# changelog

author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.4.135
changelog:
  - !21886 urma: fix peer reconnection notification after ubagg failover
  - urma: fix peer reconnection notification after ubagg failover
  - urma: add configurable retransmission count limit
  - urma: fix tjetty creation anomaly in the first connection creation
  - !21879 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-147.0.0 to 6.6.0-148.0.0
  - urma: fix kernel irq profiling
  - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics
  - xSched/cgroup: prevent to init xse when xcu cgroup is disabled
  - urma: fix the panic issue caused by ipourma abnormal exit
  - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check
  - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume
  - net: macb: Introduce gem_init_rx_ring()
  - net: macb: queue tie-off or disable during WOL suspend
  - net: macb: Shuffle the tx ring before enabling tx
  - net: macb: Fix tx/rx malfunction after phy link down and up
  - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race
  - net: openvswitch: Avoid releasing netdev before teardown completes
  - ext4: fix error message when rejecting the default hash
  - ext4: filesystems without casefold feature cannot be mounted with siphash
  - Revert "iommu/amd: Skip enabling command/event buffers for kdump"
  - firmware: arm_scmi: Fix unused notifier-block in unregister
  - tty: fix tty_port_tty_*hangup() kernel-doc
  - pwm: stm32: Always program polarity
  - virtio_console: fix order of fields cols and rows
  - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result()
  - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs()
  - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration()
  - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions()
  - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out()
  - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate()
  - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of()
  - mm/damon/tests/core-kunit: handle memory failure from damon_test_target()
  - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two()
  - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of()
  - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at()
  - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions()
  - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter()
  - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ()
  - net: Allow to use SMP threads for backlog NAPI.
  - net: Remove conditional threaded-NAPI wakeup based on task state.
  - sched/fair: Small cleanup to sched_balance_newidle()
  - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions()
  - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail()
  - media: mediatek: vcodec: Use spinlock for context list protection lock
  - media: amphion: Remove vpu_vb_is_codecconfig
  - media: amphion: Make some vpu_v4l2 functions static
  - media: amphion: Add a frame flush mode for decoder
  - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit
  - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages
  - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize()
  - mm/balloon_compaction: we cannot have isolated pages in the balloon list
  - media: verisilicon: Fix CPU stalls on G2 bus error
  - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets
  - media: verisilicon: Store chroma and motion vectors offset
  - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes()
  - f2fs: use global inline_xattr_slab instead of per-sb slab cache
  - f2fs: fix to propagate error from f2fs_enable_checkpoint()
  - f2fs: fix to avoid updating compression context during writeback
  - f2fs: drop inode from the donation list when the last file is closed
  - f2fs: keep POSIX_FADV_NOREUSE ranges
  - f2fs: remove unused GC_FAILURE_PIN
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
  - powerpc/64s/radix/kfence: map __kfence_pool at page granularity
  - drm/mediatek: Fix probe resource leaks
  - drm/mediatek: Fix probe memory leak
  - drm/amdgpu: Forward VMID reservation errors
  - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration
  - pmdomain: imx: Fix reference count leak in imx_gpc_probe()
  - pmdomain: Use device_get_match_data()
  - wifi: mac80211: Discard Beacon frames to non-broadcast address
  - lockd: fix vfs_test_lock() calls
  - mptcp: fallback earlier on simult connection
  - PCI: brcmstb: Fix disabling L0s capability
  - ARM: dts: microchip: sama7g5: fix uart fifo size to 32
  - gpiolib: acpi: Add quirk for Dell Precision 7780
  - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap
  - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error
  - usb: ohci-nxp: fix device leak on probe failure
  - usb: ohci-nxp: Use helper function devm_clk_get_enabled()
  - mm/ksm: fix exec/fork inheritance support for prctl
  - wifi: mt76: Fix DTS power-limits on little endian systems
  - btrfs: don't rewrite ret from inode_permission
  - gfs2: fix freeze error handling
  - jbd2: fix the inconsistency between checksum and data in memory for journal sb
  - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
  - ALSA: wavefront: Clear substream pointers on close
  - ALSA: wavefront: Use guard() for spin locks
  - ALSA: wavefront: Fix integer overflow in sample size validation
  - ALSA: wavefront: Use standard print API
  - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb
  - drm/msm/dpu: Add missing NULL pointer check for pingpong interface
  - drm/mgag200: Fix big-endian support
  - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse()
  - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg()
  - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers
  - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma
  - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open()
  - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
  - net: usb: sr9700: fix incorrect command used to write single register
  - nfsd: Drop the client reference in client_states_open()
  - LoongArch: BPF: Zero-extend bpf_tail_call() index
  - fjes: Add missing iounmap in fjes_hw_init()
  - samples/ftrace: Adjust LoongArch register restore order in direct calls
  - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting
  - idr: fix idr_alloc() returning an ID out of range
  - kasan: refactor pcpu kasan vmalloc unpoison
  - compiler_types.h: add "auto" as a macro for "__auto_type"
  - LoongArch: Use unsigned long for _end and _text
  - LoongArch: Use __pmd()/__pte() for swap entry conversions
  - LoongArch: Fix build errors for CONFIG_RANDSTRUCT
  - LoongArch: Add new PCI ID for pci_fixup_vgadev()
  - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init()
  - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe
  - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe
  - media: amphion: Cancel message work before releasing the VPU core
  - media: vpif_display: fix section mismatch
  - media: vpif_capture: fix section mismatch
  - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path
  - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index
  - media: TDA1997x: Remove redundant cancel_delayed_work in probe
  - media: samsung: exynos4-is: fix potential ABBA deadlock on init
  - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled
  - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread()
  - media: cec: Fix debugfs leak on bus_register() failure
  - fbdev: tcx.c fix mem_map to correct smem_start offset
  - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing
  - fbdev: gbefb: fix to use physical address instead of dma address
  - dm-bufio: align write boundary on physical block size
  - dm-ebs: Mark full buffer dirty even on partial write
  - firmware: stratix10-svc: Add mutex in stratix10 memory management
  - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()
  - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION
  - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi()
  - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace
  - media: rc: st_rc: Fix reset control resource leak
  - mfd: max77620: Fix potential IRQ chip conflict when probing two devices
  - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup
  - clk: samsung: exynos-clkout: Assign .num before accessing .hws
  - leds: leds-lp50xx: Enable chip before any communication
  - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs
  - leds: leds-lp50xx: Allow LED 0 to be added to module bank
  - powerpc, mm: Fix mprotect on book3s 32-bit
  - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths
  - HID: logitech-dj: Remove duplicate error logging
  - iommu: disable SVA when CONFIG_X86 is set
  - iommu/tegra: fix device leak on probe_device()
  - iommu/sun50i: fix device leak on of_xlate()
  - iommu/qcom: fix device leak on of_xlate()
  - iommu/omap: fix device leaks on probe_device()
  - iommu/mediatek: fix device leak on of_xlate()
  - iommu/mediatek-v1: fix device leaks on probe()
  - iommu/mediatek-v1: fix device leak on probe_device()
  - iommu/ipmmu-vmsa: fix device leak on of_xlate()
  - iommu/exynos: fix device leak on of_xlate()
  - iommu/apple-dart: fix device leak on of_xlate()
  - iommu/amd: Fix pci_segment memleak in alloc_pci_segment()
  - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment.
  - ASoC: qcom: q6adm: the the copp device only during last instance
  - ASoC: qcom: q6asm-dai: perform correct state check before closing
  - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr
  - ASoC: stm32: sai: fix OF node leak on probe
  - ASoC: stm32: sai: fix clk prepare imbalance on probe failure
  - ASoC: stm32: sai: fix device leak on probe
  - ntfs: Do not overwrite uptodate pages
  - selftests/ftrace: traceonoff_triggers: strip off names
  - RDMA/bnxt_re: fix dma_free_coherent() pointer
  - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation
  - ksmbd: Fix memory leak in get_file_all_info()
  - RDMA/bnxt_re: Fix to use correct page size for PDE table
  - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send
  - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db()
  - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr()
  - RDMA/efa: Remove possible negative shift
  - RDMA/irdma: avoid invalid read in irdma_net_event
  - net: rose: fix invalid array index in rose_kill_by_device()
  - net: stmmac: fix the crash issue for zero copy XDP_TX action
  - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error"
  - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing
  - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct
  - net: dsa: b53: skip multicast entries for fdb_dump()
  - firewire: nosy: Fix dma_free_coherent() size
  - genalloc.h: fix htmldocs warning
  - selftests: net: fix "buffer overflow detected" for tap.c
  - amd-xgbe: reset retries and mode on RX adapt failures
  - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic
  - platform/x86: msi-laptop: add missing sysfs_remove_group()
  - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy
  - net: mdio: aspeed: add dummy read to avoid read-after-write issue
  - Bluetooth: btusb: revert use of devm_kzalloc in btusb
  - i40e: fix scheduling in set_rx_mode
  - wifi: mac80211: do not use old MBSSID elements
  - iommu/mediatek: fix use-after-free on probe deferral
  - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32
  - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU
  - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU
  - hwmon: (max16065) Use local variable to avoid TOCTOU
  - i2c: amd-mp2: fix reference leak in MP2 PCI device
  - platform/x86: intel: chtwc_int33fe: don't dereference swnode args
  - rpmsg: glink: fix rpmsg device leak
  - ub: udma: fix a bug related to get tp list.
  - perf/core: Fix race between perf_event_exit_task and perf_pending_task
  - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx
  - mm/mremap: fix WARN with uffd that has remap events disabled
  - mm: clear uffd-wp PTE/PMD state on mremap()
  - userfaultfd: move userfaultfd_ctx struct to header file
  - urma: add timeout mechanism for TP state waiting loop
  - ub: udma: bugfix related to stars jfc db.
  - net: usb: kaweth: validate USB endpoints
  - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys
  - RDMA/hns: Support setting GSI QP SL
  - RDMA/hns: Fix warning in poll cq direct mode
  - RDMA/hns: Fix missing CQE when UD QP use different SL
  - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz
  - xsk: introduce helper to determine rxq->frag_size
  - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse()
  - urma: fix log implementation in urma kmod
  - urma: fix deactivate tp failure under RM share TP mode
  - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check
  - smb: client: fix krb5 mount with username option
  - io_uring/poll: fix multishot recv missing EOF on wakeup race
  - io_uring/poll: improve readability of poll reference decrementing
  - LoongArch: efi: avoid double calling set_virtual_map()
  - LoongArch: Fix the improper handling of the set_virtual_map's return value
  - LoongArch: Disable instrumentation for setup_ptwalker()
  - LoongArch: Remove some code if kasan_arch_is_ready() is false
  - LoongArch: entry: Migrate ret_from_fork() to C
  - LoongArch: Clarify 3 MSG interrupt features
  - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN
  - drivers/amdgpu: amd rx550 should emit 10 fences after run a command
  - LoongArch: Fix AP booting issue in VM mode
  - LoongArch: Increase COMMAND_LINE_SIZE up to 4096
  - LoongArch: Relax memory ordering for atomic operations
  - pci/quirks: 2k3000: set discrete GPU as default boot device if present
  - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content
  - urma: fix of adapt to bondp_import
  - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
  - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors
  - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()
  - net/sched: teql: Fix double-free in teql_master_xmit
  - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case
  - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()
  - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()
  - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n
  - ipv6: add NULL checks for idev in SRv6 paths
  - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
  - sunrpc: fix cache_request leak in cache_release
  - urma: fix psn exchange anomaly when import jfr
  - mfs: fix race condition issue in try_hook_fd()
  - drivers/loongson-pwm: sync master patch to fix pwm driver
  - LoongArch:stmmac:fix mdc too high issues.
  - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE
  - drivers/pwm: export symbol for pwm_add_table
  - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm'
  - urma: fix psn exchange anomaly under share_tp mode
  - RNP: NET: Update driver to 1.0.0
  - RNPGBE: NET: Update driver to 1.0.0
  - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown
  - intel_th: fix device leak on output open()
  - usb: gadget: lpc32xx_udc: fix clock imbalance in error path
  - Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
  - efi/cper: Fix cper_bits_to_str buffer handling and return value
  - soc: amlogic: canvas: fix device leak on lookup
  - soc: qcom: ocmem: fix device leak on lookup
  - tracing: Fix fixed array of synthetic event
  - amba: tegra-ahb: Fix device leak on SMMU enable
  - crypto: caam - Add check for kcalloc() in test_len()
  - selftests: openvswitch: Fix escape chars in regexp.
  - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
  - s390/ipl: Clear SBP flag when bootprog is set
  - btrfs: don't log conflicting inode if it's a dir moved in the current transaction
  - svcrdma: return 0 on success from svc_rdma_copy_inline_range
  - nfsd: Mark variable __maybe_unused to avoid W=1 build break
  - net/handshake: restore destructor on submit failure
  - r8169: fix RTL8117 Wake-on-Lan in DASH mode
  - xfs: fix a memory leak in xfs_buf_item_init()
  - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits
  - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN)
  - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN
  - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation
  - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN
  - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE
  - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn()
  - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0
  - parisc: Do not reprogram affinitiy on ASP chip
  - scs: fix a wrong parameter in __scs_magic
  - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver
  - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI)
  - ocfs2: fix kernel BUG in ocfs2_find_victim_chain
  - media: vidtv: initialize local pointers upon transfer of memory ownership
  - tools/testing/nvdimm: Use per-DIMM device handle
  - f2fs: fix return value of f2fs_recover_fsync_data()
  - f2fs: fix age extent cache insertion skip on counter overflow
  - f2fs: invalidate dentry cache on failed whiteout creation
  - f2fs: fix to avoid updating zero-sized extent in extent cache
  - f2fs: ensure node page reads complete before f2fs_put_super() finishes
  - NFSD: use correct reservation type in nfsd4_scsi_fence_client
  - scsi: aic94xx: fix use-after-free in device removal path
  - cpufreq: nforce2: fix reference count leak in nforce2
  - cpuidle: governors: teo: Drop misguided target residency check
  - intel_th: Fix error handling in intel_th_output_open
  - char: applicom: fix NULL pointer dereference in ac_ioctl
  - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc()
  - usb: dwc3: keep susphy enabled during exit to avoid controller faults
  - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe
  - usb: phy: isp1301: fix non-OF device reference imbalance
  - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal
  - USB: lpc32xx_udc: Fix error handling in probe
  - phy: broadcom: bcm63xx-usbh: fix section mismatches
  - media: pvrusb2: Fix incorrect variable used in trace message
  - usb: usb-storage: Maintain minimal modifications to the bcdDevice range.
  - media: v4l2-mem2mem: Fix outdated documentation
  - jbd2: use a weaker annotation in journal handling
  - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key
  - ext4: fix incorrect group number assertion in mb_check_buddy
  - ktest.pl: Fix uninitialized var in config-bisect.pl
  - kallsyms: Fix wrong "big" kernel symbol type read from procfs
  - floppy: fix for PAGE_SIZE != 4KB
  - block: rate-limit capacity change info log
  - s390/dasd: Fix gendisk parent after copy pair swap
  - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit
  - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition
  - vhost/vsock: improve RCU read sections around vhost_vsock_get()
  - block: rnbd-clt: Fix signedness bug in init_dev()
  - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks
  - nvme-fc: don't hold rport lock when putting ctrl
  - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware
  - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map
  - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
  - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive.
  - usb: xhci: limit run_graceperiod for only usb 3.0 devices
  - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains
  - usbip: Fix locking bug in RT-enabled kernels
  - exfat: fix remount failure in different process environments
  - reset: fix BIT macro reference
  - via_wdt: fix critical boot hang due to unnamed resource allocation
  - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write
  - fuse: Always flush the page cache before FOPEN_DIRECT_IO write
  - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp
  - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive
  - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled
  - powerpc/addnote: Fix overflow on 32-bit builds
  - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4
  - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
  - firmware: imx: scu-irq: Init workqueue before request mbox channel
  - ipmi: Fix __scan_channels() failing to rescan channels
  - ipmi: Fix the race between __scan_channels() and deliver_response()
  - ALSA: usb-mixer: us16x08: validate meter packet indices
  - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path
  - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path
  - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()
  - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml
  - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig
  - spi: fsl-cpm: Check length parity before switching to 16 bit mode
  - can: gs_usb: gs_can_open(): fix error handling
  - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table
  - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation
  - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
  - ksmbd: fix buffer validation by including null terminator size in EA length
  - ksmbd: skip lock-range check on equal size to avoid size==0 underflow
  - block: rnbd-clt: Fix leaked ID in init_dev()
  - spi: cadence-quadspi: Fix clock disable on probe failure path
  - x86/xen: Fix sparse warning in enlighten_pv.c
  - x86/xen: Move Xen upcall handler
  - drm/panel: sony-td4353-jdi: Enable prepare_prev_first
  - MIPS: Fix a reference leak bug in ip22_check_gio()
  - hwmon: (tmp401) fix overflow caused by default conversion rate value
  - hwmon: (ibmpex) fix use-after-free in high/low store
  - net: enetc: do not transmit redirected XDP frames when the link is down
  - net/handshake: duplicate handshake cancellations leak socket
  - net/mlx5: Serialize firmware reset with devlink
  - net/mlx5: Skip HotPlug check on sync reset using hot reset
  - net/mlx5: fw_tracer, Handle escaped percent properly
  - net/mlx5: Drain firmware reset in shutdown callback
  - net/mlx5: fw reset, clear reset requested on drain_fw_reset
  - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED
  - netfilter: nf_tables: pass context structure to nft_parse_register_load
  - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr()
  - caif: fix integer underflow in cffrml_receive()
  - broadcom: b44: prevent uninitialized value usage
  - mlxsw: spectrum_router: Fix possible neighbour reference count leak
  - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2()
  - netrom: Fix memory leak in nr_sendmsg()
  - net: fec: ERR007885 Workaround for XDP TX path
  - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
  - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
  - ksmbd: vfs: fix race on m_flags in vfs_cache
  - gfs2: fix remote evict for read-only filesystems
  - btrfs: scrub: always update btrfs_scrub_progress::last_physical
  - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet
  - hfsplus: fix volume corruption issue for generic/073
  - hfsplus: Verify inode mode when loading from disk
  - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create
  - hfsplus: fix volume corruption issue for generic/070
  - ntfs: set dummy blocksize to read boot_block when mounting
  - kbuild: Use objtree for module signing key path
  - fs/ntfs3: Support timestamps prior to epoch
  - livepatch: Match old_sympos 0 and 1 in klp_find_func()
  - cpuidle: menu: Use residency threshold in polling state override decisions
  - cpufreq: s5pv210: fix refcount leak
  - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist
  - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only
  - x86/ptrace: Always inline trivial accessors
  - iomap: account for unaligned end offsets when truncating read range
  - btrfs: fix memory leak of fs_devices in degraded seed device path
  - btrfs: fix a potential path leak in print_data_reloc_error()
  - btrfs: do not skip logging new dentries when logging a new name
  - ALSA: dice: fix buffer overflow in detect_stream_formats()
  - usb: phy: Initialize struct usb_phy list_head
  - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
  - net: lan743x: Allocate rings outside ZONE_DMA
  - ocfs2: fix memory leak in ocfs2_merge_rec_left()
  - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
  - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
  - efi/cper: Adjust infopfx size to accept an extra space
  - efi/cper: Add a new helper function to print bitmasks
  - dm log-writes: Add missing set_freezable() for freezable kthread
  - dm-raid: fix possible NULL dereference with undefined raid type
  - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad()
  - ALSA: firewire-motu: add bounds check in put_user loop for DSP events
  - rtc: gamecube: Check the return value of ioremap()
  - ALSA: uapi: Fix typo in asound.h comment
  - dma/pool: eliminate alloc_pages warning in atomic_pool_expand
  - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
  - nvme-auth: use kvfree() for memory allocated with kvcalloc()
  - ASoC: ak5558: Disable regulator when error happens
  - ASoC: ak4458: Disable regulator when error happens
  - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure()
  - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
  - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
  - NFS: Fix inheritance of the block sizes when automounting
  - Expand the type of nfs_fattr->valid
  - Revert "nfs: clear SB_RDONLY before getting superblock"
  - Revert "nfs: ignore SB_RDONLY when remounting nfs"
  - NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
  - NFS: Initialise verifiers for visible dentries in readdir and lookup
  - fs/nls: Fix utf16 to utf8 conversion
  - NFS: Avoid changing nlink when file removes and attribute updates race
  - 9p: fix cache/debug options printing in v9fs_show_options
  - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
  - pinctrl: single: Fix incorrect type for error return variable
  - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling
  - perf tools: Fix split kallsyms DSO counting
  - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
  - clk: keystone: fix compile testing
  - md/raid5: fix IO hang when array is broken with IO inflight
  - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
  - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
  - selftests: bonding: add delay before each xvlan_over_bond connectivity check
  - selftests: bonding: add ipvlan over bond testing
  - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
  - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd
  - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n.
  - ub: cdma: cdma code format issue bugfix
  - i3c: master: Inherit DMA masks and parameters from parent device
  - urma: bugfix ubagg get physical dev info acquisition
  - !21874 urma: add software reliability for create and destroy connection
  - urma: add software reliability for create and destroy connection


author: zhawenrui <zhawenrui@huawei.com> - 6.6.0-145.0.5.136
changelog:
  - !21961 urma: use user-specified ue_idx for bonding import exchange
  - udma：fix ub udma set dev name style
  - ub: udma: Delete the mailbox memory allocation and release in UDMA
  - ub: ubase: Release the MAILBOX memory when AE is received
  - urma: check driver and wq duration for conn_err
  - urma: rate-limit error logs across ubcore
  - urma: fix ubcore_get_device_by_eid without put.
  - urma: use user-specified ue_idx for bonding import exchange
  - urma: fix double put ubagg_dev.
  - urma: fix ubcore_get_device_by_eid uaf.
  - urma: Fix UAF risk in the ubagg_dev_exists function
  - urma: Add rate limiting to log within ubcore_get_tp_list and
  - urma: switch to acalloc for large memory allocation
  - urma: fix wk-jetty send implementation


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.6.137
changelog:
  - !22093 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-148.0.0 to 6.6.0-149.0.0
  - gpio: rockchip: Stop calling pinctrl for set_direction
  - gpio: rockchip: mark the GPIO controller as sleeping
  - ext4: fix error message when rejecting the default hash
  - ext4: filesystems without casefold feature cannot be mounted with siphash
  - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx
  - mm/mremap: fix WARN with uffd that has remap events disabled
  - mm: clear uffd-wp PTE/PMD state on mremap()
  - userfaultfd: move userfaultfd_ctx struct to header file
  - spi: fix statistics allocation
  - Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
  - hwmon: (ibmpex) fix use-after-free in high/low store
  - icmp: fix NULL pointer dereference in icmp_tag_validation()
  - net/sched: act_ife: Fix metalist update behavior
  - net/sched: act_ife: avoid possible NULL deref
  - apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
  - spi: fix use-after-free on controller registration failure
  - PM: runtime: Fix a race condition related to device removal
  - apparmor: fix side-effect bug in match_char() macro usage
  - urma: Kernel-mode file for bugfix to move hashtable from alloc to active
  - ipv6: avoid overflows in ip6_datagram_send_ctl()
  - netfilter: nfnetlink_log: account for netlink header size
  - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
  - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD
  - bpf: Fix incorrect pruning due to atomic fetch precision tracking
  - bpf: reject direct access to nullable PTR_TO_BUF pointers
  - bpf: Reject sleepable kprobe_multi programs at attach time
  - ub: udma: fix a bug related to free rcu mem
  - ub: ubase: Add a soft dependency declaration for the ubase driver
  - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed
  - ub: ubase: Verify the length of ctrlq rq msg
  - ub: ubase: debugfs supports tpg context query
  - perf: Make sure to use pmu_ctx->pmu for groups
  - perf: Fix kabi breakage of perf_output_handle
  - perf: Avoid the read if the count is already updated
  - perf: Extract a few helpers
  - irqchip/mbigen: hardcode gicr_base for HIP12
  - irqchip/mbigen: add HIP12 support for vtimer irq bypass
  - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking
  - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore
  - irqchip/mbigen: add check for GICv4.1 before enabling vtimer
  - gpio: rockchip: Stop calling pinctrl for set_direction
  - gpio: pca953x: fix wrong error probe return value
  - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout
  - ASoC: fsl_sai: Add missing registers to cache default
  - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025
  - ALSA: usb-audio: Update for native DSD support quirks
  - can: j1939: make j1939_session_activate() fail if device is no longer registered
  - drm/amd/display: Fix DP no audio issue
  - powercap: fix sscanf() error return value handling
  - powercap: fix race condition in register_control_type()
  - NFS: trace: show TIMEDOUT instead of 0x6e
  - ALSA: ac97: fix a double free in snd_ac97_controller_register()
  - ALSA: ac97bus: Use guard() for mutex locks
  - HID: quirks: work around VID/PID conflict for appledisplay
  - net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
  - net/mlx5e: Don't print error message due to invalid module
  - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates
  - inet: ping: Fix icmp out counting
  - net: mscc: ocelot: Fix crash when adding interface under a lag
  - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress
  - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
  - netfilter: nf_tables: fix memory leak in nf_tables_newrule()
  - gpio: pca953x: handle short interrupt pulses on PCAL devices
  - gpio: pca953x: Add support for level-triggered interrupts
  - gpio: pca953x: Utilise temporary variable for struct device
  - gpio: pca953x: Utilise dev_err_probe() where it makes sense
  - netfilter: nft_synproxy: avoid possible data-race on update operation
  - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM
  - ARM: dts: imx6q-ba16: fix RTC interrupt level
  - arm64: dts: add off-on-delay-us for usdhc2 regulator
  - scsi: ufs: core: Fix EH failure after W-LUN resume error
  - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset
  - smb/client: fix NT_STATUS_NO_DATA_DETECTED value
  - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value
  - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value
  - NFS: Fix up the automount fs_context to use the correct cred
  - NFSv4: ensure the open stateid seqid doesn't go backwards
  - dm-snapshot: fix 'scheduling while atomic' on real-time kernels
  - alpha: don't reference obsolete termio struct for TC* constants
  - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels
  - csky: fix csky_cmpxchg_fixup not working
  - nfsd: convert to new timestamp accessors
  - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
  - gpio: rockchip: mark the GPIO controller as sleeping
  - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[]
  - drm/pl111: Fix error handling in pl111_amba_probe
  - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
  - counter: 104-quad-8: Fix incorrect return value in IRQ handler
  - lib/crypto: aes: Fix missing MMU protection for AES S-box
  - mei: me: add nova lake point S DID
  - btrfs: always detect conflicting inodes when logging inode refs
  - net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
  - atm: Fix dma_free_coherent() size
  - NFSD: Fix permission check for read access to executable-only files
  - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads
  - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000
  - LoongArch: Adapt upstream backport for openEuler
  - urma: add rate limit for high-frequency error logs in ubmad and ubcm
  - ub:hisi-ubus: add soft dep of ummu for hisi_ubus
  - kprobes: avoid crash when rmmod/insmod after ftrace killed
  - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN
  - sched/fair: Clear rel_deadline when initializing forked entities
  - ub/ubmempfd: Fix issues from AI
  - ub/ubdevshm: Optimize print format
  - ub/ubdevshm: Fix issues from AI.
  - ub/ubdevshm: Bugfix for multi-Ops with same va.
  - ub/ubdevshm: Optimize functions to improve readability.
  - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex
  - sched/ebpf: Fix bpf_sched_set_task_prefer_nid()
  - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed
  - LoongArch: KVM: rename extioi to eiointc
  - LoongArch: KVM: Remove duplicated cache attribute setting
  - LoongArch: KVM: Set page with write attribute if dirty track disabled
  - LoongArch: KVM: Simplify kvm_deliver_intr()
  - LoongArch: KVM: Rework kvm_send_pv_ipi()
  - LoongArch: KVM: Restore guest PMU if it is enabled
  - LoongArch: KVM: Add delay until timer interrupt injected
  - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code
  - LoongArch: KVM: Add PTW feature detection on new hardware
  - LoongArch: KVM: Remove unused returns and semicolons
  - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits
  - LoongArch: KVM: Add ecode parameter for exception handlers
  - LoongArch: KVM: Fully clear some CSRs when VM reboot
  - LoongArch: KVM: Fix multiple typos of KVM code
  - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel()
  - LoongArch: KVM: Remove unnecessary header include path
  - LoongArch: KVM: Set host with kernel mode when switch to VM mode
  - LoongArch: KVM: Fix typo issue about GCFG feature detection
  - LoongArch: KVM: Protect kvm_check_requests() with SRCU
  - LoongArch: KVM: Fix GPA size issue about VM
  - LoongArch: KVM: Adapt pch_pic alignment check
  - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu()
  - LoongArch: KVM: Adapt send_ipi_data() stack protector fix
  - LoongArch: KVM: Make function kvm_own_lbt() robust
  - erofs: add GFP_NOIO in the bio completion if needed
  - mm/rmap: fix incorrect pte restoration for lazyfree folios
  - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure
  - mm: remove boolean output parameters from folio_pte_batch_ext()
  - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags()
  - mm: smaller folio_pte_batch() improvements
  - mm: convert FPB_IGNORE_* into FPB_RESPECT_*
  - mm: fix folio_pte_batch() on XEN PV


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.7.138
changelog:
  - !22148 CVE-2026-31431
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
  - crypto: authencesn - Fix src offset when decrypting in-place
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
  - crypto: authenc - use memcpy_sglist() instead of null skcipher
  - crypto: algif_aead - snapshot IV for async AEAD requests
  - crypto: algif_aead - Revert to operating out-of-place
  - crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  - crypto: scatterwalk - Backport memcpy_sglist()
  - crypto: algif_aead - Fix minimum RX size check for decryption


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.8.139
changelog:
  - !22175 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-149.0.0 to 6.6.0-151.0.0
  - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()
  - netfilter: conntrack: add missing netlink policy validations
  - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
  - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
  - bridge: mrp: reject zero test interval to avoid OOM panic
  - netfilter: ipset: drop logically empty buckets in mtype_del
  - xfrm: prevent policy_hthresh.work from racing with netns teardown
  - netfilter: nft_ct: fix use-after-free in timeout object destroy
  - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION
  - x86/platform/uv: Handle deconfigured sockets
  - x86/CPU: Fix FPDSS on Zen1
  - can: raw: fix ro->uniq use-after-free in raw_rcv()
  - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
  - net: skb: fix cross-cache free of KFENCE-allocated skb head
  - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()
  - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup
  - bfq: Lock when clearing the q->elevator entry
  - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio
  - ext4: publish jinode after initialization
  - ext4: validate p_idx bounds in ext4_ext_correct_indexes
  - ext4: prevent partial update of the extents path
  - ext4: refactor ext4_ext_rm_idx() to index 'path'
  - ext4: reject mount if bigalloc with s_first_data_block != 0
  - ext4: fix use-after-free in update_super_work when racing with umount
  - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
  - platform/x86/amd/pmc: Add support for Van Gogh SoC
  - team: Move team device type change at the end of team_port_add
  - perf/x86: Fix potential bad container_of in intel_pmu_hw_config
  - x86/topo: Fix SNC topology mess
  - x86/topo: Replace x86_has_numa_in_package
  - x86/topo: Add topology_num_nodes_per_package()
  - x86/numa: Store extra copy of numa_nodes_parsed
  - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled
  - x86/smpboot: moves x86_topology to static initialize and truncate
  - x86/smpboot: remove redundant CONFIG_SCHED_SMT
  - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup
  - sched: Move sched domain name out of CONFIG_SCHED_DEBUG
  - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly
  - x86/mm: Don't print out SRAT table information
  - powerpc/smp: Dynamically build Powerpc topology
  - powerpc/smp: Avoid asym packing within thread_group of a core
  - powerpc/smp: Add __ro_after_init attribute
  - powerpc/smp: Disable MC domain for shared processor
  - powerpc/smp: Enable Asym packing for cores on shared processor
  - drm/i915/gt: Check set_default_submission() before deferencing
  - urma: change kzalloc into vzalloc for ubcore
  - ALSA: ctxfi: Limit PTP to a single page
  - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()
  - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete
  - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb
  - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()
  - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop
  - ext4: convert inline data to extents when truncate exceeds inline size
  - af_unix: read UNIX_DIAG_VFS data under unix_state_lock
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown
  - bridge: br_nd_send: linearize skb before parsing ND options
  - net: bonding: fix NULL deref in bond_debug_rlb_hash_show
  - can: gw: fix OOB heap access in cgw_csum_crc8_rel()
  - netfilter: ctnetlink: use netlink policy range checks
  - netfilter: nf_conntrack_expect: skip expectations in other netns via proc
  - mmc: vub300: fix NULL-deref on disconnect
  - X.509: Fix out-of-bounds access when parsing extensions
  - net: fix fanout UAF in packet_release() via NETDEV_UP race
  - af_key: validate families in pfkey_send_migrate()
  - openvswitch: defer tunnel netdev_put to RCU release
  - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear()
  - crypto: af_alg - limit RX SG extraction by receive buffer budget
  - perf/x86/intel: Add missing branch counters constraint apply
  - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface.
  - urma: move variable initialization before use in error branch


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.9.140
changelog:
  - !22247 sync pr 22246: Revert efi/cper ARM CPER type alignment
  - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs"


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.10.141
changelog:
  - !22435 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-151.0.0 to 6.6.0-152.0.0
  - HID: core: Mitigate potential OOB by removing bogus memset()
  - HID: core: Add printk_ratelimited variants to hid_warn() etc
  - HID: multitouch: Check to ensure report responses match the request
  - Bluetooth: MGMT: validate LTK enc_size on load
  - ceph: fix i_nlink underrun during async unlink
  - hwmon: (pmbus/core) Protect regulator operations with mutex
  - hwmon: (pmbus/core) Declare regulator notification function as void
  - dmaengine: idxd: Fix not releasing workqueue on .release()
  - driver/core: Fix kabi broken of platform_device/bus_type/device
  - driver core: platform: use generic driver_override infrastructure
  - hwmon: axi-fan: don't use driver_override as IRQ name
  - driver core: generalize driver_override in struct device
  - ceph: fix memory leaks in ceph_mdsc_build_path()
  - ceph: supply snapshot context in ceph_zero_partial_object()
  - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
  - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt
  - Bluetooth: SMP: derive legacy responder STK authentication from MITM state
  - Bluetooth: MGMT: validate mesh send advertising payload length
  - Bluetooth: hci_event: move wake reason storage into validated event handlers
  - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix
  - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()
  - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()
  - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
  - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject
  - HID: core: clamp report_size in s32ton() to avoid undefined shift
  - HID: alps: fix NULL pointer dereference in alps_raw_event()
  - Input: uinput - fix circular locking dependency with ff-core
  - HID: apple: avoid memory leak in apple_report_fixup()
  - HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
  - mm/userfaultfd: fix hugetlb fault mutex hash calculation
  - rxrpc: proc: size address buffers for %pISpc output
  - dmaengine: idxd: Fix memory leak when a wq is reset
  - net/mlx5: lag: Check for LAG device before creating debugfs
  - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed
  - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
  - blk-iocost: fix busy_level reset when no IOs complete
  - block: use min() instead of min_t()
  - blk-throttle: fix lower bps rate by throtl_trim_slice()
  - block: flush all throttled bios when deleting the cgroup
  - jbd2: increase IO priority of checkpoint
  - blk-throttle: don't take carryover for prioritized processing of metadata
  - blk-throttle: support prioritized processing of metadata
  - blk-throttle: fix lower control under super low iops limit
  - gfs2: fiemap page fault fix
  - x86/apic: Disable x2apic on resume if the kernel expects so
  - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
  - USB: usbcore: Introduce usb_bulk_msg_killable()
  - dmaengine: idxd: Fix possible invalid memory access after FLR
  - drm/ioc32: stop speculation on the drm_compat_ioctl path
  - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU"
  - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0
  - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
  - urma: fix potential parameter overflow in initialization
  - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory
  - crypto: af-alg - fix NULL pointer dereference in scatterwalk
  - tracing: Fix soft lockup when lseeking trace file
  - urma: query resource options by id.
  - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros
  - net: bonding: fix use-after-free in bond_xmit_broadcast()
  - bonding: do not set usable_slaves for broadcast mode
  - net: bonding: update the slave array for broadcast mode
  - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
  - net/sched: cls_flow: fix NULL pointer dereference on shared blocks
  - net: sched: act_csum: validate nested VLAN headers
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets
  - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()
  - xfrm: esp: avoid in-place decrypt on shared skb frags
  - net/sched: sch_netem: fix out-of-bounds access in packet corruption
  - esp: fix skb leak with espintcp and async crypto
  - xfrm: Fix the usage of skb->sk
  - net/sched: cls_fw: fix NULL dereference of "old" filters before change()
  - net/sched: cls_fw: fix NULL pointer dereference on shared blocks
  - mm: memcontrol: don't throttle dying tasks on memory.high
  - futex: Clear stale exiting pointer in futex_lock_pi() retry path
  - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib
  - EDAC/mc: Fix error path ordering in edac_mc_alloc()
  - perf/x86/intel/uncore: Skip discovery table for offline dies


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: Zhipeng Lu <luzhipeng8@h-partners.com> - 1.0-1
changelog:
  - Support resource creation and destruction in CDMA
    user mode, enabling read and write semantic functions
    for CDMA user mode.


author: Zhipeng Lu <luzhipeng8@h-partners.com> - 1.0.1-0
changelog:
  - add version and fix some format and add doc to devel package
  - change the compile command and the usage of so


author: wangkai <13474090681@163.com> - 2.5.31-3
changelog:
  - Fix CVE-2026-40334, CVE-2026-40334, CVE-2026-40338, CVE-2026-40339,
    CVE-2026-40340, CVE-2026-40341


author: yixiangzhike <yixiangzhike007@163.com> - 1.6.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix possible uninitialized variable


author: Yuhao Zhang <yuhao.zhang@huawei.com> - 1.0-2
changelog:
  - add syslog logging for OBMM operations.
  - reassign obmm package version.
  - minor fixes for the code format.
  - normalize return values.


author: xinghe <xinghe2@h-partners.com> - 2:1.6.40-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: xinghe <xinghe2@h-partners.com> - 2.74.3-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-5
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-7
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: nickyang <nickyang228@163.com> - 2.74.3-12
changelog:
  - Type:cves
  - ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
  - SUG:NA
  - DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716


author: nickyang <nickyang228@163.com> - 2.74.3-13
changelog:
  - Type:cves
  - ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
  - SUG:NA
  - DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-5
changelog:
  - Type:CVE
  - Id:CVE-2025-4877 CVE-2025-4878 CVE-2025-5351 CVE-2025-5987 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877CVE-2025-4878CVE-2025-5351CVE-2025-5987CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: yueyuankun<yueyuankun@kylinos.cn> - 1.11.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch to work around strict permissions issues for sshd tests


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.11.0-6
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: jiangsihui <jiangsihui@huawei.com> - 1.0.0-1
changelog:
  - Supports permission table management functions, including
    the creation, release, and invalidation of permission tables,
    while also supporting context maintenance for operating
    permission tables.


author: Liming An <anliming1@h-partners.com> - 1.0.0-2
changelog:
  - Remove the x86 support from the source code and specify the
    aarch64 in the spec.
    Change indent.


author: Liming An <anliming1@h-partners.com> - 1.0.1-0
changelog:
  - Add UMMU library doc and readme.
    Delete unused readme files.
    Modify cmake version from cmakelist.
    Modify build add debuginfo


author: Liming An <anliming1@h-partners.com> - 1.0.2-1
changelog:
  - Adjust PLB Refresh Timing in grant
    Fix log level initialization issue.
    Synchronized the changes in the kernel header file ummu_core.h.
    The README file is adapted to the code repository address change.
    Widen userspace lock scope to prevent deadlock with kernfs.


author: ZixinLi <lizixin10@h-partners.com> - 9.10.0-23
changelog:
  - Fix CVE-2025-12748 CVE-2025-13193
  - conf: Add virDomainDefIDsParseString
  - bhyve: Check ACLs before parsing the whole domain XML
  - libxl: Check ACLs before parsing the whole domain XML
  - lxc: Check ACLs before parsing the whole domain XML
  - vz: Check ACLs before parsing the whole domain XML
  - ch: Check ACLs before parsing the whole domain XML
  - qemu: Check ACLs before parsing the whole domain XML
  - qemu: snapshot: Set umask for 'qemu-img' when creating external inactive snapshots


author: PengruiZhang <zhangpengrui@huawei.com> - 9.10.0-26
changelog:
  - vdpa: Add the count of vdpa devices when calculating Max locked memory
  - virDomainDeviceIsUSB: Handle all USB devices and simplify the code
  - add TengyunS5000C cpu info to cpu map
  - qemu:Implement the RAS feature for aarch64


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-50
changelog:
  - update to llvm-for-oe-17.0.6-2509.0.2
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2509.0.2


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-54
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.1
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.1


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-56
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.2
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.2


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-57
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.3
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.3


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-58
changelog:
  - update to llvm-for-oe-17.0.6-2603.0.1
  - release-note https://gitcode.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2603.0.1


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-60
changelog:
  - update to llvm-for-oe-17.0.6-2603.0.2
  - release-note https://gitcode.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2603.0.2


author: liyunfei <liyunfei33@huawei.com> - 19.1.7-11
changelog:
  - update to llvm-for-oE-19.1.7-2506.0.2
  - release note: https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-19.1.7-2506.0.2


author: liyunfei <liyunfei33@huawei.com> - 19.1.7-17
changelog:
  - update to llvm-for-oE-19.1.7-2512.0.1
  - release note: https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-19.1.7-2512.0.1


author: liyunfei <liyunfei33@huawei.com> - 19.1.7-19
changelog:
  - update to llvm-for-oE-19.1.7-2512.0.2
  - release note: https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-19.1.7-2512.0.2


author: xiejing <xiejing@kylinos.cn> - 4:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096
  - Fix version description in systemd service file
  - Add conflict with greatsql and change requires


author: Funda Wang <fundawang@yeah.net> - 20240813-1
changelog:
  - update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
    CVE-2024-24980, CVE-2023-42667, CVE-2023-49141


author: Funda Wang <fundawang@yeah.net> - 20250211-1
changelog:
  - update to 2025021 for fix CVE-2024-28047, CVE-2024-31157, CVE-2024-39279,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-24582, CVE-2023-34440, CVE-2024-37020,
    CVE-2024-39355, CVE-2023-43758, CVE-2024-36293, CVE-2024-31068


author: Funda Wang <fundawang@yeah.net> - 20250512-1
changelog:
  - update to 20250512 to fix CVE-2024-28956, CVE-2025-24495, CVE-2025-20012,
    CVE-2024-45332, CVE-2025-20623, CVE-2024-43420, CVE-2025-20054, CVE-2025-20103


author: Funda Wang <fundawang@yeah.net> - 20250812-1
changelog:
  - update to 20250812 to fix CVE-2025-20053, CVE-2025-20109, CVE-2025-21090,
    CVE-2025-22839, CVE-2025-22840, CVE-2025-22889, CVE-2025-24305, CVE-2025-26403,
    CVE-2025-32086


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: zhangxingrong <zhangxingrong@uniontech.com> - 5:2.2.12-3
changelog:
  - Fix smtp client to respect $use_envelope_from option.
  - Fix smtp client $envelope_from_address possible dangling pointer.


author: Funda Wang <fundawang@yeah.net> - 5:2.2.12-4
changelog:
  - fix CVE-2026-43859, CVE-2026-43860, CVE-2026-43861, CVE-2026-43862,
    CVE-2026-43863, CVE-2026-43864


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: wangkai <13474090681@163.com> - 8.0.44-1
changelog:
  - Update to 8.0.44 for fix CVEs (CVE-2025-53069,CVE-2025-53062,CVE-2025-53054,
    CVE-2025-53053,CVE-2025-53045,CVE-2025-53044,CVE-2025-53042,CVE-2025-53040)


author: yaoxin <1024769339@qq.com> - 8.0.45-1
changelog:
  - Update to 8.0.45 for fix CVEs (CVE-2026-21936,CVE-2026-21937,
    CVE-2026-21941,CVE-2026-21948,CVE-2026-21964,CVE-2026-21968)


author: wangkai <13474090681@163.com> - 8.0.46-1
changelog:
  - Update to 8.0.46 for fix CVEs (CVE-2026-21998, CVE-2026-22001, CVE-2026-22002,
    CVE-2026-22004, CVE-2026-22005, CVE-2026-22009, CVE-2026-22015, CVE-2026-22017,
    CVE-2026-34267, CVE-2026-34270, CVE-2026-34271, CVE-2026-34276, CVE-2026-34278,
    CVE-2026-34293, CVE-2026-34303, CVE-2026-34304, CVE-2026-34308, CVE-2026-35236,
    CVE-2026-35237, CVE-2026-35238, CVE-2026-35239, CVE-2026-35240)


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: yaoxin <yao_xin001@hoperun.com> - 1:20.12.1-1
changelog:
  - Update to 20.12.1:
    * CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session()
      leads to HTTP/2 server crash- (High)
    * CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
    * llhttp version 9.2.1
    * undici version 5.28.4


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:20.12.1-2
changelog:
  - fix building w/ clang: only apply '-fno-ipa-icf' for gcc && disable LTO for clang + ld.bfd
  - improve the handling of trilling whitespaces in C/CXXFLAGS


author: Ge Wang <wang__ge@126.com> - 1:20.12.1-3
changelog:
  - CVE-2023-45853 - Reject overflows of zip header fields in minizip
  - CVE-2024-5274 - Using FunctionParsingScope for parsing class static
  - CVE-2024-5535 - Fix SSL_select_next_proto
  - CVE-2024-7971 - Spill all loop inputs before entering loop


author: wangkai <13474090681@163.com> - 1:20.18.2-1
changelog:
  - Update to 20.18.2
  - Fix CVE-2025-23083 CVE-2025-23085 CVE-2025-23084 CVE-2024-36137
    CVE-2024-22018 CVE-2024-22020


author: wangkai <13474090681@163.com> - 1:20.18.2-5
changelog:
  - Fix CVE-2025-55130, CVE-2025-55131, CVE-2025-55132,
    CVE-2025-59465, CVE-2025-59466, CVE-2026-21637


author: wangkai <13474090681@163.com> - 1:20.18.2-7
changelog:
  - Followup fix CVE-2026-21637 and fix CVE-2026-21710, CVE-2026-21713,
    CVE-2026-21714, CVE-2026-21715, CVE-2026-21716, CVE-2026-21717


author: LHesperus <liuchanggeng@huawei.com> -v2.1.0-1
changelog:
  - remove the logger.h interface and add TRACE interface, increase safe_queue wait time to 5s
  - support reload log-level online
  - adapt analysis on riscv
  - add load base sched instance
  - v2.0.6-3 add adapt dynamicsmt analysis if smt is not enable
  - fix code check
  - add trace log and change level intf and delete logger
  - smc-d analysis fix inconsistency in the display of zero connection
  - v2.0.6-2 add realtime compile macro
  - v2.0.6-1 add smc_acc.yaml check and some logs
  - add net_hardirq_tune_data.h
  - fux binary coredump
  - v2.0.5-3 fix xcall analysis issues
  - v2.0.5-2 improve some output format
  - add xcall prefetch
  - network interface plugin : adapt same nic with different ifindex
  - v2.0.5-1 fix issues
  - v2.0.4-1 add docker coordination burst tune
  - add multi net path tune and analysis
  - add error log and params check
  - v2.0.3-3 oeaware-sdk enhances user permissions
  - v2.0.3-2 Fixed memory leak issues:
    - Fixed unsubscribeHandler topic deserialize memory leak
    - Fixed analysis module memory leak
  - Enhanced eBPF functionality:
    - Set memory lock limit to infinity for eBPF
    - Used eBPF to collect thread information
  - Network improvements:
    - Fixed ntoh port error
    - Added support for attaching all network interfaces
    - Used tcp-set-state to adapt k8s docker
  - New features:
    - Added xcall parameters
    - Added support for docker coordination burst analysis
    - Added parameter validation
    - Added NUMA parallel scheduler tuning support
  - Other improvements:
    - Fixed header files and added CI test
  - v2.0.3-1: Refactored and enhanced the analysis module:
    - Added scenario-aware analysis for multiple optimization plugins
    - Introduced command-line result viewing capability
    - Implemented Markdown format output support
  - Add new plugin: smt,binary,hirq


author: fly_1997 <flylove7@outlook.com> -v2.1.1-1
changelog:
  - add hwprobe_analysis for RISC-V
  - fix error logger info
  - support kernel cluster scheduler
  - adapt for kylin-v10-sp3
  - realtime tune add new tuning item
  - fix smc insmod err
  - realtime tune skip grubby update
  - add hwprobe_tune hwprobe_ext_zbb_tune for RISC-V
  - add high_load value check


author: xu_ping <707078654@qq.com> - 3.24.0-1
changelog:
  - Upgrade version to 3.24.0
    * Add support for FIPS-session mode
    * Updates to harden against RSA timing attacks
    * Add option to show the master key verification patterns of secure keys
    * Add support for exporting a key or certificate as URI-PEM file
    * Performance improvements for attribute retrieval
    * Add support for SHA-2 mechanisms
    * Experimental support for IBM Dilithium via OpenSSL OQS provider
    * Support live guest relocation for protected key (PKEY) operations
    * Add support for CKA_ALWAYS_AUTHENTICATE
    * Add support for CKD_*_SP800 KDFs for ECDH
    * Add support for SHA based key derivation mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms
    * Add support for building Opencryptoki on the IBM AIX platform
    * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64)
    * Add support for protecting tokens with a token specific user group
    * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE
    * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later


author: zhang_wenyu <zhang_wenyu@hoperun.com> - 3.25.0-1
changelog:
  - Upgrade version to 3.25.0
    * Add support for PKCS#11 v3.0 SHAKE key derivation
    * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP
    * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms
    * Add support for CCA AES CIPHER secure key types
    * Add support for the CKM_ECDH1_DERIVE mechanism
    * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms
    * Add support for the CKM_RSA_AES_KEY_WRAP mechanism
    * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism
    * Add a tool for import and exporting PKCS#11 keys to a KMIP server
    * Add support for opaque secure key blob import via C_CreateObject
    * Add support for key wrapping with AES-GCM
    * Add support for newer CCA versions on s390x and non-s390x platforms
    * Add support for CKM_AES_GCM (single-part operations only)


author: zhangbinqin<zhangbinqin@h-partners.com> - 9.6p1-13
changelog:
  - Type:CVE
  - CVE:CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388 
  - SUG:NA
  - DESC:fix CVE-2026-35414 CVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388


author: fly_fzc <2385803914@qq.com> - 1:3.0.12-32
changelog:
  - fix CVE-2025-15467,CVE-2025-69418,
        CVE-2025-69419,CVE-2025-69420,
        CVE-2025-69421,CVE-2026-22795,
        CVE-2026-22796


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.3.8b-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix: %patchN is deprecated (7 usages found), use %patch N (or %patch -P N)


author: wangkai <13474090681@163.com> - 1.3.9a-1
changelog:
  - Update to 1.3.9a for fix CVE-2026-42167
  - Add 'proxy' sub-package with unbundled mod_proxy
  - Use libsodium to provide ed25519 key support for mod_sftp
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: Funda Wang <fundawang@yeah.net> - 25.1-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix build with wrong permission
  - DESC: fix conflicts with protobuf2
  - DESC: revert:distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: wangkai <13474090681@163.com> - 3.13.5-1
changelog:
  - Update to 3.13.5
    * Fix CVE-2026-22815, CVE-2026-34513, CVE-2026-34514, CVE-2026-34516,
      CVE-2026-34517, CVE-2026-34518, CVE-2026-34519, CVE-2026-34520, CVE-2026-34525


author: Yu Peng <yupeng@kylinos.cn> - 1.4.0-1
changelog:
  - Upgrade to 1.4.0.
    Added decorator functionality to Signal as a convenient way to add a callback 
    Improved type safety by allowing callback parameters to be type checked


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 7.16.6-1
changelog:
  - Update package with version 7.16.6
    Prevent leading whitespace in markdown code blocks from being stripped
    Update base.tex.j2 for macro compatibility with newer versions of Pandoc
    Allow including text/x-rst outputs in rst conversion, transition away from text/restructuredtext
    Add support for mistune 3.1.0
    [HTMLExporter] Initialize resources before widget filtering
    Add a toggle to skip the svg encoding of images
    Support configureable width and height of reveal presentations
    Convert coalescese_streams function to CoalesceStreamsPreprocessor


author: openeuler_bot <infra@openeuler.sh> - 7.17.0-1
changelog:
  - Add support for arbitrary browser arguments (version:7.17.0).
  - Fix QtPNGExporter returning empty bytes on macOS (version:7.17.0).
  - Fix CVE-2025-53000: Secure Inkscape Windows path (registry first + block CWD) (version:7.17.0).
  - Drop support for Python 3.8, fix the CI tests (version:7.17.0).


author: YangengLiu <dev01202@linx-info.com> - 7.17.1-1
changelog:
  - update version to 7.17.1
    * Allow configureable WebPDF JavaScript processing timeout.
    * Fix when checking template paths on shared filesystems.
    * Tweak webpdf template logic to fix duplicate extension problem.


author: yaoxin <yao_xin001@hoperun.com> - 6.4.1-1
changelog:
  - Update to 6.4.1
    * Parsing of the ``Transfer-Encoding`` header is now stricter.
    * Handling of whitespace in headers now matches the RFC more closely.
    * ``tornado.curl_httpclient`` now prohibits carriage return and linefeed headers in HTTP headers
    (matching the behavior of ``simple_httpclient``).


author: chengyechun <chengyechun1@huawei.com> - 1.26.18-2
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorizatioin header on redirects


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 1.26.18-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Prevent issue in HTTPResponse().read() when decoded_content is True and then False


author: lipengyu <lipengyu@kylinos.cn> - 3.11.6-20
changelog:
  - Type:CVE
  - CVE:CVE-2025-13836 CVE-2025-13837 CVE-2025-12084
  - SUG:NA
  - DESC:fix CVE-2025-13836 CVE-2025-13837 CVE-2025-12084


author: zhangpengrui <zhangpengrui@huawei.com> 11:8.2.0-59
changelog:
  - vfio: Fix CSV3 mapping device mmio issue
  - util/cacheflush: Make first DSB unconditional on aarch64
  - block: Zero block driver state before reopening
  - target/arm: Correct STRD atomicity
  - qemu-img: Fix amend option parse error handling
  - qemu-img rebase: don't exceed IO_BUF_SIZE in one operation
  - aio-posix: keep polling enabled with fdmon-io_uring.c


author: zhangpengrui <zhangpengrui@huawei.com> 11:8.2.0-60
changelog:
  - qga: Fix truncated output handling in guest-exec status reporting
  - qga/installer: Remove QGA VSS if QGA installation failed
  - qga: Fix channel initialization check in run_agent_once
  - hw/rtc/goldfish: keep time offset when resetting
  - target/arm: Make DisasContext.{fp, sve}_access_checked tristate
  - net: parameterize the removing client from nc list
  - hid: fix incorrect return value for hid
  - util/qemu-timer.c: Don't warp timer from timerlist_rearm()
  - wdt_i6300esb: fix incorrect mask for interrupt type
  - target/arm: Correct LDRD atomicity and fault behaviour


author: zhangpengrui <zhangpengrui@huawei.com> 11:8.2.0-61
changelog:
  - tracetool: fix usage of try_import()
  - gtk: Skip drawing if console surface is NULL
  - vfio/iommufd: Fix SIGSEV in iommufd_cdev_attach()
  - qmp: update vhost-user protocol feature maps
  - hw/intc/arm_gicv3_its: Zero initialize local DTEntry etc structs
  - hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN
  - replay: Improve assert in replay_char_read_all_load()
  - hw/scsi: Use error_setg_file_open() for a better error message
  - hw/virtio: Use error_setg_file_open() for a better error message
  - ui/vnc: Fix qemu abort when query vnc info


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-62
changelog:
  - iotests: Run iotests with sanitizers
  - tests/qemu-iotest: Add more image formats to the thorough testing
  - hw/intc: fix the issue of vNMI not supporting live migration
  - vfio/pci: VirtCCA adapt Ascend310P bar2 quirk.
  - vdpa:Set the vhostdev character of the VDPA device to the idstr assigned during migration
  - vdpa: Enable the ability of all VDPA devices to obtain backend config
  - hw/misc/psp.c: support live migrate for vpsp device
  - qga: ignore channel_init() fail if 'retry_path' is set
  - docs: fix typo in xive doc


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-63
changelog:
  - chardev/char-pty: Do not ignore chr_write() failures
  - hw/display/exynos4210_fimd: Remove duplicated definition
  - kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value
  - hw/vfio/hct: fix ci check_code issues
  - hw/vfio/hct: support abort migration when hct exception
  - hw/vfio/hct: fix virtual machine paused due to obtain VQ failed.
  - hw/vfio/hct: support live migration function for virtual machines.
  - hw/vfio/hct: support vfio-pci multiple processes.
  - hw/vfio/hct: support start with ccp.ko driver
  - hw/vfio/hct: remove the operation of reading the value of mdev index in qemu.
  - hw/vfio/hct: fix ccp index error caused by uninitialized buf
  - hw/vfio/hct: compatible with hct.ko modules in versions 0.5 and earlier.
  - hw/vfio/hct: sharing CCP resources between host and virtual machines.
  - aio-posix: fix spurious return from ->wait() due to signals
  - tests/unit: skip test-nested-aio-poll with io_uring
  - tests/qemu-iotests/184: Fix skip message for qemu-img without throttle
  - target/arm/cpu64: remove duplicate include
  - cxl/cdat: Fix header sum value in CDAT checksum
  - hw/virtio: Fix packed virtqueue flush used_idx


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-64
changelog:
  - arm/cpu: fix werrors if CONFIG_USER_ONLY was set
  - crypto/hash-gcrypt: Correct undeclared parameter
  - config/targets: update aarch64_be-linux-user gdb XML list
  - ub: add more check for arry to prevent mem overrun
  - backends: fix node id out of range when set proportion
  - ub: check kvm_usi_via_irqfd when set kvm interrupt
  - ub: fix some mem leak in handle_enum_query_request
  - ub: remove unused param in enum_query_get_max_num_ports
  - ub: fix possible mem overrun in fill_rq
  - ub: do size check for alloc idev ers addr
  - ub: dma memory read wirte with memory flag
  - ub: ummu mcmdq null cmd fix mem leak and enhace safe
  - ub: limits ummu kvtbl max entries to 1024
  - ub: fix some mem leak
  - ub: correct ub cfg setting and values
  - ub: support different versions of the UMMU chips
  - ub: fix compiling error if target is not aarch64


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-65
changelog:
  - net: pad packets to minimum length in qemu_receive_packet() (CVE-2025-12464)
  - io: release active GSource in TLS channel finalizer
  - io: move websock resource release to close method
  - io: fix use after free in websocket handshake code(CVE-2025-11234)
  - ub: correct cfg write access


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-66
changelog:
  - hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq()(CVE-2026-0665)
  - hw/intc/loongarch_ipi_kvm: Fix the bug where the VM would crash when performing save or resume operations.
  - cxl/cdat: Handle cdat table build errors
  - hw/virtio: Fix the de-initialization of vhost-user devices
  - ub: fix memory leak in double pointer


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-69
changelog:
  - Migration/urma:reduce plflash update time
  - Migration/urma:avoid clearing remote dirty bitmap after migration completes
  - Migration/urma:add detailed downtime statistics for live migration
  - Migration/urma:support jfr post list mode over URMA
  - Migration/urma:move registration and unregistration ram to thread
  - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration
  - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM
  - target/i386: csv: Remove all nodes within dma unmapping addr range
  - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container()
  - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd
  - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest
  - target/i386: csv: Introduce host-data=str option
  - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines.
  - Migration/urma:fix memory leak caused by hashmap in urma migration
  - bugfix: add PAS_EXPANSION config to support mmcd device
  - ub: fix ub ers map failed 
  - ub: fix vm reset core when config vfio-ub device


author: fanmingzhan <fanmingzhan@h-partners.com> - 11:8.2.0-70
changelog:
  - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-71
changelog:
  - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region"
  - arm/kvm-rme: Add support for hisi-cca huge page mapping method
  - arm/kvm-rme: Add device assignment method for cca realm vm
  - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-72
changelog:
  - ub: don't check ers addr size is power of 2
  - ub: support process msg code exch
  - ub: replace malloc with g_malloc0
  - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP
  - MAINTAINERS: add me as maintainer to virtio-snd
  - virtio-snd: remove TODO comments
  - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196)
  - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195)
  - virtio-snd: tighten read amount in in_cb(CVE-2026-3195)
  - hw/arm: Close unreleased out_fault_fd
  - pci: avoid the info qtree crash caused by arm-smmuv3-accel


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-73
changelog:
  - target/arm: add kunpeng 920 V1 support
  - target/arm: add kunpeng 950 V1 support
  - target/arm: add kunpeng 920 V2 support
  - hw/virtio/virtio-crypto: verify asym request size(CVE-2025-14876)
  - cryptodev-builtin: Limit the maximum size(CVE-2025-14876)
  - block/vmdk: fix OOB read in vmdk_read_extent()(CVE-2026-2243)
  - lsi53c895a: keep a reference to the device while SCRIPTS execute(CVE-2024-6519)


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-32
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Increase input parameter checks and adjust inline data size.


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-36
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Fix wrong WQE data in new post send API when QP wraps around


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: jinlun<jinlun@huawei.com> - 40.7-1
changelog:
  - update version to 40.7
    - Allow chronyd-restricted read chronyd key files
    - Allow systemd-sleep set attributes of efivarfs files
    - Make name_zone_t and named_var_run_t a part of the mountpoint attribute
    - Update cifs interfaces to include fs_search_auto_mountpoints()
    - Allow map xserver_tmpfs_t files when xserver_clients_write_xshm is on
    - Add map_read map_write to kernel_prog_run_bpf
    - Add policy for nvme-stas
    - Make new virt drivers permissive
    - Allow named and ndc use the io_uring api
    - Allow sssd send SIGKILL to passket_child running in ipa_otpd_t


author: yueyuankun <yueyuankun@kylinos.cn> - 15.7-21
changelog:
  - spec: Remove debugsource requirement from debuginfo
  - Allow debuginfo to be installed alone without pulling in the debugsource package.


author: wjiang <app@cameyan.com> -15.7-22
changelog:
  - Backport bugfix patches from upstream
  - Fix build with binutils 2.46 (c4665d2)
  - Fix memory leak on TPM log error in mirror_one_mok_variable (92630f2)


author: xinghe <xingheyd@163.com> - 7:6.6-8
changelog:
  - Type:cves
  - ID:CVE-2026-33526 CVE-2026-33515 CVE-2026-32748
  - SUG:NA
  - DESC:fix CVE-2026-33526 CVE-2026-33515 CVE-2026-32748


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix residual files exist after the rpms is uninstalled
         merge pyxalarm to sysSentry rpm


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix potential overflow in report_result()
         fix potential memory leak issues in sentry_msg_monitor
         set log level in sentry_msg_monitor
         fix the problem of checking the return value of the pthread_create()
         xalarm: add sysSentry.service status monitoring
         Implement systemd socket activation for xalarm and fix socket permission issues
         refact xalarm_unregister_event and xalarm_report_event API
         refact sentryctl set cmd
         implement systemd socket activation for sysSentry


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix potential resource leak in get_debugfs_dir()
         fix potential buffer overflow in create_trace_instance()
         fix potential double free in sentry_msg_monitor
         add cmd security check
         add exception handling for sentryCollector
         fix potential DoS attack risks and resource leaks
         change some msg log level
         fix memset usage
         fix potential memory leak in print_map_res()
         fix potential null pointer reference in extract_device_name()
         fix crash in cpu_alarm
         use snprintf instead of sprintf/strcpy/strncpy
         fix build warning
         check cpu info in parse_patrol_result()
         fix potential null pointer reference in catlib
         fix socket fd leaks
         fix NameError in task_get_alarm()


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-30
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix fd leaks in get_socket_id()
         fix resource leaks in ebpf_collector
         fix fd leaks in sysSentry and xalarmd service
         fix potential overflow which cause the allocated memory to be too small
         fix fd leaks in sentry_msg_monitor


author: huwentao <huwentao19@h-partners.com> - 1.0.3-31
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:rename bmc_block_io to bmc_ras_sentry
         BMC Ras Sentry add config bmc_events
         Support report bmc block ras sentry
         bmc_ras_sentry add new way to get disk SN to block name mapping
         bmc_ras_sentry add way to get disk SN


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:don't clean /var/run/xalarm and /var/run/sysSentry dirs
         restart only the running service during the upgrade


author: shixuantong <shixuantong1@h-partners.com> - 1.0.3-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix error log for task stop function
         fix integer overflow rish in QueryEvents
         fix potential fd leak issue
         fix the infinite loop for cleanup_thread-thread


author: wjiang <app@cameyan.com> - 255-52
changelog:
  - backport community patches and skip bios_version test:
        backport-login-user-runtime-dir-free-ignored-sd_bus_error-avo.patch
        backport-login-user-runtime-dir-use-STRLEN-where-appropriate.patch
        backport-systemctl-gracefully-adjust-bus-transport-and-runtim.patch
        backport-journal-do-not-rotate-journal-when-MaxRetentionSec-i.patch
        backport-nspawn-use-strv_extend-and-friends-to-build-director.patch
        backport-nspawn-only-remount-usr-with-idmap-when-volatile-yes.patch
        backport-nspawn-mount-var-after-remount_idmap-when-volatile-s.patch
        backport-compress-avoid-a-bunch-of-div-by-zeroes.patch


author: Linux_zhang <244695981@qq.com> - 255-53
changelog:
  - sync community patches
    backport-journal-use-EBADMSG-for-invalid-data-in-file-mmap.patch
    backport-journal-replace-a-bunch-of-assert-with-friendlier-ch.patch


author: wulinfeng <wulinfeng@xfusion.com> - 255-55
changelog:
  - fix coredump generation when systemd-resolved and systemd-networkd service is started then uninstalled


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: yaoxin <1024769339@qq.com> - 1:9.0.117-1
changelog:
  - Update to 9.0.117 for fix CVEs: CVE-2026-24880, CVE-2026-25854,
    CVE-2026-29129, CVE-2026-29145, CVE-2026-29146, CVE-2026-32990,
    CVE-2026-34483, CVE-2026-34486, CVE-2026-34487, CVE-2026-34500


author: yaoxin <1024769339@qq.com> - 1:9.0.118-1
changelog:
  - Update to 9.0.118 for fix CVEs: CVE-2026-41284, CVE-2026-41293,
    CVE-2026-42498, CVE-2026-43512, CVE-2026-43513, CVE-2026-43514,
    CVE-2026-43515
  - Fix tomcat-jsvc stop failed


author: chenwen <chenwen54@huawei.com> - 25.12.0-B069
changelog:
  - umdk: supports CLOS networking and failover, health checks, shared TP, and reliable link establishment.


author: gaihuiying <eaglegai@163.com> - 1.17.1-15
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: yaoxin <1024769339@qq.com> - 0.9.9-1
changelog:
  - Update to 0.9.9:
    * Changed: Require CMake >=3.10.0
    * Fixed: Dissolve undefined behavior in parsing of URIs
    * Fixed: Normalized percent-encoded octets should have uppercase letters
      in the host
    * Fixed: Fix macros URI_VER_SUFFIX_UNICODE and URI_VER_UNICODE
    * Improved: CMake: Compile with -std=c90 by default
    * Improved: Convert remaining DOS (CR/LF) newlines to Unix newlines


author: cenhuilin <cenhuilin@kylinos.cn> - 2.39.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:lsblk: fix memory leak [coverity scan]
         lsblk: fix possible use-after-free


author: yixiangzhike <yixiangzhike007@163.com> - 2.39.1-31
changelog:
  - backport community patches
      fix columns reduction
      fix memory leak issue in read_Subid_range
      fix off-by-one in maximum last sector calculation
      fix memory corruption in size calculation
      fix memory corruption in read buffers


author: Funda Wang <fundawang@yeah.net> - 1.20.11-37
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


author: Wang Kui <wangkui35@h-partners.com> - 1.20.11-41
changelog:
  - Fix CVE-2025-49176 CVE-2025-49179 CVE-2025-49180 CVE-2022-49737
    CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


author: lingsheng <ultra_planet@qq.com> - 1.20.11-42
changelog:
  - fix CVE-2022-49737 CVE-2025-49175 CVE-2025-49176 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


