# changelog

author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-85.0.0.90
changelog:
  - !15705  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - !15704  perf/core: Add RCU read lock protection to perf_iterate_ctx()
  - perf/core: Add RCU read lock protection to perf_iterate_ctx()
  - !15672  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - !15621  misc: fastrpc: Fix copy buffer page size
  - misc: fastrpc: Fix copy buffer page size
  - !15620  s390/ism: add release function for struct device
  - s390/ism: add release function for struct device
  - !15622  Fix UAF in acct(2)
  - acct: block access to kernel internal filesystems
  - acct: perform last write from workqueue
  - !15488  CVE-2025-21816
  - hrtimer: Fix kabi broken of struct hrtimer_cpu_base
  - hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
  - !15706 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.78-6.6.79 LTS Patches
  - kbuild: hdrcheck: fix cross build with clang
  - HID: hid-steam: Fix use-after-free when detaching device
  - Revert "vfio/platform: check the bounds of read/write syscalls"
  - x86/i8253: Disable PIT timer 0 when not in use
  - vsock: Orphan socket after transport release
  - vsock: Keep the binding until socket destruction
  - io_uring/kbuf: reallocate buf lists on upgrade
  - HID: hid-steam: Don't use cancel_delayed_work_sync in IRQ context
  - alpha: replace hardcoded stack offsets with autogenerated ones
  - mm: gup: fix infinite loop within __get_longterm_locked
  - arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented
  - md/md-bitmap: move bitmap_{start, end}write to md upper layer
  - md: add a new callback pers->bitmap_sector()
  - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()
  - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write()
  - selftests: rtnetlink: update netdevsim ipsec output format
  - netdevsim: print human readable IP address
  - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0
  - drm/v3d: Stop active perfmon if it is being destroyed
  - drm/rcar-du: dsi: Fix PHY lock bit check
  - drm/tidss: Clear the interrupt status for interrupts being disabled
  - drm/tidss: Fix issue in irq handling causing irq-flood issue
  - ipv6: mcast: add RCU protection to mld_newpack()
  - ipv6: mcast: extend RCU protection in igmp6_send()
  - ndisc: extend RCU protection in ndisc_send_skb()
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
  - arp: use RCU protection in arp_xmit()
  - neighbour: use RCU protection in __neigh_notify()
  - neighbour: delete redundant judgment statements
  - ndisc: use RCU protection in ndisc_alloc_skb()
  - HID: hid-steam: Move hidraw input (un)registering to work
  - HID: hid-steam: Make sure rumble work is canceled on removal
  - HID: hid-steam: Add Deck IMU support
  - HID: hid-steam: Fix cleanup in probe()
  - HID: hid-steam: remove pointless error message
  - HID: hid-steam: Add gamepad-only mode switched to by holding options
  - HID: hid-steam: Update list of identifiers from SDL
  - HID: hid-steam: Clean up locking
  - HID: hid-steam: Disable watchdog instead of using a heartbeat
  - HID: hid-steam: Avoid overwriting smoothing parameter
  - ipv6: icmp: convert to dev_net_rcu()
  - ipv6: use RCU protection in ip6_default_advmss()
  - flow_dissector: use RCU protection to fetch dev_net()
  - ipv4: icmp: convert to dev_net_rcu()
  - ipv4: use RCU protection in __ip_rt_update_pmtu()
  - net: ipv4: Cache pmtu for all packet paths if multipath enabled
  - ipv4: use RCU protection in inet_select_addr()
  - ipv4: use RCU protection in rt_is_expired()
  - ipv4: use RCU protection in ipv4_default_advmss()
  - net: add dev_net_rcu() helper
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
  - ipv4: add RCU protection to ip4_dst_hoplimit()
  - btrfs: fix hole expansion when writing at an offset beyond EOF
  - mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw()
  - igc: Set buffer type for empty frames in igc_init_empty_frame
  - mmc: mtk-sd: Fix register settings for hs400(es) mode
  - arm64: Handle .ARM.attributes section in linker scripts
  - regmap-irq: Add missing kfree()
  - regulator: qcom_smd: Add l2, l5 sub-node to mp5496 regulator
  - partitions: mac: fix handling of bogus partition table
  - gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock
  - gpiolib: acpi: Add a quirk for Acer Nitro ANV14
  - alpha: align stack for page fault and user unaligned trap handlers
  - serial: 8250: Fix fifo underflow on flush
  - efi: Avoid cold plugged memory for placing the kernel
  - kbuild: userprogs: fix bitsize and target detection on clang
  - wifi: ath12k: fix handling of 6 GHz rules
  - alpha: make stack 16-byte aligned (most cases)
  - can: etas_es58x: fix potential NULL pointer dereference on udev->serial
  - can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero
  - can: c_can: fix unbalanced runtime PM disable in error path
  - can: ctucanfd: handle skb allocation failure
  - USB: serial: option: drop MeiG Smart defines
  - USB: serial: option: fix Telit Cinterion FN990A name
  - USB: serial: option: add Telit Cinterion FN990B compositions
  - USB: serial: option: add MeiG Smart SLM828
  - usb: cdc-acm: Fix handling of oversized fragments
  - USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
  - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
  - USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
  - USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
  - usb: core: fix pipe creation for get_bMaxPacketSize0
  - USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
  - usb: dwc2: gadget: remove of_node reference upon udc_stop
  - usb: gadget: udc: renesas_usb3: Fix compiler warning
  - usb: roles: set switch registered flag early on
  - usb: dwc3: Fix timeout issue during controller enter/exit from halt state
  - usb: gadget: f_midi: Fixing wMaxPacketSize exceeded issue during MIDI bind retries
  - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting
  - KVM: nSVM: Enter guest mode before initializing nested NPT MMU
  - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
  - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
  - batman-adv: Drop unmanaged ELP metric worker
  - batman-adv: Ignore neighbor throughput metrics in error case
  - batman-adv: fix panic during interface removal
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
  - ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V
  - selftests: gpio: gpio-sim: Fix missing chip disablements
  - Grab mm lock before grabbing pt lock
  - vfio/pci: Enable iowrite64 and ioread64 for vfio pci
  - rtla/timerlat_top: Abort event processing on second signal
  - rtla/timerlat_hist: Abort event processing on second signal
  - scsi: ufs: bsg: Set bsg_queue to NULL after removal
  - PCI: switchtec: Add Microchip PCI100X device IDs
  - PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P
  - media: uvcvideo: Add Kurokesu C1 PRO camera
  - media: uvcvideo: Add new quirk definition for the Sonix Technology Co. 292a camera
  - media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
  - media: i2c: ds90ub953: Add error handling for i2c reads/writes
  - media: i2c: ds90ub913: Add error handling to ub913_hw_init()
  - media: cxd2841er: fix 64-bit division on gcc-9
  - soc/tegra: fuse: Update Tegra234 nvmem keepout list
  - fbdev: omap: use threaded IRQ for LCD DMA
  - RDMA/efa: Reset device on probe failure
  - tools: fix annoying "mkdir -p ..." logs when building tools in parallel
  - x86/xen: allow larger contiguous memory regions in PV guests
  - xen/swiotlb: relax alignment requirements
  - drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - gpio: bcm-kona: Add missing newline to dev_err format string
  - gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ
  - gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
  - drm/i915/selftests: avoid using uninitialized context
  - cgroup: Remove steal time from usage_usec
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  - team: better TEAM_OPTION_TYPE_STRING validation
  - LoongArch: Fix idle VS timer enqueue
  - vxlan: check vxlan_vnigroup_init() return value
  - vrf: use RCU protection in l3mdev_l3_out()
  - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
  - ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
  - spi: sn-f-ospi: Fix division by zero
  - HID: multitouch: Add NULL check in mt_input_configured
  - pinctrl: cy8c95x0: Respect IRQ trigger settings from firmware
  - !14287 [OLK-6.6] SCSI: Support Linkdata HBA/RAID Controllers
  - SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
  - !15686 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.76-6.6.78 LTS Patches
  - char: misc: deallocate static minor in error path
  - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA
  - ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15
  - ALSA: hda/realtek: Add quirks for ASUS ROG 2023 models
  - ALSA: hda/realtek: Fix microphone regression on ASUS N705UD
  - Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
  - Revert "rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads"
  - Revert "rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads"
  - Revert "KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()"
  - Revert "KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock"
  - Revert "KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults"
  - Revert "KVM: e500: always restore irqs"
  - KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
  - KVM: x86: Make x2APIC ID 100% readonly
  - tty: xilinx_uartps: split sysrq handling
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  - mptcp: prevent excessive coalescing on receive
  - btrfs: avoid monopolizing a core when activating a swap file
  - Revert "btrfs: avoid monopolizing a core when activating a swap file"
  - ocfs2: check dir i_size in ocfs2_find_entry
  - net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling
  - spi: atmel-qspi: Memory barriers after memory-mapped I/O
  - spi: atmel-quadspi: Create `atmel_qspi_ops` to support newer SoC families
  - MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static
  - rtc: zynqmp: Fix optional clock name property
  - pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails
  - rtla/timerlat_top: Stop timerlat tracer on signal
  - rtla/timerlat_hist: Stop timerlat tracer on signal
  - rtla: Add trace_instance_stop
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
  - rtla/osnoise: Distinguish missing workload option
  - scripts/gdb: fix aarch64 userspace detection in get_current_task
  - maple_tree: simplify split calculation
  - net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset
  - net/ncsi: wait for the last response to Deselect Package before configuring channel
  - misc: fastrpc: Fix copy buffer page size
  - misc: fastrpc: Fix registered buffer page address
  - misc: fastrpc: Deregister device nodes properly in error scenarios
  - misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors
  - mtd: onenand: Fix uninitialized retlen in do_otp_read()
  - irqchip/apple-aic: Only handle PMC interrupt as FIQ when configured so
  - i3c: master: Fix missing 'ret' assignment in set_speed()
  - NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - mailbox: tegra-hsp: Clear mailbox before using message
  - ocfs2: fix incorrect CPU endianness conversion causing mount failure
  - pnfs/flexfiles: retry getting layout segment for reads
  - selftests: mptcp: connect: -f: no reconnect
  - vfio/platform: check the bounds of read/write syscalls
  - io_uring/rw: commit provided buffer state on async
  - io_uring: fix io_req_prep_async with provided buffers
  - io_uring/net: don't retry connect operation on EPOLLERR
  - io_uring: fix multishots with selected buffers
  - nvmem: imx-ocotp-ele: set word length to 1
  - nvmem: imx-ocotp-ele: fix reading from non zero offset
  - nvmem: imx-ocotp-ele: simplify read beyond device check
  - nvmem: core: improve range check for nvmem_cell_write()
  - nvmem: qcom-spmi-sdam: Set size in struct nvmem_config
  - crypto: qce - unregister previously registered algos in error path
  - crypto: qce - fix goto jump in error path
  - media: uvcvideo: Remove redundant NULL assignment
  - media: uvcvideo: Support partial control reads
  - media: uvcvideo: Fix event flags in uvc_ctrl_send_events
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - media: i2c: ds90ub960: Fix logging SP & EQ status only for UB9702
  - media: i2c: ds90ub960: Fix UB9702 VC map
  - media: i2c: ds90ub960: Fix use of non-existing registers on UB9702
  - media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()
  - media: ccs: Fix cleanup order in ccs_probe()
  - media: ccs: Fix CCS static data parsing for large block sizes
  - media: ov5640: fix get_light_freq on auto
  - media: imx296: Add standby delay during probe
  - media: mc: fix endpoint iteration
  - media: mmp: Bring back registration of the device
  - soc: qcom: smem_state: fix missing of_node_put in error path
  - soc: mediatek: mtk-devapc: Fix leaking IO map on error paths
  - iio: light: as73211: fix channel handling in only-color triggered buffer
  - media: ccs: Clean up parsed CCS static data on parse failure
  - kfence: skip __GFP_THISNODE allocations on NUMA systems
  - rv: Reset per-task monitors also for idle tasks
  - tpm: Change to kvalloc() in eventlog/acpi.c
  - ACPI: PRM: Remove unnecessary strict handler address checks
  - xfs: Add error handling for xfs_reflink_cancel_cow_range
  - xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end
  - pwm: microchip-core: fix incorrect comparison with max period
  - arm64: tegra: Disable Tegra234 sce-fabric node
  - arm64: tegra: Fix typo in Tegra234 dce-fabric compatible
  - crypto: qce - fix priority to be less than ARMv8 CE
  - arm64: dts: qcom: sm8550: correct MDSS interconnects
  - arm64: dts: qcom: sm8550: Fix MPSS memory length
  - arm64: dts: qcom: sm8550: Fix CDSP memory length
  - arm64: dts: qcom: sm8450: Fix MPSS memory length
  - arm64: dts: qcom: sm8450: Fix CDSP memory length
  - arm64: dts: qcom: sm8350: Fix MPSS memory length
  - arm64: dts: qcom: sm8350: Fix CDSP memory base and length
  - arm64: dts: qcom: sm8350: Fix ADSP memory base and length
  - arm64: dts: qcom: sm6375: Fix MPSS memory base and length
  - arm64: dts: qcom: sm6375: Fix CDSP memory base and length
  - arm64: dts: qcom: sm6375: Fix ADSP memory length
  - arm64: dts: qcom: sm6350: Fix uart1 interconnect path
  - arm64: dts: qcom: sm6350: Fix MPSS memory length
  - arm64: dts: qcom: sm6350: Fix ADSP memory length
  - arm64: dts: qcom: sm6115: Fix ADSP memory base and length
  - arm64: dts: qcom: sm6115: Fix CDSP memory length
  - arm64: dts: qcom: sm6115: Fix MPSS memory length
  - ARM: dts: ti/omap: gta04: fix pm issues caused by spi module
  - ARM: dts: dra7: Add bus_dma_limit for l4 cfg bus
  - ubi: Add a check for ubi_num
  - x86/boot: Use '-std=gnu11' to fix build with GCC 15
  - rust: init: use explicit ABI to clean warning in future compilers
  - kbuild: Move -Wenum-enum-conversion to W=2
  - scsi: storvsc: Set correct data length for sending SCSI command without payload
  - scsi: ufs: qcom: Fix crypto key eviction
  - scsi: qla2xxx: Move FCE Trace buffer allocation to user control
  - scsi: st: Don't set pos_unknown just after device recognition
  - nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk
  - nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk
  - PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf()
  - PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1
  - arm64: tegra: Fix Tegra234 PCIe interrupt-map
  - ALSA: hda: Fix headset detection failure due to unstable sort
  - ALSA: hda/realtek: Enable headset mic on Positivo C6400
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
  - block: don't revert iter for -EIOCBQUEUED
  - mips/math-emu: fix emulation of the prefx instruction
  - dm-crypt: track tag_offset in convert_context
  - dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit()
  - powerpc/pseries/eeh: Fix get PE state translation
  - LoongArch: Extend the maximum number of watchpoints
  - MIPS: Loongson64: remove ROM Size unit in boardinfo
  - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use
  - serial: sh-sci: Drop __initdata macro for port_cfg
  - soc: qcom: socinfo: Avoid out of bounds read of serial number
  - ASoC: acp: Support microphone from Lenovo Go S
  - usbnet: ipheth: document scope of NCM implementation
  - usbnet: ipheth: fix DPE OoB read
  - usbnet: ipheth: break up NCM header size computation
  - usbnet: ipheth: refactor NCM datagram loop
  - usbnet: ipheth: check that DPE points past NCM header
  - usbnet: ipheth: use static NDP16 location in URB
  - usb: gadget: f_tcm: Don't prepare BOT write request twice
  - usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint
  - usb: gadget: f_tcm: Decrement command ref count on cleanup
  - usb: gadget: f_tcm: Translate error to sense
  - wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916
  - wifi: rtw88: sdio: Fix disconnection after beacon loss
  - wifi: mt76: mt7921u: Add VID/PID for TP-Link TXE50UH
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
  - wifi: rtlwifi: rtl8821ae: Fix media status report
  - HID: hid-sensor-hub: don't use stale platform-data on remove
  - of: reserved-memory: Fix using wrong number of cells to get property 'alignment'
  - of: Fix of_find_node_opts_by_path() handling of alias+path+options
  - of: Correct child specifier used as input of the 2nd nexus node
  - scsi: ufs: core: Fix the HIGH/LOW_TEMP Bit Definitions
  - perf bench: Fix undefined behavior in cmpworker()
  - efi: libstub: Use '-std=gnu11' to fix build with GCC 15
  - clk: mediatek: mt2701-mm: add missing dummy clk
  - clk: mediatek: mt2701-img: add missing dummy clk
  - clk: mediatek: mt2701-bdp: add missing dummy clk
  - clk: mediatek: mt2701-aud: fix conversion to mtk_clk_simple_probe
  - clk: mediatek: mt2701-vdec: fix conversion to mtk_clk_simple_probe
  - clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate
  - clk: qcom: gcc-mdm9607: Fix cmd_rcgr offset for blsp1_uart6 rcg
  - clk: qcom: gcc-sm6350: Add missing parent_map for two clocks
  - clk: qcom: gcc-sm8550: Do not turn off PCIe GDSCs during gdsc_disable()
  - clk: qcom: clk-alpha-pll: fix alpha mode configuration
  - media: i2c: ds90ub960: Fix UB9702 refclk register access
  - clk: sunxi-ng: a100: enable MMC clock reparenting
  - Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
  - drm/i915: Drop 64bpp YUV formats from ICL+ SDR planes
  - drm/komeda: Add check for komeda_get_layer_fourcc_list()
  - drm/i915: Fix page cleanup on DMA remap failure
  - drm/i915/guc: Debug print LRC state entries only if the context is pinned
  - Revert "drm/amd/display: Use HW lock mgr for PSR1"
  - drm/amdkfd: only flush the validate MES contex
  - drm/amd/pm: Mark MM activity as unsupported
  - ksmbd: fix integer overflows on 32 bit systems
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
  - arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma
  - drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event()
  - KVM: arm64: timer: Always evaluate the need for a soft timer
  - fs/proc: do_task_stat: Fix ESP not readable during coredump
  - m68k: vga: Fix I/O defines
  - s390/futex: Fix FUTEX_OP_ANDN implementation
  - smb: client: change lease epoch type from unsigned int to __u16
  - smb: client: fix order of arguments of tracepoints
  - drm/modeset: Handle tiled displays in pan_display_atomic.
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx
  - leds: lp8860: Write full EEPROM, not only half of it
  - cpufreq: s3c64xx: Fix compilation warning
  - rxrpc: Fix call state set to not include the SERVER_SECURING state
  - net: sched: Fix truncation of offloaded action statistics
  - tun: revert fix group permission check
  - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
  - ACPI: property: Fix return value for nval == 0 in acpi_data_prop_read()
  - x86/xen: add FRAME_END to xen_hypercall_hvm()
  - x86/xen: fix xen_hypercall_hvm() to not clobber %rbx
  - net: rose: lock the socket in rose_bind()
  - net: atlantic: fix warning during hot unplug
  - gpio: pca953x: Improve interrupt support
  - rxrpc: Fix the rxrpc_connection attend queue handling
  - udp: gso: do not drop small packets when PMTU reduces
  - tg3: Disable tg3 PCIe AER on system reboot
  - vmxnet3: Fix tx queue race condition with XDP
  - ice: Add check for devm_kzalloc()
  - net: bcmgenet: Correct overlaying of PHY and MAC Wake-on-LAN
  - nvme-fc: use ctrl state getter
  - ice: put Rx buffers after being done with current frame
  - gpu: drm_dp_cec: fix broken CEC adapter properties check
  - firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry
  - net/ncsi: fix locking in Get MAC Address handling
  - net/ncsi: Add NC-SI 1.2 Get MC MAC Address command
  - KVM: e500: always restore irqs
  - KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults
  - KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock
  - KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()
  - platform/x86: acer-wmi: Ignore AC events
  - Input: allocate keycode for phone linking
  - ASoC: amd: Add ACPI dependency to fix build error
  - ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
  - platform/x86: int3472: Check for adev == NULL
  - iommu/arm-smmu-v3: Clean up more on probe failure
  - iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible
  - x86/kexec: Allocate PGD for x86_64 transition page tables separately
  - selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack()
  - tipc: re-order conditions in tipc_crypto_key_rcv()
  - mmc: sdhci-msm: Correctly set the load for the regulator
  - net: wwan: iosm: Fix hibernation by re-binding the driver around it
  - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
  - APEI: GHES: Have GHES honor the panic= setting
  - i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz
  - wifi: iwlwifi: avoid memory leak
  - net/mlx5: use do_aux_work for PHC overflow checks
  - HID: Wacom: Add PCI Wacom device support
  - clk: qcom: Make GCC_8150 depend on QCOM_GDSC
  - mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id
  - tomoyo: don't emit warning in tomoyo_write_control()
  - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
  - mmc: core: Respect quirk_max_rate for non-UHS SDIO card
  - tun: fix group permission check
  - wifi: rtw89: add crystal_cap check to avoid setting as overflow value
  - safesetid: check size of policy writes
  - drm/bridge: it6505: fix HDCP CTS KSV list wait timer
  - drm/bridge: it6505: fix HDCP CTS compare V matching
  - drm/bridge: it6505: fix HDCP encryption when R0 ready
  - drm/bridge: it6505: fix HDCP Bstatus check
  - drm/bridge: it6505: Change definition MAX_HDCP_DOWN_STREAM_COUNT
  - drm/amd/display: Fix Mode Cutoff in DSC Passthrough to DP2.1 Monitor
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
  - drm/virtio: New fence for every plane update
  - x86/amd_nb: Restrict init function to AMD-based systems
  - lockdep: Fix upper limit for LOCKDEP_*_BITS configs
  - sched: Don't try to catch up excess steal time.
  - btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling
  - btrfs: fix data race when accessing the inode's disk_i_size at btrfs_drop_extents()
  - s390/stackleak: Use exrl instead of ex in __stackleak_poison()
  - arm64/mm: Ensure adequate HUGE_MAX_HSTATE
  - btrfs: fix use-after-free when attempting to join an aborted transaction
  - btrfs: fix assertion failure when splitting ordered extent after transaction abort
  - Revert "hostfs: convert hostfs to use the new mount API"
  - Revert "hostfs: fix string handling in __dentry_name()"
  - Revert "hostfs: Add const qualifier to host_root in hostfs_fill_super()"
  - Revert "hostfs: fix the host directory parse when mounting."
  - !15645  nilfs2: do not force clear folio if buffer is referenced
  - nilfs2: do not force clear folio if buffer is referenced
  - !15660 v2  add support DVMBM in HIP12
  - KVM: arm64: Add new HiSi CPU type to support DVMBM
  - kvm: hisi_virt: Update TLBI broadcast feature for hip12
  - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE
  - !15593  io_uring: prevent opcode speculation
  - io_uring: prevent opcode speculation
  - !15644  ata: libata-sff: Ensure that we cannot write outside the allocated buffer
  - ata: libata-sff: Ensure that we cannot write outside the allocated buffer
  - !15581  smb: client: Add check for next_buffer in receive_encrypted_standard()
  - smb: client: Add check for next_buffer in receive_encrypted_standard()


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-85.0.0.91
changelog:
  - RISC-V kernel upgrade to 6.6.0-85.0.0
  - Add spacemit k1 support, include pinctrl, gpio, clk, reset, uart, dts-bindings and dts
  - KVM AIA: Enable HW_ACCL
  - RISC-V: Remove unnecessary include from compat.h


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-86.0.0.92
changelog:
  - !15783 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.80-6.6.81 LTS Patches
  - firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success
  - scsi: ufs: core: Cancel RTC work during ufshcd_remove()
  - scsi: ufs: core: Start the RTC update work later
  - scsi: ufs: core: Fix another deadlock during RTC update
  - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive
  - scsi: ufs: core: Fix deadlock during RTC update
  - x86/microcode/intel: Remove unnecessary cache writeback and invalidation
  - arm64: dts: rockchip: Disable DMA for uart5 on px30-ringneck
  - intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly
  - gve: set xdp redirect target only when it is available
  - amdgpu/pm/legacy: fix suspend/resume issues
  - riscv: signal: fix signal frame size
  - riscv/futex: sign extend compare value in atomic cmpxchg
  - rseq/selftests: Fix riscv rseq_offset_deref_addv inline asm
  - sched/core: Prevent rescheduling when interrupts are disabled
  - rcuref: Plug slowpath race in rcuref_put()
  - vmlinux.lds: Ensure that const vars with relocations are mapped R/O
  - mptcp: reset when MPTCP opts are dropped after join
  - mptcp: always handle address removal under msk socket lock
  - phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE
  - net: enetc: fix the off-by-one issue in enetc_map_tx_tso_buffs()
  - net: enetc: correct the xdp_tx statistics
  - net: enetc: update UDP checksum when updating originTimestamp field
  - net: enetc: keep track of correct Tx BD count in enetc_map_tx_tso_buffs()
  - net: enetc: fix the off-by-one issue in enetc_map_tx_buffs()
  - usbnet: gl620a: fix endpoint checking in genelink_bind()
  - i2c: npcm: disable interrupt enable bit before devm_request_irq
  - drm/amd/display: Fix HPD after gpu reset
  - drm/amd/display: Disable PSR-SU on eDP panels
  - perf/core: Fix low freq setting via IOC_PERIOD
  - perf/x86: Fix low freqency setting issue
  - ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2
  - riscv: KVM: Fix SBI TIME error generation
  - riscv: KVM: Fix SBI IPI error generation
  - riscv: KVM: Fix hart suspend status check
  - RISCV: KVM: Introduce mp_state_lock to avoid lock inversion
  - phy: rockchip: naneng-combphy: compatible reset with old DT
  - x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems
  - io_uring/net: save msg_control for compat
  - net: ti: icss-iep: Reject perout generation request
  - net: ti: icss-iep: Remove spinlock-based synchronization
  - include: net: add static inline dst_dev_overhead() to dst.h
  - net/mlx5: IRQ, Fix null string in debug print
  - net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination.
  - net: Clear old fragment checksum value in napi_reuse_skb
  - ice: Fix deinitializing VF in error path
  - ice: add E830 HW VF mailbox message limit support
  - ice: Add E830 device IDs, MAC type and registers
  - firmware: cs_dsp: Remove async regmap writes
  - ipvs: Always clear ipvs_property flag in skb_scrub_packet()
  - ASoC: es8328: fix route from DAC to output
  - net: set the minimum for net_hotdata.netdev_budget_usecs
  - net: loopback: Avoid sending IP packets without an Ethernet header
  - afs: Fix the server_list to unuse a displaced server rather than putting it
  - afs: Make it possible to find the volumes that are using a server
  - rxrpc: rxperf: Fix missing decoding of terminal magic cookie
  - Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response
  - ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports
  - sunrpc: suppress warnings for unused procfs functions
  - RDMA/mlx5: Fix bind QP error cleanup flow
  - scsi: core: Clear driver private data when retrying request
  - SUNRPC: Handle -ETIMEDOUT return from tlshd
  - SUNRPC: Prevent looping due to rpc_signal_task() races
  - SUNRPC: convert RPC_TASK_* constants to enum
  - scsi: ufs: core: Fix ufshcd_is_ufs_dev_busy() and ufshcd_eh_timed_out()
  - scsi: ufs: core: Prepare to introduce a new clock_gating lock
  - scsi: ufs: core: Introduce ufshcd_has_pending_tasks()
  - scsi: ufs: core: Add UFS RTC support
  - scsi: ufs: core: Add ufshcd_is_ufs_dev_busy()
  - RDMA/mana_ib: Allocate PAGE aligned doorbell index
  - IB/mlx5: Set and get correct qp_num for a DCT QP
  - !15650 PCI/DPC: Ignore Surprise Down error on hot removal
  - PCI/DPC: Ignore Surprise Down error on hot removal
  - !15813  fix CVE-2025-21883
  - ice: Fix deinitializing VF in error path
  - ice: add E830 HW VF mailbox message limit support
  - ice: Add E830 device IDs, MAC type and registers
  - !15800  proc: fix UAF in proc_get_inode()
  - proc: fix UAF in proc_get_inode()
  - !15799  ksmbd: fix incorrect validation for num_aces field of smb_acl
  - ksmbd: fix incorrect validation for num_aces field of smb_acl
  - !15798  ksmbd: fix out-of-bounds in parse_sec_desc()
  - ksmbd: fix out-of-bounds in parse_sec_desc()
  - !15749  CVE-2025-21963 && CVE-2025-21964
  - cifs: Fix integer overflow while processing acdirmax mount option
  - cifs: Fix integer overflow while processing acregmax mount option
  - !15680  scsi: ufs: core: Fix use-after free in init error and remove paths
  - scsi: ufs: core: Fix use-after free in init error and remove paths
  - !15681  kernel: be more careful about dup_mmap() failures and uprobe registering
  - kernel: be more careful about dup_mmap() failures and uprobe registering
  - !15772  tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
  - tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
  - !15789  slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - !15788  wifi: cfg80211: regulatory: improve invalid hints checking
  - wifi: cfg80211: regulatory: improve invalid hints checking
  - !15787  i2c: npcm: disable interrupt enable bit before devm_request_irq
  - i2c: npcm: disable interrupt enable bit before devm_request_irq
  - !15786  ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
  - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
  - ASoC: SOF: topology: Parse DAI type token for dspless mode
  - ASoC: SOF: topology: dynamically allocate and store DAI widget->private
  - !15807  RDMA/mlx5: Fix a WARN during dereg_mr for DM type
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type
  - !15338  partitions: mac: fix handling of bogus partition table
  - partitions: mac: fix handling of bogus partition table
  - !15771  bpf: Add tracepoints with null-able arguments
  - bpf: Add tracepoints with null-able arguments
  - !15775 v2  CVE-2024-57857
  - RDMA/siw: Remove direct link to net_device
  - RDMA: Export ib_device_get_netdev()
  - !15790  fix CVE-2025-21976
  - fbdev: hyperv_fb: Allow graceful removal of framebuffer
  - fbdev: hyperv_fb: Simplify hvfb_putmem
  - fbdev: Introduce devm_register_framebuffer()
  - !15785 v2  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - !15757  Fix kmemleak false positive
  - efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
  - !15396  fix CVE-2024-57999
  - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
  - !15762  scsi: ufs: core: bsg: Fix crash when arpmb command fails
  - scsi: ufs: core: bsg: Fix crash when arpmb command fails
  - !15410  CVE-2025-21715
  - net: davicom: fix UAF in dm9000_drv_remove
  - !15408  CVE-2025-21744
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
  - !15729 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.79-6.6.80 LTS Patches
  - mtd: rawnand: cadence: fix unchecked dereference
  - ibmvnic: Inspect header requirements before using scrq direct
  - ibmvnic: Perform tx CSO during send scrq direct
  - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit
  - nilfs2: handle errors that nilfs_prepare_chunk() may return
  - nilfs2: eliminate staggered calls to kunmap in nilfs_rename
  - nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link
  - arm64: dts: rockchip: change eth phy mode to rgmii-id for orangepi r1 plus lts
  - md: Fix md_seq_ops() regressions
  - ftrace: Do not add duplicate entries in subops manager ops
  - ftrace: Correct preemption accounting for function tracing.
  - EDAC/qcom: Correct interrupt enable register configuration
  - mtd: rawnand: cadence: fix incorrect device in dma_unmap_single
  - mtd: rawnand: cadence: use dma_map_resource for sdma address
  - mtd: rawnand: cadence: fix error code in cadence_nand_init()
  - mm,madvise,hugetlb: check for 0-length range after end address adjustment
  - ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close
  - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
  - ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls()
  - ASoC: fsl_micfil: Enable default case in micfil_set_quality()
  - ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
  - lib/iov_iter: fix import_iovec_ubuf iovec management
  - soc: loongson: loongson2_guts: Add check for devm_kstrdup()
  - drop_monitor: fix incorrect initialization order
  - tee: optee: Fix supplicant wait loop
  - drm/i915/dp: Fix error handling during 128b/132b link training
  - drm/i915: Make sure all planes in use by the joiner have their crtc included
  - drm/msm/dpu: Disable dither in phys encoder cleanup
  - arm64: dts: mediatek: mt8183: Disable DSI display output by default
  - drm/nouveau/pmu: Fix gp10b firmware guard
  - bpf: skip non exist keys in generic_map_lookup_batch
  - nvme/ioctl: add missing space in err message
  - drm/msm: Avoid rounding up to one jiffy
  - nouveau/svm: fix missing folio unlock + put after make_device_exclusive_range()
  - power: supply: da9150-fg: fix potential overflow
  - bpf: Fix deadlock when freeing cgroup storage
  - bpf: Disable non stream socket for strparser
  - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
  - drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
  - drm/msm/gem: Demote userspace errors to DRM_UT_DRIVER
  - drm/tidss: Fix race condition while handling interrupt registers
  - drm/tidss: Add simple K2G manual reset
  - net: axienet: Set mac_managed_pm
  - arp: switch to dev_getbyhwaddr() in arp_req_set_public()
  - net: Add non-RCU dev_getbyhwaddr() helper
  - flow_dissector: Fix port range key handling in BPF conversion
  - flow_dissector: Fix handling of mixed port and port-range keys
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels().
  - tcp: adjust rcvq_space after updating scaling ratio
  - vsock/bpf: Warn on socket without transport
  - sockmap, vsock: For connectible sockets allow only connected
  - ibmvnic: Don't reference skb after sending to VIOS
  - ibmvnic: Add stat for tx direct vs tx batched
  - ibmvnic: Introduce send sub-crq direct
  - ibmvnic: Return error code on TX scrq flush fail
  - ALSA: seq: Drop UMP events when no UMP-conversion is set
  - net/sched: cls_api: fix error handling causing NULL dereference
  - ALSA: hda/cirrus: Correct the full scale volume set logic
  - geneve: Fix use-after-free in geneve_find_dev().
  - powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC
  - ALSA: hda/realtek: Fixup ALC225 depop procedure
  - powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
  - powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
  - ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB]
  - USB: gadget: f_midi: f_midi_complete to call queue_work
  - usb: gadget: core: flush gadget workqueue after device removal
  - USB: gadget: core: create sysfs link between udc and gadget
  - nvmem: imx-ocotp-ele: fix MAC address byte order
  - nvmem: Move and rename ->fixup_cell_info()
  - nvmem: Simplify the ->add_cells() hook
  - nvmem: Create a header for internal sharing
  - media: uvcvideo: Remove dangling pointers
  - media: uvcvideo: Only save async fh if success
  - media: uvcvideo: Refactor iterators
  - soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove
  - soc/mediatek: mtk-devapc: Convert to platform remove callback returning void
  - arm64: dts: qcom: sm8550: Fix ADSP memory base and length
  - arm64: dts: qcom: sm8550: add missing qcom,non-secure-domain property
  - arm64: dts: qcom: sm8550: Add dma-coherent property
  - arm64: dts: qcom: sm8450: Fix ADSP memory base and length
  - arm64: dts: qcom: sm8450: add missing qcom,non-secure-domain property
  - scsi: core: Do not retry I/Os during depopulation
  - scsi: core: Handle depopulation and restoration in progress
  - firmware: qcom: scm: Fix missing read barrier in qcom_scm_is_available()
  - ASoC: renesas: rz-ssi: Add a check for negative sample_space
  - Input: synaptics - fix crash when enabling pass-through port
  - Input: serio - define serio_pause_rx guard to pause and resume serio ports
  - Bluetooth: qca: Fix poor RF performance for WCN6855
  - Bluetooth: qca: Update firmware-name to support board specific nvm
  - Bluetooth: qca: Support downloading board id specific NVM for WCN7850
  - cpufreq: fix using cpufreq-dt as module
  - cpufreq: dt-platdev: add missing MODULE_DESCRIPTION() macro
  - memcg: fix soft lockup in the OOM process
  - mm: update mark_victim tracepoints fields
  - md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime
  - md/md-bitmap: add 'sync_size' into struct md_bitmap_stats
  - md/md-cluster: fix spares warnings for __le64
  - md/md-bitmap: replace md_bitmap_status() with a new helper md_bitmap_get_stats()
  - !15743  uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - !15768  gpio: aggregator: protect driver attr handlers against module unload
  - gpio: aggregator: protect driver attr handlers against module unload
  - !15755  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - !15739  ftrace: Avoid potential division by zero in function_stat_show()
  - ftrace: Avoid potential division by zero in function_stat_show()
  - !15748  tracing: Fix bad hist from corrupting named_triggers list
  - tracing: Fix bad hist from corrupting named_triggers list
  - !15750  perf/core: Fix pmus_lock vs. pmus_srcu ordering
  - perf/core: Fix pmus_lock vs. pmus_srcu ordering
  - !15697  fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - !15613  CVE-2024-57952
  - libfs: Fix duplicate directory entry in offset_dir_lookup
  - libfs: Use d_children list to iterate simple_offset directories
  - libfs: Replace simple_offset end-of-directory detection
  - Revert "libfs: fix infinite directory reads for offset dir"
  - Revert "libfs: Add simple_offset_empty()"
  - libfs: Return ENOSPC when the directory offset range is exhausted
  - !15724  CVE-2024-52560
  - fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode()
  - fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
  - !15277  drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
  - !15641  block: don't revert iter for -EIOCBQUEUED
  - block: don't revert iter for -EIOCBQUEUED
  - !15515  media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use
  - !15731  Some mainline patches merged into drivers/hwmon
  - hwmon: (acpi_power_meter) Fix the fake power alarm reporting
  - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices().
  - hwmon: (acpi_power_meter) Fix update the power trip points on failure
  - hwmon: (acpi_power_meter) Fix uninitialized variables
  - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method
  - !15711  Some bug fix patches for RDMA/hns to olk-6.6
  - RDMA/hns: Fix remove debugfs after device has been unregistered
  - RDMA/hns: Reorder uctx deallocation
  - RDMA/hns: Fix a meaningless loop in free_buffer_pages_proc()
  - RDMA/hns: Fix DCA error path in alloc_wqe_buf()
  - RDMA/hns: Fix mismatched kzalloc vs kvfree
  - RDMA/hns: Fix delay-destruction mechanism not processing kernel db
  - RDMA/hns: Fix delayed destruction of db not taking effect
  - RDMA/hns: Move mtr_node into the mtr struct
  - RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct


author: Li Nan <linan122@huawei.com> - 6.6.0-87.0.0.93
changelog:
  - !15987 v12  Add support for IPIv
  - kabi: Use KABI_EXTEND to perform kabi repair for IPIV
  - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12
  - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE
  - kvm: hisi_virt: Register ipiv exception interrupt
  - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule
  - kvm: arm64: avoid sending multi-SGIs in IPIV
  - kvm: hisi_virt: Allocate VM table and save vpeid in it
  - !15980  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - !15979  thermal: int340x: Add NULL check for adev
  - !15921 Support SMT control on arm64.
  - !15975  perf/x86: Fix open counting event error
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - thermal: int340x: Add NULL check for adev
  - !15968 v3  Backport mainline patches to avoid crash caused by rsize being 0
  - !15960  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - !15974  RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
  - !15952  ksmbd: validate zero num_subauth before sub_auth is accessed
  - !15950  drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
  - perf/x86: Fix open counting event error
  - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
  - smb: client: Update IO sizes after reconnection
  - smb: client: Store original IO parameters and prevent zero IO sizes
  - smb:client: smb: client: Add reverse mapping from tcon to superblocks
  - Revert "cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0"
  - !15958 cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
  - !15916  LoongArch: Increase ARCH_DMA_MINALIGN up to 16
  - !15961  drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
  - !15945 crypto: hisilicon - some bugfix
  - drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - !15929  arm_mpam: Add SMMU support for MPAM
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
  - !15793  CVE-2025-21892
  - !15795  CVE-2025-21941
  - ksmbd: validate zero num_subauth before sub_auth is accessed
  - drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
  - !15871 v2  CVE-2024-57795
  - !15906 [OLK-6.6] drm/hisilicon/hibmc: some bugfixes for hibmc-drm driver
  - !15834 uacce: fix for the numa distance calculation
  - crypto: hisilicon/qm - disable error report before flr
  - hisi_acc_vfio_pci: obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - fix the pf2vf timeout when global reset
  - crypto: hisilicon/qm - modify interrupt processing resource application
  - crypto: hisilicon/qm - mask axi error before memory init
  - crypto: hisilicon/qm - invalidate queues in use
  - crypto: hisilicon/sec2 - fix memory use-after-free issue
  - crypto: hisilicon/sec2 - fix for gcm spec check
  - crypto: hisilicon/hpre - fix dma unmap sequence
  - !15936  ASoC: imx-card: Add NULL check in imx_card_probe()
  - !15922 mm: shmem: fix potential data corruption during shmem swapin
  - !15924 mm/vmscan: drop checking if _deferred_list is empty before using TTU_SYNC
  - !15913  block: fix resource leak in blk_register_queue() error path
  - ASoC: imx-card: Add NULL check in imx_card_probe()
  - !15923 RDMA/hns :Add some mainline patches to OLK-6.6
  - iommu: Fix kabi broken of struct iommu_ops
  - fs/resctrl: Move iommu_groups back when their associated RDT group is deleted
  - fs/resctrl: Fix the iommu_group parsing process
  - iommu/arm-smmu-v3: Check pointer valid before dereferencing it
  - arm_mpam: Select CONFIG_RESCTRL_IOMMU on the ARM64 by default
  - ACPI/MPAM: Parse the rest of the ACPI table
  - fs/resctrl: Add support for assigning iommu_groups to resctrl groups
  - arm_mpam: resctrl: Add iommu helpers to get/set the partid and pmg
  - kobject: Add kset_get_next_obj() to allow a kset to be walked
  - iommu: Add helper to retrieve iommu kset
  - iommu: Add helpers to retrieve iommu_groups by id or kobject
  - iommu: Add helpers to get and set the QoS state
  - iommu/arm-smmu-v3: Add mpam helpers to query and set state
  - iommu/arm-smmu-v3: Issue a batch of commands to the same cmdq
  - iommu/arm-smmu-v3: Register SMMU capabilities with MPAM
  - mm: shmem: fix potential data corruption during shmem swapin
  - mm/vmscan: drop checking if _deferred_list is empty before using TTU_SYNC
  - RDMA/hns: Fix wrong maximum DMA segment size
  - Revert "RDMA/hns: fix iommu_map_sg() failed when MR bigger than 4G"
  - RDMA/hns: initialize db in update_srq_db()
  - RDMA/hns: Remove unused parameters
  - config: enable CONFIG_HOTPLUG_SMT for arm64
  - arm64: Kconfig: Enable HOTPLUG_SMT
  - arm64: topology: Support SMT control on ACPI based system
  - arch_topology: Support SMT control for OF based system
  - cpu/SMT: Provide a default topology_is_primary_thread()
  - Revert "arm64: Kconfig: Enable HOTPLUG_SMT"
  - !15904 v2  PCI: AER: fix deadlock in do_recovery
  - !15910 v2  soc cache: Add support for HiSilicon L3 cache
  - LoongArch: Increase ARCH_DMA_MINALIGN up to 16
  - block: fix resource leak in blk_register_queue() error path
  - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
  - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
  - !15909  coresight: tmc: Don't change the buffer size if it's in use
  - soc cache: Modify default config to compile HiSilicon SoC cache driver
  - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent
  - soc cache: Add framework driver for HiSilicon SoC cache
  - coresight: tmc: Don't change the buffer size if it's in use
  - PCI: AER: fix deadlock in do_recovery
  - !15863 Some mainline patches merged into olk-6.6: drivers/hwmon
  - !15812  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - !15821  LoongArch: Set hugetlb mmap base address aligned with pmd size
  - !15882  Updates for HiSilicon L3C PMU driver
  - !15886  Add HPD, getting EDID, colorbar features in DP function
  - !15851 migration: adapt to new migration configuration
  - drm/hisilicon/hibmc: Add vga connector detect functions
  - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
  - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
  - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
  - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
  - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
  - drm/hisilicon/hibmc: Add dp serdes cfg in dp process
  - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
  - drm/hisilicon/hibmc: Restructuring the header dp_reg.h
  - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
  - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
  - drm/ast: Implement polling for VGA and SIL164 connectors
  - drm/sysfs: Register "ddc" symlink later
  - !15612 Some trivial cleanups for shmem
  - drivers/perf: hisi: Add support for L3C PMU v3
  - drivers/perf: hisi: Refactor the event configuration of L3C PMU
  - drivers/perf: hisi: Extend the field of tt_core
  - drivers/perf: hisi: Extract the event filter check of L3C PMU
  - drivers/perf: hisi: Simplify the probe process of each L3C PMU version
  - drivers/perf: hisi: Export hisi_uncore_pmu_isr()
  - drivers/perf: hisi: Relax the event ID check in the framework
  - !15872 【olk 6.6】backport some bugfixes for hibmcge driver
  - !15852  Fix CVE-2025-22013
  - !15845  regulator: check that dummy regulator has been probed before using it
  - !15854  perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - !15838  General updates of HiSilicon PMU drivers
  - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register
  - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates
  - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
  - ACPI: IPMI: Add helper to wait for when SMI is selected
  - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
  - RDMA/rxe: Remove the direct link to net_device
  - net: hibmcge: fix multiple phy_stop() issue
  - net: hibmcge: fix not restore rx pause mac addr after reset issue
  - net: hibmcge: fix the incorrect np_link fail state issue.
  - net: hibmcge: fix wrong mtu log issue
  - net: hibmcge: fix the share of irq statistics among different network ports issue
  - net: hibmcge: fix incorrect multicast filtering issue
  - net: hibmcge: fix incorrect pause frame statistics issue
  - migration: adapt to new migration configuration
  - migration: qm updates BAR configuration
  - migration: update BAR space size
  - hisi_acc_vfio_pci: update function return values
  - hisi_acc_vfio_pci: bugfix live migration function without VF device driver
  - hisi_acc_vfio_pci: bugfix the problem of uninstalling driver
  - hisi_acc_vfio_pci: bugfix cache write-back issue
  - hisi_acc_vfio_pci: add eq and aeq interruption restore
  - hisi_acc_vfio_pci: fix XQE dma address error
  - !15839  ext4: Some zeroing fixes
  - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - arm64/fpsimd: Remove unused declaration fpsimd_kvm_prepare()
  - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
  - !15321  printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
  - regulator: check that dummy regulator has been probed before using it
  - !15826  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - !15754 v3  Support the FEAT_HDBSS introduced in Armv9.5
  - jbd2: fix off-by-one while erasing journal
  - iomap: do not interrupt IOMAP_ZERO
  - ext4: fix potential memory exposure issues during truncate in iomap mode.
  - ext4: do not always order data when partial zeroing out a block
  - mm: zero range of eof folio exposed by inode size extension
  - mm: convert pagecache_isize_extended to use a folio
  - ext4: goto right label 'out_mmap_sem' in ext4_setattr()
  - drivers/perf: hisi: Add support for HiSilicon MN PMU driver
  - drivers/perf: hisi: Add support for HiSilicon NoC PMU
  - drivers/perf: hisi: Support PMUs with no interrupt
  - drivers/perf: hisi: Relax the event number check of v2 PMUs
  - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver
  - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information
  - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - drivers/perf: hisi: Simplify the probe process for each DDRC version
  - drivers/perf: hisi: Delete redundant blank line of DDRC PMU
  - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver
  - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs
  - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier
  - drivers/perf: hisi: Add a common function to retrieve topology from firmware
  - drivers/perf: hisi: Extract topology information to a separate structure
  - drivers/perf: hisi: Refactor the detection of associated CPUs
  - drivers/perf: hisi: Migrate to one online CPU if no associated one online
  - drivers/perf: hisi: Don't update the associated_cpus on CPU offline
  - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs
  - !15827  perf stat: Enable iostat mode for HiSilicon PCIe PMU
  - !15072 hisilicon: ACC Live Migration DFX Replacement Mainline Solution
  - x86: openeuler_defconfig add CONFIG_VFIO_DEBUGFS=y
  - arm64: openeuler_defconfig add CONFIG_VFIO_DEBUGFS=y
  - perf stat: Enable iostat mode for HiSilicon PCIe PMU
  - vfio: fix kabi breakage due to struct vfio_device and enum vfio_device_mig_state
  - Documentation: add debugfs description for vfio
  - Documentation: add debugfs description for hisi migration
  - MAINTAINERS: Add vfio debugfs interface doc link
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - MAINTAINERS: add Baolin as shmem reviewer
  - mm: shmem: factor out the within_size logic into a new helper
  - mm: shmem: change the return value of shmem_find_swap_entries()
  - mm: shmem: remove duplicate error validation
  - mm: shmem: remove 'fadvise()' comments
  - mm: shmem: drop the unused macro
  - docs: tmpfs: drop 'fadvise()' from the documentation
  - !15611 Minimize xa_node allocation during xarry split
  - docs: tmpfs: update the large folios policy for tmpfs and shmem
  - mm: shmem: add a kernel command line to change the default huge policy for tmpfs
  - hisi_acc_vfio_pci: register debugfs for hisilicon migration driver
  - hisi_acc_vfio_pci: create subfunction for data reading
  - hisi_acc_vfio_pci: extract public functions for container_of
  - hisi_acc_vfio_pci: Remove the deferred_reset logic
  - vfio/migration: Add debugfs to live migration driver
  - Revert "vfio/migration: added map length page alignment"
  - Revert "vfio/migration: bugfix some driver code"
  - Revert "vfio/migration: add eq and aeq interruption restore"
  - Revert "vfio/migration: bugfix cache write-back issue"
  - Revert "vfio/migration: remove unused local variable"
  - Revert "hisi-acc-vfio-pci:add DFX for acc migration driver"
  - Revert "hisi_acc_vfio_pci: add exception error handling"
  - Revert "migration: fix reference counting exception issue"
  - Revert "migration: modify dfx error type without VM driver"
  - !15636 Kunpeng Accelerator Enables New Features
  - LoongArch: Set hugetlb mmap base address aligned with pmd size
  - crypto: hisilicon/sec2 - fix for sec spec check
  - crypto: hisilicon/sec2 - fix for aead authsize alignment
  - crypto: hisilicon/sec2 - fix for aead auth key length
  - crypto: hisilicon/hpre - adapt ECDH for high-performance cores
  - crypto: hisilicon/qm - support new function communication
  - Revert "crypto: hisilicon/qm - fix the pf2vf timeout when global reset"
  - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time"
  - crypto: hisilicon/sec2 - fix for aead invalid authsize
  - crypto: hisilicon/sec2 - fix for aead icv error
  - Revert "crypto: hisilicon/sec2: fix memory use-after-free issue"
  - Revert "crypto: hisilicon/sec2 - fix for aead icv error"
  - Revert "crypto: hisilicon/sec2 - fix for aead invalid authsize"
  - crypto: hisilicon/zip - support new error report
  - Revert "crypto: hisilicon/qm - check device status before sending mailbox"
  - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time"
  - Revert "crypto: hisilicon/qm - disable error report before flr"
  - crypto: hisilicon/zip - add data aggregation feature
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params
  - RDMA/mlx5: Fix the recovery flow of the UMR QP
  - arm64/kabi: use KABI_EXTEND to skip KABI check
  - arm64/config: add config to control whether enable HDBSS feature
  - arm64/kvm: support to handle the HDBSSF event
  - arm64/kvm: using ioctl to enable/disable the HDBSS feature
  - arm64/kvm: support set the DBM attr during memory abort
  - arm64/sysreg: add HDBSS related register information
  - uacce: fix for the numa distance calculation
  - uacce: fixes the mutex repeatedly locking error
  - mm/shmem: use xas_try_split() in shmem_split_large_entry()
  - mm/filemap: use xas_try_split() in __filemap_add_folio()
  - xarray: add xas_try_split() to split a multi-index entry
  - mm: shmem: add large folio support for tmpfs
  - mm: shmem: change shmem_huge_global_enabled() to return huge order bitmap
  - mm: factor out the order calculation into a new helper
  - Xarray: distinguish large entries correctly in xas_split_alloc()
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.9-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove .export_symbol section newly added in 6.6 kernel to avoid compile error


author: jinsaihang <jinsaihang@h-partners.com> - 1:0.9.9-13
changelog:
  - Type:bugfix
  - CVE:NA  
  - SUG:NA  
  - DESC:check whether the directory is a user source code directory


author: laokz <zhangkai@iscas.ac.cn> - 0.0.1-7
changelog:
  - Type:Enhancement
  - ID:NA
  - SUG:NA
  - DESC: Add riscv64 support. Patches are from nix v0.17.0 and v0.18.0.
          Add protobuf-compiler to avoid patching big binary for prost-build.


author: xuxuepeng <xuxuepeng1@huawei.com> - 0.0.1-8
changelog:
  - Type:Enhancement
  - ID:NA
  - SUG:NA
  - DESC: Simplify Store api, remove unnecessary validation
          Check if a path is abstract before connection
          Add vsock support.


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: wangzhiqiang <swangzhiqiang95@huawei.com> - 3.0.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add BDPluginSpec constructor and use it in plugin_specs_from_names


author: tianmuyang <tianmuyang@huawei.com> 2:1.2.2-11
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-11
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
    backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
    backport-libbpf-Fix-is_pow_of_2.patch
    backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:1.2.2-2
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-NULL-pointer-dereference-in_bpf_object__c.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:1.2.2-4
changelog:
  - backport patch from upstream:
    backport-libbpf-Avoid-uninitialized-value-in-BPF_CORE_READ_BI.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:1.2.2-5
changelog:
  - backport patch from upstream:
    backport-libbpf-Add-NULL-checks-to-bpf_object__prev_map,next_.patch
    backport-libbpf-Apply-map_set_def_max_entries-for-inner_maps-.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:1.2.2-6
changelog:
  - backport patch from upstream:
    backport-libbpf-Dont-take-direct-pointers-into-BTF-data-from-.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:1.2.2-8
changelog:
  - backport patch from upstream:
    backport-libbpf-Do-not-resolve-size-on-duplicate-FUNCs.patch
    backport-libbpf-Fix-bpf_object__open_skeleton-s-mishandling-o.patch
    backport-libbpf-Fix-segfault-due-to-libelf-functions-not-sett.patch
    backport-libbpf-Fixed-getting-wrong-return-address-on-arm64-a.patch
    backport-libbpf-fix-sym_is_subprog-logic-for-weak-global-subp.patch
    backport-libbpf-move-global-data-mmap-ing-into-bpf_object__lo.patch


author: yanglongkang <yanglongkang@h-partners.com> - 2.69-3
changelog:
  - backport upstream patches:
    getpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: Kai Liu <kai.liu@windriver.com> - 1:1.49.5-5
changelog:
  - Replace patch support_OPENEULER_to_configure.patch by backport-support-openEuler.patch
    which is backported from upstream, fix issue of detecting openEuler.
  - Add provide-openEuler-appliance-package-list.patch after correctly detected openEuler.
    It was using REDHAT list before.


author: xinghe <xinghe2@h-partners.com> - 2.74.3-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-5
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-7
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: renmingshuai <renmingshuai@huawei.com> - 0.10.5-2
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: hankangkang <hankangkang5@huawei.com> - 2.2.0-62
changelog:
  - When the GAZELLE_TCP_REUSE_IPPORT is on, min_cnts_lpcb is NULL
  - Turn on the LWIP_SO-LINGER switch


author: wujichao <wujichao1@huawei.com> - 0.3-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bugfix: Information in cpu directory is overwritten after lxcfs restart


author: xiejing <xiejing@kylinos.cn> - 4:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096
  - Fix version description in systemd service file
  - Add conflict with greatsql and change requires


author: wangkai <13474090681@163.com> - 20240312-1
changelog:
  - Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
    CVE-2023-22655, CVE-2023-43490, CVE-2023-28746


author: Funda Wang <fundawang@yeah.net> - 20240813-1
changelog:
  - update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
    CVE-2024-24980, CVE-2023-42667, CVE-2023-49141


author: Funda Wang <fundawang@yeah.net> - 20250211-1
changelog:
  - update to 2025021 for fix CVE-2024-28047, CVE-2024-31157, CVE-2024-39279,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-24582, CVE-2023-34440, CVE-2024-37020,
    CVE-2024-39355, CVE-2023-43758, CVE-2024-36293, CVE-2024-31068


author: Funda Wang <fundawang@yeah.net> - 20250512-1
changelog:
  - update to 20250512 to fix CVE-2024-28956, CVE-2025-24495, CVE-2025-20012,
    CVE-2024-45332, CVE-2025-20623, CVE-2024-43420, CVE-2025-20054, CVE-2025-20103


author: Funda Wang <fundawang@yeah.net> - 20250812-1
changelog:
  - update to 20250812 to fix CVE-2025-20053, CVE-2025-20109, CVE-2025-21090,
    CVE-2025-22839, CVE-2025-22840, CVE-2025-22889, CVE-2025-24305, CVE-2025-26403,
    CVE-2025-32086


author: yaoxin <1024769339@qq.com> - 2.4.16.6-1
changelog:
  - Update to 2.4.16.6:
    * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
    * info: fix requests to the info hook with extend_session=false
    * cookie: OIDCCookieSameSite default behaviour Lax
    * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
    * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
      cannot be found on the system upon initaliizing cache mutexes and the file cache
    * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
      compatibility with <=2.4.15.7 and to support private/test deployments
    * code: address warnings from static code analysis tool CodeChecker


author: wangkai <13474090681@163.com> - 8.0.37-1
changelog:
  - Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
    CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
    CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
    CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
    CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
    CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
    CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
    CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
    CVE-2024-21057,CVE-2023-6129)


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: lingsheng <lingsheng1@h-partners.com> - 1:1.0.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: liweigang <liweiganga@uniontech.com> - 1:1.0.8-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: evaluate: guard against NULL basetype
  evaluate: error out if basetypes are different
  evaluate: reject attempt to update a set
  evaluate: release mpz type in expr_evaluate_list() error path
  expression: missing line in describe command with invalid expression
  evaluate: handle invalid mapping expressions in stateful object statements gracefully


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix crash in json_parse_set_stmt_list
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: xingwei <xingwei14@h-partners.com> - 2:7.92-4
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead


author: wangkai <13474090681@163.com> - 1:20.11.1-1
changelog:
  - Update to 20.11.1
  - Fix CVE-2023-46809 CVE-2024-21896 CVE-2024-22019 CVE-2024-21892 CVE-2024-24758 CVE-2024-22025


author: yaoxin <yao_xin001@hoperun.com> - 1:20.12.1-1
changelog:
  - Update to 20.12.1:
    * CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session()
      leads to HTTP/2 server crash- (High)
    * CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
    * llhttp version 9.2.1
    * undici version 5.28.4


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:20.12.1-2
changelog:
  - fix building w/ clang: only apply '-fno-ipa-icf' for gcc && disable LTO for clang + ld.bfd
  - improve the handling of trilling whitespaces in C/CXXFLAGS


author: Ge Wang <wang__ge@126.com> - 1:20.12.1-3
changelog:
  - CVE-2023-45853 - Reject overflows of zip header fields in minizip
  - CVE-2024-5274 - Using FunctionParsingScope for parsing class static
  - CVE-2024-5535 - Fix SSL_select_next_proto
  - CVE-2024-7971 - Spill all loop inputs before entering loop


author: wangkai <13474090681@163.com> - 1:20.18.2-1
changelog:
  - Update to 20.18.2
  - Fix CVE-2025-23083 CVE-2025-23085 CVE-2025-23084 CVE-2024-36137
    CVE-2024-22018 CVE-2024-22020


author: yyjeqhc <jialin.oerv@isrc.iscas.ac.cn> - 0.2.17-3
changelog:
  - Migrated legacy `import pango` and `pangocairo` usage to modern PyGObject (`gi.repository.Pango`, `PangoCairo`)
  - Replaced all legacy constants (`pango.STRETCH_...`) with `Pango.Stretch.XXX` enums


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
  - Add fio test cases:read,write,randread,randwrite
  - Solve the nvme line break issue in the command line interface
  - Fix compilation errors in the make command
  - Add Vulkan testcase for nvida GPU
  - Resolve the issue of oech server startup failure on version 24.03


author: xiaochn <xiaochuannan@inspur.com> - 1.1.5-3
changelog:
  - Resolve the issue of different kernel source download locations in kabi test case
  - Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
  - Add the way for manually adding kabiwhitelist file
  - For custom vendors, refer to the method of obtaining openEuler os information
  - Supports custom vendor


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-0
changelog:
  - Add new test suite srpm and intel
  - Add virtual branch of test suite
  - Add support for Kylin and UOS
  - Bugfix


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: xiaochn <xiaochuannan@inspur.com> - 1.1.7-1
changelog:
  - Add KylinSec 3.5.3 support
  - Fix the problem of disk size calculation
  - Fix bcm57414 nic test failed issue
  - Change the format of date
  - Fixed a bug where a non-existent logger level was used
  - Update README.md
  - Fix vgpu testing issue


author: Xiaoqian Lv <xiaoqian@nj.iscas.ac.cn> - 4.5-5
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: backport upstream 4.5-0.20 patches to support riscv64


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: pengjian <pengjian23@mails.ucas.ac.cn> - 1:0.82-3
changelog:
  - Introduced environment variable-controlled polling timeouts 
  for the close and connection-keeping functions in the os_unix.c file.


author: duyiwei <duyiwei@kylinos.cn> - 1:4.9.4-10
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC: Optimize spec files and fix CVE in batches through rebuild


author: duyiwei <duyiwei@kylinos.cn> - 1:4.9.4-11
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9676,CVE-2024-9675, CVE-2024-9407,CVE-2024-9341
  - SUG:NA
  - DESC: fix CVE-2024-9676,CVE-2024-9675, CVE-2024-9407, and CVE-2024-9341


author: wangyu <wangqingsan@huawei.com> - 123-1
changelog:
  - update to 123
    - duktape:prevent wrongful termination of runway thread
    - harden the security features of the systemd service
    - add packit build tool
    - systemd:set User/Group and don't change uid/gid if already set
    - stop installing /usr/share/polkit-1/rules.d as 700/polkitd
    - moving the 50-default.rules file location


author: gaihuiying <eaglegai@163.com> - 2.5.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:pre-created upstream default lock dir
         Openssl engine API is deprecated for a while thus disable it


author: gaihuiying <eaglegai@163.com> - 2.5.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf
         Add configure check to see if we have struct sockaddr_ll


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.3.8b-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix: %patchN is deprecated (7 usages found), use %patch N (or %patch -P N)


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.0.5-1
changelog:
  - Update package to version 1.0.5
  - fix error handling that might result in null exception
    cleanups of exception handling : errors must now have an exception
    Handling NameError is not working


author: yaoxin <1024769339@qq.com> - 1.0.6-1
changelog:
  - Update to 1.0.6:
    * drop testing and support for Python3.8, add Python 3.13, change document to reflect this.
    * implement safe_getattr and safe_format functions; fix bugs in UNSAFE_ATTRS and UNSAFE_ATTRS_DTYPES usage
    * make all procedure attributes private to curb access to AST nodes, which can be exploited
    * improvements to error messages, including use ast functions to construct better error messages
    * remove import of numpy.linalg, as documented
    * update doc description for security advisory


author: xuchenchen <xuchenchen@kylinos.cn> - 3.1.3-2
changelog:
  - Type: CVE
  - CVE: CVE-2024-34064
  - SUG: NA
  - DESC: fix disallow invalid characters in keys to xmlattr filter


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 4.1.2-1
changelog:
  - Upgrade package with version 4.1.2
    Fix highlight sequencing when replacing text in code cells
    Restore notebook scrolling on dragging a cell to the viewport edge
    Fix typing in editable elements inside of open shadow DOM
    Correct Alt + number keyboard shortcuts command map
    Update jupyter-collaboration for the Binder environment
    Add virtual scrollbar component to windowed lists.
    Load custom CSS functionality and documentation
    Add plugin manager and extension locks


author: zhaojingyu <zhaojingyu@kylinos.cn> - 4.1.6-1
changelog:
  - Upgrade package with version 4.1.6
  - Fix outputarea collapse expand
    Disable placeholder for password input


author: muxiaohui <muxiaohui@kylinos.cn> - 4.3.0-1
changelog:
  - Update version to 4.3.0
    Add setting to enable single-click navigation in file browser.
    Adds command to toggle cell outputs.
    Add kernel selection to Galata notebook creation.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 4.3.5-1
changelog:
  - Upgrade package with version 4.3.5
    Fix scrolling and selection restoration on undo/redo
    Fix windowing crash due to out-of-bounds access
    Increase color contrast of operators in code editor
    Fix jupyverse installation instructions
    Use Zulip for instant messaging


author: xuhe <xuhe@kylinos.cn> - 2.27.3-1
changelog:
  - Update to 2.27.3
  - Fix test util typings.
  - Use json5 typings.
  - Use updated releaser workflows.
  - Ignore pageconfig file if JSON is zero-length.
  - For v2 extensions parse entrypoint data.
  - Add util to get consolidated page_config from higher levels.
  - Move ENV_CONFIG_PATH import back into _get_config_manager.
  - Load overrides once, rather than in each settings handler.
  - Run docs on ubuntu.
  - Fix handling language packs for pseudo language.


author: yaoxin <yao_xin001@hoperun.com> - 6.4.1-1
changelog:
  - Update to 6.4.1
    * Parsing of the ``Transfer-Encoding`` header is now stricter.
    * Handling of whitespace in headers now matches the RFC more closely.
    * ``tornado.curl_httpclient`` now prohibits carriage return and linefeed headers in HTTP headers
    (matching the behavior of ``simple_httpclient``).


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-4032, CVE-2024-0397 and fix xml tree assert error


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.11.6-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:enable profile guided optimizations for some architectures


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-6
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.11.6-7
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup


author: Funda Wang <fundawang@yeah.net> - 3.11.6-8
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
    - Quote template strings in venv activation scripts


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-26
changelog:
  - vdpa-dev: Fix initialisation order to restore VDUSE compatibility
  - tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
  - migration: fix-possible-int-overflow
  - target/m68k: Map FPU exceptions to FPSR register
  - qemu-options: Fix CXL Fixed Memory Window interleave-granularity typo
  - hvf: arm: Fix encodings for ID_AA64PFR1_EL1 and debug System registers
  - hw/intc/arm_gic: Fix handling of NS view of GICC_APR<n>
  - qio: Inherit follow_coroutine_ctx across TLS
  - target/riscv: Fix the element agnostic function problem
  - accel/tcg: Fix typo causing tb->page_addr[1] to not be recorded
  - tcg/loongarch64: Fix tcg_out_movi vs some pcrel pointers
  - migration: Fix file migration with fdset
  - ui/vnc: don't return an empty SASL mechlist to the client
  - target/arm: Fix FJCVTZS vs flush-to-zero
  - hw/ppc/e500: Prefer QOM cast
  - sphinx/qapidoc: Fix to generate doc for explicit, unboxed arguments
  - hw/ppc/e500: Remove unused "irqs" parameter
  - hw/ppc/e500: Add missing device tree properties to i2c controller node
  - hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb()
  - hw/arm/mps2-tz.c: fix RX/TX interrupts order
  - target/i386: csv: Add support to migrate the incoming context for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing context for CSV3 guest
  - target/i386: csv: Add support to migrate the incoming page for CSV3 guest
  - target/i386: csv: Add support to migrate the outgoing page for CSV3 guest
  - linux-headers: update kernel headers to include CSV3 migration cmds
  - vfio: Only map shared region for CSV3 virtual machine
  - vga: Force full update for CSV3 guest
  - target/i386: csv: Load initial image to private memory for CSV3 guest
  - target/i386: csv: Do not register/unregister guest secure memory for CSV3 guest
  - target/i386: cpu: Populate CPUID 0x8000_001F when CSV3 is active
  - target/i386: csv: Add command to load vmcb to CSV3 guest memory
  - target/i386: csv: Add command to load data to CSV3 guest memory
  - target/i386: csv: Add command to initialize CSV3 context
  - target/i386: csv: Add CSV3 context
  - next-kbd: convert to use qemu_input_handler_register()
  - qemu/bswap: Undefine CPU_CONVERT() once done
  - exec/memop: Remove unused memop_big_endian() helper
  - hw/nvme: fix handling of over-committed queues
  - 9pfs: fix crash on 'Treaddir' request
  - hw/misc/psp: Pin the hugepage memory specified by mem2 during use for psp
  - hw/misc: support tkm use mem2 memory
  - hw/i386: add mem2 option for qemu
  - kvm: add support for guest physical bits
  - target/i386: add guest-phys-bits cpu property


author: Xianglai Li <lixianglai@loongson.cn> - 11:8.2.0-27
changelog:
  - fix compile error on loongarch
  - hw/loongarch: fix cpu hotplug reset
  - hw/loongarch/boot: Use warn_report when no kernel filename
  - hw/loongarch: clean code
  - hw/loongarch: Add KVM pch msi device support
  - hw/loongarch: Add KVM pch pic device support
  - hw/loongarch: Add KVM extioi device support
  - hw/loongarch: Add KVM IPI device support
  - hw/loongarch/virt: Update the ACPI table for hotplug cpu
  - hw/loongarch/virt: Add basic CPU plug support
  - hw/loongarch/virt: Add CPU topology support
  - accel/kvm/kvm-all: Fixes the missing break in vCPU unpark logic
  - gdbstub: Add helper function to unregister GDB register space
  - physmem: Add helper function to destroy CPU AddressSpace
  - hw/acpi: Update CPUs AML with cpu-(ctrl)dev change
  - hw/acpi: Update ACPI GED framework to support vCPU Hotplug
  - hw/acpi: Move CPU ctrl-dev MMIO region len macro to common header file
  - accel/kvm: Extract common KVM vCPU {creation,parking} code
  - target/loongarch: Add steal time support on migration
  - linux-headers: loongarch: Add kvm_para.h and unistd_64.h
  - target/loongarch/kvm: Implement LoongArch PMU extension
  - target/loongarch: Implement lbt registers save/restore function
  - target/loongarch: Add loongson binary translation feature
  - sync loongarch linux-headers
  - target/loongarch: Avoid bits shift exceeding width of bool type
  - target/loongarch: Use explicit little-endian LD/ST API
  - target/loongarch: fix -Werror=maybe-uninitialized false-positive
  - target/loongarch: Support QMP dump-guest-memory
  - target/loongarch/kvm: Add vCPU reset function
  - target/loongarch: Add compatible support about VM reboot
  - target/loongarch: Fix cpu_reset set wrong CSR_CRMD
  - target/loongarch: Set CSR_PRCFG1 and CSR_PRCFG2 values
  - target/loongarch: Remove avail_64 in trans_srai_w() and simplify it
  - target/loongarch/kvm: Add software breakpoint support
  - target/loongarch: Add loongarch vector property unconditionally
  - target/loongarch/kvm: Fix VM recovery from disk failures
  - target/loongarch: Put cpucfg operation before CSR register
  - target/loongarch: Add TCG macro in structure CPUArchState
  - hw/arm/virt-acpi-build.c: Migrate SPCR creation to common location
  - hw/loongarch/virt: Add FDT table support with acpi ged pm register
  - hw/loongarch/virt: Add description for virt machine type
  - hw/loongarch: Add acpi SPCR table support
  - hw/loongarch: virt: pass random seed to fdt
  - hw/loongarch: virt: support up to 4 serial ports
  - hw/loongarch: Remove default enable with VIRTIO_VGA device
  - hw/loongarch: Fix length for lowram in ACPI SRAT
  - hw/loongarch/virt: Remove unused assignment
  - hw/loongarch: Change the tpm support by default
  - hw/loongarch/boot.c: fix out-of-bound reading
  - hw/loongarch/virt: Use MemTxAttrs interface for misc ops
  - tests/libqos: Add loongarch virt machine node
  - hw/loongarch: Remove minimum and default memory size
  - hw/loongarch: Refine system dram memory region
  - hw/loongarch: Refine fwcfg memory map
  - hw/loongarch: Refine fadt memory table for numa memory
  - hw/loongarch: Refine acpi srat table for numa memory
  - hw/loongarch: Add VM mode in IOCSR feature register in kvm mode
  - hw/loongarch: Refine default numa id calculation
  - hw/loongarch: Rename LoongArchMachineState with LoongArchVirtMachineState
  - hw/loongarch: Rename LOONGARCH_MACHINE with LOONGARCH_VIRT_MACHINE
  - hw/loongarch: move memory map to boot.c
  - loongarch: switch boards to "default y"
  - hw/loongarch: Add cells missing from rtc node
  - hw/loongarch: Add cells missing from uart node
  - hw/loongarch: fdt remove unused irqchip node
  - hw/loongarch: fdt adds pcie irq_map node
  - hw/loongarch: fdt adds pch_msi Controller
  - hw/loongarch: fdt adds pch_pic Controller
  - hw/loongarch: fdt adds Extend I/O Interrupt Controller
  - hw/loongarch: fdt adds cpu interrupt controller node
  - hw/loongarch: Init efi_fdt table
  - hw/loongarch: Init efi_initrd table
  - hw/loongarch: Init efi_boot_memmap table
  - hw/loongarch: Init efi_system_table
  - hw/loongarch: Add init_cmdline
  - hw/loongarch: Add slave cpu boot_code
  - hw/loongarch: Add load initrd
  - hw/loongarch: Move boot functions to boot.c


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-28
changelog:
  - hw/misc/mos6522: Fix bad class definition of the MOS6522 device
  - target/i386: Fix minor typo in NO_NESTED_DATA_BP feature bit
  - cpu: ensure we don't call start_exclusive from cpu_exec
  - Avoid unaligned fetch in ladr_match()
  - audio/audio.c: remove trailing newline in error_setg
  - acpi/tests/avocado/bits: wait for 200 seconds for SHUTDOWN event from bits VM
  - linux-user: Tolerate CONFIG_LSM_MMAP_MIN_ADDR
  - accel/tcg: Fix user-only probe_access_internal plugin
  - linux-user: Honor elf alignment when placing images
  - Reserve address for MSI mapping in the CVM scenario.


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-29
changelog:
  - target/i386: csv: Support inject secret for CSV3 guest only if the extension is enabled
  - target/i386: csv: Support load kernel hashes for CSV3 guest only if the extension is enabled
  - target/i386: csv: Request to set private memory of CSV3 guest if the extension is enabled
  - target/i386: kvm: Support to get and enable extensions for Hygon CoCo guest
  - qapi/qom,target/i386: csv-guest: Introduce secret-header-file=str and secret-file=str options
  - bakcend: VirtCCA:resolve hugepage memory waste issue in vhost-user scenario
  - parallels: fix ext_off assertion failure due to overflow
  - backends/cryptodev-vhost-user: Fix local_error leaks
  - hw/usb/hcd-ehci: Fix debug printf format string
  - target/riscv/vector_helper.c: fix 'vmvr_v' memcpy endianess
  - target/riscv/vector_helper.c: optimize loops in ldst helpers
  - target/riscv/vector_helper.c: set vstart = 0 in GEN_VEXT_VSLIDEUP_VX()
  - target/hexagon: don't look for static glib
  - virtio-net: Fix network stall at the host side waiting for kick
  - Add if condition to avoid assertion failed error in blockdev_init
  - target/arm: Use float_status copy in sme_fmopa_s
  - target/arm: take HSTR traps of cp15 accesses to EL2, not EL1
  - target/arm: Reinstate "vfp" property on AArch32 CPUs
  - target/i386/cpu: Fix notes for CPU models
  - target/arm: LDAPR should honour SCTLR_ELx.nAA
  - target/riscv: Avoid bad shift in riscv_cpu_do_interrupt()
  - hvf: remove unused but set variable
  - hw/misc/nrf51_rng: Don't use BIT_MASK() when we mean BIT()
  - Avoid taking address of out-of-bounds array index
  - target/arm: Fix VCMLA Dd, Dn, Dm[idx]
  - target/arm: Fix UMOPA/UMOPS of 16-bit values
  - target/arm: Fix SVE/SME gross MTE suppression checks
  - target/arm: Fix nregs computation in do_{ld,st}_zpa
  - crypto: fix error check on gcry_md_open
  - Change vmstate_cpuhp_sts vmstateDescription version_id
  - hw/pci: Remove unused pci_irq_pulse() method
  - hw/intc: Don't clear pending bits on IRQ lowering
  - target/arm: Drop user-only special case in sve_stN_r
  - migration: Ensure vmstate_save() sets errp
  - target/i386: fix hang when using slow path for ptw_setl
  - contrib/plugins: add compat for g_memdup2
  - hw/audio/hda: fix memory leak on audio setup
  - crypto: perform runtime check for hash/hmac support in gcrypt
  - target/arm: Fix incorrect aa64_tidcp1 feature check
  - target/arm: fix exception syndrome for AArch32 bkpt insn
  - target/arm: Don't get MDCR_EL2 in pmu_counter_enabled() before checking ARM_FEATURE_PMU
  - linux-user: Print tid not pid with strace
  - target/arm: Fix A64 scalar SQSHRN and SQRSHRN
  - target/arm: Don't assert for 128-bit tile accesses when SVL is 128
  - hw/timer/exynos4210_mct: fix possible int overflow
  - target/arm: Avoid shifts by -1 in tszimm_shr() and tszimm_shl()
  - hw/audio/virtio-snd: Always use little endian audio format
  - target/riscv: Fix vcompress with rvv_ta_all_1s
  - usb-hub: Fix handling port power control messages


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-30
changelog:
  - Revert "linux-user: Print tid not pid with strace"
  - gpex-acpi: Remove duplicate DSM #5
  - smmuv3: Use default bus for arm-smmuv3-accel
  - smmuv3: Change arm-smmuv3-nested name to arm-smmuv3-accel
  - smmu-common: Return sysmem address space only for vfio-pci
  - smmuv3: realize get_pasid_cap and set ssidsize with pasid
  - vfio: Synthesize vPASID capability to VM
  - backend/iommufd: Report PASID capability
  - pci: Get pasid capability from vIOMMU
  - smmuv3: Add support for page fault handling
  - kvm: Translate MSI doorbell address only if it is valid
  - hw/arm/smmuv3: Enable sva/stall IDR features
  - iommufd.h: Updated to openeuler olk-6.6 kernel
  - tests/data/acpi/virt: Update IORT acpi table
  - hw/arm/virt-acpi-build: Add IORT RMR regions to handle MSI nested binding
  - tests/qtest: Allow IORT acpi table to change
  - hw/arm/virt-acpi-build: Build IORT with multiple SMMU nodes
  - hw/arm/smmuv3: Associate a pci bus with a SMMUv3 Nested device
  - hw/arm/smmuv3: Add initial support for SMMUv3 Nested device
  - hw/arm/virt: Add an SMMU_IO_LEN macro
  - hw/pci-host/gpex: [needs kernel fix] Allow to generate preserve boot config DSM #5
  - tests/data/acpi: Update DSDT acpi tables
  - acpi/gpex: Fix PCI Express Slot Information function 0 returned value
  - tests/qtest: Allow DSDT acpi tables to change
  - hw/arm/smmuv3: Forward cache invalidate commands via iommufd
  - hw/arm/smmu-common: Replace smmu_iommu_mr with smmu_find_sdev
  - hw/arm/smmuv3: Add missing STE invalidation
  - hw/arm/smmuv3: Add smmu_dev_install_nested_ste() for CFGI_STE
  - hw/arm/smmuv3: Check idr registers for STE_S1CDMAX and STE_S1STALLD
  - hw/arm/smmuv3: Read host SMMU device info
  - hw/arm/smmuv3: Ignore IOMMU_NOTIFIER_MAP for nested-smmuv3
  - hw/arm/smmu-common: Return sysmem if stage-1 is bypassed
  - hw/arm/smmu-common: Add iommufd helpers
  - hw/arm/smmu-common: Add set/unset_iommu_device callback
  - hw/arm/smmu-common: Extract smmu_get_sbus and smmu_get_sdev helpers
  - hw/arm/smmu-common: Bypass emulated IOTLB for a nested SMMU
  - hw/arm/smmu-common: Add a nested flag to SMMUState
  - backends/iommufd: Introduce iommufd_viommu_invalidate_cache
  - backends/iommufd: Introduce iommufd_vdev_alloc
  - backends/iommufd: Introduce iommufd_backend_alloc_viommu
  - vfio/iommufd: Implement [at|de]tach_hwpt handlers
  - vfio/iommufd: Implement HostIOMMUDeviceClass::realize_late() handler
  - HostIOMMUDevice: Introduce realize_late callback
  - vfio/iommufd: Add properties and handlers to TYPE_HOST_IOMMU_DEVICE_IOMMUFD
  - backends/iommufd: Add helpers for invalidating user-managed HWPT
  - Update iommufd.h header for vSVA
  - vfio/common: Allow disabling device dirty page tracking
  - vfio/migration: Don't block migration device dirty tracking is unsupported
  - vfio/iommufd: Implement VFIOIOMMUClass::query_dirty_bitmap support
  - vfio/iommufd: Implement VFIOIOMMUClass::set_dirty_tracking support
  - vfio/iommufd: Probe and request hwpt dirty tracking capability
  - vfio/{iommufd, container}: Invoke HostIOMMUDevice::realize() during attach_device()
  - vfio/iommufd: Add hw_caps field to HostIOMMUDeviceCaps
  - vfio/{iommufd,container}: Remove caps::aw_bits
  - HostIOMMUDevice: Store the VFIO/VDPA agent
  - vfio/iommufd: Introduce auto domain creation
  - vfio/ccw: Don't initialize HOST_IOMMU_DEVICE with mdev
  - vfio/ap: Don't initialize HOST_IOMMU_DEVICE with mdev
  - vfio/iommufd: Return errno in iommufd_cdev_attach_ioas_hwpt()
  - backends/iommufd: Extend iommufd_backend_get_device_info() to fetch HW capabilities
  - vfio/iommufd: Don't initialize nor set a HOST_IOMMU_DEVICE with mdev
  - vfio/pci: Extract mdev check into an helper
  - intel_iommu: Check compatibility with host IOMMU capabilities
  - intel_iommu: Implement [set|unset]_iommu_device() callbacks
  - intel_iommu: Extract out vtd_cap_init() to initialize cap/ecap
  - vfio/pci: Pass HostIOMMUDevice to vIOMMU
  - hw/pci: Introduce pci_device_[set|unset]_iommu_device()
  - hw/pci: Introduce helper function pci_device_get_iommu_bus_devfn()
  - vfio: Create host IOMMU device instance
  - backends/iommufd: Implement HostIOMMUDeviceClass::get_cap() handler
  - vfio/container: Implement HostIOMMUDeviceClass::get_cap() handler
  - vfio/iommufd: Implement HostIOMMUDeviceClass::realize() handler
  - backends/iommufd: Introduce helper function iommufd_backend_get_device_info()
  - vfio/container: Implement HostIOMMUDeviceClass::realize() handler
  - range: Introduce range_get_last_bit()
  - backends/iommufd: Introduce TYPE_HOST_IOMMU_DEVICE_IOMMUFD[_VFIO] devices
  - vfio/container: Introduce TYPE_HOST_IOMMU_DEVICE_LEGACY_VFIO device
  - backends/host_iommu_device: Introduce HostIOMMUDeviceCaps
  - backends: Introduce HostIOMMUDevice abstract
  - vfio/iommufd: Remove CONFIG_IOMMUFD usage
  - vfio/spapr: Extend VFIOIOMMUOps with a release handler
  - vfio/spapr: Only compile sPAPR IOMMU support when needed
  - vfio/iommufd: Introduce a VFIOIOMMU iommufd QOM interface
  - vfio/spapr: Introduce a sPAPR VFIOIOMMU QOM interface
  - vfio/container: Intoduce a new VFIOIOMMUClass::setup handler
  - vfio/container: Introduce a VFIOIOMMU legacy QOM interface
  - vfio/container: Introduce a VFIOIOMMU QOM interface
  - vfio/container: Initialize VFIOIOMMUOps under vfio_init_container()
  - vfio/container: Introduce vfio_legacy_setup() for further cleanups
  - docs/devel: Add VFIO iommufd backend documentation
  - vfio: Introduce a helper function to initialize VFIODevice
  - vfio/ccw: Move VFIODevice initializations in vfio_ccw_instance_init
  - vfio/ap: Move VFIODevice initializations in vfio_ap_instance_init
  - vfio/platform: Move VFIODevice initializations in vfio_platform_instance_init
  - vfio/pci: Move VFIODevice initializations in vfio_instance_init
  - hw/i386: Activate IOMMUFD for q35 machines
  - kconfig: Activate IOMMUFD for s390x machines
  - hw/arm: Activate IOMMUFD for virt machines
  - vfio: Make VFIOContainerBase poiner parameter const in VFIOIOMMUOps callbacks
  - vfio/ccw: Make vfio cdev pre-openable by passing a file handle
  - vfio/ccw: Allow the selection of a given iommu backend
  - vfio/ap: Make vfio cdev pre-openable by passing a file handle
  - vfio/ap: Allow the selection of a given iommu backend
  - vfio/platform: Make vfio cdev pre-openable by passing a file handle
  - vfio/platform: Allow the selection of a given iommu backend
  - vfio/pci: Make vfio cdev pre-openable by passing a file handle
  - vfio/pci: Allow the selection of a given iommu backend
  - vfio/iommufd: Enable pci hot reset through iommufd cdev interface
  - vfio/pci: Introduce a vfio pci hot reset interface
  - vfio/pci: Extract out a helper vfio_pci_get_pci_hot_reset_info
  - vfio/iommufd: Add support for iova_ranges and pgsizes
  - vfio/iommufd: Relax assert check for iommufd backend
  - vfio/iommufd: Implement the iommufd backend
  - vfio/common: return early if space isn't empty
  - util/char_dev: Add open_cdev()
  - backends/iommufd: Introduce the iommufd object
  - vfio/spapr: Move hostwin_list into spapr container
  - vfio/spapr: Move prereg_listener into spapr container
  - vfio/spapr: switch to spapr IOMMU BE add/del_section_window
  - vfio/spapr: Introduce spapr backend and target interface
  - vfio/container: Implement attach/detach_device
  - vfio/container: Move iova_ranges to base container
  - vfio/container: Move dirty_pgsizes and max_dirty_bitmap_size to base container
  - vfio/container: Move listener to base container
  - vfio/container: Move vrdl_list to base container
  - vfio/container: Move pgsizes and dma_max_mappings to base container
  - vfio/container: Convert functions to base container
  - vfio/container: Move per container device list in base container
  - vfio/container: Switch to IOMMU BE set_dirty_page_tracking/query_dirty_bitmap API
  - vfio/container: Move space field to base container
  - vfio/common: Move giommu_list in base container
  - vfio/common: Introduce vfio_container_init/destroy helper
  - vfio/container: Switch to dma_map|unmap API
  - vfio/container: Introduce a empty VFIOIOMMUOps
  - vfio: Introduce base object for VFIOContainer and targeted interface
  - cryptodev: Fix error handling in cryptodev_lkcf_execute_task()
  - hw/xen: Fix xen_bus_realize() error handling
  - hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
  - target/s390x: Fix a typo in s390_cpu_class_init()
  - hw/sd/sdhci: free irq on exit
  - hw/ufs: free irq on exit
  - hw/pci-host/designware: Fix ATU_UPPER_TARGET register access
  - target/i386: Make invtsc migratable when user sets tsc-khz explicitly
  - target/i386: Construct CPUID 2 as stateful iff times > 1
  - target/i386: Enable fdp-excptn-only and zero-fcs-fds
  - target/i386: Don't construct a all-zero entry for CPUID[0xD 0x3f]
  - i386/cpuid: Remove subleaf constraint on CPUID leaf 1F
  - target/i386: pass X86CPU to x86_cpu_get_supported_feature_word
  - target/i386: Raise the highest index value used for any VMCS encoding
  - target/i386: Add VMX control bits for nested FRED support
  - target/i386: Delete duplicated macro definition CR4_FRED_MASK
  - target/i386: Add get/set/migrate support for FRED MSRs
  - target/i386: enumerate VMX nested-exception support
  - vmxcap: add support for VMX FRED controls
  - target/i386: mark CR4.FRED not reserved
  - target/i386: add support for FRED in CPUID enumeration
  - target/i386: fix feature dependency for WAITPKG
  - target/i386: Add more features enumerated by CPUID.7.2.EDX
  - net: fix build when libbpf is disabled, but libxdp is enabled
  - hw/nvme: fix invalid endian conversion
  - hw/nvme: fix invalid check on mcl
  - backends/cryptodev: Do not ignore throttle/backends Errors
  - backends/cryptodev: Do not abort for invalid session ID
  - virtcca: add kvm isolation when get tmi version.
  - qga: Don't daemonize before channel is initialized
  - qga: Add log to guest-fsfreeze-thaw command
  - backends: VirtCCA: cvm_gpa_start supports both 1GB and 3GB
  - BUGFIX: Enforce isolation for virtcca_shared_hugepage
  - arm: VirtCCA: qemu CoDA support UEFI boot
  - arm: VirtCCA: Compatibility with older versions of TMM and the kernel
  - arm: VirtCCA: qemu uefi boot support kae
  - arm: VirtCCA: CVM support UEFI boot


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-31
changelog:
  - target/arm: Change arm_cpu_mp_affinity when enabled IPIV feature
  - fw_cfg: Don't set callback_opaque NULL in fw_cfg_modify_bytes_read()


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-32
changelog:
  - target/i386: csv: Release CSV3 shared pages after unmapping DMA
  - target/i386: Add new CPU model ClearwaterForest
  - target/i386: add sha512, sm3, sm4 feature bits
  - docs: Add GNR, SRF and CWF CPU models
  - target/i386: Export BHI_NO bit to guests
  - target/i386: Introduce SierraForest-v2 model
  - vdpa/iommufd:Implement DMA mapping through the iommufd interface
  - vdpa/iommufd:Introduce vdpa-iommufd module
  - vdpa/iommufd:support associating iommufd backend for vDPA devices
  - Kconfig/iommufd/VDPA: Update IOMMUFD module configuration dependencies The vDPA module can also use IOMMUFD like the VFIO module. 
  - backends/iommufd: Get rid of qemu_open_old()
  - backends/iommufd: Make iommufd_backend_*() return bool
  - backends/iommufd: Fix missing ERRP_GUARD() for error_prepend()
  - backends/iommufd: Remove mutex
  - backends/iommufd: Remove check on number of backend users
  - hw/intc: Add extioi ability of 256 vcpu interrupt routing
  - hw/rtc: Fixed loongson rtc emulation errors
  - hw/loongarch/boot: Adjust the loading position of the initrd
  - target/loongarch: Fix the cpu unplug resource leak
  - target/loongarch: fix vcpu reset command word issue
  - vdpa:Fix dirty page bitmap synchronization not done after suspend for vdpa devices


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-33
changelog:
  - arm: cvm: fix arm-softmmu build on x86 platform
  - arm: VirtCCA: fix arm-softmmu build on x86 platform
  - hw/arm/virt: HDBSS: fix arm-softmmu build on x86 platform
  - hw/arm/virt: decouple migrate_hdbss_buffer_size() with kvm_update_hdbss_cap()
  - hw/arm/virt: only support the HDBSS feature in aarch64
  - multifd: bugfix for incorrect migration data with qatzip compression
  - multifd: bugfix for incorrect migration data with QPL compression
  - multifd: bugfix for migration using compression methods
  - migration/multifd: Zero p->flags before starting filling a packet
  - migration/multifd: Ensure packet->ramblock is null-terminated
  - migration/multifd: Fix rb->receivedmap cleanup race
  - migration/multifd: Fix loop conditions in multifd_zstd_send_prepare and multifd_zstd_recv
  - tests/migration: Add integration test for 'qatzip' compression method
  - migration: Introduce 'qatzip' compression method
  - migration: Add migration parameters for QATzip
  - meson: Introduce 'qatzip' feature to the build system
  - docs/migration: add qatzip compression feature
  - migration/multifd: Fix p->iov leak in multifd-uadk.c
  - tests/migration-test: add uadk compression test
  - migration/multifd: Switch to no compression when no hardware support
  - migration/multifd: Add UADK based compression and decompression
  - migration/multifd: Add UADK initialization
  - migration/multifd: add uadk compression framework
  - configure: Add uadk option
  - docs/migration: add uadk compression feature
  - configure: add --enable-qpl build option
  - migration/multifd: implement qpl compression and decompression
  - migration/multifd: implement initialization of qpl compression
  - migration/multifd: include ram.h in multifd.h
  - migration/multifd: add qpl compression method
  - migration/multifd: put IOV initialization into compression method
  - docs/migration: add qpl compression feature
  - migration/multifd: solve zero page causing multiple page faults
  - migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page.
  - migration/multifd: Implement zero page transmission on the multifd thread
  - migration/multifd: Add new migration option zero-page-detection
  - migration/multifd: Allow multifd without packets
  - migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data
  - migration/multifd: Cleanup multifd_recv_sync_main
  - tests/migration: Set compression level in migration tests
  - migration: Properly apply migration compression level parameters
  - migration/multifd: Drop unnecessary helper to destroy IOC
  - migration/multifd: Cleanup outgoing_args in state destroy
  - migration/multifd: Make multifd_channel_connect() return void
  - migration/multifd: Drop registered_yank
  - migration/multifd: Cleanup TLS iochannel referencing
  - migration/multifd: Release recv sem_sync earlier
  - migration/multifd: Remove p->quit from recv side
  - migration/multifd: Add a synchronization point for channel creation
  - migration/multifd: Unify multifd and TLS connection paths
  - migration/multifd: Move multifd_send_setup into migration thread
  - migration/multifd: Move multifd_send_setup error handling in to the function
  - migration/multifd: Remove p->running
  - migration/multifd: Join the TLS thread
  - migration: Fix logic of channels and transport compatibility check
  - migration/multifd: Optimize sender side to be lockless
  - migration/multifd: Stick with send/recv on function names
  - migration/multifd: Cleanup multifd_load_cleanup()
  - migration/multifd: Cleanup multifd_save_cleanup()
  - migration/multifd: Rewrite multifd_queue_page()
  - migration/multifd: Change retval of multifd_send_pages()
  - migration/multifd: Change retval of multifd_queue_page()
  - migration/multifd: Split multifd_send_terminate_threads()
  - migration/multifd: Forbid spurious wakeups
  - migration/multifd: Move header prepare/fill into send_prepare()
  - migration/multifd: Move trace_multifd_send|recv()
  - migration/multifd: Move total_normal_pages accounting
  - migration/multifd: Rename p->num_packets and clean it up
  - migration/multifd: Drop pages->num check in sender thread
  - migration/multifd: Simplify locking in sender thread
  - migration/multifd: Separate SYNC request with normal jobs
  - migration/multifd: Drop MultiFDSendParams.normal[] array
  - migration/multifd: Postpone reset of MultiFDPages_t
  - migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths
  - migration/multifd: multifd_send_kick_main()
  - migration/multifd: Drop stale comment for multifd zero copy
  - docs/migration: Further move virtio to be feature of migration
  - docs/migration: Further move vfio to be feature of migration
  - docs/migration: Organize "Postcopy" page
  - docs/migration: Split "dirty limit"
  - docs/migration: Split "Postcopy"
  - docs/migration: Split "Debugging" and "Firmware"
  - docs/migration: Split "Backwards compatibility" separately
  - docs/migration: Convert virtio.txt into rST
  - docs/migration: Create index page
  - docs/migration: Create migration/ directory
  - tests/qtest: Re-enable multifd cancel test
  - tests/qtest/migration: Use the new migration_test_add
  - tests/qtest/migration: Add a wrapper to print test names
  - tests/qtest/migration: Print migration incoming errors
  - migration: Report error in incoming migration
  - migration/multifd: Change multifd_pages_init argument
  - migration/multifd: Remove QEMUFile from where it is not needed
  - migration/multifd: Remove MultiFDPages_t::packet_num
  - migration/multifd: Remove unnecessary usage of local Error
  - migration: Fix migration_channel_read_peek() error path
  - migration/multifd: Remove error_setg() in migration_ioc_process_incoming()
  - migration/multifd: Fix leaking of Error in TLS error flow
  - migration/multifd: Simplify multifd_channel_connect() if else statement
  - migration/multifd: Fix error message in multifd_recv_initial_packet()
  - hw/arm/virt: support the HDBSS feature


author: Jiabo Feng <fengjiabo1@huawei.com> - 11:8.2.0-34
changelog:
  - target/arm: support the IPIV feature
  - Revert "target/arm: Change arm_cpu_mp_affinity when enabled IPIV feature"
  - vdpa/iommufd: All vdpa devices perform only one log_sync each time.
  - memory:Optimize flatview ioeventfd processing
  - memory/eventfd:Introduce ioeventfd batch processing to reduce the time required to update ioeventfd
  - migration/memory:Optimize unnecessary memory region updates during live migration
  - migration:Extand the fdtable in the incoming phase of migration
  - virtio/irqfd: Batch processing of irqfd related operations during virtio device startup
  - kvm/msi: Mark whether there is an IRQ route table update through changes
  - virtio-pci:Batch processing of IRQFD mapping for multi queue Virtio devices


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-35
changelog:
  - Fix error in virtCCA CoDA scenario.
  - Revert "backends/iommufd: Make iommufd_backend_*() return bool"


author: Qizhi Zhang <zhangqizhi3@h-partners.com> - 0.8.0-8
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:Add some improvements and add new modules to HiSilicon common section


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 50.0-10
changelog:
  - Type: requirement
  - ID: NA
  - SUG: NA
  - DESC: Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: Funda Wang <fundawang@yeah.net> - 50.0-14
changelog:
  - adopt to new cmake macro
  - migrated to SPDX license
  - drop useless setup macro, cause it duplicates with autosetup
  - drop useless ldconfig_scriptlets, it has been done through glibc's
    filetriggers since openeuler 1.0


author: Xinghai Cen <cenxinghai@h-partners.com> - 50.0-17
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Fix coredump during QP destruction when send_cq == recv_cq


author: shixuantong <shixuantong1@huawei.com> - 8.2-4
changelog:
  - Add shell command to switch bracketed-paste mode from on to off to keep consistent with realine-8.0


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: zouzhimin <zouzhimin@kylinos.cn> - 4.13.0-13
changelog:
  - nfsserver: fix "server scope" functionality for both potentially other dropins AND multiple ExecStart


author: zouzhimin <zouzhimin@kylinos.cn> - 4.15.1-1
changelog:
  - update to 4.15.1
  - IPaddr2: dont fail with "IPv4 does not support lvs_ipv6_addrlabel"
    error, as the parameter is not used in IPv4 scenarioes


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.18-5
changelog:
  - revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: zhangyaqi <zhangyaqi@kylinos.cn> - 8.2312.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak in omazureeventhubs on accepted PN_DELIVERY event


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2312.0-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix passing the value to EscapeChar
         Do not free the uninitialized cstring
         Keep original free pattern
         network subsystem: improve connection failure error message
         Fix runConf NULL pointer refence
         rainerscript: do not try to call a function if it does not exist
         nsd_ptcp regression fix: remove debugging messages emited to stderr
         Fix legacy $ActionQueueDiscardMark parameter


author: xinghe <xinghe2@h-partners.com> - 8.17.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:extending the certificate validate period
         remove redundant patches


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 2:4.14.3-1
changelog:
  - update version to 4.14.3
    -Avoid null pointer dereference
    -Update utmp at an initial login
    -Merge libshadow and libmisc into a single libshadow
    -Adding the userdel and groupdel hooks to release tarball


author: yaqiangchen <chenyaqiang@huawei.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: lingsheng <lingsheng1@h-partners.com> - 6.04-16
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: fuanan <fuanan3@h-partners.com> - 255-42
changelog:
  - backport: sync patches from systemd community
    add backport-run-pass-the-pty-slave-fd-to-transient-service.patch
        backport-run-do-not-pass-the-pty-slave-fd-to-transient-servic.patch


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: liuchao <liuchao173@huawei.com> - 2.21.0-1
changelog:
  - upgrade to 2.21.0:
    - api: fixed stop method not to require any parameter
    - plugin_scheduler: fix perf fd leaks
    - allow skipping rollback when restarting TuneD or switching profile
    - function_calc_isolated_cores: no errors for offline CPUs
    - sap-hana: new profile sap-hana-kvm-guest
    - serialized SIGHUP handler to prevent possible bootcmdline corruption
    - fixed possible traceback on SIGHUP
    - updated manual pages to be consistent
    - tuned-adm: better error message for unauthorized switch_profile
    - plugin_sysctl: report reapplied sysctls only on different values
    - plugin_cpu: added support for pm_qos_resume_latency_us
    - plugin_cpu: added support for intel_pstate scaling driver
    - plugin_scheduler: do not leak FDs from the perf
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
    - throughput-performance: set net.core.somaxconn to at least 2048
    - API: added support for moving devices between instances
    - added support for the API access through the Unix Domain Socket
    - D-Bus: send tracebacks through D-Bus only in debug mode
    - Makefile: added fix for python-3.12
    - do not exit on duplicate config lines


author: ZhaoYu Jiang <jiangzhaoyu@kylinos.cn> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)
    - tuned-ppd: fixed controller init to correctly set_on_battery


author: tianmuyang <tianmuyang@huawei.com> - 2.24.1-4
changelog:
  - profiles: add programmable scheduling based on eBPF
  - package:  change package tuned to architecture-dependent


author: langfei<langfei@huawei.com> - 2022g-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: langfei <langfei@huawei.com> - 2024a-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees;
  -	No need for America/Coyhaique in zonenow.tab.


author: zhangyao <zhangyao108@huawei.com> - 2.39.1-15
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport community patches
          backport-sys-utils-setpriv-fix-potential-memory-leak.patch
          backport-sys-utils-save_adjtime-fix-memory-leak.patch
          backport-wall-fix-possible-memory-leak.patch
          backport-suL-fix-use-after-free-on-error.patch


author: yuanchicheng <chicheng.oerv@isrc.iscas.ac.cn> - 2.39.1-17
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport community patches
          backport-lscpu-add-riscv-cputype-support.patch


author: zhangyao <zhangyao108@huawei.com> - 2.39.1-19
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport community patches
         [add] backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch
         backport-libblkid-fix-potential-memory-leaks.patch
         backport-sys-utils-fix-add-NULL-check-for-mnt_fs_get_target-r.patch
         backport-sulogin-fix-POSIX-locale-use.patch
         backport-setpriv.c-fix-memory-leak-in-parse_groups-function.patch
         backport-whereis-avoid-accessing-uninitialized-memory.patch
         backport-dmesg-fix-notime-use.patch


author: zhangting <dev03303@linx-info.com> - 2.39.1-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix an issue that mkfs.bfs fix memory leak
  	mkfs.bfs-fix-memory-leaks-and-weak-code.patch


author: hugel <gengqihu2@h-partners.com> - 2.39.1-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert community patch
         [del] backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch


author: lutong <lutong14@huawei.com> - 1.1-9
changelog:
  - bugfix:fixed display error caused by missing signal_exits & revert change method of getting domain id


author: yanglu <yanglu72@h-partners.com> -1.20.11-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix regression caused by the fix for CVE-2024-0229 
         fix use after free related to CVE-2024-21886


author: shuaijiakun <shuaijiakun1288@phytium.com.cn> -1.20.11-32
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:fix display error for ps23xx when using ast and pe2201 bmc card.


author: Funda Wang <fundawang@yeah.net> - 1.20.11-37
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


