# changelog

author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 4.0.5-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: lixiaoyong <lixiaoyong@kylinos.cn> - 2.9.27-6.p01
changelog:
  - Type: update
  - ID: [Task#424643]
  - SUG: NA
  - DESC: Add support for KylinOS in ansible hostname module


author: shixuantong<shixuantong@huawei.com> - 0.3.6-25
changelog:
  - Type:cves
  - ID:CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839
  - SUG:NA
  - DESC:fix CVE-2017-6828 CVE-2017-6829 CVE-2017-6831 CVE-2017-6838 CVE-2017-6839


author: zhangzikang <zhangzikang@kylinos.cn> - 1:3.1.2-7.p01
changelog:
  - Type: update
  - ID: [TASK#424647]
  - SUG: NA
  - DESC: Add audit-kycompat subpackage.
          Supply follow symbols to solve the API/ABI compatibility issue:
            audit_add_dir


author: litianhao <litianhao@kylinos.cn> - 1:3.1.2-7.p01.se.01
changelog:
  - Type: update
  - ID: [TASK#431219] audit合入安全补丁
  - SUG: NA
  - DESC: 合入kysec补丁
          audit-add-kysec.patch
          audit-refactor-dep-kysec.patch


author: litianhao <litianhao@kylinos.cn> - 1:3.1.2-7.p01.se.02
changelog:
  - Type: update
  - ID: [BUG#332988]【V11 2503】【b01】审计管理开启后自动停
  - SUG: NA
  - DESC: 未加载上kysec时不退出服务
          audit-skip-kysec-check-if-not-loaded.patch


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1:3.1.2-7.p01.se.03
changelog:
  - Type: update
  - ID: [TASK#439186] kysec2.0审计日志输出
  - SUG: NA
  - DESC: 适配ksaf日志
          audit-add-support-for-ksaf-log.patch


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1:3.1.2-7.p01.se.04
changelog:
  - Type: update
  - ID: [TASK#474839] 【v11 2503】审计包功能优化
  - SUG: NA
  - DESC: ksaf审计日志变动
          audit-trigger-by-ksaf-audit-log-update.patch


author: mengyuan <mengyuan@kylinos.cn> - 1:3.1.2-7.p01.se.05
changelog:
  - Type: update
  - ID: [BUG#369603]【V11-2503】审计规则配置删除后重启auditd规则依然存在
  - SUG: NA
  - DESC: 更新默认审计规则，与红帽、ubuntu保持一致
          audit.spec


author: litianhao <litianhao@kylinos.cn> - 1:3.1.2-7.p01.se.06
changelog:
  - Type: update
  - ID: [TASK#443733]增加kydima日志类型
  - SUG: NA
  - DESC: 日志事件类型增加kydima类型
          audit-add-kydima-msg-type.patch


author: mengyuan <mengyuan@kylinos.cn> - 1:3.1.2-7.p01.se.07
changelog:
  - Type: update
  - ID: [BUG#381503]【V11 2503】auditadm-审计相关目录权限划分错误
  - SUG: NA
  - DESC: 修复三权状态下生成的audit.rules文件属主异常问题
  	audit-fix-audit-rule-perm-when-3adm.patch


author: pengxi <pengxi@kylinos.cn> - 1:3.1.2-7.p01.se.08
changelog:
  - Type: update
  - ID: [BUG#235394]【mugen】loongarch服务器audit测试集的测试子项oe_test_audit_autrace测试失败
  - SUG: NA
  - DESC: autrace在loongarch64下插入规则失败
  	audit-fix-rule-insert-error-on-loongarch64.patch
          添加loongarch64系统调用表
      audit-add-syscall-table-for-loongarch64.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 0.29.1-2.p02
changelog:
  - Type:bugfix
  - ID:BUG#256609
  - SUG:NA
  - DESC:Fix patch is ineffective for loongarch64 repo noarch packages


author: songliyang <songliyang@kylinos.cn> -0.29.1-2.p04
changelog:
  - Type: update
  - ID:   TASK#393729
  - SUG:  NA
  - DESC: Add clang-libs install dependency
  	Fix some bugs for JDK probes detector in 'extend' dir


author: zhangzikang <zhangzikang@kylinos.cn> - -0.29.1-3.p01
changelog:
  - Type:update
  - ID:[TASK#424647]
  - SUG:NA
  - DESC: Remove clang-libs install dependency
          Fix CVE-2024-2314


author: songliyang <songliyang@kylinos.cn> - -0.29.1-3.p03
changelog:
  - Type: bugfix
  - ID:   [BUG#336580]
  - SUG:  NA
  - DESC: 1.fix thread detect error
          2.optimize output


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.37-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: tangce<tangce1@huawei.com> - 32:9.18.21-5
changelog:
  - Type:CVE
  - CVE:CVE-2025-8677,CVE-2025-40778,CVE-2025-40780
  - SUG:NA
  - DESC:fix CVE-2025-8677,CVE-2025-40778,CVE-2025-40780


author: pengxu <pengxu@kylinos.cn> - 2.41-12.p02
changelog:
  - Type:compile
  - ID:BUG#335025
  - SUG:NA
  - DESC: 1.LoongArch: keep compatible with older gcc.
          2.Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying symbols without version info.
          3.Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes.


author: pengxu <pengxu@kylinos.cn> - 2.41-12.p04
changelog:
  - Type:update
  - ID:TASK#482763
  - SUG:NA
  - DESC: Update support for Zhaoxin GMI instructions and add support for PadLock PHE2, RNG2 and XMODX instructions.


author: pengxu <pengxu@kylinos.cn> - 2.41-12.p05
changelog:
  - Type:cves
  - ID:CVE-2025-7545
  - SUG:NA
  - DESC: Fix CVE-2025-7545: heap-based buffer overflow in objcopy.


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.05
changelog:
  - Type:update
  - ID:[Task# 365725]
  - SUG:NA
  - DESC: unit test
  - 添加补丁:
  - TASK-365725-remove-redundant-class.patch
  - TASK-365725-add-unit-test-libboxmanage.patch
  - TASK-365725-refactor-libboxmanage-unit-test-improve.patch


author: shuzetian <shuzetian@kylinos.cn> - 3.1.3-2.se.06
changelog:
  - Type:update
  - ID:[Bug#302085,300875]
  - SUG:NA
  - DESC: fix bugs
  - 添加补丁:
  - BUG-302085-fix-box-create-error-message-show.patch
  - BUG-300875-fix-pamauthenticDialog-lost-focus.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.07
changelog:
  - Type:update
  - ID:[Task# 421387]
  - SUG:NA
  - DESC: update copyright for all source files
  - 添加补丁:
  - TASK-421387-copyright-for-all-source-file.patch
  - TASK-421387-fix-copyright-and-add-some-comments.patch
  - TASK-421387-add-copyright-qtsingleapp.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.08
changelog:
  - Type:update
  - ID:[Task# 434209]
  - SUG:NA
  - DESC: delete unused widgets,and increase unit-test coverage to 70%; add security and compiliance policy check
  - 添加补丁:
  - TASK-434209-improve-delete-unused-widgets-v11-server-unit-test.patch
  - refactor-safe-and-compiliance-policy-check.patch
  - remove-commons.patch


author: liu_yi <liu_yi@kylinos.cn> - 3.1.3-2.se.09
changelog:
  - Type:update
  - ID:[BUG#249477,304851]
  - SUG:NA
  - DESC: linkage psw verify editor and error tips; update user guide image and doc
  - 添加补丁:
  - BUG-249477-linkage-psw-verify-editor-and-error-tips.patch
  - BUG-304851-update-user-guide-docs.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.10
changelog:
  - Type:update
  - ID:[TASK# 458348]
  - SUG:NA
  - DESC: solve some leak issues from fortify check.
  - 添加补丁:
  - operation-leak-issue-solve.patch


author: shuzetian <shuzetian@kylinos.cn> - 3.1.3-2.se.11
changelog:
  - Type:update
  - ID:[Bug# 363533,352157,352309,352202]
  - SUG:NA
  - DESC: fix bugs
  - 添加补丁:
  - BUG352202-update-icon-color-to-white.patch
  - BUG-352309-optimize-focus.patch
  - BUG-352157-update-ts-file.patch
  - BUG363533-update-save-button-ts.patch
  - BUG352202-update-icon-color-to-system.patch


author: shuzetian <shuzetian@kylinos.cn> - 3.1.3-2.se.12
changelog:
  - Type:update
  - ID:[Bug# 364541]
  - SUG:NA
  - DESC: fix bugs
  - 添加补丁:
  - Patch40:fix-tmp-acl.patch
  - Patch41:BUG-364541-fix-box-sort-tableview.patch


author: fuwei <fuwei@kylinos.cn> - 3.1.3-2.se.14
changelog:
  - Type:update
  - ID:[TASK# 553761][BUG# 351907]
  - SUG:NA
  - DESC: box-manager safer compile params
  - 添加补丁:
  - BUG351907-add-update-display-sync-with-boxadm.patch
  - TASK-553761-remove-fstack-protector-all.patch
  - TASK-553761-remove-fstack-protector-all_fix1.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.03
changelog:
  - Type:update
  - ID:[Task#332808]
  - SUG:NA
  - DESC:
  - 添加单元测试用例
  - 添加补丁	TASK-332808-add-cunit-test.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.04
changelog:
  - Type:update：
  - ID:[Task#332808]
  - SUG:NA
  - DESC:
  - 修改makefile.am使覆盖率达标
  - 添加补丁	update-makefile.patch


author: liu_yi <liu_yi@kylinos.cn> - 4.0.3-2.se.05
changelog:
  - Type:update
  - ID:[Task#361227][Task#366325][Task#367585]
  - SUG:NA
  - DESC:	添加安全编译参数
  		安全函数整改
  		修复sonarcube扫描漏洞
  		ksaf2.0保护箱接口兼容适配
  - 添加补丁:
  - TASK-361227-add-security-compile-parameters.patch
  - TASK-366325-use-security-funcs-and-fix-sonarcube-bugs.patch
  - TASK-367585-adapt-to-ksaf-kbox-framework-funcs.patch
  - KYLIN-supplement-file-header-comment.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.06
changelog:
  - Type:update
  - ID:[Task#360917 Bug#291793,290515,296749,290423]
  - SUG:NA
  - DESC:
  - 添加代码使覆盖率提升
  - fix bugs
  - 添加补丁	
  - TASK-360917-add_cunit.patch
  - BUG-291793-update-changepw.patch
  - BUG-290515-can-not-open-encrypted-box.patch
  - BUG-296749-add-printf-help-info.patch
  - BUG-290423-add-new-box-module-judge.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.07
changelog:
  - Type:update
  - ID:[Bug#290515]
  - SUG:NA
  - DESC:
  - fix bugs
  - 添加补丁	
  - BUG-290515-refix-retval-judge.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.08
changelog:
  - Type:update
  - ID:[Task#421385][Task#386411]
  - SUG:NA
  - DESC:
  - 门禁合规修改
  - 添加补丁	
  - TASK-421385-update-copyright.patch 
  - TASK-386411-fix-fortify.patch
  - update-copyright-year.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.09
changelog:
  - Type:update
  - ID:[Bug#327994][Bug#327997]
  - SUG:NA
  - DESC:
  - fix bugs
  - 添加补丁	
  - BUG-327994-327997-fix-fuzz-crashes.patch 
  - BUG-327994-327997-fix-fuzz-crashes1.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.10
changelog:
  - Type:update
  - ID:[Bug#352437][Bug#352432][Bug#351901][Task#434210]
  - SUG:NA
  - DESC:
  - fix bugs
  - 添加补丁	
  - Patch25:TASK-434210-update-sonarqube-coverage-70%.patch
  - Patch26:fuzz.patch
  - Patch27:BUG-352437-underscore-should-not-be-special-character.patch
  - Patch28:BUG-352432-password-cannot-exceed-32-digitals.patch
  - Patch29:BUG-351901-update-boxadm-v.patch


author: shuzetian <shuzetian@kylinos.cn> - 4.0.3-2.se.11
changelog:
  - Type:update
  - ID:[Bug#364339]
  - SUG:NA
  - DESC:
  - fix bugs
  - 添加补丁
  - Patch30:fix-tmp-acl.patch
  - Patch31:BUG-364339-update-boxadm-l-info.patch


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.1.v2505
changelog:
  - LOONGSON: drivers/iommu: add iommu support (Xianglai Li) [bug:348286]
  - LOONGSON: driver/vfio: disable vfio pci intx (Xianglai Li) [bug:348286]
  - LOONGSON: loongarch/configs: enable vfio mdev config (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Fix PMU pass-through issue if VM exits to host finally (Bibo Mao) [bug:348286]
  - LOONGSON: drivers/pci: Enable pci bridge acs capability (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Repair the restart pressure test virtual machine hang dead problem (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add interrupt checking with Loongson AVEC (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Reload guest CSR registers after S4 (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: add virt extioi cpu encode support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Fixed VM migration failure after ptw was enabled (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add reset function for irqchip (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: arch/loongarch/kvm: Fix extioi restart issue (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: enable ptw for kvm (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add irqfd support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add PCHPIC user mode read and write functions (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add PCHPIC read and write functions (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add PCHPIC device support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add EXTIOI user mode read and write functions (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add EXTIOI read and write functions (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add EXTIOI device support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add IPI user mode read and write function (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add IPI read and write function (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add IPI device support (Xianglai Li) [bug:348286]
  - LOONGSON: LoongArch: KVM: Add iocsr and mmio bus simulation in kernel (Xianglai Li) [bug:348286]
  - Revert "LoongArch: KVM: Add iocsr and mmio bus simulation in kernel" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add IPI device support" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add IPI read and write function" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add IPI user mode read and write function" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add EIOINTC device support" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add EIOINTC read and write functions" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add EIOINTC user mode read and write functions" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add PCHPIC device support" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add PCHPIC read and write functions" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add PCHPIC user mode read and write functions" (cuitao) [bug:348286]
  - Revert "LoongArch: KVM: Add irqfd support" (cuitao) [bug:348286]
  - LOONGSON: irqchip/loongson-eiointc: Add virt extension support (Bibo Mao) [bug:348286]
  - HYGON: tpm: Fixed the bug that tcm driver cannot be initialized normally (chench246) [task:462020]
  - HYGON: crypto: ccp: Support userspace mmap psp mmio (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: Support vpsp ringbuffer overcommit (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: Use a workqueue to clean up the vpsp ringbuffer (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: move vpsp-related functions to vpsp.c (xiongmengbiao) [bug:346243]
  - HYGON: drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn (niuyongwen) [bug:346243]
  - HYGON: drivers/crypto/ccp: memmove is used instead of memcpy in overlapped memmory for tkm (niuyongwen) [bug:346243]
  - HYGON: drivers/crypto/ccp: add ioctl API to pin TKM hugepage (xiongmengbiao) [bug:346243]
  - HYGON: driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: support TKM run on CSV (xiongmengbiao) [bug:346243]
  - HYGON: crypto: ccp: remove multi-level pointers processing for vpsp (xiongmengbiao) [bug:346243]
  - configs: Rename inspur-drm to yhgch-drm (Shixiong Ou) [bug:344261, bug:350729, bug:344066]
  - INSPUR: 3rd/inspur: Rename inspur-drm to yhgch-drm (Shixiong Ou) [bug:344261, bug:350729, bug:344066]
  - inet6: constify 'struct net' parameter of various lookup helpers (Eric Dumazet) [task:441338]
  - inet: constify 'struct net' parameter of various lookup helpers (Eric Dumazet) [task:441338]
  - inet: constify inet_sk_bound_dev_eq() net parameter (Eric Dumazet) [task:441338]
  - mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (Yosry Ahmed) [task:459564] {CVE-2025-22030}
  - sw64/config: rename generic_defconfig to openkylin_generic_defconfig (Jackie Liu)
  - filelock: fix name of file_lease slab cache (Omar Sandoval) [task:444220]
  - nfsd: nfsd_file_lease_notifier_call gets a file_lease as an argument (Jeff Layton) [task:444220]
  - filelock: fix deadlock detection in POSIX locking (Jeff Layton) [task:444220]
  - slab: Fix too strict alignment check in create_cache() (Geert Uytterhoeven) [task:444220]
  - io_uring: specify freeptr usage for SLAB_TYPESAFE_BY_RCU io_kiocb cache (Jens Axboe) [task:444220]
  - io_uring: port to struct kmem_cache_args (Christian Brauner) [task:444220]
  - filelock: always define for_each_file_lock() (Jeff Layton) [task:444220]
  - fs: port files to file_ref (Christian Brauner) [task:444220]
  - file: massage cleanup of files that failed to open (Al Viro) [task:444220]
  - fs: add file_ref (Christian Brauner) [task:444220]
  - fs: protect backing files with rcu (Christian Brauner) [task:444220]
  - eth: bnxt: fix truesize for mb-xdp-pass case (Taehee Yoo) [task:450243] {CVE-2025-21961}
  - drm/vmwgfx: Disable coherent dumb buffers without 3d (Zack Rusin) [task:461067] {CVE-2024-46712}
  - drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle (Chen Ridong) [task:461324] {CVE-2024-53115}
  - cpuidle, sched: Use smp_mb__after_atomic() in current_clr_polling() (Yujun Dong) [task:390083]
  - sched: idle: Optimize the generic idle loop by removing needless memory barrier (Zhongqiu Han) [task:390083]
  - sched/psi: Optimise psi_group_change a bit (Tvrtko Ursulin) [task:390083]
  - percpu_counter: add a cmpxchg-based _add_batch variant (Mateusz Guzik) [task:390083]
  - SUNWAY: receive new boot params from firmware (Jing Li) [task:382309]
  - SUNWAY: setup stackframe at kernel entry point (Mao Minkai) [task:382309]
  - SUNWAY: save and restore CSR_WR_FREGS for SIMD libs (Mao Minkai) [task:382309]
  - SUNWAY: rename copy and set lib functions (Mao Minkai) [task:382309]
  - SUNWAY: rename copy and set lib files (Mao Minkai) [task:382309]
  - SUNWAY: choose lib at compile time (Mao Minkai) [task:382309]
  - SUNWAY: store topology and numa info by each cpu itself (Mao Minkai) [task:382309]
  - SUNWAY: work around suspend for C4 (Tang Jinyang) [task:382309]
  - SUNWAY: employ trick on regs.pc for specific exception (Zhi Tongze) [task:382309]
  - SUNWAY: fix syscall_fallback() for vdso gettimeofday (Mao Minkai) [task:382309]
  - perf/dwc_pcie: fix duplicate pci_dev devices (Yunhui Cui) [task:460280] {CVE-2025-37746}
  - perf/dwc_pcie: Qualify RAS DES VSEC Capability by Vendor, Revision (Bjorn Helgaas) [task:460280]
  - perf/dwc_pcie: Add support for Ampere SoCs (Ilkka Koskinen) [task:460280]
  - perf/dwc_pcie: Add support for QCOM vendor devices (Krishna chaitanya chundru) [task:460280]
  - perf/dwc_pcie: Always register for PCIe bus notifier (Krishna chaitanya chundru) [task:460280]
  - perf/dwc_pcie: Fix registration issue in multi PCIe controller instances (Krishna chaitanya chundru) [task:460280]
  - drivers/perf: add DesignWare PCIe PMU driver (Shuai Xue) [task:460280]
  - objtool: Silence more KCOV warnings, part 2 (Josh Poimboeuf) [task:460826]
  - objtool: Ignore end-of-section jumps for KCOV/GCOV (Josh Poimboeuf) [task:460826]
  - nvme: fixup scan failure for non-ANA multipath controllers (Hannes Reinecke) [task:460826]
  - MIPS: cm: Fix warning if MIPS_CM is disabled (Thomas Bogendoerfer) [task:460826]
  - net: dsa: mv88e6xxx: enable STU methods for 6320 family (Marek Behún) [task:460826]
  - net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family (Marek Behún) [task:460826]
  - net: dsa: mv88e6xxx: enable PVT for 6321 switch (Marek Behún) [task:460826]
  - net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family (Marek Behún) [task:460826]
  - comedi: jr3_pci: Fix synchronous deletion of timer (Ian Abbott) [task:460826]
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (Daniel Borkmann) [task:460826]
  - driver core: fix potential NULL pointer dereference in dev_uevent() (Dmitry Torokhov) [task:460826]
  - driver core: introduce device_set_driver() helper (Dmitry Torokhov) [task:460826]
  - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Dmitry Torokhov) [task:460826]
  - spi: spi-imx: Add check for spi_imx_setupxfer() (Tamura Dai) [task:460826]
  - md/raid1: Add check for missing source disk in process_checks() (Meir Elisha) [task:460826]
  - x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores (Pi Xiange) [task:460826]
  - ubsan: Fix panic from test_ubsan_out_of_bounds (Mostafa Saleh) [task:460826]
  - spi: tegra210-quad: add rate limiting and simplify timeout error message (Breno Leitao) [task:460826]
  - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Breno Leitao) [task:460826]
  - loop: aio inherit the ioprio of original request (Yunlong Xing) [task:460826]
  - riscv: Provide all alternative macros all the time (Andrew Jones) [task:460826]
  - iomap: skip unnecessary ifs_block_is_uptodate check (Gou Hao) [task:460826]
  - x86/i8253: Call clockevent_i8253_disable() with interrupts disabled (Fernando Fernandez Mancera) [task:460826]
  - scsi: pm80xx: Set phy_attached to zero when device is gone (Igor Pylypiv) [task:460826]
  - scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init() (Peter Griffin) [task:460826]
  - scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes (Xingui Yang) [task:460826]
  - ext4: make block validity check resistent to sb bh corruption (Ojaswin Mujoo) [task:460826]
  - cifs: Fix querying of WSL CHR and BLK reparse points over SMB1 (Pali Rohár) [task:460826]
  - timekeeping: Add a lockdep override in tick_freeze() (Sebastian Andrzej Siewior) [task:460826]
  - cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode (Pali Rohár) [task:460826]
  - nvmet-fc: put ref when assoc->del_work is already scheduled (Daniel Wagner) [task:460826]
  - nvmet-fc: take tgtport reference only once (Daniel Wagner) [task:460826]
  - x86/bugs: Don't fill RSB on context switch with eIBRS (Josh Poimboeuf) [task:460826]
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Josh Poimboeuf) [task:460826]
  - x86/bugs: Use SBPB in write_ibpb() if applicable (Josh Poimboeuf) [task:460826]
  - gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment (Andy Shevchenko) [task:460826]
  - objtool: Stop UNRET validation on UD2 (Josh Poimboeuf) [task:460826]
  - nvme: multipath: fix return value of nvme_available_path (Uday Shankar) [task:460826]
  - nvme: re-read ANA log page after ns scan completes (Hannes Reinecke) [task:460826]
  - ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls (Jean-Marc Eurin) [task:460826]
  - ACPI: EC: Set ec_no_wakeup for Lenovo Go S (Mario Limonciello) [task:460826]
  - nvme: requeue namespace scan on missed AENs (Hannes Reinecke) [task:460826]
  - xen: Change xen-acpi-processor dom0 dependency (Jason Andryuk) [task:460826]
  - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init (Gabriel Shahrouzi) [task:460826]
  - selftests: ublk: fix test_stripe_04 (Ming Lei) [task:460826]
  - KVM: s390: Don't use %pK through debug printing (Thomas Weißschuh) [task:460826]
  - KVM: s390: Don't use %pK through tracepoints (Thomas Weißschuh) [task:460826]
  - sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP (Oleg Nesterov) [task:460826]
  - io_uring: always do atomic put from iowq (Pavel Begunkov) [task:460826]
  - rtc: pcf85063: do a SW reset if POR failed (Lukas Stockmann) [task:460826]
  - 9p/net: fix improper handling of bogus negative read/write replies (Dominique Martinet) [task:460826]
  - ntb_hw_amd: Add NTB PCI ID for new gen CPU (Basavaraj Natikar) [task:460826]
  - ntb: reduce stack usage in idt_scan_mws (Arnd Bergmann) [task:460826]
  - qibfs: fix _another_ leak (Al Viro) [task:460826]
  - objtool, lkdtm: Obfuscate the do_nothing() pointer (Josh Poimboeuf) [task:460826]
  - objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc() (Josh Poimboeuf) [task:460826]
  - objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler() (Josh Poimboeuf) [task:460826]
  - objtool, panic: Disable SMAP in __stack_chk_fail() (Josh Poimboeuf) [task:460826]
  - objtool: Silence more KCOV warnings (Josh Poimboeuf) [task:460826]
  - thunderbolt: Scan retimers after device router has been enumerated (Mika Westerberg) [task:460826]
  - usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func (Théo Lebrun) [task:460826]
  - usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() (Chenyuan Yang) [task:460826]
  - usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running (Michal Pecio) [task:460826]
  - dmaengine: dmatest: Fix dmatest waiting less when interrupted (Vinicius Costa Gomes) [task:460826]
  - sound/virtio: Fix cancel_sync warnings on uninitialized work_structs (John Stultz) [task:460826]
  - usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield (Andy Shevchenko) [task:460826]
  - usb: dwc3: gadget: Refactor loop to avoid NULL endpoints (Andy Shevchenko) [task:460826]
  - fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size (Edward Adam Davis) [task:460826]
  - usb: host: max3421-hcd: Add missing spi_device_id table (Alexander Stein) [task:460826]
  - mailbox: pcc: Always clear the platform ack interrupt first (Sudeep Holla) [task:460826]
  - mailbox: pcc: Fix the possible race in updation of chan_in_use flag (Huisong Li) [task:460826]
  - bpf: Reject attaching fexit/fmod_ret to __noreturn functions (Yafang Shao) [task:460826]
  - bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage (Martin KaFai Lau) [task:460826]
  - bpf: bpftool: Setting error code in do_loader() (Sewon Nam) [task:460826]
  - s390/tty: Fix a potential memory leak bug (Haoxiang Li) [task:460826]
  - s390/sclp: Add check for get_zeroed_page() (Haoxiang Li) [task:460826]
  - parisc: PDT: Fix missing prototype warning (Yu-Chun Lin) [task:460826]
  - clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec() (Heiko Stuebner) [task:460826]
  - bpf: Fix deadlock between rcu_tasks_trace and event_mutex. (Alexei Starovoitov) [task:460826]
  - crypto: null - Use spin lock instead of mutex (Herbert Xu) [task:460826]
  - crypto: ccp - Add support for PCI device 0x1134 (Devaraj Rangasamy) [task:460826]
  - MIPS: cm: Detect CM quirks from device tree (Gregory CLEMENT) [task:460826]
  - pinctrl: renesas: rza2: Fix potential NULL pointer dereference (Chenyuan Yang) [task:460826]
  - USB: wdm: add annotation (Oliver Neukum) [task:460826]
  - USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context (Oliver Neukum) [task:460826]
  - USB: wdm: close race between wdm_open and wdm_wwan_port_stop (Oliver Neukum) [task:460826]
  - USB: wdm: handle IO errors in wdm_wwan_port_start (Oliver Neukum) [task:460826]
  - USB: VLI disk crashes if LPM is used (Oliver Neukum) [task:460826]
  - usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive (Miao Li) [task:460826]
  - usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive (Miao Li) [task:460826]
  - usb: dwc3: xilinx: Prevent spike in reset signal (Mike Looijmans) [task:460826]
  - usb: dwc3: gadget: check that event count does not exceed event buffer length (Frode Isaksen) [task:460826]
  - USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02) (Huacai Chen) [task:460826]
  - usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling (Fedor Pchelkin) [task:460826]
  - usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines (Fedor Pchelkin) [task:460826]
  - usb: chipidea: ci_hdrc_imx: fix usbmisc handling (Fedor Pchelkin) [task:460826]
  - usb: cdns3: Fix deadlock when using NCM gadget (Ralph Siemsen) [task:460826]
  - usb: xhci: Fix invalid pointer dereference in Etron workaround (Michal Pecio) [task:460826]
  - USB: serial: simple: add OWON HDS200 series oscilloscope support (Craig Hesling) [task:460826]
  - USB: serial: option: add Sierra Wireless EM9291 (Adam Xue) [task:460826]
  - USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe (Michael Ehrenreich) [task:460826]
  - serial: sifive: lock port in startup()/shutdown() callbacks (Ryo Takakura) [task:460826]
  - serial: msm: Configure correct working mode before starting earlycon (Stephan Gerhold) [task:460826]
  - misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack (Rengarajan S) [task:460826]
  - misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration (Rengarajan S) [task:460826]
  - char: misc: register chrdev region with all possible minors (Thadeu Lima de Souza Cascardo) [task:460826]
  - KVM: x86: Reset IRTE to host control if *new* route isn't postable (Sean Christopherson) [task:460826]
  - KVM: x86: Explicitly treat routing entry type changes as changes (Sean Christopherson) [task:460826]
  - mei: me: add panther lake H DID (Alexander Usyskin) [task:460826]
  - scsi: Improve CDL control (Damien Le Moal) [task:460826]
  - USB: storage: quirk for ADATA Portable HDD CH94 (Oliver Neukum) [task:460826]
  - ata: libata-scsi: Fix ata_msense_control_ata_feature() (Damien Le Moal) [task:460826]
  - ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type (Damien Le Moal) [task:460826]
  - ata: libata-scsi: Improve CDL control (Damien Le Moal) [task:460826]
  - mcb: fix a double free bug in chameleon_parse_gdd() (Haoxiang Li) [task:460826]
  - cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports (Smita Koralahalli) [task:460826]
  - KVM: SVM: Allocate IR data using atomic allocation (Sean Christopherson) [task:460826]
  - io_uring: fix 'sync' handling of io_fallback_tw() (Jens Axboe) [task:460826]
  - LoongArch: Remove a bogus reference to ZONE_DMA (Petr Tesarik) [task:460826]
  - LoongArch: Return NULL from huge_pte_offset() for invalid PMD (Ming Wang) [task:460826]
  - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (Suzuki K Poulose) [task:460826]
  - drm/amd/display: Force full update in gpu reset (Roman Li) [task:460826]
  - drm/amd/display: Fix gpu reset in multidisplay config (Roman Li) [task:460826]
  - net: phy: microchip: force IRQ polling mode for lan88xx (Fiona Klute) [task:460826]
  - net: selftests: initialize TCP header and skb payload with zero (Oleksij Rempel) [task:460826]
  - xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() (Alexey Nepomnyashih) [task:460826]
  - crypto: atmel-sha204a - Set hwrng quality to lowest possible (Marek Behún) [task:460826]
  - virtio_console: fix missing byte order handling for cols and rows (Halil Pasic) [task:460826]
  - LoongArch: Make do_xyz() exception handlers more robust (Tiezhu Yang) [task:460826]
  - LoongArch: Make regs_irqs_disabled() more clear (Tiezhu Yang) [task:460826]
  - LoongArch: Select ARCH_USE_MEMTEST (Yuli Wang) [task:460826]
  - perf/x86: Fix non-sampling (counting) events on certain x86 platforms (Luo Gengkun) [task:460826]
  - splice: remove duplicate noinline from pipe_clear_nowait (T.J. Mercier) [task:460826]
  - iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE (Sean Christopherson) [task:460826]
  - pds_core: make wait_context part of q_info (Shannon Nelson) [task:460826]
  - pds_core: Remove unnecessary check in pds_client_adminq_cmd() (Brett Creeley) [task:460826]
  - pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result (Brett Creeley) [task:460826]
  - net: dsa: mt7530: sync driver-specific behavior of MT7531 variants (Daniel Golle) [task:460826]
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (Cong Wang) [task:460826]
  - net_sched: hfsc: Fix a UAF vulnerability in class handling (Cong Wang) [task:460826]
  - fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount() (Al Viro) [task:460826]
  - net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration (Bo-Cun Chen) [task:460826]
  - tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (Tung Nguyen) [task:460826]
  - net: phy: leds: fix memory leak (Qingfang Deng) [task:460826]
  - net: lwtunnel: disable BHs when required (Justin Iurman) [task:460826]
  - scsi: core: Clear flags for scsi_cmnd that did not complete (Anastasia Kovaleva) [task:460826]
  - btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range() (Qu Wenruo) [task:460826]
  - cpufreq: cppc: Fix invalid return value in .get() callback (Marc Zyngier) [task:460826]
  - scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort() (Chenyuan Yang) [task:460826]
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Henry Martin) [task:460826]
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (Henry Martin) [task:460826]
  - cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() (Henry Martin) [task:460826]
  - dma/contiguous: avoid warning about unused size_bytes (Arnd Bergmann) [task:460826]
  - ceph: Fix incorrect flush end position calculation (David Howells) [task:460826]
  - cpufreq/sched: Explicitly synchronize limits_changed flag handling (Rafael J. Wysocki) [task:460826]
  - scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get (Tudor Ambarus) [task:460826]
  - PCI: Fix reference leak in pci_register_host_bridge() (Ma Ke) [task:460826]
  - of: resolver: Fix device node refcount leakage in of_resolve_phandles() (Zijun Hu) [task:460826]
  - of: resolver: Simplify of_resolve_phandles() using __free() (Rob Herring (Arm)) [task:460826]
  - clk: renesas: r9a07g043: Fix HP clock source for RZ/Five (Lad Prabhakar) [task:460826]
  - clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable (Claudiu Beznea) [task:460826]
  - clk: renesas: r9a07g04[34]: Use SEL_SDHI1_STS status configuration for SD1 mux (Claudiu Beznea) [task:460826]
  - clk: renesas: rzg2l: Refactor SD mux driver (Claudiu Beznea) [task:460826]
  - clk: renesas: rzg2l: Remove CPG_SDHI_DSEL from generic header (Claudiu Beznea) [task:460826]
  - clk: renesas: rzg2l: Add struct clk_hw_data (Claudiu Beznea) [task:460826]
  - clk: renesas: rzg2l: Use u32 for flag and mux_flags (Claudiu Beznea) [task:460826]
  - arm64: tegra: Remove the Orin NX/Nano suspend key (Ninad Malwade) [task:460826]
  - iio: adc: ad7768-1: Fix conversion result sign (Sergiu Cuciurean) [task:460826]
  - iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check (Jonathan Cameron) [task:460826]
  - ASoC: q6apm-dai: make use of q6apm_get_hw_pointer (Srinivas Kandagatla) [task:460826]
  - ASoC: qcom: Fix trivial code style issues (Krzysztof Kozlowski) [task:460826]
  - ASoC: qcom: lpass: Make asoc_qcom_lpass_cpu_platform_remove() return void (Uwe Kleine-König) [task:460826]
  - ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs (Srinivas Kandagatla) [task:460826]
  - ASoC: qcom: q6apm-dai: drop unused 'q6apm_dai_rtd' fields (Krzysztof Kozlowski) [task:460826]
  - net: dsa: mv88e6xxx: fix VTU methods for 6320 family (Marek Behún) [task:460826]
  - net: dsa: mv88e6xxx: fix internal PHYs for 6320 family (Marek Behún) [task:460826]
  - auxdisplay: hd44780: Fix an API misuse in hd44780.c (Haoxiang Li) [task:460826]
  - auxdisplay: hd44780: Convert to platform remove callback returning void (Uwe Kleine-König) [task:460826]
  - mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get (Tudor Ambarus) [task:460826]
  - soc: qcom: ice: introduce devm_of_qcom_ice_get (Tudor Ambarus) [task:460826]
  - media: subdev: Add v4l2_subdev_is_streaming() (Tomi Valkeinen) [task:460826]
  - media: subdev: Improve v4l2_subdev_enable/disable_streams_fallback (Tomi Valkeinen) [task:460826]
  - media: subdev: Fix use of sd->enabled_streams in call_s_stream() (Tomi Valkeinen) [task:460826]
  - tracing: Verify event formats that have "%*p.." (Steven Rostedt) [task:460826]
  - tracing: Add __print_dynamic_array() helper (Steven Rostedt) [task:460826]
  - tracing: Add __string_len() example (Steven Rostedt (Google)) [task:460826]
  - x86/mce: use is_copy_from_user() to determine copy-from-user context (Shuai Xue) [task:460826]
  - x86/extable: Remove unused fixup type EX_TYPE_COPY (Tong Tiangen) [task:460826]
  - module: sign with sha512 instead of sha1 by default (Thorsten Leemhuis) [task:460826]
  - bonding: check xdp prog when set bond mode (Wang Liang) [task:458962] {CVE-2025-22105}
  - bonding: return detailed error when loading native XDP fails (Hangbin Liu) [task:458962]
  - udmabuf: fix a buf size overflow issue during udmabuf creation (Xiaogang Chen) [task:460826]
  - ksmbd: fix use-after-free in __smb2_lease_break_noti() (Namjae Jeon) [task:460142] {CVE-2025-37777}
  - drm/virtio: Use drm_gem_plane_helper_prepare_fb() (Dongwon Kim) [task:455029]
  - drm/virtio: Don't create a context with default param if context_init is supported (Pierre-Eric Pelloux-Prayer) [task:455029]
  - drm/vmwgfx: Unreserve BO on error (Ian Forbes) [task:455027]
  - slab: ensure slab->obj_exts is clear in a newly allocated slab page (Suren Baghdasaryan) [task:460162] {CVE-2025-37774}
  - mm, slab: move prepare_slab_obj_exts_hook under CONFIG_MEM_ALLOC_PROFILING (Suren Baghdasaryan) [task:460162]
  - mm, slab: move allocation tagging code in the alloc path into a hook (Suren Baghdasaryan) [task:460162]
  - mm, slab: move slab_memcg hooks to mm/memcontrol.c (Vlastimil Babka) [task:460162]
  - mm, slab: move memcg charging to post-alloc hook (Vlastimil Babka) [task:460162]
  - slab: make __kmem_cache_create() static inline (Christian Brauner) [task:444220]
  - slab: make kmem_cache_create_usercopy() static inline (Christian Brauner) [task:444220]
  - slab: remove kmem_cache_create_rcu() (Christian Brauner) [task:444220]
  - file: port to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: create kmem_cache_create() compatibility layer (Christian Brauner) [task:444220]
  - slab: port KMEM_CACHE_USERCOPY() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: port KMEM_CACHE() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: remove rcu_freeptr_offset from struct kmem_cache (Christian Brauner) [task:444220]
  - slab: pass struct kmem_cache_args to do_kmem_cache_create() (Christian Brauner) [task:444220]
  - slab: pull kmem_cache_open() into do_kmem_cache_create() (Christian Brauner) [task:444220]
  - slab: pass struct kmem_cache_args to create_cache() (Christian Brauner) [task:444220]
  - slab: port kmem_cache_create_usercopy() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: port kmem_cache_create_rcu() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: port kmem_cache_create() to struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: add struct kmem_cache_args (Christian Brauner) [task:444220]
  - slab: s/__kmem_cache_create/do_kmem_cache_create/g (Christian Brauner) [task:444220]
  - SUNWAY: dts: add Junzhang (Xu Chenjiao) [task:382309]
  - SUNWAY: lpc: work around hardware flaws (Xu Chenjiao) [task:382309]
  - SUNWAY: improve cpu bring up method (Zhi Tongze) [task:382309]
  - SUNWAY: introduce new entry framework for C4 (Wu Liliu) [task:382309]
  - SUNWAY: irq: update the initial value of nr_irqs (Zheng Chongzhen) [task:382309]
  - SUNWAY: dynamically switch between lib implementation (Mao Minkai) [task:382309]
  - SUNWAY: msi: remove redundant interrupt enables (Zheng Chongzhen) [task:382309]
  - SUNWAY: add unaligned access support for C4 new instructions (Zhi Tongze) [task:382309]
  - SUNWAY: acpi: fix missed upper bits of rcid for junzhang (Jing Li) [task:382309]
  - SUNWAY: pci: remove duplicate pcie operations (Jing Li) [task:382309]
  - udp: Deal with race between UDP socket address change and rehash (Stefano Brivio) [task:441338] {CVE-2024-57974}
  - ipv6: udp: constify 'struct net' parameter of socket lookups (Eric Dumazet) [task:441338]
  - udp: constify 'struct net' parameter of socket lookups (Eric Dumazet) [task:441338]
  - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode (Kang Yang) [task:459656] {CVE-2024-58096}
  - ax25: Remove broken autobind (Murad Masimov) [task:459548] {CVE-2025-22109}
  - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() (Vladimir Oltean) [task:459708] {CVE-2025-22107}
  - iommu/vt-d: Remove cache tags before disabling ATS (Lu Baolu) [task:459625] {CVE-2024-56669}
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails (Edward Adam Davis) [task:459661] {CVE-2025-22119}
  - ext4: avoid journaling sb update on error if journal is destroying (Ojaswin Mujoo) [task:459702] {CVE-2025-22113}
  - ext4: define ext4_journal_destroy wrapper (Ojaswin Mujoo) [task:459702]
  - Bluetooth: btnxpuart: Fix kernel panic during FW release (Neeraj Sanjay Kale) [task:459942] {CVE-2025-22102}
  - jfs: add check read-only before txBeginAnon() call (Vasiliy Kovalev) [task:459938] {CVE-2024-58095}
  - vmxnet3: unregister xdp rxq info in the reset path (Sankararaman Jayaraman) [task:459703] {CVE-2025-22106}
  - bcachefs: bch2_ioctl_subvolume_destroy() fixes (Kent Overstreet) [task:459940] {CVE-2025-22019}
  - md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb (Su Yue) [task:459657] {CVE-2025-22124}
  - media: vimc: skip .s_stream() for stopped entities (Nikita Zhandarovich) [task:459568] {CVE-2025-22028}
  - jfs: reject on-disk inodes of an unsupported type (Dmitry Antipov) [task:459660] {CVE-2025-37925}
  - net: libwx: fix Tx L4 checksum (Jiawen Wu) [task:459624] {CVE-2025-22101}
  - f2fs: fix potential deadloop in prepare_compress_overwrite() (Chao Yu) [task:459706] {CVE-2025-22127}
  - md/raid10: wait barrier before returning discard request with REQ_NOWAIT (Xiao Ni) [task:459410] {CVE-2025-40325}
  - ksmbd: fix overflow in dacloffset bounds check (Norbert Szetei) [task:459562] {CVE-2025-22039}
  - smb: common: change the data type of num_aces to le16 (Namjae Jeon) [task:459562]
  - wifi: ath11k: fix RCU stall while reaping monitor destination ring (P Praneesh) [task:459546] {CVE-2024-58097}
  - dlm: prevent NPD when writing a positive value to event_done (Thadeu Lima de Souza Cascardo) [task:459658] {CVE-2025-23131}
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (Ye Bin) [task:459580] {CVE-2025-22121}
  - ext4: introduce ITAIL helper (Ye Bin) [task:459580]
  - ibmvnic: Use kernel helpers for hex dumps (Nick Child) [task:459569] {CVE-2025-22104}
  - net: fix NULL pointer dereference in l3mdev_l3_rcv (Wang Liang) [task:459407] {CVE-2025-22103}
  - jfs: add check read-only before truncation in jfs_truncate_nolock() (Vasiliy Kovalev) [task:459936] {CVE-2024-58094}
  - smb: client: fix UAF in decryption with multichannel (Paulo Alcantara) [task:460233] {CVE-2025-37750}
  - smb: client: allocate crypto only for primary server (Enzo Matsumiya) [task:460233]
  - net: stmmac: Fix accessing freed irq affinity_hint (Qingfang Deng) [task:460178] {CVE-2025-23155}
  - landlock: Add the errata interface (Mickaël Salaün)
  - Fix mmu notifiers for range-based invalidates (Piotr Jaroszynski)
  - mptcp: sockopt: fix getting freebind & transparent (Matthieu Baerts (NGI0))
  - iommufd: Fail replace if device has not been attached (Yi Liu)
  - ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (Takashi Iwai) [task:458731]
  - drm/tests: Build KMS helpers when DRM_KUNIT_TEST_HELPERS is enabled (Karolina Stolarek) [task:458731]
  - btrfs: fix the length of reserved qgroup to free (Haisu Wang) [task:458731]
  - MIPS: ds1287: Match ds1287_set_base_clock() function types (WangYuli) [task:458731]
  - MIPS: cevt-ds1287: Add missing ds1287.h include (WangYuli) [task:458731]
  - MIPS: dec: Declare which_prom() as static (WangYuli) [task:458731]
  - xdp: Reset bpf_redirect_info before running a xdp's BPF prog. (Sebastian Andrzej Siewior) [task:458731]
  - nvmet-fc: Remove unused functions (WangYuli) [task:458731]
  - wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit (Ping-Ke Shih) [task:458731]
  - wifi: rtw89: pci: add pre_deinit to be called after probe complete (Ping-Ke Shih) [task:458731]
  - usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (GONG Ruiqi) [task:458731]
  - LoongArch: Eliminate superfluous get_numa_distances_cnt() (Yuli Wang) [task:458731]
  - powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (Nathan Lynch) [task:458731]
  - x86/split_lock: Fix the delayed detection logic (Maksim Davydov) [task:458731]
  - x86/tdx: Fix arch_safe_halt() execution for TDX VMs (Vishal Annapurve) [task:458731]
  - efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32 (Hamza Mahfooz) [task:458731]
  - misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type (Kunihiko Hayashi) [task:458731]
  - misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error (Kunihiko Hayashi) [task:458731]
  - misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (Kunihiko Hayashi) [task:458731]
  - kbuild: Add '-fno-builtin-wcslen' (Nathan Chancellor) [task:458731]
  - cpufreq: Reference count policy in cpufreq_update_limits() (Rafael J. Wysocki) [task:458731]
  - io_uring/net: fix accept multishot handling (Pavel Begunkov) [task:458731]
  - drm/i915/gvt: fix unterminated-string-initialization warning (Jani Nikula) [task:458731]
  - drm/sti: remove duplicate object names (Rolf Eike Beer) [task:458731]
  - drm/nouveau: prime: fix ttm_bo_delayed_delete oops (Chris Bainbridge) [task:458731]
  - drm/amdgpu/dma_buf: fix page_link check (Matthew Auld) [task:458731]
  - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm/smu11: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm/powerplay: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd/pm: Prevent division by zero (Denis Arefev) [task:458731]
  - drm/amd: Handle being compiled without SI or CIK support better (Mario Limonciello) [task:458731]
  - drm/msm/a6xx: Fix stale rpmh votes from GPU (Akhil P Oommen) [task:458731]
  - drm/repaper: fix integer overflows in repeat functions (Nikita Zhandarovich) [task:458731]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR (Kan Liang) [task:458731]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX (Kan Liang) [task:458731]
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR (Kan Liang) [task:458731]
  - perf/x86/intel: Allow to update user space GPRs from PEBS records (Dapeng Mi) [task:458731]
  - RDMA/cma: Fix workqueue crash in cma_netevent_work_handler (Sharath Srinivasan) [task:458731]
  - scsi: ufs: exynos: Ensure consistent phy reference counts (Peter Griffin) [task:458731]
  - scsi: megaraid_sas: Block zero-length ATA VPD inquiry (Chandrakanth Patil) [task:458731]
  - x86/boot/sev: Avoid shared GHCB page for early memory acceptance (Ard Biesheuvel) [task:458731]
  - x86/cpu/amd: Fix workaround for erratum 1054 (Sandipan Das) [task:458731]
  - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Borislav Petkov (AMD)) [task:458731]
  - virtiofs: add filesystem context source name check (Xiangsheng Hou) [task:458731]
  - tracing: Fix filter string testing (Steven Rostedt) [task:458731]
  - string: Add load_unaligned_zeropad() code path to sized_strscpy() (Peter Collingbourne) [task:458731]
  - smb3 client: fix open hardlink on deferred close file error (Chunjie Zhu) [task:458731]
  - selftests/mm: generate a temporary mountpoint for cgroup filesystem (Mark Brown) [task:458731]
  - riscv: Avoid fortify warning in syscall_get_arguments() (Nathan Chancellor) [task:458731]
  - Revert "smb: client: fix TCP timers deadlock after rmmod" (Kuniyuki Iwashima) [task:458731]
  - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Kuniyuki Iwashima) [task:458731]
  - ksmbd: fix the warning from __kernel_write_iter (Namjae Jeon) [task:458731]
  - ksmbd: Prevent integer overflow in calculation of deadtime (Denis Arefev) [task:458731]
  - ksmbd: fix use-after-free in smb_break_all_levII_oplock() (Namjae Jeon) [task:458731]
  - ksmbd: Fix dangling pointer in krb_authenticate (Sean Heelan) [task:458731]
  - ovl: don't allow datadir only (Miklos Szeredi) [task:458731]
  - mm: fix apply_to_existing_page_range() (Kirill A. Shutemov) [task:458731]
  - mm: fix filemap_get_folios_contig returning batches of identical folios (Vishal Moola (Oracle)) [task:458731]
  - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Baoquan He) [task:458731]
  - loop: LOOP_SET_FD: send uevents for partitions (Thomas Weißschuh) [task:458731]
  - loop: properly send KOBJ_CHANGED uevent for disk device (Thomas Weißschuh) [task:458731]
  - isofs: Prevent the use of too small fid (Edward Adam Davis) [task:458731]
  - i2c: cros-ec-tunnel: defer probe if parent EC is not present (Thadeu Lima de Souza Cascardo) [task:458731]
  - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key (Vasiliy Kovalev) [task:458731]
  - crypto: caam/qi - Fix drv_ctx refcount bug (Herbert Xu) [task:458731]
  - btrfs: correctly escape subvol in btrfs_show_options() (Johannes Kimmel) [task:458731]
  - Bluetooth: vhci: Avoid needless snprintf() calls (Kees Cook) [task:458731]
  - Bluetooth: l2cap: Process valid commands in too long frame (Frédéric Danis) [task:458731]
  - ftrace: fix incorrect hash size in register_ftrace_direct() (Menglong Dong) [task:458731]
  - i2c: atr: Fix wrong include (Andy Shevchenko) [task:458731]
  - nfsd: decrease sc_count directly if fail to queue dl_recall (Li Lingfeng) [task:458731]
  - nfs: add missing selections of CONFIG_CRC32 (Eric Biggers) [task:458731]
  - asus-laptop: Fix an uninitialized variable (Denis Arefev) [task:458731]
  - ASoC: qcom: Fix sc7280 lpass potential buffer overflow (Evgeny Pimenov) [task:458731]
  - ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels (Srinivas Kandagatla) [task:458731]
  - ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate (Srinivas Kandagatla) [task:458731]
  - Revert "PCI: Avoid reset when disabled via sysfs" (Alex Williamson) [task:458731]
  - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [task:458731]
  - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS (Rafael J. Wysocki) [task:458731]
  - riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break (WangYuli) [task:458731]
  - riscv: KGDB: Do not inline arch_kgdb_breakpoint() (WangYuli) [task:458731]
  - kunit: qemu_configs: SH: Respect kunit cmdline (Thomas Weißschuh) [task:458731]
  - riscv: Properly export reserved regions in /proc/iomem (Björn Töpel) [task:458731]
  - net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings (Bo-Cun Chen) [task:458731]
  - net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 100Mbps (Bo-Cun Chen) [task:458731]
  - net: ti: icss-iep: Fix possible NULL pointer dereference for perout request (Meghana Malladi) [task:458731]
  - net: ti: icss-iep: Add phase offset configuration for perout signal (Meghana Malladi) [task:458731]
  - net: ti: icss-iep: Add pwidth configuration for perout signal (Meghana Malladi) [task:458731]
  - ptp: ocp: fix start time alignment in ptp_ocp_signal_set (Sagi Maimon) [task:458731]
  - net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails (Vladimir Oltean) [task:458731]
  - net: dsa: free routing table on probe failure (Vladimir Oltean) [task:458731]
  - net: dsa: clean up FDB, MDB, VLAN entries on unbind (Vladimir Oltean) [task:458731]
  - net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (Vladimir Oltean) [task:458731]
  - net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered (Vladimir Oltean) [task:458731]
  - net: bridge: switchdev: do not notify new brentries as changed (Jonas Gorski) [task:458731]
  - net: b53: enable BPDU reception for management port (Jonas Gorski) [task:458731]
  - netlink: specs: rt-link: adjust mctp attribute naming (Jakub Kicinski) [task:458731]
  - netlink: specs: rt-link: add an attr layer around alt-ifname (Jakub Kicinski) [task:458731]
  - cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path (Abdun Nihaal) [task:458731]
  - ata: libata-sata: Save all fields from sense data descriptor (Niklas Cassel) [task:458731]
  - net: ethernet: ti: am65-cpsw: fix port_np reference counting (Michael Walle) [task:458731]
  - net: ethernet: ti: am65-cpsw-nuss: rename phy_node -> port_np (Alexander Sverdlin) [task:458731]
  - net: ngbe: fix memory leak in ngbe_probe() error path (Abdun Nihaal) [task:458731]
  - net: openvswitch: fix nested key length validation in the set() action (Ilya Maximets) [task:458731]
  - block: fix resource leak in blk_register_queue() error path (Zheng Qixing) [task:458731]
  - net: mctp: Set SOCK_RCU_FREE (Matt Johnston) [task:458731]
  - pds_core: fix memory leak in pdsc_debugfs_add_qcq() (Abdun Nihaal) [task:458731]
  - test suite: use %zu to print size_t (Matthew Wilcox (Oracle)) [task:458731]
  - igc: add lock preventing multiple simultaneous PTM transactions (Christopher S M Hall) [task:458731]
  - igc: cleanup PTP module if probe fails (Christopher S M Hall) [task:458731]
  - igc: handle the IGC_PTP_ENABLED flag correctly (Christopher S M Hall) [task:458731]
  - igc: move ktime snapshot into PTM retry loop (Christopher S M Hall) [task:458731]
  - igc: increase wait time before retrying PTM (Christopher S M Hall) [task:458731]
  - igc: fix PTM cycle trigger logic (Christopher S M Hall) [task:458731]
  - Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (Johannes Berg) [task:458731]
  - Bluetooth: l2cap: Check encryption key size on incoming connection (Frédéric Danis) [task:458731]
  - Bluetooth: btrtl: Prevent potential NULL dereference (Dan Carpenter) [task:458731]
  - Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address (Luiz Augusto von Dentz) [task:458731]
  - RDMA/core: Silence oversized kvmalloc() warning (Shay Drory) [task:458731]
  - ASoC: cs42l43: Reset clamp override on jack removal (Charles Keepax) [task:458731]
  - RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe() (Yue Haibing) [task:458731]
  - ovl: remove unused forward declaration (Giuseppe Scrivano) [task:458731]
  - ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() (Henry Martin) [task:458731]
  - ASoC: dwc: always enable/disable i2s irqs (Brady Norander) [task:458731]
  - md/md-bitmap: fix stats collection for external bitmaps (Zheng Qixing) [task:458731]
  - md/raid10: fix missing discard IO accounting (Yu Kuai) [task:458731]
  - scsi: iscsi: Fix missing scsi_host_put() in error path (Miaoqian Lin) [task:458731]
  - wifi: wl1251: fix memory leak in wl1251_tx_work (Abdun Nihaal) [task:458731]
  - wifi: mac80211: Purge vif txq in ieee80211_do_stop() (Remi Pommarel) [task:458731]
  - wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() (Remi Pommarel) [task:458731]
  - wifi: at76c50x: fix use after free access in at76_disconnect (Abdun Nihaal) [task:458731]
  - scsi: hisi_sas: Enable force phy when SATA disk directly connected (Xingui Yang) [task:458731]
  - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition (Kaixin Wang) [task:458731]
  - Bluetooth: hci_uart: Fix another race during initialization (Arseniy Krasnov) [task:458731]
  - media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline (Arnd Bergmann) [task:458731]
  - x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() (Myrrh Periwinkle) [task:458731]
  - ACPI: platform-profile: Fix CFI violation when accessing sysfs files (Nathan Chancellor) [task:458731]
  - x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT (Kirill A. Shutemov) [task:458731]
  - arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Douglas Anderson) [task:458731]
  - selftests: mptcp: fix incorrect fd checks in main_loop (Cong Liu) [task:458731]
  - selftests: mptcp: close fd_in before returning in main_loop (Geliang Tang) [task:458731]
  - pinctrl: qcom: Clear latched interrupt status when changing IRQ type (Stephan Gerhold) [task:458731]
  - phy: freescale: imx8m-pcie: assert phy reset and perst in power off (Stefan Eichenberger) [task:458731]
  - PCI: Fix reference leak in pci_alloc_child_bus() (Ma Ke) [task:458731]
  - PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe() (Stanimir Varbanov) [task:458731]
  - of/irq: Fix device node refcount leakages in of_irq_init() (Zijun Hu) [task:458731]
  - of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() (Zijun Hu) [task:458731]
  - of/irq: Fix device node refcount leakages in of_irq_count() (Zijun Hu) [task:458731]
  - of/irq: Fix device node refcount leakage in API of_irq_parse_raw() (Zijun Hu) [task:458731]
  - of/irq: Fix device node refcount leakage in API of_irq_parse_one() (Zijun Hu) [task:458731]
  - ntb: use 64-bit arithmetic for the MSI doorbell mask (Fedor Pchelkin) [task:458731]
  - KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (Sean Christopherson) [task:458731]
  - KVM: x86: Explicitly zero-initialize on-stack CPUID unions (Sean Christopherson) [task:458731]
  - gve: handle overflow when reporting TX consumed descriptors (Joshua Washington) [task:458731]
  - gpio: zynq: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski) [task:458731]
  - gpio: tegra186: fix resource handling in ACPI probe path (Guixin Liu) [task:458731]
  - ftrace: Add cond_resched() to ftrace_graph_set_hash() (zhoumin) [task:458731]
  - dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg' (Krzysztof Kozlowski) [task:458731]
  - dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg' (Krzysztof Kozlowski) [task:458731]
  - dm-verity: fix prefetch-vs-suspend race (Mikulas Patocka) [task:458731]
  - dm-integrity: set ti->error on memory allocation failure (Mikulas Patocka) [task:458731]
  - dm-ebs: fix prefetch-vs-suspend race (Mikulas Patocka) [task:458731]
  - crypto: ccp - Fix check for the primary ASP device (Tom Lendacky) [task:458731]
  - clk: qcom: gdsc: Set retain_ff before moving to HW CTRL (Taniya Das) [task:458731]
  - clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code (Bryan O'Donoghue) [task:458731]
  - clk: qcom: gdsc: Release pm subdomains in reverse add order (Bryan O'Donoghue) [task:458731]
  - clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks (Ajit Pandey) [task:458731]
  - cifs: Ensure that all non-client-specific reparse points are processed by the server (Pali Rohár) [task:458731]
  - cifs: fix integer overflow in match_server() (Roman Smirnov) [task:458731]
  - cifs: avoid NULL pointer dereference in dbg call (Alexandra Diupina) [task:458731]
  - thermal/drivers/rockchip: Add missing rk3328 mapping entry (Trevor Woerner) [task:458731]
  - tracing: Do not add length to print format in synthetic events (Steven Rostedt) [task:458731]
  - x86/xen: fix balloon target initialization for PVH dom0 (Roger Pau Monne) [task:458731]
  - sctp: detect and prevent references to a freed transport in sendmsg (Ricardo Cañuelo Navarro) [task:458731]
  - mm/hugetlb: move hugetlb_sysctl_init() to the __init section (Marc Herbert) [task:458731]
  - mm/hwpoison: do not send SIGBUS to processes with recovered clean pages (Shuai Xue) [task:458731]
  - mm/userfaultfd: fix release hang over concurrent GUP (Peter Xu) [task:458731]
  - mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock (Mathieu Desnoyers) [task:458731]
  - mm/mremap: correctly handle partial mremap() of VMA starting at 0 (Lorenzo Stoakes) [task:458731]
  - mm: fix lazy mmu docs and usage (Ryan Roberts) [task:458731]
  - mm: make page_mapped_in_vma() hugetlb walk aware (Jane Chu) [task:458731]
  - mm/rmap: reject hugetlb folios in folio_make_device_exclusive() (David Hildenbrand) [task:458731]
  - sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes (Ryan Roberts) [task:458731]
  - sparc/mm: disable preemption in lazy mmu mode (Ryan Roberts) [task:458731]
  - iommufd: Fix uninitialized rc in iommufd_access_rw() (Nicolin Chen) [task:458731]
  - btrfs: zoned: fix zone finishing with missing devices (Johannes Thumshirn) [task:458731]
  - btrfs: zoned: fix zone activation with missing devices (Johannes Thumshirn) [task:458731]
  - btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers (Filipe Manana) [task:458731]
  - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() (Herve Codina) [task:458731]
  - arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string (Chen-Yu Tsai) [task:458731]
  - arm64: mm: Correct the update of max_pfn (Zhenhua Huang) [task:458731]
  - mtd: rawnand: Add status chack in r852_ready() (Wentao Liang) [task:458731]
  - mtd: inftlcore: Add error check for inftl_read_oob() (Wentao Liang) [task:458731]
  - mptcp: only inc MPJoinAckHMacFailure for HMAC failures (Matthieu Baerts (NGI0)) [task:458731]
  - mptcp: fix NULL pointer in can_accept_new_subflow (Gang Yan) [task:458731]
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets (T Pratham) [task:458731]
  - locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() (Boqun Feng) [task:458731]
  - mailbox: tegra-hsp: Define dimensioning masks in SoC data (Kartik Rajput) [task:458731]
  - mfd: ene-kb3930: Fix a potential NULL pointer dereference (Chenyuan Yang) [task:458731]
  - leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs (Abel Vesa) [task:458731]
  - leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs (Abel Vesa) [task:458731]
  - jbd2: remove wrong sb->s_sequence check (Jan Kara) [task:458731]
  - i3c: Add NULL pointer check in i3c_master_queue_ibi() (Manjunatha Venkatesh) [task:458731]
  - i3c: master: svc: Use readsb helper for reading MDB (Stanley Chu) [task:458731]
  - smb311 client: fix missing tcon check when mounting with linux/posix extensions (Steve French) [task:458731]
  - soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() (Chenyuan Yang) [task:458731]
  - tpm: do not start chip while suspended (Thadeu Lima de Souza Cascardo) [task:458731]
  - udf: Fix inode_getblk() return value (Jan Kara) [task:458731]
  - vdpa/mlx5: Fix oversized null mkey longer than 32bit (Si-Wei Liu) [task:458731]
  - f2fs: fix to avoid atomicity corruption of atomic file (Yeongjin Gil) [task:458731]
  - ext4: fix off-by-one error in do_split (Artem Sadovnikov) [task:458731]
  - bus: mhi: host: Fix race between unprepare and queue_buf (Jeff Hugo) [task:458731]
  - ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path (Alexey Klimov) [task:458731]
  - ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns. (Srinivas Kandagatla) [task:458731]
  - ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment. (Srinivas Kandagatla) [task:458731]
  - ASoC: q6apm: add q6apm_get_hw_pointer helper (Srinivas Kandagatla) [task:458731]
  - io_uring/kbuf: reject zero sized provided buffers (Jens Axboe) [task:458731]
  - wifi: mac80211: fix integer overflow in hwmp_route_info_get() (Gavrilov Ilia) [task:458731]
  - wifi: mt76: Add check for devm_kstrdup() (Haoxiang Li) [task:458731]
  - clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup (Alexandre Torgue) [task:458731]
  - mtd: Replace kcalloc() with devm_kcalloc() (Jiasheng Jiang) [task:458731]
  - net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family (Marek Behún) [task:458731]
  - mtd: Add check for devm_kcalloc() (Jiasheng Jiang) [task:458731]
  - mptcp: sockopt: fix getting IPV6_V6ONLY (Matthieu Baerts (NGI0)) [task:458731]
  - media: i2c: imx219: Rectify runtime PM handling in probe and remove (Sakari Ailus) [task:458731]
  - media: venus: hfi_parser: refactor hfi packet parsing logic (Vikash Garodia) [task:458731]
  - media: venus: hfi_parser: add check to avoid out of bound access (Vikash Garodia) [task:458731]
  - media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO (Sakari Ailus) [task:458731]
  - media: i2c: ov7251: Set enable GPIO low in probe (Sakari Ailus) [task:458731]
  - media: i2c: ccs: Set the device's runtime PM status correctly in probe (Sakari Ailus) [task:458731]
  - media: i2c: ccs: Set the device's runtime PM status correctly in remove (Sakari Ailus) [task:458731]
  - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Karina Yankevich) [task:458731]
  - media: platform: stm32: Add check for clk_enable() (Jiasheng Jiang) [task:458731]
  - media: visl: Fix ERANGE error when setting enum controls (Nicolas Dufresne) [task:458731]
  - media: streamzap: prevent processing IR data on URB failure (Murad Masimov) [task:458731]
  - tpm, tpm_tis: Fix timeout handling when waiting for TPM status (Jonathan McDowell) [task:458731]
  - mtd: rawnand: brcmnand: fix PM resume warning (Kamal Dasu) [task:458731]
  - spi: cadence-qspi: Fix probe on AM62A LP SK (Miquel Raynal) [task:458731]
  - KVM: arm64: Tear down vGIC on failed vCPU creation (Will Deacon) [task:458731]
  - arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Douglas Anderson) [task:458731]
  - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Douglas Anderson) [task:458731]
  - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Douglas Anderson) [task:458731]
  - arm64: cputype: Add MIDR_CORTEX_A76AE (Douglas Anderson) [task:458731]
  - xenfs/xensyms: respect hypervisor's "next" indication (Jan Beulich) [task:458731]
  - media: siano: Fix error handling in smsdvb_module_init() (Yuan Can) [task:458731]
  - media: vim2m: print device name after registering device (Matthew Majewski) [task:458731]
  - media: venus: hfi: add check to handle incorrect queue size (Vikash Garodia) [task:458731]
  - media: venus: hfi: add a check to handle OOB in sfr region (Vikash Garodia) [task:458731]
  - media: i2c: adv748x: Fix test pattern selection mask (Niklas Söderlund) [task:458731]
  - media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning (Arnd Bergmann) [task:458731]
  - media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (Jiasheng Jiang) [task:458731]
  - dt-bindings: media: st,stmipid02: correct lane-polarities maxItems (Alain Volmat) [task:458731]
  - ext4: don't treat fhandle lookup of ea_inode as FS corruption (Jann Horn) [task:458731]
  - bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags (Willem de Bruijn) [task:458731]
  - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Uwe Kleine-König) [task:458731]
  - pwm: rcar: Improve register calculation (Uwe Kleine-König) [task:458731]
  - pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() (Josh Poimboeuf) [task:458731]
  - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Jonathan McDowell) [task:458731]
  - ktest: Fix Test Failures Due to Missing LOG_FILE Directories (Ayush Jain) [task:458731]
  - tracing: probe-events: Add comments about entry data storing code (Masami Hiramatsu (Google)) [task:458731]
  - fbdev: omapfb: Add 'plane' value check (Leonid Arapov) [task:458731]
  - drm/amdgpu: grab an additional reference on the gang fence v2 (Christian König) [task:458731]
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Ryo Takakura) [task:458731]
  - drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() (Wentao Liang) [task:458731]
  - drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off (AngeloGioacchino Del Regno) [task:458731]
  - drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data (AngeloGioacchino Del Regno) [task:458731]
  - drm/amdkfd: debugfs hang_hws skip GPU with MES (Philip Yang) [task:458731]
  - drm/amdkfd: Fix pqm_destroy_queue race with GPU reset (Philip Yang) [task:458731]
  - drm/amdkfd: Fix mode1 reset crash issue (Philip Yang) [task:458731]
  - drm/amdkfd: clamp queue size to minimum (David Yat Sin) [task:458731]
  - drivers: base: devres: Allow to release group on device release (Lucas De Marchi) [task:458731]
  - drm/bridge: panel: forbid initializing a panel with unknown connector type (Luca Ceresoli) [task:458731]
  - drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel) (Andrew Wyatt) [task:458731]
  - drm: panel-orientation-quirks: Add new quirk for GPD Win 2 (Andrew Wyatt) [task:458731]
  - drm: panel-orientation-quirks: Add quirk for AYA NEO Slide (Andrew Wyatt) [task:458731]
  - drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB (Andrew Wyatt) [task:458731]
  - drm: panel-orientation-quirks: Add support for AYANEO 2S (Andrew Wyatt) [task:458731]
  - drm/amd/display: add workaround flag to link to force FFE preset (Brendan Tam) [task:458731]
  - drm/amd/display: Update Cursor request mode to the beginning prefetch always (Zhikai Zhai) [task:458731]
  - drm: allow encoder mode_set even when connectors change for crtc (Abhinav Kumar) [task:458731]
  - Bluetooth: qca: simplify WCN399x NVM loading (Dmitry Baryshkov) [task:458731]
  - Bluetooth: hci_uart: fix race during initialization (Arseniy Krasnov) [task:458731]
  - tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER (Gabriele Paoloni) [task:458731]
  - net: vlan: don't propagate flags on open (Stanislav Fomichev) [task:458731]
  - wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table (Icenowy Zheng) [task:458731]
  - scsi: st: Fix array overflow in st_setup() (Kai Mäkisara) [task:458731]
  - cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk (Philipp Hahn) [task:458731]
  - ext4: ignore xattrs past end (Bhupesh) [task:458731]
  - Revert "f2fs: rebuild nat_bits during umount" (Chao Yu) [task:458731]
  - ext4: protect ext4_release_dquot against freezing (Ojaswin Mujoo) [task:458731]
  - ahci: add PCI ID for Marvell 88SE9215 SATA Controller (Daniel Kral) [task:458731]
  - f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() (Chao Yu) [task:458731]
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (Manish Dharanenthiran) [task:458731]
  - net: sfp: add quirk for 2.5G OEM BX SFP (Birger Koblitz) [task:458731]
  - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode (Niklas Cassel) [task:458731]
  - jfs: add sanity check for agwidth in dbMount (Edward Adam Davis) [task:458731]
  - jfs: Prevent copying of nlink with value 0 from disk inode (Edward Adam Davis) [task:458731]
  - fs/jfs: Prevent integer overflow in AG size calculation (Rand Deeb) [task:458731]
  - fs/jfs: cast inactags to s64 to prevent potential overflow (Rand Deeb) [task:458731]
  - jfs: Fix uninit-value access of imap allocated in the diMount() function (Zhongqiu Han) [task:458731]
  - page_pool: avoid infinite loop to schedule delayed worker (Jason Xing) [task:458731]
  - net: usb: asix_devices: add FiberGecko DeviceID (Max Schulze) [task:458731]
  - scsi: target: spc: Fix RSOC parameter data header size (Chaohai Chen) [task:458731]
  - f2fs: don't retry IO for corrupted data scenario (Chao Yu) [task:458731]
  - wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process (P Praneesh) [task:458731]
  - ASoC: amd: yc: update quirk data for new Lenovo model (Syed Saba kareem) [task:458731]
  - ASoC: amd: Add DMI quirk for ACP6X mic support (keenplify) [task:458731]
  - ALSA: usb-audio: Fix CME quirk for UF series keyboards (Ricard Wanderlof) [task:458731]
  - mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves (Kaustabh Chakraborty) [task:458731]
  - media: uvcvideo: Add quirk for Actions UVC05 (Ricardo Ribalda) [task:458731]
  - ASoC: fsl_audmix: register card device depends on 'dais' property (Shengjiu Wang) [task:458731]
  - ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist (Maxim Mikityanskiy) [task:458731]
  - ALSA: hda: intel: Fix Optimus when GPU has no sound (Maxim Mikityanskiy) [task:458731]
  - HID: pidff: Fix null pointer dereference in pidff_find_fields (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add PERIODIC_SINE_ONLY quirk (Tomasz Pakuła) [task:458731]
  - HID: Add hid-universal-pidff driver and supported device ids (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add FIX_WHEEL_DIRECTION quirk (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add PERMISSIVE_CONTROL quirk (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add MISSING_PBO quirk and its detection (Tomasz Pakuła) [task:458731]
  - HID: pidff: Add MISSING_DELAY quirk and its detection (Tomasz Pakuła) [task:458731]
  - HID: pidff: Do not send effect envelope if it's empty (Tomasz Pakuła) [task:458731]
  - HID: pidff: Convert infinite length from Linux API to PID standard (Tomasz Pakuła) [task:458731]
  - ASoC: SOF: topology: Use krealloc_array() to replace krealloc() (Zhang Heng) [task:458731]
  - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault (Ingo Molnar) [task:458731]
  - xen/mcelog: Add __nonstring annotations for unterminated strings (Kees Cook) [task:458731]
  - arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD (Douglas Anderson) [task:458731]
  - perf: arm_pmu: Don't disable counter in armpmu_add() (Mark Rutland) [task:458731]
  - x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine (Max Grobecker) [task:458731]
  - x86/ia32: Leave NULL selector values 0~3 unchanged (Xin Li (Intel)) [task:458731]
  - x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW (Matthew Wilcox (Oracle)) [task:458731]
  - pm: cpupower: bench: Prevent NULL dereference on malloc failure (Zhongqiu Han) [task:458731]
  - umount: Allow superblock owners to force umount (Trond Myklebust) [task:458731]
  - fs: consistently deref the files table with rcu_dereference_raw() (Mateusz Guzik) [task:458731]
  - iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (Louis-Alexis Eyraud) [task:458731]
  - nft_set_pipapo: fix incorrect avx2 match of 5th field octet (Florian Westphal) [task:458731]
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung (Arnaud Lecomte) [task:458731]
  - ipv6: Align behavior across nexthops during path selection (Ido Schimmel) [task:458731]
  - net_sched: sch_sfq: move the limit validation (Octavian Purdila) [task:458731]
  - net_sched: sch_sfq: use a temporary work area for validating configuration (Octavian Purdila) [task:458731]
  - nvmet-fcloop: swap list_add_tail arguments (Daniel Wagner) [task:458731]
  - drm/i915/huc: Fix fence not released on early probe errors (Janusz Krzysztofik) [task:458731]
  - ata: sata_sx4: Add error handling in pdc20621_i2c_read() (Wentao Liang) [task:458731]
  - net: libwx: handle page_pool_dev_alloc_pages error (Chenyuan Yang) [task:458731]
  - drm/tests: probe-helper: Fix drm_display_mode memory leak (Maxime Ripard) [task:458731]
  - drm/tests: modes: Fix drm_display_mode memory leak (Maxime Ripard) [task:458731]
  - drm/tests: cmdline: Fix drm_display_mode memory leak (Maxime Ripard) [task:458731]
  - drm/tests: helpers: Create kunit helper to destroy a drm_display_mode (Maxime Ripard) [task:458731]
  - drm/tests: helpers: Fix compiler warning (Yu-Chun Lin) [task:458731]
  - drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic() (Jinjie Ruan) [task:458731]
  - drm/tests: Add helper to create mock crtc (Maxime Ripard) [task:458731]
  - drm/tests: Add helper to create mock plane (Maxime Ripard) [task:458731]
  - drm/tests: helpers: Add atomic helpers (Maxime Ripard) [task:458731]
  - drm/tests: modeset: Fix drm_display_mode memory leak (Maxime Ripard) [task:458731]
  - net: ethtool: Don't call .cleanup_data when prepare_data fails (Maxime Chevallier) [task:458731]
  - tc: Ensure we have enough buffer space when sending filter netlink notifications (Toke Høiland-Jørgensen) [task:458731]
  - net/sched: cls_api: conditional notification of events (Pedro Tammela) [task:458731]
  - rtnl: add helper to check if a notification is needed (Victor Nogueira) [task:458731]
  - rtnl: add helper to check if rtnl group has listeners (Jamal Hadi Salim) [task:458731]
  - octeontx2-pf: qos: fix VF root node parent queue index (Hariprasad Kelam) [task:458731]
  - net: tls: explicitly disallow disconnect (Jakub Kicinski) [task:458731]
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Cong Wang) [task:458731]
  - tipc: fix memory leak in tipc_link_xmit (Tung Nguyen) [task:458731]
  - objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret() (Josh Poimboeuf) [task:458731]
  - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() (Henry Martin) [task:458731]
  - drm/i915: Disable RPG during live selftest (Badal Nilawar) [task:458731]
  - drm/i915/dg2: wait for HuC load completion before running selftests (Daniele Ceraolo Spurio) [task:458731]
  - selftests/futex: futex_waitv wouldblock test should fail (Edward Liaw) [task:458731]
  - fix missing file error in sw64 (liuyunchen) [task:382309]
  - support stackprotector in sw64 (leechm) [task:382309]
  - fix some compile error in sw64 (kylin) [task:382309]
  - SUNWAY: irq: remove unnecessary initialization (Jing Li) [task:382309]
  - SUNWAY: acpi: enable generic GSI (Jing Li) [task:382309]
  - SUNWAY: irqchip: support ACPI-based interrupt controller initialization (Jing Li) [task:382309]
  - SUNWAY: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC (Jing Li) [task:382309]
  - SUNWAY: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC (Jing Li) [task:382309]
  - SUNWAY: fix compilation warning (He Chuyue) [task:382309]
  - SUNWAY: fix kconfig selections (Mao Minkai) [task:382309]
  - SUNWAY: use a new wrap_asid hmcall when asid wraps (Mao Minkai) [task:382309]
  - SUNWAY: rewrite fpcr and swcr conversion (Mao Minkai) [task:382309]
  - SUNWAY: enable hardware denorm by default (Mao Minkai) [task:382309]
  - SUNWAY: add four-socket system support (Wu Liliu) [task:382309]
  - SUNWAY: add a new kernel parameter to override mclk (Mao Minkai) [task:382309]
  - SUNWAY: msi: fix bugs in multi-msi interrupts allocation and release (Zheng Chongzhen) [task:382309]
  - SUNWAY: pci: change pci transaction ordering rule settings (Zheng Chongzhen) [task:382309]
  - SUNWAY: irqchip: fix virtual PINTC not working properly (Jing Li) [task:382309]
  - SUNWAY: dts: improve properties for PINTC (Jing Li) [task:382309]
  - SUNWAY: dts: improve properties for LPC-INTC (Jing Li) [task:382309]
  - SUNWAY: dts: fix interrupt related properties for GPIO (Jing Li) [task:382309]
  - SUNWAY: dts: add chosen node (Jing Li) [task:382309]
  - SUNWAY: dts: fix properties for spi controller device node (Jing Li) [task:382309]
  - SUNWAY: acpi: fix coding style and typos (Jing Li) [task:382309]
  - SUNWAY: fix rd_f compatibility issue for C4 (He Chuyue) [task:382309]
  - SUNWAY: fix macro definition compilation error (Tang Jinyang) [task:382309]
  - SUNWAY: pci: fix compile error when CONFIG_ACPI=n (Jing Li) [task:382309]
  - SUNWAY: smp: suppress function setup_smp() when ACPI enabled (Jing Li) [task:382309]
  - SUNWAY: acpi: parse SW CINTC for SMP initialization (Jing Li) [task:382309]
  - SUNWAY: acpi: support MADT entry print for SW CINTC (Jing Li) [task:382309]
  - SUNWAY: acpi: add ACPI-style structures for SW CINTC (Jing Li) [task:382309]
  - SUNWAY: smp: add new structure to record rcid information (Jing Li) [task:382309]
  - SUNWAY: smp: modify function smp_rcb_init() to receive base address (Jing Li) [task:382309]
  - SUNWAY: pci: synchronize the OEM table ID of MCFG with BIOS (Jing Li) [task:382309]
  - SUNWAY: iommu: fix the bug when vfio_iommu unpin pages (Zheng Chongzhen) [task:382309]
  - SUNWAY: use rvpcr() to setup run mode (Wu Liliu) [task:382309]
  - SUNWAY: kgdb: add single-step debug support (Zhi Tongze) [task:382309]
  - SUNWAY: fix lockdep error (He Chuyue) [task:382309]
  - SUNWAY: perf: do all event checks in sw64_pmu_event_init() (He Chuyue) [task:382309]
  - SUNWAY: numa: fix compile error when CONFIG_ACPI_NUMA=n (Jing Li) [task:382309]
  - SUNWAY: pci: export some pci functions (Jing Li) [task:382309]
  - SUNWAY: uapi: fix a compile error for headers_install (Gu Zitao) [task:382309]
  - SUNWAY: perf: hide hardware performance events in guest os (He Chuyue) [task:382309]
  - SUNWAY: fix hugepage support (Wu Liliu) [task:382309]
  - SUNWAY: extern vdso_start and vdso_end as char[] (Mao Minkai) [task:382309]
  - SUNWAY: remove useless current_policy (Tang Jinyang) [task:382309]
  - SUNWAY: add arch-specific SYM_END definition (Gu Zitao) [task:382309]
  - SUNWAY: add vfio support (liuyunchen) [task:382309]
  - SUNWAY: add usb support (liuyunchen) [task:382309]
  - SUNWAY: add platform drivers (liuyunchen) [task:382309]
  - SUNWAY: add gpio support (liuyunchen) [task:382309]
  - SUNWAY: add misc drivers (liuyunchen) [task:382309]
  - SUNWAY: add hwmon driver (liuyunchen) [task:382309]
  - SUNWAY: add mfd driver support (liuyunchen) [task:382309]
  - SUNWAY: add iommu support (liuyunchen) [task:382309]
  - SUNWAY: add firmware support (liuyunchen) [task:382309]
  - SUNWAY: add pci bus support (liuyunchen) [task:382309]
  - SUNWAY: add acpi support (liuyunchen) [task:382309]
  - SUNWAY: add i2c bus driver support (liuyunchen) [task:382309]
  - SUNWAY: add irq controller support (liuyunchen) [task:382309]
  - SUNWAY: add cpufreq driver support (liuyunchen) [task:382309]
  - SUNWAY: add clocksource support (liuyunchen) [task:382309]
  - SUNWAY: add spi support (liuyunchen) [task:382309]
  - SUNWAY: add rtc support (liuyunchen) [task:382309]
  - SUNWAY: add 8250 serial support (liuyunchen) [task:382309]
  - SUNWAY: add perf support (Mao Minkai) [task:382309]
  - SUNWAY: add build infrastructure (Mao Minkai) [task:382309]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.2.v2505
changelog:
  - CCUSR: scsi/ccusr: avoid CCore RAID card exceptions caused by I/O (Zeng Fu) [task:456510]
  - Add JIT_ALWAYS_ON config to Loongarch (Feng Yang) [bug:353232]
  - Revert "fs: protect backing files with rcu" (Zhou Yuhang) [bug:354726]
  - Revert "fs: add file_ref" (Zhou Yuhang) [bug:354726]
  - Revert "fs: port files to file_ref" (Zhou Yuhang) [bug:354726]
  - virtcca/vgic: Fix the issue where QEMU fails to load the image. (Hao Ge) [task:369181]
  - OPENEULER: Bug fix: Resolve the issue of host hard lockup (Hao Ge) [task:369181]
  - OPENEULER: VirtCCA: The cvm removes the vcpu binding limit. (gongchangsui) [task:369181]
  - OPENEULER: VirtCCA: Improve nfs workqueue bind method (gongchangsui) [task:369181]
  - OPENEULER: VirtCCA: Intercept the situation where devices with both NVM adn CVM passthrough under same PCIe root port (gongchangsui) [task:369181]
  - OPENEULER: VirtCCA: an interface to retrieve the TMI version is added (gongchangsui) [task:369181]
  - OPENEULER: VirtCCA: cvm support UEFI boot (gongchangsui) [task:369181]
  - OPENEULER: virtCCA Feature: remove unused interfaces and add cpumask check (panhengchang) [task:369181]
  - OPENEULER: virtcca feature : security rectification (yangxiangkai) [task:369181]
  - iommu/arm-smmu-v3: Retire disable_bypass parameter (Robin Murphy) [task:369181]
  - OPENEULER: virtcca bugfix: correct array copy for hpre_addr (liupingwei) [task:369181]
  - OPENEULER: virtcca feature : disable swiotlb for passthrough device (panhengchang) [task:369181]
  - OPENEULER: virtcca feature : force vring alloc use dma api (panhengchang) [task:369181]
  - OPENEULER: virtcca feature: enable unmap swiotlb buffer to save iotlb cvm memory (panhengchang) [task:369181]
  - OPENEULER: virtcca feature : SM Cryptographic Aacceleration. (liupingwei) [task:369181]
  - OPENEULER: virtcca feature : transfer smmu_vmid (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature : GPU supports maximum 1G page table mapping. (yangxiangkai) [task:369181]
  - OPENEULER: virtcca bugfix: compile warning clean (yangxiangkai) [task:369181]
  - OPENEULER: virtcca bugfix: clear device msi address (yangxiangkai) [task:369181]
  - OPENEULER: virtcca bugfix: compile warning clean (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: msi place modify (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: fix msi iova map (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: extract the function to the virtcca_coda.c file (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: virtcca feature: read or write msi forwarding to the secure world (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: read or write bar space forwarding to the secure world (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: read or write config space forwarding to secure world (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: activate confidential vm to set security device s_s2ttbr (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: set device security properties (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: secure device page fault (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: vfio driver dma map (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: bind the kvm handle of cvm with smmu domain (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: vfio attach the device list to secure world (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: fix warnings (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: secure smmu doc (yangxiangkai) [task:369181]
  - OPENEULER: virtcca feature: secure smmu init (yangxiangkai) [task:369183]
  - OPENEULER: virtcca bugfix: compile warning clean (yangxiangkai) [task:369181]
  - OPENEULER: cvm_tsi: add support virtcca attestation (chenzheng) [task:369181]
  - OPENEULER: gicv3: add lpi support for cvm guest (Jingxian He) [task:369181]
  - OPENEULER: mm: enable swiotlb alloc for cvm share mem (Jingxian He) [task:369181]
  - OPENEULER: pmu: enable pmu phys irq inject for cvm (Jingxian He) [task:369181]
  - OPENEULER: kvm: add virtcca cvm host feature (Jingxian He) [task:369181]
  - OPENEULER: kvm: add new kvm_type for cvm (Ju Fu) [task:369181]
  - sockmap: Fix crash issue caused by the uninitialized skb->sockmap (Yun Lu) [task:466225]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.3.v2505
changelog:
  - sched/deadline: Fix schedstats vs deadline servers (Huang Shijie) [task:354674]
  - EULER: sched/sysctl: Add CFTYPE_NOT_ON_ROOT for qos_level (Wang Tao) [task:467360]
  - EULER: sched/qos: Fix qos throttling in SMT expelled (Liu Kai) [task:467360]
  - EULER: sched: fixed offline group hung task issue under high load scenarios (Liu Kai) [task:467360]
  - EULER: sched/fair: Fix qos_timer deadlock when cpuhp offline (Wenyu Huang) [task:467360]
  - EULER: sched: Introduce qos smt expeller for co-location (Guan Jing) [task:467360]
  - EULER: sched/fair: Add cmdline nosmtexpell (Guan Jing) [task:467360]
  - EULER: sched/fair: Introduce QOS_SMT_EXPELL priority reversion mechanism (Guan Jing) [task:467360]
  - EULER: sched/fair: Start tracking qos_offline tasks count in cfs_rq (Guan Jing) [task:467360]
  - EULER: sched: Add tracepoint for qos smt expeller (Guan Jing) [task:467360]
  - EULER: sched: Add statistics for qos smt expeller (Guan Jing) [task:467360]
  - EULER: sched: Implement the function of qos smt expeller (Guan Jing) [task:467360]
  - EULER: sched: Introduce priority load balance for qos scheduler (Song Zhang) [task:467360]
  - config: Enable qos scheduler config (liwanwu) [task:467360]
  - EULER: sched: Introduce handle priority reversion mechanism (Zhang Qiao) [task:467360]
  - EULER: sched: Support kill boost for offline task (Zhang Qiao) [task:467360]
  - EULER: sched: Throttle qos cfs_rq when current cpu is running online task (Zhang Qiao) [task:467360]
  - EULER: sched: Introduce qos scheduler for co-location (Zhang Qiao) [task:467360]
  - sched/syscall: Make __setscheduler_params non-static (liwanwu) [task:467360]
  - filemap: move prefaulting out of hot write path (Dave Hansen) [task:456354]
  - arch/arm64: Add a 5000C series SOC_ID_PS23064 processing (liyouhong) [bug:347952]
  - kernel.spec: Fixing an extra abi package in packaging. (lihaofeng) [task:470205]
  - entry: Inline syscall_exit_to_user_mode() (Charlie Jenkins) [task:456354]
  - LoongArch: entry: Migrate ret_from_fork() to C (Charlie Jenkins) [task:456354]
  - riscv: entry: Split ret_from_fork() into user and kernel (Charlie Jenkins) [task:456354]
  - riscv: entry: Convert ret_from_fork() to C (Charlie Jenkins) [task:456354]
  - treewide: context_tracking: Rename CONTEXT_* into CT_STATE_* (Valentin Schneider) [task:456354]
  - fs: port files to file_ref (Christian Brauner) [task:444220]
  - fs: add file_ref (Christian Brauner) [task:444220]
  - fs: protect backing files with rcu (Christian Brauner) [task:444220]
  - fs: remove f_version (Christian Brauner) [bug:354726]
  - pipe: use f_pipe (Christian Brauner) [bug:354726]
  - fs: add f_pipe (Christian Brauner) [bug:354726]
  - ubifs: store cookie in private data (Christian Brauner) [bug:354726]
  - ufs: store cookie in private data (Christian Brauner) [bug:354726]
  - udf: store cookie in private data (Christian Brauner) [bug:354726]
  - proc: store cookie in private data (Christian Brauner) [bug:354726]
  - ocfs2: store cookie in private data (Christian Brauner) [bug:354726]
  - input: remove f_version abuse (Christian Brauner) [bug:354726]
  - ext4: store cookie in private data (Christian Brauner) [bug:354726]
  - ext2: store cookie in private data (Christian Brauner) [bug:354726]
  - affs: store cookie in private data (Christian Brauner) [bug:354726]
  - fs: add generic_llseek_cookie() (Christian Brauner) [bug:354726]
  - fs: use must_set_pos() (Christian Brauner) [bug:354726]
  - fs: add must_set_pos() (Christian Brauner) [bug:354726]
  - fs: add vfs_setpos_cookie() (Christian Brauner) [bug:354726]
  - s390: remove unused f_version (Christian Brauner) [bug:354726]
  - ceph: remove unused f_version (Christian Brauner) [bug:354726]
  - adi: remove unused f_version (Christian Brauner) [bug:354726]
  - include: linux: Inline the topology_get_cpu_scale function (Can Peng) [task:443191]
  - OPENEULER: mm/oom_kill: fix NULL pointer dereference in memcg_print_bad_task() (Jinjiang Tu) [task:467362]
  - memcg: enable CONFIG_MEMCG_OOM_PRIORITY by default (lihongfu) [task:467362]
  - OPENEULER: memcg: Add sysctl memcg_qos_enable (Jing Xiangfeng) [task:467362]
  - OPENEULER: memcg: support priority for oom (Jing Xiangfeng) [task:467362]
  - config: enable CONFIG_MEMCG_V1_RECLAIM and CONFIG_CGROUP_V1_KILL (lihongfu) [task:467362]
  - OPENEULER: memcg: introduce per-memcg reclaim interface (Lu Jialin) [task:467362]
  - OPENEULER: memcg: export high_async_ratio to userland (Lu Jialin) [task:467362]
  - OPENEULER: memcg: enable memcg async reclaim (Lu Jialin) [task:467362]
  - OPENEULER: memcg: Export memory.events{local} from cgroupv2 to cgroupv1 (Lu Jialin) [task:467362]
  - OPENEULER: memcg: Export memcg.{min/low/high} from cgroupv2 to cgroupv1 (Lu Jialin) [task:467362]
  - OPENEULER: cgroup: Export cgroup.kill from cgroupv2 to cgroupv1 (Lu Jialin) [task:467362]
  - Revert "configs/arm64: open some virtcca config" (Hao Ge) [task:369181]
  - configs/arm64: open some virtcca config (Hao Ge) [task:369181]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.4.v2505
changelog:
  - ksaf: keep server code consistent with desktop (penghuaihe) [task:470513]
  - ksaf: realize ksaf_d_path interface (penghuaihe) [task:392829]
  - configs/arm64: open some virtcca config (Hao Ge) [task:369181]
  - arm64: add PHYTIUM series into spectre_v4 safe list (hehuiwen) [bug:353746]
  - arm64: add PHYTIUM into spectre_v2 safe list (Jackie Liu) [bug:353746]
  - LeapIoRaid: Update verion to 1.02.02.00 (tanzheng) [task:462896]
  - memcg: fix compile error on biv_defconfig (lihongfu) [task:472699]
  - fs: place f_ref to 3rd cache line in struct file to resolve false sharing (Pan Deng) [task:456354]
  - LoongArch: tpm: Add a driver for Loongson TPM device (Qunqin Zhao) [task:466348]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.5.v2505
changelog:
  - spec: Add Module.kabi_loongarch64 to kernel source package (Jiangshan Yi) [task:443413]
  - kabi: Add kabi extended symvers for x86_64 and aarch64 (Jiangshan Yi) [task:443413]
  - kabi: initialize kabi list and symvers for x86_64 and aarch64 (Jiangshan Yi) [task:443413]
  - loongarch/kabi: Add kabi extended whitelist for loongarch (lifangxu) [task:482379]
  - loongarch/kabi: Add kabi whitelist for loongarch (lifangxu) [task:482379]
  - kabi: reserve space for struct kernel_param_ops (Wang Yan) [task:467006]
  - kabi: reserve space for struct uts_namespace (Wang Yan) [task:467006]
  - kabi: reserve space for kthread and workqueue (Wang Yan) [task:467006]
  - kabi: include/msi: reserve space for msi expansion (lifangxu) [task:448261]
  - arm64: config: enable CONFIG_COMPAT (pengyu) [bug:364829]
  - arm64/cputype: Remove the redundant cputype (Riwen Lu) [task:453488, task:472129]
  - PHYTIUM: arm/arm64: Bugfix the CPU MPIDR definition of phytium FTC303 core (Wang Yinfeng) [task:453488, task:472129]
  - OPENEULER: 3snic: use sssnic as kernel driver name (weiwei1) [bug:361125]
  - OPENEULER: improve 3SNIC 910/920/930 NIC driver (weiwei1) [bug:361125]
  - PCI/VGA: add change boot vga device support v2 (Shixiong Ou) [task:347429]
  - tcp/dccp: Add another way to allocate local ports in bind() (luoxuanqiang) [task:452905]
  - PHYTIUM: spi: phytium: Fix SPI IRQ panic on boot issue (Liu Dalin) [bug:367933]
  - PHYTIUM: spi: phytium: Bugfix phytium_spi_irq panic on boot (Peng Min) [bug:367933]
  - perf/x86/zhaoxin: Fix instructions error by missing fixedctr member (tanze) [bug:365143]
  - kabi: pad anon_vma for kabi (Qingshuang Fu) [task:461339]
  - kernel.spec: Fixing compiling 64k page size kernel has compilation issues (lihaofeng) [task:472819]
  - x86: Implement Hygon's LMC to support both SSE2 and AVX2 (Can Peng) [bug:358867]
  - config: open FS_ENCRYPTION on x86 (chengang) [bug:364375, bug:347118]
  - drm/ast: use DRM_GEM_SHMEM_DRIVER_OPS_NO_MAP_SGT (Shixiong Ou) [task:449981]
  - drm/shmem-helper: Import dmabuf without mapping its sg_table (Shixiong Ou) [task:449981]
  - PHYTIUM: PCI: Add ACS quirk for phytium root and switch ports (Xiao Cong) [task:477923]
  - iommu: make ft2500 iommu domain IDENTITY by default (Zheng Tan) [bug:353158]
  - locking: The Zhaoxin NUMA lock is disabled by default (Can Peng) [task:468935]
  - HYGON: optimize TDM driver code logic to avoid warning (chench) [bug:346920]
  - LOONGSON: LoongArch: 2K3000 GMAC support. (wanghongliang) [task:474031]
  - HYGON: crypto: ccp: add "tdm_guard" as kernel and module parameter (niuyongwen) [bug:358365]
  - LOONGSON: LoongArch: megaraid: Add udelay to avoid data error caused by dma sequence (zhangtianyang) [task:469297]
  - LOONGSON: LoongArch: nvme: Add udelay to avoid data error caused by dma sequence (Juxin Gao) [task:469297]
  - LOONGSON: LoongArch: Add pwm driver support. (Juxin Gao) [task:469297]
  - LOONGSON: LoongArch: support CONFIG_SCHED_MC (wanghongliang) [task:469297]
  - LOONGSON: LoongArch: CONFIG_NR_CPUS expanded to 2048 (Juxin Gao) [task:469297]
  - Maintainer: update KYLIN-MAINTAINERS (huhai)
  - Maintainer: update KYLIN-MAINTAINERS (huhai)
  - kabi: kvm: reserve some space for kABI (Qingshuang Fu) [task:461337]
  - kabi: pad the free_area struct (Qingshuang Fu) [task:461339]
  - kabi: pad the deferred_split queue for the kabi checker (Qingshuang Fu) [task:461339]
  - kabi: hide capture_control from kabi checker (Qingshuang Fu) [task:461339]
  - kabi: net: reserve some space for kABI (Qingshuang Fu) [task:461337]
  - kabi: bpf: reserve some space for kABI (Qingshuang Fu) [task:461337]
  - kabi: pad the page_frag_cache for the kabi (Qingshuang Fu) [task:461339]
  - kabi: pad mmu_notifier functions for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the memory_failure_stats for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the kmem_cache structure (Qingshuang Fu) [task:461339]
  - kabi: pad the folio_batch struct (Qingshuang Fu) [task:461339]
  - kabi: pad the zone structures for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the wait_page_queue for the kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the lru_gen functions for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the tlbflush_unmap_batch struct for the KABI (Qingshuang Fu) [task:461339]
  - kabi: pad the swap_cluster_info structure for KABI (Qingshuang Fu) [task:461339]
  - kabi: pad the shrink_control structure for kabi (Qingshuang Fu) [task:461339]
  - kabi: pad the percpu structures (Qingshuang Fu) [task:461339]
  - kabi: reserve space for RCU (Wang Yan) [task:461338]
  - kabi: reserve space for device model (Wang Yan) [task:461338]
  - kabi: reserve space for tty subsystem (Wang Yan) [task:461338]
  - kabi: reserve space for encryption algorithm framework (Wang Yan) [task:461338]
  - kabi: reserve space for rt_mutex_waiter (Wang Yan) [task:461338]
  - kabi: reserve space for workqueue (Wang Yan) [task:461338]
  - kabi: reserve space for watchdog device drivers (Wang Yan) [task:461338]
  - kabi: reserve space for tracking and debugging (Wang Yan) [task:461338]
  - kabi: reserve space for sunrpc (Wang Yan) [task:461338]
  - kabi: reserve space for module_sect_attr (Wang Yan) [task:461338]
  - kabi: reserve space for keys/keyrings (Wang Yan) [task:461338]
  - kabi: reserve space for iommu_iotlb_gather (Wang Yan) [task:461338]
  - kabi: reserve space for I2C subsystem (Wang Yan) [task:461338]
  - kabi: reserve space for fwnode_handle (Wang Yan) [task:461338]
  - kabi: reserve space for terminal mechanism (Wang Yan) [task:461338]
  - kabi: reserve space for task_delay_info (Wang Yan) [task:461338]
  - kabi: reserve space for cpuidle (Wang Yan) [task:461338]
  - kabi: reserve space for linux_binprm (Wang Yan) [task:461338]
  - kabi: reserve space for PCI subsystem (Wang Yan) [task:461338]
  - kabi: reserve space for process management and scheduling (Wang Yan) [task:461338]
  - kabi: time: Add kabi reserve time (lihaofeng) [task:461336]
  - kabi: mm: Add kabi reserve memory management (lihaofeng) [task:461336]
  - kabi: power: Add kabi reserve energy management (lihaofeng) [task:461336]
  - kabi: vfs: File system and vfs add kabi reserve (lihaofeng) [task:461336]
  - kabi: scsi: Add kabi reserve (lihaofeng) [task:461336]
  - kabi: block: Add kabi reserve (lihaofeng) [task:461336]
  - ACPI: PPTT: Fix processor subtable walk (Jeremy Linton) [bug:363349]
  - mm/codetag: clear tags before swap (David Wang)
  - mm/codetag: swap tags when migrate pages (David Wang)
  - filemap_alloc: warp filemap_alloc_folio_node function with alloc_hooks (Jackie Liu)


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.6.v2505
changelog:
  - LOONGSON: LoongArch: loongarch/kvm: fix pch pic spinlock dead lock (Xianglai Li) [bug:346647]
  - LOONGSON: LoongArch: sync kvm head file from upstream (Xianglai Li) [task:482361]
  - LOONGSON: LoongArch: fix migrate issue (Song Gao) [task:482361]
  - LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset() (Tianyang Zhang) [bug:368017]
  - loongarch: config: enable CONFIG_COMPAT (pengyu) [bug:371643]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.7.v2505
changelog:
  - fs: export some overlayfs interface (penghuaihe) [task:392829]
  - tpm: tpm_tis: Adapt spi tcm2 card ZIC0603 to x86 (wudandan) [task:220240]
  - loongarch: disable CONFIG_DM_VDO (zhanggenjian) [bug:363685]
  - Revert "EULER: scheduler: Create SDTL_SKIP flag to skip topology level" (liwanwu) [task:485185]
  - Revert "EULER: scheduler: Add runtime knob sysctl_sched_cluster" (liwanwu) [task:485185]
  - Revert "EULER: scheduler: Add boot time enabling/disabling of cluster scheduling" (liwanwu) [task:485185]
  - Revert "EULER: scheduler: Disable cluster scheduling by default" (liwanwu) [task:485185]
  - gitmessage: update template for git commit message (Jiangshan Yi) [task:488923]
  - EULER: scheduler: Disable cluster scheduling by default (Yicong Yang) [task:485185]
  - EULER: scheduler: Add boot time enabling/disabling of cluster scheduling (Tim Chen) [task:485185]
  - EULER: scheduler: Add runtime knob sysctl_sched_cluster (Tim Chen) [task:485185]
  - EULER: scheduler: Create SDTL_SKIP flag to skip topology level (Tim Chen) [task:485185]
  - nvmet: remove old function prototype (Maurizio Lombardi) [bug:289269]
  - nvmet: Fix crash when a namespace is disabled (Hannes Reinecke) [bug:289269]
  - nvmet-loop: avoid using mutex in IO hotpath (Nilay Shroff) [bug:289269]
  - nvmet: support reservation feature (Guixin Liu) [bug:289269]
  - nvme: add reservation command's defines (Guixin Liu) [bug:289269]
  - nvme: host: fix double-free of struct nvme_id_ns in ns_update_nuse() (Shin'ichiro Kawasaki) [bug:289269]
  - nvme: add csi, ms and nuse to sysfs (Daniel Wagner) [bug:289269]
  - nvme: rename ns attribute group (Daniel Wagner) [bug:289269]
  - nvme: refactor ns info helpers (Daniel Wagner) [bug:289269]
  - nvme: move ns id info to struct nvme_ns_head (Daniel Wagner) [bug:289269]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.9.v2505
changelog:
  - sched/qos:fix logic error in check_qos_validation interface (luoliang) [task:546033]
  - interactive_mark: fix sleeping lock usage in get_interactive_weight() (Jackie Liu) [task:514261]
  - kernel/interactive_mark.c: Fix debug_lock warn on interactive_hlist_lock (pengyu) [task:422481]
  - kabi: add kysec kabi white list (penghuaihe) [task:543735]
  - security/ksaf: fix kabi broken problem (zhubing) [bug:429581]
  - sched/qos: Refactor QoS scheduler (gonglinkai) [task:514359]
  - OPENEULER: drivers: update Yunsilicon driver to version 2406_rc16 (Tian Xin) [bug:382245]
  - config: enable CONFIG_PCNET32 (zhulei) [bug:386187, task:514853]
  - RDMA/mlx5: Ensure created mkeys always have a populated rb_key (Jason Gunthorpe) [task:442359]
  - mm/codetag: move tag retrieval back upfront in __free_pages() (David Wang) [task:510759]
  - mm: avoid extra mem_alloc_profiling_enabled() checks (Suren Baghdasaryan) [task:510759]
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (Ranjan Kumar) [task:462591] {CVE-2025-37861}
  - scsi: mpi3mr: Support for Segmented Hardware Trace buffer (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Avoid reply queue full condition (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Fix pending I/O counter (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Update consumer index of reply queues after every 100 replies (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Return complete ioc_status for ioctl commands (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Prevent PCI writes from driver during PCI error recovery (Sumit Saxena) [task:462591]
  - scsi: mpi3mr: Support PCI Error Recovery callback handlers (Sumit Saxena) [task:462591]
  - scsi: mpi3mr: Add ioctl support for HDB (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Trigger support (Ranjan Kumar) [task:462591]
  - scsi: pmcraid: Add missing scsi_device_put() in pmcraid_eh_target_reset_handler() (Hannes Reinecke) [task:462591]
  - scsi: megaraid: Fix up debug message in megaraid_abort_and_reset() (Hannes Reinecke) [task:462591]
  - scsi: aic79xx: Fix up NULL command in ahd_done() (Hannes Reinecke) [task:462591]
  - scsi: message: fusion: Initialize return value in mptfc_bus_reset() (Hannes Reinecke) [task:462591]
  - scsi: mpi3mr: Split off bus_reset function from host_reset (Hannes Reinecke) [task:462591]
  - scsi: pmcraid: Select device in pmcraid_eh_target_reset_handler() (Hannes Reinecke) [task:462591]
  - scsi: pmcraid: Select device in pmcraid_eh_bus_reset_handler() (Hannes Reinecke) [task:462591]
  - scsi: qla1280: Separate out host reset function from qla1280_error_action() (Hannes Reinecke) [task:462591]
  - scsi: sym53c8xx_2: Rework reset handling (Hannes Reinecke) [task:462591]
  - scsi: sym53c8xx_2: Split off bus reset from host reset (Hannes Reinecke) [task:462591]
  - scsi: ips: Do not try to abort command from host reset (Hannes Reinecke) [task:462591]
  - scsi: megaraid: Pass in NULL scb for host reset (Hannes Reinecke) [task:462591]
  - scsi: ibmvfc: Open-code reset loop for target reset (Hannes Reinecke) [task:462591]
  - scsi: aic79xx: Do not reference SCSI command when resetting device (Hannes Reinecke) [task:462591]
  - scsi: aic79xx: Make BUILD_SCSIID() a function (Hannes Reinecke) [task:462591]
  - scsi: aic7xxx: Do not reference SCSI command when resetting device (Hannes Reinecke) [task:462591]
  - scsi: aic7xxx: Make BUILD_SCSIID() a function (Hannes Reinecke) [task:462591]
  - scsi: bnx2fc: Do not rely on a SCSI command for LUN or target reset (Hannes Reinecke) [task:462591]
  - scsi: qedf: Use FC rport as argument for qedf_initiate_tmf() (Hannes Reinecke) [task:462591]
  - scsi: message: fusion: Open-code mptfc_block_error_handler() for bus reset (Hannes Reinecke) [task:462591]
  - scsi: message: fusion: Correct definitions for mptscsih_dev_reset() (Hannes Reinecke) [task:462591]
  - scsi: message: fusion: Simplify mptfc_block_error_handler() (Hannes Reinecke) [task:462591]
  - net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (Vladimir Oltean) [task:466574] {CVE-2025-37945}
  - net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() (Vladimir Oltean) [task:466574]
  - net: phy: phy_device: fix PHY WOL enabled, PM failed to suspend (Youwan Wang) [bug:352220, bug:352226, bug:355329]
  - cgroup/misc: Introduce misc.events.local (Xiu Jianfeng) [task:451666]
  - mm, slab: clean up slab->obj_exts always (Zhenhua Huang) [task:466594] {CVE-2025-37908}
  - alloc_tag: uninline code gated by mem_alloc_profiling_key in slab allocator (Suren Baghdasaryan) [task:466594]
  - mm: remove CONFIG_MEMCG_KMEM (Johannes Weiner) [task:466594]
  - memcg: remove the lockdep assert from __mod_objcg_mlstate() (Sebastian Andrzej Siewior) [task:466594]
  - memcg: simple cleanup of stats update functions (Shakeel Butt) [task:466594]
  - sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash (Omar Sandoval) [task:462014] {CVE-2025-37821}
  - add ksaf_check_usb_storage_ro hook to set sd write protect flag (Wang Yan) [bug:377825, bug:378285, bug:378369]
  - security/ksaf: add ksaf_check_usb_storage_ro hook (zhubing) [bug:377825, bug:378285, bug:378369]
  - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Pablo Neira Ayuso) [task:491889] {CVE-2025-38201}
  - netfilter: nf_tables: missing objects with no memcg accounting (Pablo Neira Ayuso) [task:491889]
  - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [task:491889]
  - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [task:491889]
  - netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR (Florian Westphal) [task:491889]
  - ethtool: fail closed if we can't get max channel used in indirection tables (Jakub Kicinski) [task:368345] {CVE-2024-46834}
  - IB/mlx5: Fix potential deadlock in MR deregistration (Or Har-Toov) [task:505905] {CVE-2025-38373}
  - RDMA/mlx5: Fix a race for DMABUF MR which can lead to CQE with error (Yishai Hadas) [task:505905]
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type (Yishai Hadas) [task:448830] {CVE-2025-21888}
  - net: stmmac: enable HW-accelerated VLAN stripping for gmac4 only (Furong Xu) [task:491211]
  - net: stmmac: Fix EST offset for dwmac 5.10 (Kurt Kanzenbach) [task:491211]
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST (Alexis Lothoré) [task:491211] {CVE-2025-38125}
  - net: stmmac: Refactor EST implementation (Rohan G Thomas) [task:491211]
  - net: stmmac: xgmac: EST interrupts handling (Rohan G Thomas) [task:491211]
  - net: stmmac: Add support for HW-accelerated VLAN stripping (Gan, Yi Fang) [task:491211]
  - net: stmmac: reduce dma ring display code duplication (Baruch Siach) [task:491211]
  - net: stmmac: remove extra newline from descriptors display (Baruch Siach) [task:491211]
  - mm/vmalloc: fix data race in show_numa_info() (Jeongjun Park) [task:505891] {CVE-2025-38383}
  - nvme-tcp: sanitize request list handling (Hannes Reinecke) [task:495931] {CVE-2025-38264}
  - llist: add interface to check if a node is on a list. (NeilBrown) [task:495931]
  - PHYTIUM: Add hotplug and hotreset workaround patch for phytium SoCs (liyouhong) [task:472129]
  - PHYTIUM: iommu: smmuv3: Not print information of SMMU 0x10 event (Xiao Cong) [task:472129]
  - Added 5000C and 5000C_E interfaces (liyouhong) [task:472129]
  - mptcp: make fallback action and fallback decision atomic (Paolo Abeni) [task:507077] {CVE-2025-38491}
  - drm/amdgpu: Add basic validation for RAS header (Lijo Lazar) [task:505911] {CVE-2025-38426}
  - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers (Peter Ujfalusi) [task:448829] {CVE-2025-21870}
  - ASoC: SOF: Intel: hda-dai: add support for dspless mode beyond HDAudio (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: Intel: lnl: Do not use LNL specific wrappers in DSPless mode (Peter Ujfalusi) [task:448829]
  - ASoC: SOF: Intel: hda-dai-ops: add SoundWire dspless mode (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: Intel: hda-dai-ops: use dai_type (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: topology: Parse DAI type token for dspless mode (Ranjani Sridharan) [task:448829]
  - ASoC: SOF: Intel: start SoundWire links earlier for LNL+ devices (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: topology: dynamically allocate and store DAI widget->private (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: Intel: hda-dai: remove dspless special case (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: ipc4-topology: allow chain_dma for all supported DAIs (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: ipc4-pcm: fix dma_id for CHAIN_DMA capture (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: ipc4: store number of playback/capture streams (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: Intel: hda-dai-ops: enable chain_dma for ALH (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: Intel: hda: add 'is_chain_dma_supported' callback (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: ops: add new 'is_chain_dma_supported' callback (Pierre-Louis Bossart) [task:448829]
  - ASoC: SOF: ipc4-topology: change chain_dma handling in dai_config (Pierre-Louis Bossart) [task:448829]
  - drm/amd/display: Check dce_hwseq before dereferencing it (Alex Hung) [task:505929] {CVE-2025-38361}
  - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Dong Chenchen) [task:494275] {CVE-2025-38129}
  - drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer (Srinivasan Shanmugam) [task:376435] {CVE-2024-49918}
  - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (David Hildenbrand) [task:444592] {CVE-2025-21861}
  - mm: migrate_device: use more folio in migrate_device_finalize() (Kefeng Wang) [task:444592]
  - Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken (Pedro Nishiyama) [task:491387] {CVE-2025-38099}
  - Bluetooth: Add quirk for broken READ_VOICE_SETTING (Pedro Nishiyama) [task:491387]
  - perf/x86/intel: Fix crash in icl_update_topdown_event() (Kan Liang) [task:497749] {CVE-2025-38322}
  - espintcp: fix skb leaks (Sabrina Dubroca) [task:482005] {CVE-2025-38057}
  - PM: EM: Fix potential division-by-zero error in em_compute_costs() (Yaxiong Tian) [task:497301] {CVE-2025-38297}
  - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Pablo Neira Ayuso) [task:491667] {CVE-2025-38162}
  - jfs: Fix null-ptr-deref in jfs_ioc_trim (Dylan Wolff) [task:491953] {CVE-2025-38203}
  - exfat: fix double free in delayed_free (Namjae Jeon) [task:491873] {CVE-2025-38206}
  - jfs: fix array-index-out-of-bounds read in add_missing_indices (Aditya Dutt) [task:491905] {CVE-2025-38204}
  - f2fs: fix to bail out in get_new_segment() (Chao Yu) [task:497325] {CVE-2025-38333}
  - f2fs: clean up new_curseg() (Chao Yu) [task:497325]
  - f2fs: fix to handle segment allocation failure correctly (Chao Yu) [task:497325]
  - bridge: mcast: Fix use-after-free during router port configuration (Ido Schimmel) [task:495949] {CVE-2025-38248}
  - btrfs: exit after state insertion failure at btrfs_convert_extent_bit() (Filipe Manana) [task:497321] {CVE-2025-38269}
  - btrfs: rename err to ret in convert_extent_bit() (Anand Jain) [task:497321]
  - btrfs: enhance extent_io_tree error reports (David Sterba) [task:497321]
  - btrfs: make extent state merges more efficient during insertions (Filipe Manana) [task:497321]
  - sync-stable: Change the default Cc stable branch target (Jackie Liu)
  - alloc_tag: skip pgalloc_tag_swap if profiling is disabled (Suren Baghdasaryan) [task:510759]
  - wifi: iwlwifi: don't warn when if there is a FW error (Miri Korenblit) [task:491311] {CVE-2025-38096}
  - media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (Wentao Liang) [task:494929] {CVE-2025-38237}
  - sched/rt: Fix race in push_rt_task (Harshit Agarwal) [task:491955] {CVE-2025-38234}
  - ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (Bard Liao) [task:441316] {CVE-2024-58012}
  - drm/amdgpu: csa unmap use uninterruptible lock (Philip Yang) [task:481993] {CVE-2025-38011}
  - perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq (Adrian Hunter) [task:482163] {CVE-2025-38055}
  - clk: sunxi-ng: h616: Reparent GPU clock during frequency changes (Philippe Simons) [task:482123] {CVE-2025-38041}
  - clk: sunxi-ng: h616: Reparent CPU clock during frequency changes (Andre Przywara) [task:482123]
  - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator (Tejun Heo) [task:482029] {CVE-2025-38012}
  - x86/Kconfig: make CFI_AUTO_DEFAULT depend on !RUST or Rust >= 1.88 (Paweł Anikiel) [task:481877] {CVE-2025-38033}
  - x86/alternatives: Make FineIBT mode Kconfig selectable (Kees Cook) [task:481877]
  - rseq: Fix segfault on registration when rseq_cs is non-zero (Michael Jeanson) [task:482245] {CVE-2025-38067}
  - rseq: Update kernel fields in lockstep with CONFIG_DEBUG_RSEQ=y (Michael Jeanson) [task:482245]
  - rseq: Fix rseq registration with CONFIG_DEBUG_RSEQ (Michael Jeanson) [task:482245]
  - rseq: Fix rseq unregistration regression (Mathieu Desnoyers) [task:482245]
  - rseq: Validate read-only fields under DEBUG_RSEQ config (Mathieu Desnoyers) [task:482245]
  - wifi: ath12k: Avoid memory leak while enabling statistics (P Praneesh) [task:460148] {CVE-2025-37743}
  - wifi: ath12k: Refactor the monitor Rx parser handler argument (Karthikeyan Periyasamy) [task:460148]
  - iio: light: opt3001: fix deadlock due to concurrent flag access (Luca Ceresoli) [task:466236] {CVE-2025-37968}
  - cgroup/misc: Introduce misc.peak (Xiu Jianfeng) [task:451667]
  - btrfs: adjust subpage bit start based on sectorsize (Josef Bacik) [task:466619] {CVE-2025-37931}
  - HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX (Tomasz Pakuła) [task:466581] {CVE-2025-37942}
  - mm/memory_hotplug: fix call folio_test_large with tail page in do_migrate_range (Jinjiang Tu) [task:461947]
  - mm/vmscan: don't try to reclaim hwpoison folio (Jinjiang Tu) [task:461947] {CVE-2025-37834}
  - mm/hwpoison: introduce folio_contain_hwpoisoned_page() helper (Jinjiang Tu) [task:461947]
  - mm: memory-hotplug: check folio ref count first in do_migrate_range (Ma Wupeng) [task:461947]
  - mm: memory-failure: update ttu flag inside unmap_poisoned_folio (Ma Wupeng) [task:461947]
  - mm: memory_hotplug: unify Huge/LRU/non-LRU movable folio isolation (Kefeng Wang) [task:461947]
  - mm: migrate: add isolate_folio_to_list() (Kefeng Wang) [task:461947]
  - mm: memory_hotplug: check hwpoisoned page firstly in do_migrate_range() (Kefeng Wang) [task:461947]
  - mm: memory-failure: add unmap_poisoned_folio() (Kefeng Wang) [task:461947]
  - mm: memory_hotplug: remove head variable in do_migrate_range() (Kefeng Wang) [task:461947]
  - mm/memory-failure: correct comment in me_swapcache_dirty (Miaohe Lin) [task:461947]
  - mm/memory-failure: remove obsolete comment in kill_proc() (Miaohe Lin) [task:461947]
  - mm/memory-failure: fix comment of get_hwpoison_page() (Miaohe Lin) [task:461947]
  - mm/memory-failure: move some function declarations into internal.h (Miaohe Lin) [task:461947]
  - mm/memory-failure: remove obsolete comment in unpoison_memory() (Miaohe Lin) [task:461947]
  - mm/memory-failure: use helper macro task_pid_nr() (Miaohe Lin) [task:461947]
  - mm/memory-failure: don't export hwpoison_filter() when !CONFIG_HWPOISON_INJECT (Miaohe Lin) [task:461947]
  - mm/memory-failure: remove confusing initialization to count (Miaohe Lin) [task:461947]
  - mm/memory-failure: remove unneeded empty string (Miaohe Lin) [task:461947]
  - mm/memory-failure: save some page_folio() calls (Miaohe Lin) [task:461947]
  - mm/memory-failure: add macro GET_PAGE_MAX_RETRY_NUM (Miaohe Lin) [task:461947]
  - mm/memory-failure: remove MF_MSG_SLAB (Miaohe Lin) [task:461947]
  - mm/memory-failure: simplify put_ref_page() (Miaohe Lin) [task:461947]
  - mm/memory-failure: pass the folio to collect_procs_ksm() (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: use folio functions throughout collect_procs() (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: add some folio conversions to unpoison_memory (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: convert hwpoison_user_mappings to take a folio (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: convert memory_failure() to use a folio (Matthew Wilcox (Oracle)) [task:461947]
  - mm: convert hugetlb_page_mapping_lock_write to folio (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: convert shake_page() to shake_folio() (Matthew Wilcox (Oracle)) [task:461947]
  - mm: make page_mapped_in_vma conditional on CONFIG_MEMORY_FAILURE (Matthew Wilcox (Oracle)) [task:461947]
  - mm: return the address from page_mapped_in_vma() (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: pass addr to __add_to_kill() (Matthew Wilcox (Oracle)) [task:461947]
  - mm/memory-failure: remove fsdax_pgoff argument from __add_to_kill (Matthew Wilcox (Oracle)) [task:461947]
  - mm: rename vma_pgoff_address back to vma_address (Matthew Wilcox (Oracle)) [task:461947]
  - mm: remove vma_address() (Matthew Wilcox (Oracle)) [task:461947]
  - mm: correct page_mapped_in_vma() for large folios (Matthew Wilcox (Oracle)) [task:461947]
  - mm: remove invalidate_inode_page() (Matthew Wilcox (Oracle)) [task:461947]
  - mm: convert isolate_page() to mf_isolate_folio() (Matthew Wilcox (Oracle)) [task:461947]
  - mm: convert soft_offline_in_use_page() to use a folio (Matthew Wilcox (Oracle)) [task:461947]
  - mm: use mapping_evict_folio() in truncate_error_page() (Matthew Wilcox (Oracle)) [task:461947]
  - mm: convert __do_fault() to use a folio (Matthew Wilcox (Oracle)) [task:461947]
  - mm: make mapping_evict_folio() the preferred way to evict clean folios (Matthew Wilcox (Oracle)) [task:461947]
  - wifi: ath11k: update channel list in reg notifier instead reg worker (Wen Gong) [task:460079] {CVE-2025-23133}
  - fs/9p: fix NULL pointer dereference on mkdir (Christian Schoenebeck) [task:459142] {CVE-2025-22070}
  - ksmbd: fix use-after-free in ksmbd_session_rpc_open (Namjae Jeon) [task:466583] {CVE-2025-37926}
  - ksmbd: use __GFP_RETRY_MAYFAIL (Namjae Jeon) [task:466583]
  - ksmbd: add support for supplementary groups (Namjae Jeon) [task:466583]
  - ksmbd: Use struct_size() to improve smb_direct_rdma_xmit() (Thorsten Blum) [task:466583]
  - ksmbd: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET) [task:466583]
  - ksmbd: fix use-after-free in session logoff (Sean Heelan) [task:466589] {CVE-2025-37899}
  - mm/slab: fix warning caused by duplicate kmem_cache creation in kmem_buckets_create (Koichiro Den) [task:461208] {CVE-2024-53065}
  - mm/huge_memory: fix dereferencing invalid pmd migration entry (Gavin Guo) [task:466416] {CVE-2025-37958}
  - memblock: Accept allocated memory before use in memblock_double_array() (Tom Lendacky) [task:466578] {CVE-2025-37960}
  - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (Mikhail Lobanov) [task:466248] {CVE-2025-37957}
  - KVM: SVM: Update SEV-ES shutdown intercepts with more metadata (Peter Gonda) [task:466248]
  - iommu: Fix two issues in iommu_copy_struct_from_user() (Nicolin Chen) [task:466414] {CVE-2025-37900}
  - sfc: fix NULL dereferences in ef100_process_design_param() (Edward Cree) [task:459000] {CVE-2025-37860}
  - net: mctp: unshare packets when reassembling (Matt Johnston) [task:450249] {CVE-2025-21972}
  - btrfs: harden block_group::bg_list against list_del() races (Boris Burkov) [task:462585] {CVE-2025-37856}
  - afs: Fix lock recursion (David Howells) [task:392645] {CVE-2024-53090}
  - sctp: add mutual exclusion in proc_sctp_do_udp_port() (Eric Dumazet) [task:459006] {CVE-2025-22062}
  - bnxt_en: Mask the bd_cnt field in the TX BD properly (Michael Chan) [task:458946] {CVE-2025-22108}
  - btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (Boris Burkov) [task:458898] {CVE-2025-22115}
  - mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in split_large_buddy() (David Hildenbrand) [task:421055] {CVE-2024-57881}
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Ranjan Kumar) [task:429483] {CVE-2024-57804}
  - scsi: mpi3mr: Avoid MAX_PAGE_ORDER WARNING for buffer allocations (Shin'ichiro Kawasaki) [task:429483]
  - scsi: mpi3mr: Add missing spin_lock_init() for mrioc->trigger_lock (Shin'ichiro Kawasaki) [task:429483]
  - scsi: mpi3mr: HDB allocation and posting for hardware and firmware buffers (Ranjan Kumar) [task:429483]
  - scsi: mpi3mr: Driver version update to 8.8.1.0.50 (Ranjan Kumar) [task:429483]
  - scsi: mpi3mr: Update MPI Headers to revision 31 (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Debug ability improvements (Ranjan Kumar) [task:462591]
  - scsi: mpi3mr: Set the WriteSame Divert Capability in the IOCInit MPI Request (Ranjan Kumar) [task:429483]
  - scsi: mpi3mr: Clear ioctl blocking flag for an unresponsive controller (Ranjan Kumar) [task:429483]
  - scsi: mpi3mr: Set MPI request flags appropriately (Ranjan Kumar) [task:429483]
  - scsi: mpi3mr: Block devices are not removed even when VDs are offlined (Ranjan Kumar) [task:429483]
  - scsi: mpi3mr: Replace deprecated strncpy() with assignments (Justin Stitt) [task:429483]
  - scsi: mpi3mr: Reduce stack usage in mpi3mr_refresh_sas_ports() (Arnd Bergmann) [task:429483]
  - scsi: mpi3mr: Fix mpi3mr_fw.c kernel-doc warnings (Randy Dunlap) [task:429483]
  - scsi: mpi3mr: Fix printk() format strings (Arnd Bergmann) [task:429483]
  - scsi: mpi3mr: Update driver version to 8.5.1.0.0 (Chandrakanth patil) [task:429483]
  - scsi: mpi3mr: Support for preallocation of SGL BSG data buffers part-3 (Chandrakanth patil) [task:429483]
  - scsi: mpi3mr: Support for preallocation of SGL BSG data buffers part-2 (Chandrakanth patil) [task:462591]
  - scsi: mpi3mr: Support for preallocation of SGL BSG data buffers part-1 (Chandrakanth patil) [task:429483]
  - scsi: mpi3mr: Fetch correct device dev handle for status reply descriptor (Chandrakanth patil) [task:429483]
  - scsi: mpi3mr: driver version upgrade to 8.5.0.0.50 (Sumit Saxena) [task:429483]
  - scsi: mpi3mr: Add support for status reply descriptor (Sumit Saxena) [task:429483]
  - scsi: mpi3mr: Increase maximum number of PHYs to 64 from 32 (Sumit Saxena) [task:429483]
  - drm/amd/display: prevent hang on link training fail (Brendan Tam) [task:462408] {CVE-2025-37870}
  - net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads (Jonathan Currier) [task:461948] {CVE-2025-37833}
  - net: txgbe: fix memory leak in txgbe_probe() error path (Abdun Nihaal) [task:462854] {CVE-2025-37872}
  - objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq() (Josh Poimboeuf) [task:458971] {CVE-2025-40014}
  - ksmbd: fix null pointer dereference in alloc_preauth_hash() (Namjae Jeon) [task:459701] {CVE-2025-22037}
  - RDMA/mlx5: Fix cache entry update on dereg error (Michael Guralnik) [task:442359]
  - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (Yishai Hadas) [task:442359] {CVE-2025-21732}
  - RDMA/mlx5: Fix MR cache temp entries cleanup (Michael Guralnik) [task:442359]
  - RDMA/mlx5: Fix counter update on MR cache mkey creation (Michael Guralnik) [task:442359]
  - RDMA/mlx5: Drop redundant work canceling from clean_keys() (Michael Guralnik) [task:442359]
  - RDMA/mlx5: Change check for cacheable mkeys (Or Har-Toov) [task:442359]
  - RDMA/mlx5: Implement mkeys management via LIFO queue (Shay Drory) [task:442359]
  - spi: fsl-qspi: Fix double cleanup in probe error path (Kevin Hao) [task:462583]
  - spi: fsl-qspi: use devm function instead of driver remove (Han Xu) [task:462583] {CVE-2025-37842}
  - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. (Kuniyuki Iwashima) [task:458897] {CVE-2025-22111}
  - net_sched: drr: Fix double list add in class with netem as child qdisc (Victor Nogueira) [task:463929]
  - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV (Srinivasan Shanmugam) [task:458999] {CVE-2025-38104}
  - bpf: Fix kmemleak warning for percpu hashmap (Yonghong Song) [task:461956] {CVE-2025-37807}
  - bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP (Andrea Righi) [task:461956]
  - bpf: fix UML x86_64 compile failure (Maciej Żenczykowski) [task:461956]
  - bpf: save extended inner map info for percpu array maps as well (Andrii Nakryiko) [task:461956]
  - bpf: Fix JIT of is_mov_percpu_addr instruction. (Alexei Starovoitov) [task:461956]
  - bpf: handle CONFIG_SMP=n configuration in x86 BPF JIT (Andrii Nakryiko) [task:461956]
  - bpf: inline bpf_map_lookup_elem() helper for PERCPU_HASH map (Andrii Nakryiko) [task:461956]
  - bpf: inline bpf_map_lookup_elem() for PERCPU_ARRAY maps (Andrii Nakryiko) [task:461956]
  - bpf: inline bpf_get_smp_processor_id() helper (Andrii Nakryiko) [task:461956]
  - bpf: add special internal-only MOV instruction to resolve per-CPU addrs (Andrii Nakryiko) [task:461956]
  - arm64: mops: Do not dereference src reg for a set operation (Keir Fraser) [task:462561] {CVE-2025-37846}
  - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (David Thompson) [task:462578] {CVE-2025-37866}
  - fs/ntfs3: Keep write operations atomic (Lizhi Xu) [task:461953] {CVE-2025-37806}
  - fs/ntfs3: Separete common code for file_read/write iter/splice (Konstantin Komarov) [task:461953]
  - fs/ntfs3: Use function file_inode to get inode from file (Konstantin Komarov) [task:461953]
  - mei: vsc: Fix fortify-panic caused by invalid counted_by() use (Hans de Goede) [task:462071] {CVE-2025-37816}
  - scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer() (Chenyuan Yang) [task:461957] {CVE-2025-37826}
  - scsi: ufs: mcq: Use ufshcd_mcq_req_to_hwq() to simplify updating hwq (ChanWoo Lee) [task:461957]
  - accel/ivpu: Fix PM related deadlocks in MS IOCTLs (Jacek Lawrynowicz) [task:462563] {CVE-2025-37848}
  - accel/ivpu: Fix deadlock in ivpu_ms_cleanup() (Jacek Lawrynowicz) [task:462593] {CVE-2025-37847}
  - kernel/dma: Fix the kabi issue (liyouhong) [task:522789]
  - PHYTIUM: pswiotlb: Check if min_align_mask of dma is valid (liyouhong) [task:457982]
  - PHYTIUM: pswiotlb: Pass dma direction to pswiotlb straightly (liyouhong) [task:457982]
  - kernel/dma: Add the dma-pswiotlb intermediate translation layer (liyouhong) [task:435962]
  - PHYTIUM: pswiotlb: Fix kernel panic when the dma phy address is DMA_MAPPING_ERROR (Cui Chao) [task:435962]
  - PHYTIUM: pswiotlb: Add bypass rules of pswiotlb for specific application scenes (liyouhong) [task:435962]
  - PHYTIUM: pswiotlb: Avoid releasing memory repeatedly for coherent dma memory free (Cui Chao) [task:435962]
  - PHYTIUM: pswiotlb: Add support for PS24080 (liyouhong) [task:435962]
  - PHYTIUM: pswiotlb: Adapt for coherent dma memory allocation bypass SMMU (Cui Chao) [task:435962]
  - REDHAT: spec: Fix internal "File listed twice" errors (Prarit Bhargava) [task:506475]
  - REDHAT: spec: enable dependencies generation (Prarit Bhargava) [task:504405]
  - PHYTIUM: mmu_notifiers: Add a new callback in __flush_tlb_range (Haofeng Li) [task:482839, task:514853]
  - PHYTIUM: ras: phytium: Identify and report Phytium custom errors (Haofeng Li) [task:482839, task:514853]
  - PHYTIUM: gpio:phytium: Add driver version messages (Li Yuze) [task:453481, task:482839, task:514853]
  - PHYTIUM: gpio:phytium: Unable and clear irq before register (Li Yuze) [task:453481, task:482839, task:514853]
  - PHYTIUM: gpio: phytium: Improve gpio set affinity logic (Li Yuze) [task:453481, task:482839, task:514853]
  - gpio: gpio-phytium-sgpio: Add Phytium SGPIO driver (Chen Baozi) [task:194813, task:482839, task:514853]
  - PHYTIUM: qspi: phytium: Slove the capacity register configured error issue (Peng Min) [task:453481, task:482839, task:514853]
  - PHYTIUM: qspi: phytium: Capacity register can't be configured without flash node (Peng Min) [task:453481, task:482839, task:514853]
  - PHYTIUM: qspi: phytium: Fix the cmd_port register incorrectly configured issue (Peng Min) [task:453481, task:482839, task:514853]
  - PHYTIUM: qspi: phytium: Dynamically get the clock in the ACPI table (Peng Min) [task:453481, task:482839, task:514853]
  - PHYTIUM: qspi: phytium: Adapt flash different capacity based on CPU MPIDR (Peng Min) [task:453481, task:482839, task:514853]
  - PHYTIUM: UEFI mode acpi table support for qspi/spi driver (Wang Hanmo) [task:453481, task:482839, task:514853]
  - PHYTIUM: qspi: Add QSPI driver version description (Peng Min) [task:453481, task:482839, task:514853]
  - PHYTIUM: i2c-2.0:phytium: Fixed the bug of combining two interrupts. (Wu Jinyong) [task:453481, task:482939, task:514853]
  - PHYTIUM: i2c-v2: Modify the data transfer method (Wu Jinyong) [task:453481, task:482839, task:514853]
  - PHYTIUM: i2c_v2: Add support for phytium i2c-v2 driver (Wu Jinyong) [task:453481, task:482839, task:514853]
  - crypto: algif_hash - fix double free in hash_accept (Ivan Pravdin) [task:482127] {CVE-2025-38079}
  - crypto: lzo - Fix compression buffer overrun (Herbert Xu) [task:476205, task:482097] {CVE-2025-38068}
  - virtgpu: don't reset on shutdown (Michael S. Tsirkin) [task:482143]
  - virtio: break and reset virtio devices on device_shutdown() (Michael S. Tsirkin) [task:482143] {CVE-2025-38064}
  - eventpoll: don't decrement ep refcount while still holding the ep mutex (Linus Torvalds) [task:502303] {CVE-2025-38349}
  - livepatch/test_module: Fix compilation errors on ARM (wudandan) [task:425656]
  - EULER: scheduler: Disable cluster scheduling by default (Yicong Yang) [task:485185]
  - EULER: scheduler: Add boot time enabling/disabling of cluster scheduling (Tim Chen) [task:485185]
  - EULER: scheduler: Add runtime knob sysctl_sched_cluster (Tim Chen) [task:485185]
  - EULER: scheduler: Create SDTL_SKIP flag to skip topology level (Tim Chen) [task:485185]
  - loongarch/config: Enable randomize_kstack_offset_default (lifangxu) [task:502241]
  - LoongArch: Remove STACK_FRAME_NON_STANDARD(do_syscall) (Tiezhu Yang) [task:502241]
  - LoongArch: Add RANDOMIZE_KSTACK_OFFSET support (Jinjie Ruan) [task:502241]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.10.v2505
changelog:
  - REDHAT: rpmbuild: Remove stale .tmp_versions code and comments (Prarit Bhargava) [task:557881]
  - REDHAT: BuildRequires: lld for build with selftests for x86 (Jan Stancek) [task:557337]
  - net: fix kabi broken problem (xiaolinkui) [task:556049]
  - sched/qos:fix QOS validation logic in sched_setscheduler() (fangqiurong) [task:556331]
  - bpf: fix kabi broken problem (chenyuan) [task:556365]
  - net: fix kabi broken problem. (renpanpan) [task:556055]
  - enable auto_bind_blkcg_memcg in generic_defconfig for x86 and arm64 (wangsong) [task:527359]
  - OPENEULER: cgroup_writeback: bind blkcg and memcg (wangyigen) [task:527359]
  - enable cgroup1_writeback in generic_defconfig for x86 and arm64 (wangsong) [task:527359]
  - OPENEULER: cgroup_writeback: fix deadlock in cgroup1_writeback (Chen Ridong) [task:527359]
  - OPENEULER: cgroup: support cgroup writeback on cgroupv1 (chenridong) [task:527359]
  - OPENEULER: cgroup: factor out __cgroup_get_from_id() for cgroup v1 (Lu Jialin) [task:527359]
  - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state (Mark Rutland) [task:459154] {CVE-2025-22013}
  - sched/qos: Introduce multiple qos level (link) [task:514359]
  - sched/ext: Fix invalid task state transitions on class switch (Andrea Righi) [task:530287] {CVE-2025-39780}
  - sched/ext: Fix scx vs sched_delayed (Peter Zijlstra) [task:530287]
  - sched: Pass correct scheduling policy to __setscheduler_class (Aboorva Devarajan) [task:530287]
  - bpf: Do not include stack ptr register in precision backtracking bookkeeping (Yonghong Song) [task:497309] {CVE-2025-38279}
  - fs: fix is_mnt_ns_file() (Miklos Szeredi) [task:548039]
  - inotify: Fix possible deadlock in fsnotify_destroy_mark (Lizhi Xu) [task:551249]
  - HYGON: arch: Use hlt instead of mwait in cpuidle (zenghongling) [bug:426023]
  - OPENEULER: locking/osq_lock: Avoid false sharing in optimistic_spin_node (Zeng Heng) [task:464565, task:551411]
  - net/sched: sch_qfq: Fix null-deref in agg_dequeue (Xiang Mei) [task:547995] {CVE-2025-40083}
  - readahead: Fix null-ptr-deref in page_cache_ra_unbounded (zhangguodong) [task:533283]
  - fix build kylin security err (mengdehui) [task:546003, task:546001]
  - KVM: arm64: Prevent access to vCPU events before init (Oliver Upton) [task:547765] {CVE-2025-40102}
  - bcache: code cleanup in __bch_bucket_alloc_set() (Coly Li) [task:547435]
  - bcache: call force_wake_up_gc() if necessary in check_should_bypass() (Coly Li) [task:547435]
  - bcache: allow allocator to invalidate bucket in gc (Dongsheng Yang) [task:547435]
  - iommu/vt-d: Disallow dirty tracking if incoherent page walk (Lu Baolu) [task:546613] {CVE-2025-40058}
  - coresight: Fix incorrect handling for return value of devm_kzalloc (Lin Yujun) [task:546805] {CVE-2025-40059}
  - LoongArch: drivers/irqchip: Disable pci_irq_limit when using avec interrupt controller (Juxin Gao) [task:396165]
  - LOONGSON: LoongArch: prevent LS7A Bus Master clearing on kexec (Ming Wang) [task:396165]
  - LOONGSON: LoongArch: limit min pci msi-x/msi vector number when request more than 32 vectors (Juxin Gao) [task:396165]
  - LOONGSON: PCI: irq: Add early_param pci_irq_limit to limit pci irq numbers (Juxin Gao) [task:396165]
  - ALSA: seq: oss: Send fragmented SysEx messages immediately (Takashi Iwai) [task:429534] {CVE-2024-57893}
  - bpf: Forget ranges when refining tnum after JSET (Paul Chaignon) [task:530315] {CVE-2025-39748}
  - netfilter: ctnetlink: remove refcounting in expectation dumpers (Florian Westphal) [task:530227] {CVE-2025-39764}
  - wifi: ath10k: shutdown driver when hardware is unreliable (Kang Yang) [task:530243] {CVE-2025-39746}
  - wifi: ath10k: replace ENOTSUPP with EOPNOTSUPP (Karthikeyan Periyasamy) [task:530243]
  - driver/tpm: fix NULL err when creat vtpm (mengdehui) [task:519155]
  - kalert: Add macros to simplify event report (Huiwen He) [task:470213]
  - kalert: add eBPF kfunc bpf_kalert_report_event (Huiwen He) [task:470213]
  - kalert: add some new types and bitmap-based event list subscription (Huiwen He) [task:470213]
  - kalert: optimize fault event dispatch logic (Huiwen He) [task:470213]
  - kalert: add subscribe kernel fault events support (Huiwen He) [task:470213]
  - kalert: add get kalert channel runtime status support (Huiwen He) [task:470213]
  - kalert: modify kalert_send_reply to accept a prepared skb (Huiwen He) [task:470213]
  - kalert: add set kalert channel parameter support (Huiwen He) [task:470213]
  - kalert: introduce doit mechanism and support nlattr policy (Huiwen He) [task:470213]
  - kalert: Introduce netlink_rcv_skb to handle recv messages (Huiwen He) [task:470213]
  - ksaf: add ksaf_do_exit hook (penghuaihe) [bug:387419]
  - RDMA/hns: Fix double destruction of rsv_qp (wenglianfa) [task:520743] {CVE-2025-38582}
  - Loongarch: Adjust SHMLBA to PAGE_SIZE and use generic SHMLBA (zhangtianyang) [task:528621]
  - parse_longname(): strrchr() expects NUL-terminated string (Al Viro) [task:523423] {CVE-2025-38660}
  - ZHAOXIN: perf/zhaoxin/uncore: Enhance uncore support and fix related bugs (leoliu-oc) [task:527471]
  - KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs (Ewan Hai) [task:527471]
  - wifi: ath12k: Fix memory leak due to multiple rx_stats allocation (Sidhanta Sahu) [task:491947] {CVE-2025-38199}
  - drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities (Peter Shkenev) [task:527977] {CVE-2025-39707}
  - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (Baochen Qiang) [task:527987] {CVE-2025-39732}
  - wifi: ath11k: mac: fix struct ieee80211_sband_iftype_data handling (Kalle Valo) [task:527987]
  - ext4: Make sure BH_New bit is cleared in ->write_end handler (Jan Kara) [task:527387]
  - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (Suren Baghdasaryan) [task:527587] {CVE-2025-38686}
  - gfs2: Validate i_depth for exhash directories (Andrew Price) [task:527583] {CVE-2025-38710}
  - gfs2: Improve gfs2_consist_inode() usage (Andrew Price) [task:527583]
  - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (Zqiang) [task:527575] {CVE-2025-38704}
  - rcu/nocb: Use kthread parking instead of ad-hoc implementation (Frederic Weisbecker) [task:527575]
  - rcu/nocb: Fix segcblist state machine stale comments about timers (Frederic Weisbecker) [task:527575]
  - rcu/nocb: Fix segcblist state machine comments about bypass (Frederic Weisbecker) [task:527575]
  - rcu/nocb: Re-arrange call_rcu() NOCB specific code (Frederic Weisbecker) [task:527575]
  - rcu/nocb: Remove needless LOAD-ACQUIRE (Frederic Weisbecker) [task:527575]
  - nilfs2: do not force clear folio if buffer is referenced (Ryusuke Konishi) [task:440428] {CVE-2025-21722}
  - docs: add KYLIN version range checking macros documentation (Jackie Liu)
  - Revert "selftests: mptcp: join: disable get and dump addr checks" (Gang Yan) [task:525537]
  - iommu/amd: Avoid stack buffer overflow from kernel cmdline (Kees Cook) [task:524419] {CVE-2025-38676}
  - xen: fix UAF in dmabuf_exp_from_pages() (Al Viro) [task:520551] {CVE-2025-38595}
  - bpf: Reject narrower access to pointer ctx fields (Paul Chaignon) [task:520583] {CVE-2025-38591}
  - HID: core: Harden s32ton() against conversion to 0 bits (Alan Stern) [task:520575] {CVE-2025-38556}
  - HID: stop exporting hid_snto32() (Dmitry Torokhov) [task:520575]
  - HID: simplify snto32() (Dmitry Torokhov) [task:520575]
  - eventpoll: Fix semi-unbounded recursion (Jann Horn) [task:520569] {CVE-2025-38614}
  - iio: common: st_sensors: Fix use of uninitialize device structs (Maud Spierings) [task:520121] {CVE-2025-38531}
  - iio: st_sensors: relax WhoAmI check in st_sensors_verify_id() (Kaustabh Chakraborty) [task:520121]
  - KVM: Allow CPU to reschedule while setting per-page memory attributes (Liam Merwick) [task:520115] {CVE-2025-38506}
  - coresight: change coresight_device lock type to raw_spinlock_t (Yeoreum Yun) [task:491391] {CVE-2025-38132}
  - bnxt_en: Fix memory corruption when FW resources change during ifdown (Sreekanth Reddy) [task:532161] {CVE-2025-39810}
  - bnxt_en: Fix possible crash after creating sw mqprio TCs (Michael Chan) [task:532161]
  - crypto: x86/aegis - Add missing error checks (Eric Biggers) [task:530263] {CVE-2025-39789}
  - crypto: x86/aegis - Fix sleeping when disallowed on PREEMPT_RT (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - remove unneeded RETs (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - remove unneeded FRAME_BEGIN and FRAME_END (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - take advantage of block-aligned len (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - optimize partial block handling using SSE4.1 (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - improve assembly function prototypes (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - optimize length block preparation using SSE4.1 (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - don't bother with special code for aligned data (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - eliminate some indirect calls (Eric Biggers) [task:530263]
  - crypto: x86/aegis128 - remove no-op init and exit functions (Eric Biggers) [task:530263]
  - security/ksaf: add ksaf hook on usb_deauthorized_device (zhubing) [task:528675]
  - md: make rdev_addable usable for rcu mode (Yang Erkun) [task:523635] {CVE-2025-38621}
  - fs/proc/task_mmu: check p->vec_buf for NULL (Jakub Acs) [task:543785] {CVE-2025-40009}
  - net/smc: fix warning in smc_rx_splice() when calling get_page() (Sidraya Jayagond) [task:543787] {CVE-2025-40012}
  - kydima/build: fix build waring for copy_from_user (mengdehui) [task:537689]
  - mm: swap: check for stable address space before operating on the VMA (Charan Teja Kalla) [task:542815] {CVE-2025-39992}
  - wifi: rtl8xxxu: mark thread_exit() as __noreturn (Jackie Liu) [task:510759]
  - can: j1939: implement NETDEV_UNREGISTER notification handler (Tetsuo Handa) [task:540235] {CVE-2025-39925}
  - net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (Eric Dumazet) [task:540197] {CVE-2025-39900}
  - mm/userfaultfd: fix kmap_local LIFO ordering for CONFIG_HIGHPTE (Sasha Levin) [task:539893] {CVE-2025-39899}
  - dm-stripe: fix a possible integer overflow (Mikulas Patocka) [task:538939] {CVE-2025-39940}
  - dm-stripe: limit chunk_sectors to the stripe size (John Garry) [task:538939]
  - dm: stop using blk_limits_io_{min,opt} (Christoph Hellwig) [task:538939]
  - dm-verity: provide dma_alignment limit in io_hints (Eric Biggers) [task:538939]
  - procfs: fix a locking bug in a vmcore_add_device_dump() error path (Bart Van Assche) [task:451697]
  - virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (David Hildenbrand) [task:451697]
  - virtio-mem: remember usable region size (David Hildenbrand) [task:451697]
  - virtio-mem: mark device ready before registering callbacks in kdump mode (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM ranges in 2nd kernel (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: factor out freeing a list of vmcore ranges (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: factor out allocating a vmcore range and adding it to a list (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: move vmcore definitions out of kcore.h (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: prefix all pr_* with "vmcore:" (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: disallow vmcore modifications while the vmcore is open (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (David Hildenbrand) [task:451697]
  - fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (David Hildenbrand) [task:451697]
  - net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6 (Christoph Paasch) [task:534345] {CVE-2025-39852}
  - net: macb: fix unregister_netdev call order in macb_remove() (luoguangfei) [task:532217] {CVE-2025-39805}
  - net: macb: Convert tasklet API to new bottom half workqueue mechanism (Allen Pais) [task:532217]
  - HYGON: cpu IBRS mitigates hardware vulnerabilities (zhangjun) [task:516399]
  - HYGON: cpu IBPB command flushes all BTB branches (zhangjun) [task:516399]
  - HYGON: crypto: ccp: fix The high priority queue changes cmd_id of the queued elements (xiongmengbiao) [task:516399]
  - HYGON: crypto: ccp: support psp generic ringbuffer (xiongmengbiao) [task:516399]
  - HYGON: crypto: ccp: Remove vpsp's dependency on sev module (xiongmengbiao) [task:516399]
  - HYGON: crypto: ccp: add new pci device id for D3 (chench) [task:516399]
  - mISDN: hfcpci: Fix warning when deleting uninitialized timer (Vladimir Riabchun) [task:532231] {CVE-2025-39833}
  - sched/fair: Fix frequency selection for non-invariant case (Vincent Guittot) [task:525135]
  - panic: implement nmi_panic_self_stop function for KunPeng 920 (liqiang01) [task:515025]
  - wifi: prevent A-MSDU attacks in mesh networks (Mathy Vanhoef) [task:502609]
  - ptp: Add a upper bound on max_vclocks (I Viswanath) [task:546801] {CVE-2025-40057}
  - ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (Jeongjun Park) [task:546801]
  - vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (Ido Schimmel) [task:534331] {CVE-2025-39851}
  - net: vxlan: make vxlan_snoop() return drop reasons (Menglong Dong) [task:534331]
  - net: vxlan: add skb drop reasons to vxlan_rcv() (Menglong Dong) [task:534331]
  - net: tunnel: add pskb_inet_may_pull_reason() helper (Menglong Dong) [task:534331]
  - net: skb: add pskb_network_may_pull_reason() helper (Menglong Dong) [task:534331]
  - vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann) [task:534331]
  - Revert "vxlan: Fix regression when dropping packets due to invalid src addresses" (xiaolinkui) [task:534331]
  - LoongArch: Add debugfs entries to switch SFB/TSO state (Huacai Chen) [task:516389]
  - padata: Fix pd UAF once and for all (Herbert Xu) [task:520537] {CVE-2025-38584}
  - ZHAOXIN: x86/microcode: Add Zhaoxin cpu microcode update driver (Lyle Li) [task:527471, bug:408427]
  - x86/microcode: Consolidate the loader enablement checking (Borislav Petkov (AMD)) [task:464978]
  - OPENEULER: Improve virtCCA CVM vtimer irq inject method. (yxk) [task:533209]
  - OPENEULER: Add poll method for nfs for virtCCA CVM. (hjx_gitff) [task:533209]
  - OPENEULER: Add dynamic wfx trap method for virtCCA CVM. (hjx_gitff) [task:533209]
  - OPENEULER: Add IPI direct inject method for virtCCA CVM. (yxk) [task:533209]
  - PHYTIUM: mtd: Fix issues with standard descriptions (Wang Hanmo) [task:453481, task:521167]
  - skbuff: Add MSG_MORE flag to optimize tcp large packet transmission (Feng Yang) [task:531623]
  - net/sched: Fix backlog accounting in qdisc_dequeue_internal (William Liu) [task:527995] {CVE-2025-39677}
  - net_sched: Flush gso_skb list too during ->change() (Cong Wang) [task:467324, task:527995]
  - bpf: abort verification if env->cur_state->loop_entry != NULL (Eduard Zingerman) [task:481875]
  - bpf: don't do clean_live_states when state->loop_entry->branches > 0 (Eduard Zingerman) [task:476205, task:481875]
  - selftests/bpf: test correct loop_entry update in copy_verifier_state (Eduard Zingerman) [task:481875]
  - bpf: copy_verifier_state() should copy 'loop_entry' field (Eduard Zingerman) [task:481875] {CVE-2025-38060}
  - net: allow small head cache usage with large MAX_SKB_FRAGS values (Paolo Abeni) [task:448808] {CVE-2025-21868}
  - OPENEULER: drivers/iommu: Fix the initialization failure issue of the iommu module (Xianglai Li) [task:515409]
  - LOONGSON: LoongArch: KVM: Enhance the robustness of extioi (Xianglai Li) [task:515411]
  - LOONGSON: LoongArch: KVM: Solve the problem of starting up the upstream qemu (Song Gao) [task:515411]
  - LOONGSON: LoongArch: KVM: Fix the extioi simulation error (Xianglai Li) [task:515411]
  - Remove sensitive words (lihaofeng) [task:524131]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.12.v2505
changelog:
  - OPENEULER: irqchip: gic-v3: Collection table support muti pages (wangwudi) [task:551457]
  - LoongArch/config: Enable eMMC and Codec ES8323 Support. (lifangxu) [task:570975]
  - LOONGSON: LoongArch: 2K3000: pci scan: Limit the scope of pci scan without fun0. (wanghongliang) [task:570975]
  - LOONGSON: Revert "LoongArch: megaraid: Add udelay to avoid data error caused by dma sequence" (lifangxu) [task:570975]
  - ASoC: codec: sma1307: Fix memory corruption in sma1307_setting_loaded() (Dan Carpenter) [task:570975]
  - ASoC: sma1307: Fix error handling in sma1307_setting_loaded() (Dan Carpenter) [task:570975]
  - ASoC: sma1307: Add NULL check in sma1307_setting_loaded() (Chenyuan Yang) [task:570975]
  - ASoC: sma1307: Use SOC_SINGLE_EXT() helper macro (Charles Keepax) [task:570975]
  - ASoC: Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Uwe Kleine-König) [task:570975]
  - ASoC: sma1307: fix uninitialized variable refence (Arnd Bergmann) [task:570975]
  - ASoC: sma1307: Fix invalid logical judgement (Tang Bin) [task:570975]
  - ASoC: sma1307: Add driver for Iron Device SMA1307 (Kiseok Jo) [task:570975]
  - ASoC: dt-bindings: irondevice,sma1307: Add initial DT (Kiseok Jo) [task:570975]
  - ASoC: cs42l84: Remove unused including <linux/version.h> (Jiapeng Chong) [task:570975]
  - ASoC: cs42l84: remove incorrect of_match_ptr() (Arnd Bergmann) [task:570975]
  - ASoC: dapm: fix bounds checker error in dapm_widget_list_create (Aleksei Vetrov) [task:570975]
  - ASoC: dt-bindings: Add CS42L84 codec (Martin Povišer) [task:570975]
  - ASoC: cs42l84: leverage ring sense IRQs to correctly detect headsets (James Calligeros) [task:570975]
  - ASoC: cs42l84: Add new codec driver (Martin Povišer) [task:570975]
  - ASoC: codecs: fix error code in ntp8835_i2c_probe() (Harshit Mogalapalli) [task:570975]
  - ASoC: codecs: Remove unneeded semicolon (Yang Li) [task:570975]
  - ASoC: codecs: Add NeoFidelity NTP8835 codec (Igor Prusov) [task:570975]
  - ASoC: dt-bindings: Add NeoFidelity NTP8835 (Igor Prusov) [task:570975]
  - ASoC: codecs: Add NeoFidelity NTP8918 codec (Igor Prusov) [task:570975]
  - ASoC: dt-bindings: Add NeoFidelity NTP8918 (Igor Prusov) [task:570975]
  - ASoC: codecs: Add NeoFidelity Firmware helpers (Igor Prusov) [task:570975]
  - ASoC: codecs: Fix error check in es8323_i2c_probe (Tang Bin) [task:570975]
  - ASoC: dt-bindings: Add Loongson I2S controller (Binbin Zhou) [task:570975]
  - ASoC: codecs: Add uda1342 codec driver (Binbin Zhou) [task:570975]
  - ASoC: dt-bindings: Add NXP uda1342 Codec (Binbin Zhou) [task:570975]
  - ASoC: codecs: Add support for ES8323 (Binbin Zhou) [task:570975]
  - ASoC: dt-bindings: Add Everest ES8323 Codec (Binbin Zhou) [task:570975]
  - ASoC: es8311: dt-bindings: add everest es8311 codec (Matteo Martelli) [task:570975]
  - ASoC: codecs: es8311: add everest es8311 codec support (Matteo Martelli) [task:570975]
  - cpufreq: loongson3-acpi-cpufreq: Adaptation for 3C6000 (wudandan) [bug:457391]
  - LoongArch: Mask all interrupts during kexec/kdump (Huacai Chen) [task:570975]
  - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 (Ming Wang) [task:570975]
  - cpu/hotplug: Fix kabi change in enum cpuhp_state (lifangxu) [task:570975]
  - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads (Xianglai Li) [task:570975]
  - genirq/kexec: Prevent redundant IRQ masking by checking state before shutdown (Eliav Farber) [task:570975]
  - kexec: Consolidate machine_kexec_mask_interrupts() implementation (Eliav Farber) [task:570975]
  - LoongArch: For all possible CPUs setup logical-physical CPU mapping (Huacai Chen) [task:570975]
  - LoongArch: Enable ACPI BGRT handling (Bibo Mao) [task:570975]
  - LoongArch: Always enumerate MADT and setup logical-physical CPU mapping (Huacai Chen) [task:570975]
  - mmc: loongson2: Unify the function prefixes for loongson2_mmc_pdata (Binbin Zhou) [task:570975]
  - mmc: loongson2: Fix error code in loongson2_mmc_resource_request() (Dan Carpenter) [task:570975]
  - mmc: loongson2: prevent integer overflow in ret variable (Sergio Perez Gonzalez) [task:570975]
  - mmc: loongson2: Add Loongson-2K2000 SD/SDIO/eMMC controller driver (Binbin Zhou) [task:570975]
  - dt-bindings: mmc: loongson,ls2k0500-mmc: Add compatible for Loongson-2K2000 (Binbin Zhou) [task:570975]
  - mmc: select REGMAP_MMIO with MMC_LOONGSON2 (Mikko Rapeli) [task:570975]
  - mmc: wmt-sdmmc: fix compile test default (Johan Hovold) [task:570975]
  - mmc: add COMPILE_TEST to multiple drivers (Mikko Rapeli) [task:570975]
  - mmc: loongson2: Add Loongson-2K SD/SDIO controller driver (Binbin Zhou) [task:570975]
  - dt-bindings: mmc: Add Loongson-2K SD/SDIO/eMMC controller binding (Binbin Zhou) [task:570975]
  - LOONGSON: LoongArch: pci/quirks: 2k3000: set discrete GPU as default boot device if present (Tianrui Zhao) [task:570975]
  - LOONGSON: LoongArch: pci/quirks: ls7a2000: fix pm transition of devices under pcie port (Zhao Qunqin) [task:570975]
  - HYGON: x86/cpufeatures: Rename X86_FEATURE_SM{3,4} to X86_FEATURE_HYGON_SM{3,4} (hanliyang) [task:542911]
  - HYGON: x86: mm: Fix objtool warning about bool noinstr csv3_active() (hanliyang) [task:542911]
  - OPENEULER: crypto: hisilicon/trng - support tfms sharing the device (Weili Qian) [task:573539]
  - OPENEULER: crypto: hisilicon/trng - use DEFINE_MUTEX() and LIST_HEAD() (Weili Qian) [task:573539]
  - mm: fix arithmetic for max_prop_frac when setting max_ratio (Jingbo Xu) [task:573571]
  - mm: fix arithmetic for bdi min_ratio (Jingbo Xu) [task:573571]
  - task_work: Fix NMI race condition (Peter Zijlstra) [task:573553]
  - mm/memcontrol: add oom.group on cgroup-v1 (cuiyudong) [task:527359]
  - Add kaslr support for SUNWAY (liuyunchen) [task:564183]
  - OPENEULER: virtcca: Add missing includes for DECLARE_PER_CPU (baogen shang) [task:558853]
  - HYGON: x86/csv: Add function to get free size of CSV3 CMA (NiZhiguang) [task:542911]
  - HYGON: crypto: ccp: Fix the update decision logic when upgrading Hygon CSV firmware (NiZhiguang) [task:542911]
  - HYGON: KVM: SVM: CSV is unsupported if both the firmware with a build ID < 1878 and SME is not in use (hanliyang) [task:542911]
  - HYGON: KVM: SVM: The ASID range available for CSV2 guests vary across different firmware (hanliyang) [task:542911]
  - HYGON: Revert "mm/cma: add API to enable concurrent allocation from the CMA" (Ge Yang) [task:542911]
  - HYGON: Revert "x86/mm: CSV allows CMA allocation concurrently" (Ge Yang) [task:542911]
  - HYGON: Revert "KVM: SEV: Pin SEV guest memory out of CMA area" (Ge Yang) [task:542911]
  - HYGON: KVM: SVM: CSV: fix CSV3 launch failures because of concurrent longterm pin (yangge) [task:542911]
  - HYGON: crypto: ccp: Get api version again when update Hygon CSV firmware at runtime (hanliyang) [task:542911]
  - HYGON: KVM: SVM: CSV: Fix the vm_size even if CSV3 feature is unsupported on Hygon CPUs (hanliyang) [task:542911]
  - ext4: fix incorrect punch max_end (Zhang Yi) [task:550691]
  - ext4: fix out of bounds punch offset (Zhang Yi) [task:527381, task:550691] {CVE-2025-38221}
  - ext4: refactor ext4_punch_hole() (Zhang Yi) [task:550691]
  - ext4: don't write back data before punch hole in nojournal mode (Zhang Yi) [task:476205, task:550691]
  - ext4: remove writable userspace mappings before truncating page cache (Zhang Yi) [task:476205, task:550691]
  - ext4: passing block allocation information to ext4_es_insert_extent() (Zhang Yi) [task:550691]
  - ext4: factor out ext4_map_create_blocks() to allocate new blocks (Zhang Yi) [task:485149, task:550691]
  - OPENEULER: iommu/arm-smmu-v3: Reducing the CMD_SYNC times (Zhang Zekun) [task:550683]
  - gfs2: Fix unlikely race in gdlm_put_lock (Andreas Gruenbacher) [task:566421] {CVE-2025-40242}
  - gfs2: Unlock fewer glocks on unmount (Andreas Gruenbacher) [task:566421]
  - security/ksaf: add usb deauthorize and authorize interface (zhubing) [bug:405011]
  - OPENEULER: arm-smmu-v3: add 'HIP10C' for 162100602 errata (Hongye Lin) [task:550687]
  - OPENEULER: iommu/arm-smmu-v3: Fix the compile warning (Zhang Zekun) [task:550685]
  - OPENEULER: iommu/arm-smmu-v3: Change the style to identify the the hisi_platform (Zhang Zekun) [task:550681]
  - x86/CPU/AMD: Add X86_FEATURE_ZEN6 (Yazen Ghannam) [task:551755]
  - x86/cpufeatures: Free up unused feature bits (Sohil Mehta) [task:551755]
  - x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range (Perry Yuan) [task:551755]
  - x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range (Wenkuan Wang) [task:551755]
  - x86/CPU/AMD: Add more models to X86_FEATURE_ZEN5 (Mario Limonciello) [task:551755]
  - x86/CPU/AMD: Add X86_FEATURE_ZEN5 (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Drop now unused CPU erratum checking function (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Get rid of amd_erratum_1485[] (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Get rid of amd_erratum_400[] (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Get rid of amd_erratum_383[] (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Rename init_amd_zn() to init_amd_zen_common() (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Call the spectral chicken in the Zen2 init function (Borislav Petkov (AMD)) [task:551755]
  - x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function (Borislav Petkov (AMD)) [task:551755]
  - Fix the issue with the description of the changelog body (Qingshuang Fu) [task:560729]
  - smb: client: validate change notify buffer before copy (Joshua Rogers) [task:557347]
  - kernel version changelog generation and normalization script (Qingshuang Fu) [task:543713]
  - mm: kmem: add lockdep assertion to obj_cgroup_memcg (Muchun Song) [task:553143]
  - memcg: replace memcg ID idr with xarray (Shakeel Butt) [task:553143]
  - task_stack: uninline stack_not_used (Pasha Tatashin) [task:553143]
  - vmstat: kernel stack usage histogram (Pasha Tatashin) [task:553143]
  - memcg: increase the valid index range for memcg stats (Shakeel Butt) [task:553143]
  - mm: kmem: remove mem_cgroup_from_obj() (Muchun Song) [task:553143]
  - Documentation/cgroup-v2: clarify that zswap.writeback is ignored if zswap is disabled (Mike Yuan) [task:553143]
  - selftests: test_zswap: add test for hierarchical zswap.writeback (Mike Yuan) [task:553143]
  - selftests: cgroup: add tests to verify the zswap writeback path (Usama Arif) [task:553143]
  - mm/memcontrol: respect zswap.writeback setting from parent cg too (Mike Yuan) [task:553143]
  - mm: memcg: adjust the warning when seq_buf overflows (Xiu Jianfeng) [task:553143]
  - mm: memcg: remove redundant seq_buf_has_overflowed() (Xiu Jianfeng) [task:553143]
  - mm: memcontrol: add VM_BUG_ON_FOLIO() to catch lru folio in mem_cgroup_migrate() (Baolin Wang) [task:553143]
  - mm: zswap: rename is_zswap_enabled() to zswap_is_enabled() (Yosry Ahmed) [task:553143]
  - mm: memcontrol: remove page_memcg() (Kefeng Wang) [task:553143]
  - mm: memcg: make alloc_mem_cgroup_per_node_info() return bool (Xiu Jianfeng) [task:553143]
  - mm: list_lru: remove unused macro list_lru_init_key() (Haifeng Xu) [task:553143]
  - mm: list_lru: disable memcg_aware when cgroup.memory is set to "nokmem" (Haifeng Xu) [task:553143]
  - mm: memcg: don't periodically flush stats when memcg is disabled (T.J. Mercier) [task:553143]
  - mm: memcontrol: don't throttle dying tasks on memory.high (Johannes Weiner) [task:553143]
  - wifi: Add the NULL pointer check in 8852cu (ligongwei) [bug:439747]
  - OPENEULER: cpu/SMT: recover global num_threads after disable smt switch fail (Bowen You) [task:551731]
  - bonding: avoid send_ns_work UAF when toggling ns_probe_active (pengyu) [task:558047]
  - configs: Disable CPU mitigations for the biv kernel (Can Peng) [task:526685]
  - mm: don't try THP alignment for FS without get_unmapped_area (Kefeng Wang) [task:560261]
  - mm: respect mmap hint address when aligning for THP (Kalesh Singh) [task:560261]
  - mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes (Vlastimil Babka) [task:560261]
  - LoongArch: Workaround of the address calculation on iommu (Li Jun) [bug:457413]
  - OPENEULER: iommu/loongarch: fix potential hung task when error occurred (Hongchen Zhang) [task:562101]
  - LoongArch: add iommu support (Guopeng Zhang) [task:562101]
  - ext4: disambiguate the return value of ext4_dio_write_end_io() (Jinliang Zheng) [task:551735]
  - ext4: dax: keep orphan list before truncate overflow allocated blocks (yangerkun) [task:551735]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-32.v2505
changelog:
  - arm64: config: enable bnx2fc driver (xiaolinkui) [bug:348721]
  - x86/config: Disable CONFIG_COMPILE_TEST (Super User) [task:460841]
  - kalert: fix a redundant message problem when report event of ALL (Huiwen He) [task:339643]
  - loongarch: configs: Enable kalert feature (Huiwen He) [bug:350573]
  - Revert "LOONGSON: drm/loongson: use old version of ast driver for LoongArch platform" (Li ZhiGang) [bug:350717]
  - Revert "LOONGSON: drm/loongson: To replace the drm_ast driver with the drm_ast_loongson driver" (Li ZhiGang) [bug:350717]
  - kabi: drm/ttm: Add kabi reserve in ttm_tt.h (Qingshuang Fu) [task:457490]
  - kabi: drm/ttm: Add kabi reserve in ttm_resource.h (Qingshuang Fu) [task:457490]
  - kabi: drm/ttm: Add kabi reserve in ttm_bo.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_syncobj.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_plane.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_modeset_lock.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_mode_config.h (Qingshuang Fu) [task:457490]
  - kabi: drm: Add kabi reserve in drm_gpu_scheduler.h (Qingshuang Fu) [task:457490]
  - kabi: cgroup: add more reserve kabi (Qingshuang Fu) [task:457490]
  - kabi: seq_file: KABI reservation for seq_file (Qingshuang Fu) [task:457490]
  - kabi: statx: KABI reservation for kstat (Qingshuang Fu) [task:457490]
  - kabi: ima: KABI reservation for IMA (Qingshuang Fu) [task:457490]
  - kabi: kabi reserver space for i2c (Qingshuang Fu) [task:457490]
  - kabi: reserve space for uprobes.h (Qingshuang Fu) [task:457490]
  - kabi: Reserve space for fwnode.h (Qingshuang Fu) [task:457490]
  - kabi: Add reserve space for sched structures (Qingshuang Fu) [task:457490]
  - kabi: net: reserve space for net related structure (Qingshuang Fu) [task:457490]
  - kabi: reserve space for internal.h (Qingshuang Fu) [task:457490]
  - kabi: reserve space for perf_event.h (Qingshuang Fu) [task:457490]
  - kabi: net: reserve space for xdp subsystem related structure (Qingshuang Fu) [task:457490]
  - kabi: reserve space for struct acpi_device and acpi_scan_handler (Qingshuang Fu) [task:457490]
  - kabi: reserve space for struct rate_sample (Qingshuang Fu) [task:457490]


author: sunhai<sunhai10@huawei.com> - 1.17.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:cairo_truetype_reverse_cmap detected memory leaks
         fix read memory access
         fix call get_unaligned_be32 heap buffer overflow
         fix heap buffer overflow in cairo_cff_parse_charstring


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1.18.0-2
changelog:
  - Type:CVE
  - ID:CVE-2025-50422
  - SUG:NA
  - DESC:Fix a NULL access in active_edges_to_traps()
         Add unlikely() to test for x == INT32_MAX for the NULL reference


author: weiyucheng<weiyucheng@kylinos.cn> - 1.7.23-1.p03
changelog:
  - Type:cves
  - ID:CVE-2024-25621
       CVE-2025-64329
  - SUG:NA
  - DESC:upgrade to 1.7.23-1.p03
         fix CVE-2024-25621 CVE-2025-64329
         optimized the spec file


author: pengxu <pengxu@kylinos.cn> - 12.3.1-62.p01
changelog:
  - Type: bugfix
  - ID: [TASK#424661]
  - SUG:  NA
  - DESC:  Add kylin patches.

           author: zhaojingyu <zhaojingyu@kylinos.cn>
           Support for zhaoxin.
           0001-support-for-zhaoxin.patch

           author: wangqiang <wangqiang1@kylinos.cn>
           Support for hygon3/4 processor series.
           kylin-gcc-add-support-for-hygon3-4-processor-series.patch

           author: pengxu <pengxu@kylinos.cn>
           Support for accelerating stream.
           kylin-gcc-add-support-for-accelerating-stream.patch

           author: pengxu <pengxu@kylinos.cn>
           Support optimization of set fpnm.
           kylin-gcc-Add-optimization-of-set-fpnm.patch

           author: wangqiang <wangqiang1@kylinos.cn>
           Support phytium s5000 processor.
           kylin-gcc-Add-support-for-phytium-s5000c-processor.patch

           author: pengxu <pengxu@kylinos.cn>
           Add pie option for g++-mapper-server.
           kylin-gcc-add-pie-option-for-g++-mapper-server.patch


author: pengxu <pengxu@kylinos.cn> - 12.3.1-62.p02
changelog:
  - Type: bugfix
  - ID: [TASK#465014]
  - SUG:  NA
  - DESC: Add support for hygon arch dhyana and dharma.
          Fix bugs of stream when use -ftree-parallelize-loops=24 option.


author: pengxu <pengxu@kylinos.cn> - 12.3.1-62.p03
changelog:
  - Type: update
  - ID: [TASK#558547]
  - SUG:  NA
  - DESC: Add support for Phytium ftc86x cpu,fix aarch64 -mcpu=native shows null


author: shaojiansong <shaojiansong@kylinos.cn> - 8.0.4-3
changelog:
  - Fix lack of loongarch64 and sw_64 patch files in src.rpm package which is build from any platform.


author: shenzhongwei <shenzhongwei@kylinos.cn> - 8.0.4-10
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: zhangzikang <zhangzikang@kylinos.cn> - 8.0.4-10.p01
changelog:
  - Type:bugfix
  - ID:BUG#340534
  - SUG:NA
  - DESC:Fix NR_CPUS for loongarch64, resolve crash parsing vmcore file error


author: xinghe <xinghe2@h-partners.com> - 4.18.5-2
changelog:
  - Type:cves
  - ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
  - SUG:NA
  - DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: tenglei <tenglei@kylinos.cn> - 8.4.0-14.p02
changelog:
  - Type:bugfix
  - ID:385935
  - SUG:NA
  - DESC: add configure options '--enable-ares' to support feature '-dns-servers'


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 8.4.0-14.p03
changelog:
  - Type:rebuild
  - ID:[BUG#385935]
  - SUG:NA
  - DESC: rebuild for svr25-update with secure_compile_enabled = True


author: yuanchao <1050706328@qq.com> - 8:2.03.21-13
changelog:
  - support clang build:
    - fix function undeclared in libdm-common.c and dev-cache.c
    - fix changelog to be in descending chronological order


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.03
changelog:
  - Type: bugfix
  - ID: [BUG#242191][TASK#337083] 
  - SUG: NA
  - DESC: 修复strict 模式 selinux打标问题以及3adm未开启问题
  -       dracut-fix-switch-strict-3adm-disable.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.04
changelog:
  - Type: bugfix
  - ID: [BUG#244069]
  - SUG: NA
  - DESC: v11内核不支持中文,将打标脚本中输出的中文替换成英文
  -       relabel-script-add-en-translation.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.05
changelog:
  - Type: bugfix
  - ID: [BUG#249291]
  - SUG: NA
  - DESC: selinux-loadpolicy.sh脚本中增加对selinux目录恢复标记动作
  -       dracut-seloadpolicy-add-restore-selinux-dir-action.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.06
changelog:
  - Type: bugfix
  - ID: [BUG#249879][BUG#249601]
  - SUG: NA
  - DESC: 三员开启时,audit目录及日志文件dac权限不正确
  -       dracut-fix-audit-log-owner-when-enable-3adm.patch


author: andy <liuyang01@kylinos.cn> - 059-6.p02.se.07
changelog:
  - Type: bugfix
  - ID: [BUG#252025]
  - SUG: NA
  - DESC: open-iscsi 已经不再支持及维护iscsiuio工具, 将其相关代码移除
  -       0001-remove-iscsi-related-code-since-it-is-no-longer-main.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p02.se.08
changelog:
  - Type: update
  - ID: [TASK#379845]
  - SUG: NA
  - DESC: 适配ksaf框架改动
  -       dracut-compatible-ksaf.patch


author: andy lau <liuyang01@kylinos.cn> - 059-11.p01.se.08
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC: [backport] backport update stream fix zfcp_rules
          [backport] add backport-fix-dracut-install-copy-xattr-when-use-clone-ioctl.patch
          [backport] fix(dracut-install): copy mode when use clone ioctl
          [backport] add backport-feat-dracut-init.sh-give-force-add-precedence-over-o.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p01.se.09
changelog:
  - Type: update
  - ID: [BUG#328705][BUG#335827]
  - SUG: NA
  - DESC: 解决kysec增加自保护后,initrd中初始化三权配置错误问题,defualt 模式 ksyec为permissive
  -       dracut-fix-3adm-settings.patch
  -       dracut-fix-initrd-set-kysec-status-error.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 059-6.p01.se.10
changelog:
  - Type: update
  - ID: [BUG#372101]
  - SUG: NA
  - DESC: 解决在未加载selinux时 修改passwd文件后 se标记未unlabeled_t的问题
  -       dracut-fix-passwd-selinux-context-is-unlabel.patch


author: yueyuankun <yueyuankun@kylinos.cn> -0.59-6.p03.se.10
changelog:
  - Type:bugfix
  - ID:[TASK#577533]
  - SUG:NA
  - DESC: fix(kernel-modules-extra): remove stray \ before /


author: Xiaotian Wu <wuxiaotian@loongson.cn> - 202308-17
changelog:
  - Update LoongArch virtual machine
  - 0080-Platform-Loongson-Remove-minimium-memory-size-limita.patch
  - 0081-Platform-Loongson-Modify-loongarch-uefi-firmware-siz.patch
  - 0082-fixup-fdt-parse-error.patch


author: lijunwei <lijunwei@kylinos.cn> - 202308-17.p01
changelog:
  - Type: Update
  - ID:   [TASK#425200]
  - SUG:  NA
  - DESC: Backport v11-2409 Kylin's patch to support sata cdrom


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202308-17.p02
changelog:
  - Type: Update
  - ID:   [BUG#332197]
  - SUG:  NA
  - DESC: Fix loongarch64 0082-fixup-fdt-parse-error.patch error


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 202308-17.p03
changelog:
  - Type: Update
  - ID:   [TASK#442231]
  - SUG:  NA
  - DESC: Fix CVE-2024-13176/CVE-2024-4741/CVE-2024-9143


author: Qin Fandong <qinfandong@kylinos.cn> - 1.8.17-7.p01
changelog:
  - Type: bugfix
  - ID: BUG#382697
  - SUG: NA
  - DESC: 1. Remove build requires protobuf and disable plugin logitech-bulkcontroller
             which to upgrade the firmware on Logitech Video Collaboration products.
          2. Update distro info


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: houhongxun <houhongxun@kylinos.cn> - 2:2.99.10-2.p02
changelog:
  - Type: cves
  - ID  : [TASK#489699]
  - SUG : NA
  - DESC: fix CVE-2022-32990 CVE-2025-48797 CVE-2025-48798 CVE-2025-5473


author: houhongxun <houhongxun@kylinos.cn> - 2:2.99.10-2.p03
changelog:
  - Type: cves
  - ID  : [TASK#554869]
  - SUG : NA
  - DESC: fix CVE-2025-6035 CVE-2025-10922 CVE-2025-10934


author: houhongxun <houhongxun@kylinos.cn> - 2:2.99.10-2.p04
changelog:
  - Type: cves
  - ID  : [TASK#580833]
  - SUG : NA
  - DESC: fix CVE-2025-14422 CVE-2025-14424 CVE-2025-14425


author: yanglu <yanglu72@h-partners.com> - 2.78.0-1
changelog:
  - update glib-networking version to 2.78.0:
    - disable PKCS#11 tests when GNuTLS is built without PKCS#11 support
    - fix connection tests on 32-bit systems with 64-bit time_t
    - updated translations


author: zhangzikang <zhangzikang@kylinos.cn> - 2.78.3-3
changelog:
  - backport patch:
      backport-gdbusmessage-Clean-the-cached-arg0-when-setting-the-message-body.patch
      backport-gsocketclient-Fix-a-use-after-free-in-g_socket_client_connected_callback.patch
      backport-gcontextspecificgroup-Wait-until-stop_func-is-done.patch
      backport-gresources-fix-memory-leak-from-libelf.patch


author: wuxiaolei <wuxiaolei@kylinos.cn> -2.78.3-8.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC: sync changes from kylin previous version:
          Mov gio-launch-desktop from devel to main rpm (BUG#296979)


author: litenglong <litenglong@kylinos.cn> - 2.38-47.p01
changelog:
  - Type:update
  - ID:[Task#424805]
  - SUG:NA
  - DESC:
         author:  lipengyu <lipengyu@kylinos.cn>
         improve memset perf and add strstr-avx2
         10004--Improve-large-memset-perf-with-non-temporal-stores.patch
         10005-add-strstr-avx2.patch

         author: litenglong <litenglong@kylinos.cn>
         Add tcache_count and stack_cache_size dynamic
         10003-add-dynamic-tunable-for-tcache_count-and-stack-cache.patch

         author: lipengyu <lipengyu@kylinos.cn>
         Optimizing memcpy for KH-40000 and KX-7000-Zhaox
         10002-x86-Optimizing-memcpy-for-KH-40000-and-KX-7000-Zhaox.patch

         author: yueyaoqiang <yueyaoqiang@kylinos.cn>
         backport from sp4,add multi gl support and fix localesdata countryname
         10000-kylin-add-multi-gl-support-for-glibc.patch
         10001-Kylin_fix_localesdata_countryname-2.38-29.patch


author: litenglong <litenglong@kylinos.cn> - 2.38-47.p03
changelog:
  - Type:bugfix
  - ID:[Task#432639]
  - SUG:NA
  - DESC: fix rust compile problem by modify tcache_count counting bug.


author: wuxiaolei <wuxiaolei@kylinos.cn> -2.38-47.p07
changelog:
  - Type:bugfix
  - ID:[BUG#371909]
  - SUG:NA
  - DESC: zh_TW: update locale title and territory descriptors


author: litenglong <litenglong@kylinos.cn> - 2.38-47.p12
changelog:
  - Type:update
  - ID:[Task#550987]
  - SUG:NA
  - DESC: x86: Disable AVX Fast Unaligned Load on Hygon 1/2/3


author: litenglong <litenglong@kylinos.cn> - 2.38-47.p14
changelog:
  - Type:update
  - ID:[Task#553637]
  - SUG:NA
  - DESC: malloc: tcache modify static variable to thread local.


author: chenyanpanHW <chenyanpan@huawei.com> - 1.3.5-4
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/gnome-abrt-1.4.2-update-zh_HK-translations.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git-core


author: peijiankang <peijiankang@kylinos.cn> - 1.4.2-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#385923]
  - SUG:  NA
  - DESC: add gnome-abrt-1.4.2-update-zh_HK-translations.patch


author: xuraoqing <xuraoqing@huawei.com> - 3.8.2-1
changelog:
  - update to 3.8.2
  - some API and ABI modifications, see NEWS for details
  - New option --attime to specify current time
  - libgnutls: Add a mechanism to control whether to enforce extended master secret (RFC 7627)
  - libgnutls: Add additional PBKDF limit checks in FIPS mode as defined in SP 800-132
  - libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to %GNUTLS_NO_DEFAULT_EXTENSIONS.
  - libgnutls: Add support for RFC 9258 external PSK importer.
  - libgnutls: ClientHello extensions are randomized by default,
               To make fingerprinting harder, TLS extensions in ClientHello messages are shuffled.
  - gnutls-cli: New option --starttls-name.
  - libgnutls: transparent KTLS support is extended to FreeBSD kernel.
  - libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452).
  - libgnutls: Add API functions to perform ECDH and DH key agreement.
  - libgnutls: Fix timing side-channel inside RSA-PSK key exchange(CVE-2023-5981).


author: songjuntao <songjuntao@kylinos.cn> - 3.8.2-4.p01
changelog:
  - Type: update
  - ID: TASK#223527
  - SUG: NA
  - DESC: add certtool generate cert and tls1.3 protocol smx algorithm support


author: zhangzikang <zhangzikang@kylinos.cn> - 3.8.2-4.p02
changelog:
  - Type: update
  - ID: [TASK#372985]
  - SUG: NA
  - DESC: Fix gnutlsxx.h file, add set_credentials and db_check_entry functions.
          Supply follow symbols to solve the API/ABI compatibility issue:
            _ZNK6gnutls14server_session14db_check_entryER14gnutls_datum_t
            _ZN6gnutls7session15set_credentialsERNS_11credentialsE


author: wangshuo <wangshuo@kylinos.cn> - 1.21.4-29
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:crypto/tls: fix Config.Time in tests using expired certificates


author: Vanient <xiadanni1@huawei.com> - 1.21.4-30
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: allow update of system stack bounds on callback from C thread


author: songliyang <songliyang@kylinos.cn> - 1.21.4-37.p01
changelog:
  - Type: update
  - ID:   [TASK#524047]
  - SUG:  NA
  - DESC: Upgrade to 1.21.4-37 and backport kylin patches


author: huzhangying <huzhangying@huawei.com> - 1.21.4-38
changelog:
  - Type:CVE
  - CVE:CVE-2025-58183,CVE-2025-58185, CVE-2025-58188, CVE-2025-58189, CVE-2025-61724
  - SUG:NA
  - DESC:fix CVE-2025-58183,CVE-2025-58185, CVE-2025-58188, CVE-2025-58189, CVE-2025-61724


author: songliyang <songliyang@kylinos.cn> - 1.21.4-40.p01
changelog:
  - Type: update
  - ID:   [TASK#524047]
  - SUG:  NA
  - DESC: 1.Upgrade to fix CVE-2025-58183 CVE-2025-58185 CVE-2025-61724 CVE-2025-58187 CVE-2025-61723 CVE-2025-47912 CVE-2025-58186 CVE-2025-58189 CVE-2025-58188
          2.Backport kylin patches to fix bugs and support more features


author: panxiaohe <panxh.life@foxmail.com> - 3.7-5
changelog:
  - grep: Don't limit jitstack_max to INT_MAX
  - grep: speed up, fix bad-UTF8 check with -P
  - grep: fix minor -P memory leak


author: andy lau <liuyang01@kylinos.cn> - 1:2.12-31.se.05.p01
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC: [backport] fix bug about petitboot doesn't ignore EFI entries for ppc64le
          [backport] Inherit 'Add BLS Support' patch from grub-2.06
          [backport] 10_linux: fix missing "ro" in kernel boot parameters Disable LTO
          [backport] use confidential computing provisioned secrets for disk decryption
          [backport] commands/efi/tpm: Re-enable measurements on confidential computing platforms
          [backport] revert sohpgo's modify-efi_max_usable-addr.patch
          [backport] commands/legacycfg: Avoid closing file twice
          [backport] fix not verifying grub.cfg when loading it


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.12-31.se.05.p02
changelog:
  - Type:update
  - ID:TAKS#435953
  - SUG:NA
  - DESC:Remove the kylin_tpm.mod module and unused code in the trusted boot mode.


author: Qin Fandong <qinfandong@kylinos.cn> - 1:2.12-31.se.05.p03
changelog:
  - Type:Update
  - ID:TASK#457741
  - SUG:NA
  - DESC:i386: Check for cpuid family when flush cache only on VIA CPUs


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.12-21.se.06.p05
changelog:
  - Type:bugfix
  - ID:BUG#352094
  - SUG:NA
  - DESC:Cancel the interception prompt during startup when an abnormal configuration file is detected


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.12-31.se.07.p06
changelog:
  - Type:Update
  - ID:BUG#357087
  - SUG:NA
  - DESC:trust boot revise the prompt for scenarios where the TCM device not found


author: Qin Fandong <qinfandong@kylinos.cn> - 1:2.12-31.se.07.p07
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54770,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         net/net: Unregister net_set_vlan command on unload


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.18.4-1
changelog:
  - Upgrade to 1.18.4
  - Delete Adapt-to-backwards-incompatible-change-in-GUN.patch whose target
    patch file doesn't exist in this version 1.18.4
  - Add gstreamer-inspect-rpm-format.patch
  - Use meson rebuild


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 3.24.41-2.p01
changelog:
  - Type: bugfix
  - ID: [BUG#344842]
  - SUG:  NA
  - DESC:  fix traditional chinese translation of credits and licenses


author: litianhao <litianhao@kylinos.cn> - 1.50.2-7.se.01
changelog:
  - Type: update
  - ID: [TASK#226811] 合入安全套件功能
  - SUG: NA
  - DESC: 合入sm设备管控补丁
  -       gvfs-add-sm-devctl.patch


author: huayadong<huayadong@kylinos.cn> - 1.50.2-7.p01.se.01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: remove BuildRequires: libsmbclient-devel Provides: gvfs-smb


author: huayadong<huayadong@kylinos.cn> - 1.50.2-7.se.01.p02
changelog:
  - Type: update
  - ID  : [TASK#422649]
  - SUG : NA
  - DESC: add BuildRequires: libsmbclient-devel Provides: gvfs-smb


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.58-2
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: zhangyaqi <zhagnyaqi@kylinos.cn> - 2.4.58-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:allocate a heap buffer if the configured size is greater than the stack-allocated buffer.


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.58-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.58-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: lifeifei <lifeifei@kylinos.cn> - 2.4.58-10.p01
changelog:
  - Type:bugfix
  - ID:[Task#500427]
  - SUG:NA
  - DESC: Add kylin support and fix htcacheclean.service start error.
          fix index.html for kylin.
  	fix CVE-2024-38472 and CVE-2024-40898.


author: wuxiaolei <wuxiaolei@kylinos.cn> - 74.1-4.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC: sync changes from kylin previous version:
          Modify license information (TASK#425438)


author: herengui <herengui@uniontech.com> - 1.7.3-11
changelog:
  - Fix: fix issue that change language in deepin-control-center cannot affect the fcitx
  - Bug: #I47HF0


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.462.b08-0
changelog:
  - update to 8u462
  - deleted 8026976-ECParameters-Point-does-not-match-field-size.patch
  - deleted 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.462.b08-1
changelog:
  - deleted 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add Fix-tests-for-OS-with-64k-page-size.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.462.b08-4.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-1.8.0.462 GA release with kylin support


author: Benshuai5D <benshuai5d@163.com> -1:1.8.0.462.b08-5
changelog:
  - add 8287432-C2-assert-tn-in-0-__null-failed-must-have-li.patch
  - add 8210389-C2-assert-n-outcnt-0-C-top-n-n-is_Proj-faile.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.472.b08-0
changelog:
  - update to 8u472
  - add 8268366-C1-Incorrect-calculation-of-has_fpu_register.patch
  - deleted 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.472.b08-2.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-1.8.0.472 GA release with kylin support


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.28.6-0
changelog:
  - update to 11.0.28+6(GA)
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch


author: songliyang <songiyang@kylinos.cn> - 1:11.0.28.6-1.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-11.0.28.6 GA release with kylin support


author: songliyang <songiyang@kylinos.cn> - 1:11.0.29.7-1.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-11.0.29.7 GA release with kylin support


author: wulongyao <wulongyao1@huawei.com> - 1:17.0.16.8-0
changelog:
  - update to 17.0.16
  - modified Apply-TBI-to-ZGC-of-JDK17.patch
  - delete 8314236-Overflow-in-Collections.rotate.patch
  - modified puyuan-jdk17.0.9-patch.patch
  - modified 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modified Backport-Important-Fixed-Issues.patch
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch


author: songliyang <songliyang@kylinos.cn> - 1:17.0.16.8-2.p01
changelog:
  - Type: update
  - ID:   [TASK#520393]
  - SUG:  NA
  - DESC: openjdk-17.0.16.8 GA release with kylin support


author: songliyang <songliyang@kylinos.cn> - 1:17.0.17.10-1.p01
changelog:
  - Type: update
  - ID:   [TASK#573629]
  - SUG:  NA
  - DESC: openjdk-17.0.17.10 GA release with kylin support


author: Dingli Zhang <dingli@iscas.ac.cn> - 1:21.0.7.6-4
changelog:
  - add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
  - add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch


author: Benshuai5D <benshuai5d@163.com> - 1:21.0.7.6-6
changelog:
  - add Backport-JDK-7036144-GZIPInputStream-readTrailer-use.patch
  - add Backport-JDK-8314236-Overflow-in-Collections.rotate.patch
  - add Backport-JDK-8340532-C2-assert-is_OuterStripMinedLoo.patch
  - add huawei-fix-arm32-build-fail-undefined-reference-_Copy_conjo.patch


author: Benshuai5D <benshuai5d@163.com> - 1:21.0.8.9-0
changelog:
  - update to jdk21.0.8-ga
  - delete 8334780-Crash-assert-h_array_list.not_null-failed-in.patch
  - delete Backport-JDK-8328107-Shenandoah-C2-TestVerifyLoopOpt.patch
  - delete Backport-JDK-8333805-Replaying-compilation-with-null.patch
  - delete Backport-JDK-8338010-WB_IsFrameDeoptimized-miss-Reso.patch
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - delete Backport-JDK-8314236-Overflow-in-Collections.rotate.patch
  - modify huawei-Add-KAE-zip-feature.patch


author: Benshuai5D <benshuai5d@163.com> - 1:21.0.9.10-0
changelog:
  - update to jdk21.0.9-ga
  - delete Backport-JDK-8339460-CDS-error-when-module-is-locate.patch
  - delete Backport-JDK-7036144-GZIPInputStream-readTrailer-use.patch
  - modify huawei-Add-KAE-zip-feature.patch
  - add huawei-posix_spawn-clock_gettime-clock_getres-__cxa_thread_.patch


author: lipengyu <lipengyu@kylinos.cn> - 1.7.22-4.p01
changelog:
  - Type:update
  - ID: [TASK#500817]
  - SUG:NA
  - DESC:delete sensitive words 
         add require base64coder


author: huayadong <huayadong@kylinos.cn> - 5.113.0-2.p01
changelog:
  - Type: cve
  - ID  : [TASK#505555]
  - SUG : NA
  - DESC: Patch01:kdelibs4support-5.113.0-kylin-mg-word-modification.patch


author: zhubing zhubing@kylinos.cn - 1.0.1-02
changelog:
  - Type: update
  - ID: [BUG#327787]【V11-B19】【loongarch】【外设管控】sm-example命令执行失败
  - SUG: NA
  - DESC: 同步v11 2409解决网卡策略及时生效异常问题


author: zhubing zhubing@kylinos.cn - 1.0.0-02.se.03
changelog:
  - Type: update
  - ID: [BUG#296941] 【V11-B14】【外设管控】人体工学设备不插拔重启后策略失效
  - SUG: NA
  - DESC: 在加载kbox模块前，判断cmdline是否使能box


author: zhubing zhubing@kylinos.cn - 1.0.0-02.se.04
changelog:
  - Type: update
  - ID: [任务#419047]【安全红线】解决ksaf-init的strip编译选项问题
  - SUG: NA
  - DESC: 去除libksaf_status库文件的符号信息


author: zhubing zhubing@kylinos.cn - 1.0.1-03
changelog:
  - Type: update
  - ID: [BUG#347071]【V11 2503】【需求36791|41559】【执行控制】首次kysec_policy enable开启安全，执行控制不生效 
  - SUG: NA
  - DESC: 修复ksaf-label-manager --sync-path-id 执行失败问题


author: chengang chengang@kylinos.cn - 1.0.1-04
changelog:
  - Type: update
  - ID: [BUG#369687]【执行控制】手动添加启动参数，lsm=ksaf，重启系统后开启kysec功能不生效
  - SUG: NA
  - DESC: ksaf 默认状态从 4 修改为 0


author: chengang chengang@kylinos.cn - 1.0.1-06
changelog:
  - Type: update
  - ID: [task#502245]  支持grub设置ksaf为软模式
  - SUG: NA
  - DESC: 支持解析grub参数，设置ksaf为软模式ksaf_status=0


author: chengang chengang@kylinos.cn - 1.0.1-08
changelog:
  - Type: update
  - ID: [BUG#] off模式切换strict模式，不重启之前，setstatus 关闭kysec 或者selinux,关闭时进入了是否立即重启的交互信息提示  
  - SUG: NA
  - DESC: 未开启安全时get状态返回0


author: wangshengye <wangshengye@kylinos.cn> - 1.1.0-1.se.07
changelog:
  - Type: bugfix
  - ID: [BUG#300787]【V11-B16】【ARM】【安全模式切换】none-strict重启过程中报错
  - SUG: NA
  - DESC: [任务#412519]【ksaf】已运行进程标记更新功能优化
          [任务#415507] ksaf-label-manager安全问题整改


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-02
changelog:
  - Type: update
  - ID: [BUG#340532]【V11-2503】【B05】rpm包vendor信息检查失败
  - SUG: NA
  - DESC: 修改SPEC文件vendor信息
          同步os-release-v11分支最新代码


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-03
changelog:
  - Type: update
  - ID: [BUG#346402]【V11-2503】【B09】【需求36791】【执行控制】加载无执行权限的内核模块，无审计日志
  - SUG: NA
  - DESC: tid配置文件中添加/usr/bin/kmod,值设置为4


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-04
changelog:
  - Type: bugfix
  - ID: [BUG#364225]【v11-2503】【B14】【需求36795|41839|41835】【文件保护】移除软件包文件保护后被移动后还原的文件，再次添加保护不生效
  -     [BUG#364165]【v11-2503】【B14】【需求36795|41549】【文件保护】移除包方式添加的保护的例外后，文件保护不生效
  - SUG: NA
  - DESC: 优化继承标志设置逻辑
          同步桌面最新代码，桌面独有代码使用条件编译
          优化程序启动时对软件包查询的流程，减少对CPU资源的占用


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-05
changelog:
  - Type: bugfix
  - ID: [BUG#374711]【B17】【v11 2503】【需求36795|41839|41835】【文件保护】添加\删除\查看文件保护策略-软件包-kysec_set，只读策略不生效
  - SUG: NA
  - DES: 全盘打标之前删除包内文件父目录缓存文件


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-06
changelog:
  - Type: bugfix
  - ID: [BUG#439759]【V11-6.6.0-32.9】【龙芯3C5000L】龙芯3C5000L从selinux切换到off失败
  - SUG: NA
  - DES: 注释掉标记变更发布与订阅功能，该功能暂时未用到
         解决/opt目录下文件未打标的问题,使用宏定义将全盘打标时要跳过的目录与桌面版本区分开


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-07
changelog:
  - Type: bugfix
  - ID: [BUG#455411]【20251021update内网源测试】【loongarch/x86-v11 2503】提测软件包增量升级后，执行yum -y update核心转储
        [任务#553743]安全编译参数整改 / ksaf-label-manager安全编译参数整改
  - SUG: NA
  - DES: 解决动态库中dbus连接没有关闭文件描述符的问题
         修改软件包安装后脚本，解决软件包更新后服务进程身份错误问题


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.1-09
changelog:
  - Type: bugfix
  - ID: [BUG#330607]光驱设置只读策略后，再设置禁用策略，移除策略失效
  -     [BUG#347535]插入1次打印机，生成多条连接记录
  -     [BUG#330419]不可变切换到运维模式后，关闭执行控制失败
  -     [BUG#347348]应用安全-删除软件包执行例外设置后程序依旧可执行
  -     [BUG#352767]禁用无线网卡设备策略后，有线网络也会断开重连
  - SUG: NA
  - DESC: 内核升级,重编模块；同时同步v11桌面已修复bug


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.1-16
changelog:
  - Type: bugfix
  - ID: [任务#513487]桌面产线ksaf代码质量提高
  - SUG: NA
  - DESC: 桌面系统发现的问题，现将补丁同步到服务器,同时整改spec文件，满足合规要求


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.1-19
changelog:
  - Type: bugfix
  - ID: [BUG#439483]开启selinux后,rpm方式安装内核测试更新后无法进入系统
  - SUG: NA
  - DESC: 内核provides有问题,但内核发布周期较长，由此模块修改.


author: hanhuijie <hanhuijie@kylinos.cn> - 3.0.0-6
changelog:
  - Type:update
  - ID:[BUG#347383][BUG#349036][BUG#346870][BUG#346816][BUG#344842][BUG#346423][Bug#346777][BUG#346779][BUG#346822][BUG#347522][BUG#347703][任务#461358]
  - SUG:NA
  - DESC: 添加0010补丁: 修改可信度量bug;添加日志级别;切换开关翻译;同步桌面进程，文件，内核防卸载模块修改。----hanhuijie
  -    [BUG#349036]【V11-2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】管理员关闭可信度量重启后查看详情未置灰 		
  -    [BUG#347383]【V11 2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】切换可信启动开关后显示未达预期	
  -    [BUG#346870]【V11 2503】【B09】【需求41727】【应用程序执行控制】安全日志-关闭应用程序度执行控制功能，日志级别为信息 
  -      添加0009补丁: 同步桌面联网管控状态切换优化，搜索优化，首次加载数据优化                         ----jioahongjie
  -      添加0008补丁: 控制面板的安全中心为英文;【UKUI4.0】设置面板中安全项未汉化;终端和设置中含有英文，未繁体化; 同步桌面kysec切换接口 ----duanhongtao
  -       [BUG#346816] 【UKUI4.0】设置面板中安全项未汉化
  -       [BUG#344842] 【繁体】终端和设置中含有英文，未繁体化
  -       [BUG#346423]  控制面板的安全中心为英文
  -      添加0007补丁，修复以下问题                                                                      -----maqiting
  -    【V11 2503】【B09】【账户保护】密码强度-推荐文案中为“至少包含2类字符”
  -    【V11 2503】【B09】【账户保护】账户锁定-默认状态测试，锁定时长与锁定时间不对
  -    【V11 2503】【B09】【安全设置】安全模式切换（关闭-安全优先-关闭）,选择安全优先后重启，安全变为自定义模式，重启后安全管理员和审计管理员无法登录
  -    【V11 2503】【需求41779】【B09】default模式下test用户打开高级配置后切换root用户无法打开安全中心
  -    【V11 2503】【B09】【需求41779】点击安全中心-设置-切换安全防护设置为安全优先后重启未生效 
  - DESC: 0006补丁:开源合规修改&&删除ksc-exectl，kysec-devctl,PrivatySecurity和SecurityReinforce下的翻译文件  ----hanhuijie


author: maqiting <maqiting@kylinos.cn> - 3.0.0-7
changelog:
  - Type:update
  - ID:[BUG#356165][BUG#353735][BUG#353485][BUG#347924][BUG#347835][BUG#350293]
  - SUG:NA
  - DESC:
  -      添加0011,0012,0013补丁，修复以下问题
  -     【V11-2503】【B09】【安全加固】【安全扫描】安全扫描过程中，点击停止按钮，停止扫描后仍有扫描项的状态是扫描中
  -     【V11-2503】【B09】【日志查看器】审计操作行为日志文件中没有记录
  -     【v11 2503】【B12】【需求41759】【账户保护】密码强度－自定义密码的长度拉伸条取值范围和输入数字的取值范围不一致
  -     【V11 2503】【B11】【需求41769】【安全中心】繁体模式下，安全加固和安全工具为英文
  -     【v11 2503】【B11】【账户保护】密码强度-推荐后面字体未对齐，有空白留存
  -      更新设置下的切换安全模式弹窗逻辑，完善密码检查，更新翻译文件
  -      同步桌面修改，优化服务启动性能


author: maqiting <maqiting@kylinos.cn> - 3.0.0-8
changelog:
  - Type:update
  - ID:[BUG#356165][BUG#353485][BUG#344842][任务#455262][BUG#347416][BUG#346056][BUG#271387]
  - SUG:NA
  - DESC:
  -      添加0014补丁，修复完善以下问题
  -      [BUG#356165]【v11 2503】【B12】【需求41759】【账户保护】密码强度－自定义密码的长度拉伸条取值范围和输入数字的取值范围不一致
  -      [BUG#353485]【v11 2503】【B11】【账户保护】密码强度-推荐后面字体未对齐，有空白留存
  - 
  -      添加0015补丁，修复完善以下问题。----sunjin
  -      [BUG#344842]【V11-2503】【B08】【繁体】终端和设置中含有英文，未繁体化
  -      优化模板名显示不全和没翻译的问题
  -      修复msgstr"之间没空格的问题
  -
  -      添加0016补丁，完成用户手册（中文）编写和相关bug修复。----hanhuijie
  -      [任务#455262]【V11 2503】编写《银河麒麟高级服务器操作系统V11 2503安全中心用户手册》
  -      [BUG#347416]【V11 2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】查看帮助手册关于可信度量说明失败
  -      [BUG#346056]【V11 2503】【B09】【需求41779】应用联网控制-帮助文档验证，帮助文档打不开
  -      [BUG#271387]【V11-2409】【B10】设置的帮助手册部分内容的描述与实际系统不一致
  -
  -      添加0017补丁，修复half打开安全中心时状态切换问题。----jiaohongjie
  -      [BUG#346997]【V11 2503】【B09】【需求41779】应用联网控制-UI状态更新实时更新到命令（关-开-关）-未开启过安全功能
  -      [BUG#346469]【v11 2503】【B09】【需求41775】【内核模块防卸载】首次开启内核模块防卸载，关闭弹框后界面没有提示重启生效
  -      [BUG#346521]【V11 2503】【B09】【需求41773】【文件防篡改】首次开启文件防篡改，点击稍后重启后，界面没有重启提示
  -      [BUG#346649]【v11 2503】【B09】【需求41777】【进程防杀死】off模式开启进程防杀死，点击稍后重启后，界面没有提示重启生效
  - 
  -      添加0018补丁，修复防火墙、联网管控问题。----jiaohongjie
  -      [BUG#363405]【v11-2503】【B14】【账户保护】密码强度默认为自定义
  -      添加多个应用或软件包时，增加交互进程条；优化添加软件包窗口和结果提醒弹窗出现顺序
  -      优化添加软件包对话框：搜索保持选中状态、搜索内容为空时回车关闭问题修复
  - 
  -      添加0019补丁，补充用户手册遗漏内容
  -      添加0020补丁，修复安全热点问题 ----zhaoqingyou
  -      [任务#468465][安全红线]整改自研组件第一轮安全热点扫描的问题-ksc-defender


author: duanhongtao <duanhongtao@kylinos.cn> - 3.0.0-9
changelog:
  - Type:update
  - ID:[BUG#359365][BUG#364657][BUG#364573][BUG#353220][BUG#367341][BUG#353220][BUG#351500][BUG#347416][BUG#347377]
  - SUG:NA
  - DESC:
  -      添加0021补丁，修复完善以下问题
  -      [BUG#359365] off模式下开启内核模块防卸载未立即重启界面选中关闭，无重启生效提示
  -      [BUG#364657]【应用程序执行控制】普通用户访问安全中心，脚本管控开关未置灰
  -      [BUG#364573]【控制面板安全】控制面板-安全中心-安全加固-界面排版存在问题
  -      [BUG#353220]【V11 2503】【B11】【需求41769】【安全中心】【可信度量】【TPM/TCM】开启可信度量，查看可信根、BIOS、GRUB详情，可信根描述有误
  -
  -      添加补丁0022 修复可信度量弹窗以及可信根问题;用户手册删除不存在内容以及调整顺序问题。--hanhuijie
  -      [BUG#367341]【V11 2503】【B15】【需求41769】【安全中心】【可信度量】【KYEE】篡改grub.cfg后，可信度量项UEFI失败，通知是英文	
  -      [BUG#353220]【V11 2503】【B11】【需求41769】【安全中心】【可信度量】【TPM/TCM】开启可信度量，查看可信根、BIOS、GRUB详情，可信根描述有误 
  -      [BUG#351500]【V11 2503】【B10】【需求41769】【安全中心】【可信启动】【TPM/TCM/KYEE】不可信状态下，切换用户后登录系统，未弹出通知 
  -      [BUG#347416]【V11 2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】查看帮助手册内容有问题 	    
  -      [BUG#347377]【V11 2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM】篡改BIOS配置后，系统未给通知
  -
  -      添加补丁0023 修复fortify问题。--zhaoqingyou
  -      [任务#471067][安全红线]整改自研组件第一轮Fortify问题-ksc-defender


author: hanhuijie <hanhuijie@kylinos.cn> - 3.0.0-10
changelog:
  - Type:update
  - ID:[BUG#372255][BUG#372147][BUG#370307] 	
  - SUG:NA
  - DESC:
  -      添加0024补丁，修复完善以下问题     ---jiahongjie
  -      应用联网管控提示语更新、优化删除按钮显示、软件包UI界面图标优化等
  - 
  -      添加0025补丁，修复完善以下问题     ---xuyujun
  -      涉密接管后，应用程序执行控制和应用联网控制修改为还可以继续使用
  - 
  -      添加0026补丁，修复完善以下问题     ---hanhuijie
  -      [BUG#372255]【V11-2503】【B16】【需求41799】【可信启动】【TPM/TCM】命令行开启可信启动为拦截模式，切换安全中心界面，可信度量未选中开关 		    
  -      [BUG#372147]【V11-2503】【B16】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】开启文案长度不应该显示省略号
  -      [BUG#370307]【V11 2503】【B15】【需求41769】【可信度量日志】【KYEE】可信启动日志-在安全中心进行可信状态修改，日志查看器找不到操作日志    
  -
  -      添加0027补丁, 添加麒麟版本声明, 删除未使用代码 ---zhaoqingyou


author: maqiting <maqiting@kylinos.cn> - 3.0.0-11
changelog:
  - Type:update
  - ID:[BUG#377081][BUG#376931][BUG#378261][BUG#378697][BUG#378695]
  - SUG:NA
  - DESC:
  -      添加0028补丁，修复完善以下问题     ---duanhongtao
  -      [BUG#377081] 【B17】【应用程序执行控制】off模式开启应用程序执行控制把box也打开
  -
  -      添加0029，0030补丁，修复完善以下问题     ---maqiting
  -      [BUG#376931] 【V11-2503】【B17】【账户保护】账户锁定-关闭账户锁定登录测试，关闭锁定后重新打开安全中心，账户锁定自动打开
  -      [BUG#378261] 【v11-2503】【B17】【需求41775】【内核模块防卸载】off模式开启内核模块防卸载重启生效提示信息不对 
  -      更新设置-安全模式按钮展示逻辑，删除冗余代码
  -      [BUG#378697] 【V11 2503】【build18】【安全设置】UI上从安全模式从关闭切换成严格模式，未提示重启生效
  -      [BUG#378695] 【V11 2503】【build18】【安全设置】安全模式切换-初始状态从UI上切换到推荐，未提示重启生效


author: sunjin <sunjin@kylinos.cn> - 3.0.0-12
changelog:
  - Type:update
  - ID:[BUG#378983]
  - SUG:NA
  - DESC:
  -      添加0031补丁，修复完善以下问题     ---sunjin
  -      [BUG#378983] 【V11-2503】【B18】【安全加固】【首页显示】安全扫描，扫描结果时间显示省略号


author: hanhuijie <hanhuijie@kylinos.cn> - 3.0.0-13
changelog:
  - Type:update
  - ID:[BUG#383817]
  - SUG:NA
  - DESC:
  -      添加0032补丁，修复完善以下问题     ---hanhuijie
  -      [BUG#383817] 【出厂测试】【v11 2503】0711提测的手册存在需要修改的内容
  -      添加0033补丁，修复可信度量英文标题大小写问题&&模块防卸载翻译 ---hanhuijie
  -      添加0034补丁，修复完善以下问题     ---duanhongtao
  -      [BUG#353095] 状态为permissive时安全中心的开关为关闭
  -      [BUG#347148]【应用程序执行控制】应用程序执行控制按钮文字不为“开启”
  -      添加0035补丁，【联网管控】增加重复添加应用提醒等优化     ---jiaohongjie
  -      添加0036补丁，安全中心开始与控制面板打开安全加固打开高亮问题&&命令行打开后增加更新optionName接口，侧边栏高亮并且手册支持跳转     ---hanhuijie


author: hanhuijie <hanhuijie@kylinos.cn> - 3.0.0-14
changelog:
  - Type:update
  - ID:[BUG#406159]
  - SUG:NA
  - DESC:
  -      添加0037补丁，修复完善以下问题     ---hanhuijie
  -      [BUG#406159] 【20250826update内网源测试】【arm/loongarch/x86-v11 2503】ksc-defender软件包导致侧边栏安全加固切换失败


author: xuyujun <xuyujun@kylinos.cn> - 3.0.0-17
changelog:
  - Type:update
  - ID:[任务#570943]
  - SUG:NA
  - DESC:
  -      [任务#570943]  龙芯可信启动功能适配安全中心显示
  -      添加补丁 0039-ksc-defender-support-loongarch-tpm.patch


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.29.1-10
changelog:
  - TypeLbugfix
  - CVE:NA
  - SUG:NA
  - DECS:remove the architecture judgment in the patches section;
         include all patches in the source package.


author: weiyuan <weiyuan@kylinos.cn> - 1.29.1-10.p01
changelog:
  - Type:update
  - ID:[TASK#427098]
  - SUG:NA
  - DESC:backport v11-2409 patch
         add 1002-add-phytium-tune-for-better-affinity-in-k8s-1.29.patch


author: lijian <lijian2@kylinos.cn> - 1.29.1-10.p04
changelog:
  - Type:cves
  - ID:CVE-2025-13281
  - SUG:NA
  - DESC:backport fix CVE-2025-13281
         backport kubeadm preflight checks: fix host URL construction


author: houhongxun<houhongxun@kylinos.cn> - 5.24.4-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#352453]
  - SUG : NA
  - DESC: fix some windows displaying abnormally for 16bit depth


author: peijiankang<peijiankang@kylinos.cn> - 5.24.4-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add kwin-5.24.4-fix-coredump-when-logout.patch


author: houhongxun <houhongxun@kylinos.cn> - 5.24.4-1.p05
changelog:
  - Type: bugfix
  - ID  : [Task#536445]
  - SUG : NA
  - DESC: fix some apps displaying abnormally under 16bit color depth


author: huayadong <huayadong@kylinos.cn> - 5.24.4-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#429071]
  - SUG : NA
  - DESC: add Patch06:kwin-5.24.4-kylin-Turn-off-Tablet-Manager.patch
          关闭平板模式管理器


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p16
changelog:
  - Type: update
  - ID:[TASK#436445][TASK#432968]
  - SUG: NA
  - DESC: add fuzz check
          add secret key activation
          add deactivation function
          adjust the configuration file to the/etc directory
          adjust activate the policy to the server


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p17
changelog:
  - Type: bugfix
  - ID: [BUG#336521][BUG#336143] 
  - SUG: NA
  - DESC: update get activation code from kylin


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p18
changelog:
  - Type: bugfix
  - ID: [BUG#336143][TASK#442197][BUG#336809][BUG#339458][BUG#338942]
  - SUG: NA
  - DESC: update spec to fix install error
  	integrate value for added product
  	upate get activation status logic


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p22
changelog:
  - Type: update
  - ID:[TASK#463164][BUG#348859][TASK#466714]
  - SUG: NA
  - DESC: ajust the size of the Confirm Cancel button
  	check license osname locally when kms version lower than 2.5
  	fix security compilation issues


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-2
changelog:
  - Type:compile
  - ID:372691
  - SUG:NA
  - DESC: release 1.0-2
  	support xfs.
  	add -d to output important logs to syslog.


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-3
changelog:
  - Type:compile
  - ID:372691
  - SUG:NA
  - DESC: release 1.0-3
  	support device mapper
  	fix bug when print wwid


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-5
changelog:
  - Type:compile
  - ID:431407
  - SUG:NA
  - DESC: release 1.0-5
  	supports monitoring of file system mount/umount events.
  	improve program startup speed.
  	adjust license's description.
  	add option `--mask` to enable debug mode.
  	fix coredump when argc == 0.


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-7
changelog:
  - Type:bugfix
  - ID:[bug#381669]
  - SUG:NA
  - DESC: release 1.0-7
  	fix coredump when wwid's length is less than 32.


author: jinzhiguang <jinzhiguang@kylinos.cn> - 1.0-8
changelog:
  - Type:compile
  - ID:582005
  - SUG:NA
  - DESC: release 1.0-8
  	trigger unit tests and generate reports in CI.
  	supplement the copyright information and file header of the source code.


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.19
changelog:
  - Type: update
  - ID:   [BUG#293841]
  - SUG:  NA
  - DESC: 
  - strict模式下，所有用户都能查看日志查看器
  - 添加补丁:
  - bug-293841-permission-problems-in-strict-mode.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.20
changelog:
  - Type: update
  - ID:   [BUG#310625][TASK#361225][TASK#420685]
  - SUG:  NA
  - DESC: KVE漏洞修复
  		添加strip编译参数
  		添加copyright
  - 添加补丁:
  - bug-310625-fix-kve-2022-0308.patch
  - TASK-361225-add-strip-security-compile-parameter.patch
  - TASK-420685-supplement-header-comment.patch
  - TASK-420685-supplement-header-comment-update.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.21
changelog:
  - Type: update
  - ID:   [BUG#330366][BUG#297363][BUG#297421]
  - SUG:  NA
  - DESC: 修复崩溃日志无显示
  		更新单元测试文件
  		修复字体样式未随系统切换
  		修复审计日志导出后文件内容存在特殊字符
  		合规性整改
  - 添加补丁:
  - bug-330366-no-crash-log-display-after-crash.patch
  - update-unit-test-file.patch
  - bug-297363-font-update-with-system.patch
  - bug-297421-special-character-displayed-when-export-audit-log.patch
  - update-code-compliance-rectification.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.22
changelog:
  - Type: update
  - ID:   [BUG#338424]
  - SUG:  NA
  - DESC: 添加dbus方法级管控接口
  - 添加补丁:
  - bug-338424-add-dbus-interface-access-control.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.23
changelog:
  - Type: update
  - ID:   [TASK#439187][TASK#439188]
  - SUG:  NA
  - DESC: debug模式下禁用dbus接口管控
  		安全操作日志需求
  		适配kysec2.0内核日志
  - 添加补丁:
  - update-disable-dbus-access-control-in-debug.patch
  - TASK-439187-adapted-to-operation-log.patch
  - TASK-439188-adapted-to-kysec2.0-kernel-log.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.24
changelog:
  - Type: update
  - ID:   [BUG#295643][BUG#314413][BUG#347837][BUG#347838]
  - SUG:  NA
  - DESC: ssh登录失败等级为警告
  		root用户被锁定没有日志
  		复制日志失败
  		数据加载完成后提示窗不会自动退出
  - 添加补丁:
  - bug-295643-level-warning-when-ssh-login-failed.patch
  - bug-314413-no-root-locked-log.patch
  - bug-347837-copy-log-failed.patch
  - bug-347838-dialog-auto-exits-after-loading-completed.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.25
changelog:
  - Type: update
  - ID:   [BUG#347841][BUG#346493]
  - SUG:  NA
  - DESC: 主题适配
  		未知用户登陆等级修改为错误
  		关闭文件防篡改等级修改为警告
  - 添加补丁:
  - bug-347841-adapt-to-system-theme.patch
  - update-unknown-user-login-failed-is-error.patch
  - bug-346493-the-level-is-information-when-close-kysec-fpro.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.26
changelog:
  - Type: update
  - ID:   [BUG#346493][BUG#346442]
  - SUG:  NA
  - DESC: 更改warning级别翻译为告警
  		修复kysec命令行操作在麒麟安全中无显示问题
  		修复测试用例编译问题
  - 添加补丁:
  - update-warning-of-translation-issue.patch
  - update-kysec-cmd-operation-is-not-displayed.patch
  - update-test-case-compilation-issue.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.27
changelog:
  - Type: update
  - ID:   [BUG#375807][BUG#376571]
  - SUG:  NA
  - DESC: 用户手册无法打开、更新用户手册
  		default模式无应用日志：应用日志暂不显示
  		代码通过clang-format格式化
  - 添加补丁:
  - bug-375807-user-guide-cannot-be-opened.patch
  - bug-376571-ordinary-users-do-not-display-app-logs.patch
  - update-standardized-code-format.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.28
changelog:
  - Type: update
  - ID:   [TASK#553757]
  - SUG:  NA
  - DESC: 栈保护安全编译参数修改
  - 添加补丁:
  - TASK-553757-update-stack-protector-compile-parameter.patch


author: zhangzikang <zhangzikang@kylinos.cn> -12.0.2-12.el8.ks8.02
changelog:
  - Type:update
  - ID:TASK#141930
  - SUG:NA
  - DESC:modify the spec file URL and gettext_package to kylin
  - Add Patches:fix_PACKAGE_name_to_kylin.patch


author: douyan<douyan@kylinos.cn> 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add patch 0001-fix-kylin-nm-4.10.0.0-add-LANG-env.patch


author: houhongxun <houhongxun@kylinos.cn> 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289795]
  - SUG : NA
  - DESC: dns address from network manager is in network byte order


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok0.13k0.14
          upstream commitid: 52ecaf1e58ae14f32abcc183c92b6c60b0d3e2f9


author: xuchenchen <xuchenchen@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID: [BUG#249127]
  - SUG: NA
  - DESC: kylin-prohibit-non-root-users-from-setting-up-networ.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID: [BUG#437383]
  - SUG: NA
  - DESC: kylin-nm-4.10.0.0-kylin-fix-closing-network-segment.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.0.0.1kylin1k81-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 1.0.0.1kylin1k81-ok8.24k1.3


author: peijiankang <peijiankang@kylinos.cn> - 1.0.0.1kylin1k81-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add kylin-screenshot-1.0.0.1kylin1k81-Single-instance-addition-of-DISPLAY-judgment.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.0.0.1kylin1k81-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#383661]
  - SUG : NA
  - DESC: add kylin-screenshot-1.0.0.1kylin1k81-fix-aboutinfo-and-singleinstance.patch
          add kylin-screenshot-1.0.0.1kylin1k81-add-copyright-info.patch


author: Wenhua Huang <huangwenhua@kylinos.cn> - 0.1.1-1.p05
changelog:
  - Type:update
  - ID:TASK#222678
  - SUG:NA
  - DESC: Modify License to KylinSoft
          RPM ignore test code


author: Wenhua Huang <huangwenhua@kylinos.cn> - 0.1.1-1.p06
changelog:
  - Type:bugfix
  - ID:[BUG#248111/BUG#247937/BUG#247889/BUG#247883]
  - SUG:NA
  - DESC: Fix bugs cause by sonarQube


author: cenhuilin <cenhuilin@kylinos.cn> - 0.1.1-1.p11
changelog:
  - Type:bugfix
  - ID:[BUG#398435]
  - SUG:NA
  - DESC:1.fix match process error problem
         2.mdmonitor is not start by default,delete disable enable mdmonitor
         3.fix no python file problem in build


author: Deyuan Fan <fandeyuan@kylinos.cn> - 2.0-8
changelog:
  - Type:compile
  - ID:TASK#387157
  - SUG:NA
  - DESC:add unit test code & improve code coverage & modify bpf program.


author: Deyuan Fan <fandeyuan@kylinos.cn> - 2.0-11
changelog:
  - Type:compile
  - ID:TASK#440154 TASK#431721 TASK#429232
  - SUG:NA
  - DESC:monitor of signal & inode & filehandle & number of process


author: Deyuan Fan <fandeyuan@kylinos.cn> - 2.0-12
changelog:
  - Type:compile
  - ID:TASK#440154 TASK#443800 TASK#433604 TASK#431721
  - SUG:NA
  - DESC:fix some known issues and GPL issue


author: changtao <changtao@kylinos.cn> - 2.0-13
changelog:
  - Type:compile
  - ID:BUG#339854 BUG#339852 TASK#446051
  - SUG:NA
  - DESC:fix file monitor failed of rm operation & fix file monitor timestamp problem &fix PenTest


author: changtao <changtao@kylinos.cn> - 2.0-15
changelog:
  - Type:compile
  - ID:TASK#471101 TASK#415537
  - SUG:NA
  - DESC:fix fortify high-level problem & add file license headers


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-user-guide-4.10.0.0-ok2.7k0.16
          upstream commtid:7ad757f89f412a5be1d5684048a516c028645671


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-user-guide-4.10.0.0-ok2.7k0.18
          upstream commtid:a780d9a4d36e4f58f6dea3412fc3974c14e5f6ea


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#293701]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-root-start-no-sandbox.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: update
  - ID  : [TASK#475175]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-remove-html-comment.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#363727]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-zh-HK-adapt.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#363723]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-update-zh-HK-ts.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#356895]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-add-ksc-defender-jumpinfo.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#381069]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-ukui-control-center-jump-error.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p11
changelog:
  - Type: bugfix
  - ID  : [BUG#356895]
  - SUG : NA
  - DESC: update kylin-user-guide-4.10.0.0-kylin-add-ksc-defender-jumpinfo.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p12
changelog:
  - Type: bugfix
  - ID  : [BUG#385929]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-update-shortcut-info.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.0.1.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-virtual-keyboard-3.0.1.0-ok0.12k0.4
          upstream commtid:f3b588138f44997947ec3b5c2912a11fcafcd71f


author: peijiankang <peijiankang@kylinos.cn> - 3.0.1.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#470133]
  - SUG : NA
  - DESC: fix kylin-virtual-keyboard animationAvailability


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#307245]
  - SUG: NA
  - DESC: 修复parse_file_type函数解析文件类型错误问题
  -       kysec-common-fix-parse-file-type-error.path


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.16
changelog:
  - Type: update
  - ID: [TASK#405875]
  - SUG: NA
  - DESC: 增加单元测试代码
  -       kysec-common-add-unit-test-20241024.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.17
changelog:
  - Type: update
  - ID: [TASK#422679] 合规整改
  - SUG: NA
  - DESC: 合规整改
  -       kysec-common-add-license.patch


author: pengxi <pengxi@kylinos.cn> - 1.1.1-01.se.18
changelog:
  - Type: update
  - ID: [TASK#435234]
  - SUG: NA
  - DESC: 单元测试代码更新
  -       kysec-common-update-unit-test.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.19
changelog:
  - Type: update
  - ID: [TASK#449386]
  - SUG: NA
  - DESC: 修复平台扫描的开源代码引入问题
  -       kysec-common-fix-opensource-introduce.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.1-01
changelog:
  - Type: update
  - ID: [TASK#441731]
  - SUG: NA
  - DESC: kysec2.0命令行开发,添加kysec_policy的日志类型
  -         kysec-common-add-kysec-policy-log-type.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.1-02
changelog:
  - Type: bugfix
  - ID: [BUG#346400]
  - SUG: NA
  - DESC: 修复parse_file_type()解析.ko.xz的错误
  -	  kysec-common-fix-parse-file-type-interface-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.2.1-03
changelog:
  - Type: update
  - ID: [TASK#441570]
  - SUG: NA
  - DESC: 新增kysec-scene日志接口
  -	  kysec-common-add-kysec-scene-log-if.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-04
changelog:
  - Type: update
  - ID: [TASK#468469]
  - SUG: NA
  - DESC: 修复安全热点问题
  -     kysec-common-fix-sonarqube.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-05
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: 增加获取指定目录下所有子文件和子目录接口,逐级获取接口,增加获取指定目录下文件和目录,仅指定目录层级
  -     kysec-common-add-get-path-api.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-03
changelog:
  - Type: update
  - ID: [TASK#441731]
  - SUG: NA
  - DESC: 模式切换时 去除kysec中开启box的动作,单独开启box
  -	  kysec-daemon-fix-double-enable-box.patch  
  - 	添加setModuleStatusReboot()接口, 可以直接重启系统
  -         kysec-daemon-add-set-module-status-reboot-interface.patch   
  -   box开启逻辑放在kysec中作为子项
  -         kysec-daemon-fix-change-box-status.patch
  - 修改security-switch --get 状态时 off的状态显示值由none 变为off
  -	  kysec-daemon-get-status-none-2-off.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-04
changelog:
  - Type: update
  - ID: [BUG#352649][BUG#352653][BUG#351149]
  - SUG: NA
  - DESC: 修复调用reboot命令执行错误的问题
  -	  kysec-daemon-fix-excute-reboot-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#353088][BUG#353355]
  - SUG: NA
  - DESC: 安全模式由off切换到strict出现提示完成后立即重启[BUG#353088]
  -	无权限进行模式切换的用户，切换失败后提示信息不友好[BUG#353355]
  -	  kysec-daemon-fix-off-to-strict-need-immediately-reboot-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-06
changelog:
  - Type: bugfix
  - ID: [BUG#354035][BUG#353489]
  - SUG: NA
  - DESC: [BUG#354035]修复开启安全后 audit服务启动失败问题
  -       [BUG#353489]解决安全中心设置中无法关闭安全问题
  -       [其它]修复onoe模式下ksaf是开启状态, 检查切换模式是否需要重启错误的问题
  -          -- kysec-daemon-fix-none-mode-but-ksaf-on-check-reboot-error.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-07
changelog:
  - Type: bugfix
  - ID: [BUG#369811][BUG#368135]
  - SUG: NA
  - DESC: [BUG#369811]修复softmode和enable互相切换时会修改子模块状态的问题
  -	[BUG#368135]推荐模式下，setstatus生效测试-apparmor-enable，失败
  -         -- kysec-daemon-fix-softmode-and-enable-switch-error.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-08
changelog:
  - Type: bugfix
  - ID: [BUG#372191]
  - SUG: NA
  - DESC: [BUG#372191]修改涉密场景禁止设置安全模式和切换kysec、selinux、apparmor状态
  -	[其它]修复setstatus设置状态时, 如果状态出错, 是正常返回的问题
  -	  -- kysec-daemon-modify-sm-scene-forbidden-set-security-mode.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-09
changelog:
  - Type: bugfix
  - ID: [BUG#375127][BUG#372111]
  - SUG: NA
  - DESC: [BUG#375127]修复频繁操作security-switch --get 模式回变成off
  -	[BUG#372111]解决普通用户可以使用systemctl管理服务问题
  -	  -- kysec-daemon-fix-repeatedly-execute-security-switch-get-error.patch


author: litianhao <litianhao@kylinos.cn> - 2.0.0-10
changelog:
  - Type: bugfix
  - ID: [BUG#376773]
  - SUG: NA
  - DESC: [BUG#376773]修复频繁操作security-switch --get 模式回变成off
  -	  kysec-daemon-do-not-disable-audit.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.0-11
changelog:
  - Type: bugfix
  - ID: [BUG#379175]
  - SUG: NA
  - DESC: 修复切换切换strict或default模式后 grub中存在两个audit参数问题
  -	  kysec-daemon-fix-grub-audit-param-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.0-12
changelog:
  - Type: bugfix
  - ID: [BUG#381085]
  - SUG: NA
  - DESC: 修复off模式下仅开启box 重启后 获取的安全状态不正常问题
  -	  kysec-daemon-fix-get-security-status-error-when-only-open-box.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-13
changelog:
  - Type: bugfix
  - ID: [TASK#555445]
  - SUG: NA
  - DESC: 解决只切换selinux状态时, 不进行策略编译下发
  -	  kysec-daemon-fix-set-selinux-status-not-sync-policy.patch


author: lengchunying <lengchunying@kylinos.cn> - 2.0.0-14
changelog:
  - Type: bugfix
  - ID: [TASK#566261]
  - SUG: NA
  - DESC: 修复CVE-2025-1202
  -         kysec-daemon-fix-cve-2025-1202.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.09
changelog:
  - Type: bugfix
  - ID: [BUG#218046]
  - DESC: 修复系统重启后kmod的sm策略不生效
  -	  add patch: kysec-sync-daemon-fix-sm-policy-kmod-inoperative-when-reboot.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.10
changelog:
  - Type: bugfix
  - ID: [BUG#218522]
  - DESC: 修复重启后hub管控不生效的问题
  -     add patch: kysec-sync-daemon-fix-hub-policy-not-work-after-reboot.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.11
changelog:
  - Type: bugfix
  - ID: [TASK#217917]
  - DESC: 修复设备管控usb中的段错误
  -     add patch: kysec-sync-daemon-fix-usb-coredump.patch


author: lengchunying <lengchunying@kylinos.cn> - 1.1.1-01.se.13
changelog:
  - Type: update
  - ID: [TASK#226809] 覆盖率测试
  - SUG: NA
  - DESC: 编写覆盖率测试用例，覆盖率>10%
  - 	add patch: kysec-sync-daemon-test-20240729.patch
  - 		kysec-sync-daemon-test1-20240731.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.14
changelog:
  - Type: update
  - ID: [TASK#391719][TASK#395913] 修复安全热点 修复fortify
  - SUG: NA
  - DESC: 修复安全热点
  - 	add patch: kysec-sync-daemon-fix-security-func.patch
  - 		       kysec-sync-daemon-fix-sonarqube-bugs.patch
  -              kysec-sync-daemon-fix-fortify-security-issues.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.15
changelog:
  - Type: update
  - ID: [TASK#401353]
  - SUG: NA
  - DESC: 提升代码覆盖率
  - 	add patch: kysec-sync-daemon-add-unit-test-20241030.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.16
changelog:
  - Type: update
  - ID: [TASK#422677]
  - SUG: NA
  - DESC: 解决安全热点,增加license
  - 	add patch: kysec-sync-daemon-fix-sonarqube-scan.patch
  -   add path: kysec-sync-daemon-add-license.patch


author: pengxi <pengxi@kylinos.cn> - 1.1.1-01.se.17
changelog:
  - Type: update
  - ID: [TASK#435238]
  - SUG: NA
  - DESC: 提升代码覆盖率
  - 	add patch: kysec-sync-daemon-update-unit-code.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.18
changelog:
  - Type: update
  - ID: [TASK#591121]
  - SUG: NA
  - DESC: 增加test条件编译变量
  - 	add patch: kysec-sync-daemon-20260129-add-test-compile-condition.patch


author: zhangfan<zhangfan4@kylinos.cn> - 1.0.0-05
changelog:
  - Type:bugfix
  - ID:[BUG#334554]
  - SUG:NA
  - DESC:1.服务器v11-2503机密级计算功能集成
         2.增加自动化测试脚本
         3.增加麒麟license和copyright信息


author: wujiening<wujiening@kylinos.cn> - 1.0.0-07
changelog:
  - Type:bugfix
  - ID:[BUG#487417]
  - SUG:NA
  - DESC:1.sosid 命令长度限制修改为32字节，超过报错
         2.sosid 命令增加错误提示
         3.增加sosid命令自动化测试脚本


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#347304][BUG#346994][BUG#352195][BUG#347171][BUG#346911]
  - SUG: NA
  - DESC: 应用联网控制-命令行状态实时更新到UI测试（关-开-关）-切换过安全功能的none，命令开启联网控制失败[BUG#347304]
  -	普通用户修改保护箱状态失败kysec_policy命令未提示失败原因[BUG#352195]
  -	kysec_policy错误参数未输出帮助信息[BUG#347171]
  -	应用联网控制，首次安装系统后执行kysec_policy net on，提示先开启kysec[BUG#346994]
  -	未开启kysec，输入错误参数未输出帮助信息[BUG#346911]
  -	  kysec-utils-fix-kysec-policy-command-bug3.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-06
changelog:
  - Type: bugfix
  - ID: [BUG#346897]
  - SUG: NA
  - DESC: 修复BUG#346897 文件保护箱打不开
  -	kysec_policy和kysec_set命令交互提示之前,先检查接口调用权限
  -	旧命令加入废弃提示
  -	_get_func_status()接口查询子模块状态之前,先查询kysec状态, kysec为关,子模块都是关
  -	文件保护允许删除不存在的文件、目录和软件包的只读保护策略和例外策略
  -	忽略链接文件的实际文件不存在时的报错
  -	  kysec-utils-fix-kysec-policy-command-bug4.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-07
changelog:
  - Type: bugfix
  - ID: [BUG#360575]
  - SUG: NA
  - DESC: 修复BUG#360575 添加\删除\查看\清除白名单-对象不存在-kysec_set提示信息未换行
  -       同步桌面修改:
  -       1、修复bug#353590 kysec_policy命令行-A添加策略时,不允许设置-v选项, 增加错误提示
  -       2、修复enable和warning的拼写错误
  -       3、修改checkSecuritySwitchReboot_dbus()接口调用函数名错误的问题
  -       4、新增getBootMode_dbus()查询当前系统模式的接口
  -       5、网络保护查询所有策略不检查软件包和文件是否存在
  -       6、网络保护删除文件策略时, 不检查文件是否存在
  -       7、网络保护删除、添加和更新文件策略时，如果文件有所属软件包，需要处理软件包的策略
  -       8、执行控制添加告警弹窗状态设置
  -       9、执行控制和文件只读保护添加在不可变模式下过滤/usr路径下的文件
  -         -- kysec-utils-fix-kysec-policy-command-bug5.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-08
changelog:
  - Type: bugfix
  - ID: [BUG#361691]
  - SUG: NA
  - DESC: [BUG#361691]解决进程保护和文件只读保护例外程序无法删除的问题
  -       同步桌面补丁:
  -       [其它]文件保护和执行控制添加例外程序时，在不可变模式下过滤/usr目录
  -       [其它]删除status_dbus.h中的config.h头文件引用, 解决其它包引用时编包错误
  -         -- kysec-utils-fix-kysec-policy-command-bug6.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-09
changelog:
  - Type: bugfix
  - ID: [BUG#347672][TASK#471077][BUG#346106][BUG#352444][BUG#346106][BUG#364039][BUG#364125][BUG#363959]
  - SUG: NA
  - DESC: [BUG#347672]根据要求去除错误码
  -       [BUG#347672]根据要求去除错误码
  -       [TASK#471077]修复申请的资源未释放问题
  -       [其它]安全热点问题
  -       [BUG#346106]修复使用kysec_set添加文件策略后, kysec_policy更新对应文件策略失败的问题
  -       [BUG#352444]优化kysec关闭时, 开启单独模块耗时长的问题
  -       [BUG#346106]网络控制修改逻辑, 文件有所属软件包, 添加修改软件包策略
  -       [BUG#364039]文件保护的帮助信息不对
  -       [BUG#364125]文件保护添加目录和软件包none标记提示核心已转储
  -       [BUG#363959]目录添加保护，删除文件保护例外失败
  -       [其它]修改setstatus命令, 切换box时ksaf开启不提示重启
  -       同步桌面补丁:
  -       [其它]修改设备管控光驱的状态显示
  -       [其它]优化执行控制查询白名单速度
  -          -- kysec-utils-fix-kysec-policy-command-bug7.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-10
changelog:
  - Type: bugfix
  - ID: 
  - SUG: NA
  - DESC: [BUG#368141]根据路径删除网络管控策略-kysec_set未生效
  -       [BUG#368141]根据路径删除网络管控策略-kysec_set未生效
  -       [BUG#368127]kysec_get netctl -l 无数据
  -       [BUG#367319]帮助信息-kysec_get输出多余信息
  -       [BUG#367069]更新被篡改的文件，有多余的提示信息
  -       [BUG#366955]off->开启kysec，禁止程序执行的子模块显示名称不对
  -       [BUG#366937]开启获取selinux状态，命令提示处于废弃阶段，删除getstatus和setstatus中废弃提示
  -       [BUG#366379]execban禁止程序执行-strict权限测试，root和auditadm用户不可执行
  -       [BUG#366367]strict模式下关闭selinux，出现交互信息
  -       [BUG#365915]清除标签-递归目录-执行命令未达预期，删除提示信息
  -       [BUG#365873]清除标签-目录，执行命令提示不符预期，删除提示信息
  -       [BUG#364687]kysec_policy包名添加的程序，路径方式删除成功提示失败
  -       [BUG#364667]kysec_set添加的策略，kysec_policy更新失败
  -       [BUG#364125]文件保护添加目录和软件包none标记提示核心已转储
  -       [BUG#364017]删除文件保护后，例外程序未被删除
  -       [其它]修改设备管控错误, 修改cdrom设置权限的方式
  -       [其它]修改scripts/init-bottom/3adm_enable文件,解决三员模式下kysec-daemon修改netctl.xml错误的问题
  -          -- kysec-utils-fix-kysec-policy-command-bug8.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-11
changelog:
  - Type: bugfix
  - ID: [BUG#370259]
  - SUG: NA
  - DESC: [BUG#370259]删除服务器的命令行的禁止执行功能
  -	[BUG#369979]解决黑白名单安装控制-黑白名单同时生效时，rpm安装软件包提示核心已转储的问题
  -       [其它]修复编译优化参数是-O0时，编译错误的问题
  -       [其它]涉密场景下kysec_policy禁止设置kysec状态, setstaus禁止设置kysec、selinux和apparmor状态,
                kysec_set和kysec_get禁止和查询设置fpro、ppro和kmod策略
  -         -- kysec-utils-fix-kysec-policy-command-bug9.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-12
changelog:
  - Type: bugfix
  - ID: [BUG#375705]
  - SUG: NA
  - DESC: [BUG#375705]kysec_policy userid --help root用户不展示帮助手册
  -       同步桌面修改：
  -       [BUG#377631]删除开明包标记后，kaiming命令不可用，软件包忽略软链接文件
  -       [BUG#358329]开明包删除标记后，进行标记查询，出现警告弹窗，软件包忽略软链接文件
  -       [其它]隐私保护除设置开关外，其它操作不检查用户权限检查
  -	  -- kysec-utils-fix-kysec-policy-command-bug10.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-13
changelog:
  - Type: bugfix
  - ID: [BUG#378971][BUG#380475][BUG#380117]
  - SUG: NA
  - DESC:[BUG#378971]下发docker中的脚本，无法移除策略, 修改通过pid获取路径接口
  -      [BUG#380475]kysec_policy -V不显示版本信息, 隐藏-V选项
  -      [BUG#380117]更新不存在的管控策略成功, 修改文件和软件包策略都不存在,不添加软件包策略
  -      [BUG#380347]/usr/etc/文件不应存在,修改spec文件,创建命令注释了
  -      spec文件增加libksaf-label-manager-devel依赖
  -	  -- kysec-utils-fix-kysec-policy-command-bug11.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-14
changelog:
  - Type: TASK
  - ID: [TASK#502485]
  - SUG: NA
  - DESC: 同步桌面修改：
  -	[BUG#355391]不可变模式下，忽略软件包中含有不可变目录下的文件设置执行控制标签
  -	  -- kysec-utils-fix-kysec-policy-command-bug12.patch


author: maxu <maxu@kylinos.cn> - 4.0.0-15
changelog:
  - Type: TASK
  - ID: [TASK#548021]
  - SUG: NA
  - DESC: 同步Bug#434735修复补丁
  -	[BUG#434735]进程防杀死接口测试-执行./ppro add /usr/bin/top失败
  -	  kysec-utils-fix-return-value.patch


author: maxu <maxu@kylinos.cn> - 4.0.0-16
changelog:
  - Type: update
  - ID: [BUG#450991]
  - SUG: NA
  - DESC: 【安全套件】文件防护功能函数优化，对目录添加保护后子目录仍然能够被删除移动
  -	  kysec-utils-add-dir-protect.patch


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.0-02.se.07
changelog:
  - Type: update
  - ID: [BUG#290677]【V11-B14】【访问控制】【白名单访问控制】模块防卸载-执行控制标记为unknown内核模块无法修改标识
  - SUG: NA
  - DESC: 修复无法添加ko.xz文件到白名单


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-05
changelog:
  - Type: update
  - ID: [BUG#347949]【执行控制】将空目录加入白名单列表执行失败
  - SUG: NA
  - DESC: 添加空目录时接口返回0；过滤掉路径前面不存在的 /tmproot


author: wangchi <wangchi@kylinos.cn> - 1.0.1-06
changelog:
  - Type: update
  - ID: [BUG#528259]  修复python脚本无法被管控的问题
  - SUG: NA
  - DESC: 1.修改脚本判断逻辑，增加对pyc文件管控; 2.修改未授权文件执行控制标记;


author: xinjiahao <xinjiahao@kylinos.cn> - 1.0.0-7
changelog:
  - Type: bugfix
  - ID: [BUG#313455 TASK#420691 TASK#422689 TASK#423777]
  - SUG: NA
  - DESC: 将文件列表数组静态定义方式改为动态分配，解决有文件未打上标记问题
          【安全编译】安全编译整改 zhoukangyu
          【开源合规】开源合规整改 zhoukangyu
          【单元测试】增加单元测试覆盖率 zhoukangyu


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.0.1-0
changelog:
  - Type: update
  - ID: [TASK#471081 BUG#354750 BUG#338995]
  - SUG: NA
  - DESC: 解决fortify问题
          kysec2-scene-1.0.0-01.se.14.ky11.src.rpm卸载后，yum install指令提示核心已转储
          增加单元测试
          【V11 2409】【SW-B04】软件包安装报“Segmentation fault（核心已转储）”，安装失败


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-09
changelog:
  - Type: update
  - ID: [BUG#364017]
  - SUG: NA
  - DESC: kysec2-scenen升级策略合并, 新增清除例外策略接口,解决自保护相关问题
  -     kysec2-scene-20250613-add-some-features.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-10
changelog:
  - Type: update
  - ID: [BUG#366133]
  - SUG: NA
  - DESC: chronyc命令在strict模式下 只能root执行
  -     kysec2-scene-20250624-fix-some-bugs.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-11
changelog:
  - Type: update
  - ID: [BUG#370845][BUG#368687]
  - SUG: NA 
  - DESC: 修复安装pure-ftpd后ftp无法连接，获取kysec状态时线程阻塞的问题
  -     kysec2-scene-20250626-fix-some-bugs.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-12
changelog:
  - Type: update
  - ID: [BUG#372333]
  - SUG: NA 
  - DESC: 去除secadm的dac override权能
  -     kysec2-scene-remove-secadm-dac-override-cap.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-13
changelog:
  - Type: update
  - ID: [BUG#377637]
  - SUG: NA 
  - DESC: boxctl增加user protect接口
  -     kysec2-scene-20250708-fix-some-bugs.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-14
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA 
  - DESC: sm-authorize添加的授权进程，在文件防护、进程防护、内核防护中例外放行
  -     kysec2-scene-add-sm-authorize-sync-exception-rules.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-15
changelog:
  - Type: update
  - ID: [BUG#379211]
  - SUG: NA 
  - DESC: 修复通过pid获取容器内进程的路径不正确
  -    kysec2-scene-fix-get-program-path-by-pid-error.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-16
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA 
  - DESC: 修复缺kmodctl.h文件中缺失的对scene_common.h的引用问题
  -    kysec2-scene-fix-missing-header-file.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-17
changelog:
  - Type: update
  - ID: [TASK#501697]
  - SUG: NA 
  - DESC: 修复：根据PID获取进程路径时，路径中大写字母强制转成小写字母，导致授权程序异常
  -    kysec2-scene-fix-get-path-case-error.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-18
changelog:
  - Type: update
  - ID: [BUG#383859]
  - SUG: NA 
  - DESC: 【通用用例安全适配】开启strcit后 secadm无权限执行 setsebool ftpd_full_access on
  -    kysec2-scene-fix-strict-not-exec-setsebool.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-19
changelog:
  - Type: update
  - ID: [BUG#416485]
  - SUG: NA 
  - DESC: 解决下发静态度量策略不生效问题
  -    kysec2-scene-fix-static_measurement-not-effective.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-20
changelog:
  - Type: update
  - ID: [BUG#418689]
  - SUG: NA 
  - DESC: 升级软件包时，即时生效策略
  -    kysec2-scene-add-update-rpm-sync-policy.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-21
changelog:
  - Type: update
  - ID: [TASK#549749]
  - SUG: NA
  - DESC: 移除setfattr命令特权
  -    kysec2-scene-remove-setfattr-permit.patch


author: zhangfan<zhangfan4@kylinos.cn> - 2.0.14.21
changelog:
  - Type:Bug
  - ID:[Bug#289319]
  - SUG:NA
  - DESC:1.修复篡改.bimabase文件中arrest_mode字段后依旧可以更新基准值的问题
         2.增加执行相关操作后同步更新PCR的流程


author: zhangfan<zhangfan4@kylinos.cn> - 2.0.14.22
changelog:
  - Type:update
  - ID:[TASK#415481] [TASK#361223]
  - SUG:NA
  - DESC:1.安全热点问题修改（PCR部分）
         2.增加PCR相关测试用例
         3.安全编译参数增加strip


author: zhangfan<zhangffan4@kylinos.cn> - 2.0.14.24
changelog:
  - Type:update
  - ID:[TASK#435903]
  - SUG:NA
  - DESC:1.同步桌面v10 2503改动
         2.增加错误码
         3.新增卸载包时清理配置文件功能
         4.支持debug版本包编译
         5.修改copyright信息


author: bianxiuning<bianxiuning@kylinos.cn> - 2.0.14.27
changelog:
  - Type:BUG
  - ID:[Bug#353449]
  - SUG:NA
  - DESC:1.修改kybima.service服务失败问题
         2.增加生成度量报告后触发写trust.log的行为
         3.提升单元测试覆盖率


author: bianxiuning<bianxiuning@kylinos.cn> - 2.0.14.30
changelog:
  - Type:update
  - ID:[TASK#553767]
  - SUG:NA
  - DESC:1.安全编译栈保护参数改为-fstack-protector-strong,去掉-fstack-protector-all参数


author: zhangyao <zhangyao108@huawei.com> - 2.39.1-15
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport community patches
          backport-sys-utils-setpriv-fix-potential-memory-leak.patch
          backport-sys-utils-save_adjtime-fix-memory-leak.patch
          backport-wall-fix-possible-memory-leak.patch
          backport-suL-fix-use-after-free-on-error.patch


author: litenglong <litenglong@kylinos.cn> - 2.39.1-16.p01
changelog:
  - Type:update
  - ID:[task#424805]
  - SUG:NA
  - DESC:
     author:  litenglong <litenglong@kylinos.cn>
     support enable-raw
     sync patch 0001-set-arm-compatible-delay-time-v2-d0.4.patch
     9400-set-locale-for-supporting-utf-8.patch

     author: shenzhongwei <shenzhongwei@kylinos.cn> -
     fix loongarch test error
     fix_loongarch_test_error.patch


author: kouwenqi <kouwenqi@kylinos.cn> - 2.39.1-16.p02
changelog:
  - Type:bugfix
  - ID:[TASK#542963]
  - SUG:NA
  - DESC:libblkid: (xfs) external log: check for ceph_bluestore


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-add-application-with-DISPLAY.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#349212]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-ukui-menu-empty.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-SIGABRT-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.13.0-1.p05
changelog:
  - Type:update
  - ID:[Task#482359]
  - SUG:NA
  - DESC: add ukui-search-4.10.13.0-kylin-remove-sensitive.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#289223][BUG#369841]
  - SUG : NA
  - DESC: update ukui-search-4.10.13.0-kylin-fix-SIGABRT-coredump.patch
          add ukui-search-4.10.13.0-kylin-ukui-search-app-data-service-sql-exec-error.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#370275]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-GetDesktopFileByPid-error.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0-2.skl2.ky10.p.se.05
changelog:
  - Type:update
  - ID:[Task#80734]
  - SUG:NA
  - DESC: 添加登录检查相同UID的功能
  -         add patch: libchkuid-1.0-login-check-same-uid.patch


author: zhangzhou<zhangzhou@kylinos.cn> - 1.0-3.se.07
changelog:
  - Type:update
  - ID:[Task#133684]
  - SUG:NA
  - DESC: 提供状态检查接口
          add patch:libchkuid-get-chkuid-state.patch


author: hanzhengyun<hanzhengyun@kylinos.cn> - 1.0-3.se.08
changelog:
  - Type:update
  - ID:[Task#185626]
  - SUG:NA
  - DESC: 解决添加用户段错误的问题
          add patch:libchkuid-fix-segmentation-fault.patch


author: zhoukangyu<zhoukangyu@kylinos.cn> - 1.0-3.se.09
changelog:
  - Type:update
  - ID:[Task#223910]
  - SUG:NA
  - DESC: 【身份鉴别】支持UID唯一性检查
           规范代码头部格式
       add patch: libchkuid-format-code-headers.patch


author: zhoukangyu<zhoukangyu@kylinos.cn> - 1.0-3.se.10
changelog:
  - Type:update
  - ID:[Task#391549 Task#391551 Task#391555]
  - SUG:NA
  - DESC: 【单元测试】Sonarqube单元测试覆盖率提升-libchkuid
          【安全编译】gcc编译添加安全编译参数-libchkuid
          【安全函数】libchkuid整改
       add patch: libchkuid-test-add-unittest-and-coverage.patch


author: zhoukangyu<zhoukangyu@kylinos.cn> - 1.0-3.se.11
changelog:
  - Type:update
  - ID:[Task#391551 Task#420701]
  - SUG:NA
  - DESC: 【安全编译】修改安全编译RPATH/STRIP
           【开源合规】合规整改


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-03
changelog:
  - Type:update
  - ID: [任务#443851] 【v11-2503】ksaf1.5-底层开发
  - SUG:NA
  - DESC: 解决动态变量不生效问题
          固定函数名和函数ID对应关系解决增量下发函数名会变问题


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-04
changelog:
  - Type:update
  - ID: [任务#443851] 【v11-2503】ksaf1.5-底层开发
  - SUG:NA
  - DESC: 解析策略前先初始化函数名解决增量下发函数名会变问题
          解决首次加载安全缺少section信息的问题
          修改及补充ksaf1.5单元测试


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-06
changelog:
  - Type:update
  - ID: [任务#461412] 策略改动及优化
  - SUG:NA
  - DESC: 优化策略下发速度
          全量下发和增量下发方案调整
          添加策略module_name字段
          代码冗余调整，重复代码合并
          解决当section段没策略全量下发，后加入策略增量下发失败问题
  	修复loongarch初始化下发策略段错误问题


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-07
changelog:
  - Type:update
  - ID: [Bug#354818] 【poc】安全中心多次切换策略后，策略不生效
  - SUG:NA
  - DESC: 支持多次编译一次下发
          解决动态变量不生效问题


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-08
changelog:
  - Type:update
  - ID: [任务#478961] 【V11 2503】修改ksaf-policy-interpreter和libksaf-policy-sync的单元测试和冗余代码
  - SUG:NA
  - DESC: 修改单元测试代码
          删除注释掉的冗余代码
          修改编译选项


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-09
changelog:
  - Type:update
  - ID: [任务#498111] 【v11 2503】修复执行#ldconfig 命令，提示/usr/lib64/libksafinterpreter.so.1不是symbolic link
  - SUG:NA
  - DESC: 未挂载日志目录时打印到屏幕


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-10
changelog:
  - Type:update
  - ID: [Bug#382843] 【出厂测试】【v11 2503】【需求41775】【内核模块防卸载】内核模块添加防卸载保护后卸载成功
  - SUG:NA
  - DESC: 文件写入强制落盘，防止断电丢失
          下发初始化策略，无策略二进制文件或无二进制策略目录均返回成功


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-11
changelog:
  - Type:update
  - ID: [任务#553741] 安全编译参数整改 / libksaf-policy-sync安全编译参数整改
  - SUG:NA
  - DESC: 将安全编译栈保护参数改为-fstack-protector-strong


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-14
changelog:
  - 添加tcm1支持兼容选项，以兼容v11系统
  - 修复编译条件变量编写错误导致的编译异常
  - 移除event帮助信息
  - 针对tcm1提示信息添加编译选项
  - 格式话代码格式
  - 修改编译告警
  - 修复三状态切换配置属性不全问题
  - 优化移除无冗余代码


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-16
changelog:
  - Type:update
  - ID:[TASK#366361] 【安全函数】libkydima整改
  - SUG:NA
  - DESC:安全编码合规性整改
  -      [TASK#361219] 【安全编译】gcc编译添加安全编译参数-libkydima
  -      修正不可靠代码，增加安全增强编译选项


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-19
changelog:
  - Type:update
  - ID:[BUG#351739]
  - SUG:NA
  - DESC: 针对set命令增加配置异常提示，针对get命令增加模块未加载时off状态显示
  	针对开源标准tcm2设备节点名称做自适应
  	修改kydima_get安装路径确保默认状态下普通用户可以访问该命令


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-20
changelog:
  - Type:update
  - ID:[BUG#353894] 【v11 2503】【B11】【需求44504】【x86\arm】【动态度量】不指定设备时，开启PCR策略命令执行失败
  - SUG:NA
  - DESC: 优化命令提示信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-21
changelog:
  - Type:update
  - ID:[TASK#471063] 【安全红线】整改自研组件第一轮Fortify问题-libkydima
  - SUG:NA
  - DESC: 修复server.cpp中 文件打开后存在句柄不释放的问题


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-22
changelog:
  - Type:update
  - ID: [BUG#369787] 【v11-2503】【B15】【需求44504】【动态度量】动态度量总开关关闭，无法获取子开关状态
  - SUG:NA
  - DESC: 修改kydima_get关闭状态显示信息
    	调整kydima_set用户执行权限


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-23
changelog:
  - Type:update
  - ID: [BUG#385507]【出厂测试】【v11-2503】【B20】【需求44504】【动态度量】帮助信息描述不对
  - SUG:NA
  - DESC: 优化命令帮助信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-24
changelog:
  - Type:update
  - ID: [BUG#408605]【自动化update内网源测试】【SP3-2403】libkydim包kydima_set命令设置周期可为负数
  - SUG:NA
  - DESC: 增加参数容错告警，修复后台服务无意义告警信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-25
changelog:
  - Type:update
  - ID: [TASK#553771]安全编译参数整改/libkydima安全编译参数整改
  - SUG:NA
  - DESC: 
  	修复kydima_get 无法在有KYDIMA日志类型定义环境下识别篡改日志问题
  	修复偶发内核度量策略同步下发到内核失败问题
  	安全编译栈保护参数改为-fstack-protector-strong


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p25
changelog:
  - Type: bugfix
  - ID:[BUG#345916]
  - SUG: NA
  - DESC: adjust the hardware binding order for value-added product
  	add v10/v11 version check by LICENSE OSNAME
  	add osname check and similar_product check in ukey activation
  	backup license_serial upload to activation platform
  	fix get subscription status error


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.65.p26
changelog:
  - Type: bugfix
  - ID:[BUG#348464]
  - SUG:NA
  - DESC: fix kylin_activation_sync output when subscription


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p27
changelog:
  - Type: update
  - ID:[TASK#463164]
  - SUG: NA
  - DESC: change similar_product to product for ukey activation
  	add place activation check for activation sync
  	kylin_productinfo output optimization
  	check license osname locally when kms version lower than 2.5


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p28
changelog:
  - Type: update
  - ID:[TASK#463164]
  - SUG: NA
  - DESC:
  	reduce the number of subscription status checks in kms
          check license osname locally when kms version lower than 2.5 \
  	 for kms udp activation mode
  	add local osname and product_type check when system is \
  	 migrated from other system which is not v11


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p29
changelog:
  - Type: bugfix
  - ID:[BUG#359265][TASK#463164]
  - SUG: NA
  - DESC:
  	change the process of obtaining hard disk serial number
  	optimized code and add copyright header
  	add restart_activation to conf for automatic activation


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.65.p30
changelog:
  - Type: bugfix
  - ID:[BUG#363291][BUG#365021][BUG#364959]
  - SUG: NA
  - DESC: fix ukey write error 
  	fix activate with v10 kyinfo and license
  	update testcase


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p31
changelog:
  - Type: update
  - ID:[TASK#442245]
  - SUG: NA
  - DESC: fix value added product osname check error for place


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p32
changelog:
  - Type: update
  - ID:[TASK#463164]
  - SUG: NA
  - DESC: cancel bind system uuid
  	change the way of obtaining embedded network card names on x86


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p32.01
changelog:
  - Type: update
  - ID:[TASK#502175][BUG#378051][BUG#414807]
  - SUG: NA
  - DESC: fix ukey activation more times
          upload cpu and os version info to kms server
  	change the access method of os version


author: houhongxun <houhongxun@kylinos.cn> - 2.5.1.2-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.5.1.2-0k4.22


author: peijiankang <peijiankang@kylinos.cn> - 2.5.1.2-1.p04
changelog:
  - Type: update
  - ID  : [TASK#474331]
  - SUG : NA
  - DESC: add libkysdk-system-2.5.1.2-kylin-fix-fortity.patch


author: huayadong<huayadong@kylinos.cn> 2.5.1.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add patch:libkysdk-applications-2.5.1.0-kylin-fix-compile-error-of-STB_IMAGE.patch


author: houhongxun <houhongxun@kylinos.cn> - 2.5.2.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.5.2.0-0k0.16


author: peijiankang <peijiankang@kylinos.cn> - 2.5.2.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#468457]
  - SUG : NA
  - DESC: add libkysdk-applications-2.5.1.0-fix-sonarqube-security-hotspots.patch


author: houhongxun <houhongxun@kylinos.cn> - 2.5.2.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#352900]
  - SUG : NA
  - DESC: fix klabel problem displaying multiple line text


author: bianxiuning<bianxiuning@kylinos.cn> - 1.0.1-28
changelog:
  - Type:bugfix
  - ID:[BUG#354077]
  - SUG:NA
  - DESC:1.修改help命令的显示内容
         2.完善spi_sysconfig参数检测
         3.三员适配由API接口调整为kytrust_config命令适配


author: bianxiuning<bianxiuning@kylinos.cn> - 1.0.1-37
changelog:
  - Type:update
  - ID:[TASK553767]
  - SUG:NA
  - DESC:1.安全编译栈保护参数改为-fstack-protector-strong,去掉-fstack-protector-all参数


author: lichenguang <lichenguang@kylinos.cn> - 4.10.0.5-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#250151] [BUG#334551] [BUG#346033]
  - SUG : NA
  - DESC:
  -   1. peony fix translation error.
  -   2. remove a critial messagebox.


author: lichenguang <lichenguang@kylinos.cn> - 4.10.0.5-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#337905] [BUG#296933]
  - SUG : NA
  - DESC: remove support for exfat from format dialog.


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#354594]
  - SUG : NA
  - DESC: fix thread race condition which caused coredumps


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#352389]
  - SUG : NA
  - DESC: fix for copying long name file to file safe box


author: xinghe <xinghe2@h-partners.com> - 2:1.6.40-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop qt5-ukui-platformtheme-4.10.0.0-ok52k0.18
          upstream commtid:723df8376ab0c104ef9b4e5612fee9012cad4fc9


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#525485]
  - SUG : NA
  - DESC: qt5-ukui-platformtheme remove libqt5-gesture-extensions


author: litianhao <litianhao@kylinos.cn> - 1.1.1-03
changelog:
  - Type: update
  - ID: [TASK#443853] 新增产品化功能 修复产品化功能BUG
  - SUG: NA
  - DESC: 优化sm授权机制，使用scene的接口控制授权
  -       sm-enhancement-optimize-authorize.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-04
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: 优化sm授权进程，添加进程时，自动添加自保护例外放行
  -       sm-enhancement-add-self-protect-exception.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-05
changelog:
  - Type: update
  - ID: [TASK#468477]
  - SUG: NA
  - DESC: 修复安全热点问题
  -       sm-enhancement-fix-sonarqube.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-06
changelog:
  - Type: update
  - ID: [BUG#369491]
  - SUG: NA
  - DESC: 网卡管控-普通用户修改细粒度网卡策略无失败提示
  -       sm-enhancement-fix-common-user-no-tip.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-07
changelog:
  - Type: update
  - ID: [BUG#369491]
  - SUG: NA
  - DESC: 修改普通用户设置细颗粒度网卡策略失败提示信息
  -       sm-enhancement-update-common-user-tip.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-08
changelog:
  - Type: update
  - ID: [BUG#377853]
  - SUG: NA
  - DESC: 解决sm-authorize取消授权后无法切换strict模式
  -       sm-enhancement-fix-uninstall-sm-switch-strict-failed.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-09
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA 
  - DESC: sm-authorize添加的授权进程，在文件防护、进程防护、内核防护中例外放行
  -       sm-enhancement-add-sm-authorize-sync-exception.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-10
changelog:
  - Type: update
  - ID: [BUG#382501]
  - SUG: NA
  - DESC: 修复remove pvid接口调用失败的问题
  -       sm-enhancement-fix-devctl-perm-when-remove-pvid.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-11
changelog:
  - Type: update
  - ID: [BUG#384403]
  - SUG: NA
  - DESC: 服务开机启动时，调用add_inf_policy add_device_policy add_usb_policy接口失败
  -       sm-enhancement-fix-return-incorrect-value.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-12
changelog:
  - Type: update
  - ID: [BUG#384403]
  - SUG: NA
  - DESC: 修改一处遗漏的返回值处理逻辑
  -       sm-enhancement-optimize-interface-return-value.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-13
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA
  - DESC: 同步桌面Bug#434735修复补丁
  -       sm-enhancement-sync-desktop-bug-434735.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-14
changelog:
  - Type: NA
  - ID: [TASK#589931]
  - SUG: NA
  - DESC: 修复安全热点问题
  -       sm-enhancement-resolve-hotspot-issue.patch


author: xinghe <xinghe2@h-partners.com> - 2.74.3-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: houhongxun <houhongxun@kylinos.cn> - 2.74.3-4.p02
changelog:
  - Type:cves
  - ID:[BUG#347089]
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
         CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911
         CVE-2025-32912 CVE-2025-32913 CVE-2025-32907 CVE-2025-32914


author: houzhiwei <houzhiwei@kylinos.cn> - 2.74.3-4.p03
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969 CVE-2025-46420 CVE-2025-46421
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969 CVE-2025-46420 CVE-2025-46421


author: huayadong <huayadong@kylinos.cn> - 0.4.5.2-1.p01
changelog:
  - Type: cve
  - ID  : [TASK#505555]
  - SUG : NA
  - DESC: Patch01: timezonemap-0.4.5.2-kylin-mg-word-modification.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p30
changelog:
  - Type: bugfix
  - ID  : [BUG#353727]
  - SUG : NA
  - DESC: standard user shouldn't change other users' type、password、groups


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p32
changelog:
  - Type: bugfix
  - ID  : [BUG#346795]
  - SUG : NA
  - DESC: add kui-control-center-4.10.0.0-kylin-fix-display-widget.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p33
changelog:
  - Type: bugfix
  - ID  : [BUG#353362]
  - SUG : NA
  - DESC: add Patch30:ukui-control-center-4.10.0.0-kylin-change-checkUserPwd-rule.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p34
changelog:
  - Type: bugfix
  - ID  : [BUG#346795]
  - SUG : NA
  - DESC: add ukui-control-center-4.10.0.0-kylin-add-copyright-head.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p36
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-control-center-4.10.0.0-kylin-fix-SIGABRT-coredump.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p37
changelog:
  - Type: bugfix
  - ID  : [BUG#370881]
  - SUG : NA
  - DESC: fix opt bind prompt message size and position


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p39
changelog:
  - Type: bugfix
  - ID  : [BUG#381069]
  - SUG : NA
  - DESC: add ukui-control-center-4.10.0.0-add-kylin-mfa-help-info.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p40
changelog:
  - Type: bugfix
  - ID  : [BUG#396007]
  - SUG : NA
  - DESC: add ukui-control-center accountinfo user guide


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p41
changelog:
  - Type: bugfix
  - ID  : [BUG#448987]
  - SUG : NA
  - DESC: add Patch39: ukui-control-center-4.10.0.0-kylin-changeUserPwd-add-QMessageBox-warning.patch
  	changeUserPwd add QMessageBox warning.
          用户修改自身密码结束后添加弹窗，显示pam回显。


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p42
changelog:
  - Type: update
  - ID  : [TASK#553947]
  - SUG : NA
  - DESC: add Patch40: 0001-ukui-control-center-update-license-for-v11-2603.patch
  	update license for v11 2603


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p43
changelog:
  - Type: bugfix
  - ID  : [BUG#468605][TASK#553947]
  - SUG : NA
  - DESC: BUG#468605:get os_version from kylin-system-version.conf
          TASK#553947:update license for v11 2603(Revised)


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p44
changelog:
  - Type: bugfix
  - ID  : [TASK#525485][BUG#471359]
  - SUG : NA
  - DESC: remove ukui-search requires and add theme transparency value


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p45
changelog:
  - Type: update
  - ID  : [TASK#553999]
  - SUG : NA
  - DESC: add Patch44: 0001-ukcc-show-activation-status-dialog-when-click-serial.patch
  	show activation status dialog when click service serial number


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p46
changelog:
  - Type: update
  - ID  : [TASK#554089]
  - SUG : NA
  - DESC: add Patch45: 0001-ukcc-show-customer-when-locally-activated.patch
  	show customer info when system is locally activated


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p47
changelog:
  - Type: bugfix
  - ID  : [BUG#478205]
  - SUG : NA
  - DESC: Add UserName reading when dbus interface RealName is empty.


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p48
changelog:
  - Type: bugfix
  - ID  : [BUG#477075]
  - SUG : NA
  - DESC: support password history account protection feature when change other users' password


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p50
changelog:
  - Type: bugfix
  - ID  : [BUG#481277][BUG#482067]
  - SUG : NA
  - DESC: show register number when system activated
          don't show activate button when system activated on main about page


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p51
changelog:
  - Type: bugfix
  - ID  : [BUG#483057]
  - SUG : NA
  - DESC: fix the check when system activation is expired


author: huayadong<huayadong@kylinos.cn> 4.10.2.12-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch02: ukui-menu-4.10.2.12-kylin-remove-s3-s4-chang-poweroff-reboot.patch


author: peijiankang<peijiankang@kylinos.cn> 4.10.2.12-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#288929]
  - SUG : NA
  - DESC: Patch02: ukui-menu-4.10.2.12-add-root-to-listCachedUsers.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.2.12-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-menu-4.10.2.12-ok0.2k0.9
          upstream commtid:3148deafc141224257df8dd9c5e67a37d8290e3b


author: huayadong <huayadong@kylinos.cn> - 4.10.2.12-1.p05
changelog:
  - Type: update
  - ID  : [TASK#442854]
  - SUG : NA
  - DESC: add patch4:ukui-menu-4.10.2.12-chnage-uninstall-rule.patch


author: xuchenchen <xuchenchen@kylinos.cn> - 4.10.2.12-1.p06
changelog:
  - Type: bugfix
  - ID: [BUG#344202]
  - SUG: NA
  - DESC: add patch5:fix-chinese-translation-problem.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.2.12-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#347730] [BUG#347734]
  - SUG : NA
  - DESC: add ukui-menu-4.10.2.12-add-3adm.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.2.12-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#353097]
  - SUG : NA
  - DESC: add ukui-menu-4.10.2.12-update-3adm-appinfo.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.2.12-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#366591]
  - SUG : NA
  - DESC: add Patch08:ukui-menu-4.10.2.12-kylin-remove-kylin-process-manager.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.2.12-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#429765]
  - SUG : NA
  - DESC: remove argv --help-all
  	add Patch09:ukui-menu-4.10.2.12-kylin-remove-argv-help-all.patch
  	删除无用参数 --help-all


author: peijiankang <peijiankang@kylinos.cn> - 4.10.3.5-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-sidebar-4.10.3.5-ok0.3k0.10
          upstream commtid:9b2175d39a58d36e5c2f7f05bade021dacd7c00a


author: peijiankang <peijiankang@kylinos.cn> - 4.10.3.5-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-sidebar-4.10.3.5-kylin-fix-ukui-sidebar-coredump-SIGABRT-when-logout.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.3.5-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#383661]
  - SUG : NA
  - DESC: add ukui-sidebar-4.10.3.5-kylin-change-kylin-screenshot-args.patch


author: JiaboFeng <fengjiabo1@huawei.com> - 9.10.0-14
changelog:
  - Bugfix: Enhance the capability to trace the shutdown status of large VMS
  - conf: qemu: support provide inject secret for Hygon CSV
  - conf: qemu: add libvirt support reuse id for hygon CSV
  - Automatically unbind all devices' driver under same root port and bind to vfio-pci in the context of CVM.
  - Consistent coding style with opensource.
  - build: Make daemons depend on generated *_protocol.[ch]
  - Add the get tmm memory info API into libvirt-host. Also should add the RPC calls into libvirtd for API calling.
  - Add cvm parameter into the type of LaunchSecurity which is a optional filed for libvirt xml


author: yanjainqing <yanjianqing@kylinos.cn> - 9.10.0-14.p01
changelog:
  - Type: Update
  - ID:   [TASK#425201]
  - SUG:  NA
  - DESC: Backport V11-2409 patch
  -   Support Phytium S5000c
  -   Add a path in DEFAULT_LOADER_NVRAM to solve the issue of not being able to find UEFI firmware in x86 architecture
  -   Support host-model for arm, solve core dump when libvirtd starts on Phytium,solve compile error with modify xml in the test dir
  -   Disconnect libvirt's dependency on rbd and install it when the user needs to support it
  -   Fix the translation problem of libvirtd.policy's prompts
  -   Support MCE error alert and optimization the function that locates VMs affected by MCE errors
  -   Fix CVE-2024-4418
  -   Fix virtual machine save and restore failure issue when CPU model is configured as host model mode


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-14.p02
changelog:
  - Type: Update
  - ID:   [BUG#345770]
  - SUG:  NA
  - DESC: Fix some translation errors of common functions.


author: yanjianqing <yanjianqing@kylinos.cn> - 9.10.0-14.p03
changelog:
  - Type: Bugfix
  - ID: [BUG#347955]
  - SUG: NA
  - DESC: Enable netcf support
  -       Fix several iface-related translation issues


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-14.p05
changelog:
  - Type: cves
  - ID:   CVE-2025-12748 CVE-2025-13193
  - SUG:  NA
  - DESC: Fix CVE-2025-12748 CVE-2025-13193


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 9.10.0-14.p06
changelog:
  - Type: update
  - ID:   [TASK#592121]
  - SUG:  NA
  - DESC: Rebuild for wirshark update from 3.6.14-12.p01 to 4.4.10-3.p01


author: zhangxianjun <zhangxianjun@kylinos.cn> - 1.13.1-2.p01
changelog:
  - Type:update
  - ID:[TASK#425066]
  - SUG:NA
  - DESC: mv /usr/bin/tools/tiny_ssim to /usr/bin/tiny_ssim required by FHS standard


author: yueyaoqiang <yueyaoqiang@kylinos.cn> -20241017-1.p01
changelog:
  - Type:update
  - ID:[Task#424811]
  - SUG:NA
  - DESC:add Corigine network interface card flash-boot-23.10-2.bin


author: zhangtao <zhangtao@kylinos.cn> -20241017-1.p03
changelog:
  - Type: update
  - ID: [Bug#343592]
  - SUG: NA
  - DESC: update 90-nfp-firmware-agilio-sriov-firmware.conf


author: yueyuankun <yueyuankun@kylinos.cn> - 20241017-1.p05
changelog:
  - Type:cves
  - ID:[Task#536541]
  - CVE:CVE-2024-36350 CVE-2024-36357
  - SUG:NA
  - DESC:Fix CVE-2024-36350 CVE-2024-3635


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.20.2-2
changelog:
  - Set TERM to xterm-256color
  - use https://github.com/mate-desktop/mate-terminal/commit/4f89d21
  - fix rhbz https://bugzilla.redhat.com/show_bug.cgi?id=1517870


author: longcheng <longcheng@kylinsec.com.cn> - 1.22.1-5
changelog:
  - KYOS-B: add kylin mask and part of translations
  - KYOS-T: Fix translation errors in help manual.
  - KYOS-B: set text preview content (#24148)
  - KYOS-B: add two color theme and change the default color theme to Dracula Dark (#30872)
  - KYOS-B: select the default charset by locale(#49592)


author: huayadong <huayadong@kylinos.cn> - 1.22.1-5.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#238335]
  - SUG:  NA
  - DESC: Patch1009: mate-terminal-1.22.1-kylin-remove-Reset.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.22.1-5.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#240137]
  - SUG:  NA
  - DESC: Patch1010: mate-terminal-1.22.1-fix-help-display-error.patch


author: Shixiong Ou <oushixiong@kylinos.cn> - 24.0.5-1.p02
changelog:
  - Type:bugfix
  - ID:TASK#378129
  - SUG:NA
  - DESC:add upstream orcjit patch and support loongarch64 orcjit


author: lipengyu <lipengyu@kylinos.cn> - 6.4-10.p01
changelog:
  - Type:update
  - ID:[Task#327352]
  - SUG:NA
  - DESC:ncurses-support-loongarch&&enable relocation for kylin


author: lijian <lijian2@kylinos.cn> - 0.3.0-1
changelog:
  - Type:update
  - ID:[TASK#223312]
  - SUG:NA
  - DESC:Upgrade to 0.3.0
         Support to deploy, extend OS & k8s clusters in VM & PXE for generalos
         Delete housekeeper


author: lijian <lijian2@kylinos.cn> - 0.3.0-1.p01
changelog:
  - Type:bugfix
  - ID:[TASK#223312]
  - SUG:NA
  - DESC:1.Fix incorrect bus type in aarch64, from ide to scsi. IDE is not supported in aarch64.
         2.Adjust the cloud-init service start sequence. Some services are not started.
           After adjustment, the service starts normally.
         3.Add the rpm package storage path to the http service buffer, so that they can be obtained after instance starts.
         4.Fix the bug of resetting existing instances during extension in aarch64.
           Some key configurations have been changed, resulting in OpenTofu rebuilding instances.
         5.Support loongarch64 for generalos.


author: liukuo <liukuo@kylinos.cn> - 0.3.0-1.p02
changelog:
  - Type:update
  - ID:[TASK#331942]
  - SUG:NA
  - DESC:Add go test files.
         Add require packages libxslt and kubernetes-client for nkd.
         Delete housekeeper and upgrade command.
         Modify containerd runtime configuration and copy cni files for nkd.


author: lijian <lijian2@kylinos.cn> - 0.3.0-1.p03
changelog:
  - Type:update
  - ID:[TASK#379139]
  - SUG:NA
  - DESC:Change the dependency package management method from go vendor to go mod.


author: lijian <lijian2@kylinos.cn> - 0.3.0-1.p05
changelog:
  - Type:update
  - ID:[TASK#416005]
  - SUG:NA
  - DESC:Remove OpenStack authentication information from the configuration file template


author: gaihuiying <eaglegai@163.com> - 1:5.9.1-4
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: xingwei <xingwei14@h-partners.com> - 1:5.9.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
  	IF-MIB: pass the network interface index to net
  	IF-MIB: fix a memory leak
  	IF-MIB: fix a recently introduced use after free
  	IF-MIB: add a trailing newline to an error message


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: wangkai <wangkai385@huawei.com> - 4.1.13-17
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: yaoxin <yao_xin001@hoperun.com> - 4.1.114-1
changelog:
  - Update to 4.1.114
    * Validate HTTP Method (#14280)
    * Release AdaptiveByteBuf when ownership could not be transfered. (#14285)
    * Make arenas reuse their last chunk more aggressively (#14291)
    * Only add Magazine to Set if we can ensure its removed again (#14292)
    * Ensure Chunk will not leak if init of AdaptiveByteBuf fails for whatever reason (#14295)
    * Correctly release one-off allocated chunks (#14302)
    * Ensure pooled memory is released when AdaptivePoolingAllocator is GC'ed (#14304)
    * Slices / duplicates of AdaptiveByteBuf must not escape the rootParent (#14310)
    * Fix sizeBucket bug in AdaptivePoolingAllocator (#14311)
    * AdaptiveByteBufAllocator: More strict reference counting for chunks (#14322)
    * Ensure we not store the DnsQueryContext for later removal when we couldnt obtain a query id (#14326)
    * Reduce memory fragmentation (#14333)
    * Properly free magazine chunks and avoid orphaned magazines (#14334)
    * Magazines must be freed under the expand lock (#14336)
    * Release message before failing promise when multiple requests are written while upgrade is in progress. (#14342)
    * Allow to reuse more then one session per host / port mapping (#14356)
    * Ensure writes will not fail when triggered after receiving UpgradeEvent.UPGRADE_SUCCESSFUL (#14362)
    * Refactor DnsNameResolver to be able to use different strategies when it comes to creating Channels for queries. (#14374)
    * DnsNameResolver: allow users to skip bind() during bootstrap (#14375)
    * DnsResolverBuilder methods should make it clear that these are for DatagramChannel (#14379)


author: songliyang <songliyang@kylinos.cn> - 4.1.114-3.p01
changelog:
  - Type: update CVE
  - ID:   [TASK#553251]
  - SUG:  NA
  - DESC: 1.Fix CVE-2025-59419
          2.Fix a build error
          3.Remove unused buildrequires: netty-tcnative


author: songliyang <songliyang@kylinos.cn> - 4.1.114-3.p02
changelog:
  - Type: update
  - ID:   [BUG#468839]
  - SUG:  NA
  - DESC: Update information that CVE-2022-24823 has been fixed while upgrading to 4.1.114


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1:1.24.0-3.p01
changelog:
  - Type: bugfix
  - ID: [BUG#334490]
  - SUG: NA
  - DESC: Modify openEuler to Kylin in index.html,404.html,50x.html


author: songjuntao <songjuntao@kylinos.cn> - 9.6p1-5.p01
changelog:
  - Type:update
  - ID:TASK#424671
  - SUG:NA
  - DESC:update the sshd_config and ssh_config, add the auto control
          mode scripts, add auto generate sm2 hostkey when start sshd service,
          fix ssh-keyscan can't get host pubkey issue


author: songjuntao <songjuntao@kylinos.cn> - 9.6p1-5.p04.se.01
changelog:
  - Type:update
  - ID:TASK#424671
  - SUG:NA
  - DESC:Update to p04 version because of the V11 2409 and V11 2503 pam_ssh_agent_auth version are same of openssh


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p01
changelog:
  - Type: update
  - ID:TASK#424671
  - SUG:NA
  - DESC: add tlcp protocol patch, add tls rfc8998 patch , add zuc algorithm
          patch, add random drbg satisfy the GM/T 0105-2021 implementation,
          add passout and cipher parameter of ecparam apps,
          add Add-support-for-Zhaoxin-SM2-3-4-RNG.patch,
          fix some issues for the base openssl version and
          adapter the kylin old version cert


author: songjuntao <songjuntao@kylinos.cn> - 1:3.0.12-15.p07
changelog:
  - Type:update
  - ID:BUG#384745
  - SUG:NA
  - DESC:remove "-fstack-protector-all" security compile option


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:3.0.12-15.p10
changelog:
  - Type:cves
  - ID:TASk#593863
  - SUG:NA
  - DESC:fix CVE-2025-68160
             CVE-2025-69418
             CVE-2025-69419
             CVE-2025-69420
             CVE-2025-69421
             CVE-2026-22795
             CVE-2026-22796


author: lijian <lijian2@kylinos.cn> - 1.6.2-1.p01
changelog:
  - Type:update
  - ID:[TASK#223312]
  - SUG:NA
  - DESC:Add providers of libvirt, openstack and template 
         support LoongArch64


author: lijian <lijian2@kylinos.cn> - 1.6.2-1.p03
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix file lock type compatibility on sw64 by using write lock only


author: songjuntao <songjuntao@kylinos.cn> - 2.6.9-3.p01
changelog:
  - Type: update
  - ID: TASK#431235
  - SUG: NA
  - DESC: add tls1.3 national algorithm and tlcp protocol support, 
          and remove sample-plugins from devel package because of kylin 
          post package validate error


author: shaojiansong <shaojiansong@kylinos.cn> - 20230518-1.p02
changelog:
  - Type:bugfix
  - ID:[TASK#234560]
  - SUG:NA
  - DESC:Add kylin-11.0.xml and kylin-hostos-11.0.xml for recognization of kylinos-v11 on virtmanager


author: mengchaoming <mengchaoming@kylinos.cn> - 0.80-10.p01
changelog:
  - Type:update	 	
  - ID:[Task#227389]
  - SUG:NA	 		
  - DESC: sync patch
  - add patch: 0001-kylin-add-zh-HK-po.patch
  - 修改zh_HK.po文件的“户”为“戶”: kylin-modify-zh_HK_po.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 0.80-10.p01.se.01
changelog:
  - Type:update
  - ID:[Task#329161]
  - SUG:NA
  - DESC: 加入kysec检查补丁
  - add patch: passwd-0.80-add-security-check.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 0.80-10.p01.se.02
changelog:
  - Type:update
  - ID:[TASK#383361]
  - SUG:NA
  - DESC: passwd去除对libkysec包的依赖,改用dlopen方式
  - add patch: passwd-remove-libkysec-require.patch


author: zhangxingrong <zhangxingrong@uniontech.cn> - 0.11.7-16
changelog:
  - fix logging handlers imports
  - use ruby code instead of system binaries
  - fix running pcsd from git


author: zouzhimin <zouzhimin@kylinos.cn> - 0.11.8-1
changelog:
  - Update package to version 0.11.8
  - Updated pcs-web-ui to 0.1.20
  - Adjust OCF metadata processing to support the latest pacemaker change


author: bixiaoyan <bixiaoyan@kylinos.cn> - 0.11.9-1
changelog:
  - Update package to version 0.11.9
  - Update pcs-web-ui to 0.1.22
  - Using pcs resource delete | remove to delete resources representing remote and guest nodes.


author: wangyu <wangqingsan@huawei.com> - 123-1
changelog:
  - update to 123
    - duktape:prevent wrongful termination of runway thread
    - harden the security features of the systemd service
    - add packit build tool
    - systemd:set User/Group and don't change uid/gid if already set
    - stop installing /usr/share/polkit-1/rules.d as 700/polkitd
    - moving the 50-default.rules file location


author: huayadong <huayadong@kylinos.cn> - 123-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#243579]
  - SUG:  NA
  - DESC: add Patch1:polkit-123-kylin-add-10-shutdown.rules-restrict-reboot-and-shutdown.patch


author: huayadong <huayadong@kylinos.cn> - 123-1.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#260533]
  - SUG:  NA
  - DESC: add Patch2:polkit-123-kylin-fix-prompt-no-chinese.patch


author: tianyunnuan<tianyunnuan@kylinos.cn> - 123-1.p03
changelog:
  - Type:cves
  - ID:CVE-2025-7519
  - SUG:NA
  - DESC: add patch backport-CVE-2025-7519-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch
          add patch polkit-123-kylin-fix-prompt-no-chinese.patch


author: houhongxun <houhongxun@kylinos.cn> - 23.12.0-7.p03
changelog:
  - Type: cves
  - ID:   [Task#549531]
  - SUG:  NA
  - DESC: fix CVE-2025-43718 and CVE-2025-52885
          fix conflicting man documents problem


author: lixiaoyong <lixiaoyong@kylinos.cn> - 15.12-1.p01
changelog:
  - Type: update
  - ID: [BUG#335034]
  - SUG: NA
  - DESC: update to 15.12 (fix CVE-2025-1094) and modify sensitive information


author: wuzhaomin <wuzhaomin@kylinos.cn> - 15.14-1.p01
changelog:
  - Type: cves
  - ID: [TASK#530575]
  - SUG: NA
  - DESC: update to 15.14 (fix CVE-2025-8713 CVE-2025-8714 CVE-2025-8715) and modify sensitive information


author: lilu <lilu@kylinos.cn> - 15.15-1.p01
changelog:
  - Type: cves
  - ID: [TASK#560331]
  - SUG: NA
  - DESC: update to 15.15 (fix CVE-2025-12817 CVE-2025-12818) and modify sensitive information


author: lipengyu <lipengyu@kylinos.cn> - 3.7.1-2.p01
changelog:
  - Type:fix bug
  - ID:[bug#422321]
  - SUG:NA
  - DESC:add require:python3-pillow-tk to fix import ImageTk error


author: gengqihu <gengqihu2@h-partners.com> - 23.3.1-1
changelog:
  - update version to 23.3.1
  - Fix parallel pip cache downloads causing crash (#12364)
  - Upgrade urllib3 to 1.26.17 (#12343)
  - Fix zsh completion script (#12173)
  - Fix #12166
  - Move the setuptools settings into pyproject.toml
  - Use `-r=...` instead of `-r ...` for hg
  - Drop isort and flake8 settings from setup.cfg
  - Follow imports for more vendored dependencies
  - Enable mypy's strict equality checks (#12209)
  - Fixed argument name in docstring
  - Allow truststore to not import on Python 3.9 and earlier
  - Vendor truststore
  - Fix formatting, combine numbers not strings!
  - Remove uses of `utcnow` in non-vendored code (#12006)
  - Fix issues raised in code review
  - move test_download_metadata mock pypi index utilities to conftest.py
  - Use strict optional checking in req_install.py (#11379)
  - Fix 'force' remove file without write permissions
  - Dropped unused attribute
  - Fix Pytest --use-venv init
  - Limit the double download fix to wheels
  - Fix slowness on Python 3.11 when updating an existing large environment.
  - Fix `pip completion --zsh`


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-4032, CVE-2024-0397 and fix xml tree assert error


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.11.6-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:enable profile guided optimizations for some architectures


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-6
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-7
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup


author: Funda Wang <fundawang@yeah.net> - 3.11.6-8
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
    - Quote template strings in venv activation scripts


author: lipengyu <lipengyu@kylinos.cn> - 3.11.6-10.p04
changelog:
  - Type:CVE
  - ID:CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084
  - SUG:NA
  - DESC:fix CVE‑2025‑13836 CVE‑2025‑13837 CVE‑2025‑12084


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:2.81.0-1.p02
changelog:
  - Type: Updaets 
  - ID: TASK#504811
  - SUG: NA
  - DESC: fix the problem that the previous patch was not merged


author: lixiaoyong <lixiaoyong@kylinos.cn> - 0.14.1-1
changelog:
  - Upgrade package to version 0.14.1
    - Drop support for Python older than 3.6
    - Additional ruff/Pyflakes/codespell fixes


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-26
changelog:
  - vdpa-dev: Fix initialisation order to restore VDUSE compatibility
  - tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
  - migration: fix-possible-int-overflow
  - target/m68k: Map FPU exceptions to FPSR register
  - qemu-options: Fix CXL Fixed Memory Window interleave-granularity typo
  - hvf: arm: Fix encodings for ID_AA64PFR1_EL1 and debug System registers
  - hw/intc/arm_gic: Fix handling of NS view of GICC_APR<n>
  - qio: Inherit follow_coroutine_ctx across TLS
  - target/riscv: Fix the element agnostic function problem
  - accel/tcg: Fix typo causing tb->page_addr[1] to not be recorded
  - tcg/loongarch64: Fix tcg_out_movi vs some pcrel pointers
  - migration: Fix file migration with fdset
  - ui/vnc: don't return an empty SASL mechlist to the client
  - target/arm: Fix FJCVTZS vs flush-to-zero
  - hw/ppc/e500: Prefer QOM cast
  - sphinx/qapidoc: Fix to generate doc for explicit, unboxed arguments
  - hw/ppc/e500: Remove unused "irqs" parameter
  - hw/ppc/e500: Add missing device tree properties to i2c controller node
  - hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb()
  - hw/arm/mps2-tz.c: fix RX/TX interrupts order
  - target/i386: csv: Add support to migrate the incoming context for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing context for CSV3 guest
  - target/i386: csv: Add support to migrate the incoming page for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing page for CSV3 guest
  - linux-headers: update kernel headers to include CSV3 migration cmds
  - vfio: Only map shared region for CSV3 virtual machine
  - vga: Force full update for CSV3 guest
  - target/i386: csv: Load initial image to private memory for CSV3 guest
  - target/i386: csv: Do not register/unregister guest secure memory for CSV3 guest
  - target/i386: cpu: Populate CPUID 0x8000_001F when CSV3 is active
  - target/i386: csv: Add command to load vmcb to CSV3 guest memory
  - target/i386: csv: Add command to load data to CSV3 guest memory
  - target/i386: csv: Add command to initialize CSV3 context
  - target/i386: csv: Add CSV3 context
  - next-kbd: convert to use qemu_input_handler_register()
  - qemu/bswap: Undefine CPU_CONVERT() once done
  - exec/memop: Remove unused memop_big_endian() helper
  - hw/nvme: fix handling of over-committed queues
  - 9pfs: fix crash on 'Treaddir' request
  - hw/misc/psp: Pin the hugepage memory specified by mem2 during use for psp
  - hw/misc: support tkm use mem2 memory
  - hw/i386: add mem2 option for qemu
  - kvm: add support for guest physical bits
  - target/i386: add guest-phys-bits cpu property


author: Xianglai Li <lixianglai@loongson.cn> - 11:8.2.0-27
changelog:
  - fix compile error on loongarch
  - hw/loongarch: fix cpu hotplug reset
  - hw/loongarch/boot: Use warn_report when no kernel filename
  - hw/loongarch: clean code
  - hw/loongarch: Add KVM pch msi device support
  - hw/loongarch: Add KVM pch pic device support
  - hw/loongarch: Add KVM extioi device support
  - hw/loongarch: Add KVM IPI device support
  - hw/loongarch/virt: Update the ACPI table for hotplug cpu
  - hw/loongarch/virt: Add basic CPU plug support
  - hw/loongarch/virt: Add CPU topology support
  - accel/kvm/kvm-all: Fixes the missing break in vCPU unpark logic
  - gdbstub: Add helper function to unregister GDB register space
  - physmem: Add helper function to destroy CPU AddressSpace
  - hw/acpi: Update CPUs AML with cpu-(ctrl)dev change
  - hw/acpi: Update ACPI GED framework to support vCPU Hotplug
  - hw/acpi: Move CPU ctrl-dev MMIO region len macro to common header file
  - accel/kvm: Extract common KVM vCPU {creation,parking} code
  - target/loongarch: Add steal time support on migration
  - linux-headers: loongarch: Add kvm_para.h and unistd_64.h
  - target/loongarch/kvm: Implement LoongArch PMU extension
  - target/loongarch: Implement lbt registers save/restore function
  - target/loongarch: Add loongson binary translation feature
  - sync loongarch linux-headers
  - target/loongarch: Avoid bits shift exceeding width of bool type
  - target/loongarch: Use explicit little-endian LD/ST API
  - target/loongarch: fix -Werror=maybe-uninitialized false-positive
  - target/loongarch: Support QMP dump-guest-memory
  - target/loongarch/kvm: Add vCPU reset function
  - target/loongarch: Add compatible support about VM reboot
  - target/loongarch: Fix cpu_reset set wrong CSR_CRMD
  - target/loongarch: Set CSR_PRCFG1 and CSR_PRCFG2 values
  - target/loongarch: Remove avail_64 in trans_srai_w() and simplify it
  - target/loongarch/kvm: Add software breakpoint support
  - target/loongarch: Add loongarch vector property unconditionally
  - target/loongarch/kvm: Fix VM recovery from disk failures
  - target/loongarch: Put cpucfg operation before CSR register
  - target/loongarch: Add TCG macro in structure CPUArchState
  - hw/arm/virt-acpi-build.c: Migrate SPCR creation to common location
  - hw/loongarch/virt: Add FDT table support with acpi ged pm register
  - hw/loongarch/virt: Add description for virt machine type
  - hw/loongarch: Add acpi SPCR table support
  - hw/loongarch: virt: pass random seed to fdt
  - hw/loongarch: virt: support up to 4 serial ports
  - hw/loongarch: Remove default enable with VIRTIO_VGA device
  - hw/loongarch: Fix length for lowram in ACPI SRAT
  - hw/loongarch/virt: Remove unused assignment
  - hw/loongarch: Change the tpm support by default
  - hw/loongarch/boot.c: fix out-of-bound reading
  - hw/loongarch/virt: Use MemTxAttrs interface for misc ops
  - tests/libqos: Add loongarch virt machine node
  - hw/loongarch: Remove minimum and default memory size
  - hw/loongarch: Refine system dram memory region
  - hw/loongarch: Refine fwcfg memory map
  - hw/loongarch: Refine fadt memory table for numa memory
  - hw/loongarch: Refine acpi srat table for numa memory
  - hw/loongarch: Add VM mode in IOCSR feature register in kvm mode
  - hw/loongarch: Refine default numa id calculation
  - hw/loongarch: Rename LoongArchMachineState with LoongArchVirtMachineState
  - hw/loongarch: Rename LOONGARCH_MACHINE with LOONGARCH_VIRT_MACHINE
  - hw/loongarch: move memory map to boot.c
  - loongarch: switch boards to "default y"
  - hw/loongarch: Add cells missing from rtc node
  - hw/loongarch: Add cells missing from uart node
  - hw/loongarch: fdt remove unused irqchip node
  - hw/loongarch: fdt adds pcie irq_map node
  - hw/loongarch: fdt adds pch_msi Controller
  - hw/loongarch: fdt adds pch_pic Controller
  - hw/loongarch: fdt adds Extend I/O Interrupt Controller
  - hw/loongarch: fdt adds cpu interrupt controller node
  - hw/loongarch: Init efi_fdt table
  - hw/loongarch: Init efi_initrd table
  - hw/loongarch: Init efi_boot_memmap table
  - hw/loongarch: Init efi_system_table
  - hw/loongarch: Add init_cmdline
  - hw/loongarch: Add slave cpu boot_code
  - hw/loongarch: Add load initrd
  - hw/loongarch: Move boot functions to boot.c


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-27.p01
changelog:
  - Type: Update
  - ID:   [TASK#425199]
  - SUG:  NA
  - DESC: 
  - Add loongarch defalut machine type in machine map and fix qemu-iotest error
  - enable spice for aarch64
  - add phytium cpu models ft-2000+ ft-S2500 ft-S5000c
  - show virtio nic bandwith as 10Gbps
  - make libvirt support host-model on aarch64
  - Fixed:systemd-detect-virt returns the result qemu, when kvm acceleration is enabled in Loongson architecture.
  - Add support for migration from rhel or openEuler to Kylin
  - Fix acpi hotplug state cause migration failure


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-27.p02
changelog:
  - Type: Update
  - ID:   [TASK#433635]
  - SUG:  NA
  - DESC: Support migration between Phytium different CPU model


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-27.p03
changelog:
  - Type: Bug
  - ID:   [BUG#346607]
  - SUG:  NA
  - DESC: Fix the bug use virtio-gpu can not start vm with error 'egl-headless is not available'.


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-27.p05
changelog:
  - Type: Update
  - ID:   [BUG#346607][BUG#351085]
  - SUG:  NA
  - DESC: fix vm can not use virtio-gpu with error 'egl-headless is not available'


author: lijunwei <lijunwei@kylinos.cn> - 11:8.2.0-27.p06
changelog:
  - Type: Update
  - ID:   [TASK#433654]
  - SUG:  NA
  - DESC: sync virtcca support patch from euler and fix bug


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-27.p07
changelog:
  - Type: Bugfix
  - ID:   [Bug#346647][Bug#346638]
  - SUG:  NA
  - DESC: fix vm shutdown and reboot issues in loongarch


author: yanjianqing <yanjianqing@kylinos.cn> - 11:8.2.0-27.p08
changelog:
  - Type: Bugfix
  - ID:   [Bug#398833]
  - SUB:  NA
  - DESC: resolve file conflicts in compatibility testing


author: lizhanchun <lizhanchun@kylinos.cn> - 11:8.2.0-27.p09
changelog:
  - Type: Bugfix
  - ID:   [Bug#393455]
  - SUB:  NA
  - DESC: hw: Fix bug, multiple default machines caused the qemu-kvm to crash.


author: peijiankang <peijiankang@kylinos.cn> - 0.9.2-1.p01
changelog:
  - Type: compile
  - ID  : [TASK#543769]
  - SUG : NA
  - DESC: fix build error caused by disabling decoration_shadows support in qt5-qtwayland


author: Xu Jin <jinxu@kylinos.cn> - 8.0.2-3.p01
changelog:
  - Type:enhancement
  - ID:TASK#372069
  - SUG:NA
  - DESC:Add loongarch support.Fix build error for Kylin V11.


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: lifeifei <lifeifei@kylinos.cn> 7.2.10-1
changelog:
  - Type:update
  - ID:[Task#494581]
  - SUG:NA
  - DESC:1.Update to 7.2.10: Fix CVE-2025-32023 CVE-2025-48367.


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: weiyuan <weiyuan@kylinos.cn> - 1.1.12-1.p03
changelog:
  - TYpe: update
  - ID: [TASK#371229]
  - SUG: NA
  - DESC: fix the problem that attackers could create files in arbitrary locations on the host filesystem


author: zhangbowei <zhangbowei@kylinos.cn> -1.1.12-1.p04
changelog:
  - Type:cves
  - ID:CVE-2025-31133,CVE-2025-52565,CVE-2025-52881
  - SUG: NA
  - DESC: backport fix cve CVE-2025-31133,CVE-2025-52565,CVE-2025-52881


author: zhangbowei <zhangbowei@kylinos.cn> -1.1.12-1.p05
changelog:
  - Type:cves
  - ID:CVE-2025-31133,CVE-2025-52565,CVE-2025-52881
  - SUG: NA
  - DESC: backport fix cve CVE-2025-31133,CVE-2025-52565,CVE-2025-52881 and fix system property miss handling in p04


author: zhangbowei <zhangbowei@kylinos.cn> - 1.1.12-1.p07
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:resolve secure compilation issues and sync modified to the sw64 arch


author: zhangbowei <zhangbowei@kylinos.cn> - 1.1.12-1.p08
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:inject stack proctector from Go compiler and modify the correct commit info


author: sunjin <sunjin@kylinos.cn> 1.1.0-16
changelog:
  - Type:update
  - ID:[Bug#290827][Bug#290809][Bug#281275][Bug#292899]
  - SUG:NA
  - DESC: 【安全加固】security-reinforce入库
  -   【V11-B14】【安全加固】【还原中】还原中断，安全加固界面异常 [用例#1365655]
  -   【V11-B14】【安全加固】【安全扫描】编辑用户自定义模板，安全中心闪退 [用例#1365641]
  -   【V11 B12】【安全加固】【交互命令】选择模板-扫描/加固/还原测试 加固模板与加固项不匹配 [用例#989419]
  -   【v11-B14】【安全加固】使用扫描项为所有的自定义模板进行扫描加固后，重启系统，安全加固功能不可用


author: sunjin <sunjin@kylinos.cn> 2.0.0-01
changelog:
  - Type:update
  - ID:[Task#436662][Bug#313077]
  - SUG:NA
  - DESC: 安全加固2.0版本，更新基线描述，v11适配空闲时间锁屏加固项
  -   【v11-B18】【安全加固】【资源分配】未安装quota和libcgroup，未扫出检查系统资源使用控制待加固项
  -   修复了一些自测发现的问题，禁用不必要别名需要执行newaliase


author: sunjin <sunjin@kylinos.cn> 2.0.0-02
changelog:
  - Type:update
  - ID:[Bug#347476][Bug#313077][Bug#348346][Bug#348226]
  - SUG:NA
  - DESC:
  -   【v11 2503】【B09】【需求44508】【uid唯一性检验】关闭uid唯一性检验-uid加固项测试，还原报告中用户名称出现了2次的问题
  -   【v11-B18】【安全加固】【资源分配】未安装quota和libcgroup，未扫出检查系统资源使用控制待加固项
  -   【B09】【41499】【V11-2503】【安全加固】【系统安全】防火墙配置在报告中描述错误
  -   【B09】【41499】【V11-2503】【安全加固】【文件权限】限制日志文件权限，描述错误
  -    未开启三员，root或管理员有安全加固的使用权限； 开启三员，仅root有安全加固的使用权限


author: sunjin <sunjin@kylinos.cn> 2.0.0-03
changelog:
  - Type:update
  - ID:[Bug#349061][Bug#349027][Bug#348813][Bug#348462][Bug#347932][Bug#348879]
  - SUG:NA
  - DESC:
  -   【B09】【41785】【V11-2503】【安全加固】【安全服务】用户登录ftp后访问目录权限正确 加固还原后源文件备注的信息被删除
  -   【B09】【41499】【V11-2503】【安全加固】【安全服务】限制FTP用户登录后能访问的目录加固|还原后的报告描述错误
  -   【V11-2503】【B09】【安全加固】【安全服务】设置SSH安全协议还原后将注释项也删除了
  -   【B09】【41499】【V11-2503】【安全加固】【密码强度】加强口令的密码算法报告描述错误
  -   【V11-2503】【B09】【安全加固】【系统维护】限制仅允许系统管理员进入维护模式，实际加固失败
  -   【V11-2503】【B09】【安全加固】【安全服务】禁止root登录VSFTP，扫描不成功
  -    同步修复密码策略里回文检查参数错误
  -    添加security-reinforce-update-20250521.patch


author: sunjin <sunjin@kylinos.cn> 2.0.0-04
changelog:
  - Type:update
  - ID:[Bug#246503]
  - SUG:NA
  - DESC:
  -   【V11-B07】【安全加固】【系统设置】禁用ctrl+alt+del组合键失败
  -    解决安全热点
  -    删除无用代码initSp3ToSp4IdMap
  -    单元测试覆盖率到达70%
  -    添加security-reinforce-update-20250611.patch


author: zhaoyun <zhaoyun@kylinos.cn> 2.0.0-05
changelog:
  - Type:bugfix
  - ID:[Bug#368657]
  - SUG:NA
  - DESC:
  -   【V11-2503】【B15】【需求41499】【安全加固】【交互命令】扫描后不加固，再次扫描加固，导出报告按enter键提示核心已转储


author: sunjin <sunjin@kylinos.cn> 2.0.0-06
changelog:
  - Type:TASK
  - ID:[TASK#553765][TASK#543765]
  - SUG:NA
  - DESC:
  -    子 安全编译参数整改 / security-reinforce安全编译参数整改
  -    V10各版本及V11版本安全加固项ssh强加密算法调整
  -    add security-reinforce-update-20251127.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.14
changelog:
  - Type:update
  - ID:[BUG#352649]
  - SUG:NA
  - DESC: 解决模式切换时自动重启失败的问题
  -		add patch9102: selinux-policy-fix-switch-mode-auto-reboot-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.15
changelog:
  - Type:update
  - ID:[BUG#353491][BUG#353491]
  - SUG:NA
  - DESC: 可惜启动适配三权策略
  -		add patch9103: selinux-policy-add-secadm-perms-for-kydima.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.16
changelog:
  - Type:update
  - ID:[TASK#474973]
  - SUG:NA
  - DESC: 修复升级ukui后 黑屏问题
  -		add patch9104: selinux-policy-fix-login-error-when-update-ukui.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.17
changelog:
  - Type:update
  - ID:[BUG#368341][BUG#365769]
  - SUG:NA
  - DESC: 入侵检测适配selinux,解决root用户能修改/etc/auditd/下的文件
  -		add patch9105: selinux-policy-20250624-fix-some-bugs.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.18
changelog:
  - Type:update
  - ID:[BUG#368353]
  - SUG:NA
  - DESC: 解决入侵检测secadm、auditadm等其他用户无法打开问题
  -		add patch9106: selinux-policy-20250701-fix-kguard-some-bug.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.19
changelog:
  - Type:update
  - ID:[BUG#376643][BUG#376149]
  - SUG:NA
  - DESC: 解决strict模式下root无法插入ko的问题、安全加固偶现无法扫描的问题
  -		add patch9107: selinux-policy-20250704-fix-some-bugs.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.7-4.se.20
changelog:
  - Type:update
  - ID:[BUG#377387]
  - SUG:NA
  - DESC: 解决ukmls策略下 登录界面和注销界面显示乱码问题
  -		add patch9108: selinux-policy-fix-ukmls-login-ui-display-error.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.21
changelog:
  - Type:update
  - ID:[BUG#381787][BUG#381725]
  - SUG:NA
  - DESC: 解决strict模式下 root用户无法通过控制面板修改密码
  -       解决strict模式下 root用户无法通过开始菜单打开防火墙软件
  -		add patch9109: selinux-policy-fix-root-open-firewall-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.22
changelog:
  - Type:update
  - ID:[BUG#382849]
  - SUG:NA
  - DESC: 解决strict模式下 root用户无法通过入侵检测工具无法导出报告问题
  -		add patch9110: selinux-policy-fix-kguard-export-doc-failed.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.23
changelog:
  - Type:update
  - ID:[BUG#385099][BUG#383617]
  - SUG:NA
  - DESC: 解决开启selinux 非root用户打开终端过慢问题
  -       解决strict模式下【文件保护箱】strict模式下已锁定的保护箱写入文件成功
  -       其他: 解决ldap dovecot等开源服务strict模式下无法启动问题
  -		add patch9111: selinux-policy-20250722-fix-some-bugs.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.24
changelog:
  - Type:update
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决targeted下kytrust与tpm dbus通信超时问题
  -		add patch9112: selinux-policy-fix-ktrust_config-dbus-timeout.patch


author: tiandongdong<tiandongdong@kylinos.cn> - 40.8-4.se.25
changelog:
  - Type:update
  - ID:[BUG#431351]
  - SUG:NA
  - DESC: 解决targeted下 passwd 修改密码偶现卡主问题
  -		add patch9113: selinux-policy-20251030-fix-passwd-stuck.patch


author: mengchaoming <mengchaoming@kylinos.cn> - 2:4.14.3-1.p01
changelog:
  - Type:update	 	
  - ID:[Task#227389]
  - SUG:NA	 		
  - DESC: sync patch:支持香港繁体中文	 	 
  - add patch:shadow-4.8.1-add-zh_HK.po.patch
  - add patch:shadow-4.8.1-add-zh_HK_1.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-1.p01.se.01
changelog:
  - Type:update
  - ID:[Task#223910]
  - SUG:NA
  - DESC: 【身份鉴别】支持UID唯一性检查
  - add patch: kylin-shadow-add-user-UID-unique.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-1.p01.se.02
changelog:
  - Type:update
  - ID:[BUG#241779]
  - SUG:NA
  - DESC: 【uid唯一性检验】uid唯一性提示语为英文
  - add patch: kylin-shadow-fix-zh_CN-po-0001.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-5.p02
changelog:
  - Type:update
  - ID:[BUG#345177]
  - SUG:NA
  - DESC: fix the failure to groupadd auditadm or secadm
  - add patch: kylin-shadow-fix-the-failure-to-groupadd-auditadm-or-secadm.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 2:4.14.3-5.p03
changelog:
  - Type:update
  - ID:[Task#501061]
  - SUG:NA
  - DESC: add 3adm check for chpasswd/usermod
  - add patch: shadow-add-3adm-check-support.patch


author: yanglu <yanglu72@h-partners.com> - 7:6.1-2
changelog:
  - Type:cves
  - ID:CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848
  - SUG:NA
  - DESC:fix CVE-2023-5824 CVE-2023-46846 CVE-2023-46847 CVE-2023-46848


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-80.p01
changelog:
  - Type: bugfix
  - ID  : [Task#557721]
  - SUG : NA
  - DESC: Fix telnet crashes on stack overflow due to infinite recursion.


author: misaka00251 <liuxin@iscas.ac.cn> - 9:2021-1
changelog:
  - Upgrade texlive version to 2021
  - The following packages no longer exist: tkz-linknodes, tkz-kiviat
  - tkz-doc-doc


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: tiandongdong <tiandongdong@kylinos.com> - 3.0.0-4.se.01
changelog:
  - Type:bugfix
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决可信启动与tpm通信失败问题
  -       Patch8000: tpm2-abrmd-selinux-fix-tabrmd-communication-with-kytrust-error.patch


author: tiandongdong <tiandongdong@kylinos.com> - 3.0.0-4.se.02
changelog:
  - Type:bugfix
  - ID:[BUG#354362]
  - SUG:NA
  - DESC: 解决tpm dbus服务读写设备文件错误问题
  -       Patch8000: tpm2-abrmd-selinux-fix-tpm-wirte-device-failed.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-biometric-manager-4.10.0.0-ok4.5k0.8
          upstream commtid:8e18226b3133705658be5ad601e75dcd379dd943


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop ukui-biometric-manager-4.10.0.0-ok4.5k0.9
          upstream commtid:00ba5fd950ace33c1e6043cf083b930d9ccc0197


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#347031]
  - SUG : NA
  - DESC: sync openkylin mulfactor authentication fixes


author: huayadong<huayadong@kylinos.cn> - 2.0.2-21.p06
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add Recommends:kylin-installer; delete Recommends:kylin-user-guide


author: huayadong<huayadong@kylinos.cn> - 2.0.2-21.p08
changelog:
  - Type: update
  - ID  : [TASK#422649]
  - SUG : NA
  - DESC: add ukui-server Recommends: kylin-user-guide


author: houhongxun<houhongxun@kylinos.cn> - 2.0.2-21.p09
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: ukui-server now requires kylin-user-guide fcitx5
          fcitx5-chinese-addons, fcitx5-config-qt


author: huayadong<huayadong@kylinos.cn> - 2.0.2-21.p13
changelog:
  - Type: bugfix
  - ID  : [BUG#408731]
  - SUG : NA
  - DESC: change Requires: ukui-wallpapers to Recommends: ukui-wallpapers


author: peijiankang<peijiankangkylinos.cn> - 2.0.2-21.p14
changelog:
  - Type: bugfix
  - ID  : [BUG#422303][BUG#468605]
  - SUG : NA
  - DESC: modify system os_version and update_version information
          revert 2.0.2-21.p13


author: houhongxun<houhongxun@kylinos.cn> 4.10.4.3-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371113]
  - SUG : NA
  - DESC: fix ukui control center icon showing twice problem


author: huayadong<huayadong@kylinos.cn> 4.10.4.3-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch3: ukui-panel-4.10.4.3-kylin-remove-s3-s4-reboot-poweroff.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.4.3-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-panel-4.10.4.3-ok0.1k0.11
          upstream commtid:9f40cceb1001001c1a767ce4335f31edf6f90a07


author: peijiankang<peijiankang@kylinos.cn> - 4.10.4.3-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#370527]
  - SUG : NA
  - DESC: add ukui-panel-4.10.4.3-kylin-update-translations-about-zh-HK.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.4.3-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#370527]
  - SUG : NA
  - DESC: update ukui-panel-4.10.4.3-kylin-update-translations-about-zh-HK.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p14
changelog:
  - Type: bugfix
  - ID  : [BUG#363325][BUG#369099]
  - SUG : NA
  - DESC: add Patch14:ukui-screensaver-4.10.0.0-kylin-remove-black-drawPath.patch
          add Patch15:ukui-screensaver-4.10.0.0-kylin-change-message-rule.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p15
changelog:
  - Type: bugfix
  - ID  : [BUG#369067]
  - SUG : NA
  - DESC: Patch16: ukui-screensaver-4.10.0.0-kylin-remove-AuthDialog-onChangeUser.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p16
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-screensaver-4.10.0.0-fix-ukui-screensaver-backend-coredump-in-vncdesktop.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p17
changelog:
  - Type: bugfix
  - ID  : [BUG#370547]
  - SUG : NA
  - DESC: Patch18:ukui-screensaver-4.10.0.0-kylin-add-org-freedesktop-Accounts-User0-for-root-greeterBackGround.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p18
changelog:
  - Type: bugfix
  - ID  : [BUG#374115]
  - SUG : NA
  - DESC: Patch19:ukui-screensaver-4.10.0.0-kylin-fix-first-installation-have-an-anonymous-user.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p19
changelog:
  - Type: bugfix
  - ID  : [BUG#374115]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-4.10.0.0-kylin-show-m_messageButton.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p20
changelog:
  - Type: bugfix
  - ID  : [BUG#380021]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-4.10.0.0-kylin-avoid-fonts-that-are-too-small.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p21
changelog:
  - Type: bugfix
  - ID  : [BUG#381509]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-4.10.0.0-kylin-fix-lock-time-plus-one.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p22
changelog:
  - Type: bugfix
  - ID  : [TASK#525485]
  - SUG : NA
  - DESC: add ukui-screensaver-4.10.0.0-update-dateformat-api.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p23
changelog:
  - Type: bugfix
  - ID  : [BUG#470589]
  - SUG : NA
  - DESC: add Patch24: ukui-screensaver-4.10.0.0-kylin-fix-prompt-failure-statement-is-incorrect.patch
          修复提示的失败语不正确.


author: houhongxun <houhongxun@kylinos.cn> - 4.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.0.0.0-ok28k0.9


author: huayadong<huayadong@kylinos.cn> - 3.22.0.1.p02
changelog:
  - Type: update
  - ID  : [TASK#492845]
  - SUG : NA
  - DESC: Update ukui-wallpapers default background files


author: huayadong<huayadong@kylinos.cn> - 3.22.0.1.p03
changelog:
  - Type: update
  - ID  : [TASK#522795]
  - SUG : NA
  - DESC: Update ukui-wallpapers default background files


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.10-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-window-switch-4.10.1.9-ok0k0.10
          upstream commtid:34d615c9e963761350aec1ced7c7b8d437c64f68


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.10-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#397703]
  - SUG : NA
  - DESC: add ukui-window-switch-4.10.1.9-fix-alt-tab-shortcut.patch


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p02
changelog:
  - Type:update
  - ID:[BUG#238630][BUG#238129]
  - SUG:NA
  - add Patch0011:usbguard-parse.patch
  - DESC: 238129 【V11 B02】【龙芯】【USBGuard】USB设备及策略管理交互模式界面展示不友好
  - DESC: 238630 【V11 B02】【USBGuard】设备已有拦截策略，再次手动添加放行策略不生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p04
changelog:
  - Type:update
  - ID:[BUG#242968][BUG#245015]
  - SUG:NA
  - add Patch0012: usbguard-config.patch
  - DESC: 242968 【V11-B05】【安全SDK】全部设备管控策略查询-授权提示转储
  - DESC: 245015 【V11-B06】【安全SDK】设备授权取消授权大概率转储，usbguard服务起不来
  - 去除usbguard-selinux包,策略已在selinux-policy统一管理


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p05
changelog:
  - Type:update
  - ID:[BUG#242972]
  - SUG:NA
  - add Patch0013: usbguard-format.patch
  - DESC: 242972 【V11 B05】【USBGuard】导入错误格式策略，提示核心已转储
  - DESC: 243051 【V11 B05】【USBGuard】放行部分USB接口提示核心已转储
  - DESC: 247137 【V11-B07】【USBGuard】USB设备管控事件通知，无状态变更弹窗


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p06
changelog:
  - Type:update
  - ID:[BUG#244443]
  - SUG:NA
  - add Patch0014:     usbguard-restore.patch
  - DESC: 244443 【V11-B06】【USBGuard】关闭设备管控，需要插拔生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p07
changelog:
  - Type:update
  - ID:[BUG#244443]
  - SUG:NA
  - add Patch0015:     usbguard-restore2.patch
  - DESC: 244443 【V11-B06】【USBGuard】关闭设备管控，需要插拔生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p08
changelog:
  - Type:update
  - ID:[BUG#310899]
  - SUG:NA
  - add Patch0016:     usbguard-hub.patch
  - DESC: 306393 【V11-B17】【USBGuard】root hub 1.0和2.0设备设置永久拦截和放行提示核心已转储
  - DESC: 310899 【V11-B18】【USBGuard】在设备策略管理中，修改策略失败，策略被删除


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p09
changelog:
  - Type:update
  - ID:[BUG#247155/347856]
  - SUG:NA
  - add Patch0017: usbguard-import.patch
  - DESC: 247155 【V11-B07】【安全SDK】通过设备信息删除设备管控策略，删除serial名字较长的设备管控策略失败
  - DESC: 347856 [V11 2503][B09][需求41823][USBGuard]管理设备策略-导入放行策略使被拦截U盘放行，导入拦截策略覆盖现有策略后没有及时生效


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p10
changelog:
  - Type:update
  - ID:[任务#479543]
  - SUG:NA
  - add Patch0018: usbguard-idnull.patch
  - DESC: 479543 【V11 2503】修改usbguard默认策略


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p11
changelog:
  - Type:update
  - ID:[BUG#383547]
  - SUG:NA
  - add Patch0019: usbguard-setdev.patch
  - DESC:[出厂测试][v11-2503][B19][需求42057][USBGuard]管理已连接设备,设备状态为拦截,修改为永久拦截,未生成策略


author: zhaoqingyou <zhaoqingyou@kylinos.com> - 1.1.2-1.p12
changelog:
  - Type:update
  - ID:[BUG#391973]
  - SUG:NA
  - add Patch0020: usbguard-hub2.patch
  - DESC: 391973 [同源测试][v11-2503][B20][需求42057]开启usbguard后，bmc的虚拟鼠标和键盘被拦截


author: lijian <lijian01@kylinos.cn> - 2:9.0.2092-15.p01
changelog:
  - Type:update
  - ID:[task#424803]
  - SUG:NA
  - DESC:1) 移植敏感词修改和zh_HK繁体字支持的补丁
  -      2) 移植安全部门修改:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题
  -      3) remove discriminatory language


author: houzhiwei <houzhiwei@kylinos.cn> - 2:9.0.2092-18.p02
changelog:
  - Type:CVE
  - ID:CVE-2025-53905 and CVE-2025-53906
  - SUG:NA
  - DESC:1.fix some tests failed. 2.fix CVE-2025-53905 and CVE-2025-53906


author: xihaochen <xihaochen@huawei.com> - 2.5.0-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update xorg-x11-drv-vesa to 2.5.0


author: yangdacheng <yangdacheng@kylinos.cn> - 21.1.10-1.p01
changelog:
  - Type:compile
  - ID:TASK#378131
  - SUG:NA
  - DESC: Solve Xorg compatibility issues, add pakage:help, remove pakage:Xorg


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p03
changelog:
  - Type:bugfix
  - ID:BUG#347032
  - SUG:NA
  - DESC:Fix memcpy crash when calling shadowUpdatePacked on phytium s5000c.


author: Shixiong Ou <oushixiong@kylinos.cn> - 21.1.10-1.p05
changelog:
  - Type: CVE
  - ID:   [TASK#550943]
  - SUG:  NA
  - DESC: fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


