# changelog

author: tomcruiseqi <tomcruiseqi@inspur.com> - 7.1.2.8-8
changelog:
  - Fix CVE-2026-30935,CVE-2026-30937,CVE-2026-28494,CVE-2026-30883,CVE-2026-28692,CVE-2026-28687,CVE-2026-28693,CVE-2026-28493


author: Loongson <service@loongson.cn> 7.1.2.16-1
changelog:
  - Update to 7.1.2.16 fix CVE-2026-25965、CVE-2026-25794、CVE-2026-24481
  - CVE-2026-25985、CVE-2026-28693、CVE-2026-28691和CVE-2026-23876


author: Funda Wang <fundawang@yeah.net> - 1.0.5-32
changelog:
  - Produce abi dump
  - Add revised patch from gentoo to fix parallel build, and
    put correct symlink of man pages


author: lzq11122 <lzq02303433@alibaba-inc.com> - 0.22.1-1
changelog:
  - Update to 0.22.1 to fix CVE-2026-5342,CVE-2026-5318,CVE-2026-20889
  - Remove patch for new version fixed


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 1.22.0-1
changelog:
  - Update to 1.22.0-1 from 1.18.12-1
  - Switch to build using meson
  - Add patches for a couple of bugs that make static analysis unhappy
    [Patches cherry-pick from c10s. Original changelog:
    - Add patches for a couple of bugs that make static analysis unhappy.]


author: wenxin <wx02272781@alibaba-inc.com> - 3.4.10-1
changelog:
  - Update 3.4.10 to fix CVE-2026-34379, CVE-2026-34543, CVE-2026-34544, CVE-2026-34545
  - Remove patch new version include


author: lzq11122 <lzq02303433@alibaba-inc.com> - 3.4.11-1
changelog:
  - Update to 3.4.11 to fix CVE-2026-42216,CVE-2026-41142
  - Remove patch fix-CVE-2026-42217.patch (included in upstream 3.4.11)


author: Tingyin Duan <duanty@sugon.com> - 1.2.7-2
changelog:
  - update to version 1.2.7:
  -     change path of dbus-1/system.d/*  
  -     remove shutdown-on-idle.patch because it is already included 
  -     not install /usr/lib/debug/usr/libexec/packagekit-dnf-refresh-repo-1.2.7-2.an23.x86_64.debug
  -     not install /usr/libexec/packagekit-dnf-refresh-repo


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 6.0.1-1
changelog:
  - Update to 6.0.1-1 from 6.0-2
  - Fix build with Cython 3 
    [Patches cherry-pick from c10s. Original changelog:
    - Fix build with Cython 3]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 6.0.2-1
changelog:
  - Update to 6.0.2 to fix build err with Cython
  - Remove patch as the new version of tarball already includes changes.


author: gcdota930915 <taifu.gc@alibaba-inc.com> - 0.303.1-2
changelog:
  - Add a sub-package for variable font, abattis-cantarell-vf-fonts
  - Rewrite the spec file in font template


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 4.1.8-1
changelog:
  - Update to 4.1.8-1 from 3.5.1-4
  - Update spec file to use SPDX identifiers
  - Remove patch which already exist in upstream
  - Loongarch64 is not supported now


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 0.18.6-1
changelog:
  - Update to 0.18.6-1 from 0.16-1
  - Remove patches which already exist in code
  - Migrated to SPDX license
  - Add patches for compile issue
    [Patches cherry-pick from c10s. Original changelog:
    - fix verbose patch
    - get rid of libgcrypt]


author: Cheng Yang <yc02267530@alibaba-inc.com> - 20250311-1
changelog:
  - update to 20250311
  - The patch was removed because the new version already included the patch content


author: Dong Chuanjian <dongchuanjian@loongson.cn> - 38.23-5.2
changelog:
  - backport upstream patch
  - Reconfig blockdev version to 3.0
  - Backport patch to remove unsupported device: nvdimm
  - Backport patch to remove deprecated funcs provided by libblockdev 2.0


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 0.60.8.1-1
changelog:
  - Update to 0.60.8.1-1 from 0.60.8-3
  - Remove patch which is already exist in upstream
  - Add deprecated description because there were no upstream releases for a long time
  - Migrated to SPDX license


author: chen_yu_ao <m15927509890@163.com> - 2.5.1-4
changelog:
  - add patch 0001: eliminate a dead store in attr_copy_action()
  - add patch 0002: fix incompatibility with autoconf 2.12


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 1.4.3-3
changelog:
  - The authselect command can only be executed after authselect is installed.
  - fix Permission denied for root when use command passwd


author: yuanhui <yuanhui@linux.alibaba.com> - 2.71-2
changelog:
  - Add doc packages and abi files
  - Fix typo in variable name
  - Fix testsuite failures with bash 5.2
  - Disable testcase 227 for parallel auto test and signal handling failure
  - Use %bcond_without for --with/out=check


author: Loongson <service@loongson.cn> - 2.41-5
changelog:
  - Fixed CVE:
  - CVE-2025-1147
  - CVE-2025-0840
  - CVE-2025-3198
  - CVE-2025-1182
  - CVE-2025-5244
  - CVE-2025-7545
  - CVE-2025-7546
  - CVE-2025-8225
  - CVE-2025-11412
  - CVE-2025-11413
  - CVE-2025-11082
  - CVE-2025-11083
  - CVE-2025-11839
  - CVE-2025-11840
  - CVE-2025-5245


author: Loongson <service@loongson.cn> - 2.41-6
changelog:
  - Add support for the ud macro instruction
  - LoongArch: Enforce 4-byte align for machine instructions.


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 3.12.0-1
changelog:
  - update to 3.12.0 from 3.11.0
  - rename isnan.3 to lapack-isnan.3 to avoid conflict with man-pages package
  - Migrated to SPDX license


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 3.10.0-1
changelog:
  - update to 3.10.0 from 3.6.1
  - Migrated to SPDX license
  - Remove the patch because the changes already exist upstream
  - Add patches to fix some bugs
    [Patches cherry-pick from c10s. Original changelog:
    - Make GPT default label type on all architectures. ( 3.10.0-13 )]


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 1.83.0-1
changelog:
  - Update to 1.83.0-1 from 1.81.0-8
  - Remove unused patches
  - Migrated to SPDX license
  - Drop patch for accumulators library that has since been applied upstream.
    apply upstream fixes for failing random tests
    Fix spurious Boost.Regex test failures.
    [Patches cherry-pick from c10s. Original changelog:
     - Rebase to 1.83.0
       See https://fedoraproject.org/wiki/Changes/F40Boost183
       Drop patch for accumulators library that has since been applied upstream.
       Fix spurious Boost.Regex test failures.
     - apply upstream fixes for failing random tests
  ]


author: wenxin <wx02272781@alibaba-inc.com> - 1.78-1
changelog:
  - update to 1.78.1 to fix CVE-2024-29857,CVE-2024-30172
  - Removed redundant patch files now included in the upgraded version


author: Funda Wang <fundawang@yeah.net> - 6.5-2
changelog:
  - Drop duplicate files between brlapi and tcl-brlapi
  - Installed /var/lib/brltty directory (rhbz#2042412)


author: Ziyang Zhang <ZiyangZhang@linux.alibaba.com> - 6.1.2-1
changelog:
  - remove ascii and xmlto dependency since they are unnecessary now
  - add sphinx dependency for building docs
  - use libgcrypt for providing hash implementations


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 1.18.0-1
changelog:
  - Update to 1.18.0-1 from 1.17.8-1
  - Remove patch which is already exist in code
  - Migrated to SPDX license


author: gaochang <gc-taifu@linux.alibaba.com> - 4.3.0-1
changelog:
  - Update to 4.3.0
  - Remove patches because bugs are not exist in new version.
  - Add patches to fix the precedence of casts is lower than expected.
    [Patches cherry-picked from c10s. Original changelog:
    - Fix precedence of casts. (4.3.0-3)]


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 7.1-1
changelog:
  - Update to 7.1-1 from 7.0-1
  - Add bash completion support for filestreaminfo, keys, gettconinfo
    [Patches cherry-pick from c10s. Original changelog:
     - Update to version 7.1]


author: Loongson <service@loongson.cn> - 16.0.6-2
changelog:
  - Backport LoongArch patches from llvmorg-17.0.0-rc2
  - Add the triple of loongarch64 for anolis os
  - LoongArch: fix symbol lookup error when compiling on aarch and x86


author: Loongson <service@loongson.cn> - 17.0.6-4
changelog:
  - LoongArch Backport: Add the support for vector(LSX/LASX)
  - LoongArch Backport: Support -fsanitize=cfi-icall
  - LoongArch Backport: Bugfix


author: Loongson <service@loongson.cn> - 17.0.6-6
changelog:
  - LoongArch Backport: Add support for option `-msimd=` and macro
    `__loongarch_simd_width`
  - LoongArch Backport: Enable 128-bits vector by default
  - LoongArch Backport:  Add definitions and feature 'frecipe' for FP
    approximation builtins
  - LoongArch Backport: Support -march=la64v1.0 and -march=la64v1.1
  - LoongArch Backport: Support la664


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 18.1.8-1
changelog:
  - to #I9JZII
  - init upstream from 18.1.8
  - project: N/A
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 18.1.8-2
changelog:
  - to #I9JZII
  - fix -n package name with 18
  - project: N/A
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 21-1
changelog:
  - Update to 21-1 from 19-1
  - Add patches to fix clevis v21 tang functionality at boot time
    [Patches cherry-pick from c10s. Original changelog:
    Fix clevis v21 tang functionality at boot time]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 23.2.2-1
changelog:
  - Update to 23.2.2 to fix CVE-2023-1786
  - Add patches to fix CVE-2024-6174 and CVE-2024-11584
  - Delete patches as The content already exists in the code


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 3.30.5-1
changelog:
  - Update to 3.30.5-1 from 3.26.3-1
  - Drop non-upstream CMAKE_DL_LIBS windows patch
  - Add licensing information for cppdap to packaged files and convert license to SPDX


author: Xing Li <service@loongson.cn> - 2.38-6
changelog:
  - Add patches:
  - 0001-iconvdata-Sync-iconvdata-tst-iconv-iso-2022-cn-ext.c.patch
  - 0002-CVE-2024-33599.patch
  - 0003-CVE-2024-33600.patch
  - 0004-CVE-2024-33600-p2.patch
  - 0005-CVE-2024-33601-CVE-2024-33602.patch
  - 0006-CVE-2025-0395.patch
  - 0007-CVE-2025-0395-p2.patch
  - 0008-support-Add-support_record_failure_barrier-support-f.patch
  - 0009-support-Use-const-char-argument-in-support_capture_s.patch
  - 0010-CVE-2025-4802-p1.patch
  - 0011-CVE-2025-4802-p2.patch
  - 0012-CVE-2025-4802-p3.patch
  - 0013-CVE-2025-4802-p4.patch
  - 0014-CVE-2025-4802-p5.patch
  - 0015-CVE-2025-8058.patch


author: Loongson <service@loongson.cn> - 2.38-8
changelog:
  - Add patches:
  - 0001-elf-Fix-slow-tls-access-after-dlopen-BZ-19924.patch
  - 0002-resolv-Fix-NSS-DNS-backend-for-getnetbyaddr-CVE-2026.patch
  - 0003-posix-Reset-wordexp_t-fields-with-WRDE_REUSE-CVE-202.patch
  - 0004-posix-Run-tst-wordexp-reuse-mem-test.patch
  - 0005-memalign-reinstate-alignment-overflow-check-CVE-2026.patch


author: tomcruiseqi <tomcruiseqi@inspur.com> - 2.9.7-1
changelog:
  - Update to 2.9.7
  - Fix CVE-2026-40261, CVE-2026-40176
  - Remove patches that have already been included


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 1.4.8-1
changelog:
  - Update to 1.4.8-1 from 1.4.7-2
  - Convert license to SPDX format
  - Add patches to fix bugs [Patches cherry-pick from c10s. Original changelog:
    - Backport fixes from upstream]


author: Peng Fan <fanpeng@loongson.cn> 12.3.0-6
changelog:
  - LoongArch: Optimize the loading of immediate numbers.
  -            Fixed bug in bstrins_<mode>for_ior_mask.


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 1.1.2-1
changelog:
  - Update to 1.1.2-1 from 0.20.1-2
  - Convert license to SPDX
  - Fix a file descriptor and a memory leak in an error path of cr_detect_compression()
    [Patches cherry-pick from c10s. Original changelog:
     Fix a file descriptor and a memory leak in an error path of cr_detect_compression()]


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 3.19-1
changelog:
  - Update to 3.19-1 from 3.17.1-3
  - Migrated to SPDX license
  - Remove patches which is already in code and unneeded


author: zhoujiajia111 <zjl02254423@alibaba-inc.com> - 4.19.5-4
changelog:
  - add patch to fix CVE-2025-10230,CVE-2025-9640
  - update Source0,Source1 to fix Source download fail


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 2.0.0-1
changelog:
  - Update to 2.0.0-1 from 1.28.17-3
  - Migrated to SPDX license
  - Fix CVE-2023-24805
  - Remove patch which already exist in code


author: lzq11122 <lzq02303433@alibaba-inc.com> - 8.4.0-13
changelog:
  - Add patch to fix CVE-2025-15224,CVE-2025-14017,CVE-2025-14819,CVE-2025-14524,CVE-2025-15079,CVE-2025-10966


author: Dong Chuanjian <dongchuanjian@loongson.cn> - 1.0-1
changelog:
  - dcj-test
  - 1
  - 2
  - 3 
  - 4
  - 5
  - 6
  - 7
  - 8
  - 9
  - 10
  - 11
  - 12
  - 13
  - 14loongson.cn
  - 15 loongson.cn
  - 16 loongson.cn
  - 17 loongson.cn
  - 18 loongson.cn
  - 19 loongson.cn
  - 20 loongson.cn
  - 21 loongson.cn
  - 22 loongson.cn
  - 23 loongson.cn
  - 24 loongson.cn
  - 25 loongson.cn
  - 26 loongson.cn
  - 27 loongson.cn
  - 28 
  - 29
  - 30
  - 31
  - 32


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 5.1-1
changelog:
  - Update to 5.1-1 from 5.0-7
  - Migrated to SPDX license
  - Remove patches which is already exist in code
  - Add 0001-find-debuginfo-Check-files-are-writable-before-modif.patch, 
    0001-find-debuginfo-Fix-skip_mini-.gnu_debugdata-handling.patch
    and 0001-find-debuginfo-Make-return-from-do_file-explicit.patch
    [Patches cherry-pick from c10s. Original changelog:
    - Add 0001-find-debuginfo-Check-files-are-writable-before-modif.patch
    - Add 0001-find-debuginfo-Fix-skip_mini-.gnu_debugdata-handling.patch
    - Add 0001-find-debuginfo-Make-return-from-do_file-explicit.patch
    ]


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 1.1.0-1
changelog:
  - Update to 1.1.0-1 from 1.0.3-2
  - Migrated to SPDX license
  - Remove patch which already exist in code


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 2.90-1
changelog:
  - Update to 2.90-1 from 2.89-1
  - Migrated to SPDX license
  - Remove patch which already exist in code


author: Kun(llfl) <llfl@linux.alibaba.com> - 1.0-71
changelog:
  - optimize spec file
  - change the prep stage to a standard macro approach
  - add a new macro to define the destination catalog


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.7.0-1
changelog:
  - Update to 1.7.0 from 1.6.1
  - fix build err and close check
  - Add patches to fix missing dynamic tags for aarch64 python3 pylibfdt and
    fix dtc fails to build with Swig
    [Patches cherry-pick from c10s. Original changelog:
    - Fix missing dynamic tags for aarch64 python3 pylibfdt(1.7.0-10)]


author: wangzhe <wanglan.wz@alibaba-inc.com> - 1.27-1
changelog:
  - update to 1.27
  - Add 'Provides: pahole' to allow the package to be installed using $dnf install pahole
  - Add patches to fix clang builds bug
    [Patches cherry-pick from c10s. Original changelog:
     Backport upstream bugfixes for clang builds]


author: Loongson <service@loongson.cn> - 20260213-4.1
changelog:
  - Update to 20260213 base on http://build.loongnix.cn:8081/c/edk2/+/5613 
  - Temporary disable UEFI Driver Page-Level NX Protection 
  - to workaround the Guest boot hang issue under LoongArch64 KVM mode.


author: Luca Boccassi <luca.boccassi@gmail.com> - 1.9.2-16
changelog:
  - Fix build and reintroduce package
  - The build is fixed by importing patches from Ubuntu/SUSE
  - Patch to disable OpenSSL Engine support (deprecated in Fedora) is added


author: Loongson <service@loongson.cn> 3.1.0-26
changelog:
  - add kdump option during installation
  - fix bug 5246
  - After upgrading docker, delete docker-engine
  - Integrate app-compat-libs.loongnix and app-compat-dkms


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 2.5.0-3
changelog:
  - to #IAGL53:CVE-2023-52425
  - add patch to fix CVE-2023-52425
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: wh02252983 <wh02252983@alibaba-inc.com> - 2.5.0-4
changelog:
  - add patch to Fix cve-2024-45490 and cve-2024-45491 and cve-2024-45492
  - add patch to Fix cve-2024-50602 and cve-2024-28757


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 1.14.0-1
changelog:
  - update to 1.14.0 from 1.13.0
  - Fix memory leak in credman
    [Patches cherry-picked from c10s. Original changelog:
    - Fix memory leak in credman. （1.14.0-6）]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 2.15.0-1
changelog:
  - Update to 2.15.0 from 2.14.1
  - Add patches to cleaned up obsoleted .uuid file
  - Add patches to fix some code found by SAST
    [Patches cherry-picked from c10s. Original changelog:
    - Fix a memory leak and potentially uninitialized values.(2.15.0-6)]


author: tomcruiseqi <tomcruiseqi@inspur.com> - 20251009-1
changelog:
  - Update to 20251009
  - Fix CVE-2025-15280, CVE-2025-15277, CVE-2025-15275, CVE-2025-15273, CVE-2025-15272, CVE-2025-15271, CVE-2025-15270, CVE-2025-15269
  - Remove useless patches


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 2.13.2-1
changelog:
  - Update to 2.13.2 from 2.13.0
  - Add patches to fix SAST Automation findings
    [Patches cherry-pick from c10s. Original changelog:
    - Fix SAST Automation findings(2.13.2-7)]


author: wangzhe <wanglan.wz@alibaba-inc.com> - 1.0.14-1
changelog:
  - update to 1.0.14
  - migrated to SPDX license
  - Fix broken data in fribidi
  - Update the patch to drop bundled gnulib
    [Patch cherry-pick from c10s, Original changelog:
     Drop bundled gnulib code.]


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 1.9.26-1
changelog:
  - update to 1.9.26 from 1.9.1
  - Migrated to SPDX license
  - Redo preset call on upgrades
  - to get hardware support for CERTPX-13842
  - disabled plugins to fix SAST failures


author: wangzhe <wanglan.wz@alibaba-inc.com> - 26.4.21-1
changelog:
  - update to 26.4.21
  - Remove no longer used downstream versions of upstream files
  - Stop packing useless documentaion files
  - Rename the systemd service from 'garbd.service' to 'garb.service'
  - Make sure the network is actually up at the moment of the service startup
  - Fixup of systemd service rename


author: Hui Li <lihui@loongson.cn> - 16.3-1
changelog:
  - update to 16.3.
    Some important features have been added to the LoongArch platform,
    such as gdbserver, lsx/lasx/lbt, hardware watchpoint and breakpoint,
    Reverse debugging, etc.
  - Add some LoongArch patches after gdb-16.3.


author: Loongson <service@loongson.cn> - 1.0.9-1.1
changelog:
  - Updated guid.cc to deal with minor change in libuuid
  - fix problem that caused sgdisk to crash when using the latest popt
  - bug#65: sgdisk failed


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 2.42.12-1
changelog:
  - Update to 2.42.12 from 2.42.10
  - Use SPDX for license expression.
  - Remove patch as the new version of tarball already includes changes.


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 2.47.1-1
changelog:
  - Update to 2.47.1 from 2.41.0
  - update license data and convert to SPDX format
  - Add patches to fix failing on tests using git-httpd-push
    [Patches cherry-pick from c10s. Original changelog:
    - update to 2.47.1(2.47.1-1)]


author: wangzhe <wanglan.wz@alibaba-inc.com> - 1.80.2-1
changelog:
  - update to 1.80.2
  - Switch to bundle mozjs115
  - Migrate to SPDX license
  - Replace Xvfb dependency with xwayland-run
  - Add patches to fix build error
  - Add patches to bundle mozjs115
    [Patches cherry-pick from c10s. Original changelog:
     - Bundle mozjs
     - Bump bundled mozjs version]


author: wangzhe <wanglan.wz@alibaba-inc.com> - 2.80.0-1
changelog:
  - update to 2.80.0
  - Migrate to SPDX license
  - Remove the !libproxy conditionals, enable libproxy support


author: gaochang <gc-taifu@linux.alibaba.com> - 15.1.0-1
changelog:
  - Update to 15.1.0
  - Update sdkver to 1.4.304.0
  - Add patch to fix build issue
    [Patches cherry-picked from c10s. Original changelog:
    - Update to 1.4.304.0 SDK (15.1.0-1)]


author: gaochang <gc-taifu@linux.alibaba.com> - 2024.4-1
changelog:
  - Update to 2024.4
  - Add patches to fix build issue
    [Patches cherry-picked from c10s. Original changelog:
    - Update to 1.4.304.0 SDK(2024.4-1)]


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: tomcruiseqi <tomcruiseqi@inspur.com> - 47.3-1
changelog:
  - Update to 47.3 to fix CVE-2023-5616
  - Remove patch0001, because on 47.3, there is no file to patch
  - Remove patch0002, because on 47.3, the ToastOverlay function is working, no need to patch
  - Remove patch0003, because we have confirmed that there is no problem to remove the patch
  - Add patch0004 to patch the missing MACROs from glib 2.80


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 3.8.2-4
changelog:
  - Add patch to fix CVE-2025-32988,CVE-2025-32989,CVE-2025-32990,
  CVE-2024-12243,CVE-2024-28834,CVE-2024-28835,CVE-2024-0553,CVE-2024-0567


author: limeidan <limeidan@loongson.cn> - 1.24.0-2
changelog:
  - add internal linker support on loong64
  - optimize the internal/bytealg package on loong64
  - optimize the math/big package on loong64
  - add new instructions support on loong64
  - optimize memory operation function of runtime on loong64


author: Loongson <service@loongson.cn> - 1.24.3-4
changelog:
  - 本次更新主要是性能优化和部分bug修复:
    01.runtime: check for gsignal in racecall on loong64
    02.crypto/sha512: use const table for key loading on loong64
    03.crypto/sha256: use const table for key loading on loong64
    04.runtime: add reference to debugPinnerV1
    05.cmd/internal/obj/loong64: add [X]VLDREPL.{B/H/W/D} instructions support
    06.internal/chacha8rand: replace WORD with instruction VMOVQ
    07.cmd/compile: fold negation into multiplication on loong64
    08.cmd/compile: avoid extending when already sufficiently masked on loong64
    09.runtime: skip GDB "no such process" case
    10.cmd/internal/obj/loong64: adjust the case number of the Optab entry
    11.internal/bytealg: optimize Index/IndexString on loong64
    12.cmd/internal/obj/loong64: add new instructions ALSL{W/WU/V} for loong64
    13.cmd/compile/internal/ssa: fix typo in LOONG64Ops.go comment
    14.cmd/internal/obj/loong64: add support for FSEL instruction
    15.cmd/compile/internal/ssa: optimise more branches with SGTconst/SGTUconst on loong64
    16.cmd/compile/internal: optimize SGT operation using R0 in case of constant zero
    17.cmd/compile: convert branch with zero to more optimal branch zero on loong64
    18.cmd/compile/internal/ssa: use BEQ/BNE to optimize the combination of XOR and EQZ/NEZ on loong64
    19.runtime: save and restore all fcc registers in async preempt on loong64
    20.cmd/compile: simplify zerorange on loong64
    21.cmd/compile: use zero register instead of specialized *zero instructions
    22.cmd/compile: use zero register instead of specialized *zero instructions on loong64
    23.internal/runtime/atomic: reset wrong jump target in Cas{,64} on loong64
    24.cmd/internal/obj/loong64: add LDPTR.{W/D} and STPTR.{W/D} instructions support
    25.cmd/internal/obj/loong64: fix the usage of offset in the instructions [X]VLDREPL.{B/H/W/D}
    26.cmd/compile: simplify the support for 32bit high multiply on loong64
    27.cmd/compile: simplify memory load and store operations on loong64
    28.cmd/internal/obj/loong64: add ADDU16I.D instruction support
    29.runtime/cgo: save and restore R31 for crosscall1 on loong64
    30.cmd/compile: simplify specific addition operations using the ADDV16 instruction
    31.cmd/compile: optimize loads from readonly globals into constants on loong64
    32.cmd/compile: implement jump table on loong64
    33.cmd/compile: optimize some patterns into revb2h/revb4h instruction on loong64
    34.cmd/internal/obj/loong64: simplify buildop
    35.cmd/internal/obj/loong64: add MULW.D.W[U] instructions
    36.cmd/compile: use 32x32->64 multiplies on loong64
    37.cmd/link, cmd/internal/obj: fix a remote call failure issue
    38.cmd/internal/obj/loong64: optimize duplicate optab entries
    39.cmd/internal/obj/loong64: add aliases to 32-bit arithmetic instructions
    40.cmd/internal/obj/loong64: remove the incorrect unsigned instructions
    41.cmd/internal/obj, cmd/asm: reclassify the offset of memory access operations on loong64
    42.cmd/internal/obj/loong64: use the MOVVP instruction to optimize prologue


author: Loongson <service@loongson.cn> - 1.24.11-1
changelog:
  - 基础版本从Go1.24.3升级到Go1.24.11, 修复下列CVE:
     01.CVE-2025-0913
     02.CVE-2025-4673
     03.CVE-2025-4674
     04.CVE-2025-22874
     05.CVE-2025-47906
     06.CVE-2025-47907
     07.CVE-2025-47912
     08.CVE-2025-58183
     09.CVE-2025-58185
     10.CVE-2025-58186
     11.CVE-2025-58187
     12.CVE-2025-58188
     13.CVE-2025-58189
     14.CVE-2025-61723
     15.CVE-2025-61724
     16.CVE-2025-61725
     17.CVE-2025-61727
     18.CVE-2025-61729
  - 移除新版本已经包含的补丁:
     Patch55: 0055-internal-cpu-use-correct-variable-when-parsing-CPU-f.patch


author: Loongson <service@loongson.cn> - 1.24.12-1
changelog:
  - 基础版本升级到Go1.24.12, 修复下列CVE:
     01.CVE-2025-61728
     02.CVE-2025-61726
     03.CVE-2025-68121
     04.CVE-2025-61731
     05.CVE-2025-68119
     06.CVE-2025-61730


author: Loongson <service@loongson.cn> - 1.24.13-1
changelog:
  - 基础版本升级到Go1.24.13, 修复下列CVE:
     01.CVE-2025-61732
     02.CVE-2025-68121
  - 使能Bswap64/32的支持
  - 简化slice数组的range循环实现
  - 优化equal函数可以使用非对齐访问
  - 简化walltime和nanotime的实现


author: Loongson <service@loongson.cn> - 1.24.13-2
changelog:
  - 本次更新主要是Backport上游高版本的补丁:
    01. cmd/link/internal/loong64: remove the handling of R_CONST and R_GOTOFF from linker
    02. runtime: save and restore fcsr0 registers in async preempt on loong64
    03. cmd/internal/obj/loong64: update cnames0
    04. cmd/go: disable relaxation on loong64
    05. cmd/link, cmd/internal: remove the R_JMPLOONG64 relocation of loong64
    06. debug/elf: sync new loong64 relocation types up to LoongArch ELF psABI v20250521
    07. cmd/link: support loading R_LARCH_PCREL20_S2 and R_LARCH_CALL36 relocs
    08. cmd/link: modify the register used in trampoline
    09. cmd/link/internal/loong64: add immediate range detection to the internal linker


author: Loongson <service@loongson.cn> - 1.24.13-3
changelog:
  - 本次更新主要是Backport上游高版本的补丁:
    01. runtime/race: apply LLVM zero-initialization fix
    02. runtime: check for gsignal in asancall/msancall/racecall
    03. cmd/link: support loading R_LARCH_GOT64_PC_{LO12, HI20} relocs on loong64
    04. Fixes CVE-2026-27140
    05. Fixes CVE-2026-42501
    06. Fixes CVE-2026-39836
    07. Fixes CVE-2026-39820
    08. Fixes CVE-2026-33814
    09. Fixes CVE-2026-33811
    10. Fixes CVE-2026-32280


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 9.0.0-1
changelog:
  - Update to 9.0.0 from 8.0.5
  - Add patches to fix build doxygen err
    [Patches cherry-pick from c10s. Original changelog:
    - Doxygen fix(9.0.0-1)]


author: Xiaoping Liu <lxp01404969@linux.alibaba.com> - 0.9.2-1
changelog:
  - update to 0.9.2 from 0.9.1
  - Make systemd use 0700 mode on cache folders
  - Fix various issues detected by static analysis
  - Change daemon to Type=notify with systemd
   [Patches cherry-picked from c10s. Original changelog:
   - Change daemon to Type=notify with systemd. （0.9.2-10）]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.24.10-1
changelog:
  - to  #IBB1O6 , #IBGORE , #IBGORH , #IBGORK , #IBGORQ , #IBGORT , #IBGORZ , #IBGOS7
  - New version 1.24.10 for gstreamer1-plugins-base 1.24.10
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: Loongson <service@loongson.cn> - 1.28.1-1
changelog:
  - Update to 1.28.1
  - Fix CVE-2026-3086, CVE-2026-3085, CVE-2026-3081, CVE-2026-2922, CVE-2026-2921,
  - CVE-2026-2920, CVE-2026-3082, CVE-2026-3083


author: tomcruiseqi <tomcruiseqi@inspur.com> - 1.26.4-1
changelog:
  - Update to 1.26.4 to fix CVE-2025-6663
  - CVE-2025-3887 has been fixed in this release, remove the patch


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.24.10-1
changelog:
  - New versino 1.24.10 for CVE-2024-4453,CVE-2024-47835,CVE-2024-47538,CVE-2024-47600,CVE-2024-47615,CVE-2024-47607,CVE-2024-47541,CVE-2024-47542


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.24.10-1
changelog:
  - New version 1.24.10 for CVE-2024-47778,CVE-2024-47776,CVE-2024-47613,CVE-2024-47777,CVE-2024-47834,CVE-2024-47602,CVE-2024-47603,CVE-2024-47606,CVE-2024-47775,CVE-2024-47774,CVE-2024-47599,CVE-2024-47598,CVE-2024-47601,CVE-2024-47546,CVE-2024-47544,CVE-2024-47545,CVE-2024-47543,CVE-2024-47539,CVE-2024-47596,CVE-2024-47540,CVE-2024-47597


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 4.16.7-1
changelog:
  - Update to 4.16.7-1 from 4.12.1-1
  - Migrated to SPDX license
  - Stop using objcopy for resources
    [Patches cherry-pick from c10s. Original changelog:
     Stop using objcopy for resources]


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 1.54.1-1
changelog:
  - Update to 1.54.1-1 from 1.50.6-1
  - Convert license to SPDX
  - Add support for x-gvfs-trash mount option 
    [Patches cherry-pick from c10s. Original changelog:
    - Add support for x-gvfs-trash mount option]


author: Xiaoping Liu <lxp01404969@linux.alibaba.com> - 8.4.0-1
changelog:
  - update to 8.4.0 from 8.1.1
  - Migrated to SPDX license
  - add patches to fix SAST
    [Patches cherry-pick from c10s. Original changelog:
    - SAST Fix ( 8.4.0-3 )]


author: Xiaoping Liu <lxp01404969@linux.alibaba.com> - 1.7.2-1
changelog:
  - update to 1.7.2 from 1.7.1
  - get hunspell-ko working again
  - migrated to SPDX license
      [Patches cherry-pick from c10s. Original changelog:
      - get hunspell-ko working again. ( 1.7.2-2 )]


author: Xiaoping Liu <lxp01404969@linux.alibaba.com> - 2.11.1-1
changelog:
  - update to 2.11.1 from 2.5.0
  - Remove the patch because the changes already exist upstream
  - migrated to SPDX license


author: Funda Wang <fundawang@yeah.net> - 6.8-6
changelog:
  - Rework trigger scriptlets from openmandriva so that it does not depend on
    contrib/fix-info-dir, which will be dropped in texinfo >= 7.0


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 3.18-1
changelog:
  - to #IBGZPM
  - update to 3.18 for CVE-2024-53580
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: Xiaoping Liu <lxp01404969@linux.alibaba.com> - 6.2.1.9-1.gita65a472
changelog:
  - update to 6.2.1.9 from 6.2.1.8
  - switch to build using meson
  - Migrated to SPDX license
  - Remove the patch because the changes already exist upstream
  - Add patches to fix some configuration options
    [Patches cherry-picked from c10s. Original changelog:
    - iscsiuio threading fixes. (6.2.1.9-18.gita65a472)]


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 2.1.2-1
changelog:
  - update to 2.1.2 from 1.2.1
  - Migrated to SPDX license
  - Re-enable javadoc generation and reduce dependencies


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.15.0-1
changelog:
  - to #N/A
  - update to 1.15.0
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: wh02252983 <wh02252983@alibaba-inc.com> - 2.48.5-1
changelog:
  - update to 2.48.5 to fix CVE-2025-31273 CVE-2025-31278 CVE-2025-43212
  - CVE-2025-43216 CVE-2025-6558 CVE-2025-43211 CVE-2025-43227 CVE-2025-43228
  - CVE-2025-43240 CVE-2025-43265


author: YangCheng <yc02267530@alibaba-inc.com> - 2.50.3-1
changelog:
  - update to 2.50.3 to fix CVE-2025-13502,CVE-2025-13947,CVE-2025-43392,CVE-2025-43419,CVE-2025-43425,CVE-2025-43427,CVE-2025-43429,CVE-2025-43430,CVE-2025-43431,CVE-2025-43434,CVE-2025-43440,CVE-2025-43443,CVE-2025-66287


author: YangCheng <yc02267530@alibaba-inc.com> - 2.50.4-1
changelog:
  - update to 2.50.4 to fix CVE-2025-43529,CVE-2025-43541,CVE-2025-43535,CVE-2025-43531,CVE-2025-43536,CVE-2025-43501,CVE-2025-14174


author: tomcruiseqi <tomcruiseqi@inspur.com> - 2.50.5-1
changelog:
  - Update to 2.50.5 to fix CVE-2025-66287, CVE-2025-43434, CVE-2025-43431, CVE-2025-43429, CVE-2025-24143, CVE-2025-13947


author: tomcruiseqi <tomcruiseqi@inspur.com> - 2.50.6-1
changelog:
  - Update to 2.50.6
  - Fix CVE-2025-46299, CVE-2025-43457, CVE-2026-20676, CVE-2026-20652, CVE-2026-20644, CVE-2026-20636, CVE-2026-20635


author: Chunmei Xu <xuchunmei@linux.alibaba.com> - 2.4.0-2
changelog:
  - adds xkb and legacy keymaps subdirs to loadkyes search path
  - unicode_start init from /etc/vconsole.conf


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 3.1.0-1
changelog:
  - code refactor
  - add simple param white list for target security
  - fix: remove XPS, RPS from mysql.conf
  - modify default loglevel of target to ERROR
  - fix: not remove runing data and install dir


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 3.1.0-1
changelog:
  - feat: Code refactoring
  - bugfix: fix API input security verification
  - bugfix: fix issue 58981412#
  - bugfix: Correctly display expert tuning recommendation info


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 2.2.8-1
changelog:
  - update to 2.2.8 from 2.2.7
  - Remove c99 patch because the changes already exist upstream
  - Add patches to fix CVE-2024-41184
    [Patches cherry-pick from c10s. Original changelog:
    - Fix name parsing for CVE-2024-41184. ( 2.2.8-8 )]


author: Juxin Gao <gaojuxin@loongson.cn> [6.6.25-1.3.lns23]
changelog:
  - Loongson: Server-6.6.52-1.3 (Juxin Gao)
  - LoongArch: KVM: add virt extioi cpu encode support (Xianglai Li)
  - blutetooth/btusb: delay 1ms while suspending (Zhao Qunqin)
  - LoongArch: KVM: Fixed VM migration failure after ptw was enabled (Xianglai Li)
  - drivers/iommu: Fixed the VFIO physical machine crash problem (Xianglai Li)
  - LoongArch: KVM: Add reset function for irqchip (Xianglai Li)
  - LoongArch: Correct the cacheinfo sharing information (Huacai Chen)


author: Juxin Gao <gaojuxin@loongson.cn> [6.6.52-1.4.lns23]
changelog:
  - Loongson: Server-6.6.52-1.4 (Juxin Gao)
  - LoongArch: Export some signal functions (Tiezhu Yang)
  - LoongArch: Make some signal and ptrace functions non-static (Tiezhu Yang)
  - LoongArch: Handle fp, lsx, lasx and lbt assembly symbols (Tiezhu Yang)
  - crypto: add Wst-se driver (Qunqin Zhao)
  - driver/iommu: Set iommu driver buildin kernel (Xianglai Li)
  - anolis: LoongArch: Preserve firmware configuration if ACPI requires. (Gao Qihang)
  - anolis: io_uring: add cpu check in io_get_sq_data (Ferry Meng)
  - LoongArch: Revert "LoongArch: Fix cpu hotplug issue" (Xianglai Li)
  - LoongArch: KVM: Repair the restart pressure test virtual machine hang dead problem (Xianglai Li)
  - LoongArch:config: enable pci host controller fdt driver (Xianglai Li)
  - LoongArch: KVM: Add interrupt checking with Loongson AVEC (Xianglai Li)
  - LoongArch: KVM: Reload guest CSR registers after S4 (Xianglai Li)
  - Loongarch: configs: Disable CONFIG_DRM_LOONGSON by default (Juxin Gao)
  - objtool: Fix C jump table annotations for Clang (Juxin Gao)
  - vmlinux.lds: Ensure that const vars with relocations are mapped R/O (Ard Biesheuvel)
  - Loongarch: config: Update config for livepatch and unwinder_orc (Juxin Gao)
  - compiler.h: specify correct attribute for .rodata..c_jump_table (Tiezhu Yang)
  - LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM (Tiezhu Yang)
  - LoongArch: Enable objtool for Clang (Tiezhu Yang)
  - objtool: Handle frame pointer related instructions (Tiezhu Yang)
  - LoongArch: Add ifdefs to fix LSX and LASX related warnings (Tiezhu Yang)
  - LoongArch: Only allow OBJTOOL & ORC unwinder if toolchain supports -mthin-add-sub (Xi Ruoyao)
  - LoongArch: Add kernel livepatching support (Jinyang He)
  - LoongArch: Fix definition of ftrace_regs_set_instruction_pointer() (Tiezhu Yang)
  - LoongArch: Add ORC stack unwinder support (Tiezhu Yang)
  - objtool: Check local label in read_unwind_hints() (Tiezhu Yang)
  - objtool: Check local label in add_dead_ends() (Tiezhu Yang)
  - objtool/LoongArch: Enable orc to be built (Tiezhu Yang)
  - objtool/x86: Separate arch-specific and generic parts (Tiezhu Yang)
  - objtool/LoongArch: Implement instruction decoder (Tiezhu Yang)
  - objtool/LoongArch: Enable objtool to be built (Tiezhu Yang)
  - LoongArch: Disable CONFIG_RT_GROUP_SCHED to prevent cgroup2 issues (Ming Wang)


author: Juxin Gao <gaojuxin@loongson.cn> [6.6.52-1.5.lns23]
changelog:
  - Loongson: Server-6.6.52-1.5 (Juxin Gao)
  - LoongArch:support CONFIG_SCHED_MC (wanghongliang)
  - megaraid:Add udelay to avoid data error caused by dma sequence (zhangtianyang)
  - nvme:Add udelay to avoid data error caused by dma sequence (zhangtianyang)
  - drivers/iommu: Define the alias of the iommu device (Xianglai Li)
  - loongarch/configs: enable vfio mdev config (Xianglai Li)
  - LoongArch: Enable GPIO_PCA953X driver (wanghongliang)
  - LoongArch: Enable IGC driver. (wanghongliang)
  - LoongArch: Add pwm driver support. (wanghongliang)
  - io_uring: fix hung task caused by IORING_SETUP_IDLE_US check (Hongchen Zhang)
  - mm/hugetlb: LoongArch: Return NULL from huge_pte_offset() for none PMD (Ming Wang)
  - LoongArch: CONFIG_NR_CPUS expanded to 2048. (wanghongliang)
  - drivers/iommu: Add the "iommu disable" probe (Xianglai Li)
  - LoongArch: KVM: Fix PMU pass-through issue if VM exits to host finally (Bibo Mao)
  - mm/page_alloc.c: Avoid infinite retries caused by cpuset race (Tianyang Zhang)
  - drm/amdgpu: Fix RX550 pcie order dislocation. (Tianrui Zhao)
  - drm/amdgpu: make duplicated EOP packet for GFX6 have real content (Tianrui Zhao)
  - drm/amdgpu: make duplicated EOP packet for GFX7/8 have real content (lvjianmin)
  - drm/radeon: repeat the same EOP packet for EOP workaround on CIK (lvjianmin)
  - drm/amdgpu: Fix pcie order dislocation (Tianrui Zhao)
  - drivers/pci: Enable pci bridge acs capability (Xianglai Li)


author: Juxin Gao <gaojuxin@loongson.cn> [6.6.52-1.6.lns23]
changelog:
  - Loongson: Server-6.6.52-1.6 (Juxin Gao)
  - driver/vfio: disable vfio pci intx (Xianglai Li)
  - driver/nvme/host/pci.c:Add <linux/delay.h> (zhangtianyang)


author: Juxin Gao <gaojuxin@loongson.cn> [6.6.52-1.7.lns23]
changelog:
  - Loongson: Server-6.6.52-1.7 (Juxin Gao)
  - LoongArch: sync kvm head file from upstream (Xianglai Li)
  - LoongArch: fix migrate issue (Song Gao)
  - LoongArch: Save and restore CSR.CNTC for hibernation (Xianglai Li)
  - Loongarch:Fixed up panic cause by a NULL-pmd (zhangtianyang)
  - drm/virtio: implement virtio_gpu_shutdown (Xianglai Li)
  - virtgpu: don't reset on shutdown (Michael S. Tsirkin)
  - virtio: break and reset virtio devices on device_shutdown() (Michael S. Tsirkin)
  - LoongArch: Fix early_numa_add_cpu() usage for FDT systems (Huacai Chen)
  - tpm: Add a driver for Loongson TPM device (Qunqin Zhao)
  - LoongArch: 2K3000 GMAC support. (wanghongliang)
  - LoongArch: Prevent cond_resched() occurring within kernel-fpu (Tianyang Zhang)
  - mm/migrate: correct nr_failed in migrate_pages_sync() (Zi Yan)
  - Loongarch: configs: Change CONFIG_SCSI_MPT3SAS to m (Juxin Gao)
  - drivers/iommu: Enhance the robustness of the iommu module (Xianglai Li)
  - Loongarch: configs: Update loongson3_defconfig (Juxin Gao)
  - drm/amdgpu: Delete multiple defined but unused variables. (Juxin Gao)
  - iommu: Fixed build warning about la_iommu_setup (Juxin Gao)
  - mm: Fixed build warning when disable CONFIG_FS_DAX_PMD (Juxin Gao)
  - Loongarch: Fixed warning about legacy_boot.h when build kernel (Juxin Gao)
  - irqchip/irq-loongson-eiointc: Delete unused variable (Juxin Gao)


author: Loongson <service@loongson.cn> [6.6.52-1.8.lns23]
changelog:
  - Loongson: Server-6.6.52-1.8 (Juxin Gao)
  - ext4: Make sb update interval tunable (Ojaswin Mujoo)
  - ext4: avoid journaling sb update on error if journal is destroying (Ojaswin Mujoo)
  - ext4: define ext4_journal_destroy wrapper (Ojaswin Mujoo)
  - LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY (Tianyang Zhang)
  - LoongArch: Mask all interrupts during kexec/kdump (Huacai Chen)
  - pci/quirks: 2k3000: set discrete GPU as default boot device if present (Tianrui Zhao)
  - LoongArch: Relax memory ordering for atomic operations (WANG Rui)
  - pipe: don't update {a,c,m}time for anonymous pipes (Oleg Nesterov)
  - mm: mmap: no need to call khugepaged_enter_vma() for stack (Yang Shi)
  - mm: remove unnecessary calls to lru_add_drain (Qunqin Zhao)
  - pipe: introduce struct file_operations pipeanon_fops (Oleg Nesterov)
  - fs/pipe: use spinlock in pipe_read() only if there is a watch_queue (Max Kellermann)
  - mm: do not call should_failslab() if CONFIG_FAILSLAB is disabled (Qunqin Zhao)
  - fs/pipe: remove unnecessary spinlock from pipe_write() (Max Kellermann)
  - cgroup: disable kernel memory accounting for all memory cgroups by default (Qunqin Zhao)
  - Loongarch:Enable CONFIG_PSI_DEFAULT_DISABLED=y (zhangtianyang)
  - entry: Move syscall_enter_from_user_mode() to header file (Sven Schnelle)
  - entry: Move enter_from_user_mode() to header file (Sven Schnelle)
  - entry: Move exit to usermode functions to header file (Sven Schnelle)
  - LoongArch: entry: Fix include order (Charlie Jenkins)
  - LoongArch: entry: Migrate ret_from_fork() to C (Charlie Jenkins)
  - LoongArch: Fix the improper handling of the set_virtual_map's return value (zhangzhengming)
  - btf: Avoid weak external references (Ard Biesheuvel)
  - vmlinux: Avoid weak reference to notes section (Ard Biesheuvel)
  - kallsyms: Avoid weak references for kallsyms symbols (Ard Biesheuvel)
  - irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller (Ming Wang)
  - LoongArch: Increase COMMAND_LINE_SIZE up to 4096 (Ming Wang)
  - drivers/pwm: export symbol for pwm_add_table (Tianrui Zhao)
  - USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI (Huacai Chen)
  - LoongArch: For all possible CPUs setup logical-physical CPU mapping (Huacai Chen)
  - LoongArch: KVM: Add address alignment check in pch_pic register access (Bibo Mao)
  - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() (Song Gao)
  - LoongArch: KVM: Fix stack protector issue in send_ipi_data() (Bibo Mao)
  - LoongArch: KVM: Make function kvm_own_lbt() robust (Bibo Mao)
  - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads (Xianglai Li)
  - drm/amdgpu: fix commit_id 956db4 Make eleven EOP packet (wuqianhai)
  - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content (wuqianhai)
  - drm/amdgpu: fix commit_id:a43ebae Fix pcie order dislocation. (wuqianhai)
  - LoongArch: KVM: fix extioi issue (Xianglai Li)
  - crypto: loongson: add cbc(sm4) support (Qunqin Zhao)
  - LoongArch: OVERLAY_FS: Adjust OVERLAY_FS related configuration. (wanghongliang)
  - net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size (mengxiangdong)
  - LoongArch: KVM: Solve the problem of starting up the upstream qemu (Song Gao)
  - LoongArch: KVM: Enhance the robustness of extioi (Xianglai Li)
  - configs: LoongArch: enable zstd compressed firmware support (Hongchen Zhang)
  - EDAC: Add EDAC driver for loongson memory controller (Qunqin Zhao)
  - crypto: loongson: add loongson sm3 and ecb(sm4) support (Qunqin Zhao)
  - LoongArch: Support mem=<size> kernel parameter (Ming Wang)
  - LoongArch: Reserve the EFI memory map region (Ming Wang)
  - drivers/iommu: Fix the initialization failure issue of the iommu module (Xianglai Li)
  - LoongArch: Add debugfs entries to switch SFB/TSO state (Huacai Chen)
  - LoongArch: uprobes: Remove redundant code about resume_era (Tiezhu Yang)
  - LoongArch: uprobes: Remove user_{en,dis}able_single_step() (Tiezhu Yang)
  - LoongArch: fix access mode of 7A2000 acpi gpio. (wanghongliang)
  - LoongArch: KVM: Fix the extioi simulation error (Xianglai Li)
  - Loongarch: configs: Make EFI RTC built-in for correct vmcore timestamps (Ming Wang)


author: Loongson <service@loongson.cn> [6.6.52-1.9.lns23]
changelog:
  - Loongson: Server-6.6.52-1.9 (Juxin Gao)
  - LoongArch: config: enable paravirt feature (Xianglai Li)
  - CVE-2025-21926: net: gso: fix ownership in __udp_gso_segment (Antoine Tenart)
  - CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (Duoming Zhou) {CVE-2025-39944}
  - CVE-2025-40140: net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast (I Viswanath)
  - CVE-2025-38215: fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var (Murad Masimov)
  - CVE-2025-38568: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (Maher Azzouzi)
  - CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (Jakub Kicinski)
  - samples/bpf: Fix compilation errors with cf-protection option (Jiangshan Yi)
  - samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora (Haoran Jiang)
  - CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Kuniyuki Iwashima)
  - CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong)
  - CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (Jakub Raczynski)
  - CVE-2025-40080: nbd: restrict sockets to TCP and UDP (Eric Dumazet)
  - CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (Yin Tirui) {CVE-2025-39903}
  - CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (Sravan Kumar Gundu)
  - CVE-2025-39833: mISDN: hfcpci: Fix warning when deleting uninitialized timer (Vladimir Riabchun) {CVE-2025-39833}
  - CVE-2025-38471: tls: always refresh the queue when reading sock (Jakub Kicinski)
  - entry: Inline syscall_exit_to_user_mode() (Charlie Jenkins)
  - CVE-2025-38037: vxlan: Annotate FDB data races (Ido Schimmel)
  - CVE-2025-38729: ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Takashi Iwai)
  - CVE-2025-39757: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Takashi Iwai)
  - CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Sean Christopherson) {CVE-2024-58083}
  - CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (Duoming Zhou) {CVE-2025-39945}
  - CVE-2025-38680: media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Youngjun Lee)
  - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Shivank Garg) {CVE-2025-38396}
  - CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (William Liu)
  - CVE-2025-40020: can: peak_usb: fix shift-out-of-bounds issue (Stéphane Grosjean)
  - CVE-2025-39877: mm/damon/sysfs: fix use-after-free in state_show() (Stanislav Fort)
  - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (Eyal Birger)
  - CVE-2025-37985: USB: wdm: close race between wdm_open and wdm_wwan_port_stop (Oliver Neukum)
  - CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (Sabrina Dubroca)
  - CVE-2025-37914: net_sched: ets: Fix double list add in class with netem as child qdisc (Victor Nogueira)
  - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (Hyunwoo Kim)
  - CVE-2025-38010: phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking (Wayne Chang)
  - CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (Xin Long)
  - CVE-2025-21960: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (Taehee Yoo)
  - CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (Ronnie Sahlberg)
  - CVE-2025-37943: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (Manish Dharanenthiran)
  - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (Alexey Kodanev)
  - CVE-2025-39761: wifi: ath12k: Decrement TID on RX peer frag setup error handling (Karthikeyan Kathirvel)
  - CVE-2025-39783: PCI: endpoint: Fix configfs group list head handling (Damien Le Moal)
  - CVE-2025-39790: bus: mhi: host: Detect events pointing to unexpected TREs (Youssef Samir)
  - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (Yury Norov [NVIDIA])
  - CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (Alan Stern)
  - CVE-2025-38604: wifi: rtl818x: Kill URBs before clearing tx status queue (Daniil Dulov)
  - CVE-2024-57927: nfs: Fix oops in nfs_netfs_init_request() when copying to cache (Juxin Gao)
  - CVE-2025-39689: ftrace: Also allocate and copy hash for reading of filter files (Steven Rostedt)
  - CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (Eric Biggers)
  - LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE (Juxin Gao)
  - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000 (Haowei Zheng)
  - CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (Ilya Dryomov)
  - CVE-2025-40141: Bluetooth: ISO: Fix possible UAF on iso_conn_free (Luiz Augusto von Dentz)
  - CVE-2025-40061: RDMA/rxe: Fix race in do_task() when draining (Gui-Dong Han)
  - CVE-2025-40071: tty: n_gsm: Don't block input queue by waiting MSC (Seppo Takalo)
  - CVE-2025-40029: bus: fsl-mc: Check return value of platform_get_resource() (Salah Triki)
  - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (Slavin Liu)
  - CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (Dan Carpenter)
  - CVE-2025-39713: media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() (Gui-Dong Han)
  - CVE-2025-38735: gve: prevent ethtool ops after shutdown (Jordan Rhee)
  - CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (Jiufei Xue)
  - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (Eric Biggers)
  - LoongArch: efi: avoid double calling set_virtual_map() (Ming Wang)
  - net: update yt6801 driver (Qunqin Zhao)


author: Loongson <service@loongson.cn> [6.6.52-1.10.lns23]
changelog:
  - Loongson: Server-6.6.52-1.10 (Juxin Gao)
  - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed (Bibo Mao)
  - CVE-2025-40074: ipv4: start using dst_dev_rcu() (Juxin Gao)
  - LoongArch: Disable instrumentation for setup_ptwalker() (Tiezhu Yang)
  - LoongArch: Set kasan_early_stage as false at end of kasan_init() (Tiezhu Yang)
  - LoongArch: Remove some code if kasan_arch_is_ready() is false (Tiezhu Yang)
  - CVE-2025-38584: padata: Fix pd UAF once and for all (Herbert Xu)
  - CVE-2025-38031: padata: do not leak refcount in reorder_work (Dominik Grzegorzek)
  - CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (Eric Dumazet)
  - CVE-2025-40104: ixgbevf: fix mailbox API compatibility by negotiating supported features (Jedrzej Jagielski)
  - CVE-2024-47739: padata: use integer wrap around to prevent deadlock on seq_nr overflow (VanGiang Nguyen)
  - CVE-2025-21961: eth: bnxt: fix truesize for mb-xdp-pass case (Juxin Gao)
  - CVE-2025-21726: padata: avoid UAF for reorder_work (Chen Ridong)
  - padata: add pd get/put refcnt helper (Chen Ridong)
  - CVE-2025-40158: ipv6: use RCU in ip6_output() (Eric Dumazet)
  - net: dst: introduce dst->dev_rcu (Eric Dumazet)
  - CVE-2025-40135: ipv6: use RCU in ip6_xmit() (Eric Dumazet)
  - ipv4: use RCU protection in ipv4_default_advmss() (Eric Dumazet)
  - ipv4: use RCU protection in __ip_rt_update_pmtu() (Eric Dumazet)
  - ipv4: use RCU protection in inet_select_addr() (Eric Dumazet)
  - ipv4: use RCU protection in rt_is_expired() (Eric Dumazet)
  - ipv4: add RCU protection to ip4_dst_hoplimit() (Eric Dumazet)
  - net: Add locking to protect skb->dev access in ip_output (Sharath Chandra Vurukala)
  - ixgbevf: fix getting link speed data for E610 devices (Jedrzej Jagielski)
  - net: dst: add four helpers to annotate data-races around dst->dev (Eric Dumazet)
  - net: add dev_net_rcu() helper (Eric Dumazet)
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Jiri Pirko)
  - ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5 (Jacob Keller)
  - CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev(). (Kuniyuki Iwashima)
  - CVE-2025-21727: padata: fix UAF in padata_reorder (Chen Ridong)
  - ixgbevf: Add support for Intel(R) E610 device (Piotr Kwapulinski)
  - LoongArch: Fix AP booting issue in VM mode (Xianglai Li)
  - CVE-2025-39746: wifi: ath10k: shutdown driver when hardware is unreliable (Kang Yang) {CVE-2025-39746}
  - CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (Pablo Neira Ayuso)
  - CVE-2024-27397: netfilter: nf_tables: fix set size with rbtree backend (Pablo Neira Ayuso)
  - CVE-2024-27397: netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (Pablo Neira Ayuso)
  - CVE-2024-27397: netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal)
  - CVE-2024-27397: netfilter: nf_tables: wait for rcu grace period on net_device removal (Pablo Neira Ayuso)
  - CVE-2024-27397: netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx (Florian Westphal)
  - CVE-2024-27397: netfilter: nf_tables: cleanup documentation (George Guo)
  - CVE-2024-27397: netfilter: nft_set_pipapo: walk over current view on netlink dump (Pablo Neira Ayuso)
  - CVE-2024-27397: netfilter: nft_set_rbtree: prefer sync gc to async worker (Florian Westphal)
  - CVE-2024-27397: netfilter: nf_tables: de-constify set commit ops function argument (Florian Westphal)
  - CVE-2025-38264: nvme-tcp: sanitize request list handling (Hannes Reinecke) {CVE-2025-38264}
  - CVE-2025-38702: fbdev: fix potential buffer overflow in do_register_framebuffer() (Yongzhen Zhang)
  - CVE-2025-39927: ceph: fix race condition validating r_parent before applying state (Juxin Gao)
  - llist: add interface to check if a node is on a list. (NeilBrown)
  - wifi: ath10k: Update Qualcomm Innovation Center, Inc. copyrights (Jeff Johnson)
  - CVE-2025-38193: net_sched: sch_sfq: reject invalid perturb period (Ming Wang)
  - CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (Peter Seiderer)
  - CVE-2025-39682: tls: fix handling of zero-length records on the rx_list (Jakub Kicinski)
  - CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (Ming Wang)
  - CVE-2025-38124: net: fix udp gso skb_segment after pull from frag_list (Shiming Cheng)
  - CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (Alexis Lothoré)
  - CVE-2025-38124: gso: fix udp gso fraglist segmentation after pull from frag_list (Willem de Bruijn)
  - CVE-2024-27397: netfilter: nft_set_rbtree: rename gc deactivate+erase function (Florian Westphal)


author: Loongson <service@loongson.cn> [6.6.52-1.11.lns23]
changelog:
  - Loongson: Server-6.6.52-1.11 (Gaojuxin)
  - drivers/iommu: Optimize the LoongArch IOMMU memory reservation function interface (Xianglai Li)
  - CVE-2026-46300: net: skbuff: preserve shared-frag marker during coalescing (William Bowling)
  - CVE-2025-68304: Bluetooth: hci_core: lookup hci_conn on RX path on protocol side (Pauli Virtanen)
  - CVE-2025-68304: Bluetooth: ISO: don't leak skb in ISO_CONT RX (Pauli Virtanen)
  - CVE-2025-68304: Bluetooth: ISO: free rx_skb if not consumed (Pauli Virtanen)
  - CVE-2025-68304: Bluetooth: ISO: Use kref to track lifetime of iso_conn (Luiz Augusto von Dentz)
  - CVE-2025-68304: Bluetooth: SCO: fix sco_conn refcounting on sco_conn_ready (Pauli Virtanen)
  - CVE-2025-68304: Bluetooth: SCO: remove the redundant sco_conn_put (Edward Adam Davis)
  - CVE-2025-68304: Bluetooth: SCO: Use kref to track lifetime of sco_conn (Luiz Augusto von Dentz)
  - CVE-2025-68304: Bluetooth: hci_core: Fix not checking skb length on hci_scodata_packet (Luiz Augusto von Dentz)
  - CVE-2024-56590: Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (Luiz Augusto von Dentz)
  - Bluetooth: hci_core: Fix calling mgmt_device_connected (Luiz Augusto von Dentz)
  - Bluetooth: l2cap: Process valid commands in too long frame (Frédéric Danis)
  - Bluetooth: L2CAP: Fix not checking l2cap_chan security level (Luiz Augusto von Dentz)
  - Bluetooth: l2cap: Check encryption key size on incoming connection (Frédéric Danis)
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del (Luiz Augusto von Dentz)
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (Luiz Augusto von Dentz)
  - Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response (Luiz Augusto von Dentz)
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect (Luiz Augusto von Dentz)
  - Bluetooth: ISO: Reassociate a socket with an active BIS (Iulia Tanasescu)
  - Bluetooth: ISO: Fix UAF on iso_sock_timeout (Luiz Augusto von Dentz)
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout (Luiz Augusto von Dentz)
  - CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (Michal Luczaj)
  - CVE-2025-40342: nvme-fc: use lock accessing port_state and rport state (Daniel Wagner)
  - CVE-2025-40345: usb: storage: sddr55: Reject out-of-bound new_pba (Tianchu Chen)
  - CVE-2025-68307: can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs (Marc Kleine-Budde)
  - CVE-2025-68291: mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). (Kuniyuki Iwashima)
  - CVE-2025-68287: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (Manish Nagar)
  - CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (ziming zhang)
  - CVE-2025-68283: libceph: replace BUG_ON with bounds check for map->max_osd (ziming zhang)
  - CVE-2025-68244: drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD (Janusz Krzysztofik)
  - CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (Eric Dumazet)
  - CVE-2025-68312: usbnet: Prevents free active kevent (Lizhi Xu)
  - CVE-2025-68192: net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup (Qendrim Maxhuni)
  - CVE-2025-68191: udp_tunnel: use netdev_warn() instead of netdev_WARN() (Alok Tiwari)
  - CVE-2025-71145: usb: phy: isp1301: fix non-OF device reference imbalance (Johan Hovold)
  - CVE-2026-23243: RDMA/umad: Reject negative data_len in ib_umad_write (YunJe Shin)
  - CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (Jamal Hadi Salim)
  - CVE-2025-21789:LoongArch: csum: Fix OoB access in IP checksum code for negative lengths (Yuli Wang)
  - CVE-2025-21826: netfilter: nf_tables: reject mismatching sum of field_len with set key length (Pablo Neira Ayuso)
  - CVE-2024-50131: tracing: Consider the NULL character when validating the event length (Leo Yan)
  - drivers/amdgpu: set dpm_performance_level to high in loongson platform (Tianrui Zhao)
  - Loongarch:CONFIG_SCSI_LPFC=m (zhangtianyang)
  - mfd: ls2kbmc: Use PCI API instead of direct accesses (Andy Shevchenko)
  - mfd: ls2kbmc: Fully convert to use managed resources (Andy Shevchenko)
  - mfd: ls2kbmc: Remove unneeded semicolon from ls2k_bmc_recover_pci_data() (Chen Ni)
  - mfd: ls2kbmc: check for devm_mfd_add_devices() failure (Dan Carpenter)
  - mfd: ls2kbmc: Fix an IS_ERR() vs NULL check in probe() (Dan Carpenter)
  - ipmi:ls2k: Make ipmi_ls2k_platform_driver static (Corey Minyard)
  - ipmi: Add Loongson-2K BMC support (Binbin Zhou)
  - char: ipmi: handle HAS_IOPORT dependencies (Niklas Schnelle)
  - mfd: ls2kbmc: Add Loongson-2K BMC reset function support (zhuyunfei)
  - mfd: ls2kbmc: Introduce Loongson-2K BMC core driver (Binbin Zhou)
  - Revert "anolis: LoongArch: defconfig: enable CONFIG_FB_LS2K500=m." (zhuyunfei)
  - Revert "anolis: fbdev: add ls2k500sfb driver for ls2k500 bmc." (zhuyunfei)
  - Revert "anolis: ipmi: add ls2k500 bmc ipmi support." (zhuyunfei)
  - xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen)
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu)
  - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu)
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu)
  - crypto: authenc - use memcpy_sglist() instead of null skcipher (Eric Biggers)
  - crypto: algif_aead - snapshot IV for async AEAD requests (Douya Le)
  - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu)
  - crypto: algif_aead - use memcpy_sglist() instead of null skcipher (Eric Biggers)
  - crypto: scatterwalk - Backport memcpy_sglist() (Eric Biggers)
  - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu (Xianglai Li)
  - LoongArch: Explicitly specify code model in Makefile (Huacai Chen)
  - LoongArch: nls: fix fat-modules udeb missing nls (wanghongliang)
  - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm' (Ming Wang)
  - LoongArch: Fix build failure with GCC 15 (-std=gnu23) (Ming Wang)
  - pci/quirks: Fix 2k2000/2k3000 gpu dma hangs (wuqianhai)
  - USB: core: Enable root_hub's remote wakeup for wakeup sources (Huacai Chen)
  - cdrom: scsi: fix kernel panic on USB optical drive removal (Ming Wang)
  - LoongArch: KVM: Add AVEC basic support (Song Gao)
  - LoongArch: KVM: Get VM PMU capability from HW GCFG register (Bibo Mao)
  - LoongArch: KVM: Register perf callbacks for guest (Bibo Mao)
  - LoongArch: KVM: Implement arch-specific functions for guest perf (Bibo Mao)
  - LoongArch: KVM: Remove PGD saving during VM context switch (Bibo Mao)
  - LoongArch: KVM: Rework pch_pic_update_batch_irqs() (Yury Norov (NVIDIA))
  - LoongArch: KVM: Add different length support in loongarch_pch_pic_write() (Bibo Mao)
  - LoongArch: KVM: Add different length support in loongarch_pch_pic_read() (Bibo Mao)
  - LoongArch: KVM: Add IRR and ISR register read emulation (Bibo Mao)
  - LoongArch: KVM: Set version information at initial stage (Bibo Mao)
  - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access() (Bibo Mao)
  - LoongArch: KVM: Add address alignment check in pch_pic register access (Bibo Mao)
  - LoongArch: KVM: Add stat information with kernel irqchip (Bibo Mao)
  - LoongArch: KVM: sync pch_pic to upstream (Xianglai Li)
  - LoongArch: KVM: Access mailbox directly in mail_send() (Bibo Mao)
  - LoongArch: KVM: Add implementation with IOCSR_IPI_SET (Bibo Mao)
  - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data() (Bibo Mao) {CVE-2025-39704}
  - LoongArch: KVM: sync kvm_ipi to upstream (Xianglai Li)
  - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions (Xianglai Li)
  - LoongArch: KVM: Use 64-bit register definition for EIOINTC (Bibo Mao)
  - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC (Bibo Mao)
  - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access() (Bibo Mao)
  - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access() (Bibo Mao)
  - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq() (Bibo Mao)
  - LoongArch: KVM: Use generic function loongarch_eiointc_write() (Bibo Mao)
  - LoongArch: KVM: Use generic function loongarch_eiointc_read() (Bibo Mao)
  - LoongArch: KVM: Use standard bitops API with eiointc (Bibo Mao)
  - LoongArch: KVM: Remove never called default case statement (Bibo Mao)
  - LoongArch: KVM: Remove unused parameter len (Bibo Mao)
  - LoongArch: KVM: Remove unnecessary local variable (Bibo Mao)
  - LoongArch: KVM: Disable updating of "num_cpu" and "feature" (Bibo Mao)
  - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space (Bibo Mao) {CVE-2025-38366}
  - LoongArch: KVM: Check interrupt route from physical CPU (Bibo Mao)
  - LoongArch: KVM: Fix interrupt route update with EIOINTC (Bibo Mao)
  - LoongArch: KVM: Add address alignment check for IOCSR emulation (Bibo Mao)
  - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu (Xianglai Li)
  - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index (Bibo Mao) {CVE-2025-38367}
  - LoongArch: KVM: sync eiointc to upstream (Xianglai Li)
  - LoongArch: KVM: rename extioi to eiointc (Xianglai Li)
  - LoongArch: KVM: Remove duplicated cache attribute setting (Bibo Mao)
  - drivers/loongson-pwm: sync master patch to fix pwm driver (Tianrui Zhao)
  - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use (Xianglai Li)
  - LoongArch: KVM: Fix VM migration failure with PTW enabled (Bibo Mao)
  - LoongArch: KVM: Set page with write attribute if dirty track disabled (Bibo Mao)
  - LoongArch: KVM: Do not flush tlb if HW PTW supported (Bibo Mao)
  - LoongArch: Clarify 3 MSG interrupt features (Huacai Chen)
  - LoongArch: KVM: Simplify kvm_deliver_intr() (Yury Norov (NVIDIA))
  - LoongArch: KVM: Rework kvm_send_pv_ipi() (Yury Norov (NVIDIA))
  - LoongArch: KVM: Skip PMU checking on vCPU context switch (Bibo Mao)
  - LoongArch: KVM: Restore guest PMU if it is enabled (Bibo Mao)
  - LoongArch: KVM: Add delay until timer interrupt injected (Bibo Mao)
  - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code (Steven Rostedt)
  - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation (Bibo Mao)
  - LoongArch: KVM: Add sign extension with kernel MMIO read emulation (Bibo Mao)
  - LoongArch: KVM: Add PTW feature detection on new hardware (Bibo Mao)
  - irqchip/loongson-eiointc: Add multiple interrupt pin routing support (Bibo Mao)
  - irqchip/loongson-eiointc: Route interrupt parsed from bios table (Bibo Mao)
  - irqchip/loongson-eiointc: Add virt extension support (Bibo Mao)
  - LoongArch: KVM: Remove unused returns and semicolons (Tao Cui)
  - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits (Yulong Han)
  - LoongArch: KVM: Add ecode parameter for exception handlers (Bibo Mao)
  - LoongArch: KVM: Fully clear some CSRs when VM reboot (Bibo Mao)
  - LoongArch: KVM: Fix multiple typos of KVM code (Yulong Han)
  - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN (Bibo Mao)
  - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel() (Bibo Mao)
  - LoongArch: KVM: Remove unnecessary header include path (Masahiro Yamada)
  - LoongArch: KVM: Set host with kernel mode when switch to VM mode (Bibo Mao)
  - LoongArch: KVM: Fix typo issue about GCFG feature detection (Bibo Mao)
  - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU (Huacai Chen)
  - LoongArch: KVM: Protect kvm_check_requests() with SRCU (Huacai Chen)
  - LoongArch:stmmac:fix mdc too high issues. (wanghongliang)
  - drm/amdgpu/gfx8: sync master patch: reset compute ring wptr on the GPU on resume (zhaotianrui)
  - drivers/amdgpu: fix commit_id:a43ebae Fix pcie order dislocation. (zhaotianrui)
  - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE (wanghongliang)
  - drivers/amdgpu: amd rx550 should emit 10 fences after run a command (zhaotianrui)
  - LoongArch: KVM: Fix GPA size issue about VM (Bibo Mao)
  - LoongArch: KVM: Add hypercall service support for usermode VMM (Bibo Mao)
  - LoongArch: Add architecture specific huge_pte_clear() (Bibo Mao)


author: Loongson <service@loongson.cn> [6.6.52-1.12.lns23]
changelog:
  - Loongson: Server-6.6.52-1.12 (Gaojuxin)
  - mfd: ls2kbmc: Avoid parsing mode directly from I/O memory (Ming Wang)
  - LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect() (Hongchen Zhang)
  - loongarch: defconfig: Enable LS2K IPMI and simpledrm support (zhuyunfei)
  - ipmi: ls2k: Fix KCS interface initialization (zhuyunfei)
  - LoongArch: ACPI: use per-root-bridge PCIH flag to skip MEM high-bit fixup (Dongyan Qian)
  - CVE-2026-31692: rtnetlink: add missing netlink_ns_capable() check for peer netns (Nikolaos Gkarlis)
  - CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (Matthieu Baerts (NGI0))
  - CVE-DEP: CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: allow ID 0 (Matthieu Baerts (NGI0))
  - CVE-DEP: CVE-2026-46158: mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0 (Matthieu Baerts (NGI0))
  - CVE-DEP: CVE-2026-46158: Revert "mptcp: add needs_id for netlink appending addr" (Matthieu Baerts (NGI0))
  - CVE-DEP: CVE-2026-46158: mptcp: pm: avoid sending RM_ADDR over same subflow (Matthieu Baerts (NGI0))
  - CVE-DEP: CVE-2026-46158: mptcp: pm: in-kernel: usable client side with C-flag (Matthieu Baerts (NGI0))
  - CVE-DEP: CVE-2026-46158: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (Krister Johansen)
  - CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (Matthieu Baerts (NGI0))
  - CVE-2026-46090: ALSA: aloop: Fix peer runtime UAF during format-change stop (Cássio Gabriel)
  - CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (Takashi Iwai)
  - CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (Jiayuan Chen)
  - CVE-2026-31706: ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() (Michael Bommarito)
  - CVE-2026-43490: ksmbd: validate inherited ACE SID length (Shota Zaizen)
  - CVE-2026-43500: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim)
  - CVE-2026-46000: rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (David Howells)
  - CVE-DEP: CVE-2026-43500: rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells)
  - CVE-2026-45988: rxrpc: Fix re-decryption of RESPONSE packets (David Howells)
  - CVE-2026-31676: rxrpc: only handle RESPONSE during service challenge (Wang Jie)
  - CVE-DEP: CVE-2026-43500: rxrpc: Fix missing error checks for rxkad encryption/decryption failure (David Howells)
  - CVE-2026-31637: rxrpc: reject undecryptable rxkad response tickets (Yuqi Xu)
  - CVE-DEP: CVE-2026-43500: rxrpc: Fix call state set to not include the SERVER_SECURING state (David Howells)
  - CVE-2026-43329: netfilter: flowtable: strictly check for maximum number of actions (Pablo Neira Ayuso)
  - CVE-2026-31705: ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment (Tristan Madani)
  - CVE-2026-31663: xfrm: Fix dev use-after-free in xfrm async resumption (Dong Chenchen)
  - CVE-2026-31663: xfrm: hold dev ref until after transport_finish NF_HOOK (Qi Tang)
  - CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (Jianbo Liu)
  - CVE-2026-46135: nvmet-tcp: fix race between ICReq handling and queue teardown (Chaitanya Kulkarni)
  - CVE-2026-46244: netfilter: nft_inner: Fix IPv6 inner_thoff desync (Yizhou Zhao)
  - CVE-2026-46330: Revert "net/smc: Introduce TCP ULP support" (D. Wythe)
  - CVE-DEP: CVE-2026-46330: net/smc: refactoring initialization of smc sock (D. Wythe)
  - CVE-DEP: CVE-2026-46330: net/smc: introduce loopback-ism for SMC intra-OS shortcut (Wen Gu)
  - CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)
  - CVE-2026-43198: tcp: restore kABI for syn_recv_sock() backport (Li Xiasong)
  - CVE-2026-43198: tcp: fix potential race in tcp_v6_syn_recv_sock() (Eric Dumazet)
  - CVE-2026-31709: smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Michael Bommarito)
  - CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (Michael Bommarito)
  - CVE-DEP: CVE-2026-31709: cifs: add validation check for the fields in smb_aces (Namjae Jeon)
  - CVE-DEP: CVE-2026-31709: cifs: fix incorrect validation for num_aces field of smb_acl (Namjae Jeon)
  - CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (Ezrak1e)
  - CVE-2026-43494: net/rds: reset op_nents when zerocopy page pin fails (Allison Henderson)
  - CVE-2026-46145: RDMA/mana: Validate rx_hash_key_len (Jason Gunthorpe)
  - CVE-2026-46274: io-wq: check that the predecessor is hashed in io_wq_remove_pending() (Nicholas Carlini)
  - CVE-2026-31707: ksmbd: validate response sizes in ipc_validate_msg() (Michael Bommarito)
  - CVE-DEP: CVE-2026-31707: ksmbd: Use struct_size() to improve smb_direct_rdma_xmit() (Thorsten Blum)
  - CVE-2025-40084: ksmbd: transport_ipc: validate payload size before reading handle (Qianchang Zhao)
  - CVE-2024-49988: ksmbd: add refcnt to ksmbd_conn struct (Namjae Jeon)
  - CVE-DEP: CVE-2026-31707: ksmbd: fix memory leak in parse_lease_state() (Wang Zhaolong)
  - CVE-2025-22042: ksmbd: add bounds check for create lease context (Norbert Szetei)
  - CVE-DEP: CVE-2026-31707: ksmbd: add support for supplementary groups (Namjae Jeon)
  - CVE-DEP: CVE-2026-31707: ksmbd: fix use-after-free in ksmbd_session_rpc_open (Namjae Jeon)
  - CVE-2025-22040: ksmbd: fix session use-after-free in multichannel connection (Namjae Jeon)
  - CVE-2025-22041: ksmbd: fix use-after-free in ksmbd_sessions_deregister() (Namjae Jeon)
  - CVE-DEP: CVE-2026-31707: ksmbd: Fix the missing xa_store error check (Jinjie Ruan)
  - CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (Jamal Hadi Salim)
  - CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (Michael Bommarito)
  - CVE-DEP: CVE-2026-31707: net: ipv4: stop checking crypto_ahash_alignmask (Eric Biggers)
  - CVE-DEP: CVE-2026-31707: net: ipv6: stop checking crypto_ahash_alignmask (Eric Biggers)
  - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Michal Kosiorek)
  - CVE-2026-45991: udf: fix partition descriptor append bookkeeping (Seohyeon Maeng)
  - CVE-2026-43491: net: qrtr: ns: Limit the maximum server registration per node (Manivannan Sadhasivam)
  - CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (Ben Morris)
  - CVE-2026-46209: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai)
  - CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (Michael Bommarito)
  - CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (Jason Gunthorpe)
  - CVE-2026-46114: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Michael Bommarito)
  - CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (Michael Bommarito)
  - CVE-DEP: CVE-2026-46195: fs/smb/client: implement chmod() for SMB3 POSIX Extensions (Ralph Boehme)
  - CVE-DEP: CVE-2026-46195: smb/client: rename cifs_ace to smb_ace (ChenXiaoSong)
  - CVE-DEP: CVE-2026-46195: smb/client: rename cifs_acl to smb_acl (ChenXiaoSong)
  - CVE-DEP: CVE-2026-46195: smb/client: rename cifs_sid to smb_sid (ChenXiaoSong)
  - CVE-DEP: CVE-2026-46195: smb/client: rename cifs_ntsd to smb_ntsd (ChenXiaoSong)
  - CVE-2026-46131: KVM: x86: check for nEPT/nNPT in slow flush hypercalls (Paolo Bonzini)
  - CVE-2026-46150: fanotify: fix false positive on permission events (Miklos Szeredi)
  - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink(). (Maoyi Xie)
  - CVE-2026-46172: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (Yilin Zhu)
  - CVE-2026-46152: wifi: mac80211: drop stray 'static' from fast-RX rx_result (Catherine)
  - CVE-2026-46125: wifi: mac80211: remove station if connection prep fails (Johannes Berg)
  - CVE-2026-46122: wifi: b43: enforce bounds check on firmware key index in b43_rx() (Tristan Madani)
  - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (Jann Horn)
  - CVE-2026-45998: rxrpc: Fix potential UAF after skb_unshare() failure (David Howells)
  - CVE-2026-46306: flow_dissector: do not dissect PPPoE PFC frames (Qingfang Deng)
  - CVE-2026-43497: fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free (Rajat Gupta)
  - CVE-2026-46099: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Andrea Mayer)
  - CVE-2026-31668: net: ipv6: fix dst ref loop on input in rpl lwt (Justin Iurman)
  - CVE-2026-31668: net: ipv6: rpl_iptunnel: mitigate 2-realloc issue (Justin Iurman)
  - CVE-2026-31668: net: ipv6: fix dst ref loop on input in seg6 lwt (Justin Iurman)
  - CVE-2026-31668: net: ipv6: seg6_iptunnel: mitigate 2-realloc issue (Justin Iurman)
  - CVE-DEP: CVE-2026-31668: include: net: add static inline dst_dev_overhead() to dst.h (Justin Iurman)
  - CVE-DEP: CVE-2026-46099: net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input (Justin Iurman)
  - CVE-2026-43499: rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong)
  - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Greg Kroah-Hartman)
  - CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (Shuvam Pandey)
  - CVE-2026-46053: net: rds: fix MR cleanup on copy error (Ao Zhou)
  - CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (Ruijie Li)
  - CVE-2026-46043: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (hkbinbin)
  - CVE-2026-43248: vhost: move vdpa group bound check to vhost_vdpa (Eugenio Pérez)
  - CVE-2026-46102: net: strparser: fix skb_head leak in strp_abort_strp() (Luxiao Xu)
  - CVE-2026-31786: Buffer overflow in drivers/xen/sys-hypervisor.c (Juergen Gross)
  - CVE-2026-31694: fuse: reject oversized dirents in page cache (Samuel Page)
  - CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (Breno Leitao)
  - CVE-2026-31623: net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() (Greg Kroah-Hartman)
  - CVE-2026-31617: usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() (Greg Kroah-Hartman)
  - CVE-2026-43074: eventpoll: defer struct eventpoll free to RCU grace period (Nicholas Carlini)
  - CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (Pengpeng Hou)
  - CVE-2026-43056: net: mana: fix use-after-free in add_adev() error path (Guangshuo Li)
  - CVE-2026-43023: Bluetooth: SCO: fix race conditions in sco_sock_connect() (Cen Zhang)
  - CVE-2026-43341: net/ipv6: ioam6: prevent schema length wraparound in trace fill (Pengpeng Hou)
  - CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (Tyllis Xu)
  - CVE-2026-31433: ksmbd: fix potencial OOB in get_file_all_info() for compound requests (Namjae Jeon)
  - CVE-DEP: CVE-2026-31433: ksmbd: Fix memory leak in get_file_all_info() (Zilin Guan)
  - CVE-2025-38437: ksmbd: fix potential use-after-free in oplock/lease break ack (Namjae Jeon)
  - CVE-2026-31476: ksmbd: do not expire session on binding failure (Hyunwoo Kim)
  - CVE-DEP: CVE-2026-31476: smb/server: fix possible refcount leak in smb2_sess_setup() (ZhangGuoDong)
  - CVE-DEP: CVE-2026-31476: ksmbd: fix multichannel connection failure (Namjae Jeon)
  - CVE-2024-58087: ksmbd: fix racy issue from session lookup and expire (Namjae Jeon)
  - CVE-DEP: CVE-2026-31476: ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp (Namjae Jeon)
  - CVE-DEP: CVE-2026-31476: ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create (Namjae Jeon)
  - CVE-DEP: CVE-2026-31476: ksmbd: fix user-after-free from session log off (Namjae Jeon)
  - CVE-2026-23428: ksmbd: fix use-after-free of share_conf in compound request (Hyunwoo Kim)
  - CVE-2026-43133: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (Yosry Ahmed)
  - CVE-2026-43205: dpaa2-switch: validate num_ifs to prevent out-of-bounds write (Junrui Luo)
  - CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (Jacob Moroni)
  - CVE-2026-43279: ALSA: usb-audio: Add sanity check for OOB writes at silencing (Takashi Iwai)
  - CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (Florian Westphal)
  - CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (Md Haris Iqbal)
  - CVE-2026-45852: RDMA/rxe: Fix double free in rxe_srq_from_init (Jiasheng Jiang)
  - CVE-2026-45866: serial: caif: fix use-after-free in caif_serial ldisc_close() (Jiayuan Chen)
  - CVE-2026-45983: nfsd: never defer requests during idmap lookup (Anthony Iliopoulos)
  - CVE-2026-46181: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Jason Gunthorpe)
  - CVE-2026-46181: refcount: provide ops for cases when object's memory can be reused (Suren Baghdasaryan)
  - CVE-2026-46033: crypto: authencesn - reject short ahash digests during instance creation (Yucheng Lu)
  - CVE-2026-43083: net: ioam6: fix OOB and missing lock (Justin Iurman)
  - CVE-2026-43101: ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() (Eric Dumazet)
  - CVE-2026-45984: gfs2: Fix use-after-free in iomap inline data write path (Deepanshu Kartikey)
  - CVE-2026-45984: gfs2: Add metapath_dibh helper (Andreas Gruenbacher)
  - CVE-2026-46138: Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt (Luiz Augusto von Dentz)
  - CVE-2024-56654: Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating (Luiz Augusto von Dentz)
  - CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (Pablo Neira Ayuso)
  - CVE-2026-43186: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (Qanux)
  - CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov)
  - CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (Keenan Dong)
  - CVE-2026-43503: net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim)
  - CVE-2026-45932: bpf: Fix tcx/netkit detach permissions when prog fd isn't given (Xuan Zhong)
  - CVE-DEP: CVE-2026-45932: bpf: align CAP_NET_ADMIN checks with bpf_capable() approach (Xuan Zhong)
  - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (Yang Yang)
  - CVE-2026-31607: usbip: validate number_of_packets in usbip_pack_ret_submit() (Nathan Rebello)
  - CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet)
  - CVE-2026-43038: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet)
  - CVE-2026-43040: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (Yochai Eisenrich)
  - CVE-2026-46333: ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds)
  - CVE-2026-43020: Bluetooth: MGMT: validate LTK enc_size on load (Keenan Dong)
  - CVE-2026-43017: Bluetooth: MGMT: validate mesh send advertising payload length (Keenan Dong)
  - CVE-2026-31419: bonding: remove unused bond_is_first_slave and bond_is_last_slave macros (Xiang Mei)
  - CVE-2026-31419: net: bonding: fix use-after-free in bond_xmit_broadcast() (Xiang Mei)
  - CVE-2026-31419: bonding: do not set usable_slaves for broadcast mode (Hangbin Liu)
  - CVE-2026-31419: net: bonding: update the slave array for broadcast mode (Tonghao Zhang)
  - CVE-2026-23171: bonding: fix use-after-free due to enslave fail after slave array update (Nikolay Aleksandrov)
  - CVE-2026-31684: net: sched: act_csum: validate nested VLAN headers (Ruide Cao)
  - CVE-2026-23411: apparmor: fix race between freeing data and fs accessing it (John Johansen)
  - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (John Johansen)
  - CVE-2026-23410: apparmor: fix race on rawdata dereference (John Johansen)
  - CVE-2026-31421: net/sched: cls_fw: fix NULL pointer dereference on shared blocks (Xiang Mei)
  - CVE-2026-31421: net/sched: cls_fw: fix NULL dereference of "old" filters before change() (Davide Caratti)
  - CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (Qi Tang)
  - CVE-2026-31532: can: raw: fix ro->uniq use-after-free in raw_rcv() (Samuel Page)
  - CVE-2026-31787: xen/privcmd: fix double free via VMA splitting (Juergen Gross)
  - CVE-2026-31510: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (Helen Koike)
  - CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu)
  - CVE-2026-31424: netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Pablo Neira Ayuso)
  - CVE-2026-31427: netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (Weiming Shi)
  - CVE-2026-31432: ksmbd: fix OOB write in QUERY_INFO for compound requests (Asim Viladi Oglu Manizada)
  - CVE-2026-31525: bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN (Jenny Guanni Qu)
  - CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Jenny Guanni Qu)
  - CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (Jiayuan Chen)
  - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton)
  - CVE-2026-23398: icmp: fix NULL pointer dereference in icmp_tag_validation() (Weiming Shi)
  - CVE-2026-23281: wifi: libertas: fix use-after-free in lbs_free_adapter() (Daniel Hodges)
  - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (Hyunwoo Kim)
  - CVE-2026-23401: KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Sean Christopherson)
  - CVE-2025-21934: rapidio: fix an API misues when rio_add_net() fails (Haoxiang Li)
  - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens)
  - CVE-2025-68304: Bluetooth: ISO/SCO: use disable_delayed_work_sync (Hongchen Zhang)
  - CVE-2024-56591: workqueue: Fix UBSAN 'subtraction overflow' error in shift_and_mask() (Will Deacon)
  - CVE-2024-56591: workqueue: Implement disable/enable for (delayed) work items (Tejun Heo)
  - CVE-2024-56591: workqueue: Preserve OFFQ bits in cancel[_sync] paths (Tejun Heo)
  - CVE-2024-56591: workqueue: Make @flags handling consistent across set_work_data() and friends (Tejun Heo)
  - CVE-2024-56591: workqueue: Remove clear_work_data() (Tejun Heo)
  - CVE-2024-56591: workqueue: Factor out work_grab_pending() from __cancel_work_sync() (Tejun Heo)
  - CVE-2024-56591: workqueue: Clean up enum work_bits and related constants (Tejun Heo)
  - CVE-2024-56591: workqueue: Introduce work_cancel_flags (Tejun Heo)
  - CVE-2024-56591: workqueue: Rename __cancel_work_timer() to __cancel_timer_sync() (Tejun Heo)
  - LoongArch: CPUFreq: Add compatible with old firmware (wanghongliang)
  - LoongArch: Fix some issues in Loongson-3 CPUFreq driver (wanghongliang)
  - LoongArch: Add Loongson-3 CPUFreq driver support (wanghongliang)
  - LoongArch: pci/quirks: Fix GPU access hang (Baoqi Zhang)
  - LoongArch: Enable CONFIG_CRYPTO_XTS (wanghongliang)
  - LoongArch: defconfig: enable TCG TIS driver (zhuyunfei)
  - scsi/megaraid:Avoid get invalid smid on Loongarch by barrier instruction (zhangtianyang)
  - uio_pdrv_genirq: convert to use device_property APIs (Chris Packham)
  - drivers/iommu: Fix the compilation issue of loongarch iommu on other architectures (Xianglai Li)
  - dirvers/iommu: Fix the issue of memory access out-of-bounds in the IOMMU driver (Xianglai Li)
  - CVE-2025-22083: vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint (Mike Christie)
  - CVE-2026-23198: KVM: Don't clobber irqfd routing type when deassigning irqfd (Sean Christopherson)
  - LoongArch: KVM: Move unconditional delay into timer clear scenery (Bibo Mao)
  - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software (Bibo Mao)
  - LoongArch: KVM: Move AVEC interrupt injection into switch loop (Bibo Mao)
  - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() (Tao Cui)
  - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() (Tao Cui)
  - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS (Qiang Ma)
  - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry (Xianglai Li)
  - LoongArch: KVM: Compile switch.S directly into the kernel (Xianglai Li)
  - LoongArch: KVM: Add DMSINTC inject msi to vCPU (Song Gao)
  - LoongArch: KVM: Add DMSINTC device support (Song Gao)
  - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch (Bibo Mao)
  - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch (Bibo Mao)
  - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() (Bibo Mao)
  - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel() (Tao Cui)
  - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty (Huacai Chen)
  - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust (Huacai Chen)
  - LoongArch: KVM: Fix typo issue in kvm_vm_init_features() (Bibo Mao)
  - LoongArch: KVM: Set default return value in KVM IO bus ops (Bibo Mao)
  - LoongArch: KVM: Add FPU/LBT delay load support (Bibo Mao)
  - LoongArch: KVM: Move LBT capability check in exception handler (Bibo Mao)
  - LoongArch: KVM: Move LASX capability check in exception handler (Bibo Mao)
  - LoongArch: KVM: Move LSX capability check in exception handler (Bibo Mao)
  - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch (Bibo Mao)
  - LoongArch: KVM: Check VM msgint feature during interrupt handling (Bibo Mao)
  - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag() (Bibo Mao)
  - LoongArch: KVM: Move feature detection in kvm_vm_init_features() (Bibo Mao)
  - LoongArch: KVM: Add more CPUCFG mask bits (Bibo Mao)
  - LoongArch: Complete CPUCFG registers definition (Huacai Chen)
  - crypto: virtio - Replace package id with numa node id (Bibo Mao)
  - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req (Bibo Mao)
  - crypto: virtio - Add spinlock protection with virtqueue notification (Bibo Mao)
  - ACPICA: iASL: Add definitions for the IOVT table (Xianglai Li)
  - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() (Qiang Ma)
  - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() (Qiang Ma)
  - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() (Qiang Ma)
  - LoongArch: Add and use some macros for AVEC (Song Gao)
  - net: wangxun: fix lockdep warning in hwmon sysfs attr initialization (Hongchen Zhang)
  - icmp: fix RCU read-side imbalance in icmpv4_xrlim_allow (Hongchen Zhang)
  - net: yt6801: fix lockdep WARN in fxgmac_phy_timer_init with NULL timer key (Hongchen Zhang)
  - drm: ast_loongson: fix lockdep assertion in cursor plane init and destroy (Hongchen Zhang)
  - char: sdf: Fix invalid memory access (Qunqin Zhao)
  - crypto: loongson: Fix sm4 invalid memory access (Qunqin Zhao)
  - LoongArch: enable generic irq migration (wanghongliang)


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 1.84.1-1
changelog:
  - update to 1.84.1 from 1.83.1
  - Fix pkgconfig file regression
    [Patches cherry-picked from c10s. Original changelog:
    - Fix pkgconfig file regression. （1.84.0-2）]


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 3.2.0-1
changelog:
  - update to 3.2.0 from 2.28
  - Migrated to SPDX license
  - Backport libblockdev-smart and nvme plugin
  - remove vdo and kbd plugin
  - nvme: Avoid element-type g-i annotations
    [Patches cherry-pick from c10s. Original changelog:
    - nvme: Avoid element-type g-i annotations ( 3.2.0-2 )]


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 0.6.2-1
changelog:
  - update to 0.6.2 from 0.5.2
  - Fix static analyzer detected issues
    [Patches cherry-picked from c10s. Original changelog:
    - Fix static analyzer detected issues. （0.6.2-2）]


author: Ziyang Zhang <ZiyangZhang@linux.alibaba.com> - 2.1.12-3
changelog:
  - remove patch: Revert "Fix checking return value of the
    evdns_base_resolv_conf_parse()" since transmission now fix its problem


author: Funda Wang <fundawang@yeah.net> - 1.10.1-1
changelog:
  - New version 1.10.1
  - Add patch from mageia for removal wrong libdir from libgcrypt-config
  - Remove disable-brainpool switch, as stated by developer (https://dev.gnupg.org/T5162)


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0 from 1.50.1
  - Close %check
  - Migrated to SPDX license
  - Add patches to fix bug and replace jansson with json-c


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 2.1-1
changelog:
  - Update to 2.1 from 2.0.5
  - Migrated to SPDX license
  - Add patches to fix err with strnlen specified bound size outweigh source size
  - Add patches to fix err with the decoder object isn't actually used
    [Patches cherry-picked from c10s. Original changelog:
    - Update to v2.1 and regenerate documentation(2.1-1)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 3.0.2-1
changelog:
  - Update to 3.0.2 from 3.0.0
  - Migrated to SPDX license
  - Remove patch as the new version of tarball already includes changes.
  - Update patches to enable tjbench to fix some bugs.
  - Add patches to add endbr32/endbr64 instructions.
    [Patches cherry-pick from c10s. Original changelog:
    - New upstream release 3.0.2]


author: NewStart <os@gd-linux.com> - 1.4.0-3
changelog:
  - Fix overly-optimistic kernel version checks
  - https://github.com/smuellerDD/libkcapi/commit/c2af62dcc7a287f3c14f6aaec5724401c1ea470a


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.30.0-1
changelog:
  - Update to 1.30.0 from 1.26.4
  - switch to build using meson
  - Migrate to SPDX license
  - Add patches to parse trace command & value in a more straightforward way
  - Add patches to fix a potential mem leak in query_rfim_ready()
    [Patches cherry-pick from c10s. Original changelog:
    - Add patches for a pair of bugs that make static analysis unhappy(1.30.0-5)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.18.5-1
changelog:
  - to #IBHRLO
  - update to 1.18.5 for CVE-2024-7383
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.20.3-1
changelog:
  - Update to 1.20.3 from 1.18.5
  - Add patches to print the full error from the server during handshaking. 
    [Patches cherry-pick from c10s. Original changelog: 
    - Print full NBD error from server.]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.3-1
changelog:
  - Update to 1.3 from 1.2
  - Add patches to fix 'Using uninitialized value "p"/"rc".
    [Patches cherry-pick from c10s. Original changelog:
    - applied patch to fix static analysis errors(1.3-6)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.11.1-1
changelog:
  - Update to 1.11.1 from 1.3
  - Migrated to SPDX license
  - Remove patch as the new version of tarball already includes changes.


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 4.13.0-1
changelog:
  - Update to 4.13.0 from 4.12.0
  - Remove patch as the new version of tarball already includes changes.


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1:1.6.40-1
changelog:
  - Update to 1.6.40 from 1.6.39
  - Add patches to fixes annoncheck on aarch64 as noeon asm prevents 
    some hardening protection
    [Patches cherry-pick from c10s. Original changelog:
    - fix hardening on aarch64(1.6.40-6)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 0.9.0-1
changelog:
  - Update to 0.9.0 from 0.6
  - Migrate to SPDX license
  - Remove patch as the new version of tarball already includes changes.


author: Chunmei Xu <xuchunmei@linux.alibaba.com> - 1.4.4-2
changelog:
  - Don't BuildRequires python-setuptools, use Python-bundled distutils
  - fix build failed with python-setuptools-60*


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.34.0-1
changelog:
  - Update to 1.34.0 from 1.30.8
  - switch to build using meson
  - Migrated to SPDX license
  - Add patches to fix 16-bit service on big endian architectures
  - Add patches to fix static analyzer err
    [Patches cherry-pick from c10s. Original changelog:
    - Add patches for a pair of bugs that make static analysis unhappy(1.34.0-7)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 0.14.0-1
changelog:
  - Update to 0.14.0 from 0.13.0
  - Remove patch as the new version of tarball already includes changes.


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 5.1-1
changelog:
  - Update to 5.1 from 4.12
  - Add patches to first try blanc password to avoid uselessly prompting
  - Add patches to refcnt struct secret_pubkey_stuff when passing to helper thread
    [Patches cherry-picked from c10s. Original changelog:
    - ipsec: fix duplicate --ctlsocket option for whack(5.1-6)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 2.57.1-1
changelog:
  - Update to 2.57.1 from 2.56.3
  - Migrated to SPDX license
  - Add patches to fix FTBFS by updating time crate
    [Patches cherry-pick from c10s. Original changelog:
    - Fix FTBFS by updating time crate(2.57.1-9)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.3.10-1
changelog:
  - Update to 1.3.10 from 1.3.9
  - Remove patch as the new version of tarball already includes changes.
  - Add patches to add linking of gssapi to support Kerberos authentication.
    [Patches cherry-pick from c10s. Original changelog:
    - Add linking of gssapi to support Kerberos authentication(1.3.10-3)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.2.2-1
changelog:
  - Update to 1.2.2 from 1.2.0
  - Migrated to SPDX license
  - Add patches to fix CVE-2024-50612
    [Patches cherry-pick from c10s. Original changelog:
    - fix crash in ogg vorbis (CVE-2024-50612)(1.2.2-5)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 3.6.5-1
changelog:
  - Update to 3.6.5 to fix CVE-2025-32914 CVE-2025-32906 CVE-2025-32908 
    CVE-2025-32913 CVE-2025-2784


author: Loongson <service@loongson.cn> - 3.6.5-9
changelog:
  - Add patch to fix CVE-2026-1536,CVE-2026-1761,CVE-2025-32908,CVE-2025-32914,CVE-2026-0719,CVE-2026-1801,CVE-2026-2708


author: Bo Ren <rb01097748@alibaba-inc.com> - 47.2-1
changelog:
  - Update to 47.2-1 from 3.44.0
  - Remove libsysprof-ui
  - Backport debuginfod and sysprof-live-unwinder
    [Patches cherry-picked from c10s. Original changelog:
     - Backport debuginfod and sysprof-live-unwinder (47.2-1)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 4.6.0-1
changelog:
  - Update to 4.6.0 from 4.5.1
  - Remove libtiff-opengl by reason of tiffgt been removed
  - Fix CVE-2023-52355
  - Add patches to fix CVE-2024-7006
  - Remove patch as the new version of tarball already includes changes.
  - Remove patches as this version removes a big number of utilities that 
    have suffered from lack of maintenance over the years
    [Patches cherry-pick from c10s. Original changelog:
    - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo(4.6.0-4)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 4.6.0-2
changelog:
  - to #IAGL52
  - Add patch to fix CVE-2023-52356
  - project: TC2024080204
  - Signed-off-by: mgb01105731 <mgb01105731@alibaba-inc.com>


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 0.10.0-1
changelog:
  - to #IBGGWG
  - update version to 0.10.0 for CVE-2023-1017
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 3.3.0-3
changelog:
  - optimise spec file

  - Tue Apr 19 2022 Chunmei Xu <xuchunmei@linux.alibaba.com> - 3.3.0-2
  - Bump version to rebuild with icu


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 2.10.90-1
changelog:
  - update to 2.10.90 from 2.9.4
  - Remove the patch because the changes already exist upstream
  - lvm2: Try opening for unused device detection harder
  - mdraid: Avoid acquiring system inhibit lock for external array operations
    [Patches cherry-pick from c10s. Original changelog:
    - mdraid: Avoid acquiring system inhibit lock for external array operations. ( 2.10.90-5 )]


author: Chunmei Xu <xuchunmei@linux.alibaba.com> - 1.1-2
changelog:
  - add libunistring.so.2* from version 1.0 to fix build env
  - after all other pkgs update based on version 1.1, will remove libunistring.so.2*


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1:1.49.2-1
changelog:
  - Update to 1.49.2 from 1.44.2
  - Remove patch as the new version of tarball already includes changes.


author: Loongson <service@loongson.cn> - 9.10.0-9
changelog:
  - sync to anolis 9.10.0-17
  - support the virtCCA feature
  - Add sw64arch support
  - Fix logic error and memleak about Hygon Reuse ASID
  - Support provide blobs for secret injection for Hygon Confidential VMs
  - rebuild for new wireshark
  - add BuildRequires systemtap-sdt-dtrace
  - add support for riscv64
  - Add support for phytium host-model and s5000c model
  - Add new Chengdu CPU model


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 5.0.0-1
changelog:
  - Update to 5.0.0 from 4.0.0
  - Migrated to SPDX license
  - Remove patch as the new version of tarball already includes changes.


author: tomcruiseqi <tomcruiseqi@inspur.com> - 0.9.15-1
changelog:
  - Update to 0.9.15 and add two patches to fix CVE-2026-32854, CVE-2026-32853
  - Remove patches that are already been merged
  - Backport patches from https://github.com/LibVNC/libvncserver/pull/234


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.14.1-1
changelog:
  - Update to 1.14.1 from 1.12.0
  - Remove patches as the new version of tarball already includes changes
  - Fix CVE-2023-6349


author: Ziyang Zhang <ZiyangZhang@linux.alibaba.com> - 4.4.33-1
changelog:
  - Update to 4.4.33
  - Add doc subpackage including NEWS, README and THANKS
  - Add two newest patches optimizing performance


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 1.7.0-1
changelog:
  - update to 1.7.1 from 1.4.0
  - Migrated to SPDX license
  - Split the x11-utils into their own subpackage with the right requires


author: lzq11122 <lzq02303433@alibaba-inc.com> - 2.11.5-17
changelog:
  - Add patch to fix CVE-2026-0990 and CVE-2026-0992,CVE-2026-1757
  - Fix errors caused by the introduction of new patches


author: Chen Li <chenli@loongson.cn> - 17.0.6-4
changelog:
  - LoongArch Backport: Add support for call36 function calls
  - LoongArch Backport: Reimplement the expansion of PseudoLA*_LARGE instructions
  - LoongArch Backport: Implement 128-bit and 256-bit vector shuffle
  - LoongArch Backport:  Add support for LoongArch V1.1 instructions
    definitions and builtins
  - LoongArch Backport: Support -march=la64v1.0 and -march=la64v1.1
  - LoongArch Backport: Support la664 (#100068)
  - LoongArch Backport: Enable automatic vectorization


author: Loongson <service@loongson.cn> - 17.0.6-6
changelog:
  - LoongArch Backport: Fix pattern vsplat_imm_eq_1
  - LoongArch Backport: Support RuntimeDyld
  - Backport patch to fix CVE-2023-46049


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1:3.9.9-1
changelog:
  - Update to 3.9.9 from 3.8.5
  - Remove patches by reason of new version of tarball already includes changes.


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.3.0-1
changelog:
  - Update to 1.3.0 from 1.2.0
  - Fix cargo build err
  - Add patch to add loongarch64 support for mdevctl (<zhangwenlong@loongson.cn>)


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.14.5-1
changelog:
  - to #IBHHV0
  - update to 1.14.5 for CVE-2024-46901
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: Hong Wei Qin <qhw01063182@alibaba-inc.com> - 5.0.0-1
changelog:
  - Update to 5.0.0 from 4.9.4
  - Add patches to fix LD_RUN_PATH handling
    [Patches cherry-picked from c10s. Original changelog:
    - Fix precedence of casts. (5.0.0-3)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.32.9-1
changelog:
  - to #IBGT8A
  - New version 1.32.9 for CVE-2024-10573
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 4.1.2-1
changelog:
  - update to 4.1.2 from 4.0.3
  - Migrated to SPDX license
  - Switch to default ch4:ofi device
  - Mpich should own cmake and include install directories


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 4.0.43-1
changelog:
  - update to 4.0.43 from 4.0.42
  - Increase error message buffer size
  - Prevent a leak of iconv_t
  - Prevent a file descriptor leak
    [Patches cherry-pick from c10s. Original changelog:
    - Prevent a file descriptor leak. ( 4.0.43-6 )]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.25.0-1
changelog:
  - to #IBHCKY , #IAGL3S , #IAGL3Y
  - update version 1.25.0 for CVE-2024-46657,CVE-2023-51106,CVE-2023-51107
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: Kaiqiang Wang <wangkaiqiang@inspur.com> - 8.0.37-1
changelog:
  - update to 8.0.37
  - fix CVE-2024-21096
  - fix CVE-2024-21062
  - fix CVE-2024-21054
  - fix CVE-2024-21102
  - fix CVE-2024-21008
  - fix CVE-2024-21060
  - fix CVE-2024-21051
  - fix CVE-2024-21057
  - fix CVE-2024-21013
  - fix CVE-2024-21015
  - fix CVE-2024-21055
  - fix CVE-2024-21053
  - fix CVE-2024-20994
  - fix CVE-2024-21056
  - fix CVE-2024-21052
  - fix CVE-2024-20998
  - fix CVE-2024-21047
  - fix CVE-2024-21087
  - fix CVE-2024-20993
  - fix CVE-2024-21061
  - fix CVE-2024-21009
  - fix CVE-2024-21069
  - fix CVE-2024-21000
  - fix CVE-2024-21049
  - fix CVE-2024-21050


author: tomcruiseqi <10762123+tomcruiseqi@user.noreply.gitee.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 to fix CVE-2024-21134 CVE-2024-21130 CVE-2024-21179 CVE-2024-21177 CVE-2024-21173 CVE-2024-21171 CVE-2024-21165 CVE-2024-21163 CVE-2024-21162 CVE-2024-21142 CVE-2024-21125 CVE-2024-21129 CVE-2024-21127 CVE-2024-20996 CVE-2025-24375 CVE-2024-21198 CVE-2024-21203


author: wenxin <wx02272781@alibaba-inc.com> - 8.0.43-1
changelog:
  - update 8.0.43
  - fix cve CVE-2025-50081
  - fix cve CVE-2025-50100
  - fix cve CVE-2025-50104
  - fix cve CVE-2025-50077
  - fix cve CVE-2025-50078
  - fix cve CVE-2025-50079
  - fix cve CVE-2025-50080
  - fix cve CVE-2025-50082
  - fix cve CVE-2025-50083
  - fix cve CVE-2025-50084
  - fix cve CVE-2025-50085
  - fix cve CVE-2025-50086
  - fix cve CVE-2025-50087
  - fix cve CVE-2025-50091
  - fix cve CVE-2025-50093
  - fix cve CVE-2025-50094
  - fix cve CVE-2025-50097
  - fix cve CVE-2025-50099
  - fix cve CVE-2025-50101
  - fix cve CVE-2025-53023


author: zhoujiajia111 <zjl02254423@alibaba-inc.com> - 8.0.44-1
changelog:
  - update 8.0.44 to fix CVE-2025-53069,CVE-2025-53062,CVE-2025-53054,CVE-2025-21490
    CVE-2025-53053,CVE-2025-53045,CVE-2025-53044,CVE-2025-53042,CVE-2025-53040


author: lzq11122 <lzq02303433@alibaba-inc.com> - 8.0.45-1
changelog:
  - Update to 8.0.45 to fix cves
  - CVE-2026-21964,CVE-2026-21937,CVE-2026-21948,CVE-2026-21941,CVE-2026-21968,CVE-2026-21936


author: tomcruiseqi <tomcruiseqi@inspur.com> - 8.0.46-1
changelog:
  - Update to 8.0.46
  - Fix CVE-2026-22017, CVE-2026-22009, CVE-2026-22005, CVE-2026-22004, CVE-2026-22001, CVE-2026-21998


author: lzq11122 <lzq02303433@alibaba-inc.com> - 1:22.22.0-1
changelog:
  - Update to 22.22.0 to fix CVE-2025-59465,CVE-2025-55131,CVE-2025-59466,CVE-2026-21637,CVE-2025-55130,CVE-2025-55132


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 3.112-1
changelog:
  - Update to 3.112 for new firefox
  - Remove patch as sw patch Unavailable
  - Add patch to fix build err


author: Hong Wei Qin <qhw01063182@alibaba-inc.com> - 2.5.2-1
changelog:
  - Update to 2.5.0 from 2.5.2
  - Remove patches because bugs are not exist in new version.
  - Add patches to fix CVE-2024-56826 and CVE-2024-52827
  - [Patches cherry-picked from c10s. Original changelog:
    - Fix precedence of casts. (2.5.2-4)]
  - Add patchs to fix build failed


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 0.25.0-1
changelog:
  - to #IAR5JC , #I9KRLP
  - update to 0.25.0 for CVE-2023-5992, CVE-2024-1454
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 0.26.1-1
changelog:
  - update to 0.26.1 from 0.25.0
  - Fix CVE-2024-45615 CVE-2024-45616	CVE-2024-45617	CVE-2024-45618	CVE-2024-45619	CVE-2024-45620	
  - Fix SPDX license identifier for BSD 3-Clause
  - Change expected test failures in FIPS mode
  - Separate opensc into libraries and binaries
  - Remove the patch because the changes already exist upstream


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 1:1.4.1-1
changelog:
  - update to 1:1.4.1 from 1:1.3.7
  - Migrated to SPDX license
  - Use NSS as cryptography library
  - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages


author: Cheng Yang <yc02267530@alibaba-inc.com> - 9.6p1-1
changelog:
  - update to 9.6p1
  - The patch was removed because the new version already included the patch content


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 0.4.39-1
changelog:
  - update to 0.4.39 from 0.4.33
  - Fix CVE-2024-40897
  - Migrated to SPDX license
  - Move orc-test to main package and remove orc.m4


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 2024.5-1
changelog:
  - to #IAR5MZ
  - update to 2024.5 for rpm-ostree 2024.5
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: Chang Gao <gc-taifu@linux.alibaba.com> - 1.54.0-1
changelog:
  - Update to 1.54.0
  - Drop the pango-tests sub package
  - Update build params
  - Merge old version doc pack with new one and remove noarch buildrequires 
    because the doc files are not same on different arches.


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 7.1.0-1
changelog:
  - update to 7.1.0 from 7.0.1
  - Migrated to SPDX license
  - Ensure sde library built with proper flags
    [Patches cherry-pick from c10s. Original changelog:
    - Ensure sde library built with proper flags. ( 7.1.0-4 )]


author: Jing Zhang <renyu.zj@linux.alibaba.com> - 3.5-2
changelog:
  - Fix some bugs and add features:
  - Fix handling of gpt partition types
  - Fix handling of msdos partition types
  - Add a libparted test for ped_partition_set_system on msdos
  - Add display of GPT UUIDs in JSON output
  - Add no_automount flag support
  - increase xfs size to 300M etc.


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 6.3.2-1
changelog:
  - Update to 6.3.2-1 from 6.2.0-1
  - Migrated to SPDX license
  - libpcp: fix endian issue in big-endian __pmTimestamp writing
    libpcp, pcp-xsos: finer grained string output control in pmPrintValue
    Fix selinux denials caused by pmie and pmlogger trying to access /dev/dm-*
    [Patches cherry-pick from c10s. Original changelog:
    - Fix writing of v3 archive timestamps on s390x (RHEL-69722)
    - Back-port upstream bug fixes for pcp-xsos(1).
    - Fix selinux denials caused by pmie and pmlogger trying to access /dev/dm-*]


author: tomcruiseqi <tomcruiseqi@inspur.com> - 0.23.0-1
changelog:
  - Update to 0.23.0
  - Fix CVE-2025-48431, CVE-2026-43870, CVE-2026-43869, CVE-2026-41636, CVE-2026-41607, CVE-2026-41606, CVE-2026-41605, CVE-2026-41604, CVE-2026-41603, CVE-2026-41602
  - Exclude loongarch64 for build errors


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 8.3.15-1
changelog:
  - Update to 8.3.15-1 from 8.2.27-1
  - Migrated to SPDX license
  - Remove patches which already exist in code
  - enable command history in phpdbg, add internal UTC if tzdata is missing and backport Argon2 password hashing in OpenSSL ext
    [Patches cherry-pick from c10s. Original changelog:
    - rebase to 8.3.7
      backport Argon2 password hashing in OpenSSL ext
    - update to 8.3.0RC3 https://fedoraproject.org/wiki/Changes/php83
      add internal UTC if tzdata is missing
      bump to final API/ABI
      switch to nikic/php-parser version 5
      openssl: always warn about missing curve_name
    - rebase to 8.3.12
      enable command history in phpdbg
  ]


author: tomcruiseqi <tomcruiseqi@inspur.com> - 8.3.31-1
changelog:
  - Update to 8.3.31
  - Fix CVE-2026-7568, CVE-2026-7262, CVE-2026-6735, CVE-2026-6722
  - Remove patches that are already been merged


author: Chang Gao <gc-taifu@linux.alibaba.com> - 0.43.4-1
changelog:
  - update to 0.43.4
  - Add patch to prevent double inclusion of header file
  - Add patch to enable PAC and BTI feature
    [Patches cherry-pick from c10s. Original changelog:
    - Update to 0.43.4 (0.43.4-1) ]


author: happy_orange <songnannan@linux.alibaba.com> - 4.2.8-1
changelog:
  - update to 4.2.8
  - Fix CPPFLAGS use for x86 and arm
  - Fix rpminspect failures for aarch64
  - Add pmix_test and pmix_regex in test
  - Enable IPv6 support and tests examples support, and disable wrapper rpath
  - Use SPDX license identifier
    [Patches cherry-picked from c10s. Original changelog:
    - Fix CPPFLAGS use for aarch64.(4.2.8-8)]


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 24.02.0-1
changelog:
  - Update to 24.02.0-1 from 23.05.0-4
  - Migrated to SPDX license
  - Remove patch which already exist in code
  - Backport fix for issues found by Coverity
    [Patches cherry-pick from c10s. Original changelog:
     - Backport fix for issues found by Coverity]


author: happy_orange <songnannan@linux.alibaba.com> - 2:3.8.5-1
changelog:
  - update to 3.8.5
  - Explicitly set default_database_type if lmdb map is used
  - Converted license tag to SPDX
  - Use systemd-sysusers, original patch by Jonathan Wright <jonathan@almalinux.org>
  - Dropped mail group configuration / creation, it is provided by setup
    [Patches cherry-pick from c10s. Original changelog:
    - Dropped mail group configuration / creation, it is provided by setup.(3.8.5-7)]


author: wenxin <wx02272781@alibaba-inc.com> - 15.18-1
changelog:
  - Update to 15.18 to fix CVE-2026-6472,CVE-2026-6473,CVE-2026-6475,
    CVE-2026-6477,CVE-2026-6478,CVE-2026-6479


author: tomcruiseqi <tomcruiseqi@inspur.com> - 31.1-1
changelog:
  - Update to version 31.1
  - Switch to CMake build system
  - Add abseil-cpp dependency
  - Remove JRE17 patch (no longer needed)
  - Remove CVE-2025-4565 patch (fixed upstream)
  - Update library sonames to 31
  - Add CMake config files to devel package
  - Python bindings now built via CMake instead of setup.py


author: tomcruiseqi <tomcruiseqi@inspur.com> - 3.13.3-1
changelog:
  - Update to 3.13.3
  - Fix CVE-2025-69230, CVE-2025-69229, CVE-2025-69226, CVE-2025-69224, CVE-2025-69223
  - Remove patches that has already been merged
  - Relax brotli >= 1.2 version requirement for OpenAnolis compatibility
    (brotli 1.1.0 patched with output_buffer_limit backport from v1.2.0)


author: Loongson <service@loongson.cn> - 4.2.16-6
changelog:
  - Add patch to fix CVE-2024-56374,CVE-2026-1312,CVE-2026-1207,CVE-2026-1285,CVE-2025-14550,CVE-2025-13473


author: Funda Wang <fundawang@yeah.net> - 2.3.0-1
changelog:
  - New version 2.3.0
  - Disable test as it requires valid /etc/resolv.conf, which does not
    exist in current build system


author: Loongson <service@loongson.cn> - 0.6.2-1
changelog:
  - Update to 0.6.2
  - Fix CVE-2026-23490
  - Switch to flit-core/pip wheel build (pyproject.toml, no setup.py)
  - Update dist-info glob and drop upper version bound on pyasn1 requires


author: Chang Gao <gc-taifu@linux.alibaba.com> - 3.9.5-1
changelog:
  - Update to 3.9.5
  - Add patch to work around race with udev setting softdog label
  - Add patch to avoids delays in add_lockspace that are
    used to detect machines using the same host_id
    [Patches cherry-picked from c10s. Original changelog:
    - new nodelay flag for add_lockspace (3.9.5-2)]


author: Bo Ren <rb01097748@alibaba-inc.com> - 1.11.3
changelog:
  - Update to 1.11.3 from 1.10.1
  - Use pyproject macros instead of the deprecated py3 macros
  - Add BuildRequires for build issue
  - Remove deleted doc file


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 24.7.0-1
changelog:
  - to #IB7BF3:CVE-2024-41671
  - update to 24.7.0 fix CVE-2024-41671
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.17.1-3
changelog:
  - to #IBGLMU
  - add patch to fix CVE-2024-33655
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: lzq11122 <lzq02303433@alibaba-inc.com> - 1.17.1-11
changelog:
  - Add patch to fix CVE-2026-32792,CVE-2026-42923,CVE-2026-40622,CVE-2026-42534,CVE-2026-44390,CVE-2026-44608


author: Loongson <service@loongson.cn> - 2:8.2.0-31
changelog:
  - Fix-CVE-2022-3872
  - Fix-CVE-2024-26327
  - Fix-CVE-2024-3446
  - Fix-CVE-2024-3447
  - Fix-CVE-2024-4467
  - Fix-CVE-2024-6505
  - Fix-CVE-2024-7730
  - Fix-CVE-2025-11234
  - Fix-CVE-2025-12464


author: Loongson <service@loongson.cn> - 2:8.2.0-32
changelog:
  - hw-nvme-Use-pcie_sriov_num_vfs.patch Fixes: CVE-2024-26328
  - virtio-pci-Fix-the-use-of-an-uninitialized-irqfd.patch Fixes: CVE-2024-4693
  - hw-net-net_tx_pkt-Fix-overrun-in-update_sctp_checksu.patch Fixes: CVE-2024-3567


author: Loongson <service@loongson.cn> - 2:8.2.0-34
changelog:
  - Sync the Loongarch architecture-related patches to "target/loongarch: Add some CPUCFG bits with host CPU model"


author: Ziyang Zhang <ZiyangZhang@linux.alibaba.com> - 0.17.1-1
changelog:
  - Update to 0.17.1 and remove patches included in this release
  - Remove Redhat specific patch since we don't need it


author: lzq11122 <lzq02303433@alibaba-inc.com> - 7.2.14-1
changelog:
  - Update to 7.2.14 to fix CVE-2026-23479,CVE-2026-25243,CVE-2026-23631
  - Remove patch new version fixed


author: lzq11122 <lzq02303433@alibaba-inc.com> - 3.4.3-1
changelog:
  - Update to 3.4.3 to fix CVE-2026-43617,CVE-2026-43619,CVE-2026-43620,CVE-2026-29518,CVE-2026-43618,CVE-2026-45232


author: Xiaoping Liu <lxp01404969@alibaba-inc.com> - 3.3.7-1
changelog:
  - update to 3.3.7 from 3.3.6
  - Migrated to SPDX license
  - Fix CVE-2024-41946 CVE-2024-43398 CVE-2024-41123
  - add BuildRequires systemtap-sdt-devel to Fix _systemtap_datadir


author: wh02252983 <wh02252983@alibaba-inc.com> - 3.3.8-1
changelog:
  - update to 3.3.8 to Fix CVE-2025-25186
  - The patch was removed because the new version already included the patch content


author: Chang Gao <gc-taifu@linux.alibaba.com> - 7.4-1
changelog:
  - Update to 7.4
  - Update drivedb.h and add patch to fix some bug
    [Patches cherry-picked from c10s. Original changelog:
    - fix static analysis findings (7.4-5)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.8.0.2-1
changelog:
  - to #IBHDBL
  - update to 1.8.0.2 for CVE-2024-54661
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: Chang Gao <gc-taifu@linux.alibaba.com> - 2024.4-1
changelog:
  - Update to 2024.4-1
  - Add patches to handle build issue when using gcc12
    [Patches cherry-picked from c10s. Original changelog:
    - Update to 1.4.304.0 SDK (2024.4-1)]


author: Chang Gao <gc-taifu@linux.alibaba.com> - 3.0.5-1
changelog:
  - Update to 3.0.5
  - Add patch to extend maximum DNS name to 255 from 63 by default
    [Patches cherry-picked from c10s. Original changelog:
    - Extend maximum DNS name to 256 (3.0.5-9)]


author: happy_orange <songnannan@linux.alibaba.com> - 0.9.0-1
changelog:
  - update to 0.9.0
  - split swtpm-selinux package from swtpm
  - remove patches that have been merged upstream
    [Patches cherry-pick from c10s. Original changelog:
    - Add extra SELinux policies.(0.9.0-5)]


author: Weisson <Weisson@linux.alibaba.com> - 12.7.6-1
changelog:
  - Update to 12.7.6 from 12.7.3
  - Remove patches that exist in the new version
  - Build position independent executables


author: Weisson <Weisson@linux.alibaba.com> - 5.2-1
changelog:
  - Update to 5.2 from 4.8
  - add jupyter kernel and examples in jupyter package from 4.9 (
    https://inbox.sourceware.org/systemtap/ZEw5pdqi7y%2FjYqeA@elastic.org/T/#u)
  - Emit forward decls within tracepoint_derived_probe_group() too
    [Patches cherry-picked from c10s. Original changelog:
     - Emit forward decls within tracepoint_derived_probe_group() too (5.2-1)]


author: Weisson <Weisson@linux.alibaba.com> - 2:1.35-1
changelog:
  - Update to 1.35 from 1.34
  - Remove patches that exist in the new version
  - Fix spurious diagnostic during extraction of . with  --keep-newer-files
  - Add exclude17 and exclude18 tests which were forgotten by
  - Revert "Fix savannah bug #63567"
   [Patches cherry-picked from c10s. Original changelog:
     - Revert "Fix savannah bug #63567" (1.35-5)]


author: Weisson <Weisson@linux.alibaba.com> - 6.24.10-1
changelog:
  - Update to 6.24.10 from 6.24.07
  - Downstream: implement variable tcsh_posix_status
  - Inform about no support for 'limit memoryuse' in manpage
    [Patches cherry-picked from c10s. Original changelog:
     - Inform about no support for 'limit memoryuse' in manpage(6.24.10-5)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 5.3.4-1
changelog:
  - Update to 5.3.4 from 5.3.2
  - Remove patch as the new version of tarball already includes changes
  - Add patches to Don't assume neon available on arm64/aarch64
    [Patches cherry-pick from c10s. Original changelog:
    - Update to 5.3.4(5.3.4-1)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.13.1-5
changelog:
  - Rebuild with xorg-x11-server to fix CVE-2025-49175,CVE-2025-49176,
    CVE-2025-49178,CVE-2025-49179,CVE-2025-49180
  - Delete patches as xorg-x11-server has fix CVE-2025-49175,CVE-2025-49176


author: lzq11122 <lzq02303433@alibaba-inc.com> - 1.13.1-7
changelog:
  - Rebuild with xorg-x11-server to fix CVE-2024-31082,CVE-2025-62229,
  CVE-2025-62230 and CVE-2025-62231


author: wh02252983 <wh02252983@alibaba-inc.com> - 1:9.0.105-1
changelog:
  - update to 9.0.105
  - Fix CVE-2025-46701
  - The patch was removed because the new version already included the patch content


author: qizengtian <qizengtian@inspur.com> - 1:9.0.111-1
changelog:
  - Upgrade to 9.0.111 to fix CVE-2025-55752
  - Remove the unsed patch which has already been included in the new version


author: tomcruiseqi <tomcruiseqi@inspur.com> - 1:9.0.115-1
changelog:
  - Update to 9.0.115
  - Fix CVE-2025-53506, CVE-2025-52434, CVE-2025-48976, CVE-2025-46701, CVE-2026-24734


author: tomcruiseqi <tomcruiseqi@inspur.com> - 1:9.0.117-1
changelog:
  - Update to 9.0.117
  - Fix CVE-2026-34500, CVE-2026-34487, CVE-2026-34486, CVE-2026-34483, CVE-2026-29146, CVE-2026-29145, CVE-2026-29129, CVE-2026-24880
  - Remove patches that are already been included


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 0.19-1
changelog:
  - Update to 0.19 from 0.18
  - Add patches to use SPDX license identifiers
  - Add patches to remove spec file from git
  - Add patches to don't start the gui if a display is not available
    [Patches cherry-picked from c10s. Original changelog:
    - Bump release for October 2024 mass rebuild:(0.19-9)]


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 2022.04-5
changelog:
  - to #IB7HCR
  - add patch to fix CVE-2022-2347
  - Project: TC2024080204
  - Signed-off-by: mgb01105731 mgb01105731@alibaba-inc.com


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 1.17.0-1
changelog:
  - Update to 1.17.0 from 1.15.0
  - Add patch to fix undeclared INFINITY error in ucs_time_units_to_sec()
  - Update loongarch64 patches for new version (<zhangwenlong@loongson.cn>)


author: zjl002254423 <zjl02254423@alibaba-inc.com> -3:9.0.2092-8
changelog:
  - Add patch to fix CVE-2025-22134,CVE-2025-26603,CVE-2024-1215,CVE-2025-29768,CVE-2024-41957,CVE-2024-41965


author: lzq11122 <lzq02303433@alibaba-inc.com> - 3:9.0.2092-10
changelog:
  - Add patch to fix CVE-2026-25749,CVE-2026-26269,CVE-2026-28421,CVE-2026-28419,CVE-2026-28420,CVE-2026-28422,CVE-2026-28418


author: wangzhe <wanglan.wz@alibaba-inc.com> - 5.0.0-1
changelog:
  - update to 5.0.0
  - Switch build using meson
  - Remove patches which are useless
  - Add patches to fix some bugs
    [Patches cherry-picked from c10s. Original changelog:
    - Rebased to virt-manager-5.0.0 (5.0.0-1)]


author: Chang Gao <gc-taifu@linux.alibaba.com> - 1.24.5-1
changelog:
  - Fix CVE-2024-38428
  - Remove patch which already exist in upstream
  - Add patches to fix some bugs
    [Patches cherry-picked from c10s. Original changelog:
    - Revert back to using GnuTLS as the TLS backend
    - Use bundled implementation of MD4 for NTLM (1.24.5-5)]


author: tomcruiseqi <tomcruiseqi@inspur.com> - 1:4.4.15-1
changelog:
  - Update to 4.4.15
  - Fix CVE-2026-7379, CVE-2026-7378, CVE-2026-7376, CVE-2026-7375, CVE-2026-6870, CVE-2026-6869, CVE-2026-6868, CVE-2026-6867, CVE-2026-6538, CVE-2026-6537, CVE-2026-6535, CVE-2026-6534, CVE-2026-6533, CVE-2026-6532, CVE-2026-6531, CVE-2026-6530, CVE-2026-6529, CVE-2026-6527, CVE-2026-6524, CVE-2026-6523, CVE-2026-6522, CVE-2026-6521, CVE-2026-6520, CVE-2026-6519, CVE-2026-5657, CVE-2026-5656, CVE-2026-5654, CVE-2026-5653, CVE-2026-5409, CVE-2026-5408, CVE-2026-5407, CVE-2026-5406, CVE-2026-5405, CVE-2026-5404, CVE-2026-5403, CVE-2026-5401, CVE-2026-5299
  - Remove patches that are already been included


author: Ziyang Zhang <ZiyangZhang@linux.alibaba.com> - 5.10.0-1
changelog:
  - Rollback to 5.10.0
  - Add patches cherry-picked from upstream 5.10 to 5.18
  - Add Anolis customized atomic write support patches


author: Chang Gao <gc-taifu@linux.alibaba.com> - 1.2.39-1
changelog:
  - Update to 1.2.39
  - Add patch to include openssl engines conditional
  - Remove gcrypt and gnutls subpacks
    [Patches cherry-picked from c10s. Original changelog:
    - Fix openssl engine dependency 
    - Stop building gcrypt and gnutls implementations (1.2.39-1)]


author: Loongson <service@loongson.cn> - 1:1.20.14-15
changelog:
  - add patches to fix cves
  - CVE-2025-49175 CVE-2025-49176 CVE-2025-49177
  - CVE-2025-49178 CVE-2025-49179 CVE-2025-49180
  - CVE-2023-6816 CVE-2024-21885 CVE-2024-21886
  - CVE-2025-26594 CVE-2025-26595 CVE-2025-26596
  - CVE-2025-26597 CVE-2025-26598 CVE-2025-26599
  - CVE-2025-26600 CVE-2025-26601


author: Loongson <service@loongson.cn> - 1:1.20.14-16
changelog:
  - add patches to fix cves
  - CVE-2025-62229 CVE-2025-62230 CVE-2025-62231 CVE-2024-31082
  - CVE-2026-33999


author: Loongson <service@loongson.cn> - 1:1.20.14-18
changelog:
  - Fix CVE-2026-50261 CVE-2026-50261 CVE-2026-50260 CVE-2026-50259 
  - CVE-2026-50258 CVE-2026-50257 CVE-2026-50256 CVE-2026-50264


author: wenyuzifang <lzx02244079@alibaba-inc.com> - 23.2.5-3
changelog:
  - fix CVE-2024-9632
  - fix CVE-2025-26601
  - fix CVE-2025-26596
  - fix CVE-2025-26594
  - fix CVE-2025-26597
  - fix CVE-2025-26598
  - fix CVE-2025-26600
  - fix CVE-2025-26595
  - fix CVE-2025-26599


author: mgb01105731 <mgb01105731@alibaba-inc.com> - 23.2.5-4
changelog:
  - Add patches to fix CVE-2025-49175,CVE-2025-49176,CVE-2025-49177,
    CVE-2025-49178,CVE-2025-49179,CVE-2025-49180


author: Loongson <service@loongson.cn> - 23.2.5-8.1
changelog:
  - Fix CVE-2026-50261 CVE-2026-50261 CVE-2026-50260 CVE-2026-50259 
  - CVE-2026-50258 CVE-2026-50257 CVE-2026-50256


author: Loongson <service@loongson.cn> - 1:0.10.6-1
changelog:
  - Update to 0.10.6
  - Fix CVE-2026-35512, CVE-2026-33689, CVE-2026-33516, CVE-2026-33145, CVE-2026-32624, CVE-2026-32623, CVE-2026-32107, CVE-2026-32105
  - Remove patches that are already included
  - Update patches and add some patches for 0.10.x


