [task:460826]
  - bpf: bpftool: Setting error code in do_loader() (Sewon Nam) [task:460826]
  - s390/tty: Fix a potential memory leak bug (Haoxiang Li) [task:460826]
  - s390/sclp: Add check for get_zeroed_page() (Haoxiang Li) [task:460826]
  - parisc: PDT: Fix missing prototype warning (Yu-Chun Lin) [task:460826]
  - clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec() (Heiko Stuebner) [task:460826]
  - bpf: Fix deadlock between rcu_tasks_trace and event_mutex. (Alexei Starovoitov) [task:460826]
  - crypto: null - Use spin lock instead of mutex (Herbert Xu) [task:460826]
  - crypto: ccp - Add support for PCI device 0x1134 (Devaraj Rangasamy) [task:460826]
  - MIPS: cm: Detect CM quirks from device tree (Gregory CLEMENT) [task:460826]
  - pinctrl: renesas: rza2: Fix potential NULL pointer dereference (Chenyuan Yang) [task:460826]
  - USB: wdm: add annotation (Oliver Neukum) [task:460826]
  - USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context (Oliver Neukum) [task:460826]
  - USB: wdm: close race between wdm_open and wdm_wwan_port_stop (Oliver Neukum) [task:460826]
  - USB: wdm: handle IO errors in wdm_wwan_port_start (Oliver Neukum) [task:460826]
  - USB: VLI disk crashes if LPM is used (Oliver Neukum) [task:460826]
  - usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive (Miao Li) [task:460826]
  - usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive (Miao Li) [task:460826]
  - usb: dwc3: xilinx: Prevent spike in reset signal (Mike Looijmans) [task:460826]
  - usb: dwc3: gadget: check that event count does not exceed event buffer length (Frode Isaksen) [task:460826]
  - USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02) (Huacai Chen) [task:460826]
  - usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling (Fedor Pchelkin) [task:460826]
  - usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines (Fedor Pchelkin) [task:460826]
  - usb: chipidea: ci_hdrc_imx: fix usbmisc handling (Fedor Pchelkin) [task:460826]
  - usb: cdns3: Fix deadlock when using NCM gadget (Ralph Siemsen) [task:460826]
  - usb: xhci: Fix invalid pointer dereference in Etron workaround (Michal Pecio) [task:460826]
  - USB: serial: simple: add OWON HDS200 series oscilloscope support (Craig Hesling) [task:460826]
  - USB: serial: option: add Sierra Wireless EM9291 (Adam Xue) [task:460826]
  - USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe (Michael Ehrenreich) [task:460826]
  - serial: sifive: lock port in startup()/shutdown() callbacks (Ryo Takakura) [task:460826]
  - serial: msm: Configure correct working mode before starting earlycon (Stephan Gerhold) [task:460826]
  - misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack (Rengarajan S) [task:460826]
  - misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration (Rengarajan S) [task:460826]
  - char: misc: register chrdev region with all possible minors (Thadeu Lima de Souza Cascardo) [task:460826]
  - KVM: x86: Reset IRTE to host control if *new* route isn't postable (Sean Christopherson) [task:460826]
  - KVM: x86: Explicitly treat routing entry type changes as changes (Sean Christopherson) [task:460826]
  - mei: me: add panther lake H DID (Alexander Usyskin) [task:460826]
  - scsi: Improve CDL control (Damien Le Moal) [task:460826]
  - USB: storage: quirk for ADATA Portable HDD CH94 (Oliver Neukum) [task:460826]
  - ata: libata-scsi: Fix ata_msense_control_ata_feature() (Damien Le Moal) [task:460826]
  - ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type (Damien Le Moal) [task:460826]
  - ata: libata-scsi: Improve CDL control (Damien Le Moal) [task:460826]
  - mcb: fix a double free bug in chameleon_parse_gdd() (Haoxiang Li) [task:460826]
  - cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports (Smita Koralahalli) [task:460826]
  - KVM: SVM: Allocate IR data using atomic allocation (Sean Christopherson) [task:460826]
  - io_uring: fix 'sync' handling of io_fallback_tw() (Jens Axboe) [task:460826]
  - LoongArch: Remove a bogus reference to ZONE_DMA (Petr Tesarik) [task:460826]
  - LoongArch: Return NULL from huge_pte_offset() for invalid PMD (Ming Wang) [task:460826]
  - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (Suzuki K Poulose) [task:460826]
  - drm/amd/display: Force full update in gpu reset (Roman Li) [task:460826]
  - drm/amd/display: Fix gpu reset in multidisplay config (Roman Li) [task:460826]
  - net: phy: microchip: force IRQ polling mode for lan88xx (Fiona Klute) [task:460826]
  - net: selftests: initialize TCP header and skb payload with zero (Oleksij Rempel) [task:460826]
  - xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() (Alexey Nepomnyashih) [task:460826]
  - crypto: atmel-sha204a - Set hwrng quality to lowest possible (Marek Behún) [task:460826]
  - virtio_console: fix missing byte order handling for cols and rows (Halil Pasic) [task:460826]
  - LoongArch: Make do_xyz() exception handlers more robust (Tiezhu Yang) [task:460826]
  - LoongArch: Make regs_irqs_disabled() more clear (Tiezhu Yang) [task:460826]
  - LoongArch: Select ARCH_USE_MEMTEST (Yuli Wang) [task:460826]
  - perf/x86: Fix non-sampling (counting) events on certain x86 platforms (Luo Gengkun) [task:460826]
  - splice: remove duplicate noinline from pipe_clear_nowait (T.J. Mercier) [task:460826]
  - iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE (Sean Christopherson) [task:460826]
  - pds_core: make wait_context part of q_info (Shannon Nelson) [task:460826]
  - pds_core: Remove unnecessary check in pds_client_adminq_cmd() (Brett Creeley) [task:460826]
  - pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result (Brett Creeley) [task:460826]
  - net: dsa: mt7530: sync driver-specific behavior of MT7531 variants (Daniel Golle) [task:460826]
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (Cong Wang) [task:460826]
  - net_sched: hfsc: Fix a UAF vulnerability in class handling (Cong Wang) [task:460826]
  - fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount() (Al Viro) [task:460826]
  - net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration (Bo-Cun Chen) [task:460826]
  - tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (Tung Nguyen) [task:460826]
  - net: phy: leds: fix memory leak (Qingfang Deng) [task:460826]
  - net: lwtunnel: disable BHs when required (Justin Iurman) [task:460826]
  - scsi: core: Clear flags for scsi_cmnd that did not complete (Anastasia Kovaleva) [task:460826]
  - btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range() (Qu Wenruo) [task:460826]
  - cpufreq: cppc: Fix invalid return value in .get() callback (Marc Zyngier) [task:460826]
  - scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort() (Chenyuan Yang) [task:460826]
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Henry Martin) [task:460826]
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (Henry Martin) [task:460826]
  - cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() (Henry Martin) [task:460826]
  - dma/contiguous: avoid warning about unused size_bytes (Arnd Bergmann) [task:460826]
  - ceph: Fix incorrect flush end position calculation (David Howells) [task:460826]
  - cpufreq/sched: Explicitly synchronize limits_changed flag handling (Rafael J. Wysocki) [task:460826]
  - scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get (Tudor Ambarus) [task:460826]
  - PCI: Fix reference leak in pci_register_host_bridge() (Ma Ke) [task:460826]
  - of: resolver: Fix device node refcount leakage in of_resolve_phandles() (Zijun Hu) [task:460826]
  - of: resolver: Simplify of_resolve_phandles() using __free() (Rob Herring (Arm)) [task:460826]
  - clk: renesas: r9a07g043: Fix HP clock source for RZ/Five (Lad Prabhakar) [task:460826]
  - clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable (Claudiu Beznea) [task:460826]
  - clk: renesas: r9a07g04[34]: Use SEL_SDHI1_STS status configuration for SD1 mux (Claudiu Beznea) [task:460826]
  - clk: renesas: rzg2l: Refactor SD mux driver (Claudiu Beznea) [task:460826]
  - clk: renesas: rzg2l: Remove CPG_SDHI_DSEL from generic header (Claudiu Beznea) [task:460826]
  - clk: renesas: rzg2l: Add struct clk_hw_data (Claudiu Beznea) [task:460826]
  - clk: renesas: rzg2l: Use u32 for flag and mux_flags (Claudiu Beznea) [task:460826]
  - arm64: tegra: Remove the Orin NX/Nano suspend key (Ninad Malwade) [task:460826]
  - iio: adc: ad7768-1: Fix conversion result sign (Sergiu Cuciurean) [task:460826]
  - iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check (Jonathan Cameron) [task:460826]
  - ASoC: q6apm-dai: make use of q6apm_get_hw_pointer (Srinivas Kandagatla) [task:460826]
  - ASoC: qcom: Fix trivial code style issues (Krzysztof Kozlowski) [task:460826]
  - ASoC: qcom: lpass: Make asoc_qcom_lpass_cpu_platform_remove() return void (Uwe Kleine-König) [task:460826]
  - ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs (Srinivas Kandagatla) [task:460826]
  - ASoC: qcom: q6apm-dai: drop unused 'q6apm_dai_rtd' fields (Krzysztof Kozlowski) [task:460826]
  - net: dsa: mv88e6xxx: fix VTU methods for 6320 family (Marek Behún) [task:460826]
  - net: dsa: mv88e6xxx: fix internal PHYs for 6320 family (Marek Behún) [task:460826]
  - auxdisplay: hd44780: Fix an API misuse in hd44780.c (Haoxiang Li) [task:460826]
  - auxdisplay: hd44780: Convert to platform remove callback returning void (Uwe Kleine-König) [task:460826]
  - mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get (Tudor Ambarus) [task:460826]
  - soc: qcom: ice: introduce devm_of_qcom_ice_get (Tudor Ambarus) [task:460826]
  - media: subdev: Add v4l2_subdev_is_streaming() (Tomi Valkeinen) [task:460826]
  - media: subdev: Improve v4l2_subdev_enable/disable_streams_fallback (Tomi Valkeinen) [task:460826]
  - media: subdev: Fix use of sd->enabled_streams in call_s_stream() (Tomi Valkeinen) [task:460826]
  - tracing: Verify event formats that have "%*p.." (Steven Rostedt) [task:460826]
  - tracing: Add __print_dynamic_array() helper (Steven Rostedt) [task:460826]
  - tracing: Add __string_len() example (Steven Rostedt (Google)) [task:460826]
  - x86/mce: use is_copy_from_user() to determine copy-from-user context (Shuai Xue) [task:460826]
  - x86/extable: Remove unused fixup type EX_TYPE_COPY (Tong Tiangen) [task:460826]
  - module: sign with sha512 instead of sha1 by default (Thorsten Leemhuis) [task:460826]
  - bonding: check xdp prog when set bond mode (Wang Liang) [task:458962] {CVE-2025-22105}
  - bonding: return detailed error when loading native XDP fails (Hangbin Liu) [task:458962]
  - udmabuf: fix a buf size overflow issue during udmabuf creation (Xiaogang Chen) [task:460826]
  - ksmbd: fix use-after-free in __smb2_lease_break_noti() (Namjae Jeon) [task:460142] {CVE-2025-37777}
  - drm/virtio: Use drm_gem_plane_helper_prepare_fb() (Dongwon Kim) [task:455029]
  - drm/virtio: Don't create a context with default param if context_init is supported (Pierre-Eric Pelloux-Prayer) [task:455029]
  - drm/vmwgfx: Unreserve BO on error (Ian Forbes) [task:455027]
  - slab: ensure slab->obj_exts is clear in a newly allocated slab page (Suren Baghdasaryan) [task:460162] {CVE-2025-37774}
  - mm, slab: move prepare_slab_obj_exts_hook under CONFIG_MEM_ALLOC_PROFILING (Suren Baghdasaryan) [task:460162]
  - mm, slab: move allocation tagging code in the alloc path into a hook (Suren Baghdasaryan) [task:460162]
  - mm, slab: move slab_memcg hooks to mm/memcontrol.c (Vlastimil Babka) [task:460162]
  - mm, slab: move memcg charging to post-alloc hook (Vlastimil Babka) [task:460162]
  - slab: make __kmem_cache_create() static inline (Christian Brauner) [task:444220]
  - slab: make kmem_cache_create_usercopy() static inline (Christian Brauner) [task:444220]
  - slab: remove kmem_cache_create_rcu() (Christian Brauner) [task:444220]
  - file: port to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: create kmem_cache_create() compatibility layer (Christian Brauner) [task:444220]
  - slab: port KMEM_CACHE_USERCOPY() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: port KMEM_CACHE() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: remove rcu_freeptr_offset from struct kmem_cache (Christian Brauner) [task:444220]
  - slab: pass struct kmem_cache_args to do_kmem_cache_create() (Christian Brauner) [task:444220]
  - slab: pull kmem_cache_open() into do_kmem_cache_create() (Christian Brauner) [task:444220]
  - slab: pass struct kmem_cache_args to create_cache() (Christian Brauner) [task:444220]
  - slab: port kmem_cache_create_usercopy() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: port kmem_cache_create_rcu() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: port kmem_cache_create() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: add struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: s/__kmem_cache_create/do_kmem_cache_create/g (Christian Brauner) [task:444220]
  - SUNWAY: dts: add Junzhang (Xu Chenjiao) [task:382309]
  - SUNWAY: lpc: work around hardware flaws (Xu Chenjiao) [task:382309]
  - SUNWAY: improve cpu bring up method (Zhi Tongze) [task:382309]
  - SUNWAY: introduce new entry framework for C4 (Wu Liliu) [task:382309]
  - SUNWAY: irq: update the initial value of nr_irqs (Zheng Chongzhen) [task:382309]
  - SUNWAY: dynamically switch between lib implementation (Mao Minkai) [task:382309]
  - SUNWAY: msi: remove redundant interrupt enables (Zheng Chongzhen) [task:382309]
  - SUNWAY: add unaligned access support for C4 new instructions (Zhi Tongze) [task:382309]
  - SUNWAY: acpi: fix missed upper bits of rcid for junzhang (Jing Li) [task:382309]
  - SUNWAY: pci: remove duplicate pcie operations (Jing Li) [task:382309]
  - udp: Deal with race between UDP socket address change and rehash (Stefano Brivio) [task:441338] {CVE-2024-57974}
  - ipv6: udp: constify 'struct net' parameter of socket lookups (Eric Dumazet) [task:441338]
  - udp: constify 'struct net' parameter of socket lookups (Eric Dumazet) [task:441338]
  - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode (Kang Yang) [task:459656] {CVE-2024-58096}
  - ax25: Remove broken autobind (Murad Masimov) [task:459548] {CVE-2025-22109}
  - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() (Vladimir Oltean) [task:459708] {CVE-2025-22107}
  - iommu/vt-d: Remove cache tags before disabling ATS (Lu Baolu) [task:459625] {CVE-2024-56669}
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails (Edward Adam Davis) [task:459661] {CVE-2025-22119}
  - ext4: avoid journaling sb update on error if journal is destroying (Ojaswin Mujoo) [task:459702] {CVE-2025-22113}
  - ext4: define ext4_journal_destroy wrapper (Ojaswin Mujoo) [task:459702]
  - Bluetooth: btnxpuart: Fix kernel panic during FW release (Neeraj Sanjay Kale) [task:459942] {CVE-2025-22102}
  - jfs: add check read-only before txBeginAnon() call (Vasiliy Kovalev) [task:459938] {CVE-2024-58095}
  - vmxnet3: unregister xdp rxq info in the reset path (Sankararaman Jayaraman) [task:459703] {CVE-2025-22106}
  - bcachefs: bch2_ioctl_subvolume_destroy() fixes (Kent Overstreet) [task:459940] {CVE-2025-22019}
  - md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb (Su Yue) [task:459657] {CVE-2025-22124}
  - media: vimc: skip .s_stream() for stopped entities (Nikita Zhandarovich) [task:459568] {CVE-2025-22028}
  - jfs: reject on-disk inodes of an unsupported type (Dmitry Antipov) [task:459660] {CVE-2025-37925}
  - net: libwx: fix Tx L4 checksum (Jiawen Wu) [task:459624] {CVE-2025-22101}
  - f2fs: fix potential deadloop in prepare_compress_overwrite() (Chao Yu) [task:459706] {CVE-2025-22127}
  - md/raid10: wait barrier before returning discard request with REQ_NOWAIT (Xiao Ni) [task:459410] {CVE-2025-40325}
  - ksmbd: fix overflow in dacloffset bounds check (Norbert Szetei) [task:459562] {CVE-2025-22039}
  - smb: common: change the data type of num_aces to le16 (Namjae Jeon) [task:459562]
  - wifi: ath11k: fix RCU stall while reaping monitor destination ring (P Praneesh) [task:459546] {CVE-2024-58097}
  - dlm: prevent NPD when writing a positive value to event_done (Thadeu Lima de Souza Cascardo) [task:459658] {CVE-2025-23131}
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (Ye Bin) [task:459580] {CVE-2025-22121}
  - ext4: introduce ITAIL helper (Ye Bin) [task:459580]
  - ibmvnic: Use kernel helpers for hex dumps (Nick Child) [task:459569] {CVE-2025-22104}
  - net: fix NULL pointer dereference in l3mdev_l3_rcv (Wang Liang) [task:459407] {CVE-2025-22103}
  - jfs: add check read-only before truncation in jfs_truncate_nolock() (Vasiliy Kovalev) [task:459936] {CVE-2024-58094}
  - smb: client: fix UAF in decryption with multichannel (Paulo Alcantara) [task:460233] {CVE-2025-37750}
  - smb: client: allocate crypto only for primary server (Enzo Matsumiya) [task:460233]
  - net: stmmac: Fix accessing freed irq affinity_hint (Qingfang Deng) [task:460178] {CVE-2025-23155}
  - landlock: Add the errata interface (Mickaël Salaün)
  - Fix mmu notifiers for range-based invalidates (Piotr Jaroszynski)
  - mptcp: sockopt: fix getting freebind & transparent (Matthieu Baerts (NGI0))
  - iommufd: Fail replace if device has not been attached (Yi Liu)
  - ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (Takashi Iwai) [task:458731]
  - drm/tests: Build KMS helpers when DRM_KUNIT_TEST_HELPERS is enabled (Karolina Stolarek) [task:458731]
  - btrfs: fix the length of reserved qgroup to free (Haisu Wang) [task:458731]
  - MIPS: ds1287: Match ds1287_set_base_clock() function types (WangYuli) [task:458731]
  - MIPS: cevt-ds1287: Add missing ds1287.h include (WangYuli) [task:458731]
  - MIPS: dec: Declare which_prom() as static (WangYuli) [task:458731]
  - xdp: Reset bpf_redirect_info before running a xdp's BPF prog. (Sebastian Andrzej Siewior) [task:458731]
  - nvmet-fc: Remove unused functions (WangYuli) [task:458731]
  - wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit (Ping-Ke Shih) [task:458731]
  - wifi: rtw89: pci: add pre_deinit to be called after probe complete (Ping-Ke Shih) [task:458731]
  - usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (GONG Ruiqi) [task:458731]
  - LoongArch: Eliminate superfluous get_numa_distances_cnt() (Yuli Wang) [task:458731]
  - powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (Nathan Lynch) [task:458731]
  - x86/split_lock: Fix the delayed detection logic (Maksim Davydov) [task:458731]
  - x86/tdx: Fix arch_safe_halt() execution for TDX VMs (Vishal Annapurve) [task:458731]
  - efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32 (Hamza Mahfooz) [task:458731]
  - misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type (Kunihiko Hayashi) [task:458731]
  - misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error (Kunihiko Hayashi) [task:458731]
  - misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (Kunihiko Hayashi) [task:458731]
  - kbuild: Add '-fno-builtin-wcslen' (Nathan Chancellor) [task:458731]
  - cpufreq: Reference count policy in cpufreq_update_limits() (Rafael J. Wysocki) [task:458731]
  - io_uring/net: fix accept multishot handling (Pavel Begunkov) [task:458731]
  - drm/i915/gvt: fix unterminated-string-initialization warning (Jani Nikula) [task:458731]
  - drm/sti: remove duplicate object names (Rolf Eike Beer) [task:458731]
  - drm/nouveau: prime: fix ttm_bo_delayed_delete oops (Chris Bainbridge) [task:458731]
  - drm/amdgpu/dma_buf: fix page_link check (Matthew Auld) [task:458731]
  - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm/smu11: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm/powerplay: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd: Handle being compiled without SI or CIK support better (Mario Limonciello) [task:458731]
  - drm/msm/a6xx: Fix stale rpmh votes from GPU (Akhil P Oommen) [task:458731]
  - drm/repaper: fix integer overflows in repeat functions (Nikita Zhandarovich) [task:458731]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR (Kan Liang) [task:458731]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX (Kan Liang) [task:458731]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR (Kan Liang) [task:458731]
  - perf/x86/intel: Allow to update user space GPRs from PEBS records (Dapeng Mi) [task:458731]
  - RDMA/cma: Fix workqueue crash in cma_netevent_work_handler (Sharath Srinivasan) [task:458731]
  - scsi: ufs: exynos: Ensure consistent phy reference counts (Peter Griffin) [task:458731]
  - scsi: megaraid_sas: Block zero-length ATA VPD inquiry (Chandrakanth Patil) [task:458731]
  - x86/boot/sev: Avoid shared GHCB page for early memory acceptance (Ard Biesheuvel) [task:458731]
  - x86/cpu/amd: Fix workaround for erratum 1054 (Sandipan Das) [task:458731]
  - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Borislav Petkov (AMD)) [task:458731]
  - virtiofs: add filesystem context source name check (Xiangsheng Hou) [task:458731]
  - tracing: Fix filter string testing (Steven Rostedt) [task:458731]
  - string: Add load_unaligned_zeropad() code path to sized_strscpy() (Peter Collingbourne) [task:458731]
  - smb3 client: fix open hardlink on deferred close file error (Chunjie Zhu) [task:458731]
  - selftests/mm: generate a temporary mountpoint for cgroup filesystem (Mark Brown) [task:458731]
  - riscv: Avoid fortify warning in syscall_get_arguments() (Nathan Chancellor) [task:458731]
  - Revert "smb: client: fix TCP timers deadlock after rmmod" (Kuniyuki Iwashima) [task:458731]
  - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Kuniyuki Iwashima) [task:458731]
  - ksmbd: fix the warning from __kernel_write_iter (Namjae Jeon) [task:458731]
  - ksmbd: Prevent integer overflow in calculation of deadtime (Denis Arefev) [task:458731]
  - ksmbd: fix use-after-free in smb_break_all_levII_oplock() (Namjae Jeon) [task:458731]
  - ksmbd: Fix dangling pointer in krb_authenticate (Sean Heelan) [task:458731]
  - ovl: don't allow datadir only (Miklos Szeredi) [task:458731]
  - mm: fix apply_to_existing_page_range() (Kirill A. Shutemov) [task:458731]
  - mm: fix filemap_get_folios_contig returning batches of identical folios (Vishal Moola (Oracle)) [task:458731]
  - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Baoquan He) [task:458731]
  - loop: LOOP_SET_FD: send uevents for partitions (Thomas Weißschuh) [task:458731]
  - loop: properly send KOBJ_CHANGED uevent for disk device (Thomas Weißschuh) [task:458731]
  - isofs: Prevent the use of too small fid (Edward Adam Davis) [task:458731]
  - i2c: cros-ec-tunnel: defer probe if parent EC is not present (Thadeu Lima de Souza Cascardo) [task:458731]
  - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key (Vasiliy Kovalev) [task:458731]
  - crypto: caam/qi - Fix drv_ctx refcount bug (Herbert Xu) [task:458731]
  - btrfs: correctly escape subvol in btrfs_show_options() (Johannes Kimmel) [task:458731]
  - Bluetooth: vhci: Avoid needless snprintf() calls (Kees Cook) [task:458731]
  - Bluetooth: l2cap: Process valid commands in too long frame (Frédéric Danis) [task:458731]
  - ftrace: fix incorrect hash size in register_ftrace_direct() (Menglong Dong) [task:458731]
  - i2c: atr: Fix wrong include (Andy Shevchenko) [task:458731]
  - nfsd: decrease sc_count directly if fail to queue dl_recall (Li Lingfeng) [task:458731]
  - nfs: add missing selections of CONFIG_CRC32 (Eric Biggers) [task:458731]
  - asus-laptop: Fix an uninitialized variable (Denis Arefev) [task:458731]
  - ASoC: qcom: Fix sc7280 lpass potential buffer overflow (Evgeny Pimenov) [task:458731]
  - ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels (Srinivas Kandagatla) [task:458731]
  - ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate (Srinivas Kandagatla) [task:458731]
  - Revert "PCI: Avoid reset when disabled via sysfs" (Alex Williamson) [task:458731]
  - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [task:458731]
  - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS (Rafael J. Wysocki) [task:458731]
  - riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break (WangYuli) [task:458731]
  - riscv: KGDB: Do not inline arch_kgdb_breakpoint() (WangYuli) [task:458731]
  - kunit: qemu_configs: SH: Respect kunit cmdline (Thomas Weißschuh) [task:458731]
  - riscv: Properly export reserved regions in /proc/iomem (Björn Töpel) [task:458731]
  - net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings (Bo-Cun Chen) [task:458731]
  - net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 100Mbps (Bo-Cun Chen) [task:458731]
  - net: ti: icss-iep: Fix possible NULL pointer dereference for perout request (Meghana Malladi) [task:458731]
  - net: ti: icss-iep: Add phase offset configuration for perout signal (Meghana Malladi) [task:458731]
  - net: ti: icss-iep: Add pwidth configuration for perout signal (Meghana Malladi) [task:458731]
  - ptp: ocp: fix start time alignment in ptp_ocp_signal_set (Sagi Maimon) [task:458731]
  - net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails (Vladimir Oltean) [task:458731]
  - net: dsa: free routing table on probe failure (Vladimir Oltean) [task:458731]
  - net: dsa: clean up FDB, MDB, VLAN entries on unbind (Vladimir Oltean) [task:458731]
  - net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (Vladimir Oltean) [task:458731]
  - net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered (Vladimir Oltean) [task:458731]
  - net: bridge: switchdev: do not notify new brentries as changed (Jonas Gorski) [task:458731]
  - net: b53: enable BPDU reception for management port (Jonas Gorski) [task:458731]
  - netlink: specs: rt-link: adjust mctp attribute naming (Jakub Kicinski) [task:458731]
  - netlink: specs: rt-link: add an attr layer around alt-ifname (Jakub Kicinski) [task:458731]
  - cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path (Abdun Nihaal) [task:458731]
  - ata: libata-sata: Save all fields from sense data descriptor (Niklas Cassel) [task:458731]
  - net: ethernet: ti: am65-cpsw: fix port_np reference counting (Michael Walle) [task:458731]
  - net: ethernet: ti: am65-cpsw-nuss: rename phy_node -> port_np (Alexander Sverdlin) [task:458731]
  - net: ngbe: fix memory leak in ngbe_probe() error path (Abdun Nihaal) [task:458731]
  - net: openvswitch: fix nested key length validation in the set() action (Ilya Maximets) [task:458731]
  - block: fix resource leak in blk_register_queue() error path (Zheng Qixing) [task:458731]
  - net: mctp: Set SOCK_RCU_FREE (Matt Johnston) [task:458731]
  - pds_core: fix memory leak in pdsc_debugfs_add_qcq() (Abdun Nihaal) [task:458731]
  - test suite: use %zu to print size_t (Matthew Wilcox (Oracle)) [task:458731]
  - igc: add lock preventing multiple simultaneous PTM transactions (Christopher S M Hall) [task:458731]
  - igc: cleanup PTP module if probe fails (Christopher S M Hall) [task:458731]
  - igc: handle the IGC_PTP_ENABLED flag correctly (Christopher S M Hall) [task:458731]
  - igc: move ktime snapshot into PTM retry loop (Christopher S M Hall) [task:458731]
  - igc: increase wait time before retrying PTM (Christopher S M Hall) [task:458731]
  - igc: fix PTM cycle trigger logic (Christopher S M Hall) [task:458731]
  - Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (Johannes Berg) [task:458731]
  - Bluetooth: l2cap: Check encryption key size on incoming connection (Frédéric Danis) [task:458731]
  - Bluetooth: btrtl: Prevent potential NULL dereference (Dan Carpenter) [task:458731]
  - Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address (Luiz Augusto von Dentz) [task:458731]
  - RDMA/core: Silence oversized kvmalloc() warning (Shay Drory) [task:458731]
  - ASoC: cs42l43: Reset clamp override on jack removal (Charles Keepax) [task:458731]
  - RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe() (Yue Haibing) [task:458731]
  - ovl: remove unused forward declaration (Giuseppe Scrivano) [task:458731]
  - ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() (Henry Martin) [task:458731]
  - ASoC: dwc: always enable/disable i2s irqs (Brady Norander) [task:458731]
  - md/md-bitmap: fix stats collection for external bitmaps (Zheng Qixing) [task:458731]
  - md/raid10: fix missing discard IO accounting (Yu Kuai) [task:458731]
  - scsi: iscsi: Fix missing scsi_host_put() in error path (Miaoqian Lin) [task:458731]
  - wifi: wl1251: fix memory leak in wl1251_tx_work (Abdun Nihaal) [task:458731]
  - wifi: mac80211: Purge vif txq in ieee80211_do_stop() (Remi Pommarel) [task:458731]
  - wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() (Remi Pommarel) [task:458731]
  - wifi: at76c50x: fix use after free access in at76_disconnect (Abdun Nihaal) [task:458731]
  - scsi: hisi_sas: Enable force phy when SATA disk directly connected (Xingui Yang) [task:458731]
  - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition (Kaixin Wang) [task:458731]
  - Bluetooth: hci_uart: Fix another race during initialization (Arseniy Krasnov) [task:458731]
  - media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline (Arnd Bergmann) [task:458731]
  - x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() (Myrrh Periwinkle) [task:458731]
  - ACPI: platform-profile: Fix CFI violation when accessing sysfs files (Nathan Chancellor) [task:458731]
  - x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT (Kirill A. Shutemov) [task:458731]
  - arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Douglas Anderson) [task:458731]
  - selftests: mptcp: fix incorrect fd checks in main_loop (Cong Liu) [task:458731]
  - selftests: mptcp: close fd_in before returning in main_loop (Geliang Tang) [task:458731]
  - pinctrl: qcom: Clear latched interrupt status when changing IRQ type (Stephan Gerhold) [task:458731]
  - phy: freescale: imx8m-pcie: assert phy reset and perst in power off (Stefan Eichenberger) [task:458731]
  - PCI: Fix reference leak in pci_alloc_child_bus() (Ma Ke) [task:458731]
  - PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe() (Stanimir Varbanov) [task:458731]
  - of/irq: Fix device node refcount leakages in of_irq_init() (Zijun Hu) [task:458731]
  - of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() (Zijun Hu) [task:458731]
  - of/irq: Fix device node refcount leakages in of_irq_count() (Zijun Hu) [task:458731]
  - of/irq: Fix device node refcount leakage in API of_irq_parse_raw() (Zijun Hu) [task:458731]
  - of/irq: Fix device node refcount leakage in API of_irq_parse_one() (Zijun Hu) [task:458731]
  - ntb: use 64-bit arithmetic for the MSI doorbell mask (Fedor Pchelkin) [task:458731]
  - KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (Sean Christopherson) [task:458731]
  - KVM: x86: Explicitly zero-initialize on-stack CPUID unions (Sean Christopherson) [task:458731]
  - gve: handle overflow when reporting TX consumed descriptors (Joshua Washington) [task:458731]
  - gpio: zynq: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski) [task:458731]
  - gpio: tegra186: fix resource handling in ACPI probe path (Guixin Liu) [task:458731]
  - ftrace: Add cond_resched() to ftrace_graph_set_hash() (zhoumin) [task:458731]
  - dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg' (Krzysztof Kozlowski) [task:458731]
  - dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg' (Krzysztof Kozlowski) [task:458731]
  - dm-verity: fix prefetch-vs-suspend race (Mikulas Patocka) [task:458731]
  - dm-integrity: set ti->error on memory allocation failure (Mikulas Patocka) [task:458731]
  - dm-ebs: fix prefetch-vs-suspend race (Mikulas Patocka) [task:458731]
  - crypto: ccp - Fix check for the primary ASP device (Tom Lendacky) [task:458731]
  - clk: qcom: gdsc: Set retain_ff before moving to HW CTRL (Taniya Das) [task:458731]
  - clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code (Bryan O'Donoghue) [task:458731]
  - clk: qcom: gdsc: Release pm subdomains in reverse add order (Bryan O'Donoghue) [task:458731]
  - clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks (Ajit Pandey) [task:458731]
  - cifs: Ensure that all non-client-specific reparse points are processed by the server (Pali Rohár) [task:458731]
  - cifs: fix integer overflow in match_server() (Roman Smirnov) [task:458731]
  - cifs: avoid NULL pointer dereference in dbg call (Alexandra Diupina) [task:458731]
  - thermal/drivers/rockchip: Add missing rk3328 mapping entry (Trevor Woerner) [task:458731]
  - tracing: Do not add length to print format in synthetic events (Steven Rostedt) [task:458731]
  - x86/xen: fix balloon target initialization for PVH dom0 (Roger Pau Monne) [task:458731]
  - sctp: detect and prevent references to a freed transport in sendmsg (Ricardo Cañuelo Navarro) [task:458731]
  - mm/hugetlb: move hugetlb_sysctl_init() to the __init section (Marc Herbert) [task:458731]
  - mm/hwpoison: do not send SIGBUS to processes with recovered clean pages (Shuai Xue) [task:458731]
  - mm/userfaultfd: fix release hang over concurrent GUP (Peter Xu) [task:458731]
  - mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock (Mathieu Desnoyers) [task:458731]
  - mm/mremap: correctly handle partial mremap() of VMA starting at 0 (Lorenzo Stoakes) [task:458731]
  - mm: fix lazy mmu docs and usage (Ryan Roberts) [task:458731]
  - mm: make page_mapped_in_vma() hugetlb walk aware (Jane Chu) [task:458731]
  - mm/rmap: reject hugetlb folios in folio_make_device_exclusive() (David Hildenbrand) [task:458731]
  - sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes (Ryan Roberts) [task:458731]
  - sparc/mm: disable preemption in lazy mmu mode (Ryan Roberts) [task:458731]
  - iommufd: Fix uninitialized rc in iommufd_access_rw() (Nicolin Chen) [task:458731]
  - btrfs: zoned: fix zone finishing with missing devices (Johannes Thumshirn) [task:458731]
  - btrfs: zoned: fix zone activation with missing devices (Johannes Thumshirn) [task:458731]
  - btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers (Filipe Manana) [task:458731]
  - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() (Herve Codina) [task:458731]
  - arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string (Chen-Yu Tsai) [task:458731]
  - arm64: mm: Correct the update of max_pfn (Zhenhua Huang) [task:458731]
  - mtd: rawnand: Add status chack in r852_ready() (Wentao Liang) [task:458731]
  - mtd: inftlcore: Add error check for inftl_read_oob() (Wentao Liang) [task:458731]
  - mptcp: only inc MPJoinAckHMacFailure for HMAC failures (Matthieu Baerts (NGI0)) [task:458731]
  - mptcp: fix NULL pointer in can_accept_new_subflow (Gang Yan) [task:458731]
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets (T Pratham) [task:458731]
  - locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() (Boqun Feng) [task:458731]
  - mailbox: tegra-hsp: Define dimensioning masks in SoC data (Kartik Rajput) [task:458731]
  - mfd: ene-kb3930: Fix a potential NULL pointer dereference (Chenyuan Yang) [task:458731]
  - leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs (Abel Vesa) [task:458731]
  - leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs (Abel Vesa) [task:458731]
  - jbd2: remove wrong sb->s_sequence check (Jan Kara) [task:458731]
  - i3c: Add NULL pointer check in i3c_master_queue_ibi() (Manjunatha Venkatesh) [task:458731]
  - i3c: master: svc: Use readsb helper for reading MDB (Stanley Chu) [task:458731]
  - smb311 client: fix missing tcon check when mounting with linux/posix extensions (Steve French) [task:458731]
  - soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() (Chenyuan Yang) [task:458731]
  - tpm: do not start chip while suspended (Thadeu Lima de Souza Cascardo) [task:458731]
  - udf: Fix inode_getblk() return value (Jan Kara) [task:458731]
  - vdpa/mlx5: Fix oversized null mkey longer than 32bit (Si-Wei Liu) [task:458731]
  - f2fs: fix to avoid atomicity corruption of atomic file (Yeongjin Gil) [task:458731]
  - ext4: fix off-by-one error in do_split (Artem Sadovnikov) [task:458731]
  - bus: mhi: host: Fix race between unprepare and queue_buf (Jeff Hugo) [task:458731]
  - ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path (Alexey Klimov) [task:458731]
  - ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns. (Srinivas Kandagatla) [task:458731]
  - ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment. (Srinivas Kandagatla) [task:458731]
  - ASoC: q6apm: add q6apm_get_hw_pointer helper (Srinivas Kandagatla) [task:458731]
  - io_uring/kbuf: reject zero sized provided buffers (Jens Axboe) [task:458731]
  - wifi: mac80211: fix integer overflow in hwmp_route_info_get() (Gavrilov Ilia) [task:458731]
  - wifi: mt76: Add check for devm_kstrdup() (Haoxiang Li) [task:458731]
  - clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup (Alexandre Torgue) [task:458731]
  - mtd: Replace kcalloc() with devm_kcalloc() (Jiasheng Jiang) [task:458731]
  - net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family (Marek Behún) [task:458731]
  - mtd: Add check for devm_kcalloc() (Jiasheng Jiang) [task:458731]
  - mptcp: sockopt: fix getting IPV6_V6ONLY (Matthieu Baerts (NGI0)) [task:458731]
  - media: i2c: imx219: Rectify runtime PM handling in probe and remove (Sakari Ailus) [task:458731]
  - media: venus: hfi_parser: refactor hfi packet parsing logic (Vikash Garodia) [task:458731]
  - media: venus: hfi_parser: add check to avoid out of bound access (Vikash Garodia) [task:458731]
  - media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO (Sakari Ailus) [task:458731]
  - media: i2c: ov7251: Set enable GPIO low in probe (Sakari Ailus) [task:458731]
  - media: i2c: ccs: Set the device's runtime PM status correctly in probe (Sakari Ailus) [task:458731]
  - media: i2c: ccs: Set the device's runtime PM status correctly in remove (Sakari Ailus) [task:458731]
  - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Karina Yankevich) [task:458731]
  - media: platform: stm32: Add check for clk_enable() (Jiasheng Jiang) [task:458731]
  - media: visl: Fix ERANGE error when setting enum controls (Nicolas Dufresne) [task:458731]
  - media: streamzap: prevent processing IR data on URB failure (Murad Masimov) [task:458731]
  - tpm, tpm_tis: Fix timeout handling when waiting for TPM status (Jonathan McDowell) [task:458731]
  - mtd: rawnand: brcmnand: fix PM resume warning (Kamal Dasu) [task:458731]
  - spi: cadence-qspi: Fix probe on AM62A LP SK (Miquel Raynal) [task:458731]
  - KVM: arm64: Tear down vGIC on failed vCPU creation (Will Deacon) [task:458731]
  - arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Douglas Anderson) [task:458731]
  - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Douglas Anderson) [task:458731]
  - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Douglas Anderson) [task:458731]
  - arm64: cputype: Add MIDR_CORTEX_A76AE (Douglas Anderson) [task:458731]
  - xenfs/xensyms: respect hypervisor's "next" indication (Jan Beulich) [task:458731]
  - media: siano: Fix error handling in smsdvb_module_init() (Yuan Can) [task:458731]
  - media: vim2m: print device name after registering device (Matthew Majewski) [task:458731]
  - media: venus: hfi: add check to handle incorrect queue size (Vikash Garodia) [task:458731]
  - media: venus: hfi: add a check to handle OOB in sfr region (Vikash Garodia) [task:458731]
  - media: i2c: adv748x: Fix test pattern selection mask (Niklas Söderlund) [task:458731]
  - media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning (Arnd Bergmann) [task:458731]
  - media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (Jiasheng Jiang) [task:458731]
  - dt-bindings: media: st,stmipid02: correct lane-polarities maxItems (Alain Volmat) [task:458731]
  - ext4: don't treat fhandle lookup of ea_inode as FS corruption (Jann Horn) [task:458731]
  - bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags (Willem de Bruijn) [task:458731]
  - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Uwe Kleine-König) [task:458731]
  - pwm: rcar: Improve register calculation (Uwe Kleine-König) [task:458731]
  - pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() (Josh Poimboeuf) [task:458731]
  - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Jonathan McDowell) [task:458731]
  - ktest: Fix Test Failures Due to Missing LOG_FILE Directories (Ayush Jain) [task:458731]
  - tracing: probe-events: Add comments about entry data storing code (Masami Hiramatsu (Google)) [task:458731]
  - fbdev: omapfb: Add 'plane' value check (Leonid Arapov) [task:458731]
  - drm/amdgpu: grab an additional reference on the gang fence v2 (Christian König) [task:458731]
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Ryo Takakura) [task:458731]
  - drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() (Wentao Liang) [task:458731]
  - drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off (AngeloGioacchino Del Regno) [task:458731]
  - drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data (AngeloGioacchino Del Regno) [task:458731]
  - drm/amdkfd: debugfs hang_hws skip GPU with MES (Philip Yang) [task:458731]
  - drm/amdkfd: Fix pqm_destroy_queue race with GPU reset (Philip Yang) [task:458731]
  - drm/amdkfd: Fix mode1 reset crash issue (Philip Yang) [task:458731]
  - drm/amdkfd: clamp queue size to minimum (David Yat Sin) [task:458731]
  - drivers: base: devres: Allow to release group on device release (Lucas De Marchi) [task:458731]
  - drm/bridge: panel: forbid initializing a panel with unknown connector type (Luca Ceresoli) [task:458731]
  - drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel) (Andrew Wyatt) [task:458731]
  - drm: panel-orientation-quirks: Add new quirk for GPD Win 2 (Andrew Wyatt) [task:458731]
  - drm: panel-orientation-quirks: Add quirk for AYA NEO Slide (Andrew Wyatt) [task:458731]
  - drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB (Andrew Wyatt) [task:458731]
  - drm: panel-orientation-quirks: Add support for AYANEO 2S (Andrew Wyatt) [task:458731]
  - drm/amd/display: add workaround flag to link to force FFE preset (Brendan Tam) [task:458731]
  - drm/amd/display: Update Cursor request mode to the beginning prefetch always (Zhikai Zhai) [task:458731]
  - drm: allow encoder mode_set even when connectors change for crtc (Abhinav Kumar) [task:458731]
  - Bluetooth: qca: simplify WCN399x NVM loading (Dmitry Baryshkov) [task:458731]
  - Bluetooth: hci_uart: fix race during initialization (Arseniy Krasnov) [task:458731]
  - tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER (Gabriele Paoloni) [task:458731]
  - net: vlan: don't propagate flags on open (Stanislav Fomichev) [task:458731]
  - wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table (Icenowy Zheng) [task:458731]
  - scsi: st: Fix array overflow in st_setup() (Kai Mäkisara) [task:458731]
  - cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk (Philipp Hahn) [task:458731]
  - ext4: ignore xattrs past end (Bhupesh) [task:458731]
  - Revert "f2fs: rebuild nat_bits during umount" (Chao Yu) [task:458731]
  - ext4: protect ext4_release_dquot against freezing (Ojaswin Mujoo) [task:458731]
  - ahci: add PCI ID for Marvell 88SE9215 SATA Controller (Daniel Kral) [task:458731]
  - f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() (Chao Yu) [task:458731]
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (Manish Dharanenthiran) [task:458731]
  - net: sfp: add quirk for 2.5G OEM BX SFP (Birger Koblitz) [task:458731]
  - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode (Niklas Cassel) [task:458731]
  - jfs: add sanity check for agwidth in dbMount (Edward Adam Davis) [task:458731]
  - jfs: Prevent copying of nlink with value 0 from disk inode (Edward Adam Davis) [task:458731]
  - fs/jfs: Prevent integer overflow in AG size calculation (Rand Deeb) [task:458731]
  - fs/jfs: cast inactags to s64 to prevent potential overflow (Rand Deeb) [task:458731]
  - jfs: Fix uninit-value access of imap allocated in the diMount() function (Zhongqiu Han) [task:458731]
  - page_pool: avoid infinite loop to schedule delayed worker (Jason Xing) [task:458731]
  - net: usb: asix_devices: add FiberGecko DeviceID (Max Schulze) [task:458731]
  - scsi: target: spc: Fix RSOC parameter data header size (Chaohai Chen) [task:458731]
  - f2fs: don't retry IO for corrupted data scenario (Chao Yu) [task:458731]
  - wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process (P Praneesh) [task:458731]
  - ASoC: amd: yc: update quirk data for new Lenovo model (Syed Saba kareem) [task:458731]
  - ASoC: amd: Add DMI quirk for ACP6X mic support (keenplify) [task:458731]
  - ALSA: usb-audio: Fix CME quirk for UF series keyboards (Ricard Wanderlof) [task:458731]
  - mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves (Kaustabh Chakraborty) [task:458731]
  - media: uvcvideo: Add quirk for Actions UVC05 (Ricardo Ribalda) [task:458731]
  - ASoC: fsl_audmix: register card device depends on 'dais' property (Shengjiu Wang) [task:458731]
  - ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist (Maxim Mikityanskiy) [task:458731]
  - ALSA: hda: intel: Fix Optimus when GPU has no sound (Maxim Mikityanskiy) [task:458731]
  - HID: pidff: Fix null pointer dereference in pidff_find_fields (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add PERIODIC_SINE_ONLY quirk (Tomasz Pakuła) [task:458731]
  - HID: Add hid-universal-pidff driver and supported device ids (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add FIX_WHEEL_DIRECTION quirk (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add PERMISSIVE_CONTROL quirk (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add MISSING_PBO quirk and its detection (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add MISSING_DELAY quirk and its detection (Tomasz Pakuła) [task:458731]
  - HID: pidff: Do not send effect envelope if it's empty (Tomasz Pakuła) [task:458731]
  - HID: pidff: Convert infinite length from Linux API to PID standard (Tomasz Pakuła) [task:458731]
  - ASoC: SOF: topology: Use krealloc_array() to replace krealloc() (Zhang Heng) [task:458731]
  - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault (Ingo Molnar) [task:458731]
  - xen/mcelog: Add __nonstring annotations for unterminated strings (Kees Cook) [task:458731]
  - arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD (Douglas Anderson) [task:458731]
  - perf: arm_pmu: Don't disable counter in armpmu_add() (Mark Rutland) [task:458731]
  - x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine (Max Grobecker) [task:458731]
  - x86/ia32: Leave NULL selector values 0~3 unchanged (Xin Li (Intel)) [task:458731]
  - x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW (Matthew Wilcox (Oracle)) [task:458731]
  - pm: cpupower: bench: Prevent NULL dereference on malloc failure (Zhongqiu Han) [task:458731]
  - umount: Allow superblock owners to force umount (Trond Myklebust) [task:458731]
  - fs: consistently deref the files table with rcu_dereference_raw() (Mateusz Guzik) [task:458731]
  - iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (Louis-Alexis Eyraud) [task:458731]
  - nft_set_pipapo: fix incorrect avx2 match of 5th field octet (Florian Westphal) [task:458731]
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung (Arnaud Lecomte) [task:458731]
  - ipv6: Align behavior across nexthops during path selection (Ido Schimmel) [task:458731]
  - net_sched: sch_sfq: move the limit validation (Octavian Purdila) [task:458731]
  - net_sched: sch_sfq: use a temporary work area for validating configuration (Octavian Purdila) [task:458731]
  - nvmet-fcloop: swap list_add_tail arguments (Daniel Wagner) [task:458731]
  - drm/i915/huc: Fix fence not released on early probe errors (Janusz Krzysztofik) [task:458731]
  - ata: sata_sx4: Add error handling in pdc20621_i2c_read() (Wentao Liang) [task:458731]
  - net: libwx: handle page_pool_dev_alloc_pages error (Chenyuan Yang) [task:458731]
  - drm/tests: probe-helper: Fix drm_display_mode memory leak (Maxime Ripard) [task:458731]
  - drm/tests: modes: Fix drm_display_mode memory leak (Maxime Ripard) [task:458731]
  - drm/tests: cmdline: Fix drm_display_mode memory leak (Maxime Ripard) [task:458731]
  - drm/tests: helpers: Create kunit helper to destroy a drm_display_mode (Maxime Ripard) [task:458731]
  - drm/tests: helpers: Fix compiler warning (Yu-Chun Lin) [task:458731]
  - drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic() (Jinjie Ruan) [task:458731]
  - drm/tests: Add helper to create mock crtc (Maxime Ripard) [task:458731]
  - drm/tests: Add helper to create mock plane (Maxime Ripard) [task:458731]
  - drm/tests: helpers: Add atomic helpers (Maxime Ripard) [task:458731]
  - drm/tests: modeset: Fix drm_display_mode memory leak (Maxime Ripard) [task:458731]
  - net: ethtool: Don't call .cleanup_data when prepare_data fails (Maxime Chevallier) [task:458731]
  - tc: Ensure we have enough buffer space when sending filter netlink notifications (Toke Høiland-Jørgensen) [task:458731]
  - net/sched: cls_api: conditional notification of events (Pedro Tammela) [task:458731]
  - rtnl: add helper to check if a notification is needed (Victor Nogueira) [task:458731]
  - rtnl: add helper to check if rtnl group has listeners (Jamal Hadi Salim) [task:458731]
  - octeontx2-pf: qos: fix VF root node parent queue index (Hariprasad Kelam) [task:458731]
  - net: tls: explicitly disallow disconnect (Jakub Kicinski) [task:458731]
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Cong Wang) [task:458731]
  - tipc: fix memory leak in tipc_link_xmit (Tung Nguyen) [task:458731]
  - objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret() (Josh Poimboeuf) [task:458731]
  - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() (Henry Martin) [task:458731]
  - drm/i915: Disable RPG during live selftest (Badal Nilawar) [task:458731]
  - drm/i915/dg2: wait for HuC load completion before running selftests (Daniele Ceraolo Spurio) [task:458731]
  - selftests/futex: futex_waitv wouldblock test should fail (Edward Liaw) [task:458731]
  - fix missing file error in sw64 (liuyunchen) [task:382309]
  - support stackprotector in sw64 (leechm) [task:382309]
  - fix some compile error in sw64 (kylin) [task:382309]
  - SUNWAY: irq: remove unnecessary initialization (Jing Li) [task:382309]
  - SUNWAY: acpi: enable generic GSI (Jing Li) [task:382309]
  - SUNWAY: irqchip: support ACPI-based interrupt controller initialization (Jing Li) [task:382309]
  - SUNWAY: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC (Jing Li) [task:382309]
  - SUNWAY: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC (Jing Li) [task:382309]
  - SUNWAY: fix compilation warning (He Chuyue) [task:382309]
  - SUNWAY: fix kconfig selections (Mao Minkai) [task:382309]
  - SUNWAY: use a new wrap_asid hmcall when asid wraps (Mao Minkai) [task:382309]
  - SUNWAY: rewrite fpcr and swcr conversion (Mao Minkai) [task:382309]
  - SUNWAY: enable hardware denorm by default (Mao Minkai) [task:382309]
  - SUNWAY: add four-socket system support (Wu Liliu) [task:382309]
  - SUNWAY: add a new kernel parameter to override mclk (Mao Minkai) [task:382309]
  - SUNWAY: msi: fix bugs in multi-msi interrupts allocation and release (Zheng Chongzhen) [task:382309]
  - SUNWAY: pci: change pci transaction ordering rule settings (Zheng Chongzhen) [task:382309]
  - SUNWAY: irqchip: fix virtual PINTC not working properly (Jing Li) [task:382309]
  - SUNWAY: dts: improve properties for PINTC (Jing Li) [task:382309]
  - SUNWAY: dts: improve properties for LPC-INTC (Jing Li) [task:382309]
  - SUNWAY: dts: fix interrupt related properties for GPIO (Jing Li) [task:382309]
  - SUNWAY: dts: add chosen node (Jing Li) [task:382309]
  - SUNWAY: dts: fix properties for spi controller device node (Jing Li) [task:382309]
  - SUNWAY: acpi: fix coding style and typos (Jing Li) [task:382309]
  - SUNWAY: fix rd_f compatibility issue for C4 (He Chuyue) [task:382309]
  - SUNWAY: fix macro definition compilation error (Tang Jinyang) [task:382309]
  - SUNWAY: pci: fix compile error when CONFIG_ACPI=n (Jing Li) [task:382309]
  - SUNWAY: smp: suppress function setup_smp() when ACPI enabled (Jing Li) [task:382309]
  - SUNWAY: acpi: parse SW CINTC for SMP initialization (Jing Li) [task:382309]
  - SUNWAY: acpi: support MADT entry print for SW CINTC (Jing Li) [task:382309]
  - SUNWAY: acpi: add ACPI-style structures for SW CINTC (Jing Li) [task:382309]
  - SUNWAY: smp: add new structure to record rcid information (Jing Li) [task:382309]
  - SUNWAY: smp: modify function smp_rcb_init() to receive base address (Jing Li) [task:382309]
  - SUNWAY: pci: synchronize the OEM table ID of MCFG with BIOS (Jing Li) [task:382309]
  - SUNWAY: iommu: fix the bug when vfio_iommu unpin pages (Zheng Chongzhen) [task:382309]
  - SUNWAY: use rvpcr() to setup run mode (Wu Liliu) [task:382309]
  - SUNWAY: kgdb: add single-step debug support (Zhi Tongze) [task:382309]
  - SUNWAY: fix lockdep error (He Chuyue) [task:382309]
  - SUNWAY: perf: do all event checks in sw64_pmu_event_init() (He Chuyue) [task:382309]
  - SUNWAY: numa: fix compile error when CONFIG_ACPI_NUMA=n (Jing Li) [task:382309]
  - SUNWAY: pci: export some pci functions (Jing Li) [task:382309]
  - SUNWAY: uapi: fix a compile error for headers_install (Gu Zitao) [task:382309]
  - SUNWAY: perf: hide hardware performance events in guest os (He Chuyue) [task:382309]
  - SUNWAY: fix hugepage support (Wu Liliu) [task:382309]
  - SUNWAY: extern vdso_start and vdso_end as char[] (Mao Minkai) [task:382309]
  - SUNWAY: remove useless current_policy (Tang Jinyang) [task:382309]
  - SUNWAY: add arch-specific SYM_END definition (Gu Zitao) [task:382309]
  - SUNWAY: add vfio support (liuyunchen) [task:382309]
  - SUNWAY: add usb support (liuyunchen) [task:382309]
  - SUNWAY: add platform drivers (liuyunchen) [task:382309]
  - SUNWAY: add gpio support (liuyunchen) [task:382309]
  - SUNWAY: add misc drivers (liuyunchen) [task:382309]
  - SUNWAY: add hwmon driver (liuyunchen) [task:382309]
  - SUNWAY: add mfd driver support (liuyunchen) [task:382309]
  - SUNWAY: add iommu support (liuyunchen) [task:382309]
  - SUNWAY: add firmware support (liuyunchen) [task:382309]
  - SUNWAY: add pci bus support (liuyunchen) [task:382309]
  - SUNWAY: add acpi support (liuyunchen) [task:382309]
  - SUNWAY: add i2c bus driver support (liuyunchen) [task:382309]
  - SUNWAY: add irq controller support (liuyunchen) [task:382309]
  - SUNWAY: add cpufreq driver support (liuyunchen) [task:382309]
  - SUNWAY: add clocksource support (liuyunchen) [task:382309]
  - SUNWAY: add spi support (liuyunchen) [task:382309]
  - SUNWAY: add rtc support (liuyunchen) [task:382309]
  - SUNWAY: add 8250 serial support (liuyunchen) [task:382309]
  - SUNWAY: add perf support (Mao Minkai) [task:382309]
  - SUNWAY: add build infrastructure (Mao Minkai) [task:382309]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.2.v2505
changelog:
  - CCUSR: scsi/ccusr: avoid CCore RAID card exceptions caused by I/O (Zeng Fu) [task:456510]
  - Add JIT_ALWAYS_ON config to Loongarch (Feng Yang) [bug:353232]
  - Revert "fs: protect backing files with rcu" (Zhou Yuhang) [bug:354726]
  - Revert "fs: add file_ref" (Zhou Yuhang) [bug:354726]
  - Revert "fs: port files to file_ref" (Zhou Yuhang) [bug:354726]
  - virtcca/vgic: Fix the issue where QEMU fails to load the image. (Hao Ge) [task:369181]
  - OPENEULER: Bug fix: Resolve the issue of host hard lockup (Hao Ge) [task:369181]
  - OPENEULER: VirtCCA: The cvm removes the vcpu binding limit. (gongchangsui) [task:369181]
  - OPENEULER: VirtCCA: Improve nfs workqueue bind method (gongchangsui) [task:369181]
  - OPENEULER: VirtCCA: Intercept the situation where devices with both NVM adn CVM passthrough under same PCIe root port (gongchangsui) [task:369181]
  - OPENEULER: VirtCCA: an interface to retrieve the TMI version is added (gongchangsui) [task:369181]
  - OPENEULER: VirtCCA: cvm support UEFI boot (gongchangsui) [task:369181]
  - OPENEULER: virtCCA Feature: remove unused interfaces and add cpumask check (panhengchang) [task:369181]
  - OPENEULER: virtcca feature : security rectification (yangxiangkai) [task:369181]
  - iommu/arm-smmu-v3: Retire disable_bypass parameter (Robin Murphy) [task:369181]
  - OPENEULER: virtcca bugfix: correct array copy for hpre_addr (liupingwei) [task:369181]
  - OPENEULER: virtcca feature : disable swiotlb for passthrough device (panhengchang) [task:369181]
  - OPENEULER: virtcca feature : force vring alloc use dma api (panhengchang) [task:369181]
  - OPENEULER: virtcca feature: enable unmap swiotlb buffer to save iotlb cvm memory (panhengchang) [task:369181]
  - OPENEULER: virtcca feature : SM Cryptographic Aacceleration. (liupingwei) [task:369181]
  - OPENEULER: virtcca feature : transfer smmu_vmid (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature : GPU supports maximum 1G page table mapping. (yangxiangkai) [task:369181]
  - OPENEULER: virtcca bugfix: compile warning clean (yangxiangkai) [task:369181]
  - OPENEULER: virtcca bugfix: clear device msi address (yangxiangkai) [task:369181]
  - OPENEULER: virtcca bugfix: compile warning clean (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: msi place modify (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: fix msi iova map (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: extract the function to the virtcca_coda.c file (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: virtcca feature: read or write msi forwarding to the secure world (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: read or write bar space forwarding to the secure world (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: read or write config space forwarding to secure world (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: activate confidential vm to set security device s_s2ttbr (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: set device security properties (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: secure device page fault (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: vfio driver dma map (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: bind the kvm handle of cvm with smmu domain (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: vfio attach the device list to secure world (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: fix warnings (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: secure smmu doc (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: secure smmu init (yangxiangkai) [task:369183]
  - OPENEULER: virtcca bugfix: compile warning clean (yangxiangkai) [task:369181]
  - OPENEULER: cvm_tsi: add support virtcca attestation (chenzheng) [task:369181]
  - OPENEULER: gicv3: add lpi support for cvm guest (Jingxian He) [task:369181]
  - OPENEULER: mm: enable swiotlb alloc for cvm share mem (Jingxian He) [task:369181]
  - OPENEULER: pmu: enable pmu phys irq inject for cvm (Jingxian He) [task:369181]
  - OPENEULER: kvm: add virtcca cvm host feature (Jingxian He) [task:369181]
  - OPENEULER: kvm: add new kvm_type for cvm (Ju Fu) [task:369181]
  - sockmap: Fix crash issue caused by the uninitialized skb->sockmap (Yun Lu) [task:466225]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.3.v2505
changelog:
  - sched/deadline: Fix schedstats vs deadline servers (Huang Shijie) [task:354674]
  - EULER: sched/sysctl: Add CFTYPE_NOT_ON_ROOT for qos_level (Wang Tao) [task:467360]
  - EULER: sched/qos: Fix qos throttling in SMT expelled (Liu Kai) [task:467360]
  - EULER: sched: fixed offline group hung task issue under high load scenarios (Liu Kai) [task:467360]
  - EULER: sched/fair: Fix qos_timer deadlock when cpuhp offline (Wenyu Huang) [task:467360]
  - EULER: sched: Introduce qos smt expeller for co-location (Guan Jing) [task:467360]
  - EULER: sched/fair: Add cmdline nosmtexpell (Guan Jing) [task:467360]
  - EULER: sched/fair: Introduce QOS_SMT_EXPELL priority reversion mechanism (Guan Jing) [task:467360]
  - EULER: sched/fair: Start tracking qos_offline tasks count in cfs_rq (Guan Jing) [task:467360]
  - EULER: sched: Add tracepoint for qos smt expeller (Guan Jing) [task:467360]
  - EULER: sched: Add statistics for qos smt expeller (Guan Jing) [task:467360]
  - EULER: sched: Implement the function of qos smt expeller (Guan Jing) [task:467360]
  - EULER: sched: Introduce priority load balance for qos scheduler (Song Zhang) [task:467360]
  - config: Enable qos scheduler config (liwanwu) [task:467360]
  - EULER: sched: Introduce handle priority reversion mechanism (Zhang Qiao) [task:467360]
  - EULER: sched: Support kill boost for offline task (Zhang Qiao) [task:467360]
  - EULER: sched: Throttle qos cfs_rq when current cpu is running online task (Zhang Qiao) [task:467360]
  - EULER: sched: Introduce qos scheduler for co-location (Zhang Qiao) [task:467360]
  - sched/syscall: Make __setscheduler_params non-static (liwanwu) [task:467360]
  - filemap: move prefaulting out of hot write path (Dave Hansen) [task:456354]
  - arch/arm64: Add a 5000C series SOC_ID_PS23064 processing (liyouhong) [bug:347952]
  - kernel.spec: Fixing an extra abi package in packaging. (lihaofeng) [task:470205]
  - entry: Inline syscall_exit_to_user_mode() (Charlie Jenkins) [task:456354]
  - LoongArch: entry: Migrate ret_from_fork() to C (Charlie Jenkins) [task:456354]
  - riscv: entry: Split ret_from_fork() into user and kernel (Charlie Jenkins) [task:456354]
  - riscv: entry: Convert ret_from_fork() to C (Charlie Jenkins) [task:456354]
  - treewide: context_tracking: Rename CONTEXT_* into CT_STATE_* (Valentin Schneider) [task:456354]
  - fs: port files to file_ref (Christian Brauner) [task:444220]
  - fs: add file_ref (Christian Brauner) [task:444220]
  - fs: protect backing files with rcu (Christian Brauner) [task:444220]
  - fs: remove f_version (Christian Brauner) [bug:354726]
  - pipe: use f_pipe (Christian Brauner) [bug:354726]
  - fs: add f_pipe (Christian Brauner) [bug:354726]
  - ubifs: store cookie in private data (Christian Brauner) [bug:354726]
  - ufs: store cookie in private data (Christian Brauner) [bug:354726]
  - udf: store cookie in private data (Christian Brauner) [bug:354726]
  - proc: store cookie in private data (Christian Brauner) [bug:354726]
  - ocfs2: store cookie in private data (Christian Brauner) [bug:354726]
  - input: remove f_version abuse (Christian Brauner) [bug:354726]
  - ext4: store cookie in private data (Christian Brauner) [bug:354726]
  - ext2: store cookie in private data (Christian Brauner) [bug:354726]
  - affs: store cookie in private data (Christian Brauner) [bug:354726]
  - fs: add generic_llseek_cookie() (Christian Brauner) [bug:354726]
  - fs: use must_set_pos() (Christian Brauner) [bug:354726]
  - fs: add must_set_pos() (Christian Brauner) [bug:354726]
  - fs: add vfs_setpos_cookie() (Christian Brauner) [bug:354726]
  - s390: remove unused f_version (Christian Brauner) [bug:354726]
  - ceph: remove unused f_version (Christian Brauner) [bug:354726]
  - adi: remove unused f_version (Christian Brauner) [bug:354726]
  - include: linux: Inline the topology_get_cpu_scale function (Can Peng) [task:443191]
  - OPENEULER: mm/oom_kill: fix NULL pointer dereference in memcg_print_bad_task() (Jinjiang Tu) [task:467362]
  - memcg: enable CONFIG_MEMCG_OOM_PRIORITY by default (lihongfu) [task:467362]
  - OPENEULER: memcg: Add sysctl memcg_qos_enable (Jing Xiangfeng) [task:467362]
  - OPENEULER: memcg: support priority for oom (Jing Xiangfeng) [task:467362]
  - config: enable CONFIG_MEMCG_V1_RECLAIM and CONFIG_CGROUP_V1_KILL (lihongfu) [task:467362]
  - OPENEULER: memcg: introduce per-memcg reclaim interface (Lu Jialin) [task:467362]
  - OPENEULER: memcg: export high_async_ratio to userland (Lu Jialin) [task:467362]
  - OPENEULER: memcg: enable memcg async reclaim (Lu Jialin) [task:467362]
  - OPENEULER: memcg: Export memory.events{local} from cgroupv2 to cgroupv1 (Lu Jialin) [task:467362]
  - OPENEULER: memcg: Export memcg.{min/low/high} from cgroupv2 to cgroupv1 (Lu Jialin) [task:467362]
  - OPENEULER: cgroup: Export cgroup.kill from cgroupv2 to cgroupv1 (Lu Jialin) [task:467362]
  - Revert "configs/arm64: open some virtcca config" (Hao Ge) [task:369181]
  - configs/arm64: open some virtcca config (Hao Ge) [task:369181]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.4.v2505
changelog:
  - ksaf: keep server code consistent with desktop (penghuaihe) [task:470513]
  - ksaf: realize ksaf_d_path interface (penghuaihe) [task:392829]
  - configs/arm64: open some virtcca config (Hao Ge) [task:369181]
  - arm64: add PHYTIUM series into spectre_v4 safe list (hehuiwen) [bug:353746]
  - arm64: add PHYTIUM into spectre_v2 safe list (Jackie Liu) [bug:353746]
  - LeapIoRaid: Update verion to 1.02.02.00 (tanzheng) [task:462896]
  - memcg: fix compile error on biv_defconfig (lihongfu) [task:472699]
  - fs: place f_ref to 3rd cache line in struct file to resolve false sharing (Pan Deng) [task:456354]
  - LoongArch: tpm: Add a driver for Loongson TPM device (Qunqin Zhao) [task:466348]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.5.v2505
changelog:
  - spec: Add Module.kabi_loongarch64 to kernel source package (Jiangshan Yi) [task:443413]
  - kabi: Add kabi extended symvers for x86_64 and aarch64 (Jiangshan Yi) [task:443413]
  - kabi: initialize kabi list and symvers for x86_64 and aarch64 (Jiangshan Yi) [task:443413]
  - loongarch/kabi: Add kabi extended whitelist for loongarch (lifangxu) [task:482379]
  - loongarch/kabi: Add kabi whitelist for loongarch (lifangxu) [task:482379]
  - kabi: reserve space for struct kernel_param_ops (Wang Yan) [task:467006]
  - kabi: reserve space for struct uts_namespace (Wang Yan) [task:467006]
  - kabi: reserve space for kthread and workqueue (Wang Yan) [task:467006]
  - kabi: include/msi: reserve space for msi expansion (lifangxu) [task:448261]
  - arm64: config: enable CONFIG_COMPAT (pengyu) [bug:364829]
  - arm64/cputype: Remove the redundant cputype (Riwen Lu) [task:453488, task:472129]
  - PHYTIUM: arm/arm64: Bugfix the CPU MPIDR definition of phytium FTC303 core (Wang Yinfeng) [task:453488, task:472129]
  - OPENEULER: 3snic: use sssnic as kernel driver name (weiwei1) [bug:361125]
  - OPENEULER: improve 3SNIC 910/920/930 NIC driver (weiwei1) [bug:361125]
  - PCI/VGA: add change boot vga device support v2 (Shixiong Ou) [task:347429]
  - tcp/dccp: Add another way to allocate local ports in bind() (luoxuanqiang) [task:452905]
  - PHYTIUM: spi: phytium: Fix SPI IRQ panic on boot issue (Liu Dalin) [bug:367933]
  - PHYTIUM: spi: phytium: Bugfix phytium_spi_irq panic on boot (Peng Min) [bug:367933]
  - perf/x86/zhaoxin: Fix instructions error by missing fixedctr member (tanze) [bug:365143]
  - kabi: pad anon_vma for kabi (Qingshuang Fu) [task:461339]
  - kernel.spec: Fixing compiling 64k page size kernel has compilation issues (lihaofeng) [task:472819]
  - x86: Implement Hygon's LMC to support both SSE2 and AVX2 (Can Peng) [bug:358867]
  - config: open FS_ENCRYPTION on x86 (chengang) [bug:364375, bug:347118]
  - drm/ast: use DRM_GEM_SHMEM_DRIVER_OPS_NO_MAP_SGT (Shixiong Ou) [task:449981]
  - drm/shmem-helper: Import dmabuf without mapping its sg_table (Shixiong Ou) [task:449981]
  - PHYTIUM: PCI: Add ACS quirk for phytium root and switch ports (Xiao Cong) [task:477923]
  - iommu: make ft2500 iommu domain IDENTITY by default (Zheng Tan) [bug:353158]
  - locking: The Zhaoxin NUMA lock is disabled by default (Can Peng) [task:468935]
  - HYGON: optimize TDM driver code logic to avoid warning (chench) [bug:346920]
  - LOONGSON: LoongArch: 2K3000 GMAC support. (wanghongliang) [task:474031]
  - HYGON: crypto: ccp: add "tdm_guard" as kernel and module parameter (niuyongwen) [bug:358365]
  - LOONGSON: LoongArch: megaraid: Add udelay to avoid data error caused by dma sequence (zhangtianyang) [task:469297]
  - LOONGSON: LoongArch: nvme: Add udelay to avoid data error caused by dma sequence (Juxin Gao) [task:469297]
  - LOONGSON: LoongArch: Add pwm driver support. (Juxin Gao) [task:469297]
  - LOONGSON: LoongArch: support CONFIG_SCHED_MC (wanghongliang) [task:469297]
  - LOONGSON: LoongArch: CONFIG_NR_CPUS expanded to 2048 (Juxin Gao) [task:469297]
  - Maintainer: update KYLIN-MAINTAINERS (huhai)
  - Maintainer: update KYLIN-MAINTAINERS (huhai)
  - kabi: kvm: reserve some space for kABI (Qingshuang Fu) [task:461337]
  - kabi: pad the free_area struct (Qingshuang Fu) [task:461339]
  - kabi: pad the deferred_split queue for the kabi checker (Qingshuang Fu) [task:461339]
  - kabi: hide capture_control from kabi checker (Qingshuang Fu) [task:461339]
  - kabi: net: reserve some space for kABI (Qingshuang Fu) [task:461337]
  - kabi: bpf: reserve some space for kABI (Qingshuang Fu) [task:461337]
  - kabi: pad the page_frag_cache for the kabi (Qingshuang Fu) [task:461339]
  - kabi: pad mmu_notifier functions for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the memory_failure_stats for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the kmem_cache structure (Qingshuang Fu) [task:461339]
  - kabi: pad the folio_batch struct (Qingshuang Fu) [task:461339]
  - kabi: pad the zone structures for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the wait_page_queue for the kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the lru_gen functions for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the tlbflush_unmap_batch struct for the KABI (Qingshuang Fu) [task:461339]
  - kabi: pad the swap_cluster_info structure for KABI (Qingshuang Fu) [task:461339]
  - kabi: pad the shrink_control structure for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the percpu structures (Qingshuang Fu) [task:461339]
  - kabi: reserve space for RCU (Wang Yan) [task:461338]
  - kabi: reserve space for device model (Wang Yan) [task:461338]
  - kabi: reserve space for tty subsystem (Wang Yan) [task:461338]
  - kabi: reserve space for encryption algorithm framework (Wang Yan) [task:461338]
  - kabi: reserve space for rt_mutex_waiter (Wang Yan) [task:461338]
  - kabi: reserve space for workqueue (Wang Yan) [task:461338]
  - kabi: reserve space for watchdog device drivers (Wang Yan) [task:461338]
  - kabi: reserve space for tracking and debugging (Wang Yan) [task:461338]
  - kabi: reserve space for sunrpc (Wang Yan) [task:461338]
  - kabi: reserve space for module_sect_attr (Wang Yan) [task:461338]
  - kabi: reserve space for keys/keyrings (Wang Yan) [task:461338]
  - kabi: reserve space for iommu_iotlb_gather (Wang Yan) [task:461338]
  - kabi: reserve space for I2C subsystem (Wang Yan) [task:461338]
  - kabi: reserve space for fwnode_handle (Wang Yan) [task:461338]
  - kabi: reserve space for terminal mechanism (Wang Yan) [task:461338]
  - kabi: reserve space for task_delay_info (Wang Yan) [task:461338]
  - kabi: reserve space for cpuidle (Wang Yan) [task:461338]
  - kabi: reserve space for linux_binprm (Wang Yan) [task:461338]
  - kabi: reserve space for PCI subsystem (Wang Yan) [task:461338]
  - kabi: reserve space for process management and scheduling (Wang Yan) [task:461338]
  - kabi: time: Add kabi reserve time (lihaofeng) [task:461336]
  - kabi: mm: Add kabi reserve memory management (lihaofeng) [task:461336]
  - kabi: power: Add kabi reserve energy management (lihaofeng) [task:461336]
  - kabi: vfs: File system and vfs add kabi reserve (lihaofeng) [task:461336]
  - kabi: scsi: Add kabi reserve (lihaofeng) [task:461336]
  - kabi: block: Add kabi reserve (lihaofeng) [task:461336]
  - ACPI: PPTT: Fix processor subtable walk (Jeremy Linton) [bug:363349]
  - mm/codetag: clear tags before swap (David Wang)
  - mm/codetag: swap tags when migrate pages (David Wang)
  - filemap_alloc: warp filemap_alloc_folio_node function with alloc_hooks (Jackie Liu)


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.6.v2505
changelog:
  - LOONGSON: LoongArch: loongarch/kvm: fix pch pic spinlock dead lock (Xianglai Li) [bug:346647]
  - LOONGSON: LoongArch: sync kvm head file from upstream (Xianglai Li) [task:482361]
  - LOONGSON: LoongArch: fix migrate issue (Song Gao) [task:482361]
  - LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset() (Tianyang Zhang) [bug:368017]
  - loongarch: config: enable CONFIG_COMPAT (pengyu) [bug:371643]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.7.v2505
changelog:
  - fs: export some overlayfs interface (penghuaihe) [task:392829]
  - tpm: tpm_tis: Adapt spi tcm2 card ZIC0603 to x86 (wudandan) [task:220240]
  - loongarch: disable CONFIG_DM_VDO (zhanggenjian) [bug:363685]
  - Revert "EULER: scheduler: Create SDTL_SKIP flag to skip topology level" (liwanwu) [task:485185]
  - Revert "EULER: scheduler: Add runtime knob sysctl_sched_cluster" (liwanwu) [task:485185]
  - Revert "EULER: scheduler: Add boot time enabling/disabling of cluster scheduling" (liwanwu) [task:485185]
  - Revert "EULER: scheduler: Disable cluster scheduling by default" (liwanwu) [task:485185]
  - gitmessage: update template for git commit message (Jiangshan Yi) [task:488923]
  - EULER: scheduler: Disable cluster scheduling by default (Yicong Yang) [task:485185]
  - EULER: scheduler: Add boot time enabling/disabling of cluster scheduling (Tim Chen) [task:485185]
  - EULER: scheduler: Add runtime knob sysctl_sched_cluster (Tim Chen) [task:485185]
  - EULER: scheduler: Create SDTL_SKIP flag to skip topology level (Tim Chen) [task:485185]
  - nvmet: remove old function prototype (Maurizio Lombardi) [bug:289269]
  - nvmet: Fix crash when a namespace is disabled (Hannes Reinecke) [bug:289269]
  - nvmet-loop: avoid using mutex in IO hotpath (Nilay Shroff) [bug:289269]
  - nvmet: support reservation feature (Guixin Liu) [bug:289269]
  - nvme: add reservation command's defines (Guixin Liu) [bug:289269]
  - nvme: host: fix double-free of struct nvme_id_ns in ns_update_nuse() (Shin'ichiro Kawasaki) [bug:289269]
  - nvme: add csi, ms and nuse to sysfs (Daniel Wagner) [bug:289269]
  - nvme: rename ns attribute group (Daniel Wagner) [bug:289269]
  - nvme: refactor ns info helpers (Daniel Wagner) [bug:289269]
  - nvme: move ns id info to struct nvme_ns_head (Daniel Wagner) [bug:289269]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.9.v2505
changelog:
  - sched/qos:fix logic error in check_qos_validation interface (luoliang) [task:546033]
  - interactive_mark: fix sleeping lock usage in get_interactive_weight() (Jackie Liu) [task:514261]
  - kernel/interactive_mark.c: Fix debug_lock warn on interactive_hlist_lock (pengyu) [task:422481]
  - kabi: add kysec kabi white list (penghuaihe) [task:543735]
  - security/ksaf: fix kabi broken problem (zhubing) [bug:429581]
  - sched/qos: Refactor QoS scheduler (gonglinkai) [task:514359]
  - OPENEULER: drivers: update Yunsilicon driver to version 2406_rc16 (Tian Xin) [bug:382245]
  - config: enable CONFIG_PCNET32 (zhulei) [bug:386187, task:514853]
  - RDMA/mlx5: Ensure created mkeys always have a populated rb_key (Jason Gunthorpe) [task:442359]
  - mm/codetag: move tag retrieval back upfront in __free_pages() (David Wang) [task:510759]
  - mm: avoid extra mem_alloc_profiling_enabled() checks (Suren Baghdasaryan) [task:510759]
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (Ranjan Kumar) [task:462591] {CVE-2025-37861}
  - scsi: mpi3mr: Support for Segmented Hardware Trace buffer (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Avoid reply queue full condition (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Fix pending I/O counter (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Update consumer index of reply queues after every 100 replies (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Return complete ioc_status for ioctl commands (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Prevent PCI writes from driver during PCI error recovery (Sumit Saxena) [task:462591]
  - scsi: mpi3mr: Support PCI Error Recovery callback handlers (Sumit Saxena) [task:462591]
  - scsi: mpi3mr: Add ioctl support for HDB (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Trigger support (Ranjan Kumar) [task:462591]
  - scsi: pmcraid: Add missing scsi_device_put() in pmcraid_eh_target_reset_handler() (Hannes Reinecke) [task:462591]
  - scsi: megaraid: Fix up debug message in megaraid_abort_and_reset() (Hannes Reinecke) [task:462591]
  - scsi: aic79xx: Fix up NULL command in ahd_done() (Hannes Reinecke) [task:462591]
  - scsi: message: fusion: Initialize return value in mptfc_bus_reset() (Hannes Reinecke) [task:462591]
  - scsi: mpi3mr: Split off bus_reset function from host_reset (Hannes Reinecke) [task:462591]
  - scsi: pmcraid: Select device in pmcraid_eh_target_reset_handler() (Hannes Reinecke) [task:462591]
  - scsi: pmcraid: Select device in pmcraid_eh_bus_reset_handler() (Hannes Reinecke) [task:462591]
  - scsi: qla1280: Separate out host reset function from qla1280_error_action() (Hannes Reinecke) [task:462591]
  - scsi: sym53c8xx_2: Rework reset handling (Hannes Reinecke) [task:462591]
  - scsi: sym53c8xx_2: Split off bus reset from host reset (Hannes Reinecke) [task:462591]
  - scsi: ips: Do not try to abort command from host reset (Hannes Reinecke) [task:462591]
  - scsi: megaraid: Pass in NULL scb for host reset (Hannes Reinecke) [task:462591]
  - scsi: ibmvfc: Open-code reset loop for target reset (Hannes Reinecke) [task:462591]
  - scsi: aic79xx: Do not reference SCSI command when resetting device (Hannes Reinecke) [task:462591]
  - scsi: aic79xx: Make BUILD_SCSIID() a function (Hannes Reinecke) [task:462591]
  - scsi: aic7xxx: Do not reference SCSI command when resetting device (Hannes Reinecke) [task:462591]
  - scsi: aic7xxx: Make BUILD_SCSIID() a function (Hannes Reinecke) [task:462591]
  - scsi: bnx2fc: Do not rely on a SCSI command for LUN or target reset (Hannes Reinecke) [task:462591]
  - scsi: qedf: Use FC rport as argument for qedf_initiate_tmf() (Hannes Reinecke) [task:462591]
  - scsi: message: fusion: Open-code mptfc_block_error_handler() for bus reset (Hannes Reinecke) [task:462591]
  - scsi: message: fusion: Correct definitions for mptscsih_dev_reset() (Hannes Reinecke) [task:462591]
  - scsi: message: fusion: Simplify mptfc_block_error_handler() (Hannes Reinecke) [task:462591]
  - net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (Vladimir Oltean) [task:466574] {CVE-2025-37945}
  - net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() (Vladimir Oltean) [task:466574]
  - net: phy: phy_device: fix PHY WOL enabled, PM failed to suspend (Youwan Wang) [bug:352220, bug:352226, bug:355329]
  - cgroup/misc: Introduce misc.events.local (Xiu Jianfeng) [task:451666]
  - mm, slab: clean up slab->obj_exts always (Zhenhua Huang) [task:466594] {CVE-2025-37908}
  - alloc_tag: uninline code gated by mem_alloc_profiling_key in slab allocator (Suren Baghdasaryan) [task:466594]
  - mm: remove CONFIG_MEMCG_KMEM (Johannes Weiner) [task:466594]
  - memcg: remove the lockdep assert from __mod_objcg_mlstate() (Sebastian Andrzej Siewior) [task:466594]
  - memcg: simple cleanup of stats update functions (Shakeel Butt) [task:466594]
  - sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash (Omar Sandoval) [task:462014] {CVE-2025-37821}
  - add ksaf_check_usb_storage_ro hook to set sd write protect flag (Wang Yan) [bug:377825, bug:378285, bug:378369]
  - security/ksaf: add ksaf_check_usb_storage_ro hook (zhubing) [bug:377825, bug:378285, bug:378369]
  - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Pablo Neira Ayuso) [task:491889] {CVE-2025-38201}
  - netfilter: nf_tables: missing objects with no memcg accounting (Pablo Neira Ayuso) [task:491889]
  - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [task:491889]
  - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [task:491889]
  - netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR (Florian Westphal) [task:491889]
  - ethtool: fail closed if we can't get max channel used in indirection tables (Jakub Kicinski) [task:368345] {CVE-2024-46834}
  - IB/mlx5: Fix potential deadlock in MR deregistration (Or Har-Toov) [task:505905] {CVE-2025-38373}
  - RDMA/mlx5: Fix a race for DMABUF MR which can lead to CQE with error (Yishai Hadas) [task:505905]
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type (Yishai Hadas) [task:448830] {CVE-2025-21888}
  - net: stmmac: enable HW-accelerated VLAN stripping for gmac4 only (Furong Xu) [task:491211]
  - net: stmmac: Fix EST offset for dwmac 5.10 (Kurt Kanzenbach) [task:491211]
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST (Alexis Lothoré) [task:491211] {CVE-2025-38125}
  - net: stmmac: Refactor EST implementation (Rohan G Thomas) [task:491211]
  - net: stmmac: xgmac: EST interrupts handling (Rohan G Thomas) [task:491211]
  - net: stmmac: Add support for HW-accelerated VLAN stripping (Gan, Yi Fang) [task:491211]
  - net: stmmac: reduce dma ring display code duplication (Baruch Siach) [task:491211]
  - net: stmmac: remove extra newline from descriptors display (Baruch Siach) [task:491211]
  - mm/vmalloc: fix data race in show_numa_info() (Jeongjun Park) [task:505891] {CVE-2025-38383}
  - nvme-tcp: sanitize request list handling (Hannes Reinecke) [task:495931] {CVE-2025-38264}
  - llist: add interface to check if a node is on a list. (NeilBrown) [task:495931]
  - PHYTIUM: Add hotplug and hotreset workaround patch for phytium SoCs (liyouhong) [task:472129]
  - PHYTIUM: iommu: smmuv3: Not print information of SMMU 0x10 event (Xiao Cong) [task:472129]
  - Added 5000C and 5000C_E interfaces (liyouhong) [task:472129]
  - mptcp: make fallback action and fallback decision atomic (Paolo Abeni) [task:507077] {CVE-2025-38491}
  - drm/amdgpu: Add basic validation for RAS header (Lijo Lazar) [task:505911] {CVE-2025-38426}
  - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers (Peter Ujfalusi) [task:448829] {CVE-2025-21870}
  - ASoC: SOF: Intel: hda-dai: add support for dspless mode beyond HDAudio (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: Intel: lnl: Do not use LNL specific wrappers in DSPless mode (Peter Ujfalusi) [task:448829]
  - ASoC: SOF: Intel: hda-dai-ops: add SoundWire dspless mode (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: Intel: hda-dai-ops: use dai_type (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: topology: Parse DAI type token for dspless mode (Ranjani Sridharan) [task:448829]
  - ASoC: SOF: Intel: start SoundWire links earlier for LNL+ devices (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: topology: dynamically allocate and store DAI widget->private (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: Intel: hda-dai: remove dspless special case (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: ipc4-topology: allow chain_dma for all supported DAIs (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: ipc4-pcm: fix dma_id for CHAIN_DMA capture (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: ipc4: store number of playback/capture streams (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: Intel: hda-dai-ops: enable chain_dma for ALH (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: Intel: hda: add 'is_chain_dma_supported' callback (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: ops: add new 'is_chain_dma_supported' callback (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: ipc4-topology: change chain_dma handling in dai_config (Pierre-Louis Bossart) [task:448829]
  - drm/amd/display: Check dce_hwseq before dereferencing it (Alex Hung) [task:505929] {CVE-2025-38361}
  - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Dong Chenchen) [task:494275] {CVE-2025-38129}
  - drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer (Srinivasan Shanmugam) [task:376435] {CVE-2024-49918}
  - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (David Hildenbrand) [task:444592] {CVE-2025-21861}
  - mm: migrate_device: use more folio in migrate_device_finalize() (Kefeng Wang) [task:444592]
  - Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken (Pedro Nishiyama) [task:491387] {CVE-2025-38099}
  - Bluetooth: Add quirk for broken READ_VOICE_SETTING (Pedro Nishiyama) [task:491387]
  - perf/x86/intel: Fix crash in icl_update_topdown_event() (Kan Liang) [task:497749] {CVE-2025-38322}
  - espintcp: fix skb leaks (Sabrina Dubroca) [task:482005] {CVE-2025-38057}
  - PM: EM: Fix potential division-by-zero error in em_compute_costs() (Yaxiong Tian) [task:497301] {CVE-2025-38297}
  - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Pablo Neira Ayuso) [task:491667] {CVE-2025-38162}
  - jfs: Fix null-ptr-deref in jfs_ioc_trim (Dylan Wolff) [task:491953] {CVE-2025-38203}
  - exfat: fix double free in delayed_free (Namjae Jeon) [task:491873] {CVE-2025-38206}
  - jfs: fix array-index-out-of-bounds read in add_missing_indices (Aditya Dutt) [task:491905] {CVE-2025-38204}
  - f2fs: fix to bail out in get_new_segment() (Chao Yu) [task:497325] {CVE-2025-38333}
  - f2fs: clean up new_curseg() (Chao Yu) [task:497325]
  - f2fs: fix to handle segment allocation failure correctly (Chao Yu) [task:497325]
  - bridge: mcast: Fix use-after-free during router port configuration (Ido Schimmel) [task:495949] {CVE-2025-38248}
  - btrfs: exit after state insertion failure at btrfs_convert_extent_bit() (Filipe Manana) [task:497321] {CVE-2025-38269}
  - btrfs: rename err to ret in convert_extent_bit() (Anand Jain) [task:497321]
  - btrfs: enhance extent_io_tree error reports (David Sterba) [task:497321]
  - btrfs: make extent state merges more efficient during insertions (Filipe Manana) [task:497321]
  - sync-stable: Change the default Cc stable branch target (Jackie Liu)
  - alloc_tag: skip pgalloc_tag_swap if profiling is disabled (Suren Baghdasaryan) [task:510759]
  - wifi: iwlwifi: don't warn when if there is a FW error (Miri Korenblit) [task:491311] {CVE-2025-38096}
  - media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (Wentao Liang) [task:494929] {CVE-2025-38237}
  - sched/rt: Fix race in push_rt_task (Harshit Agarwal) [task:491955] {CVE-2025-38234}
  - ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (Bard Liao) [task:441316] {CVE-2024-58012}
  - drm/amdgpu: csa unmap use uninterruptible lock (Philip Yang) [task:481993] {CVE-2025-38011}
  - perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq (Adrian Hunter) [task:482163] {CVE-2025-38055}
  - clk: sunxi-ng: h616: Reparent GPU clock during frequency changes (Philippe Simons) [task:482123] {CVE-2025-38041}
  - clk: sunxi-ng: h616: Reparent CPU clock during frequency changes (Andre Przywara) [task:482123]
  - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator (Tejun Heo) [task:482029] {CVE-2025-38012}
  - x86/Kconfig: make CFI_AUTO_DEFAULT depend on !RUST or Rust >= 1.88 (Paweł Anikiel) [task:481877] {CVE-2025-38033}
  - x86/alternatives: Make FineIBT mode Kconfig selectable (Kees Cook) [task:481877]
  - rseq: Fix segfault on registration when rseq_cs is non-zero (Michael Jeanson) [task:482245] {CVE-2025-38067}
  - rseq: Update kernel fields in lockstep with CONFIG_DEBUG_RSEQ=y (Michael Jeanson) [task:482245]
  - rseq: Fix rseq registration with CONFIG_DEBUG_RSEQ (Michael Jeanson) [task:482245]
  - rseq: Fix rseq unregistration regression (Mathieu Desnoyers) [task:482245]
  - rseq: Validate read-only fields under DEBUG_RSEQ config (Mathieu Desnoyers) [task:482245]
  - wifi: ath12k: Avoid memory leak while enabling statistics (P Praneesh) [task:460148] {CVE-2025-37743}
  - wifi: ath12k: Refactor the monitor Rx parser handler argument (Karthikeyan Periyasamy) [task:460148]
  - iio: light: opt3001: fix deadlock due to concurrent flag access (Luca Ceresoli) [task:466236] {CVE-2025-37968}
  - cgroup/misc: Introduce misc.peak (Xiu Jianfeng) [task:451667]
  - btrfs: adjust subpage bit start based on sectorsize (Josef Bacik) [task:466619] {CVE-2025-37931}
  - HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX (Tomasz Pakuła) [task:466581] {CVE-2025-37942}
  - mm/memory_hotplug: fix call folio_test_large with tail page in do_migrate_range (Jinjiang Tu) [task:461947]
  - mm/vmscan: don't try to reclaim hwpoison folio (Jinjiang Tu) [task:461947] {CVE-2025-37834}
  - mm/hwpoison: introduce folio_contain_hwpoisoned_page() helper (Jinjiang Tu) [task:461947]
  - mm: memory-hotplug: check folio ref count first in do_migrate_range (Ma Wupeng) [task:461947]
  - mm: memory-failure: update ttu flag inside unmap_poisoned_folio (Ma Wupeng) [task:461947]
  - mm: memory_hotplug: unify Huge/LRU/non-LRU movable folio isolation (Kefeng Wang) [task:461947]
  - mm: migrate: add isolate_folio_to_list() (Kefeng Wang) [task:461947]
  - mm: memory_hotplug: check hwpoisoned page firstly in do_migrate_range() (Kefeng Wang) [task:461947]
  - mm: memory-failure: add unmap_poisoned_folio() (Kefeng Wang) [task:461947]
  - mm: memory_hotplug: remove head variable in do_migrate_range() (Kefeng Wang) [task:461947]
  - mm/memory-failure: correct comment in me_swapcache_dirty (Miaohe Lin) [task:461947]
  - mm/memory-failure: remove obsolete comment in kill_proc() (Miaohe Lin) [task:461947]
  - mm/memory-failure: fix comment of get_hwpoison_page() (Miaohe Lin) [task:461947]
  - mm/memory-failure: move some function declarations into internal.h (Miaohe Lin) [task:461947]
  - mm/memory-failure: remove obsolete comment in unpoison_memory() (Miaohe Lin) [task:461947]
  - mm/memory-failure: use helper macro task_pid_nr() (Miaohe Lin) [task:461947]
  - mm/memory-failure: don't export hwpoison_filter() when !CONFIG_HWPOISON_INJECT (Miaohe Lin) [task:461947]
  - mm/memory-failure: remove confusing initialization to count (Miaohe Lin) [task:461947]
  - mm/memory-failure: remove unneeded empty string (Miaohe Lin) [task:461947]
  - mm/memory-failure: save some page_folio() calls (Miaohe Lin) [task:461947]
  - mm/memory-failure: add macro GET_PAGE_MAX_RETRY_NUM (Miaohe Lin) [task:461947]
  - mm/memory-failure: remove MF_MSG_SLAB (Miaohe Lin) [task:461947]
  - mm/memory-failure: simplify put_ref_page() (Miaohe Lin) [task:461947]
  - mm/memory-failure: pass the folio to collect_procs_ksm() (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: use folio functions throughout collect_procs() (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: add some folio conversions to unpoison_memory (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: convert hwpoison_user_mappings to take a folio (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: convert memory_failure() to use a folio (Matthew Wilcox (Oracle)) [task:461947]
  - mm: convert hugetlb_page_mapping_lock_write to folio (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: convert shake_page() to shake_folio() (Matthew Wilcox (Oracle)) [task:461947]
  - mm: make page_mapped_in_vma conditional on CONFIG_MEMORY_FAILURE (Matthew Wilcox (Oracle)) [task:461947]
  - mm: return the address from page_mapped_in_vma() (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: pass addr to __add_to_kill() (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: remove fsdax_pgoff argument from __add_to_kill (Matthew Wilcox (Oracle)) [task:461947]
  - mm: rename vma_pgoff_address back to vma_address (Matthew Wilcox (Oracle)) [task:461947]
  - mm: remove vma_address() (Matthew Wilcox (Oracle)) [task:461947]
  - mm: correct page_mapped_in_vma() for large folios (Matthew Wilcox (Oracle)) [task:461947]
  - mm: remove invalidate_inode_page() (Matthew Wilcox (Oracle)) [task:461947]
  - mm: convert isolate_page() to mf_isolate_folio() (Matthew Wilcox (Oracle)) [task:461947]
  - mm: convert soft_offline_in_use_page() to use a folio (Matthew Wilcox (Oracle)) [task:461947]
  - mm: use mapping_evict_folio() in truncate_error_page() (Matthew Wilcox (Oracle)) [task:461947]
  - mm: convert __do_fault() to use a folio (Matthew Wilcox (Oracle)) [task:461947]
  - mm: make mapping_evict_folio() the preferred way to evict clean folios (Matthew Wilcox (Oracle)) [task:461947]
  - wifi: ath11k: update channel list in reg notifier instead reg worker (Wen Gong) [task:460079] {CVE-2025-23133}
  - fs/9p: fix NULL pointer dereference on mkdir (Christian Schoenebeck) [task:459142] {CVE-2025-22070}
  - ksmbd: fix use-after-free in ksmbd_session_rpc_open (Namjae Jeon) [task:466583] {CVE-2025-37926}
  - ksmbd: use __GFP_RETRY_MAYFAIL (Namjae Jeon) [task:466583]
  - ksmbd: add support for supplementary groups (Namjae Jeon) [task:466583]
  - ksmbd: Use struct_size() to improve smb_direct_rdma_xmit() (Thorsten Blum) [task:466583]
  - ksmbd: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET) [task:466583]
  - ksmbd: fix use-after-free in session logoff (Sean Heelan) [task:466589] {CVE-2025-37899}
  - mm/slab: fix warning caused by duplicate kmem_cache creation in kmem_buckets_create (Koichiro Den) [task:461208] {CVE-2024-53065}
  - mm/huge_memory: fix dereferencing invalid pmd migration entry (Gavin Guo) [task:466416] {CVE-2025-37958}
  - memblock: Accept allocated memory before use in memblock_double_array() (Tom Lendacky) [task:466578] {CVE-2025-37960}
  - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (Mikhail Lobanov) [task:466248] {CVE-2025-37957}
  - KVM: SVM: Update SEV-ES shutdown intercepts with more metadata (Peter Gonda) [task:466248]
  - iommu: Fix two issues in iommu_copy_struct_from_user() (Nicolin Chen) [task:466414] {CVE-2025-37900}
  - sfc: fix NULL dereferences in ef100_process_design_param() (Edward Cree) [task:459000] {CVE-2025-37860}
  - net: mctp: unshare packets when reassembling (Matt Johnston) [task:450249] {CVE-2025-21972}
  - btrfs: harden block_group::bg_list against list_del() races (Boris Burkov) [task:462585] {CVE-2025-37856}
  - afs: Fix lock recursion (David Howells) [task:392645] {CVE-2024-53090}
  - sctp: add mutual exclusion in proc_sctp_do_udp_port() (Eric Dumazet) [task:459006] {CVE-2025-22062}
  - bnxt_en: Mask the bd_cnt field in the TX BD properly (Michael Chan) [task:458946] {CVE-2025-22108}
  - btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (Boris Burkov) [task:458898] {CVE-2025-22115}
  - mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in split_large_buddy() (David Hildenbrand) [task:421055] {CVE-2024-57881}
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Ranjan Kumar) [task:429483] {CVE-2024-57804}
  - scsi: mpi3mr: Avoid MAX_PAGE_ORDER WARNING for buffer allocations (Shin'ichiro Kawasaki) [task:429483]
  - scsi: mpi3mr: Add missing spin_lock_init() for mrioc->trigger_lock (Shin'ichiro Kawasaki) [task:429483]
  - scsi: mpi3mr: HDB allocation and posting for hardware and firmware buffers (Ranjan Kumar) [task:429483]
  - scsi: mpi3mr: Driver version update to 8.8.1.0.50 (Ranjan Kumar) [task:429483]
  - scsi: mpi3mr: Update MPI Headers to revision 31 (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Debug ability improvements (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Set the WriteSame Divert Capability in the IOCInit MPI Request (Ranjan Kumar) [task:429483]
  - scsi: mpi3mr: Clear ioctl blocking flag for an unresponsive controller (Ranjan Kumar) [task:429483]
  - scsi: mpi3mr: Set MPI request flags appropriately (Ranjan Kumar) [task:429483]
  - scsi: mpi3mr: Block devices are not removed even when VDs are offlined (Ranjan Kumar) [task:429483]
  - scsi: mpi3mr: Replace deprecated strncpy() with assignments (Justin Stitt) [task:429483]
  - scsi: mpi3mr: Reduce stack usage in mpi3mr_refresh_sas_ports() (Arnd Bergmann) [task:429483]
  - scsi: mpi3mr: Fix mpi3mr_fw.c kernel-doc warnings (Randy Dunlap) [task:429483]
  - scsi: mpi3mr: Fix printk() format strings (Arnd Bergmann) [task:429483]
  - scsi: mpi3mr: Update driver version to 8.5.1.0.0 (Chandrakanth patil) [task:429483]
  - scsi: mpi3mr: Support for preallocation of SGL BSG data buffers part-3 (Chandrakanth patil) [task:429483]
  - scsi: mpi3mr: Support for preallocation of SGL BSG data buffers part-2 (Chandrakanth patil) [task:462591]
  - scsi: mpi3mr: Support for preallocation of SGL BSG data buffers part-1 (Chandrakanth patil) [task:429483]
  - scsi: mpi3mr: Fetch correct device dev handle for status reply descriptor (Chandrakanth patil) [task:429483]
  - scsi: mpi3mr: driver version upgrade to 8.5.0.0.50 (Sumit Saxena) [task:429483]
  - scsi: mpi3mr: Add support for status reply descriptor (Sumit Saxena) [task:429483]
  - scsi: mpi3mr: Increase maximum number of PHYs to 64 from 32 (Sumit Saxena) [task:429483]
  - drm/amd/display: prevent hang on link training fail (Brendan Tam) [task:462408] {CVE-2025-37870}
  - net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads (Jonathan Currier) [task:461948] {CVE-2025-37833}
  - net: txgbe: fix memory leak in txgbe_probe() error path (Abdun Nihaal) [task:462854] {CVE-2025-37872}
  - objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq() (Josh Poimboeuf) [task:458971] {CVE-2025-40014}
  - ksmbd: fix null pointer dereference in alloc_preauth_hash() (Namjae Jeon) [task:459701] {CVE-2025-22037}
  - RDMA/mlx5: Fix cache entry update on dereg error (Michael Guralnik) [task:442359]
  - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (Yishai Hadas) [task:442359] {CVE-2025-21732}
  - RDMA/mlx5: Fix MR cache temp entries cleanup (Michael Guralnik) [task:442359]
  - RDMA/mlx5: Fix counter update on MR cache mkey creation (Michael Guralnik) [task:442359]
  - RDMA/mlx5: Drop redundant work canceling from clean_keys() (Michael Guralnik) [task:442359]
  - RDMA/mlx5: Change check for cacheable mkeys (Or Har-Toov) [task:442359]
  - RDMA/mlx5: Implement mkeys management via LIFO queue (Shay Drory) [task:442359]
  - spi: fsl-qspi: Fix double cleanup in probe error path (Kevin Hao) [task:462583]
  - spi: fsl-qspi: use devm function instead of driver remove (Han Xu) [task:462583] {CVE-2025-37842}
  - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. (Kuniyuki Iwashima) [task:458897] {CVE-2025-22111}
  - net_sched: drr: Fix double list add in class with netem as child qdisc (Victor Nogueira) [task:463929]
  - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV (Srinivasan Shanmugam) [task:458999] {CVE-2025-38104}
  - bpf: Fix kmemleak warning for percpu hashmap (Yonghong Song) [task:461956] {CVE-2025-37807}
  - bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP (Andrea Righi) [task:461956]
  - bpf: fix UML x86_64 compile failure (Maciej Żenczykowski) [task:461956]
  - bpf: save extended inner map info for percpu array maps as well (Andrii Nakryiko) [task:461956]
  - bpf: Fix JIT of is_mov_percpu_addr instruction. (Alexei Starovoitov) [task:461956]
  - bpf: handle CONFIG_SMP=n configuration in x86 BPF JIT (Andrii Nakryiko) [task:461956]
  - bpf: inline bpf_map_lookup_elem() helper for PERCPU_HASH map (Andrii Nakryiko) [task:461956]
  - bpf: inline bpf_map_lookup_elem() for PERCPU_ARRAY maps (Andrii Nakryiko) [task:461956]
  - bpf: inline bpf_get_smp_processor_id() helper (Andrii Nakryiko) [task:461956]
  - bpf: add special internal-only MOV instruction to resolve per-CPU addrs (Andrii Nakryiko) [task:461956]
  - arm64: mops: Do not dereference src reg for a set operation (Keir Fraser) [task:462561] {CVE-2025-37846}
  - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (David Thompson) [task:462578] {CVE-2025-37866}
  - fs/ntfs3: Keep write operations atomic (Lizhi Xu) [task:461953] {CVE-2025-37806}
  - fs/ntfs3: Separete common code for file_read/write iter/splice (Konstantin Komarov) [task:461953]
  - fs/ntfs3: Use function file_inode to get inode from file (Konstantin Komarov) [task:461953]
  - mei: vsc: Fix fortify-panic caused by invalid counted_by() use (Hans de Goede) [task:462071] {CVE-2025-37816}
  - scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer() (Chenyuan Yang) [task:461957] {CVE-2025-37826}
  - scsi: ufs: mcq: Use ufshcd_mcq_req_to_hwq() to simplify updating hwq (ChanWoo Lee) [task:461957]
  - accel/ivpu: Fix PM related deadlocks in MS IOCTLs (Jacek Lawrynowicz) [task:462563] {CVE-2025-37848}
  - accel/ivpu: Fix deadlock in ivpu_ms_cleanup() (Jacek Lawrynowicz) [task:462593] {CVE-2025-37847}
  - kernel/dma: Fix the kabi issue (liyouhong) [task:522789]
  - PHYTIUM: pswiotlb: Check if min_align_mask of dma is valid (liyouhong) [task:457982]
  - PHYTIUM: pswiotlb: Pass dma direction to pswiotlb straightly (liyouhong) [task:457982]
  - kernel/dma: Add the dma-pswiotlb intermediate translation layer (liyouhong) [task:435962]
  - PHYTIUM: pswiotlb: Fix kernel panic when the dma phy address is DMA_MAPPING_ERROR (Cui Chao) [task:435962]
  - PHYTIUM: pswiotlb: Add bypass rules of pswiotlb for specific application scenes (liyouhong) [task:435962]
  - PHYTIUM: pswiotlb: Avoid releasing memory repeatedly for coherent dma memory free (Cui Chao) [task:435962]
  - PHYTIUM: pswiotlb: Add support for PS24080 (liyouhong) [task:435962]
  - PHYTIUM: pswiotlb: Adapt for coherent dma memory allocation bypass SMMU (Cui Chao) [task:435962]
  - REDHAT: spec: Fix internal "File listed twice" errors (Prarit Bhargava) [task:506475]
  - REDHAT: spec: enable dependencies generation (Prarit Bhargava) [task:504405]
  - PHYTIUM: mmu_notifiers: Add a new callback in __flush_tlb_range (Haofeng Li) [task:482839, task:514853]
  - PHYTIUM: ras: phytium: Identify and report Phytium custom errors (Haofeng Li) [task:482839, task:514853]
  - PHYTIUM: gpio:phytium: Add driver version messages (Li Yuze) [task:453481, task:482839, task:514853]
  - PHYTIUM: gpio:phytium: Unable and clear irq before register (Li Yuze) [task:453481, task:482839, task:514853]
  - PHYTIUM: gpio: phytium: Improve gpio set affinity logic (Li Yuze) [task:453481, task:482839, task:514853]
  - gpio: gpio-phytium-sgpio: Add Phytium SGPIO driver (Chen Baozi) [task:194813, task:482839, task:514853]
  - PHYTIUM: qspi: phytium: Slove the capacity register configured error issue (Peng Min) [task:453481, task:482839, task:514853]
  - PHYTIUM: qspi: phytium: Capacity register can't be configured without flash node (Peng Min) [task:453481, task:482839, task:514853]
  - PHYTIUM: qspi: phytium: Fix the cmd_port register incorrectly configured issue (Peng Min) [task:453481, task:482839, task:514853]
  - PHYTIUM: qspi: phytium: Dynamically get the clock in the ACPI table (Peng Min) [task:453481, task:482839, task:514853]
  - PHYTIUM: qspi: phytium: Adapt flash different capacity based on CPU MPIDR (Peng Min) [task:453481, task:482839, task:514853]
  - PHYTIUM: UEFI mode acpi table support for qspi/spi driver (Wang Hanmo) [task:453481, task:482839, task:514853]
  - PHYTIUM: qspi: Add QSPI driver version description (Peng Min) [task:453481, task:482839, task:514853]
  - PHYTIUM: i2c-2.0:phytium: Fixed the bug of combining two interrupts. (Wu Jinyong) [task:453481, task:482939, task:514853]
  - PHYTIUM: i2c-v2: Modify the data transfer method (Wu Jinyong) [task:453481, task:482839, task:514853]
  - PHYTIUM: i2c_v2: Add support for phytium i2c-v2 driver (Wu Jinyong) [task:453481, task:482839, task:514853]
  - crypto: algif_hash - fix double free in hash_accept (Ivan Pravdin) [task:482127] {CVE-2025-38079}
  - crypto: lzo - Fix compression buffer overrun (Herbert Xu) [task:476205, task:482097] {CVE-2025-38068}
  - virtgpu: don't reset on shutdown (Michael S. Tsirkin) [task:482143]
  - virtio: break and reset virtio devices on device_shutdown() (Michael S. Tsirkin) [task:482143] {CVE-2025-38064}
  - eventpoll: don't decrement ep refcount while still holding the ep mutex (Linus Torvalds) [task:502303] {CVE-2025-38349}
  - livepatch/test_module: Fix compilation errors on ARM (wudandan) [task:425656]
  - EULER: scheduler: Disable cluster scheduling by default (Yicong Yang) [task:485185]
  - EULER: scheduler: Add boot time enabling/disabling of cluster scheduling (Tim Chen) [task:485185]
  - EULER: scheduler: Add runtime knob sysctl_sched_cluster (Tim Chen) [task:485185]
  - EULER: scheduler: Create SDTL_SKIP flag to skip topology level (Tim Chen) [task:485185]
  - loongarch/config: Enable randomize_kstack_offset_default (lifangxu) [task:502241]
  - LoongArch: Remove STACK_FRAME_NON_STANDARD(do_syscall) (Tiezhu Yang) [task:502241]
  - LoongArch: Add RANDOMIZE_KSTACK_OFFSET support (Jinjie Ruan) [task:502241]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.10.v2505
changelog:
  - REDHAT: rpmbuild: Remove stale .tmp_versions code and comments (Prarit Bhargava) [task:557881]
  - REDHAT: BuildRequires: lld for build with selftests for x86 (Jan Stancek) [task:557337]
  - net: fix kabi broken problem (xiaolinkui) [task:556049]
  - sched/qos:fix QOS validation logic in sched_setscheduler() (fangqiurong) [task:556331]
  - bpf: fix kabi broken problem (chenyuan) [task:556365]
  - net: fix kabi broken problem. (renpanpan) [task:556055]
  - enable auto_bind_blkcg_memcg in generic_defconfig for x86 and arm64 (wangsong) [task:527359]
  - OPENEULER: cgroup_writeback: bind blkcg and memcg (wangyigen) [task:527359]
  - enable cgroup1_writeback in generic_defconfig for x86 and arm64 (wangsong) [task:527359]
  - OPENEULER: cgroup_writeback: fix deadlock in cgroup1_writeback (Chen Ridong) [task:527359]
  - OPENEULER: cgroup: support cgroup writeback on cgroupv1 (chenridong) [task:527359]
  - OPENEULER: cgroup: factor out __cgroup_get_from_id() for cgroup v1 (Lu Jialin) [task:527359]
  - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state (Mark Rutland) [task:459154] {CVE-2025-22013}
  - sched/qos: Introduce multiple qos level (link) [task:514359]
  - sched/ext: Fix invalid task state transitions on class switch (Andrea Righi) [task:530287] {CVE-2025-39780}
  - sched/ext: Fix scx vs sched_delayed (Peter Zijlstra) [task:530287]
  - sched: Pass correct scheduling policy to __setscheduler_class (Aboorva Devarajan) [task:530287]
  - bpf: Do not include stack ptr register in precision backtracking bookkeeping (Yonghong Song) [task:497309] {CVE-2025-38279}
  - fs: fix is_mnt_ns_file() (Miklos Szeredi) [task:548039]
  - inotify: Fix possible deadlock in fsnotify_destroy_mark (Lizhi Xu) [task:551249]
  - HYGON: arch: Use hlt instead of mwait in cpuidle (zenghongling) [bug:426023]
  - OPENEULER: locking/osq_lock: Avoid false sharing in optimistic_spin_node (Zeng Heng) [task:464565, task:551411]
  - net/sched: sch_qfq: Fix null-deref in agg_dequeue (Xiang Mei) [task:547995] {CVE-2025-40083}
  - readahead: Fix null-ptr-deref in page_cache_ra_unbounded (zhangguodong) [task:533283]
  - fix build kylin security err (mengdehui) [task:546003, task:546001]
  - KVM: arm64: Prevent access to vCPU events before init (Oliver Upton) [task:547765] {CVE-2025-40102}
  - bcache: code cleanup in __bch_bucket_alloc_set() (Coly Li) [task:547435]
  - bcache: call force_wake_up_gc() if necessary in check_should_bypass() (Coly Li) [task:547435]
  - bcache: allow allocator to invalidate bucket in gc (Dongsheng Yang) [task:547435]
  - iommu/vt-d: Disallow dirty tracking if incoherent page walk (Lu Baolu) [task:546613] {CVE-2025-40058}
  - coresight: Fix incorrect handling for return value of devm_kzalloc (Lin Yujun) [task:546805] {CVE-2025-40059}
  - LoongArch: drivers/irqchip: Disable pci_irq_limit when using avec interrupt controller (Juxin Gao) [task:396165]
  - LOONGSON: LoongArch: prevent LS7A Bus Master clearing on kexec (Ming Wang) [task:396165]
  - LOONGSON: LoongArch: limit min pci msi-x/msi vector number when request more than 32 vectors (Juxin Gao) [task:396165]
  - LOONGSON: PCI: irq: Add early_param pci_irq_limit to limit pci irq numbers (Juxin Gao) [task:396165]
  - ALSA: seq: oss: Send fragmented SysEx messages immediately (Takashi Iwai) [task:429534] {CVE-2024-57893}
  - bpf: Forget ranges when refining tnum after JSET (Paul Chaignon) [task:530315] {CVE-2025-39748}
  - netfilter: ctnetlink: remove refcounting in expectation dumpers (Florian Westphal) [task:530227] {CVE-2025-39764}
  - wifi: ath10k: shutdown driver when hardware is unreliable (Kang Yang) [task:530243] {CVE-2025-39746}
  - wifi: ath10k: replace ENOTSUPP with EOPNOTSUPP (Karthikeyan Periyasamy) [task:530243]
  - driver/tpm: fix NULL err when creat vtpm (mengdehui) [task:519155]
  - kalert: Add macros to simplify event report (Huiwen He) [task:470213]
  - kalert: add eBPF kfunc bpf_kalert_report_event (Huiwen He) [task:470213]
  - kalert: add some new types and bitmap-based event list subscription (Huiwen He) [task:470213]
  - kalert: optimize fault event dispatch logic (Huiwen He) [task:470213]
  - kalert: add subscribe kernel fault events support (Huiwen He) [task:470213]
  - kalert: add get kalert channel runtime status support (Huiwen He) [task:470213]
  - kalert: modify kalert_send_reply to accept a prepared skb (Huiwen He) [task:470213]
  - kalert: add set kalert channel parameter support (Huiwen He) [task:470213]
  - kalert: introduce doit mechanism and support nlattr policy (Huiwen He) [task:470213]
  - kalert: Introduce netlink_rcv_skb to handle recv messages (Huiwen He) [task:470213]
  - ksaf: add ksaf_do_exit hook (penghuaihe) [bug:387419]
  - RDMA/hns: Fix double destruction of rsv_qp (wenglianfa) [task:520743] {CVE-2025-38582}
  - Loongarch: Adjust SHMLBA to PAGE_SIZE and use generic SHMLBA (zhangtianyang) [task:528621]
  - parse_longname(): strrchr() expects NUL-terminated string (Al Viro) [task:523423] {CVE-2025-38660}
  - ZHAOXIN: perf/zhaoxin/uncore: Enhance uncore support and fix related bugs (leoliu-oc) [task:527471]
  - KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs (Ewan Hai) [task:527471]
  - wifi: ath12k: Fix memory leak due to multiple rx_stats allocation (Sidhanta Sahu) [task:491947] {CVE-2025-38199}
  - drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities (Peter Shkenev) [task:527977] {CVE-2025-39707}
  - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (Baochen Qiang) [task:527987] {CVE-2025-39732}
  - wifi: ath11k: mac: fix struct ieee80211_sband_iftype_data handling (Kalle Valo) [task:527987]
  - ext4: Make sure BH_New bit is cleared in ->write_end handler (Jan Kara) [task:527387]
  - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (Suren Baghdasaryan) [task:527587] {CVE-2025-38686}
  - gfs2: Validate i_depth for exhash directories (Andrew Price) [task:527583] {CVE-2025-38710}
  - gfs2: Improve gfs2_consist_inode() usage (Andrew Price) [task:527583]
  - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (Zqiang) [task:527575] {CVE-2025-38704}
  - rcu/nocb: Use kthread parking instead of ad-hoc implementation (Frederic Weisbecker) [task:527575]
  - rcu/nocb: Fix segcblist state machine stale comments about timers (Frederic Weisbecker) [task:527575]
  - rcu/nocb: Fix segcblist state machine comments about bypass (Frederic Weisbecker) [task:527575]
  - rcu/nocb: Re-arrange call_rcu() NOCB specific code (Frederic Weisbecker) [task:527575]
  - rcu/nocb: Remove needless LOAD-ACQUIRE (Frederic Weisbecker) [task:527575]
  - nilfs2: do not force clear folio if buffer is referenced (Ryusuke Konishi) [task:440428] {CVE-2025-21722}
  - docs: add KYLIN version range checking macros documentation (Jackie Liu)
  - Revert "selftests: mptcp: join: disable get and dump addr checks" (Gang Yan) [task:525537]
  - iommu/amd: Avoid stack buffer overflow from kernel cmdline (Kees Cook) [task:524419] {CVE-2025-38676}
  - xen: fix UAF in dmabuf_exp_from_pages() (Al Viro) [task:520551] {CVE-2025-38595}
  - bpf: Reject narrower access to pointer ctx fields (Paul Chaignon) [task:520583] {CVE-2025-38591}
  - HID: core: Harden s32ton() against conversion to 0 bits (Alan Stern) [task:520575] {CVE-2025-38556}
  - HID: stop exporting hid_snto32() (Dmitry Torokhov) [task:520575]
  - HID: simplify snto32() (Dmitry Torokhov) [task:520575]
  - eventpoll: Fix semi-unbounded recursion (Jann Horn) [task:520569] {CVE-2025-38614}
  - iio: common: st_sensors: Fix use of uninitialize device structs (Maud Spierings) [task:520121] {CVE-2025-38531}
  - iio: st_sensors: relax WhoAmI check in st_sensors_verify_id() (Kaustabh Chakraborty) [task:520121]
  - KVM: Allow CPU to reschedule while setting per-page memory attributes (Liam Merwick) [task:520115] {CVE-2025-38506}
  - coresight: change coresight_device lock type to raw_spinlock_t (Yeoreum Yun) [task:491391] {CVE-2025-38132}
  - bnxt_en: Fix memory corruption when FW resources change during ifdown (Sreekanth Reddy) [task:532161] {CVE-2025-39810}
  - bnxt_en: Fix possible crash after creating sw mqprio TCs (Michael Chan) [task:532161]
  - crypto: x86/aegis - Add missing error checks (Eric Biggers) [task:530263] {CVE-2025-39789}
  - crypto: x86/aegis - Fix sleeping when disallowed on PREEMPT_RT (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - remove unneeded RETs (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - remove unneeded FRAME_BEGIN and FRAME_END (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - take advantage of block-aligned len (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - optimize partial block handling using SSE4.1 (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - improve assembly function prototypes (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - optimize length block preparation using SSE4.1 (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - don't bother with special code for aligned data (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - eliminate some indirect calls (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - remove no-op init and exit functions (Eric Biggers) [task:530263]
  - security/ksaf: add ksaf hook on usb_deauthorized_device (zhubing) [task:528675]
  - md: make rdev_addable usable for rcu mode (Yang Erkun) [task:523635] {CVE-2025-38621}
  - fs/proc/task_mmu: check p->vec_buf for NULL (Jakub Acs) [task:543785] {CVE-2025-40009}
  - net/smc: fix warning in smc_rx_splice() when calling get_page() (Sidraya Jayagond) [task:543787] {CVE-2025-40012}
  - kydima/build: fix build waring for copy_from_user (mengdehui) [task:537689]
  - mm: swap: check for stable address space before operating on the VMA (Charan Teja Kalla) [task:542815] {CVE-2025-39992}
  - wifi: rtl8xxxu: mark thread_exit() as __noreturn (Jackie Liu) [task:510759]
  - can: j1939: implement NETDEV_UNREGISTER notification handler (Tetsuo Handa) [task:540235] {CVE-2025-39925}
  - net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (Eric Dumazet) [task:540197] {CVE-2025-39900}
  - mm/userfaultfd: fix kmap_local LIFO ordering for CONFIG_HIGHPTE (Sasha Levin) [task:539893] {CVE-2025-39899}
  - dm-stripe: fix a possible integer overflow (Mikulas Patocka) [task:538939] {CVE-2025-39940}
  - dm-stripe: limit chunk_sectors to the stripe size (John Garry) [task:538939]
  - dm: stop using blk_limits_io_{min,opt} (Christoph Hellwig) [task:538939]
  - dm-verity: provide dma_alignment limit in io_hints (Eric Biggers) [task:538939]
  - procfs: fix a locking bug in a vmcore_add_device_dump() error path (Bart Van Assche) [task:451697]
  - virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (David Hildenbrand) [task:451697]
  - virtio-mem: remember usable region size (David Hildenbrand) [task:451697]
  - virtio-mem: mark device ready before registering callbacks in kdump mode (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM ranges in 2nd kernel (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: factor out freeing a list of vmcore ranges (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: factor out allocating a vmcore range and adding it to a list (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: move vmcore definitions out of kcore.h (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: prefix all pr_* with "vmcore:" (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: disallow vmcore modifications while the vmcore is open (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (David Hildenbrand) [task:451697]
  - net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6 (Christoph Paasch) [task:534345] {CVE-2025-39852}
  - net: macb: fix unregister_netdev call order in macb_remove() (luoguangfei) [task:532217] {CVE-2025-39805}
  - net: macb: Convert tasklet API to new bottom half workqueue mechanism (Allen Pais) [task:532217]
  - HYGON: cpu IBRS mitigates hardware vulnerabilities (zhangjun) [task:516399]
  - HYGON: cpu IBPB command flushes all BTB branches (zhangjun) [task:516399]
  - HYGON: crypto: ccp: fix The high priority queue changes cmd_id of the queued elements (xiongmengbiao) [task:516399]
  - HYGON: crypto: ccp: support psp generic ringbuffer (xiongmengbiao) [task:516399]
  - HYGON: crypto: ccp: Remove vpsp's dependency on sev module (xiongmengbiao) [task:516399]
  - HYGON: crypto: ccp: add new pci device id for D3 (chench) [task:516399]
  - mISDN: hfcpci: Fix warning when deleting uninitialized timer (Vladimir Riabchun) [task:532231] {CVE-2025-39833}
  - sched/fair: Fix frequency selection for non-invariant case (Vincent Guittot) [task:525135]
  - panic: implement nmi_panic_self_stop function for KunPeng 920 (liqiang01) [task:515025]
  - wifi: prevent A-MSDU attacks in mesh networks (Mathy Vanhoef) [task:502609]
  - ptp: Add a upper bound on max_vclocks (I Viswanath) [task:546801] {CVE-2025-40057}
  - ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (Jeongjun Park) [task:546801]
  - vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (Ido Schimmel) [task:534331] {CVE-2025-39851}
  - net: vxlan: make vxlan_snoop() return drop reasons (Menglong Dong) [task:534331]
  - net: vxlan: add skb drop reasons to vxlan_rcv() (Menglong Dong) [task:534331]
  - net: tunnel: add pskb_inet_may_pull_reason() helper (Menglong Dong) [task:534331]
  - net: skb: add pskb_network_may_pull_reason() helper (Menglong Dong) [task:534331]
  - vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann) [task:534331]
  - Revert "vxlan: Fix regression when dropping packets due to invalid src addresses" (xiaolinkui) [task:534331]
  - LoongArch: Add debugfs entries to switch SFB/TSO state (Huacai Chen) [task:516389]
  - padata: Fix pd UAF once and for all (Herbert Xu) [task:520537] {CVE-2025-38584}
  - ZHAOXIN: x86/microcode: Add Zhaoxin cpu microcode update driver (Lyle Li) [task:527471, bug:408427]
  - x86/microcode: Consolidate the loader enablement checking (Borislav Petkov (AMD)) [task:464978]
  - OPENEULER: Improve virtCCA CVM vtimer irq inject method. (yxk) [task:533209]
  - OPENEULER: Add poll method for nfs for virtCCA CVM. (hjx_gitff) [task:533209]
  - OPENEULER: Add dynamic wfx trap method for virtCCA CVM. (hjx_gitff) [task:533209]
  - OPENEULER: Add IPI direct inject method for virtCCA CVM. (yxk) [task:533209]
  - PHYTIUM: mtd: Fix issues with standard descriptions (Wang Hanmo) [task:453481, task:521167]
  - skbuff: Add MSG_MORE flag to optimize tcp large packet transmission (Feng Yang) [task:531623]
  - net/sched: Fix backlog accounting in qdisc_dequeue_internal (William Liu) [task:527995] {CVE-2025-39677}
  - net_sched: Flush gso_skb list too during ->change() (Cong Wang) [task:467324, task:527995]
  - bpf: abort verification if env->cur_state->loop_entry != NULL (Eduard Zingerman) [task:481875]
  - bpf: don't do clean_live_states when state->loop_entry->branches > 0 (Eduard Zingerman) [task:476205, task:481875]
  - selftests/bpf: test correct loop_entry update in copy_verifier_state (Eduard Zingerman) [task:481875]
  - bpf: copy_verifier_state() should copy 'loop_entry' field (Eduard Zingerman) [task:481875] {CVE-2025-38060}
  - net: allow small head cache usage with large MAX_SKB_FRAGS values (Paolo Abeni) [task:448808] {CVE-2025-21868}
  - OPENEULER: drivers/iommu: Fix the initialization failure issue of the iommu module (Xianglai Li) [task:515409]
  - LOONGSON: LoongArch: KVM: Enhance the robustness of extioi (Xianglai Li) [task:515411]
  - LOONGSON: LoongArch: KVM: Solve the problem of starting up the upstream qemu (Song Gao) [task:515411]
  - LOONGSON: LoongArch: KVM: Fix the extioi simulation error (Xianglai Li) [task:515411]
  - Remove sensitive words (lihaofeng) [task:524131]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.12.v2505
changelog:
  - OPENEULER: irqchip: gic-v3: Collection table support muti pages (wangwudi) [task:551457]
  - LoongArch/config: Enable eMMC and Codec ES8323 Support. (lifangxu) [task:570975]
  - LOONGSON: LoongArch: 2K3000: pci scan: Limit the scope of pci scan without fun0. (wanghongliang) [task:570975]
  - LOONGSON: Revert "LoongArch: megaraid: Add udelay to avoid data error caused by dma sequence" (lifangxu) [task:570975]
  - ASoC: codec: sma1307: Fix memory corruption in sma1307_setting_loaded() (Dan Carpenter) [task:570975]
  - ASoC: sma1307: Fix error handling in sma1307_setting_loaded() (Dan Carpenter) [task:570975]
  - ASoC: sma1307: Add NULL check in sma1307_setting_loaded() (Chenyuan Yang) [task:570975]
  - ASoC: sma1307: Use SOC_SINGLE_EXT() helper macro (Charles Keepax) [task:570975]
  - ASoC: Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Uwe Kleine-König) [task:570975]
  - ASoC: sma1307: fix uninitialized variable refence (Arnd Bergmann) [task:570975]
  - ASoC: sma1307: Fix invalid logical judgement (Tang Bin) [task:570975]
  - ASoC: sma1307: Add driver for Iron Device SMA1307 (Kiseok Jo) [task:570975]
  - ASoC: dt-bindings: irondevice,sma1307: Add initial DT (Kiseok Jo) [task:570975]
  - ASoC: cs42l84: Remove unused including <linux/version.h> (Jiapeng Chong) [task:570975]
  - ASoC: cs42l84: remove incorrect of_match_ptr() (Arnd Bergmann) [task:570975]
  - ASoC: dapm: fix bounds checker error in dapm_widget_list_create (Aleksei Vetrov) [task:570975]
  - ASoC: dt-bindings: Add CS42L84 codec (Martin Povišer) [task:570975]
  - ASoC: cs42l84: leverage ring sense IRQs to correctly detect headsets (James Calligeros) [task:570975]
  - ASoC: cs42l84: Add new codec driver (Martin Povišer) [task:570975]
  - ASoC: codecs: fix error code in ntp8835_i2c_probe() (Harshit Mogalapalli) [task:570975]
  - ASoC: codecs: Remove unneeded semicolon (Yang Li) [task:570975]
  - ASoC: codecs: Add NeoFidelity NTP8835 codec (Igor Prusov) [task:570975]
  - ASoC: dt-bindings: Add NeoFidelity NTP8835 (Igor Prusov) [task:570975]
  - ASoC: codecs: Add NeoFidelity NTP8918 codec (Igor Prusov) [task:570975]
  - ASoC: dt-bindings: Add NeoFidelity NTP8918 (Igor Prusov) [task:570975]
  - ASoC: codecs: Add NeoFidelity Firmware helpers (Igor Prusov) [task:570975]
  - ASoC: codecs: Fix error check in es8323_i2c_probe (Tang Bin) [task:570975]
  - ASoC: dt-bindings: Add Loongson I2S controller (Binbin Zhou) [task:570975]
  - ASoC: codecs: Add uda1342 codec driver (Binbin Zhou) [task:570975]
  - ASoC: dt-bindings: Add NXP uda1342 Codec (Binbin Zhou) [task:570975]
  - ASoC: codecs: Add support for ES8323 (Binbin Zhou) [task:570975]
  - ASoC: dt-bindings: Add Everest ES8323 Codec (Binbin Zhou) [task:570975]
  - ASoC: es8311: dt-bindings: add everest es8311 codec (Matteo Martelli) [task:570975]
  - ASoC: codecs: es8311: add everest es8311 codec support (Matteo Martelli) [task:570975]
  - cpufreq: loongson3-acpi-cpufreq: Adaptation for 3C6000 (wudandan) [bug:457391]
  - LoongArch: Mask all interrupts during kexec/kdump (Huacai Chen) [task:570975]
  - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 (Ming Wang) [task:570975]
  - cpu/hotplug: Fix kabi change in enum cpuhp_state (lifangxu) [task:570975]
  - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads (Xianglai Li) [task:570975]
  - genirq/kexec: Prevent redundant IRQ masking by checking state before shutdown (Eliav Farber) [task:570975]
  - kexec: Consolidate machine_kexec_mask_interrupts() implementation (Eliav Farber) [task:570975]
  - LoongArch: For all possible CPUs setup logical-physical CPU mapping (Huacai Chen) [task:570975]
  - LoongArch: Enable ACPI BGRT handling (Bibo Mao) [task:570975]
  - LoongArch: Always enumerate MADT and setup logical-physical CPU mapping (Huacai Chen) [task:570975]
  - mmc: loongson2: Unify the function prefixes for loongson2_mmc_pdata (Binbin Zhou) [task:570975]
  - mmc: loongson2: Fix error code in loongson2_mmc_resource_request() (Dan Carpenter) [task:570975]
  - mmc: loongson2: prevent integer overflow in ret variable (Sergio Perez Gonzalez) [task:570975]
  - mmc: loongson2: Add Loongson-2K2000 SD/SDIO/eMMC controller driver (Binbin Zhou) [task:570975]
  - dt-bindings: mmc: loongson,ls2k0500-mmc: Add compatible for Loongson-2K2000 (Binbin Zhou) [task:570975]
  - mmc: select REGMAP_MMIO with MMC_LOONGSON2 (Mikko Rapeli) [task:570975]
  - mmc: wmt-sdmmc: fix compile test default (Johan Hovold) [task:570975]
  - mmc: add COMPILE_TEST to multiple drivers (Mikko Rapeli) [task:570975]
  - mmc: loongson2: Add Loongson-2K SD/SDIO controller driver (Binbin Zhou) [task:570975]
  - dt-bindings: mmc: Add Loongson-2K SD/SDIO/eMMC controller binding (Binbin Zhou) [task:570975]
  - LOONGSON: LoongArch: pci/quirks: 2k3000: set discrete GPU as default boot device if present (Tianrui Zhao) [task:570975]
  - LOONGSON: LoongArch: pci/quirks: ls7a2000: fix pm transition of devices under pcie port (Zhao Qunqin) [task:570975]
  - HYGON: x86/cpufeatures: Rename X86_FEATURE_SM{3,4} to X86_FEATURE_HYGON_SM{3,4} (hanliyang) [task:542911]
  - HYGON: x86: mm: Fix objtool warning about bool noinstr csv3_active() (hanliyang) [task:542911]
  - OPENEULER: crypto: hisilicon/trng - support tfms sharing the device (Weili Qian) [task:573539]
  - OPENEULER: crypto: hisilicon/trng - use DEFINE_MUTEX() and LIST_HEAD() (Weili Qian) [task:573539]
  - mm: fix arithmetic for max_prop_frac when setting max_ratio (Jingbo Xu) [task:573571]
  - mm: fix arithmetic for bdi min_ratio (Jingbo Xu) [task:573571]
  - task_work: Fix NMI race condition (Peter Zijlstra) [task:573553]
  - mm/memcontrol: add oom.group on cgroup-v1 (cuiyudong) [task:527359]
  - Add kaslr support for SUNWAY (liuyunchen) [task:564183]
  - OPENEULER: virtcca: Add missing includes for DECLARE_PER_CPU (baogen shang) [task:558853]
  - HYGON: x86/csv: Add function to get free size of CSV3 CMA (NiZhiguang) [task:542911]
  - HYGON: crypto: ccp: Fix the update decision logic when upgrading Hygon CSV firmware (NiZhiguang) [task:542911]
  - HYGON: KVM: SVM: CSV is unsupported if both the firmware with a build ID < 1878 and SME is not in use (hanliyang) [task:542911]
  - HYGON: KVM: SVM: The ASID range available for CSV2 guests vary across different firmware (hanliyang) [task:542911]
  - HYGON: Revert "mm/cma: add API to enable concurrent allocation from the CMA" (Ge Yang) [task:542911]
  - HYGON: Revert "x86/mm: CSV allows CMA allocation concurrently" (Ge Yang) [task:542911]
  - HYGON: Revert "KVM: SEV: Pin SEV guest memory out of CMA area" (Ge Yang) [task:542911]
  - HYGON: KVM: SVM: CSV: fix CSV3 launch failures because of concurrent longterm pin (yangge) [task:542911]
  - HYGON: crypto: ccp: Get api version again when update Hygon CSV firmware at runtime (hanliyang) [task:542911]
  - HYGON: KVM: SVM: CSV: Fix the vm_size even if CSV3 feature is unsupported on Hygon CPUs (hanliyang) [task:542911]
  - ext4: fix incorrect punch max_end (Zhang Yi) [task:550691]
  - ext4: fix out of bounds punch offset (Zhang Yi) [task:527381, task:550691] {CVE-2025-38221}
  - ext4: refactor ext4_punch_hole() (Zhang Yi) [task:550691]
  - ext4: don't write back data before punch hole in nojournal mode (Zhang Yi) [task:476205, task:550691]
  - ext4: remove writable userspace mappings before truncating page cache (Zhang Yi) [task:476205, task:550691]
  - ext4: passing block allocation information to ext4_es_insert_extent() (Zhang Yi) [task:550691]
  - ext4: factor out ext4_map_create_blocks() to allocate new blocks (Zhang Yi) [task:485149, task:550691]
  - OPENEULER: iommu/arm-smmu-v3: Reducing the CMD_SYNC times (Zhang Zekun) [task:550683]
  - gfs2: Fix unlikely race in gdlm_put_lock (Andreas Gruenbacher) [task:566421] {CVE-2025-40242}
  - gfs2: Unlock fewer glocks on unmount (Andreas Gruenbacher) [task:566421]
  - security/ksaf: add usb deauthorize and authorize interface (zhubing) [bug:405011]
  - OPENEULER: arm-smmu-v3: add 'HIP10C' for 162100602 errata (Hongye Lin) [task:550687]
  - OPENEULER: iommu/arm-smmu-v3: Fix the compile warning (Zhang Zekun) [task:550685]
  - OPENEULER: iommu/arm-smmu-v3: Change the style to identify the the hisi_platform (Zhang Zekun) [task:550681]
  - x86/CPU/AMD: Add X86_FEATURE_ZEN6 (Yazen Ghannam) [task:551755]
  - x86/cpufeatures: Free up unused feature bits (Sohil Mehta) [task:551755]
  - x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range (Perry Yuan) [task:551755]
  - x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range (Wenkuan Wang) [task:551755]
  - x86/CPU/AMD: Add more models to X86_FEATURE_ZEN5 (Mario Limonciello) [task:551755]
  - x86/CPU/AMD: Add X86_FEATURE_ZEN5 (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Drop now unused CPU erratum checking function (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Get rid of amd_erratum_1485[] (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Get rid of amd_erratum_400[] (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Get rid of amd_erratum_383[] (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Rename init_amd_zn() to init_amd_zen_common() (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Call the spectral chicken in the Zen2 init function (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function (Borislav Petkov (AMD)) [task:551755]
  - Fix the issue with the description of the changelog body (Qingshuang Fu) [task:560729]
  - smb: client: validate change notify buffer before copy (Joshua Rogers) [task:557347]
  - kernel version changelog generation and normalization script (Qingshuang Fu) [task:543713]
  - mm: kmem: add lockdep assertion to obj_cgroup_memcg (Muchun Song) [task:553143]
  - memcg: replace memcg ID idr with xarray (Shakeel Butt) [task:553143]
  - task_stack: uninline stack_not_used (Pasha Tatashin) [task:553143]
  - vmstat: kernel stack usage histogram (Pasha Tatashin) [task:553143]
  - memcg: increase the valid index range for memcg stats (Shakeel Butt) [task:553143]
  - mm: kmem: remove mem_cgroup_from_obj() (Muchun Song) [task:553143]
  - Documentation/cgroup-v2: clarify that zswap.writeback is ignored if zswap is disabled (Mike Yuan) [task:553143]
  - selftests: test_zswap: add test for hierarchical zswap.writeback (Mike Yuan) [task:553143]
  - selftests: cgroup: add tests to verify the zswap writeback path (Usama Arif) [task:553143]
  - mm/memcontrol: respect zswap.writeback setting from parent cg too (Mike Yuan) [task:553143]
  - mm: memcg: adjust the warning when seq_buf overflows (Xiu Jianfeng) [task:553143]
  - mm: memcg: remove redundant seq_buf_has_overflowed() (Xiu Jianfeng) [task:553143]
  - mm: memcontrol: add VM_BUG_ON_FOLIO() to catch lru folio in mem_cgroup_migrate() (Baolin Wang) [task:553143]
  - mm: zswap: rename is_zswap_enabled() to zswap_is_enabled() (Yosry Ahmed) [task:553143]
  - mm: memcontrol: remove page_memcg() (Kefeng Wang) [task:553143]
  - mm: memcg: make alloc_mem_cgroup_per_node_info() return bool (Xiu Jianfeng) [task:553143]
  - mm: list_lru: remove unused macro list_lru_init_key() (Haifeng Xu) [task:553143]
  - mm: list_lru: disable memcg_aware when cgroup.memory is set to "nokmem" (Haifeng Xu) [task:553143]
  - mm: memcg: don't periodically flush stats when memcg is disabled (T.J. Mercier) [task:553143]
  - mm: memcontrol: don't throttle dying tasks on memory.high (Johannes Weiner) [task:553143]
  - wifi: Add the NULL pointer check in 8852cu (ligongwei) [bug:439747]
  - OPENEULER: cpu/SMT: recover global num_threads after disable smt switch fail (Bowen You) [task:551731]
  - bonding: avoid send_ns_work UAF when toggling ns_probe_active (pengyu) [task:558047]
  - configs: Disable CPU mitigations for the biv kernel (Can Peng) [task:526685]
  - mm: don't try THP alignment for FS without get_unmapped_area (Kefeng Wang) [task:560261]
  - mm: respect mmap hint address when aligning for THP (Kalesh Singh) [task:560261]
  - mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes (Vlastimil Babka) [task:560261]
  - LoongArch: Workaround of the address calculation on iommu (Li Jun) [bug:457413]
  - OPENEULER: iommu/loongarch: fix potential hung task when error occurred (Hongchen Zhang) [task:562101]
  - LoongArch: add iommu support (Guopeng Zhang) [task:562101]
  - ext4: disambiguate the return value of ext4_dio_write_end_io() (Jinliang Zheng) [task:551735]
  - ext4: dax: keep orphan list before truncate overflow allocated blocks (yangerkun) [task:551735]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.v2505
changelog:
  - arm64: config: enable bnx2fc driver (xiaolinkui) [bug:348721]
  - x86/config: Disable CONFIG_COMPILE_TEST (Super User) [task:460841]
  - kalert: fix a redundant message problem when report event of ALL (Huiwen He) [task:339643]
  - loongarch: configs: Enable kalert feature (Huiwen He) [bug:350573]
  - Revert "LOONGSON: drm/loongson: use old version of ast driver for LoongArch platform" (Li ZhiGang) [bug:350717]
  - Revert "LOONGSON: drm/loongson: To replace the drm_ast driver with the drm_ast_loongson driver" (Li ZhiGang) [bug:350717]
  - kabi: drm/ttm: Add kabi reserve in ttm_tt.h (Qingshuang Fu) [task:457490]
  - kabi: drm/ttm: Add kabi reserve in ttm_resource.h (Qingshuang Fu) [task:457490]
  - kabi: drm/ttm: Add kabi reserve in ttm_bo.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_syncobj.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_plane.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_modeset_lock.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_mode_config.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_gpu_scheduler.h (Qingshuang Fu) [task:457490]
  - kabi: cgroup: add more reserve kabi (Qingshuang Fu) [task:457490]
  - kabi: seq_file: KABI reservation for seq_file (Qingshuang Fu) [task:457490]
  - kabi: statx: KABI reservation for kstat (Qingshuang Fu) [task:457490]
  - kabi: ima: KABI reservation for IMA (Qingshuang Fu) [task:457490]
  - kabi: kabi reserver space for i2c (Qingshuang Fu) [task:457490]
  - kabi: reserve space for uprobes.h (Qingshuang Fu) [task:457490]
  - kabi: Reserve space for fwnode.h (Qingshuang Fu) [task:457490]
  - kabi: Add reserve space for sched structures (Qingshuang Fu) [task:457490]
  - kabi: net: reserve space for net related structure (Qingshuang Fu) [task:457490]
  - kabi: reserve space for internal.h (Qingshuang Fu) [task:457490]
  - kabi: reserve space for perf_event.h (Qingshuang Fu) [task:457490]
  - kabi: net: reserve space for xdp subsystem related structure (Qingshuang Fu) [task:457490]
  - kabi: reserve space for struct acpi_device and acpi_scan_handler (Qingshuang Fu) [task:457490]
  - kabi: reserve space for struct rate_sample (Qingshuang Fu) [task:457490]


author: liuxu <liuxu156@huawei.com> - 1:1.36.1-6
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: sunhai<sunhai10@huawei.com> - 1.17.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:cairo_truetype_reverse_cmap detected memory leaks
         fix read memory access
         fix call get_unaligned_be32 heap buffer overflow
         fix heap buffer overflow in cairo_cff_parse_charstring


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1.18.0-2
changelog:
  - Type:CVE
  - ID:CVE-2025-50422
  - SUG:NA
  - DESC:Fix a NULL access in active_edges_to_traps()
         Add unlikely() to test for x == INT32_MAX for the NULL reference


author: shaojiansong <shaojiansong@kylinos.cn> - 8.0.4-3
changelog:
  - Fix lack of loongarch64 and sw_64 patch files in src.rpm package which is build from any platform.


author: shenzhongwei <shenzhongwei@kylinos.cn> - 8.0.4-10
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: zhangzikang <zhangzikang@kylinos.cn> - 8.0.4-10.p01
changelog:
  - Type:bugfix
  - ID:BUG#340534
  - SUG:NA
  - DESC:Fix NR_CPUS for loongarch64, resolve crash parsing vmcore file error


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: tenglei <tenglei@kylinos.cn> - 8.4.0-14.p02
changelog:
  - Type:bugfix
  - ID:385935
  - SUG:NA
  - DESC: add configure options '--enable-ares' to support feature '-dns-servers'


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 8.4.0-14.p03
changelog:
  - Type:rebuild
  - ID:[BUG#385935]
  - SUG:NA
  - DESC: rebuild for svr25-update with secure_compile_enabled = True


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         h3: fix query of concurrent streams
         noproxy: fix the IPV6 network mask pattern match
         krb5_gssapi: fix memory leak on error path
         openldap: fix memory-leak in error path
         conn: fix hostname move on connection reuse 
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes
         openssl: fix a potential memory leak of params.cert


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:urlapi: avoid null deref if setting blank host to url
         urlapi: skip appending NULL pointer query


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-26
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224


author: gaoyukun <gaoyukun@kylinos.cn> - 8.4.0-26.p01
changelog:
  - Type:update
  - ID:[TASK#554071]
  - SUG:NA
  - DESC: add configure options '--enable-ares' to support feature '-dns-servers'


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.03
changelog:
  - Type: bugfix
  - ID: [BUG#242191][TASK#337083] 
  - SUG: NA
  - DESC: 修复strict 模式 selinux打标问题以及3adm未开启问题
  -       dracut-fix-switch-strict-3adm-disable.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.04
changelog:
  - Type: bugfix
  - ID: [BUG#244069]
  - SUG: NA
  - DESC: v11内核不支持中文,将打标脚本中输出的中文替换成英文
  -       relabel-script-add-en-translation.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.05
changelog:
  - Type: bugfix
  - ID: [BUG#249291]
  - SUG: NA
  - DESC: selinux-loadpolicy.sh脚本中增加对selinux目录恢复标记动作
  -       dracut-seloadpolicy-add-restore-selinux-dir-action.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.06
changelog:
  - Type: bugfix
  - ID: [BUG#249879][BUG#249601]
  - SUG: NA
  - DESC: 三员开启时,audit目录及日志文件dac权限不正确
  -       dracut-fix-audit-log-owner-when-enable-3adm.patch


author: andy <liuyang01@kylinos.cn> - 059-6.p02.se.07
changelog:
  - Type: bugfix
  - ID: [BUG#252025]
  - SUG: NA
  - DESC: open-iscsi 已经不再支持及维护iscsiuio工具, 将其相关代码移除
  -       0001-remove-iscsi-related-code-since-it-is-no-longer-main.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.08
changelog:
  - Type: update
  - ID: [TASK#379845]
  - SUG: NA
  - DESC: 适配ksaf框架改动
  -       dracut-compatible-ksaf.patch


author: andy lau <liuyang01@kylinos.cn> - 059-11.p01.se.08
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC: [backport] backport update stream fix zfcp_rules
          [backport] add backport-fix-dracut-install-copy-xattr-when-use-clone-ioctl.patch
          [backport] fix(dracut-install): copy mode when use clone ioctl
          [backport] add backport-feat-dracut-init.sh-give-force-add-precedence-over-o.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p01.se.09
changelog:
  - Type: update
  - ID: [BUG#328705][BUG#335827]
  - SUG: NA
  - DESC: 解决kysec增加自保护后,initrd中初始化三权配置错误问题,defualt 模式 ksyec为permissive
  -       dracut-fix-3adm-settings.patch
  -       dracut-fix-initrd-set-kysec-status-error.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p01.se.10
changelog:
  - Type: update
  - ID: [BUG#372101]
  - SUG: NA
  - DESC: 解决在未加载selinux时 修改passwd文件后 se标记未unlabeled_t的问题
  -       dracut-fix-passwd-selinux-context-is-unlabel.patch


author: yueyuankun <yueyuankun@kylinos.cn> -0.59-6.p03.se.10
changelog:
  - Type:bugfix
  - ID:[TASK#577533]
  - SUG:NA
  - DESC: fix(kernel-modules-extra): remove stray \ before /


author: tiandongdong <tiandongdong@kylinos.cn> -0.59-6.p03.se.11
changelog:
  - Type:update
  - ID:[TASK#595939]
  - SUG:NA
  - DESC: 兼容sdk优化reset_selinux_config文件路径的变更
  -       dracut-compatible-sdk-optimize.patch


author: tiandongdong <tiandongdong@kylinos.cn> -0.59-6.p03.se.12
changelog:
  - Type:update
  - ID:[BUG#492893]
  - SUG:NA
  - DESC: 98relabel去除对kysec-init命令的依赖
  -       dracut-98relabel-remove-kysec-init-require.patch


author: Qin Fandong <qinfandong@kylinos.cn> -0.59-6.p04.se.12
changelog:
  - Type:update
  - ID:[TASK#596741]
  - SUG:NA
  - DESC: fix(dracut-util): do not call `strcmp` if the `value` argument is NULL
  -       0001-fix-dracut-util-do-not-call-strcmp-if-the-value-argu.patch


author: Xiaotian Wu <wuxiaotian@loongson.cn> - 202308-17
changelog:
  - Update LoongArch virtual machine
  - 0080-Platform-Loongson-Remove-minimium-memory-size-limita.patch
  - 0081-Platform-Loongson-Modify-loongarch-uefi-firmware-siz.patch
  - 0082-fixup-fdt-parse-error.patch


author: lijunwei <lijunwei@kylinos.cn> - 202308-17.p01
changelog:
  - Type: Update
  - ID:   [TASK#425200]
  - SUG:  NA
  - DESC: Backport v11-2409 Kylin's patch to support sata cdrom


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202308-17.p02
changelog:
  - Type: Update
  - ID:   [BUG#332197]
  - SUG:  NA
  - DESC: Fix loongarch64 0082-fixup-fdt-parse-error.patch error


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202308-17.p03
changelog:
  - Type: Update
  - ID:   [TASK#442231]
  - SUG:  NA
  - DESC: Fix CVE-2024-13176/CVE-2024-4741/CVE-2024-9143


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202308-17.p10
changelog:
  - Type: cves
  - ID:   CVE-2026-22795,CVE-2026-22796,CVE-2025-69421,CVE-2025-69420,CVE-2025-68160,CVE-2025-69418,CVE-2025-69419
  - SUG:  NA
  - DESC: Fix CVE-2026-22795,CVE-2026-22796,CVE-2025-69421,CVE-2025-69420,
  	CVE-2025-68160,CVE-2025-69418,CVE-2025-69419


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: Qin Fandong <qinfandong@kylinos.cn> - 1.8.17-7.p01
changelog:
  - Type: bugfix
  - ID: BUG#382697
  - SUG: NA
  - DESC: 1. Remove build requires protobuf and disable plugin logitech-bulkcontroller
             which to upgrade the firmware on Logitech Video Collaboration products.
          2. Update distro info


author: yinbin <yinbin8@huawei.com> - 1.0.2-77
changelog:
  - openGauss: support kernel connnect
  - xdp: support stack bind numa
  - CFG: fix xdp iface check error
  - fix build error in 2003SP4
  - cfg: show dpdk args after dpdk_adjust_args
  - fix free null pointer when no matching device is found
  - update test/unitest/ltran/ltran_param_test.c.
  - Fix the wrong spelling description in the notes and logs
  - LWIP: adjust position of shutdown in callback of connect
  - fix socket of control thread is overwirtten due to another primary process start


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: pengxu <pengxu@kylinos.cn> - 12.3.1-62.p01
changelog:
  - Type: bugfix
  - ID: [TASK#424661]
  - SUG:  NA
  - DESC:  Add kylin patches.

           author: zhaojingyu <zhaojingyu@kylinos.cn>
           Support for zhaoxin.
           0001-support-for-zhaoxin.patch

           author: wangqiang <wangqiang1@kylinos.cn>
           Support for hygon3/4 processor series.
           kylin-gcc-add-support-for-hygon3-4-processor-series.patch

           author: pengxu <pengxu@kylinos.cn>
           Support for accelerating stream.
           kylin-gcc-add-support-for-accelerating-stream.patch

           author: pengxu <pengxu@kylinos.cn>
           Support optimization of set fpnm.
           kylin-gcc-Add-optimization-of-set-fpnm.patch

           author: wangqiang <wangqiang1@kylinos.cn>
           Support phytium s5000 processor.
           kylin-gcc-Add-support-for-phytium-s5000c-processor.patch

           author: pengxu <pengxu@kylinos.cn>
           Add pie option for g++-mapper-server.
           kylin-gcc-add-pie-option-for-g++-mapper-server.patch


author: pengxu <pengxu@kylinos.cn> - 12.3.1-62.p02
changelog:
  - Type: bugfix
  - ID: [TASK#465014]
  - SUG:  NA
  - DESC: Add support for hygon arch dhyana and dharma.
          Fix bugs of stream when use -ftree-parallelize-loops=24 option.


author: pengxu <pengxu@kylinos.cn> - 12.3.1-62.p03
changelog:
  - Type: update
  - ID: [TASK#558547]
  - SUG:  NA
  - DESC: Add support for Phytium ftc86x cpu,fix aarch64 -mcpu=native shows null


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: houhongxun <houhongxun@kylinos.cn> - 2:2.99.10-2.p02
changelog:
  - Type: cves
  - ID  : [TASK#489699]
  - SUG : NA
  - DESC: fix CVE-2022-32990 CVE-2025-48797 CVE-2025-48798 CVE-2025-5473


author: houhongxun <houhongxun@kylinos.cn> - 2:2.99.10-2.p03
changelog:
  - Type: cves
  - ID  : [TASK#554869]
  - SUG : NA
  - DESC: fix CVE-2025-6035 CVE-2025-10922 CVE-2025-10934


author: houhongxun <houhongxun@kylinos.cn> - 2:2.99.10-2.p04
changelog:
  - Type: cves
  - ID  : [TASK#580833]
  - SUG : NA
  - DESC: fix CVE-2025-14422 CVE-2025-14424 CVE-2025-14425


author: fuanan <fuanan3@h-partners.com> - 2.43.0-4
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.43.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch
         config.mak.uname: set CSPRNG_METHOD to getrandom on Linux


author: yanglu <yanglu72@h-partners.com> - 2.78.0-1
changelog:
  - update glib-networking version to 2.78.0:
    - disable PKCS#11 tests when GNuTLS is built without PKCS#11 support
    - fix connection tests on 32-bit systems with 64-bit time_t
    - updated translations


author: zhangzikang <zhangzikang@kylinos.cn> - 2.78.3-3
changelog:
  - backport patch:
      backport-gdbusmessage-Clean-the-cached-arg0-when-setting-the-message-body.patch
      backport-gsocketclient-Fix-a-use-after-free-in-g_socket_client_connected_callback.patch
      backport-gcontextspecificgroup-Wait-until-stop_func-is-done.patch
      backport-gresources-fix-memory-leak-from-libelf.patch


author: wuxiaolei <wuxiaolei@kylinos.cn> -2.78.3-8.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC: sync changes from kylin previous version:
          Mov gio-launch-desktop from devel to main rpm (BUG#296979)


author: litenglong <litenglong@kylinos.cn> - 2.38-47.p01
changelog:
  - Type:update
  - ID:[Task#424805]
  - SUG:NA
  - DESC:
         author:  lipengyu <lipengyu@kylinos.cn>
         improve memset perf and add strstr-avx2
         10004--Improve-large-memset-perf-with-non-temporal-stores.patch
         10005-add-strstr-avx2.patch

         author: litenglong <litenglong@kylinos.cn>
         Add tcache_count and stack_cache_size dynamic
         10003-add-dynamic-tunable-for-tcache_count-and-stack-cache.patch

         author: lipengyu <lipengyu@kylinos.cn>
         Optimizing memcpy for KH-40000 and KX-7000-Zhaox
         10002-x86-Optimizing-memcpy-for-KH-40000-and-KX-7000-Zhaox.patch

         author: yueyaoqiang <yueyaoqiang@kylinos.cn>
         backport from sp4,add multi gl support and fix localesdata countryname
         10000-kylin-add-multi-gl-support-for-glibc.patch
         10001-Kylin_fix_localesdata_countryname-2.38-29.patch


author: litenglong <litenglong@kylinos.cn> - 2.38-47.p03
changelog:
  - Type:bugfix
  - ID:[Task#432639]
  - SUG:NA
  - DESC: fix rust compile problem by modify tcache_count counting bug.


author: wuxiaolei <wuxiaolei@kylinos.cn> -2.38-47.p07
changelog:
  - Type:bugfix
  - ID:[BUG#371909]
  - SUG:NA
  - DESC: zh_TW: update locale title and territory descriptors


author: litenglong <litenglong@kylinos.cn> - 2.38-47.p12
changelog:
  - Type:update
  - ID:[Task#550987]
  - SUG:NA
  - DESC: x86: Disable AVX Fast Unaligned Load on Hygon 1/2/3


author: litenglong <litenglong@kylinos.cn> - 2.38-47.p14
changelog:
  - Type:update
  - ID:[Task#553637]
  - SUG:NA
  - DESC: malloc: tcache modify static variable to thread local.


author: panzhe <panzhe@kylinos.cn> - 2.38-47.p15
changelog:
  - Type:update
  - ID:[Task#588463]
  - SUG:NA
  - DESC:
    - memalign: reinstate alignment overflow check (CVE-2026-0861)
    - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)


author: chenyanpanHW <chenyanpan@huawei.com> - 1.3.5-4
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/gnome-abrt-1.4.2-update-zh_HK-translations.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git-core


author: peijiankang <peijiankang@kylinos.cn> - 1.4.2-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#385923]
  - SUG:  NA
  - DESC: add gnome-abrt-1.4.2-update-zh_HK-translations.patch


author: xuraoqing <xuraoqing@huawei.com> - 3.8.2-1
changelog:
  - update to 3.8.2
  - some API and ABI modifications, see NEWS for details
  - New option --attime to specify current time
  - libgnutls: Add a mechanism to control whether to enforce extended master secret (RFC 7627)
  - libgnutls: Add additional PBKDF limit checks in FIPS mode as defined in SP 800-132
  - libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to %GNUTLS_NO_DEFAULT_EXTENSIONS.
  - libgnutls: Add support for RFC 9258 external PSK importer.
  - libgnutls: ClientHello extensions are randomized by default,
               To make fingerprinting harder, TLS extensions in ClientHello messages are shuffled.
  - gnutls-cli: New option --starttls-name.
  - libgnutls: transparent KTLS support is extended to FreeBSD kernel.
  - libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452).
  - libgnutls: Add API functions to perform ECDH and DH key agreement.
  - libgnutls: Fix timing side-channel inside RSA-PSK key exchange(CVE-2023-5981).


author: songjuntao <songjuntao@kylinos.cn> - 3.8.2-4.p01
changelog:
  - Type: update
  - ID: TASK#223527
  - SUG: NA
  - DESC: add certtool generate cert and tls1.3 protocol smx algorithm support


author: zhangzikang <zhangzikang@kylinos.cn> - 3.8.2-4.p02
changelog:
  - Type: update
  - ID: [TASK#372985]
  - SUG: NA
  - DESC: Fix gnutlsxx.h file, add set_credentials and db_check_entry functions.
          Supply follow symbols to solve the API/ABI compatibility issue:
            _ZNK6gnutls14server_session14db_check_entryER14gnutls_datum_t
            _ZN6gnutls7session15set_credentialsERNS_11credentialsE


author: panxiaohe <panxh.life@foxmail.com> - 3.7-5
changelog:
  - grep: Don't limit jitstack_max to INT_MAX
  - grep: speed up, fix bad-UTF8 check with -P
  - grep: fix minor -P memory leak


author: andy lau <liuyang01@kylinos.cn> - 1:2.12-31.se.05.p01
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC: [backport] fix bug about petitboot doesn't ignore EFI entries for ppc64le
          [backport] Inherit 'Add BLS Support' patch from grub-2.06
          [backport] 10_linux: fix missing "ro" in kernel boot parameters Disable LTO
          [backport] use confidential computing provisioned secrets for disk decryption
          [backport] commands/efi/tpm: Re-enable measurements on confidential computing platforms
          [backport] revert sohpgo's modify-efi_max_usable-addr.patch
          [backport] commands/legacycfg: Avoid closing file twice
          [backport] fix not verifying grub.cfg when loading it


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.12-31.se.05.p02
changelog:
  - Type:update
  - ID:TAKS#435953
  - SUG:NA
  - DESC:Remove the kylin_tpm.mod module and unused code in the trusted boot mode.


author: Qin Fandong <qinfandong@kylinos.cn> - 1:2.12-31.se.05.p03
changelog:
  - Type:Update
  - ID:TASK#457741
  - SUG:NA
  - DESC:i386: Check for cpuid family when flush cache only on VIA CPUs


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.12-21.se.06.p05
changelog:
  - Type:bugfix
  - ID:BUG#352094
  - SUG:NA
  - DESC:Cancel the interception prompt during startup when an abnormal configuration file is detected


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.12-31.se.07.p06
changelog:
  - Type:Update
  - ID:BUG#357087
  - SUG:NA
  - DESC:trust boot revise the prompt for scenarios where the TCM device not found


author: Qin Fandong <qinfandong@kylinos.cn> - 1:2.12-31.se.07.p07
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54770,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         net/net: Unregister net_set_vlan command on unload


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.18.4-1
changelog:
  - Upgrade to 1.18.4
  - Delete Adapt-to-backwards-incompatible-change-in-GUN.patch whose target
    patch file doesn't exist in this version 1.18.4
  - Add gstreamer-inspect-rpm-format.patch
  - Use meson rebuild


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 3.24.41-2.p01
changelog:
  - Type: bugfix
  - ID: [BUG#344842]
  - SUG:  NA
  - DESC:  fix traditional chinese translation of credits and licenses


author: litianhao <litianhao@kylinos.cn> - 1.50.2-7.se.01
changelog:
  - Type: update
  - ID: [TASK#226811] 合入安全套件功能
  - SUG: NA
  - DESC: 合入sm设备管控补丁
  -       gvfs-add-sm-devctl.patch


author: huayadong<huayadong@kylinos.cn> - 1.50.2-7.p01.se.01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: remove BuildRequires: libsmbclient-devel Provides: gvfs-smb


author: huayadong<huayadong@kylinos.cn> - 1.50.2-7.se.01.p02
changelog:
  - Type: update
  - ID  : [TASK#422649]
  - SUG : NA
  - DESC: add BuildRequires: libsmbclient-devel Provides: gvfs-smb


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.58-2
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: zhangyaqi <zhagnyaqi@kylinos.cn> - 2.4.58-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:allocate a heap buffer if the configured size is greater than the stack-allocated buffer.


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.58-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.58-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: lifeifei <lifeifei@kylinos.cn> - 2.4.58-10.p01
changelog:
  - Type:bugfix
  - ID:[Task#500427]
  - SUG:NA
  - DESC: Add kylin support and fix htcacheclean.service start error.
          fix index.html for kylin.
  	fix CVE-2024-38472 and CVE-2024-40898.


author: tangce <tangce1@h-partners.com> - 2.4.58-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: gaoyukun <gaoyukun@kylinos.cn> - 2.4.58-12.p01
changelog:
  - Type:bugfix
  - ID:[Task#542709]
  - SUG:NA
  - DESC: Add kylin support and fix htcacheclean.service start error.
          fix index.html for kylin.
          fix CVE-2024-38472 and CVE-2024-40898.


author: wuxiaolei <wuxiaolei@kylinos.cn> - 74.1-4.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC: sync changes from kylin previous version:
          Modify license information (TASK#425438)


author: herengui <herengui@uniontech.com> - 1.7.3-11
changelog:
  - Fix: fix issue that change language in deepin-control-center cannot affect the fcitx
  - Bug: #I47HF0


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.462.b08-0
changelog:
  - update to 8u462
  - deleted 8026976-ECParameters-Point-does-not-match-field-size.patch
  - deleted 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.462.b08-1
changelog:
  - deleted 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add Fix-tests-for-OS-with-64k-page-size.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.462.b08-4.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-1.8.0.462 GA release with kylin support


author: Benshuai5D <benshuai5d@163.com> -1:1.8.0.462.b08-5
changelog:
  - add 8287432-C2-assert-tn-in-0-__null-failed-must-have-li.patch
  - add 8210389-C2-assert-n-outcnt-0-C-top-n-n-is_Proj-faile.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.472.b08-0
changelog:
  - update to 8u472
  - add 8268366-C1-Incorrect-calculation-of-has_fpu_register.patch
  - deleted 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.472.b08-2.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-1.8.0.472 GA release with kylin support


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.28.6-0
changelog:
  - update to 11.0.28+6(GA)
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch


author: songliyang <songiyang@kylinos.cn> - 1:11.0.28.6-1.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-11.0.28.6 GA release with kylin support


author: songliyang <songiyang@kylinos.cn> - 1:11.0.29.7-1.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-11.0.29.7 GA release with kylin support


author: wulongyao <wulongyao1@huawei.com> - 1:17.0.16.8-0
changelog:
  - update to 17.0.16
  - modified Apply-TBI-to-ZGC-of-JDK17.patch
  - delete 8314236-Overflow-in-Collections.rotate.patch
  - modified puyuan-jdk17.0.9-patch.patch
  - modified 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modified Backport-Important-Fixed-Issues.patch
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch


author: songliyang <songliyang@kylinos.cn> - 1:17.0.16.8-2.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-17.0.16.8 GA release with kylin support


author: songliyang <songliyang@kylinos.cn> - 1:17.0.17.10-1.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-17.0.17.10 GA release with kylin support


author: benshuai5d <benshuai5d@163.com> 1:17.0.17.10-0
changelog:
  - update to 17.0.17
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify Huawei-fix-potential-build-fail-in-jbolt.patch
  - add Backport-of-8340547-Starting-many-threads-can-delay-safepoints.patch


author: huayadong <huayadong@kylinos.cn> - 5.113.0-2.p01
changelog:
  - Type: cve
  - ID  : [TASK#505555]
  - SUG : NA
  - DESC: Patch01:kdelibs4support-5.113.0-kylin-mg-word-modification.patch


author: zhubing zhubing@kylinos.cn - 1.0.1-02
changelog:
  - Type: update
  - ID: [BUG#327787]【V11-B19】【loongarch】【外设管控】sm-example命令执行失败
  - SUG: NA
  - DESC: 同步v11 2409解决网卡策略及时生效异常问题


author: wangshengye <wangshengye@kylinos.cn> - 1.1.0-1.se.07
changelog:
  - Type: bugfix
  - ID: [BUG#300787]【V11-B16】【ARM】【安全模式切换】none-strict重启过程中报错
  - SUG: NA
  - DESC: [任务#412519]【ksaf】已运行进程标记更新功能优化
          [任务#415507] ksaf-label-manager安全问题整改


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-02
changelog:
  - Type: update
  - ID: [BUG#340532]【V11-2503】【B05】rpm包vendor信息检查失败
  - SUG: NA
  - DESC: 修改SPEC文件vendor信息
          同步os-release-v11分支最新代码


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-03
changelog:
  - Type: update
  - ID: [BUG#346402]【V11-2503】【B09】【需求36791】【执行控制】加载无执行权限的内核模块，无审计日志
  - SUG: NA
  - DESC: tid配置文件中添加/usr/bin/kmod,值设置为4


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-04
changelog:
  - Type: bugfix
  - ID: [BUG#364225]【v11-2503】【B14】【需求36795|41839|41835】【文件保护】移除软件包文件保护后被移动后还原的文件，再次添加保护不生效
  -     [BUG#364165]【v11-2503】【B14】【需求36795|41549】【文件保护】移除包方式添加的保护的例外后，文件保护不生效
  - SUG: NA
  - DESC: 优化继承标志设置逻辑
          同步桌面最新代码，桌面独有代码使用条件编译
          优化程序启动时对软件包查询的流程，减少对CPU资源的占用


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-05
changelog:
  - Type: bugfix
  - ID: [BUG#374711]【B17】【v11 2503】【需求36795|41839|41835】【文件保护】添加\删除\查看文件保护策略-软件包-kysec_set，只读策略不生效
  - SUG: NA
  - DES: 全盘打标之前删除包内文件父目录缓存文件


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-06
changelog:
  - Type: bugfix
  - ID: [BUG#439759]【V11-6.6.0-32.9】【龙芯3C5000L】龙芯3C5000L从selinux切换到off失败
  - SUG: NA
  - DES: 注释掉标记变更发布与订阅功能，该功能暂时未用到
         解决/opt目录下文件未打标的问题,使用宏定义将全盘打标时要跳过的目录与桌面版本区分开


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-07
changelog:
  - Type: bugfix
  - ID: [BUG#455411]【20251021update内网源测试】【loongarch/x86-v11 2503】提测软件包增量升级后，执行yum -y update核心转储
        [任务#553743]安全编译参数整改 / ksaf-label-manager安全编译参数整改
  - SUG: NA
  - DES: 解决动态库中dbus连接没有关闭文件描述符的问题
         修改软件包安装后脚本，解决软件包更新后服务进程身份错误问题


author: houhongxun<houhongxun@kylinos.cn> - 5.24.4-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#352453]
  - SUG : NA
  - DESC: fix some windows displaying abnormally for 16bit depth


author: peijiankang<peijiankang@kylinos.cn> - 5.24.4-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add kwin-5.24.4-fix-coredump-when-logout.patch


author: houhongxun <houhongxun@kylinos.cn> - 5.24.4-1.p05
changelog:
  - Type: bugfix
  - ID  : [Task#536445]
  - SUG : NA
  - DESC: fix some apps displaying abnormally under 16bit color depth


author: huayadong <huayadong@kylinos.cn> - 5.24.4-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#429071]
  - SUG : NA
  - DESC: add Patch06:kwin-5.24.4-kylin-Turn-off-Tablet-Manager.patch
          关闭平板模式管理器


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p16
changelog:
  - Type: update
  - ID:[TASK#436445][TASK#432968]
  - SUG: NA
  - DESC: add fuzz check
          add secret key activation
          add deactivation function
          adjust the configuration file to the/etc directory
          adjust activate the policy to the server


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p17
changelog:
  - Type: bugfix
  - ID: [BUG#336521][BUG#336143] 
  - SUG: NA
  - DESC: update get activation code from kylin


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p18
changelog:
  - Type: bugfix
  - ID: [BUG#336143][TASK#442197][BUG#336809][BUG#339458][BUG#338942]
  - SUG: NA
  - DESC: update spec to fix install error
  	integrate value for added product
  	upate get activation status logic


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p22
changelog:
  - Type: update
  - ID:[TASK#463164][BUG#348859][TASK#466714]
  - SUG: NA
  - DESC: ajust the size of the Confirm Cancel button
  	check license osname locally when kms version lower than 2.5
  	fix security compilation issues


author: douyan<douyan@kylinos.cn> 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add patch 0001-fix-kylin-nm-4.10.0.0-add-LANG-env.patch


author: houhongxun <houhongxun@kylinos.cn> 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289795]
  - SUG : NA
  - DESC: dns address from network manager is in network byte order


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok0.13k0.14
          upstream commitid: 52ecaf1e58ae14f32abcc183c92b6c60b0d3e2f9


author: xuchenchen <xuchenchen@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID: [BUG#249127]
  - SUG: NA
  - DESC: kylin-prohibit-non-root-users-from-setting-up-networ.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID: [BUG#437383]
  - SUG: NA
  - DESC: kylin-nm-4.10.0.0-kylin-fix-closing-network-segment.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.0.0.1kylin1k81-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 1.0.0.1kylin1k81-ok8.24k1.3


author: peijiankang <peijiankang@kylinos.cn> - 1.0.0.1kylin1k81-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add kylin-screenshot-1.0.0.1kylin1k81-Single-instance-addition-of-DISPLAY-judgment.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.0.0.1kylin1k81-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#383661]
  - SUG : NA
  - DESC: add kylin-screenshot-1.0.0.1kylin1k81-fix-aboutinfo-and-singleinstance.patch
          add kylin-screenshot-1.0.0.1kylin1k81-add-copyright-info.patch


author: Deyuan Fan <fandeyuan@kylinos.cn> - 2.0-8
changelog:
  - Type:compile
  - ID:TASK#387157
  - SUG:NA
  - DESC:add unit test code & improve code coverage & modify bpf program.


author: Deyuan Fan <fandeyuan@kylinos.cn> - 2.0-11
changelog:
  - Type:compile
  - ID:TASK#440154 TASK#431721 TASK#429232
  - SUG:NA
  - DESC:monitor of signal & inode & filehandle & number of process


author: Deyuan Fan <fandeyuan@kylinos.cn> - 2.0-12
changelog:
  - Type:compile
  - ID:TASK#440154 TASK#443800 TASK#433604 TASK#431721
  - SUG:NA
  - DESC:fix some known issues and GPL issue


author: changtao <changtao@kylinos.cn> - 2.0-13
changelog:
  - Type:compile
  - ID:BUG#339854 BUG#339852 TASK#446051
  - SUG:NA
  - DESC:fix file monitor failed of rm operation & fix file monitor timestamp problem &fix PenTest


author: changtao <changtao@kylinos.cn> - 2.0-15
changelog:
  - Type:compile
  - ID:TASK#471101 TASK#415537
  - SUG:NA
  - DESC:fix fortify high-level problem & add file license headers


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-user-guide-4.10.0.0-ok2.7k0.16
          upstream commtid:7ad757f89f412a5be1d5684048a516c028645671


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-user-guide-4.10.0.0-ok2.7k0.18
          upstream commtid:a780d9a4d36e4f58f6dea3412fc3974c14e5f6ea


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#293701]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-root-start-no-sandbox.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: update
  - ID  : [TASK#475175]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-remove-html-comment.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#363727]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-zh-HK-adapt.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#363723]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-update-zh-HK-ts.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#356895]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-add-ksc-defender-jumpinfo.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#381069]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-ukui-control-center-jump-error.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p11
changelog:
  - Type: bugfix
  - ID  : [BUG#356895]
  - SUG : NA
  - DESC: update kylin-user-guide-4.10.0.0-kylin-add-ksc-defender-jumpinfo.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p12
changelog:
  - Type: bugfix
  - ID  : [BUG#385929]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-update-shortcut-info.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.0.1.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-virtual-keyboard-3.0.1.0-ok0.12k0.4
          upstream commtid:f3b588138f44997947ec3b5c2912a11fcafcd71f


author: peijiankang <peijiankang@kylinos.cn> - 3.0.1.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#470133]
  - SUG : NA
  - DESC: fix kylin-virtual-keyboard animationAvailability


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#307245]
  - SUG: NA
  - DESC: 修复parse_file_type函数解析文件类型错误问题
  -       kysec-common-fix-parse-file-type-error.path


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.16
changelog:
  - Type: update
  - ID: [TASK#405875]
  - SUG: NA
  - DESC: 增加单元测试代码
  -       kysec-common-add-unit-test-20241024.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.17
changelog:
  - Type: update
  - ID: [TASK#422679] 合规整改
  - SUG: NA
  - DESC: 合规整改
  -       kysec-common-add-license.patch


author: pengxi <pengxi@kylinos.cn> - 1.1.1-01.se.18
changelog:
  - Type: update
  - ID: [TASK#435234]
  - SUG: NA
  - DESC: 单元测试代码更新
  -       kysec-common-update-unit-test.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.19
changelog:
  - Type: update
  - ID: [TASK#449386]
  - SUG: NA
  - DESC: 修复平台扫描的开源代码引入问题
  -       kysec-common-fix-opensource-introduce.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.1-01
changelog:
  - Type: update
  - ID: [TASK#441731]
  - SUG: NA
  - DESC: kysec2.0命令行开发,添加kysec_policy的日志类型
  -         kysec-common-add-kysec-policy-log-type.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.1-02
changelog:
  - Type: bugfix
  - ID: [BUG#346400]
  - SUG: NA
  - DESC: 修复parse_file_type()解析.ko.xz的错误
  -	  kysec-common-fix-parse-file-type-interface-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.2.1-03
changelog:
  - Type: update
  - ID: [TASK#441570]
  - SUG: NA
  - DESC: 新增kysec-scene日志接口
  -	  kysec-common-add-kysec-scene-log-if.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-04
changelog:
  - Type: update
  - ID: [TASK#468469]
  - SUG: NA
  - DESC: 修复安全热点问题
  -     kysec-common-fix-sonarqube.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-05
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: 增加获取指定目录下所有子文件和子目录接口,逐级获取接口,增加获取指定目录下文件和目录,仅指定目录层级
  -     kysec-common-add-get-path-api.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-03
changelog:
  - Type: update
  - ID: [TASK#441731]
  - SUG: NA
  - DESC: 模式切换时 去除kysec中开启box的动作,单独开启box
  -	  kysec-daemon-fix-double-enable-box.patch  
  - 	添加setModuleStatusReboot()接口, 可以直接重启系统
  -         kysec-daemon-add-set-module-status-reboot-interface.patch   
  -   box开启逻辑放在kysec中作为子项
  -         kysec-daemon-fix-change-box-status.patch
  - 修改security-switch --get 状态时 off的状态显示值由none 变为off
  -	  kysec-daemon-get-status-none-2-off.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-04
changelog:
  - Type: update
  - ID: [BUG#352649][BUG#352653][BUG#351149]
  - SUG: NA
  - DESC: 修复调用reboot命令执行错误的问题
  -	  kysec-daemon-fix-excute-reboot-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#353088][BUG#353355]
  - SUG: NA
  - DESC: 安全模式由off切换到strict出现提示完成后立即重启[BUG#353088]
  -	无权限进行模式切换的用户，切换失败后提示信息不友好[BUG#353355]
  -	  kysec-daemon-fix-off-to-strict-need-immediately-reboot-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-06
changelog:
  - Type: bugfix
  - ID: [BUG#354035][BUG#353489]
  - SUG: NA
  - DESC: [BUG#354035]修复开启安全后 audit服务启动失败问题
  -       [BUG#353489]解决安全中心设置中无法关闭安全问题
  -       [其它]修复onoe模式下ksaf是开启状态, 检查切换模式是否需要重启错误的问题
  -          -- kysec-daemon-fix-none-mode-but-ksaf-on-check-reboot-error.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-07
changelog:
  - Type: bugfix
  - ID: [BUG#369811][BUG#368135]
  - SUG: NA
  - DESC: [BUG#369811]修复softmode和enable互相切换时会修改子模块状态的问题
  -	[BUG#368135]推荐模式下，setstatus生效测试-apparmor-enable，失败
  -         -- kysec-daemon-fix-softmode-and-enable-switch-error.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-08
changelog:
  - Type: bugfix
  - ID: [BUG#372191]
  - SUG: NA
  - DESC: [BUG#372191]修改涉密场景禁止设置安全模式和切换kysec、selinux、apparmor状态
  -	[其它]修复setstatus设置状态时, 如果状态出错, 是正常返回的问题
  -	  -- kysec-daemon-modify-sm-scene-forbidden-set-security-mode.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-09
changelog:
  - Type: bugfix
  - ID: [BUG#375127][BUG#372111]
  - SUG: NA
  - DESC: [BUG#375127]修复频繁操作security-switch --get 模式回变成off
  -	[BUG#372111]解决普通用户可以使用systemctl管理服务问题
  -	  -- kysec-daemon-fix-repeatedly-execute-security-switch-get-error.patch


author: litianhao <litianhao@kylinos.cn> - 2.0.0-10
changelog:
  - Type: bugfix
  - ID: [BUG#376773]
  - SUG: NA
  - DESC: [BUG#376773]修复频繁操作security-switch --get 模式回变成off
  -	  kysec-daemon-do-not-disable-audit.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.0-11
changelog:
  - Type: bugfix
  - ID: [BUG#379175]
  - SUG: NA
  - DESC: 修复切换切换strict或default模式后 grub中存在两个audit参数问题
  -	  kysec-daemon-fix-grub-audit-param-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.0-12
changelog:
  - Type: bugfix
  - ID: [BUG#381085]
  - SUG: NA
  - DESC: 修复off模式下仅开启box 重启后 获取的安全状态不正常问题
  -	  kysec-daemon-fix-get-security-status-error-when-only-open-box.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-13
changelog:
  - Type: bugfix
  - ID: [TASK#555445]
  - SUG: NA
  - DESC: 解决只切换selinux状态时, 不进行策略编译下发
  -	  kysec-daemon-fix-set-selinux-status-not-sync-policy.patch


author: lengchunying <lengchunying@kylinos.cn> - 2.0.0-14
changelog:
  - Type: bugfix
  - ID: [TASK#566261]
  - SUG: NA
  - DESC: 修复CVE-2025-1202
  -         kysec-daemon-fix-cve-2025-1202.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.09
changelog:
  - Type: bugfix
  - ID: [BUG#218046]
  - DESC: 修复系统重启后kmod的sm策略不生效
  -	  add patch: kysec-sync-daemon-fix-sm-policy-kmod-inoperative-when-reboot.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.10
changelog:
  - Type: bugfix
  - ID: [BUG#218522]
  - DESC: 修复重启后hub管控不生效的问题
  -     add patch: kysec-sync-daemon-fix-hub-policy-not-work-after-reboot.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.11
changelog:
  - Type: bugfix
  - ID: [TASK#217917]
  - DESC: 修复设备管控usb中的段错误
  -     add patch: kysec-sync-daemon-fix-usb-coredump.patch


author: lengchunying <lengchunying@kylinos.cn> - 1.1.1-01.se.13
changelog:
  - Type: update
  - ID: [TASK#226809] 覆盖率测试
  - SUG: NA
  - DESC: 编写覆盖率测试用例，覆盖率>10%
  - 	add patch: kysec-sync-daemon-test-20240729.patch
  - 		kysec-sync-daemon-test1-20240731.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.14
changelog:
  - Type: update
  - ID: [TASK#391719][TASK#395913] 修复安全热点 修复fortify
  - SUG: NA
  - DESC: 修复安全热点
  - 	add patch: kysec-sync-daemon-fix-security-func.patch
  - 		       kysec-sync-daemon-fix-sonarqube-bugs.patch
  -              kysec-sync-daemon-fix-fortify-security-issues.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.15
changelog:
  - Type: update
  - ID: [TASK#401353]
  - SUG: NA
  - DESC: 提升代码覆盖率
  - 	add patch: kysec-sync-daemon-add-unit-test-20241030.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.16
changelog:
  - Type: update
  - ID: [TASK#422677]
  - SUG: NA
  - DESC: 解决安全热点,增加license
  - 	add patch: kysec-sync-daemon-fix-sonarqube-scan.patch
  -   add path: kysec-sync-daemon-add-license.patch


author: pengxi <pengxi@kylinos.cn> - 1.1.1-01.se.17
changelog:
  - Type: update
  - ID: [TASK#435238]
  - SUG: NA
  - DESC: 提升代码覆盖率
  - 	add patch: kysec-sync-daemon-update-unit-code.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.18
changelog:
  - Type: update
  - ID: [TASK#591121]
  - SUG: NA
  - DESC: 增加test条件编译变量
  - 	add patch: kysec-sync-daemon-20260129-add-test-compile-condition.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#347304][BUG#346994][BUG#352195][BUG#347171][BUG#346911]
  - SUG: NA
  - DESC: 应用联网控制-命令行状态实时更新到UI测试（关-开-关）-切换过安全功能的none，命令开启联网控制失败[BUG#347304]
  -	普通用户修改保护箱状态失败kysec_policy命令未提示失败原因[BUG#352195]
  -	kysec_policy错误参数未输出帮助信息[BUG#347171]
  -	应用联网控制，首次安装系统后执行kysec_policy net on，提示先开启kysec[BUG#346994]
  -	未开启kysec，输入错误参数未输出帮助信息[BUG#346911]
  -	  kysec-utils-fix-kysec-policy-command-bug3.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-06
changelog:
  - Type: bugfix
  - ID: [BUG#346897]
  - SUG: NA
  - DESC: 修复BUG#346897 文件保护箱打不开
  -	kysec_policy和kysec_set命令交互提示之前,先检查接口调用权限
  -	旧命令加入废弃提示
  -	_get_func_status()接口查询子模块状态之前,先查询kysec状态, kysec为关,子模块都是关
  -	文件保护允许删除不存在的文件、目录和软件包的只读保护策略和例外策略
  -	忽略链接文件的实际文件不存在时的报错
  -	  kysec-utils-fix-kysec-policy-command-bug4.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-07
changelog:
  - Type: bugfix
  - ID: [BUG#360575]
  - SUG: NA
  - DESC: 修复BUG#360575 添加\删除\查看\清除白名单-对象不存在-kysec_set提示信息未换行
  -       同步桌面修改:
  -       1、修复bug#353590 kysec_policy命令行-A添加策略时,不允许设置-v选项, 增加错误提示
  -       2、修复enable和warning的拼写错误
  -       3、修改checkSecuritySwitchReboot_dbus()接口调用函数名错误的问题
  -       4、新增getBootMode_dbus()查询当前系统模式的接口
  -       5、网络保护查询所有策略不检查软件包和文件是否存在
  -       6、网络保护删除文件策略时, 不检查文件是否存在
  -       7、网络保护删除、添加和更新文件策略时，如果文件有所属软件包，需要处理软件包的策略
  -       8、执行控制添加告警弹窗状态设置
  -       9、执行控制和文件只读保护添加在不可变模式下过滤/usr路径下的文件
  -         -- kysec-utils-fix-kysec-policy-command-bug5.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-08
changelog:
  - Type: bugfix
  - ID: [BUG#361691]
  - SUG: NA
  - DESC: [BUG#361691]解决进程保护和文件只读保护例外程序无法删除的问题
  -       同步桌面补丁:
  -       [其它]文件保护和执行控制添加例外程序时，在不可变模式下过滤/usr目录
  -       [其它]删除status_dbus.h中的config.h头文件引用, 解决其它包引用时编包错误
  -         -- kysec-utils-fix-kysec-policy-command-bug6.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-09
changelog:
  - Type: bugfix
  - ID: [BUG#347672][TASK#471077][BUG#346106][BUG#352444][BUG#346106][BUG#364039][BUG#364125][BUG#363959]
  - SUG: NA
  - DESC: [BUG#347672]根据要求去除错误码
  -       [BUG#347672]根据要求去除错误码
  -       [TASK#471077]修复申请的资源未释放问题
  -       [其它]安全热点问题
  -       [BUG#346106]修复使用kysec_set添加文件策略后, kysec_policy更新对应文件策略失败的问题
  -       [BUG#352444]优化kysec关闭时, 开启单独模块耗时长的问题
  -       [BUG#346106]网络控制修改逻辑, 文件有所属软件包, 添加修改软件包策略
  -       [BUG#364039]文件保护的帮助信息不对
  -       [BUG#364125]文件保护添加目录和软件包none标记提示核心已转储
  -       [BUG#363959]目录添加保护，删除文件保护例外失败
  -       [其它]修改setstatus命令, 切换box时ksaf开启不提示重启
  -       同步桌面补丁:
  -       [其它]修改设备管控光驱的状态显示
  -       [其它]优化执行控制查询白名单速度
  -          -- kysec-utils-fix-kysec-policy-command-bug7.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-10
changelog:
  - Type: bugfix
  - ID: 
  - SUG: NA
  - DESC: [BUG#368141]根据路径删除网络管控策略-kysec_set未生效
  -       [BUG#368141]根据路径删除网络管控策略-kysec_set未生效
  -       [BUG#368127]kysec_get netctl -l 无数据
  -       [BUG#367319]帮助信息-kysec_get输出多余信息
  -       [BUG#367069]更新被篡改的文件，有多余的提示信息
  -       [BUG#366955]off->开启kysec，禁止程序执行的子模块显示名称不对
  -       [BUG#366937]开启获取selinux状态，命令提示处于废弃阶段，删除getstatus和setstatus中废弃提示
  -       [BUG#366379]execban禁止程序执行-strict权限测试，root和auditadm用户不可执行
  -       [BUG#366367]strict模式下关闭selinux，出现交互信息
  -       [BUG#365915]清除标签-递归目录-执行命令未达预期，删除提示信息
  -       [BUG#365873]清除标签-目录，执行命令提示不符预期，删除提示信息
  -       [BUG#364687]kysec_policy包名添加的程序，路径方式删除成功提示失败
  -       [BUG#364667]kysec_set添加的策略，kysec_policy更新失败
  -       [BUG#364125]文件保护添加目录和软件包none标记提示核心已转储
  -       [BUG#364017]删除文件保护后，例外程序未被删除
  -       [其它]修改设备管控错误, 修改cdrom设置权限的方式
  -       [其它]修改scripts/init-bottom/3adm_enable文件,解决三员模式下kysec-daemon修改netctl.xml错误的问题
  -          -- kysec-utils-fix-kysec-policy-command-bug8.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-11
changelog:
  - Type: bugfix
  - ID: [BUG#370259]
  - SUG: NA
  - DESC: [BUG#370259]删除服务器的命令行的禁止执行功能
  -	[BUG#369979]解决黑白名单安装控制-黑白名单同时生效时，rpm安装软件包提示核心已转储的问题
  -       [其它]修复编译优化参数是-O0时，编译错误的问题
  -       [其它]涉密场景下kysec_policy禁止设置kysec状态, setstaus禁止设置kysec、selinux和apparmor状态,
                kysec_set和kysec_get禁止和查询设置fpro、ppro和kmod策略
  -         -- kysec-utils-fix-kysec-policy-command-bug9.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-12
changelog:
  - Type: bugfix
  - ID: [BUG#375705]
  - SUG: NA
  - DESC: [BUG#375705]kysec_policy userid --help root用户不展示帮助手册
  -       同步桌面修改：
  -       [BUG#377631]删除开明包标记后，kaiming命令不可用，软件包忽略软链接文件
  -       [BUG#358329]开明包删除标记后，进行标记查询，出现警告弹窗，软件包忽略软链接文件
  -       [其它]隐私保护除设置开关外，其它操作不检查用户权限检查
  -	  -- kysec-utils-fix-kysec-policy-command-bug10.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-13
changelog:
  - Type: bugfix
  - ID: [BUG#378971][BUG#380475][BUG#380117]
  - SUG: NA
  - DESC:[BUG#378971]下发docker中的脚本，无法移除策略, 修改通过pid获取路径接口
  -      [BUG#380475]kysec_policy -V不显示版本信息, 隐藏-V选项
  -      [BUG#380117]更新不存在的管控策略成功, 修改文件和软件包策略都不存在,不添加软件包策略
  -      [BUG#380347]/usr/etc/文件不应存在,修改spec文件,创建命令注释了
  -      spec文件增加libksaf-label-manager-devel依赖
  -	  -- kysec-utils-fix-kysec-policy-command-bug11.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-14
changelog:
  - Type: TASK
  - ID: [TASK#502485]
  - SUG: NA
  - DESC: 同步桌面修改：
  -	[BUG#355391]不可变模式下，忽略软件包中含有不可变目录下的文件设置执行控制标签
  -	  -- kysec-utils-fix-kysec-policy-command-bug12.patch


author: maxu <maxu@kylinos.cn> - 4.0.0-15
changelog:
  - Type: TASK
  - ID: [TASK#548021]
  - SUG: NA
  - DESC: 同步Bug#434735修复补丁
  -	[BUG#434735]进程防杀死接口测试-执行./ppro add /usr/bin/top失败
  -	  kysec-utils-fix-return-value.patch


author: maxu <maxu@kylinos.cn> - 4.0.0-16
changelog:
  - Type: update
  - ID: [BUG#450991]
  - SUG: NA
  - DESC: 【安全套件】文件防护功能函数优化，对目录添加保护后子目录仍然能够被删除移动
  -	  kysec-utils-add-dir-protect.patch


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.0-02.se.07
changelog:
  - Type: update
  - ID: [BUG#290677]【V11-B14】【访问控制】【白名单访问控制】模块防卸载-执行控制标记为unknown内核模块无法修改标识
  - SUG: NA
  - DESC: 修复无法添加ko.xz文件到白名单


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-05
changelog:
  - Type: update
  - ID: [BUG#347949]【执行控制】将空目录加入白名单列表执行失败
  - SUG: NA
  - DESC: 添加空目录时接口返回0；过滤掉路径前面不存在的 /tmproot


author: wangchi <wangchi@kylinos.cn> - 1.0.1-06
changelog:
  - Type: update
  - ID: [BUG#528259]  修复python脚本无法被管控的问题
  - SUG: NA
  - DESC: 1.修改脚本判断逻辑，增加对pyc文件管控; 2.修改未授权文件执行控制标记;


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-09
changelog:
  - Type: update
  - ID: [BUG#364017]
  - SUG: NA
  - DESC: kysec2-scenen升级策略合并, 新增清除例外策略接口,解决自保护相关问题
  -     kysec2-scene-20250613-add-some-features.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-10
changelog:
  - Type: update
  - ID: [BUG#366133]
  - SUG: NA
  - DESC: chronyc命令在strict模式下 只能root执行
  -     kysec2-scene-20250624-fix-some-bugs.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-11
changelog:
  - Type: update
  - ID: [BUG#370845][BUG#368687]
  - SUG: NA 
  - DESC: 修复安装pure-ftpd后ftp无法连接，获取kysec状态时线程阻塞的问题
  -     kysec2-scene-20250626-fix-some-bugs.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-12
changelog:
  - Type: update
  - ID: [BUG#372333]
  - SUG: NA 
  - DESC: 去除secadm的dac override权能
  -     kysec2-scene-remove-secadm-dac-override-cap.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-13
changelog:
  - Type: update
  - ID: [BUG#377637]
  - SUG: NA 
  - DESC: boxctl增加user protect接口
  -     kysec2-scene-20250708-fix-some-bugs.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-14
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA 
  - DESC: sm-authorize添加的授权进程，在文件防护、进程防护、内核防护中例外放行
  -     kysec2-scene-add-sm-authorize-sync-exception-rules.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-15
changelog:
  - Type: update
  - ID: [BUG#379211]
  - SUG: NA 
  - DESC: 修复通过pid获取容器内进程的路径不正确
  -    kysec2-scene-fix-get-program-path-by-pid-error.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-16
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA 
  - DESC: 修复缺kmodctl.h文件中缺失的对scene_common.h的引用问题
  -    kysec2-scene-fix-missing-header-file.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-17
changelog:
  - Type: update
  - ID: [TASK#501697]
  - SUG: NA 
  - DESC: 修复：根据PID获取进程路径时，路径中大写字母强制转成小写字母，导致授权程序异常
  -    kysec2-scene-fix-get-path-case-error.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-18
changelog:
  - Type: update
  - ID: [BUG#383859]
  - SUG: NA 
  - DESC: 【通用用例安全适配】开启strcit后 secadm无权限执行 setsebool ftpd_full_access on
  -    kysec2-scene-fix-strict-not-exec-setsebool.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-19
changelog:
  - Type: update
  - ID: [BUG#416485]
  - SUG: NA 
  - DESC: 解决下发静态度量策略不生效问题
  -    kysec2-scene-fix-static_measurement-not-effective.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-20
changelog:
  - Type: update
  - ID: [BUG#418689]
  - SUG: NA 
  - DESC: 升级软件包时，即时生效策略
  -    kysec2-scene-add-update-rpm-sync-policy.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-21
changelog:
  - Type: update
  - ID: [TASK#549749]
  - SUG: NA
  - DESC: 移除setfattr命令特权
  -    kysec2-scene-remove-setfattr-permit.patch


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: songjuntao <songjuntao@kylinos.cn> - 1.10.2-3.p01
changelog:
  - Type:update
  - ID:TASK#599077
  - SUG:NA
  - DESC:fix use weak random while using rsa crt private operation


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-03
changelog:
  - Type:update
  - ID: [任务#443851] 【v11-2503】ksaf1.5-底层开发
  - SUG:NA
  - DESC: 解决动态变量不生效问题
          固定函数名和函数ID对应关系解决增量下发函数名会变问题


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-04
changelog:
  - Type:update
  - ID: [任务#443851] 【v11-2503】ksaf1.5-底层开发
  - SUG:NA
  - DESC: 解析策略前先初始化函数名解决增量下发函数名会变问题
          解决首次加载安全缺少section信息的问题
          修改及补充ksaf1.5单元测试


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-06
changelog:
  - Type:update
  - ID: [任务#461412] 策略改动及优化
  - SUG:NA
  - DESC: 优化策略下发速度
          全量下发和增量下发方案调整
          添加策略module_name字段
          代码冗余调整，重复代码合并
          解决当section段没策略全量下发，后加入策略增量下发失败问题
  	修复loongarch初始化下发策略段错误问题


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-07
changelog:
  - Type:update
  - ID: [Bug#354818] 【poc】安全中心多次切换策略后，策略不生效
  - SUG:NA
  - DESC: 支持多次编译一次下发
          解决动态变量不生效问题


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-08
changelog:
  - Type:update
  - ID: [任务#478961] 【V11 2503】修改ksaf-policy-interpreter和libksaf-policy-sync的单元测试和冗余代码
  - SUG:NA
  - DESC: 修改单元测试代码
          删除注释掉的冗余代码
          修改编译选项


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-09
changelog:
  - Type:update
  - ID: [任务#498111] 【v11 2503】修复执行#ldconfig 命令，提示/usr/lib64/libksafinterpreter.so.1不是symbolic link
  - SUG:NA
  - DESC: 未挂载日志目录时打印到屏幕


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-10
changelog:
  - Type:update
  - ID: [Bug#382843] 【出厂测试】【v11 2503】【需求41775】【内核模块防卸载】内核模块添加防卸载保护后卸载成功
  - SUG:NA
  - DESC: 文件写入强制落盘，防止断电丢失
          下发初始化策略，无策略二进制文件或无二进制策略目录均返回成功


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-11
changelog:
  - Type:update
  - ID: [任务#553741] 安全编译参数整改 / libksaf-policy-sync安全编译参数整改
  - SUG:NA
  - DESC: 将安全编译栈保护参数改为-fstack-protector-strong


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-14
changelog:
  - 添加tcm1支持兼容选项，以兼容v11系统
  - 修复编译条件变量编写错误导致的编译异常
  - 移除event帮助信息
  - 针对tcm1提示信息添加编译选项
  - 格式话代码格式
  - 修改编译告警
  - 修复三状态切换配置属性不全问题
  - 优化移除无冗余代码


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-16
changelog:
  - Type:update
  - ID:[TASK#366361] 【安全函数】libkydima整改
  - SUG:NA
  - DESC:安全编码合规性整改
  -      [TASK#361219] 【安全编译】gcc编译添加安全编译参数-libkydima
  -      修正不可靠代码，增加安全增强编译选项


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-19
changelog:
  - Type:update
  - ID:[BUG#351739]
  - SUG:NA
  - DESC: 针对set命令增加配置异常提示，针对get命令增加模块未加载时off状态显示
  	针对开源标准tcm2设备节点名称做自适应
  	修改kydima_get安装路径确保默认状态下普通用户可以访问该命令


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-20
changelog:
  - Type:update
  - ID:[BUG#353894] 【v11 2503】【B11】【需求44504】【x86\arm】【动态度量】不指定设备时，开启PCR策略命令执行失败
  - SUG:NA
  - DESC: 优化命令提示信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-21
changelog:
  - Type:update
  - ID:[TASK#471063] 【安全红线】整改自研组件第一轮Fortify问题-libkydima
  - SUG:NA
  - DESC: 修复server.cpp中 文件打开后存在句柄不释放的问题


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-22
changelog:
  - Type:update
  - ID: [BUG#369787] 【v11-2503】【B15】【需求44504】【动态度量】动态度量总开关关闭，无法获取子开关状态
  - SUG:NA
  - DESC: 修改kydima_get关闭状态显示信息
    	调整kydima_set用户执行权限


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-23
changelog:
  - Type:update
  - ID: [BUG#385507]【出厂测试】【v11-2503】【B20】【需求44504】【动态度量】帮助信息描述不对
  - SUG:NA
  - DESC: 优化命令帮助信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-24
changelog:
  - Type:update
  - ID: [BUG#408605]【自动化update内网源测试】【SP3-2403】libkydim包kydima_set命令设置周期可为负数
  - SUG:NA
  - DESC: 增加参数容错告警，修复后台服务无意义告警信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-25
changelog:
  - Type:update
  - ID: [TASK#553771]安全编译参数整改/libkydima安全编译参数整改
  - SUG:NA
  - DESC: 
  	修复kydima_get 无法在有KYDIMA日志类型定义环境下识别篡改日志问题
  	修复偶发内核度量策略同步下发到内核失败问题
  	安全编译栈保护参数改为-fstack-protector-strong


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p25
changelog:
  - Type: bugfix
  - ID:[BUG#345916]
  - SUG: NA
  - DESC: adjust the hardware binding order for value-added product
  	add v10/v11 version check by LICENSE OSNAME
  	add osname check and similar_product check in ukey activation
  	backup license_serial upload to activation platform
  	fix get subscription status error


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.65.p26
changelog:
  - Type: bugfix
  - ID:[BUG#348464]
  - SUG:NA
  - DESC: fix kylin_activation_sync output when subscription


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p27
changelog:
  - Type: update
  - ID:[TASK#463164]
  - SUG: NA
  - DESC: change similar_product to product for ukey activation
  	add place activation check for activation sync
  	kylin_productinfo output optimization
  	check license osname locally when kms version lower than 2.5


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p28
changelog:
  - Type: update
  - ID:[TASK#463164]
  - SUG: NA
  - DESC:
  	reduce the number of subscription status checks in kms
          check license osname locally when kms version lower than 2.5 \
  	 for kms udp activation mode
  	add local osname and product_type check when system is \
  	 migrated from other system which is not v11


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p29
changelog:
  - Type: bugfix
  - ID:[BUG#359265][TASK#463164]
  - SUG: NA
  - DESC:
  	change the process of obtaining hard disk serial number
  	optimized code and add copyright header
  	add restart_activation to conf for automatic activation


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.65.p30
changelog:
  - Type: bugfix
  - ID:[BUG#363291][BUG#365021][BUG#364959]
  - SUG: NA
  - DESC: fix ukey write error 
  	fix activate with v10 kyinfo and license
  	update testcase


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p31
changelog:
  - Type: update
  - ID:[TASK#442245]
  - SUG: NA
  - DESC: fix value added product osname check error for place


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p32
changelog:
  - Type: update
  - ID:[TASK#463164]
  - SUG: NA
  - DESC: cancel bind system uuid
  	change the way of obtaining embedded network card names on x86


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p32.01
changelog:
  - Type: update
  - ID:[TASK#502175][BUG#378051][BUG#414807]
  - SUG: NA
  - DESC: fix ukey activation more times
          upload cpu and os version info to kms server
  	change the access method of os version


author: huayadong<huayadong@kylinos.cn> 2.5.1.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add patch:libkysdk-applications-2.5.1.0-kylin-fix-compile-error-of-STB_IMAGE.patch


author: houhongxun <houhongxun@kylinos.cn> - 2.5.2.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.5.2.0-0k0.16


author: peijiankang <peijiankang@kylinos.cn> - 2.5.2.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#468457]
  - SUG : NA
  - DESC: add libkysdk-applications-2.5.1.0-fix-sonarqube-security-hotspots.patch


author: houhongxun <houhongxun@kylinos.cn> - 2.5.2.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#352900]
  - SUG : NA
  - DESC: fix klabel problem displaying multiple line text


author: houhongxun <houhongxun@kylinos.cn> - 2.5.1.2-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.5.1.2-0k4.22


author: peijiankang <peijiankang@kylinos.cn> - 2.5.1.2-1.p04
changelog:
  - Type: update
  - ID  : [TASK#474331]
  - SUG : NA
  - DESC: add libkysdk-system-2.5.1.2-kylin-fix-fortity.patch


author: xinghe <xinghe2@h-partners.com> - 2:1.6.40-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: xinghe <xinghe2@h-partners.com> - 2.74.3-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: houhongxun <houhongxun@kylinos.cn> - 2.74.3-4.p02
changelog:
  - Type:cves
  - ID:[BUG#347089]
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
         CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911
         CVE-2025-32912 CVE-2025-32913 CVE-2025-32907 CVE-2025-32914


author: houzhiwei <houzhiwei@kylinos.cn> - 2.74.3-4.p03
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969 CVE-2025-46420 CVE-2025-46421
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969 CVE-2025-46420 CVE-2025-46421


author: huayadong <huayadong@kylinos.cn> - 0.4.5.2-1.p01
changelog:
  - Type: cve
  - ID  : [TASK#505555]
  - SUG : NA
  - DESC: Patch01: timezonemap-0.4.5.2-kylin-mg-word-modification.patch


author: JiaboFeng <fengjiabo1@huawei.com> - 9.10.0-14
changelog:
  - Bugfix: Enhance the capability to trace the shutdown status of large VMS
  - conf: qemu: support provide inject secret for Hygon CSV
  - conf: qemu: add libvirt support reuse id for hygon CSV
  - Automatically unbind all devices' driver under same root port and bind to vfio-pci in the context of CVM.
  - Consistent coding style with opensource.
  - build: Make daemons depend on generated *_protocol.[ch]
  - Add the get tmm memory info API into libvirt-host. Also should add the RPC calls into libvirtd for API calling.
  - Add cvm parameter into the type of LaunchSecurity which is a optional filed for libvirt xml


author: yanjainqing <yanjianqing@kylinos.cn> - 9.10.0-14.p01
changelog:
  - Type: Update
  - ID:   [TASK#425201]
  - SUG:  NA
  - DESC: Backport V11-2409 patch
  -   Support Phytium S5000c
  -   Add a path in DEFAULT_LOADER_NVRAM to solve the issue of not being able to find UEFI firmware in x86 architecture
  -   Support host-model for arm, solve core dump when libvirtd starts on Phytium,solve compile error with modify xml in the test dir
  -   Disconnect libvirt's dependency on rbd and install it when the user needs to support it
  -   Fix the translation problem of libvirtd.policy's prompts
  -   Support MCE error alert and optimization the function that locates VMs affected by MCE errors
  -   Fix CVE-2024-4418
  -   Fix virtual machine save and restore failure issue when CPU model is configured as host model mode


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-14.p02
changelog:
  - Type: Update
  - ID:   [BUG#345770]
  - SUG:  NA
  - DESC: Fix some translation errors of common functions.


author: yanjianqing <yanjianqing@kylinos.cn> - 9.10.0-14.p03
changelog:
  - Type: Bugfix
  - ID: [BUG#347955]
  - SUG: NA
  - DESC: Enable netcf support
  -       Fix several iface-related translation issues


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-14.p05
changelog:
  - Type: cves
  - ID:   CVE-2025-12748 CVE-2025-13193
  - SUG:  NA
  - DESC: Fix CVE-2025-12748 CVE-2025-13193


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-14.p06
changelog:
  - Type: update
  - ID:   [TASK#592121]
  - SUG:  NA
  - DESC: Rebuild for wirshark update from 3.6.14-12.p01 to 4.4.10-3.p01


author: zhangxianjun <zhangxianjun@kylinos.cn> - 1.13.1-2.p01
changelog:
  - Type:update
  - ID:[TASK#425066]
  - SUG:NA
  - DESC: mv /usr/bin/tools/tiny_ssim to /usr/bin/tiny_ssim required by FHS standard


author: lipengyu <lipengyu@kylinos.cn> - 2.11.9-2.p01
changelog:
  - Type: update
  - ID: [TASK#424807]
  - SUG:NA
  - DESC:add patch
         0001-kylin-compat-support-V1.0-for-libxml2.patch
         0002-kylin-compat-support-V1.1-for-libxml2.patch


author: yuanchao <1050706328@qq.com> - 8:2.03.21-13
changelog:
  - support clang build:
    - fix function undeclared in libdm-common.c and dev-cache.c
    - fix changelog to be in descending chronological order


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.20.2-2
changelog:
  - Set TERM to xterm-256color
  - use https://github.com/mate-desktop/mate-terminal/commit/4f89d21
  - fix rhbz https://bugzilla.redhat.com/show_bug.cgi?id=1517870


author: longcheng <longcheng@kylinsec.com.cn> - 1.22.1-5
changelog:
  - KYOS-B: add kylin mask and part of translations
  - KYOS-T: Fix translation errors in help manual.
  - KYOS-B: set text preview content (#24148)
  - KYOS-B: add two color theme and change the default color theme to Dracula Dark (#30872)
  - KYOS-B: select the default charset by locale(#49592)


author: huayadong <huayadong@kylinos.cn> - 1.22.1-5.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#238335]
  - SUG:  NA
  - DESC: Patch1009: mate-terminal-1.22.1-kylin-remove-Reset.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.22.1-5.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#240137]
  - SUG:  NA
  - DESC: Patch1010: mate-terminal-1.22.1-fix-help-display-error.patch


author: Shixiong Ou <oushixiong@kylinos.cn> - 24.0.5-1.p02
changelog:
  - Type:bugfix
  - ID:TASK#378129
  - SUG:NA
  - DESC:add upstream orcjit patch and support loongarch64 orcjit


author: lipengyu <lipengyu@kylinos.cn> - 6.4-10.p01
changelog:
  - Type:update
  - ID:[Task#327352]
  - SUG:NA
  - DESC:ncurses-support-loongarch&&enable relocation for kylin


author: gaihuiying <eaglegai@163.com> - 1:5.9.1-4
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: xingwei <xingwei14@h-partners.com> - 1:5.9.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
  	IF-MIB: pass the network interface index to net
  	IF-MIB: fix a memory leak
  	IF-MIB: fix a recently introduced use after free
  	IF-MIB: add a trailing newline to an error message


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-3.p01
changelog:
  - Type: bugfix
  - ID: [BUG#334490]
  - SUG: NA
  - DESC: Modify openEuler to Kylin in index.html,404.html,50x.html


author: songjuntao <songjuntao@kylinos.cn> - 9.6p1-5.p01
changelog:
  - Type:update
  - ID:TASK#424671
  - SUG:NA
  - DESC:update the sshd_config and ssh_config, add the auto control
          mode scripts, add auto generate sm2 hostkey when start sshd service,
          fix ssh-keyscan can't get host pubkey issue


author: songjuntao <songjuntao@kylinos.cn> - 9.6p1-5.p04.se.01
changelog:
  - Type:update
  - ID:TASK#424671
  - SUG:NA
  - DESC:Update to p04 version because of the V11 2409 and V11 2503 pam_ssh_agent_auth version are same of openssh


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p01
changelog:
  - Type: update
  - ID:TASK#424671
  - SUG:NA
  - DESC: add tlcp protocol patch, add tls rfc8998 patch , add zuc algorithm
          patch, add random drbg satisfy the GM/T 0105-2021 implementation,
          add passout and cipher parameter of ecparam apps,
          add Add-support-for-Zhaoxin-SM2-3-4-RNG.patch,
          fix some issues for the base openssl version and
          adapter the kylin old version cert


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p07
changelog:
  - Type:update
  - ID:BUG#384745
  - SUG:NA
  - DESC:remove "-fstack-protector-all" security compile option


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:3.0.12-15.p10
changelog:
  - Type:cves
  - ID:TASk#593863
  - SUG:NA
  - DESC:fix CVE-2025-68160
             CVE-2025-69418
             CVE-2025-69419
             CVE-2025-69420
             CVE-2025-69421
             CVE-2026-22795
             CVE-2026-22796


author: songjuntao <songjuntao@kylinos.cn> - 2.6.9-3.p01
changelog:
  - Type: update
  - ID: TASK#431235
  - SUG: NA
  - DESC: add tls1.3 national algorithm and tlcp protocol support, 
          and remove sample-plugins from devel package because of kylin 
          post package validate error


author: mengchaoming <mengchaoming@kylinos.cn> - 0.80-10.p01
changelog:
  - Type:update	 	
  - ID:[Task#227389]
  - SUG:NA	 		
  - DESC: sync patch
  - add patch: 0001-kylin-add-zh-HK-po.patch
  - 修改zh_HK.po文件的“户”为“戶”: kylin-modify-zh_HK_po.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 0.80-10.p01.se.01
changelog:
  - Type:update
  - ID:[Task#329161]
  - SUG:NA
  - DESC: 加入kysec检查补丁
  - add patch: passwd-0.80-add-security-check.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 0.80-10.p01.se.02
changelog:
  - Type:update
  - ID:[TASK#383361]
  - SUG:NA
  - DESC: passwd去除对libkysec包的依赖,改用dlopen方式
  - add patch: passwd-remove-libkysec-require.patch


author: lichenguang <lichenguang@kylinos.cn> - 4.10.0.5-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#250151] [BUG#334551] [BUG#346033]
  - SUG : NA
  - DESC:
  -   1. peony fix translation error.
  -   2. remove a critial messagebox.


author: lichenguang <lichenguang@kylinos.cn> - 4.10.0.5-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#337905] [BUG#296933]
  - SUG : NA
  - DESC: remove support for exfat from format dialog.


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#354594]
  - SUG : NA
  - DESC: fix thread race condition which caused coredumps


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#352389]
  - SUG : NA
  - DESC: fix for copying long name file to file safe box


author: pengjian <pengjian23@mails.ucas.ac.cn> - 1:0.82-3
changelog:
  - Introduced environment variable-controlled polling timeouts 
  for the close and connection-keeping functions in the os_unix.c file.


author: longcheng <longcheng@kylinos.com.cn> - 1.22.2-4
changelog:
  - fix(pluma-utils):Fixed garbled toolTips path in tab page with GB18030 encoding chinese translation


author: peijiankang <peijiankang@kylinos.cn> - 1.22.2-4.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#240263]
  - SUG:  NA
  - DESC: add pluma-1.22.2-cannot-automatically-detect-Chinese-encoding.patch
          add pluma-guide.tar.gz(fix BUG#240720)


author: peijiankang<peijiankang@kylinos.cn> - 1.22.2-4.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#346652]
  - SUG : NA
  - DESC: add pluma-1.22.2-fix-coredump-about-uri-isnot-exist.patch


author: weiyucheng<weiyucheng@kylinos.cn> - 1:4.9.4-8.p02
changelog:
  - Type:cves
  - ID: CVE-2025-9566
        CVE-2025-58058
  - SUG:NA
  - DESC:Fix CVE-2025-9566 and CVE-2025-58058, 
         and change exec path from /usr/bin to /usr/local/bin about podman-docker, 
         and exclude podman-remote.1.gz from podman-remote rpm


author: wangyu <wangqingsan@huawei.com> - 123-1
changelog:
  - update to 123
    - duktape:prevent wrongful termination of runway thread
    - harden the security features of the systemd service
    - add packit build tool
    - systemd:set User/Group and don't change uid/gid if already set
    - stop installing /usr/share/polkit-1/rules.d as 700/polkitd
    - moving the 50-default.rules file location


author: huayadong <huayadong@kylinos.cn> - 123-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#243579]
  - SUG:  NA
  - DESC: add Patch1:polkit-123-kylin-add-10-shutdown.rules-restrict-reboot-and-shutdown.patch


author: huayadong <huayadong@kylinos.cn> - 123-1.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#260533]
  - SUG:  NA
  - DESC: add Patch2:polkit-123-kylin-fix-prompt-no-chinese.patch


author: tianyunnuan<tianyunnuan@kylinos.cn> - 123-1.p03
changelog:
  - Type:cves
  - ID:CVE-2025-7519
  - SUG:NA
  - DESC: add patch backport-CVE-2025-7519-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch
          add patch polkit-123-kylin-fix-prompt-no-chinese.patch


author: houhongxun <houhongxun@kylinos.cn> - 23.12.0-7.p03
changelog:
  - Type: cves
  - ID:   [Task#549531]
  - SUG:  NA
  - DESC: fix CVE-2025-43718 and CVE-2025-52885
          fix conflicting man documents problem


author: lixiaoyong <lixiaoyong@kylinos.cn> - 15.12-1.p01
changelog:
  - Type: update
  - ID: [BUG#335034]
  - SUG: NA
  - DESC: update to 15.12 (fix CVE-2025-1094) and modify sensitive information


author: wuzhaomin <wuzhaomin@kylinos.cn> - 15.14-1.p01
changelog:
  - Type: cves
  - ID: [TASK#530575]
  - SUG: NA
  - DESC: update to 15.14 (fix CVE-2025-8713 CVE-2025-8714 CVE-2025-8715) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.15-1.p01
changelog:
  - Type: cves
  - ID: [TASK#560331]
  - SUG: NA
  - DESC: update to 15.15 (fix CVE-2025-12817 CVE-2025-12818) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.17-1.p01
changelog:
  - Type: cves
  - ID: [TASK#599479]
  - SUG: NA
  - DESC: update to 15.17 (fix CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006) and modify sensitive information


author: lipengyu <lipengyu@kylinos.cn> - 3.7.1-2.p01
changelog:
  - Type:fix bug
  - ID:[bug#422321]
  - SUG:NA
  - DESC:add require:python3-pillow-tk to fix import ImageTk error


author: yaoxin <yao_xin001@hoperun.com> - 6.4.1-1
changelog:
  - Update to 6.4.1
    * Parsing of the ``Transfer-Encoding`` header is now stricter.
    * Handling of whitespace in headers now matches the RFC more closely.
    * ``tornado.curl_httpclient`` now prohibits carriage return and linefeed headers in HTTP headers
    (matching the behavior of ``simple_httpclient``).


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-4032, CVE-2024-0397 and fix xml tree assert error


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.11.6-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:enable profile guided optimizations for some architectures


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-6
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-7
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup


author: Funda Wang <fundawang@yeah.net> - 3.11.6-8
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
    - Quote template strings in venv activation scripts


author: lipengyu <lipengyu@kylinos.cn> - 3.11.6-10.p04
changelog:
  - Type:CVE
  - ID:CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084
  - SUG:NA
  - DESC:fix CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084


author: lipengyu <lipengyu@kylinos.cn> - 3.11.6-20
changelog:
  - Type:CVE
  - CVE:CVE-2025-13836 CVE-2025-13837 CVE-2025-12084
  - SUG:NA
  - DESC:fix CVE-2025-13836 CVE-2025-13837 CVE-2025-12084


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-26
changelog:
  - vdpa-dev: Fix initialisation order to restore VDUSE compatibility
  - tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
  - migration: fix-possible-int-overflow
  - target/m68k: Map FPU exceptions to FPSR register
  - qemu-options: Fix CXL Fixed Memory Window interleave-granularity typo
  - hvf: arm: Fix encodings for ID_AA64PFR1_EL1 and debug System registers
  - hw/intc/arm_gic: Fix handling of NS view of GICC_APR<n>
  - qio: Inherit follow_coroutine_ctx across TLS
  - target/riscv: Fix the element agnostic function problem
  - accel/tcg: Fix typo causing tb->page_addr[1] to not be recorded
  - tcg/loongarch64: Fix tcg_out_movi vs some pcrel pointers
  - migration: Fix file migration with fdset
  - ui/vnc: don't return an empty SASL mechlist to the client
  - target/arm: Fix FJCVTZS vs flush-to-zero
  - hw/ppc/e500: Prefer QOM cast
  - sphinx/qapidoc: Fix to generate doc for explicit, unboxed arguments
  - hw/ppc/e500: Remove unused "irqs" parameter
  - hw/ppc/e500: Add missing device tree properties to i2c controller node
  - hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb()
  - hw/arm/mps2-tz.c: fix RX/TX interrupts order
  - target/i386: csv: Add support to migrate the incoming context for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing context for CSV3 guest
  - target/i386: csv: Add support to migrate the incoming page for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing page for CSV3 guest
  - linux-headers: update kernel headers to include CSV3 migration cmds
  - vfio: Only map shared region for CSV3 virtual machine
  - vga: Force full update for CSV3 guest
  - target/i386: csv: Load initial image to private memory for CSV3 guest
  - target/i386: csv: Do not register/unregister guest secure memory for CSV3 guest
  - target/i386: cpu: Populate CPUID 0x8000_001F when CSV3 is active
  - target/i386: csv: Add command to load vmcb to CSV3 guest memory
  - target/i386: csv: Add command to load data to CSV3 guest memory
  - target/i386: csv: Add command to initialize CSV3 context
  - target/i386: csv: Add CSV3 context
  - next-kbd: convert to use qemu_input_handler_register()
  - qemu/bswap: Undefine CPU_CONVERT() once done
  - exec/memop: Remove unused memop_big_endian() helper
  - hw/nvme: fix handling of over-committed queues
  - 9pfs: fix crash on 'Treaddir' request
  - hw/misc/psp: Pin the hugepage memory specified by mem2 during use for psp
  - hw/misc: support tkm use mem2 memory
  - hw/i386: add mem2 option for qemu
  - kvm: add support for guest physical bits
  - target/i386: add guest-phys-bits cpu property


author: Xianglai Li <lixianglai@loongson.cn> - 11:8.2.0-27
changelog:
  - fix compile error on loongarch
  - hw/loongarch: fix cpu hotplug reset
  - hw/loongarch/boot: Use warn_report when no kernel filename
  - hw/loongarch: clean code
  - hw/loongarch: Add KVM pch msi device support
  - hw/loongarch: Add KVM pch pic device support
  - hw/loongarch: Add KVM extioi device support
  - hw/loongarch: Add KVM IPI device support
  - hw/loongarch/virt: Update the ACPI table for hotplug cpu
  - hw/loongarch/virt: Add basic CPU plug support
  - hw/loongarch/virt: Add CPU topology support
  - accel/kvm/kvm-all: Fixes the missing break in vCPU unpark logic
  - gdbstub: Add helper function to unregister GDB register space
  - physmem: Add helper function to destroy CPU AddressSpace
  - hw/acpi: Update CPUs AML with cpu-(ctrl)dev change
  - hw/acpi: Update ACPI GED framework to support vCPU Hotplug
  - hw/acpi: Move CPU ctrl-dev MMIO region len macro to common header file
  - accel/kvm: Extract common KVM vCPU {creation,parking} code
  - target/loongarch: Add steal time support on migration
  - linux-headers: loongarch: Add kvm_para.h and unistd_64.h
  - target/loongarch/kvm: Implement LoongArch PMU extension
  - target/loongarch: Implement lbt registers save/restore function
  - target/loongarch: Add loongson binary translation feature
  - sync loongarch linux-headers
  - target/loongarch: Avoid bits shift exceeding width of bool type
  - target/loongarch: Use explicit little-endian LD/ST API
  - target/loongarch: fix -Werror=maybe-uninitialized false-positive
  - target/loongarch: Support QMP dump-guest-memory
  - target/loongarch/kvm: Add vCPU reset function
  - target/loongarch: Add compatible support about VM reboot
  - target/loongarch: Fix cpu_reset set wrong CSR_CRMD
  - target/loongarch: Set CSR_PRCFG1 and CSR_PRCFG2 values
  - target/loongarch: Remove avail_64 in trans_srai_w() and simplify it
  - target/loongarch/kvm: Add software breakpoint support
  - target/loongarch: Add loongarch vector property unconditionally
  - target/loongarch/kvm: Fix VM recovery from disk failures
  - target/loongarch: Put cpucfg operation before CSR register
  - target/loongarch: Add TCG macro in structure CPUArchState
  - hw/arm/virt-acpi-build.c: Migrate SPCR creation to common location
  - hw/loongarch/virt: Add FDT table support with acpi ged pm register
  - hw/loongarch/virt: Add description for virt machine type
  - hw/loongarch: Add acpi SPCR table support
  - hw/loongarch: virt: pass random seed to fdt
  - hw/loongarch: virt: support up to 4 serial ports
  - hw/loongarch: Remove default enable with VIRTIO_VGA device
  - hw/loongarch: Fix length for lowram in ACPI SRAT
  - hw/loongarch/virt: Remove unused assignment
  - hw/loongarch: Change the tpm support by default
  - hw/loongarch/boot.c: fix out-of-bound reading
  - hw/loongarch/virt: Use MemTxAttrs interface for misc ops
  - tests/libqos: Add loongarch virt machine node
  - hw/loongarch: Remove minimum and default memory size
  - hw/loongarch: Refine system dram memory region
  - hw/loongarch: Refine fwcfg memory map
  - hw/loongarch: Refine fadt memory table for numa memory
  - hw/loongarch: Refine acpi srat table for numa memory
  - hw/loongarch: Add VM mode in IOCSR feature register in kvm mode
  - hw/loongarch: Refine default numa id calculation
  - hw/loongarch: Rename LoongArchMachineState with LoongArchVirtMachineState
  - hw/loongarch: Rename LOONGARCH_MACHINE with LOONGARCH_VIRT_MACHINE
  - hw/loongarch: move memory map to boot.c
  - loongarch: switch boards to "default y"
  - hw/loongarch: Add cells missing from rtc node
  - hw/loongarch: Add cells missing from uart node
  - hw/loongarch: fdt remove unused irqchip node
  - hw/loongarch: fdt adds pcie irq_map node
  - hw/loongarch: fdt adds pch_msi Controller
  - hw/loongarch: fdt adds pch_pic Controller
  - hw/loongarch: fdt adds Extend I/O Interrupt Controller
  - hw/loongarch: fdt adds cpu interrupt controller node
  - hw/loongarch: Init efi_fdt table
  - hw/loongarch: Init efi_initrd table
  - hw/loongarch: Init efi_boot_memmap table
  - hw/loongarch: Init efi_system_table
  - hw/loongarch: Add init_cmdline
  - hw/loongarch: Add slave cpu boot_code
  - hw/loongarch: Add load initrd
  - hw/loongarch: Move boot functions to boot.c


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-27.p01
changelog:
  - Type: Update
  - ID:   [TASK#425199]
  - SUG:  NA
  - DESC: 
  - Add loongarch defalut machine type in machine map and fix qemu-iotest error
  - enable spice for aarch64
  - add phytium cpu models ft-2000+ ft-S2500 ft-S5000c
  - show virtio nic bandwith as 10Gbps
  - make libvirt support host-model on aarch64
  - Fixed:systemd-detect-virt returns the result qemu, when kvm acceleration is enabled in Loongson architecture.
  - Add support for migration from rhel or openEuler to Kylin
  - Fix acpi hotplug state cause migration failure


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-27.p02
changelog:
  - Type: Update
  - ID:   [TASK#433635]
  - SUG:  NA
  - DESC: Support migration between Phytium different CPU model


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-27.p03
changelog:
  - Type: Bug
  - ID:   [BUG#346607]
  - SUG:  NA
  - DESC: Fix the bug use virtio-gpu can not start vm with error 'egl-headless is not available'.


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-27.p05
changelog:
  - Type: Update
  - ID:   [BUG#346607][BUG#351085]
  - SUG:  NA
  - DESC: fix vm can not use virtio-gpu with error 'egl-headless is not available'


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-27.p06
changelog:
  - Type: Update
  - ID:   [TASK#433654]
  - SUG:  NA
  - DESC: sync virtcca support patch from euler and fix bug


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-27.p07
changelog:
  - Type: Bugfix
  - ID:   [Bug#346647][Bug#346638]
  - SUG:  NA
  - DESC: fix vm shutdown and reboot issues in loongarch


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-27.p08
changelog:
  - Type: Bugfix
  - ID:   [Bug#398833]
  - SUB:  NA
  - DESC: resolve file conflicts in compatibility testing


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-27.p09
changelog:
  - Type: Bugfix
  - ID:   [Bug#393455]
  - SUB:  NA
  - DESC: hw: Fix bug, multiple default machines caused the qemu-kvm to crash.


author: peijiankang <peijiankang@kylinos.cn> - 0.9.2-1.p01
changelog:
  - Type: compile
  - ID  : [TASK#543769]
  - SUG : NA
  - DESC: fix build error caused by disabling decoration_shadows support in qt5-qtwayland


author: Xu Jin <jinxu@kylinos.cn> - 8.0.2-3.p01
changelog:
  - Type:enhancement
  - ID:TASK#372069
  - SUG:NA
  - DESC:Add loongarch support.Fix build error for Kylin V11.


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop qt5-ukui-platformtheme-4.10.0.0-ok52k0.18
          upstream commtid:723df8376ab0c104ef9b4e5612fee9012cad4fc9


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#525485]
  - SUG : NA
  - DESC: qt5-ukui-platformtheme remove libqt5-gesture-extensions


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: lifeifei <lifeifei@kylinos.cn> 7.2.10-1
changelog:
  - Type:update
  - ID:[Task#494581]
  - SUG:NA
  - DESC:1.Update to 7.2.10: Fix CVE-2025-32023 CVE-2025-48367.


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: xinghe <xinghe2@h-partners.com> - 4.18.5-2
changelog:
  - Type:cves
  - ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
  - SUG:NA
  - DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670


author: sunjin <sunjin@kylinos.cn> 1.1.0-16
changelog:
  - Type:update
  - ID:[Bug#290827][Bug#290809][Bug#281275][Bug#292899]
  - SUG:NA
  - DESC: 【安全加固】security-reinforce入库
  -   【V11-B14】【安全加固】【还原中】还原中断，安全加固界面异常 [用例#1365655]
  -   【V11-B14】【安全加固】【安全扫描】编辑用户自定义模板，安全中心闪退 [用例#1365641]
  -   【V11 B12】【安全加固】【交互命令】选择模板-扫描/加固/还原测试 加固模板与加固项不匹配 [用例#989419]
  -   【v11-B14】【安全加固】使用扫描项为所有的自定义模板进行扫描加固后，重启系统，安全加固功能不可用


author: sunjin <sunjin@kylinos.cn> 2.0.0-01
changelog:
  - Type:update
  - ID:[Task#436662][Bug#313077]
  - SUG:NA
  - DESC: 安全加固2.0版本，更新基线描述，v11适配空闲时间锁屏加固项
  -   【v11-B18】【安全加固】【资源分配】未安装quota和libcgroup，未扫出检查系统资源使用控制待加固项
  -   修复了一些自测发现的问题，禁用不必要别名需要执行newaliase


author: sunjin <sunjin@kylinos.cn> 2.0.0-02
changelog:
  - Type:update
  - ID:[Bug#347476][Bug#313077][Bug#348346][Bug#348226]
  - SUG:NA
  - DESC:
  -   【v11 2503】【B09】【需求44508】【uid唯一性检验】关闭uid唯一性检验-uid加固项测试，还原报告中用户名称出现了2次的问题
  -   【v11-B18】【安全加固】【资源分配】未安装quota和libcgroup，未扫出检查系统资源使用控制待加固项
  -   【B09】【41499】【V11-2503】【安全加固】【系统安全】防火墙配置在报告中描述错误
  -   【B09】【41499】【V11-2503】【安全加固】【文件权限】限制日志文件权限，描述错误
  -    未开启三员，root或管理员有安全加固的使用权限； 开启三员，仅root有安全加固的使用权限


author: sunjin <sunjin@kylinos.cn> 2.0.0-03
changelog:
  - Type:update
  - ID:[Bug#349061][Bug#349027][Bug#348813][Bug#348462][Bug#347932][Bug#348879]
  - SUG:NA
  - DESC:
  -   【B09】【41785】【V11-2503】【安全加固】【安全服务】用户登录ftp后访问目录权限正确 加固还原后源文件备注的信息被删除
  -   【B09】【41499】【V11-2503】【安全加固】【安全服务】限制FTP用户登录后能访问的目录加固|还原后的报告描述错误
  -   【V11-2503】【B09】【安全加固】【安全服务】设置SSH安全协议还原后将注释项也删除了
  -   【B09】【41499】【V11-2503】【安全加固】【密码强度】加强口令的密码算法报告描述错误
  -   【V11-2503】【B09】【安全加固】【系统维护】限制仅允许系统管理员进入维护模式，实际加固失败
  -   【V11-2503】【B09】【安全加固】【安全服务】禁止root登录VSFTP，扫描不成功
  -    同步修复密码策略里回文检查参数错误
  -    添加security-reinforce-update-20250521.patch


author: sunjin <sunjin@kylinos.cn> 2.0.0-04
changelog:
  - Type:update
  - ID:[Bug#246503]
  - SUG:NA
  - DESC:
  -   【V11-B07】【安全加固】【系统设置】禁用ctrl+alt+del组合键失败
  -    解决安全热点
  -    删除无用代码initSp3ToSp4IdMap
  -    单元测试覆盖率到达70%
  -    添加security-reinforce-update-20250611.patch


author: zhaoyun <zhaoyun@kylinos.cn> 2.0.0-05
changelog:
  - Type:bugfix
  - ID:[Bug#368657]
  - SUG:NA
  - DESC:
  -   【V11-2503】【B15】【需求41499】【安全加固】【交互命令】扫描后不加固，再次扫描加固，导出报告按enter键提示核心已转储


author: sunjin <sunjin@kylinos.cn> 2.0.0-06
changelog:
  - Type:TASK
  - ID:[TASK#553765][TASK#543765]
  - SUG:NA
  - DESC:
  -    子 安全编译参数整改 / security-reinforce安全编译参数整改
  -    V10各版本及V11版本安全加固项ssh强加密算法调整
  -    add security-reinforce-update-20251127.patch


author: mengchaoming <mengchaoming@kylinos.cn> - 2:4.14.3-1.p01
changelog:
  - Type:update	 	
  - ID:[Task#227389]
  - SUG:NA	 		
  - DESC: sync patch:支持香港繁体中文	 	 
  - add patch:shadow-4.8.1-add-zh_HK.po.patch
  - add patch:shadow-4.8.1-add-zh_HK_1.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-1.p01.se.01
changelog:
  - Type:update
  - ID:[Task#223910]
  - SUG:NA
  - DESC: 【身份鉴别】支持UID唯一性检查
  - add patch: kylin-shadow-add-user-UID-unique.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-1.p01.se.02
changelog:
  - Type:update
  - ID:[BUG#241779]
  - SUG:NA
  - DESC: 【uid唯一性检验】uid唯一性提示语为英文
  - add patch: kylin-shadow-fix-zh_CN-po-0001.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-5.p02
changelog:
  - Type:update
  - ID:[BUG#345177]
  - SUG:NA
  - DESC: fix the failure to groupadd auditadm or secadm
  - add patch: kylin-shadow-fix-the-failure-to-groupadd-auditadm-or-secadm.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-5.p03
changelog:
  - Type:update
  - ID:[Task#501061]
  - SUG:NA
  - DESC: add 3adm check for chpasswd/usermod
  - add patch: shadow-add-3adm-check-support.patch


author: andy lau <liuyang01@kylinos.cn> - 15.7-15.p01
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC: [backport] shim: don't set second_stage to the empty string


author: yueyuankun <yueyuankun@kylinos.cn> - 15.7-15.p05
changelog:
  - Types:bugfix
  - ID:BUG#500923
  - SUG:NA
  - DESC:spec: Remove debugsource requirement from debuginfo
         Allow debuginfo to be installed alone without pulling in the debugsource package.


author: litianhao <litianhao@kylinos.cn> - 1.1.1-03
changelog:
  - Type: update
  - ID: [TASK#443853] 新增产品化功能 修复产品化功能BUG
  - SUG: NA
  - DESC: 优化sm授权机制，使用scene的接口控制授权
  -       sm-enhancement-optimize-authorize.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-04
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: 优化sm授权进程，添加进程时，自动添加自保护例外放行
  -       sm-enhancement-add-self-protect-exception.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-05
changelog:
  - Type: update
  - ID: [TASK#468477]
  - SUG: NA
  - DESC: 修复安全热点问题
  -       sm-enhancement-fix-sonarqube.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-06
changelog:
  - Type: update
  - ID: [BUG#369491]
  - SUG: NA
  - DESC: 网卡管控-普通用户修改细粒度网卡策略无失败提示
  -       sm-enhancement-fix-common-user-no-tip.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-07
changelog:
  - Type: update
  - ID: [BUG#369491]
  - SUG: NA
  - DESC: 修改普通用户设置细颗粒度网卡策略失败提示信息
  -       sm-enhancement-update-common-user-tip.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-08
changelog:
  - Type: update
  - ID: [BUG#377853]
  - SUG: NA
  - DESC: 解决sm-authorize取消授权后无法切换strict模式
  -       sm-enhancement-fix-uninstall-sm-switch-strict-failed.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-09
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA 
  - DESC: sm-authorize添加的授权进程，在文件防护、进程防护、内核防护中例外放行
  -       sm-enhancement-add-sm-authorize-sync-exception.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-10
changelog:
  - Type: update
  - ID: [BUG#382501]
  - SUG: NA
  - DESC: 修复remove pvid接口调用失败的问题
  -       sm-enhancement-fix-devctl-perm-when-remove-pvid.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-11
changelog:
  - Type: update
  - ID: [BUG#384403]
  - SUG: NA
  - DESC: 服务开机启动时，调用add_inf_policy add_device_policy add_usb_policy接口失败
  -       sm-enhancement-fix-return-incorrect-value.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-12
changelog:
  - Type: update
  - ID: [BUG#384403]
  - SUG: NA
  - DESC: 修改一处遗漏的返回值处理逻辑
  -       sm-enhancement-optimize-interface-return-value.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-13
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA
  - DESC: 同步桌面Bug#434735修复补丁
  -       sm-enhancement-sync-desktop-bug-434735.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-14
changelog:
  - Type: NA
  - ID: [TASK#589931]
  - SUG: NA
  - DESC: 修复安全热点问题
  -       sm-enhancement-resolve-hotspot-issue.patch


author: yanglu <yanglu72@h-partners.com> - 7:6.1-2
changelog:
  - Type:cves
  - ID:CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848
  - SUG:NA
  - DESC:fix CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-80.p01
changelog:
  - Type: bugfix
  - ID  : [Task#557721]
  - SUG : NA
  - DESC: Fix telnet crashes on stack overflow due to infinite recursion.


author: tiandongdong <tiandongdong@kylinos.com> - 3.0.0-4.se.01
changelog:
  - Type:bugfix
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决可信启动与tpm通信失败问题
  -       Patch8000: tpm2-abrmd-selinux-fix-tabrmd-communication-with-kytrust-error.patch


author: tiandongdong <tiandongdong@kylinos.com> - 3.0.0-4.se.02
changelog:
  - Type:bugfix
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决tpm dbus服务读写设备文件错误问题
  -       Patch8000: tpm2-abrmd-selinux-fix-tpm-wirte-device-failed.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-biometric-manager-4.10.0.0-ok4.5k0.8
          upstream commtid:8e18226b3133705658be5ad601e75dcd379dd943


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop ukui-biometric-manager-4.10.0.0-ok4.5k0.9
          upstream commtid:00ba5fd950ace33c1e6043cf083b930d9ccc0197


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#347031]
  - SUG : NA
  - DESC: sync openkylin mulfactor authentication fixes


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p30
changelog:
  - Type: bugfix
  - ID  : [BUG#353727]
  - SUG : NA
  - DESC: standard user shouldn't change other users' type、password、groups


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p32
changelog:
  - Type: bugfix
  - ID  : [BUG#346795]
  - SUG : NA
  - DESC: add kui-control-center-4.10.0.0-kylin-fix-display-widget.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p33
changelog:
  - Type: bugfix
  - ID  : [BUG#353362]
  - SUG : NA
  - DESC: add Patch30:ukui-control-center-4.10.0.0-kylin-change-checkUserPwd-rule.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p34
changelog:
  - Type: bugfix
  - ID  : [BUG#346795]
  - SUG : NA
  - DESC: add ukui-control-center-4.10.0.0-kylin-add-copyright-head.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p36
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-control-center-4.10.0.0-kylin-fix-SIGABRT-coredump.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p37
changelog:
  - Type: bugfix
  - ID  : [BUG#370881]
  - SUG : NA
  - DESC: fix opt bind prompt message size and position


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p39
changelog:
  - Type: bugfix
  - ID  : [BUG#381069]
  - SUG : NA
  - DESC: add ukui-control-center-4.10.0.0-add-kylin-mfa-help-info.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p40
changelog:
  - Type: bugfix
  - ID  : [BUG#396007]
  - SUG : NA
  - DESC: add ukui-control-center accountinfo user guide


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p41
changelog:
  - Type: bugfix
  - ID  : [BUG#448987]
  - SUG : NA
  - DESC: add Patch39: ukui-control-center-4.10.0.0-kylin-changeUserPwd-add-QMessageBox-warning.patch
  	changeUserPwd add QMessageBox warning.
          用户修改自身密码结束后添加弹窗，显示pam回显。


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p42
changelog:
  - Type: update
  - ID  : [TASK#553947]
  - SUG : NA
  - DESC: add Patch40: 0001-ukui-control-center-update-license-for-v11-2603.patch
  	update license for v11 2603


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p43
changelog:
  - Type: bugfix
  - ID  : [BUG#468605][TASK#553947]
  - SUG : NA
  - DESC: BUG#468605:get os_version from kylin-system-version.conf
          TASK#553947:update license for v11 2603(Revised)


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p44
changelog:
  - Type: bugfix
  - ID  : [TASK#525485][BUG#471359]
  - SUG : NA
  - DESC: remove ukui-search requires and add theme transparency value


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p45
changelog:
  - Type: update
  - ID  : [TASK#553999]
  - SUG : NA
  - DESC: add Patch44: 0001-ukcc-show-activation-status-dialog-when-click-serial.patch
  	show activation status dialog when click service serial number


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p46
changelog:
  - Type: update
  - ID  : [TASK#554089]
  - SUG : NA
  - DESC: add Patch45: 0001-ukcc-show-customer-when-locally-activated.patch
  	show customer info when system is locally activated


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p47
changelog:
  - Type: bugfix
  - ID  : [BUG#478205]
  - SUG : NA
  - DESC: Add UserName reading when dbus interface RealName is empty.


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p48
changelog:
  - Type: bugfix
  - ID  : [BUG#477075]
  - SUG : NA
  - DESC: support password history account protection feature when change other users' password


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p50
changelog:
  - Type: bugfix
  - ID  : [BUG#481277][BUG#482067]
  - SUG : NA
  - DESC: show register number when system activated
          don't show activate button when system activated on main about page


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p51
changelog:
  - Type: bugfix
  - ID  : [BUG#483057]
  - SUG : NA
  - DESC: fix the check when system activation is expired


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p52
changelog:
  - Type: cves
  - ID  : [TASK#589295]
  - SUG : NA
  - DESC: fix KVE-2026-0104, encode password when used as command argument


author: huayadong<huayadong@kylinos.cn> 4.10.2.12-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch02: ukui-menu-4.10.2.12-kylin-remove-s3-s4-chang-poweroff-reboot.patch


author: peijiankang<peijiankang@kylinos.cn> 4.10.2.12-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#288929]
  - SUG : NA
  - DESC: Patch02: ukui-menu-4.10.2.12-add-root-to-listCachedUsers.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.2.12-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-menu-4.10.2.12-ok0.2k0.9
          upstream commtid:3148deafc141224257df8dd9c5e67a37d8290e3b


author: huayadong <huayadong@kylinos.cn> - 4.10.2.12-1.p05
changelog:
  - Type: update
  - ID  : [TASK#442854]
  - SUG : NA
  - DESC: add patch4:ukui-menu-4.10.2.12-chnage-uninstall-rule.patch


author: xuchenchen <xuchenchen@kylinos.cn> - 4.10.2.12-1.p06
changelog:
  - Type: bugfix
  - ID: [BUG#344202]
  - SUG: NA
  - DESC: add patch5:fix-chinese-translation-problem.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.2.12-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#347730] [BUG#347734]
  - SUG : NA
  - DESC: add ukui-menu-4.10.2.12-add-3adm.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.2.12-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#353097]
  - SUG : NA
  - DESC: add ukui-menu-4.10.2.12-update-3adm-appinfo.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.2.12-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#366591]
  - SUG : NA
  - DESC: add Patch08:ukui-menu-4.10.2.12-kylin-remove-kylin-process-manager.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.2.12-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#429765]
  - SUG : NA
  - DESC: remove argv --help-all
  	add Patch09:ukui-menu-4.10.2.12-kylin-remove-argv-help-all.patch
  	删除无用参数 --help-all


author: houhongxun<houhongxun@kylinos.cn> 4.10.4.3-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371113]
  - SUG : NA
  - DESC: fix ukui control center icon showing twice problem


author: huayadong<huayadong@kylinos.cn> 4.10.4.3-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch3: ukui-panel-4.10.4.3-kylin-remove-s3-s4-reboot-poweroff.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.4.3-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-panel-4.10.4.3-ok0.1k0.11
          upstream commtid:9f40cceb1001001c1a767ce4335f31edf6f90a07


author: peijiankang<peijiankang@kylinos.cn> - 4.10.4.3-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#370527]
  - SUG : NA
  - DESC: add ukui-panel-4.10.4.3-kylin-update-translations-about-zh-HK.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.4.3-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#370527]
  - SUG : NA
  - DESC: update ukui-panel-4.10.4.3-kylin-update-translations-about-zh-HK.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p14
changelog:
  - Type: bugfix
  - ID  : [BUG#363325][BUG#369099]
  - SUG : NA
  - DESC: add Patch14:ukui-screensaver-4.10.0.0-kylin-remove-black-drawPath.patch
          add Patch15:ukui-screensaver-4.10.0.0-kylin-change-message-rule.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p15
changelog:
  - Type: bugfix
  - ID  : [BUG#369067]
  - SUG : NA
  - DESC: Patch16: ukui-screensaver-4.10.0.0-kylin-remove-AuthDialog-onChangeUser.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p16
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-screensaver-4.10.0.0-fix-ukui-screensaver-backend-coredump-in-vncdesktop.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p17
changelog:
  - Type: bugfix
  - ID  : [BUG#370547]
  - SUG : NA
  - DESC: Patch18:ukui-screensaver-4.10.0.0-kylin-add-org-freedesktop-Accounts-User0-for-root-greeterBackGround.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p18
changelog:
  - Type: bugfix
  - ID  : [BUG#374115]
  - SUG : NA
  - DESC: Patch19:ukui-screensaver-4.10.0.0-kylin-fix-first-installation-have-an-anonymous-user.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p19
changelog:
  - Type: bugfix
  - ID  : [BUG#374115]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-4.10.0.0-kylin-show-m_messageButton.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p20
changelog:
  - Type: bugfix
  - ID  : [BUG#380021]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-4.10.0.0-kylin-avoid-fonts-that-are-too-small.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p21
changelog:
  - Type: bugfix
  - ID  : [BUG#381509]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-4.10.0.0-kylin-fix-lock-time-plus-one.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p22
changelog:
  - Type: bugfix
  - ID  : [TASK#525485]
  - SUG : NA
  - DESC: add ukui-screensaver-4.10.0.0-update-dateformat-api.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p23
changelog:
  - Type: bugfix
  - ID  : [BUG#470589]
  - SUG : NA
  - DESC: add Patch24: ukui-screensaver-4.10.0.0-kylin-fix-prompt-failure-statement-is-incorrect.patch
          修复提示的失败语不正确.


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-add-application-with-DISPLAY.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#349212]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-ukui-menu-empty.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-SIGABRT-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.13.0-1.p05
changelog:
  - Type:update
  - ID:[Task#482359]
  - SUG:NA
  - DESC: add ukui-search-4.10.13.0-kylin-remove-sensitive.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#289223][BUG#369841]
  - SUG : NA
  - DESC: update ukui-search-4.10.13.0-kylin-fix-SIGABRT-coredump.patch
          add ukui-search-4.10.13.0-kylin-ukui-search-app-data-service-sql-exec-error.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#370275]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-GetDesktopFileByPid-error.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.0.0.0-ok28k0.9


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-fix-save-param-SIGABRT.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#291269]
  - SUG : NA
  - DESC: ukui-settings-daemon-4.10.0.0-fix-targetBrightness-to-100.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#304113]
  - SUG : NA
  - DESC: add Patch5:ukui-settings-daemon-4.10.0.0-kylin-fix-push-power-btn-error.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok4.18k0.9


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: update ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch
          add ukui-settings-daemon-4.10.0.0-add-copyright-info.cpp


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#379967]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-kylin-fix-push-power-btn-error.patch
          add ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.3.5-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-sidebar-4.10.3.5-ok0.3k0.10
          upstream commtid:9b2175d39a58d36e5c2f7f05bade021dacd7c00a


author: peijiankang <peijiankang@kylinos.cn> - 4.10.3.5-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-sidebar-4.10.3.5-kylin-fix-ukui-sidebar-coredump-SIGABRT-when-logout.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.3.5-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#383661]
  - SUG : NA
  - DESC: add ukui-sidebar-4.10.3.5-kylin-change-kylin-screenshot-args.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.10-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-window-switch-4.10.1.9-ok0k0.10
          upstream commtid:34d615c9e963761350aec1ced7c7b8d437c64f68


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.10-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#397703]
  - SUG : NA
  - DESC: add ukui-window-switch-4.10.1.9-fix-alt-tab-shortcut.patch


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p02
changelog:
  - Type:update
  - ID:[BUG#238630][BUG#238129]
  - SUG:NA
  - add Patch0011:usbguard-parse.patch
  - DESC: 238129 【V11 B02】【龙芯】【USBGuard】USB设备及策略管理交互模式界面展示不友好
  - DESC: 238630 【V11 B02】【USBGuard】设备已有拦截策略，再次手动添加放行策略不生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p04
changelog:
  - Type:update
  - ID:[BUG#242968][BUG#245015]
  - SUG:NA
  - add Patch0012: usbguard-config.patch
  - DESC: 242968 【V11-B05】【安全SDK】全部设备管控策略查询-授权提示转储
  - DESC: 245015 【V11-B06】【安全SDK】设备授权取消授权大概率转储，usbguard服务起不来
  - 去除usbguard-selinux包,策略已在selinux-policy统一管理


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p05
changelog:
  - Type:update
  - ID:[BUG#242972]
  - SUG:NA
  - add Patch0013: usbguard-format.patch
  - DESC: 242972 【V11 B05】【USBGuard】导入错误格式策略，提示核心已转储
  - DESC: 243051 【V11 B05】【USBGuard】放行部分USB接口提示核心已转储
  - DESC: 247137 【V11-B07】【USBGuard】USB设备管控事件通知，无状态变更弹窗


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p06
changelog:
  - Type:update
  - ID:[BUG#244443]
  - SUG:NA
  - add Patch0014:     usbguard-restore.patch
  - DESC: 244443 【V11-B06】【USBGuard】关闭设备管控，需要插拔生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p07
changelog:
  - Type:update
  - ID:[BUG#244443]
  - SUG:NA
  - add Patch0015:     usbguard-restore2.patch
  - DESC: 244443 【V11-B06】【USBGuard】关闭设备管控，需要插拔生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p08
changelog:
  - Type:update
  - ID:[BUG#310899]
  - SUG:NA
  - add Patch0016:     usbguard-hub.patch
  - DESC: 306393 【V11-B17】【USBGuard】root hub 1.0和2.0设备设置永久拦截和放行提示核心已转储
  - DESC: 310899 【V11-B18】【USBGuard】在设备策略管理中，修改策略失败，策略被删除


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p09
changelog:
  - Type:update
  - ID:[BUG#247155/347856]
  - SUG:NA
  - add Patch0017: usbguard-import.patch
  - DESC: 247155 【V11-B07】【安全SDK】通过设备信息删除设备管控策略，删除serial名字较长的设备管控策略失败
  - DESC: 347856 [V11 2503][B09][需求41823][USBGuard]管理设备策略-导入放行策略使被拦截U盘放行，导入拦截策略覆盖现有策略后没有及时生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p10
changelog:
  - Type:update
  - ID:[任务#479543]
  - SUG:NA
  - add Patch0018: usbguard-idnull.patch
  - DESC: 479543 【V11 2503】修改usbguard默认策略


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p11
changelog:
  - Type:update
  - ID:[BUG#383547]
  - SUG:NA
  - add Patch0019: usbguard-setdev.patch
  - DESC:[出厂测试][v11-2503][B19][需求42057][USBGuard]管理已连接设备,设备状态为拦截,修改为永久拦截,未生成策略


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p12
changelog:
  - Type:update
  - ID:[BUG#391973]
  - SUG:NA
  - add Patch0020: usbguard-hub2.patch
  - DESC: 391973 [同源测试][v11-2503][B20][需求42057]开启usbguard后，bmc的虚拟鼠标和键盘被拦截


author: zhangyao <zhangyao108@huawei.com> - 2.39.1-15
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport community patches
          backport-sys-utils-setpriv-fix-potential-memory-leak.patch
          backport-sys-utils-save_adjtime-fix-memory-leak.patch
          backport-wall-fix-possible-memory-leak.patch
          backport-suL-fix-use-after-free-on-error.patch


author: litenglong <litenglong@kylinos.cn> - 2.39.1-16.p01
changelog:
  - Type:update
  - ID:[task#424805]
  - SUG:NA
  - DESC:
     author:  litenglong <litenglong@kylinos.cn>
     support enable-raw
     sync patch 0001-set-arm-compatible-delay-time-v2-d0.4.patch
     9400-set-locale-for-supporting-utf-8.patch

     author: shenzhongwei <shenzhongwei@kylinos.cn> -
     fix loongarch test error
     fix_loongarch_test_error.patch


author: kouwenqi <kouwenqi@kylinos.cn> - 2.39.1-16.p02
changelog:
  - Type:bugfix
  - ID:[TASK#542963]
  - SUG:NA
  - DESC:libblkid: (xfs) external log: check for ceph_bluestore


author: lijian <lijian01@kylinos.cn> - 2:9.0.2092-15.p01
changelog:
  - Type:update
  - ID:[task#424803]
  - SUG:NA
  - DESC:1) 移植敏感词修改和zh_HK繁体字支持的补丁
  -      2) 移植安全部门修改:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题
  -      3) remove discriminatory language


author: houzhiwei <houzhiwei@kylinos.cn> - 2:9.0.2092-18.p02
changelog:
  - Type:CVE
  - ID:CVE-2025-53905 and CVE-2025-53906
  - SUG:NA
  - DESC:1.fix some tests failed. 2.fix CVE-2025-53905 and CVE-2025-53906


author: xihaochen <xihaochen@huawei.com> - 2.5.0-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update xorg-x11-drv-vesa to 2.5.0


author: yangdacheng <yangdacheng@kylinos.cn> - 21.1.10-1.p01
changelog:
  - Type:compile
  - ID:TASK#378131
  - SUG:NA
  - DESC: Solve Xorg compatibility issues, add pakage:help, remove pakage:Xorg


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p03
changelog:
  - Type:bugfix
  - ID:BUG#347032
  - SUG:NA
  - DESC:Fix memcpy crash when calling shadowUpdatePacked on phytium s5000c.


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p05
changelog:
  - Type: CVE
  - ID:   [TASK#550943]
  - SUG:  NA
  - DESC: fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: zhoupengcheng <zhoupengcheng11@huawei.com> - 1.2.13-1
changelog:
  - update to zlib-1.2.13
  - remove openEuler uncompiled  patch : 0005-Accelerate-Adler32-using-arm64-SVE-instructions.patch


