# changelog

author: Tracker Robot <trackbot@opencloudos.tech> - 1.4.3-6
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Feature Add/Remove] configure: drop user-nsswitch.conf support
  - [Bug Fix] profiles: merge groups records with [SUCCESS=merge]


author: Tracker Robot <trackbot@opencloudos.tech> - 1.4.3-7
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ddad860e11087ab21d5533f31c2da89f8200dd58.patch: configure: fix typo


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.2-3
changelog:
  - fix crash with unset arrays in arithmetic contexts
  - fix crash in readline when started with an invalid locale specification


author: Doris Chao <doriscchao@tencent.com> - 5.2.15-3
changelog:
  - [Type] other
  - [DESC] Define NON_INTERACTIVE_LOGIN_SHELLS config to run the
  - login shell startup files if argv[0][0] == '-'


author: Tracker Robot <trackbot@opencloudos.tech> - 2.41-13
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] baac6c221e9d69335bf41366a1c7d87d8ab2f893.patch: PR32560 stack-buffer-overflow at objdump disassemble_bytes


author: wynnfeng <wynnfeng@tencent.com> - 2023.2.60-1
changelog:
  - Update to CKBI 2.60 from NSS 3.86
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "Global Chambersign Root"


author: Chunsheng Luo <luffyluo@tencent.com> - 9.4-7
changelog:
  - Provide coreutils-single to more easily support smaller installations
  - Split out coreutils-common to provide common documentation


author: Miaojun Dong <zoedong@tencent.com> - 8.4.0-6
changelog:
  - Rebuilt for loongarch release
  - Add BR glibc-langpack-en for testing, since it was separated from
    glibc-common


author: Tracker Robot <trackbot@opencloudos.tech> - 35-5
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] 4fa73fd2dc8429ff0fbbda39bce8e8af92681b07.patch: launch/policy: prevent linking policies on invalid gids
  - [Bug Fix] fedceff76af876d3069d4df2eedd0a974d16c3ff.patch: launch/policy: deallocate unused records during import
  - [Bug Fix] 9c2d3e310bb40c6db2966570695e896b540e467e.patch: util/misc: dont overload rvalue of get_seals()
  - [Bug Fix] f805f4114f33ddb61382f7d6989cc3f94e0f7f1a.patch: bus/match: fix matching against arguments beyond the zeroth


author: Xin Cheng <denisecheng@tencent.com> - 4.4.3-8.P1
changelog:
  - fix CVE-2022-38177, CVE-2022-2795,CVE-2022-38178,CVE-2023-3341, CVE-2023-2828,CVE-2023-4408,CVE-2023-50387


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-9
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] b269e6853be6278cc9fe06b1c1d92f7d31504c01.patch: Fix invalid escape character \s


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-10
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] eaa335e7c4686c622f31e691f8a41fdf30ea42b3.patch: Fix a memory leak in _get_real_paths_from_prefix


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-11
changelog:
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ab765827101787d49c0a66b23addc1f68f99a455.patch: Set FcTypeVoid if no valid types to convert


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-12
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 3a0ed05722feec5c478d076d87a64bf15f4bacdb.patch: Use proper postscriptname for named instance if any


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-13
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] aae5ff1f2e1be978272c41bf809d15b6e47b1e2c.patch: Remove redundant leaf assignment in fcfreetype.c


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-14
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ec20037908963870e27572fadef766cc8a6d9818.patch: Unlock on allocation failure in FcCacheInsert


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-15
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] b892c2196d0d9e74df61620e79ad8e846b01637d.patch: Ensure config is locked during retry in FcConfigReference


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-16
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ad58277b71415b714009bee33f04e8c18c7ab44d.patch: Fix FcSerialize null pointer usage
  - [Bug Fix] 9164a7bcbd3be022f074bb0530dd5c12e3c83b44.patch: Fix qsort nullpointer issue


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-17
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 71a6a990aa8578ddd7140fe0b2c9f87508d2b59b.patch: Fix a memory leak in fc-list/fc-query/fc-scan


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-18
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 084752e737a12c99800b2a35ea80eab11a12eabe.patch: Accept integer for pixelsize


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-11
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 2a790a9f4937c3950028bd3de29e63c6b0d419ce.patch: [cff, truetype] Always set up default variable instance.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-12
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 57c4252ab5f435c52e66b619bd514068f7a683b0.patch: [sfnt] Guard access in COLR v1 glyph binary search.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-13
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 2b9fdec5fafd16fba93a9947563260ab9feb9029.patch: * src/pfr/pfrgload.c (pfr_glyph_curve_to): Avoid casting.
  - [Bug Fix] 93a067e31240058103ce04057dd76dcf98c18d15.patch: [base, autofit, psaux] Remove unnecessary casting.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-14
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 37cefe33b284d0bad4ec52bcccc1a8c2d8704340.patch: * psobjs.c (ps_table_add): Check length before calling FT_MEM_CPY.
  - [Bug Fix] b1cbcb20454e3b465b0d3ea4d5457975cfa747e7.patch: [ttgxvar] Avoid applying zero offset to null pointer


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-15
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] db83e9c0ec8b4ec8d7fa3bb3383d5160d1cfa719.patch: * src/cache/ftcglyph.c [!FTC_INLINE]: Fix compilation.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-16
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] d091bca546fa15928db36c8447e126ee43ddb5f4.patch: [cache] Fix error handling.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-17
changelog:
  - [Type] other
  - [DESC] Apply patches from rpm-tracker
  - [Performance] 1452355de99d22b0cba6ccc17bf5cdf3682ef61e.patch: * src/truetype/ttobjs.c (tt_size_run_prep): Correct scaling of CVT values.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-18
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 139443663368617b30b70cf6912e9577ecbb845f.patch: Move generic destroy to later in the face and size destruction.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-19
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 26b545f36867508da2f2f318a93d78e673436598.patch: apinames: Fix out-of-scope reference of a static array.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-20
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 38272bf85341348eb0a5162ba4e1c95d370f9bce.patch: [ftstroke] Fix invalid pointer assignement to arc


author: Yi Lin <nilusyi@tencent.com> - 1.8.10-9
changelog:
  - [Type] other
  - [DESC] fix "no data for compatible" in fwupd tests: `fwupdtool get-devices --verbose`


author: Huang Yang <huangyang@loongson.cn> - 12.3.1.2-3
changelog:
  - [Type] bugfix
  - [DESC] Fix GNOME desktop startup failure on loongarch architecture
  - Remove some duplicate configure options


author: Zhao Zhen <jeremiazhao@tencent.com> - 12.3.1.3-1
changelog:
  - [Type] other
  - [DESC] backport LoongArch patches
  -    Fixed duplicate link errors when building libgccjit.
  -    Changed the value of branch_cost: Optimized the generation of branch-related instructions.
  -    Fixed build and test errors caused by version differences.
  -    Optimized the generation of instructions for immediate loading.
  -    Optimized the implementation of stack-check.
  -    Optimized the generation of multiplication instructions.
  -    Added support for 3A6000.
  -    Modified the library installation path.
  -    Fixed GNOME desktop startup failure.
  -    Fixed dependencies on loongarch header files.
  -    Fixed the behavior of the macro instruction .align.
  -    Fixed the vec_initv32qiv16qi template to avoid ICE errors.
  -    Optimized the use of fcmp.caf.s instead of movgr2cf for copying from the zero register.
  -    Fixed the lsx_vreplgr2vr_<lsxfmt_f> instruction template error.
  -    Fixed backend subreg nesting errors.
  -    Fixed redundant barrier instructions before LL-SC.
  -    Optimized immediate loading.
  -    Fixed runtime errors when building gcc.
  -    Fixed incorrect use of frint and ftint instructions.
  -    Changed vector usage to standard template names.
  -    Allowed S9 as an alias for the r22 register.
  -    Changed the dynamic library installation path to lib64.
  -    Fixed memory reference errors with base address 0.
  -    Added a test suite for vector instructions.
  -    Added support for Ada, libffi, libvtv, libitm on LoongArch.
  -    Added support for prefetch instructions, commonly used floating-point instructions, and [f]copysign.
  -    Added support for mcmodel=medium and extreme.
  -    Added fmin/fmax RTL backend templates.
  -    Added the -mdirect-extern-access option.
  -    Added support for libsanitizer.
  -    Added the -mexplicit-relocs option as an optional target.
  -    Implemented __builtin_thread_pointer.
  -    Added support for xorsign.
  -    Added the alslsi3_extend template.
  -    Added a D language frontend.
  -    Added TLS relocation types.
  -    Added fmin/fmax RTL templates.
  -    Added a test suite for vector instructions.
  -    Defined ISA versions.


author: Zhao Zhen <jeremiazhao@tencent.com> - 12.3.1.4-1
changelog:
  - [Type] other
  - [DESC] Improved KunPeng feature
  - Suppotred KunPeng 920 high performance processor & AI compliation optimization
  - Structure optimization 
  - Array Width comparison optimization
  - Instruction generation optimization
  - added another triple directory link in %files for fixing 12.3.1.3-3


author: Tracker Robot <trackbot@opencloudos.tech> - 2.78.3-6
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ef064d625b847e05a017fcc307e67c6f31880ce7.patch: gopenuriportal: Fix two memory leaks
  - [Bug Fix] 092fedd5f085a2f1966b5c34befe8b603c1a0f07.patch: gdbus: Fix leak of method invocation when registering an object with closures


author: Zhao Zhen <jeremiazhao@tencent.com> - 2.78.3-8
changelog:
  - [Type] bugfix
  - [DESC] fixed building error for gjs 1.83.2+
  - gcc occur uninitialized variable ‘_g_boolean_var_46’ in ‘constexpr’ function;
  - because meson 1.3+ makes compiler checks stricter


author: Shuo Wang <abushwang@tencent.com> - 2.38-23
changelog:
  - backport patch to fix str{n}cmp-evex performance degradation
  - x86/string: Fixup alignment of main loop in str{n}cmp-evex [BZ #32212]


author: Shuo Wang <abushwang@tencent.com> - 2.38-24
changelog:
  - requires zh and en defaultly
  - fix update glibc fail from old version to 2.38-16 when 'weakdependency=False'


author: Tracker Robot <trackbot@opencloudos.tech> - 2.38-28
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Performance] 950891b5e7a5307272da3e632832ac9da4c9eeec.patch: Optimize bsearch() implementation for performance
  - [Bug Fix] 6fd215d6ae9a4a6e75f7ea18d89db6a10f158eaf.patch: posix: fix system when a child cannot be created [BZ #32450]


author: xiajiamei <xiejiamei@hygon.cn> - 2.38-30
changelog:
  - backport x86-Add-new-architecture-type-for-Hygon-processors.patch
  - backport x86-Add-cache-information-support-for-Hygon-processo.patch
  - backport x86-Fix-Zen3-Zen4-ERMS-selection-BZ-30994.patch
  - backport x86-Improve-large-memset-perf-with-non-temporal-stor.patch
  - backport x86-Add-seperate-non-temporal-tunable-for-memset.patch
  - backport x86-Enable-non-temporal-memset-tunable-for-AMD.patch
  - backport x86-Fix-value-for-x86_memset_non_temporal_threshold-.patch
  - backport x86-Disable-non-temporal-memset-on-Skylake-Server.patch
  - backport x86-Use-Avoid_Non_Temporal_Memset-to-control-non-tem.patch
  - backport x86-Add-Avoid_STOSB-tunable-to-allow-NT-memset-witho.patch
  - backport x86-Enable-non-temporal-memset-for-Hygon-processors.patch
  - backport x86-Only-align-destination-to-1x-VEC_SIZE-in-memset-.patch


author: Tracker Robot <trackbot@opencloudos.tech> - 3.8.2-7
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] 0337521f88799f616faca089026c4c45a2ed3d76.patch: nettle: avoid potential memleak with GMP older than 6.2.0
  - [Bug Fix] b7cd1e93d900675a80fe0701475a3f947bc4039e.patch: lib: fix a potential segfault in _gnutls13_recv_finished
  - [Bug Fix] f979aa3d0fcf1c79accc038b6599382efc6e64da.patch: lib: fix a segfault in _gnutls13_recv_end_of_early_data
  - [Bug Fix] b5faada34e63ca14657e72bebfa4a71f52000116.patch: serv: fix memleak when a connected client disappears
  - [Bug Fix] d76f43f2518f9167f868ab09db7b885459cca0b2.patch: fips: Zeroize temporary values
  - [Performance] 0a97df525fa12ac19ca95462e5ebaecb66066721.patch: lib/accellerated: update asm and enable PAC/BTI
  - [Performance] beba3bd9e0e678c0b804d400af839a3538bf1e17.patch: gnutls_pkcs12_generate_mac2: factor out mac generation logic
  - [Performance] 2c87dc3ae4f9629830923560774fbf9f6b55e273.patch: _gnutls_x509_read_uint: accept values greater than 0x7FFFFFFF


author: Feng Weiyao <wynnfeng@tencent.com> - 2.12-13
changelog:
  - [Type] security
  - [DESC] - Resolves: CVE-2024-45781 CVE-2024-45783 CVE-2024-45778
  - Resolves: CVE-2024-45775 CVE-2024-45780 CVE-2024-45774 CVE-2025-0684
  - Resolves: CVE-2025-0690 CVE-2025-1118 CVE-2024-45782 CVE-2025-0685
  - Resolves: CVE-2025-0624 CVE-2024-45779 CVE-2024-45776 CVE-2025-0686
  - Resolves: CVE-2025-0622 CVE-2025-0677 CVE-2024-45777 CVE-2025-0678
  - Resolves: CVE-2025-0689 CVE-2025-1125


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.64-18
changelog:
  - Merge linux-6.6.64 into TK5 release branch
  - Linux 6.6.64
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !285 [linux-6.6] LoongArch: Revert "drm/loongson: disable loongson drm driver by default for LS7A2000"
  - Revert "drm/loongson: disable loongson drm driver by default for LS7A2000"
  - !284 [linux-6.6/devel] drm: loongson: Always build Loongson DRM drivers Merge pull request !284 from Ming Wang/linux-6.6/devel
  - drm: loongson: Always build Loongson DRM drivers
  - !282 [devel-6.6] linkdata: ps3stor compilation optimization Merge pull request !282 from liujie_answer/linux-6.6/devel
  - scsi: linkdata ps3stor compilation optimization category: feature
  - !280 [linux6.6-devel] LoongArch: backport ptw&set_pte patches from upstream Merge pull request !280 from Ming Wang/backport
  - LoongArch: Set initial pte entry with PAGE_GLOBAL for kernel space
  - LoongArch: Improve hardware page table walker
  - LoongArch: Use accessors to page table entries instead of direct dereference
  - LoongArch: Remove superfluous flush_dcache_page() definition
  - !281 [linux-6.6/devel] LoongArch: drm/loongson: disable loongson drm driver by default for LS7A2000 Merge pull request !281 from Ming Wang/drm
  - drm/loongson: disable loongson drm driver by default for LS7A2000
  - !279 [linux-6.6/devel] Makefile: Use `filter` for dist Makefile inclusion condition Merge pull request !279 from Ming Wang/dist-style
  - Makefile: Use `filter` for dist Makefile inclusion condition
  - !278 [linux-6.6/devel] loongarch:  Enables the Advanced Extended Interrupt Controllers (AVEC) functionality in multi-node 3C6000 systems and fix irq issue.
  - irq-loongarch-avec.c: Enables the Advanced Extended Interrupt Controllers (AVEC) functionality in multi-node 3C6000 systems.
  - drivers/irqchip: Disable pci_irq_limit when using avec interrupt controller
  - !277 Intel pstate backport from6.11 Merge pull request !277 from jiayingbao/intel_pstate_backport_from6.11
  - !276 Tpmi based drivers backport from 6.11 Merge pull request !276 from jiayingbao/tpmi_based_drivers_backport_from6.11
  - !274 [devel-6.6] linkdata: add ps3stor driver support Merge pull request !274 from liujie_answer/linux-6.6/devel
  - scsi: add support for linkdata HBA/RAID Controller driver category: feature
  - !273 [linux-6.6/devel] perf/x86/zhaoxin/uncore: fix pci_driver conflict issue Merge pull request
  - perf/x86/zhaoxin/uncore: fix pci_driver conflict issue
  - Merge branch 'leonylgao/check_kconfig' into 'release' (merge request !265)
  - configs: check whether TencentOS Kennel configs is compliant
  - Merge branch 'leonylgao/check_kapi' into 'release' (merge request !264)
  - kapi: check whether TencentOS Kernel KAPI is compliant
  - tkernel: support check the compliance of KAPI
  - Merge branch 'alexyonghe/reparent_memcg' into 'release' (merge request !267)
  - mm: Reparent page cache to parent memory cgroup
  - Merge branch 'aurelianliu/origin/master_CVE-2024-49885' into 'release' (merge request !218)
  - mm, slub: avoid zeroing kmalloc redzone
  - Merge branch 'leonylgao/check_kabi' into 'release' (merge request !266)
  - kabi: use pr_xxx to print colors
  - Merge branch 'cunhuang/6.6-release/CONFIG_SCSI_HISI_SAS' into 'release' (merge request !259)
  - config: arm64: SCSI_HISI_SAS=m
  - Merge branch 'costinchen/dim' into 'release' (merge request !262)
  - dim: optimized dim logging for dynamic measurements
  - drivers,3snic: support incremental compilation
  - Merge branch 'katrinzhou/smc_module' into 'release' (merge request !261)
  - smc: Enable smc as module


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.68-20
changelog:
  - emm: update emm to v0.1.7.5
  - Merge branch 'frankjpliu/release-mr-ock' into 'release' (merge request !282)
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !299 Enhanced Hygon processor's processing capabilities for large memory copying
  - [6.6][feat]Hygon: Enhanced Hygon processor's processing capabilities for large memory copying.
  - !298 Fix some known issues related to the LoongArch architecture
  - net: stmmac: dwmac-loongson: Fix slow MAC DMA reset
  - LoongArch: eiointc: Fix external interrupt routing errors
  - i2c: ls2x: Fix incorrect frequency register configuration causing functional issues
  - loongarch: Modularize Loongson DRM driver (CONFIG_DRM_LOONGSON=m)
  - pci/quirks: ls7a2000: fix pm transition of devices under pcie port
  - !297 Add CPU hardware monitoring platform driver and ACPI firmware support for Loongson SE driver
  - LoongArch: Adjust calculation method for the number of CPU packages
  - drivers/char: add ACPI firmware support for Loongson SE driver
  - LoongArch: Add CPU HWMon platform driver
  - Merge branch 'frankjpliu/release-mr-stable' into 'release' (merge request !281)
  - Merge linux 6.6.68 into TK5 release branch
  - Linux 6.6.68
  - Merge linux 6.6.67 into TK5 release branch
  - Linux 6.6.67
  - Merge linux 6.6.66 into release branch
  - Linux 6.6.66
  - Merge linux 6.6.65 into release branch
  - Linux 6.6.65
  - Merge branch 'frankjpliu/release-mr-ock' into 'release' (merge request !280)
  - !296 Fixed multiple vfio devices not working properly
  - driver/iommu: Fixed multiple vfio devices not working properly
  - !295 Hygon: kernel startup hash verification and secret injection for CSV3
  - KVM: SVM: CSV: Support inject secret to Hygon CSV3 guest
  - KVM: SVM: CSV: Support issue non-4K aligned CSV3_CMD_LAUNCH_ENCRYPT_DATA and more than once
  - KVM: SVM: CSV: Provide KVM_CSV3_SET_GUEST_PRIVATE_MEMORY ioctl interface
  - KVM: SVM: CSV: Provide KVM_CAP_HYGON_COCO_EXT interface
  - crypto: ccp: Provide csv_get_extension_info() to present extensions of newer CSV firmware
  - KVM: SVM: CSV: Ensure all the GPRs and some non-GPRs are synced before LAUNCH_ENCRYPT_VMCB
  - crypto: ccp: Get api version again when update Hygon CSV firmware at runtime
  - KVM: SVM: CSV: Fix the vm_size even if CSV3 feature is unsupported on Hygon CPUs
  - !294 Hygon: Add remote authentication support for Hygon CSV3 virtual machines
  - virt/csv-guest: Provide interface for request of CSV3 attestation report
  - x86/csv: Add support for CSV3 ATTESTATION secure call
  - x86/csv: Define ATTESTATION secure call command
  - !293 Hygon: Fix regressions on CSV2 live migration, CSV3 boot, CSV3 live migration
  - KVM: SVM: CSV: Explicitly enable LBR Virtualization after succeed to RECEIVE_ENCRYPT_CONTEXT
  - KVM: SVM: CSV: Explicitly enable LBR Virtualization after succeed to LAUNCH_ENCRYPT_VMCB
  - KVM: SVM: CSV: Explicitly enable LBR Virtualization after succeed to RECEIVE_UPDATE_VMSA
  - !286 Intel RDT monitoring support on Sub-NUMA Cluster (SNC) enabled systems
  - x86/resctrl: Fix arch_mbm_* array overrun on SNC
  - x86/resctrl: Update documentation with Sub-NUMA cluster changes
  - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode
  - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems
  - x86/resctrl: Make __mon_event_count() handle sum domains
  - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter
  - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode
  - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files
  - x86/resctrl: Allocate a new field in union mon_data_bits
  - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function
  - x86/resctrl: Initialize on-stack struct rmid_read instances
  - x86/resctrl: Add a new field to struct rmid_read for summation of domains
  - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files
  - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems
  - x86/resctrl: Introduce snc_nodes_per_l3_cache
  - x86/resctrl: Add node-scope to the options for feature scope
  - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures
  - x86/resctrl: Prepare for different scope for control/monitor operations
  - x86/resctrl: Prepare to split rdt_domain structure
  - x86/resctrl: Prepare for new domain scope
  - x86/resctrl: Replace open coded cacheinfo searches
  - cacheinfo: Add function to get cacheinfo for a given CPU and cache level
  - cpu: Drop "extern" from function declarations in cpuhplock.h
  - cpu: Move CPU hotplug function declarations into their own header
  - x86/resctrl: Don't try to free nonexistent RMIDs
  - x86/resctrl: Add tracepoint for llc_occupancy tracking
  - x86/resctrl: Rename pseudo_lock_event.h to trace.h
  - x86/resctrl: Simplify call convention for MSR update functions
  - x86/resctrl: Pass domain to target CPU
  - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline
  - Documentation/x86: Document that resctrl bandwidth control units are MiB
  - x86/resctrl: Remove lockdep annotation that triggers false positive
  - x86/resctrl: Separate arch and fs resctrl locks
  - x86/resctrl: Move domain helper migration into resctrl_offline_cpu()
  - x86/resctrl: Add CPU offline callback for resctrl work
  - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU
  - x86/resctrl: Add CPU online callback for resctrl work
  - x86/resctrl: Add helpers for system wide mon/alloc capable
  - x86/resctrl: Make rdt_enable_key the arch's decision to switch
  - x86/resctrl: Move alloc/mon static keys into helpers
  - x86/resctrl: Make resctrl_mounted checks explicit
  - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read()
  - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep
  - x86/resctrl: Queue mon_event_read() instead of sending an IPI
  - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow
  - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers
  - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid
  - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding
  - x86/resctrl: Track the number of dirty RMID a CLOSID has
  - x86/resctrl: Allow RMID allocation to be scoped by CLOSID
  - x86/resctrl: Access per-rmid structures by index
  - x86/resctrl: Track the closid with the rmid
  - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare()
  - x86/resctrl: Create helper for RMID allocation and mondata dir creation
  - x86/resctrl: Free rmid_ptrs from resctrl_exit()
  - tick/nohz: Move tick_nohz_full_mask declaration outside the #ifdef
  - x86/resctrl: Remove redundant variable in mbm_config_write_domain()
  - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe()
  - x86/resctrl: Display RMID of resource group
  - x86/resctrl: Add support for the files of MON groups only
  - x86/resctrl: Display CLOSID for resource group
  - x86/resctrl: Introduce "-o debug" mount option
  - x86/resctrl: Move default group file creation to mount
  - x86/resctrl: Unwind properly from rdt_enable_ctx()
  - x86/resctrl: Rename rftype flags for consistency
  - x86/resctrl: Simplify rftype flag definitions
  - x86/resctrl: Add multiple tasks to the resctrl group at once
  - x86/resctrl: Fix remaining kernel-doc warnings
  - !290 drivers: ethernet: Add motorcomm yt6801 support
  - drivers: ethernet: Add motorcomm yt6801 support
  - !291 Fix extioi restart issue in vm
  - arch/loongarch/kvm: Fix extioi restart issue
  - Merge branch 'korantli/release-cve' into 'release' (merge request !279)
  - drm/amd/display: Check denominator crb_pipes before used
  - Merge branch 'frankjpliu/release-cves' into 'release' (merge request !274)
  - net: napi: Prevent overflow of napi_defer_hard_irqs
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.69-21
changelog:
  - Merge branch OCK linux-6.6/devel branch into TK5 release branch
  - !305 [linux-6.6/devel][bugfix]: LoongArch: set CONFIG_CMA_SIZE_MBYTES to 0
  - LoongArch: set CONFIG_CMA_SIZE_MBYTES to 0
  - !303 perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4-7h and 10h
  - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4-7h and 10h
  - Merge branch 'paulning/tk5-mglru-pclimit' into 'release' (merge request !277)
  - rue/mm: support for sysctl pagecache_limit_ignore_slab when mglru enabled.
  - rue/mm: support for pagecache_limit_ignore_dirty when mglru enabled.
  - rue/mm: global pagecache limit support when mglru enabled.
  - rue/mm: check page_max in mem_cgroup_shrink_pagecache
  - rue/mm: pagecache limit feature for memcg when mglru enabled
  - Merge branch 'likexu/kvm/fixes' into 'release' (merge request !283)
  - tools headers: Sync x86 kvm and cpufeature headers with the kernel
  - KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits
  - KVM: x86: Remove ordering check b/w MSR_PLATFORM_INFO and MISC_FEATURES_ENABLES
  - KVM: x86: Reject userspace attempts to access ARCH_CAPABILITIES w/o support
  - KVM: VMX: Remove restriction that PMU version > 0 for PERF_CAPABILITIES
  - KVM: x86: Reject userspace attempts to access PERF_CAPABILITIES w/o PDCM
  - KVM: x86: Quirk initialization of feature MSRs to KVM's max configuration
  - KVM: x86: Disallow changing MSR_PLATFORM_INFO after vCPU has run
  - KVM: x86: Co-locate initialization of feature MSRs in kvm_arch_vcpu_create()
  - KVM: x86: Suppress userspace access failures on unsupported, "emulated" MSRs
  - KVM: x86: Suppress failures on userspace access to advertised, unsupported MSRs
  - KVM: x86: Hoist x86.c's global msr_* variables up above kvm_do_msr_access()
  - KVM: x86: Funnel all fancy MSR return value handling into a common helper
  - KVM: x86: Refactor kvm_get_feature_msr() to avoid struct kvm_msr_entry
  - KVM: x86: Rename get_msr_feature() APIs to get_feature_msr()
  - KVM: x86: Refactor kvm_x86_ops.get_msr_feature() to avoid kvm_msr_entry
  - KVM: x86: Rename KVM_MSR_RET_INVALID to KVM_MSR_RET_UNSUPPORTED
  - KVM: x86: Move MSR_TYPE_{R,W,RW} values from VMX to x86, as enums
  - KVM: SVM: Disallow guest from changing userspace's MSR_AMD64_DE_CFG value
  - Merge branch 'katrinzhou/release-fix-errno' into 'release' (merge request !285)
  - KEYS: include header for EINVAL definition
  - rue/io: check blkcg exist before doing account cgroup IO
  - configs: update std-configs-list
  - config,loongarch: delete the duplicate configuration of CONFIG_DRM_LOONGSON
  - config: keep with wangxinban
  - Merge linux 6.6.69 into TK5 release branch
  - Linux 6.6.69
  - !300 net: yt6801: Fix NULL pointer dereference in fxgmac_map_tx_skb
  - net: yt6801: Fix NULL pointer dereference in fxgmac_map_tx_skb


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.70-22
changelog:
  - Merge branch 'paulning/tk5-mglru-pclimit' into 'release' (merge request !297)
  - rue/mm: fix a line of code to comply with coding standards
  - Merge branch 'frankjpliu/release-mr-stable' into 'release' (merge request !295)
  - drivers,linkdata: fix tkci compile error after merge OCK linux-6.6/devel
  - Merge branch 'frankjpliu/release-mr-stable' into 'release' (merge request !294)
  - Merge branch OCK linux-6.6/devel branch into TK5 release branch
  - !301 linkdata: Add support for sxe/sxevf Controller driver in 6.6 kernel
  - fix compile error when using allyesconfig config
  - Add support for sxe/sxevf Controller driver in 6.6 kernel
  - Merge branch 'frankjpliu/release-mr-stable' into 'release' (merge request !292)
  - Merge linux 6.6.70 into TK5 release branch
  - Linux 6.6.70


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.70-23
changelog:
  - emm: update emm to v0.1.7.6
  - Merge branch 'cunhuang/arm64-mlnx-BuildRequires' into 'release' (merge request !315)
  - dist: fix BuildRequires for mlnx commercial-grade driver
  - Merge branch 'cunhuang/pick-v6.6.71_kdump' into 'release' (merge request !314)
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation
  - Revert "x86, crash: wrap crash dumping code into crash related ifdefs"
  - Revert "x86/hyperv: Fix hv tsc page based sched_clock for hibernation"
  - dist: fix the method of arch judge
  - dist: compile mlnx commercial-grade driver only on x86 and arm64
  - Merge branch 'cunhuang/kabi-vermagic-match-release' into 'release' (merge request !300)
  - kabi: modules: vermagic check match to release number
  - Merge branch 'aurelianliu/release_1030' into 'release' (merge request !298)
  - ACPI: PRM: Remove unnecessary strict handler address checks
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !306 Hygon: sync upstream bugfix patch for LRU and revert the workaround patch
  - Revert "mm/gup: don't check if a page is in lru before draining it"
  - mm: vmscan.c: fix OOM on swap stress test
  - mm/gup: clear the LRU flag of a page before adding to LRU batch
  - Revert "mm/page_alloc: don't use PCP list for THP-sized allocations when using PF_MEMALLOC_PIN"
  - dist: delete inner url for some reason
  - dist: change OC kernel URL discription


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.80-26
changelog:
  - Merge linux-6.6.80 into TK5 release branch
  - Linux 6.6.80
  - Merge branch 'haisu/release-fix-cgroupfs' into 'release' (merge request !350)
  - rue/cgroupfs: use effective_cpus to replace cpus_allowed
  - rue/cgroupfs: show 2 cores when quota=1 and cpuset>1
  - rue/cgroupfs: align the CPU quota_aware and cpuset show
  - rue/cgroupfs: simplify the cgroupfs_cpu_dir_filter function
  - rue/cgroupfs: rename cpu_subdir_xxx to cfs_subdir_xxx
  - rue/cgroupfs: remove the unnecessary cgroupfs_dentry_simple_ops
  - rue/cgroupfs: cpu/online show the same result of cpuset instead of number
  - fs: cgroup: fix compile errors on allyesconfig
  - cgroupfs: get data from ancestor cgroup
  - cgroupfs: add role in cgroup
  - Merge branch 'linuszeng/local_counter' into 'release' (merge request !352)
  - mm/memcontrol: add fields to memory.stat of cgroupv2
  - Merge branch 'likexu/kvm/fixes' into 'release' (merge request !344)
  - KVM: x86: Drop the now unused KVM_X86_DISABLE_VALID_EXITS
  - KVM: x86: Reject disabling of MWAIT/HLT interception when not allowed
  - KVM: x86: Disallow KVM_CAP_X86_DISABLE_EXITS after vCPU creation
  - KVM: x86: Drop now-redundant MAXPHYADDR and GPA rsvd bits from vCPU creation
  - KVM: x86/pmu: Drop now-redundant refresh() during init()
  - KVM: x86: Move __kvm_is_valid_cr4() definition to x86.h
  - KVM: x86: Account for KVM-reserved CR4 bits when passing through CR4 on VMX
  - KVM: x86: Explicitly do runtime CPUID updates "after" initial setup
  - KVM: x86: Do all post-set CPUID processing during vCPU creation
  - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}()
  - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID
  - KVM: nVMX: fix canonical check of vmcs12 HOST_RIP
  - KVM: x86: model canonical checks more precisely
  - KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical checks
  - KVM: x86: Route non-canonical checks in emulator through emulate_ops
  - KVM: x86: drop x86.h include from cpuid.h
  - Merge branch 'frankjpliu/release-mr-ock' into 'release' (merge request !353)
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !320 [linux-6.6/devel][[bugfix] LoongArch: Correct Cache Sharing, Update Flush Policy, HDA and Bluetooth Fixes
  - blutetooth/btusb: delay 1ms while suspending
  - LoongArch: Correct the cacheinfo sharing information
  - hda/pci: Add AZX_DCAPS_NO_TCSEL flag for Loongson HDA devices
  - LoongArch: Update the flush cache policy
  - !319 [linux-6.6/devel] LoongArch: Update Loongson-3 default config file
  - LoongArch: Update Loongson-3 default config file
  - !315 Backport upstream auto-tune per-CPU pageset size patchset
  - mm and cache_info: remove unnecessary CPU cache info update
  - mm, pcp: reduce detecting time of consecutive high order page freeing
  - mm, pcp: decrease PCP high if free pages < high watermark
  - mm: tune PCP high automatically
  - mm: add framework for PCP high auto-tuning
  - mm, page_alloc: scale the number of pages that are batch allocated
  - mm, pcp: reduce lock contention for draining high-order pages
  - cacheinfo: calculate size of per-CPU data cache slice
  - mm, pcp: avoid to drain PCP when process exit
  - tkernel: support kill protect feature
  - Merge branch 'costinchen/release' into 'release' (merge request !345)
  - dim: fix memory allocation size in store_task_pids()
  - integrity: Add a boot parameter to explicitly enable integrity subsystems
  - dist,copy-drivers: exit 1 if download driver fail
  - Merge linux 6.6.79 into TK5 release branch
  - Linux 6.6.79
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !314 [linux-6.6/devel]  Some eevdf scheduling enhancements from upstream
  - sched/eevdf: O(1) fastpath for task selection
  - sched/eevdf: Sort the rbtree by virtual deadline
  - !313 Add support for Hygon model 8h processor Merge pull request !313 from fuhao/linux-6.6-hygon-model8h
  - EDAC/amd64: Add support for Hygon family 18h model 8h
  - x86/amd_nb: Add support for Hygon family 18h model 8h
  - !311 [linux-6.6/devel]montage: update Mont-TSSE driver update Montage Mont-TSSE driver from 1.0.0 to 1.1.2 in 6.6.
  - montage: update Mont-TSSE driver
  - dist: check mlnx driver sha256sum before copy it
  - Merge branch linux-6.6.78 into TK5 release branch
  - Linux 6.6.78
  - Merge linux 6.6.77 into TK5 release branch
  - Linux 6.6.77
  - !310 Some fixes and optimization for Hygon model 7h10h processors
  - perf/x86/amd/core: Fix performance monitor for Hygon family 18h processor
  - EDAC/amd64: Get instance_id for Hygon family 18h model 10h
  - EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
  - EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
  - EDAC/amd64: Adjust address translation for Hygon family 18h model 10h
  - x86/amd_nb: Add helper function to identify Hygon family 18h model 10h
  - iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
  - EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
  - !309 Some fixes and optimization for Hygon model 4h~6h processors
  - EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
  - EDAC/amd64: Fix the calculation of instance_id for Hygon family 18h model 6h
  - EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
  - EDAC/amd64: Fix the calculation of cs_id for Hygon family 18h model 4h
  - x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
  - KVM: x86/svm: Add set_guest_pat_wb parameter for non-passthrough application scenarios
  - pinctrl: Add device HID for Hygon GPIO controller
  - !307 [linux-6.6/devel] Intel: backport KVM Fix for Clearing SGX EDECCSSA to 6.6
  - KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
  - Merge branch 'alexyonghe/reparent_memcg' into 'release' (merge request !338)
  - selftests: cgroup: Add memory.reparent_file test case
  - mm: Drop memory cgroup css reference when reparent page cache
  - Merge branch 'haisu/rue-compile-loongarch-fix' into 'release' (merge request !335)
  - rue/io: enable CONFIG_BLK_DEV_THROTTLING_CGROUP_V1 in loongarch
  - Merge linux 6.6.76 into TK5 release branch
  - Linux 6.6.76
  - Merge linux 6.6.75 into TK5 release branch
  - Linux 6.6.75
  - Merge linux 6.6.74 into TK5 release branch
  - Linux 6.6.74
  - Merge linux 6.6.73 into TK5 release
  - Linux 6.6.73
  - Merge linux 6.6.72 into TK5 release
  - Linux 6.6.72
  - Merge linux 6.6.71 into TK5 release
  - Linux 6.6.71


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.80-27
changelog:
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !331 [linux-6.6/devel][bugfix]: LoongArch: config: enable pci host controller fdt driver
  - LoongArch: config: enable pci host controller fdt driver
  - dist: only generate kernel-source rpm when build x86_64
  - Merge branch 'honglin/release' into 'release' (merge request !369)
  - rue/net: fix the association between sock and cgroup
  - Merge branch 'aurelianliu/release_0305' into 'release' (merge request !359)
  - epoll: introduce min_wait_time
  - dist: do not build kernel-source rpm in debug version
  - Merge branch OCK linux-6.6/devel into TK5 release branch
  - !327 added source subpackage for dist/rpm scripts
  - added source subpackage for dist/rpm scripts
  - !330 [linux-6.6/devel][bugfix]: LoongArch: Disable CONFIG_RT_GROUP_SCHED to prevent cgroup2 issues
  - LoongArch: Disable CONFIG_RT_GROUP_SCHED to prevent cgroup2 issues
  - !326 Backport PRM update and bugfixes up to v6.14
  - ACPI: PRM: Add PRM handler direct call support
  - ACPI: PRM: Annotate struct prm_module_info with __counted_by
  - !325 [Intel-SIG] Backport SierreForest MAXPHYSADDR support
  - KVM: selftests: x86: Prioritize getting max_gfn from GuestPhysBits
  - KVM: x86: Advertise max mappable GPA in CPUID.0x80000008.GuestPhysBits
  - !323 [Intel-SIG] 6.6: x86/cpu: KVM: Advertise CPUIDs for new instructions in Clearwater Forest (CWF)
  - x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
  - dist: take turns to download mlnx packages from two URLs
  - emm: add empty emm kernel module
  - emm: Remove submodule emm
  - Merge branch 'cunhuang/hinic_update' into 'release' (merge request !364)
  - net/hinic: Fix several compilation warnings with aarch64-openEuler-linux toolchain
  - net/hinic: Update Huawei Intelligent Network Card Driver: hinic
  - Revert "net: hinic: Fix cleanup in create_rxqs/txqs()"
  - Merge branch 'haisu/release-cgroupfs-remove-burst' into 'release' (merge request !362)
  - rue/cgroupfs: support quota_aware to /proc/stat
  - rue/cgroupfs: remove the CPU burst field


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.88-30
changelog:
  - Merge linux 6.6.68 into tk5 release branch
  - Linux 6.6.88
  - Merge ock linux-6.6/devel branch into tk5 release branch
  - !363 Default enable mucse ethernet driver for x86
  - !360 [linux-6.6/devel][bugfix]: LoongArch: configs: Enable ORC unwinder in loongson3_defconfig
  - !359 [linux-6.6/devel][bugfix]: drm: LoongArch: fix rx550/gfx6/gfx7/gfx8 error
  - drm/amdgpu: Fix RX550 pcie order dislocation.
  - drm/amdgpu: make duplicated EOP packet for GFX6 have real content
  - drm/amdgpu: make duplicated EOP packet for GFX7/8 have real content
  - drm/radeon: repeat the same EOP packet for EOP workaround on CIK
  - drm/amdgpu: Fix pcie order dislocation
  - Merge branch 'TK5-6.6-release_fix_CVE-2022-49087' into 'release-cve' (merge request !415)
  - rxrpc: fix a race in rxrpc_exit_net()
  - Merge branch 'katrinzhou/cve/release' into 'release-cve' (merge request !416)
  - f2fs: fix double free of f2fs_sb_info
  - exfat: fix out-of-bounds access of directory entries
  - exfat: change to get file size from DataLength
  - fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
  - CIFS: New mount option for cifs.upcall namespace resolution
  - jfs: add check read-only before txBeginAnon() call
  - nfsd: don't ignore the return code of svc_proc_register()
  - ksmbd: fix null pointer dereference in alloc_preauth_hash()
  - ext4: goto right label 'out_mmap_sem' in ext4_setattr()
  - dlm: prevent NPD when writing a positive value to event_done
  - f2fs: quota: fix to avoid warning in dquot_writeback_dquots()
  - f2fs: move release of block devices to after kill_block_super()
  - btrfs: fix block group refcount race in btrfs_create_pending_block_groups()
  - Merge branch 'olice/rpmspec_v3' into 'release' (merge request !408)
  - dist: remove the same name modules when install mlnx_ofed
  - dist: fixed 5.14 modules introduced by mlnx_ofed pakcge
  - dist: support mlnx_ofed modules update to update and extra
  - Revert "dist: disable mlnx outtree driver"
  - Merge branch 'leonylgao/thirdparty_intel_net_drivers' into 'release' (merge request !400)
  - drivers,thirdparty: add ixgbevf commercial-quality ethernet driver
  - drivers,thirdparty: add ixgbe commercial-quality ethernet driver
  - drivers,thirdparty: add iavf commercial-quality ethernet driver
  - drivers,thirdparty: add ice commercial-quality ethernet driver
  - drivers,thirdparty: add i40e commercial-quality ethernet driver
  - Merge branch 'cunhuang/disk_order' into 'release' (merge request !389)
  - dist: spec: create disk modules-load file while install kernel-modules rpm
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !354 Add mucse 1G and 10G ethernet driver for linux 6.6
  - !348 [linux-6.6/devel][bugfix]: objtool: Fix C jump table annotations for Clang
  - !349 [linux-6.6/devel][Feature]: LoongArch: wst: crypto: add Wst-se driver
  - !351 [linux-6.6/devel][bugfix]: ice: fix unaligned access in ice_create_lag_recipe
  - !350 [linux-6.6/devel][bugfix]: LoongArch: Export some signal functions to fix some issues.
  - LoongArch: Export some signal functions
  - LoongArch: Make some signal and ptrace functions non-static
  - LoongArch: Handle fp, lsx, lasx and lbt assembly symbols
  - !352 [linux-6.6/devel][bugfix]:LoongArch: Preserve firmware configuration if ACPI requires.
  - !344 drivers/pci: Enable pci bridge acs capability
  - drivers/pci: Enable pci bridge acs capability
  - driver/iommu: Set iommu driver buildin kernel
  - LoongArch: KVM: Repair the restart pressure test virtual machine hang dead problem
  - LoongArch: KVM: Add interrupt checking with Loongson AVEC
  - LoongArch: KVM: Reload guest CSR registers after S4
  - LoongArch: KVM: add virt extioi cpu encode support
  - LoongArch: KVM: Fixed VM migration failure after ptw was enabled
  - LoongArch: KVM: Add reset function for irqchip
  - LoongArch: fix compile error when enable CONFIG_PARAVIRT
  - LoongArch: KVM: enable ptw for kvm
  - LoongArch:LSVZ: Clear LLBCTL if secondary mmu mapping is changed
  - Merge branch 'katrinzhou/cve/release' into 'release' (merge request !384)
  - CIFS: New mount option for cifs.upcall namespace resolution
  - Merge branch 'leonylgao/fix-kabi-pahole' into 'release' (merge request !381)
  - kabi: deduplication friendly structs
  - Merge branch 'haisu/release-fuse-passthrough' into 'release' (merge request !356)
  - remap_range: merge do_clone_file_range() into vfs_clone_file_range()
  - ovl: relax WARN_ON in ovl_verify_area()
  - ovl: add permission hooks outside of do_splice_direct()
  - ovl: mark xwhiteouts directory with overlay.opaque='x'
  - ovl: fix dentry reference leak after changes to underlying layers
  - fuse: remove stray debug line
  - fuse: update inode size after extending passthrough write
  - fs: pass offset and result to backing_file end_write() callback
  - fuse: allow O_PATH fd for FUSE_DEV_IOC_BACKING_OPEN
  - fuse: respect FOPEN_KEEP_CACHE on opendir
  - fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set
  - fuse: disable the combination of passthrough and writeback cache
  - backing-file: convert to using fops->splice_write
  - fuse: verify zero padding in fuse_backing_map
  - fuse: fix parallel dio write on file open in passthrough mode
  - fuse: fix wrong ff->iomode state changes from parallel dio write
  - fuse: get rid of ff->readdir.lock
  - fuse: implement passthrough for mmap
  - fuse: implement splice read/write passthrough
  - fuse: implement read/write passthrough
  - fuse: implement open in passthrough mode
  - fuse: prepare for opening file in passthrough mode
  - fuse: implement ioctls to manage backing files
  - fuse: introduce FUSE_PASSTHROUGH capability
  - fuse: factor out helper for FUSE_DEV_IOC_CLONE
  - fuse: allow parallel dio writes with FUSE_DIRECT_IO_ALLOW_MMAP
  - fuse: introduce inode io modes
  - fuse: prepare for failing open response
  - fuse: break up fuse_open_common()
  - fuse: allocate ff->release_args only if release is needed
  - fuse: factor out helper fuse_truncate_update_attr()
  - fuse: add fuse_dio_lock/unlock helper functions
  - fuse: create helper function if DIO write needs exclusive lock
  - fs: factor out backing_file_mmap() helper
  - fs: factor out backing_file_splice_{read,write}() helpers
  - fs: factor out backing_file_{read,write}_iter() helpers
  - fs: prepare for stackable filesystems backing file helpers
  - fs: store real path instead of fake path in backing file f_path
  - fs: create helper file_user_path() for user displayed mapped file path
  - ovl: Add documentation on nesting of overlayfs mounts
  - ovl: Add an alternative type of whiteout
  - ovl: Support escaped overlay.* xattrs
  - ovl: Add OVL_XATTR_TRUSTED/USER_PREFIX_LEN macros
  - ovl: Move xattr support to new xattrs.c file
  - ovl: do not encode lower fh with upper sb_writers held
  - ovl: do not open/llseek lower file with upper sb_writers held
  - ovl: reorder ovl_want_write() after ovl_inode_lock()
  - ovl: split ovl_want_write() into two helpers
  - fs: get mnt_writers count for an open backing file's real path
  - fs: export mnt_{get,put}_write_access() to modules
  - fs: rename __mnt_{want,drop}_write*() helpers
  - ovl: add helper ovl_file_modified()
  - ovl: protect copying of realinode attributes to ovl inode
  - ovl: punt write aio completion to workqueue
  - ovl: propagate IOCB_APPEND flag on writes to realfile
  - ovl: use simpler function to convert iocb to rw flags
  - Merge branch 'herberthbli/dev_0326_v2' into 'release' (merge request !378)
  - rue/net: fix dev name bug
  - Merge linux 6.6.86 and 6.6.87 into TK5 release branch
  - Linux 6.6.87
  - Linux 6.6.86
  - Merge linux 6.6.85 into TK5 release branch
  - Linux 6.6.85
  - Merge linux 6.6.84 into TK5 release branch
  - Linux 6.6.84
  - Merge linux 6.6.83 into TK5 release branch
  - Linux 6.6.83
  - Merge linux 6.6.82 into TK5 release branch
  - Linux 6.6.82
  - Merge linux 6.6.81 into TK5 release branch
  - Linux 6.6.81
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !336 [olk-6.6] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - !332 [bugfix]: LoongArch: Fix boot failure in virtual machines by checking cpu_has_lvz


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.88-32
changelog:
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
  - crypto: starfive - Do not free stack buffer


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.88-33
changelog:
  - net driver: add Tencent cnic net driver support
  - mm/huge_memory: fix dereferencing invalid pmd migration entry
  - Merge release-cve branch into release branch
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
  - perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
  - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
  - KVM: SVM: Update SEV-ES shutdown intercepts with more metadata
  - arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
  - x86/mm: Eliminate window where TLB flushes may be inadvertently skipped
  - USB: wdm: close race between wdm_open and wdm_wwan_port_stop
  - xenbus: Use kref to track req lifetime
  - ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
  - Merge release-cve branch into release branch
  - smb: client: Avoid race in open_cached_dir with lease breaks
  - fs/9p: fix NULL pointer dereference on mkdir
  - ext4: fix off-by-one error in do_split
  - jfs: add sanity check for agwidth in dbMount
  - jfs: Fix uninit-value access of imap allocated in the diMount() function
  - ksmbd: fix use-after-free in __smb2_lease_break_noti()
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
  - ext4: introduce ITAIL helper
  - Revert "Merge branch 'TK5-6.6-release_fix_CVE-2022-49087' into 'release-cve' (merge request !415)"
  - Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
  - eth: bnxt: fix truesize for mb-xdp-pass case
  - PCI: Fix reference leak in pci_register_host_bridge()
  - udmabuf: fix a buf size overflow issue during udmabuf creation
  - scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
  - usb: cdns3: Fix deadlock when using NCM gadget
  - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
  - Merge branch 'honglin/release-cve' into 'release-cve' (merge request !446)
  - net_sched: qfq: Fix double list add in class with netem as child qdisc
  - net_sched: drr: Fix double list add in class with netem as child qdisc
  - 9p/net: fix improper handling of bogus negative read/write replies
  - Merge branch 'honglin/release' into 'release' fix compile error in allyesconfig (merge request !469)
  - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup
  - sched_ext: Fix unlock order of scx_cgroup_unlock and scx_fork_rwsem
  - Revert "watchdog/softlockup: Report the most frequent interrupts"
  - Revert "sched_ext: Enable the ops breather and eject BPF scheduler on softlockup"
  - cgroupfs: fix compile errs/warns for defconfig
  - sched_ext: fix compile errs/warns for defconfig
  - Merge branch 'feat/scx' into 'release' (merge request !426)


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.88-33.1
changelog:
  - config: Add bt sched configuration items support
  - rue/cpu/bt: Add basic framework of offline scheduler class


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.92-34
changelog:
  - Merge linux-6.6.92 into TK5 release branch
  - Linux 6.6.92
  - Merge linux 6.6.91 into TK5 release branch
  - Linux 6.6.91
  - Merge linux 6.6.90 into TK5 release branch
  - Linux 6.6.90
  - Merge linux 6.6.89 into TK5 release branch
  - Linux 6.6.89
  - Merge branch 'linux-6.6/devel' into release
  - !393 drm/virtio: implement virtio_gpu_shutdown
  - drm/virtio: implement virtio_gpu_shutdown
  - virtgpu: don't reset on shutdown
  - virtio: break and reset virtio devices on device_shutdown()
  - LoongArch: sync kvm head file from upstream
  - LoongArch: fix migrate issue
  - LoongArch: Save and restore CSR.CNTC for hibernation
  - !392 [linux-6.6/devel][Feat]Hygon: Support to dec and enc userspace pages
  - x86/mm: support to dec and enc userspace pages
  - !391 [linux-6.6/devel][Bugfix]hugetlb: Fix NULL pointer dereference BUG
  - mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios
  - !389 phytium: pswiotlb: Add PSWIOTLB mechanism to improve DMA performance
  - phytium: pswiotlb: Add PSWIOTLB mechanism to improve DMA performance
  - !388 [linux-6.6/devel][Bugfix]Hygon: Address boot failures of CSV1/CSV2 VMs on Hygon 2g and C86-3g CPUs with firmware build ID below 1878 and 1810.
  - KVM: SVM: CSV is unsupported if both the firmware with a build ID < 1878 and SME is not in use
  - KVM: SVM: The ASID range available for CSV2 guests vary across different firmware
  - !377 net/hinic3:Add Huawei Intelligent Network Card Driver:hinic3
  - net/hinic3:Add Huawei Intelligent Network Card Driver:hinic3
  - !387 [linux-6.6/devel][bugfix]: drivers/scsi/hisi_raid: Convert files to Unix line endings
  - drivers/scsi/hisi_raid: Convert files to Unix line endings
  - !386 [linux-6.6/devel][bugfix]: LoongArch: fix sequence issues between DMA and interrupts on the Loongson platform.
  - nvme: loongarch: Add udelay to avoid data error caused by dma sequence
  - megaraid: loongarch: Add udelay to avoid data error caused by dma sequence
  - !385 [linux-6.6/devel][bugfix]: LoongArch: kvm: fix some known issues for loongarch drivers/iommu
  - drivers/iommu: Enhance the robustness of the iommu module
  - driver/vfio: disable vfio pci intx
  - drivers/iommu: Define the alias of the iommu device
  - loongarch/configs: enable vfio mdev config
  - drivers/iommu: Add the "iommu disable" probe
  - !384 [linux-6.6/devel][Bugfix]: LoongArch: sync some upstream patch.
  - LoongArch: Prevent cond_resched() occurring within kernel-fpu
  - mm/migrate: correct nr_failed in migrate_pages_sync()
  - mm/page_alloc.c: avoid infinite retries caused by cpuset race
  - mm/hugetlb: LoongArch: Return NULL from huge_pte_offset() for none PMD
  - !383 [linux-6.6/devel][Feature]: add loongson 2k3000 gmac and pwm drivers support
  - net: stmmac: dwmac-loongson: Add new GMAC's PCI device ID support
  - pwm: Add Loongson PWM controller support
  - !381 [linux-6.6/devel][Feature]Hygon: Add new pci device id and optimized hygon trusted function kernel driver
  - crypto: ccp: Fix for potential memory Out-of-Bounds access due to insufficient array size
  - crypto: ccp: add new pci device id and modify psp_do_cmd() interface to not rely on sev device
  - !380 SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers
  - SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers
  - !376 bcache: call force_wake_up_gc() if necessary in check_should_bypass()
  - bcache: call force_wake_up_gc() if necessary in check_should_bypass()
  - !378 Default enable drm accel driver
  - Default enable drm accel driver
  - !370 [linux-6.6/devel][Bugfix]Hygon：Avoid concurrent pinning shared pages at both KVM side and vfio side when passthrough device to CSV3 VM
  - KVM: SVM: CSV: fix CSV3 launch failures because of concurrent longterm pin
  - !369 [linux-6.6/devel][Feature]Hygon: In a CSV3 VM, the hypercall should notify real page enc/dec status
  - x86/kvm: Don't hypercall to enc all usable RAM on CSV3 platform
  - !368 [linux-6.6/devel][Bugfix]Hygon: Return 0 at the beginning of csv_guest_hygon_coco_extension() for non-CSV3 VMs
  - KVM: SVM: CSV: Return 0 at the beginning of csv_guest_hygon_coco_extension() for non-CSV3 VMs
  - !367 [linux-6.6/devel][Bugfix]Hygon: Remove HYDCU fixup header driver from kernel source code
  - Revert "drm/hygon: Add support to passthrough Hygon DCU to virtual machine"
  - !366 [linux-6.6/devel][Feature]Backport some mm related patches from recent (202504) Linux upstream
  - mm: compaction: use the proper flag to determine watermarks
  - mm/compaction: factor out code to test if we should run compaction for target order
  - mm/hugetlb: wait for hugetlb folios to be freed
  - mm: replace free hugepage folios after migration
  - mm/cma: using per-CMA locks to improve concurrent allocation performance
  - Revert "mm/cma: add API to enable concurrent allocation from the CMA"
  - Revert "x86/mm: CSV allows CMA allocation concurrently"
  - KVM: SEV: Use long-term pin when registering encrypted memory regions
  - Revert "KVM: SEV: Pin SEV guest memory out of CMA area"
  - mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
  - !372 [linux-6.6/devel][Feature]: LoongArch: support CONFIG_SCHED_MC
  - LoongArch: support CONFIG_SCHED_MC
  - !371 [linux-6.6/devel][Feature]: LoongArch: configs: Enable some configs for looongarch
  - LoongArch: configs: Enable GPIO_PCA953X driver
  - LoongArch: configs: Enable IGC driver.
  - LoongArch: configs: CONFIG_NR_CPUS expanded to 2048.
  - add LICENSE.
  - Merge branch 'korantli/release-cve' into 'release' (merge request !478)
  - thermal: core: Reference count the zone in thermal_zone_get_by_id()
  - Merge branch 'rongwei.wang/uncachedv2' into 'release' (merge request !404)
  - mm/truncate: don't skip dirty page in folio_unmap_invalidate()
  - mm/filemap: fix miscalculated file range for filemap_fdatawrite_range_kick()
  - xfs: flag as supporting FOP_DONTCACHE
  - iomap: make buffered writes work with RWF_DONTCACHE
  - mm: add FGP_DONTCACHE folio creation flag
  - mm: call filemap_fdatawrite_range_kick() after IOCB_DONTCACHE issue
  - mm/filemap: add filemap_fdatawrite_range_kick() helper
  - mm/filemap: drop streaming/uncached pages when writeback completes
  - mm/filemap: add read support for RWF_DONTCACHE
  - fs: add RWF_DONTCACHE iocb and FOP_DONTCACHE file_operations flag
  - mm/truncate: add folio_unmap_invalidate() helper
  - mm/readahead: add readahead_control->dropbehind member
  - mm: add PG_dropbehind folio flag
  - mm/readahead: add folio allocation helper
  - mm/filemap: use page_cache_sync_ra() to kick off read-ahead
  - mm/filemap: change filemap_create_folio() to take a struct kiocb
  - mm: allow read-ahead with IOCB_NOWAIT set
  - fs: claw back a few FMODE_* bits
  - mm: separate out FOLIO_FLAGS from PAGEFLAGS
  - Merge branch 'new_swap' into 'release' (merge request !522)
  - mm, swap: fix false warning for large allocation with !THP_SWAP
  - mm/workingset.c: fix using uninitialized variables
  - emm/oversell: adapt process interface for memory overselling
  - emm/oversell: adapt memcg interface for memory overselling
  - emm/oversell: adapt vmstat interface for memory overselling
  - emm/oversell: adapt meminfo interface for memory overselling
  - emm/oversell: wrap the overbooking judgment statement into an inline function
  - emm/oversell: Added emm_oversell and emm_manager fields in mem_cgroup
  - mm/memcontrol: enable zram_memcg_nocharge
  - mm, swap: simplify folio swap allocation
  - mm, swap: remove swap slot cache
  - mm, swap: use percpu cluster as allocation fast path
  - mm, swap: don't update the counter up-front
  - mm, swap: avoid redundant swap device pinning
  - mm, swap: drop the flag TTRS_DIRECT
  - mm, swap: avoid reclaiming irrelevant swap cache
  - mm, swap: correct comment in swap_usage_sub()
  - mm, swap: remove setting SWAP_MAP_BAD for discard cluster
  - mm/swapfile.c: remove the incorrect code comment
  - mm/swap_state.c: fix the obsolete code comment
  - mm, swap: avoid BUG_ON in relocate_cluster()
  - mm: swap: use correct step in loop to wait all clusters in wait_for_allocation()
  - mm: swap: add back full cluster when no entry is reclaimed
  - mm, swap: fix reclaim offset calculation error during allocation
  - mm, swap_slots: remove slot cache for freeing path
  - mm, swap: use a global swap cluster for non-rotation devices
  - mm, swap: introduce a helper for retrieving cluster from offset
  - mm, swap: simplify percpu cluster updating
  - mm, swap: reduce contention on device lock
  - mm, swap: use an enum to define all cluster flags and wrap flags changes
  - mm, swap: hold a reference during scan and cleanup flag usage
  - mm, swap: clean up plist removal and adding
  - mm, swap: clean up device availability check
  - mm, swap: use cluster lock for HDD
  - mm, swap: remove old allocation path for HDD
  - mm, swap: fold swap_info_get_cont in the only caller
  - mm, swap: minor clean up for swap entry allocation
  - mm, swap: fix allocation and scanning race with swapoff
  - mm: swapfile: fix cluster reclaim work crash on rotational devices
  - mm, swap: avoid over reclaim of full clusters
  - mm: swap: prevent possible data-race in __try_to_reclaim_swap
  - mm: swapfile: fix SSD detection with swapfile on btrfs
  - mm: rename instances of swap_info_struct to meaningful 'si'
  - mm: swap: add a adaptive full cluster cache reclaim
  - mm: swap: relaim the cached parts that got scanned
  - mm: swap: add a fragment cluster list
  - mm: swap: allow cache reclaim to skip slot cache
  - mm: swap: skip slot cache on freeing for mTHP
  - mm: swap: clean up initialization helper
  - mm: swap: separate SSD allocation from scan_swap_map_slots()
  - mm: swap: mTHP allocate swap entries from nonfull list
  - mm: swap: swap cluster switch to double link list
  - mm/swapfile: mark racy access on si->highest_bit
  - mm,swap: add document about RCU read lock and swapoff interaction
  - mm: swap: allow storage of all mTHP orders
  - Revert "swapfile: add a helper get_cached_swap_page_of_type"
  - mm: swap: update get_swap_pages() to take folio order
  - mm: swap: simplify struct percpu_cluster
  - mm: swap: remove CLUSTER_FLAG_HUGE from swap_cluster_info:flags
  - mm/swapfile:__swap_duplicate: drop redundant WRITE_ONCE on swap_map for err cases
  - mm: swap: enforce updating inuse_pages at the end of swap_range_free()
  - config: delete no longer existed FRONTSWAP
  - Merge branch 'leonylgao/add_more_kabi_reserved' into 'release' (merge request !427)
  - kabi: add paddings (part 6)
  - kabi: add paddings (part 5)
  - kabi: add paddings (part 4)
  - Merge branch 'haoqinhuang/release-cna-spinlock' into 'release' (merge request !418)
  - locking/qspinlock: Add config to open CNA
  - locking/qspinlock: Introduce the shuffle reduction optimization into CNA
  - locking/qspinlock: Avoid moving certain threads between waiting queues in CNA
  - locking/qspinlock: Introduce starvation avoidance into CNA
  - locking/qspinlock: Introduce CNA into the slow path of qspinlock
  - locking/qspinlock: Refactor the qspinlock slow path
  - locking/qspinlock: Rename mcs lock/unlock macros and make them more generic
  - thirdparty support
  - samples: add hung_task detector mutex blocking sample
  - hung_task: show the blocker task if the task is hung on mutex
  - mm/vmscan: wake up flushers conditionally to avoid cgroup OOM
  - rue/cgroupfs: correct cgroupfs_stat_show_cpuacct_info=2 result with unlimited quota
  - io_uring: add sysctl interface for iowait
  - thirdpaty/bnxt: update bnxt_en driver to 233


author: rockerzhu <rockerzhu@tencent.com> - 3.7.1-10
changelog:
  - [Type] Security
  - [Desc] Fix CVE-2025-5914 and CVE-2025-5915 and and CVE-2025-5916 and CVE-2025-5917 and CVE-2025-5918.


author: Wang Guodong <gordonwwang@tencent.com> - 4.33-2
changelog:
  - Move event.h from libev-devel to a subpackage(libev-event-devel), so 
    libev-devel no longer conflicts with libevent-devel.


author: Xin Cheng <denisecheng@tencent.com> - 0.10.5-3
changelog:
  - Fix CVE-2023-48795: fix prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918: fix missing checks for return values for digests
  - Fix CVE-2023-6004: fix ProxyCommand/ProxyJump features allow injection


author: Tracker Robot <trackbot@opencloudos.tech> - 4.4.36-6
changelog:
  - Apply patches from rpm-tracker
  - [Performance] configure: Only test the makecontext signature we need


author: Tracker Robot <trackbot@opencloudos.tech> - 4.4.36-7
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ac2fea3990a3b0d750d080b055dd21741c14b9c3.patch: crypt: Zeroize initialized and reserved data members after computation.
  - [Bug Fix] 59d79640160fd8e1f62ab799d971e236063bb979.patch: crypt: Initialize internal_rbytes array with 0-string.


author: Yi Lin <nilusyi@tencent.com> - 20240811-1
changelog:
  - bump to 20240811, fix CVE-2023-31315
  - qcom: update path for video firmware for vpu-1/2/3.0
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642
  - rtw89: 8852c: add fw format-1 v0.27.97.0
  - rtw89: 8852bt: add firmware 0.29.91.0
  - amdgpu: A lot of firmware updates
  - mediatek: Update mt8195 SOF firmware
  - xe: First GuC release v70.29.2 for BMG
  - xe: Add GuC v70.29.2 for LNL
  - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL
  - i915: Update MTL DMC v2.22, MTL GSC to v102.0.10.1878
  - xe: Add BMG HuC 8.2.10, GSC 104.0.0.1161 for LNL, LNL HuC 9.4.13
  - i915: update DG2 HuC to v7.10.16
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641
  - update firmware for MT7921/MT7922 WiFi device
  - update firmware for mediatek bluetooth chip (MT7921/MT7922)
  - iwlwifi: add gl FW for core89-58 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release
  - mediatek: Update mt8195 SOF firmware and sof-tplg
  - ASoC: tas2781: fix the license issue for tas781 firmware
  - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008
  - i915: Update Xe2LPD DMC to v2.21
  - qcom: move signed x1e80100 signed firmware to the SoC subdir
  - qcom: add video firmware file for vpu-3.0
  - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics
  - qcom: add gpu firmwares for x1e80100 chipset
  - add firmware for qat_402xx devices
  - Update AMD cpu microcode
  - intel: avs: Add numerous sound topology files
  - Add a copy of Apache-2.0
  - intel: avs: Update AudioDSP base firmware for APL-based platforms
  - Add ISH firmware file for Intel Lunar Lake platform
  - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics
  - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41
  - amdgpu: Update ISP FW for isp v4.1.1
  - mediatek: Update MT8173 VPU firmware to v1.2.0
  - qcom: Add AIC100 firmware files
  - amlogic: Update bluetooth firmware binary
  - Various Intel Bluetooth firmware updates
  - rtl_bt: Update RTL8822C BT UART/USB firmware
  - amdgpu: update DMCUB to v0.0.222.0 for DCN314
  - iwlwifi: add ty/So/Ma firmwares for core88-87 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release
  - add new cc33xx firmware for TI cc33xx WiFi chips
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops


author: Yi Lin <nilusyi@tencent.com> - 20240909-1
changelog:
  - bump to 20240909, fix CVE-2023-20584/31356/31346
  - i915: Update MTL DMC v2.23
  - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops2
  - amdgpu: Revert sienna cichlid dmcub firmware update
  - iwlwifi: add Bz FW for core89-58 release
  - rtl_nic: add firmware rtl8126a-3
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351
  - qcom: vpu: restore compatibility with kernels before 6.6
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - rtw89: 8922a: add fw format-1 v0.35.41.0	Chin
  - linux-firmware: update firmware for MT7925 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  - rtl_bt: Add firmware and config files for RTL8922A
  - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part
  - rtl_bt: de-dupe identical config.bin files
  - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin
  - linux-firmware: Update AMD SEV firmware
  - linux-firmware: update firmware for MT7996
  - Revert "i915: Update MTL DMC v2.22"
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ...
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE...
  - ath11k: QCA2066 hw2.1: add board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1
  - qcom: vpu: add video firmware for sa8775p
  - amdgpu: DMCUB updates for various AMDGPU ASICs


author: Upgrade Robot <upbot@opencloudos.tech> - 4.99.4-1
changelog:
  - Upgrade to version 4.99.4
  - Fixes lsof got stuck when ulimit was set too high(https://github.com/lsof-org/lsof/issues/281)


author: Upgrade Robot <upbot@opencloudos.tech> - 20250512-1
changelog:
  - Upgrade to version 20250512 to fix CVEs: CVE-2025-20623 CVE-2025-20054 CVE-2025-20103 CVE-2024-45332 CVE-2024-43420 CVE-2025-24495 CVE-2025-20012 CVE-2024-28956


author: Doris Chao <doriscchao@tencent.com> - 8.0-1
changelog:
  - Update to nano-8.0 
    • CVE-2024-5742: Avoid privilege escalations via symlink attacks
    on emergency save file.
    • By default ^F is bound to starting a forward search, and ^B to
    starting a backward search, while M-F and M-B repeat the search
    in the corresponding direction.  (See the documentation if you
    want the old bindings back.)
    • Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
    ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a
    file, ^R replace, ^G find again, ^D find again backwards, ^A set
    the mark, ^T jump to a line, ^P show the position, and ^E execute.
    • Above modern bindings are activated also when the name of nano's
    executable (or a symlink to it) starts with the letter "e".
    • To open a file at a certain line number, one can now use also
    `nano filename:number`, besides `nano +number filename`.
    • <Alt+Home> and <Alt+End> put the cursor on the first and last
    row in the viewport, while retaining the horizontal position.
    • When the three digits in an #RGB color code are all the same,
    the code is mapped to the xterm grey scale, giving access to
    fourteen levels of grey instead of just four.
    • For easier access, M-" is bound to placing/removing an anchor,
    and M-' to jumping to the next anchor.
    • Whenever an error occurs, the keystroke buffer is cleared, thus
    stopping the execution of a macro or a string bind.
    • The mousewheel scrolls the viewport instead of moving the cursor.


author: denisecheng <denisecheng@tencent.com> - 1.0-11
changelog:
  - don't provide golang macros, independent as go-rpm-macros and requires it in default.
  - \
  /usr/bin/python3 /usr/lib/rpm/OpenCloudOS/pyproject_save_files.py \
    --output-files "/builddir/build/BUILD/pyproject-files" \
    --output-modules "/builddir/build/BUILD/pyproject-modules" \
    --buildroot "/builddir/build/BUILDROOT/opencloudos-rpm-config-1.0-11.oc9.noarch" \
    --sitelib "/usr/lib/python3.11/site-packages" \
    --sitearch "/usr/lib64/python3.11/site-packages" \
    --python-version "3.11" \
    --pyproject-record "/builddir/build/BUILD/pyproject-record" \
    --prefix "/usr" \
    
  : add support for nested directories and License-Files
  - add forge.lua macros.forge to support go rpm packaging.
  - add mono_arches for mono pkgs building
  - add macros.nodejs-srpm for nodejs building.
  - add loongarch64 support


author: Xin Cheng <denisecheng@tencent.com> - 9.3p2-4
changelog:
  - CVE-2023-51385: forbid shell metasymbols in username/hostname
  - CVE-2023-51384: apply destination constraints to all p11 keys
  - CVE-2023-48795: fix Terrapin attack


author: Tracker Robot <trackbot@opencloudos.tech> - 3.0.12-16
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] 95dfb4244a8b6f23768714619f4f4640d51dc3ff.patch: Add NULL check before accessing PKCS7 encrypted algorithm
  - [Bug Fix] a473d59db1ce6943c010c5ba842e7c17fbe81aab.patch: Fix unbounded memory growth when using no-cached-fetch
  - [Bug Fix] 17d12183797033f55aec03376ffd3969cd703c0e.patch: Fix dasync_rsa_decrypt to call EVP_PKEY_meth_get_decrypt
  - [Bug Fix] d44aa28b0db3ba355fe68c5971c90c9a1414788f.patch: Fix off by one issue in buf2hexstr_sep()
  - [Bug Fix] d9d260eb95ec129b93a55965b6f2f392df0ed0a9.patch: SSL_set1_groups_list(): Fix memory corruption with 40 groups and more
  - [Bug Fix] 112754183a720b4db0f2770a80a55805010b4e68.patch: KDF_CTX_new API has incorrect signature (const should not be there)
  - [Bug Fix] 3732a8963d7aacde04f138204e235478609cba8a.patch: Fix memory leaks on error cases during drbg initializations
  - [Bug Fix] 5781c0a181c97530e57708fa67bb5faa44368246.patch: Fix error reporting in EVP_PKEY_{sign,verify,verify_recover}


author: Tracker Robot <trackbot@opencloudos.tech> - 1.5.3-9
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] 9e4e3e42554fc6344a0b20b42aafb48011e9b2c9.patch: pam_env: remove escaped newlines from econf lines
  - [Bug Fix] 0703453bec6ac54ad31d7245be4529796a3ef764.patch: pam_env: check VENDORDIR after config.h inclusion
  - [Bug Fix] 28894b319488e8302899ee569b6e0911905f374e.patch: pam_env: fix --enable-vendordir fallback logic
  - [Bug Fix] 49b0b16a3d9781c6d7294b3d04a4d6d57b388c1b.patch: pam_access: do not call pam_sm_authenticate
  - [Bug Fix] 66106ea2c9c20c1c5c05f919b363ae6ca3e7d5ca.patch: pam_localuser: do not call pam_sm_authenticate
  - [Bug Fix] 6bd4e4e54c2cdc38ce08436ac786330af72b6207.patch: pam_usertype: do not call pam_sm_authenticate
  - [Bug Fix] 8295f092f6138ced15decc05e094667b0a8488e3.patch: pam_lastlog: do not call pam_sm_authenticate
  - [Bug Fix] d3b8c0723d0d691585474b0e14982f62b115a672.patch: pam_unix: do not truncate user names
  - [Bug Fix] 76af6380776a81ffd6ff50de254fb448ec6bce79.patch: pam_timestamp: correct failure condition


author: cunshunxia <cunshunxia@tencent.com> - 3.11.6-15
changelog:
  - fix CVE-2025-0938.
  - gh-105704: Disallow square brackets (`[` and `]`) in
   domain names for parsed URLs (GH-129418) (#129528)


author: Shuo Wang <abushwang@tencent.com> - 3.11.6-16
changelog:
  - fix CVE-2025-1795
  - email/_header_value_parser: don't encode list separators (GH-100885) (GH-115593)
  - Fix UnicodeEncodeError in TokenList.fold() (GH-113730)
  - Fix for email.generator.Generator with whitespace between encoded words. (#92281)
  - Fix AttributeError in the email module (GH-119099)


author: cunshunxia <cunshunxia@tencent.com> - 3.11.6-17
changelog:
  - fix CVE-2025-4435
  - Also addresses CVEs 2024-12718, 2025-4138, 2025-4330, and 2025-4517
  - gh-135034: Normalize link targets in tarfile, add `os.path.realpath(strict='allow_missing')` (GH-135037)
  - fix CVE-2025-6069


author: Tracker Robot <trackbot@opencloudos.tech> - 8.2312.0-4
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] ec3ddc61c5fffd5d3762520338ea0e8d813c5b4b.patch: Merge pull request #5454 from apple-ouyang/patch-1
  - [Bug Fix] 8d7392d391837bde0b5783428eb2c1dfdf19c1bc.patch: Merge pull request #5458 from rsyslog/nonexistentfoo


author: Wang Guodong <gordonwwang@tencent.com> - 1.70.0-3
changelog:
  - include -Cstrip=none in %build_rustflags for rust-1.77.0
  - sync rust-toolset macros to rust-packaging v25.2


author: Yi Lin <nilusyi@tencent.com> - 15.7-5
changelog:
  - fix CVE-2023-40546, CVE-2023-40551, CVE-2023-40550, 
    CVE-2023-40549, CVE-2023-40548, CVE-2023-40547


author: Miaojun Dong <zoedong@tencent.com> - 4.5.5-1
changelog:
  - Bump version to 4.5.5
  - Add build requirement python3-setuptools
  - Comment the line to generates i18n docs because it is broken


author: xiaoyunzhao<xiaoyunzhao@tencent.com> - 3.42.0-7
changelog:
  - [Type] other
  - [DESC] Apply patches from rpm-tracker
  - [Performance] https://github.com/sqlite/sqlite/commit/44980e816985953ed7125b657751a1d09560df02.patch: Use hashing to accelerate column matching on INSERT statements.


author: Upgrade Robot <upbot@opencloudos.org> - 1.9.14p1-1
changelog:
  - Upgrade to version 1.9.14p1
  - not support log-server, disable configure options and remove openssl-devel


author: cunshunxia <cunshunxia@tencent.com> - 255-13
changelog:
  - fix systemd-networkd-wait-online unexpected action caused by
  - ab3aed4a0349bbaa26f53340770c1b59b463e05d


author: Doris Chao <doriscchao@tencent.com> - 7.0.3-4
changelog:
  - [Type] bugfix
  - [DESC] Change the way info files information is updated, no longer using
  - the fix-info-dir script,since bash no loonger provies the /usr/share/info/dir


author: Doris Chao <doriscchao@tencent.com> - 3.4-1
changelog:
  - [Type] bugfix
  - [DESC] Update to version 3.4 to resolve crashes when copying in copy-mode
  - https://github.com/tmux/tmux/issues/3699


author: Yi Lin <nilusyi@tencent.com> - 9.0.2092-2
changelog:
  - fixed CVE-2023-48231 CVE-2023-48232 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 
    CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-22667


author: Tracker Robot <trackbot@opencloudos.tech> - 1.2.13-7
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 7a7202de3568522dfc75a455927ccbd7faf63411.patch: Correct a variable type in deflate.c.


author: Tracker Robot <trackbot@opencloudos.tech> - 1.2.13-8
changelog:
  - [Type] security
  - [DESC] Apply patches from rpm-tracker
  - [CVE Fix] 14a5f8f266c16c87ab6c086fc52b770b27701e01.patch: Neutralize zip file traversal attacks in miniunz.


author: Tracker Robot <trackbot@opencloudos.tech> - 1.2.13-9
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 431a9b65eacab7efabf2230ba97ff426c0e07f9d.patch: Add bounds checking to ERR_MSG() macro, used by zError().


