# changelog

author: Yi Lin <nilusyi@tencent.com> - 20240811-1
changelog:
  - bump to 20240811, fix CVE-2023-31315
  - qcom: update path for video firmware for vpu-1/2/3.0
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642
  - rtw89: 8852c: add fw format-1 v0.27.97.0
  - rtw89: 8852bt: add firmware 0.29.91.0
  - amdgpu: A lot of firmware updates
  - mediatek: Update mt8195 SOF firmware
  - xe: First GuC release v70.29.2 for BMG
  - xe: Add GuC v70.29.2 for LNL
  - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL
  - i915: Update MTL DMC v2.22, MTL GSC to v102.0.10.1878
  - xe: Add BMG HuC 8.2.10, GSC 104.0.0.1161 for LNL, LNL HuC 9.4.13
  - i915: update DG2 HuC to v7.10.16
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641
  - update firmware for MT7921/MT7922 WiFi device
  - update firmware for mediatek bluetooth chip (MT7921/MT7922)
  - iwlwifi: add gl FW for core89-58 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release
  - mediatek: Update mt8195 SOF firmware and sof-tplg
  - ASoC: tas2781: fix the license issue for tas781 firmware
  - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008
  - i915: Update Xe2LPD DMC to v2.21
  - qcom: move signed x1e80100 signed firmware to the SoC subdir
  - qcom: add video firmware file for vpu-3.0
  - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics
  - qcom: add gpu firmwares for x1e80100 chipset
  - add firmware for qat_402xx devices
  - Update AMD cpu microcode
  - intel: avs: Add numerous sound topology files
  - Add a copy of Apache-2.0
  - intel: avs: Update AudioDSP base firmware for APL-based platforms
  - Add ISH firmware file for Intel Lunar Lake platform
  - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics
  - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41
  - amdgpu: Update ISP FW for isp v4.1.1
  - mediatek: Update MT8173 VPU firmware to v1.2.0
  - qcom: Add AIC100 firmware files
  - amlogic: Update bluetooth firmware binary
  - Various Intel Bluetooth firmware updates
  - rtl_bt: Update RTL8822C BT UART/USB firmware
  - amdgpu: update DMCUB to v0.0.222.0 for DCN314
  - iwlwifi: add ty/So/Ma firmwares for core88-87 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release
  - add new cc33xx firmware for TI cc33xx WiFi chips
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops


author: Yi Lin <nilusyi@tencent.com> - 20240909-1
changelog:
  - bump to 20240909, fix CVE-2023-20584/31356/31346
  - i915: Update MTL DMC v2.23
  - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops2
  - amdgpu: Revert sienna cichlid dmcub firmware update
  - iwlwifi: add Bz FW for core89-58 release
  - rtl_nic: add firmware rtl8126a-3
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351
  - qcom: vpu: restore compatibility with kernels before 6.6
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - rtw89: 8922a: add fw format-1 v0.35.41.0	Chin
  - linux-firmware: update firmware for MT7925 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  - rtl_bt: Add firmware and config files for RTL8922A
  - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part
  - rtl_bt: de-dupe identical config.bin files
  - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin
  - linux-firmware: Update AMD SEV firmware
  - linux-firmware: update firmware for MT7996
  - Revert "i915: Update MTL DMC v2.22"
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ...
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE...
  - ath11k: QCA2066 hw2.1: add board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1
  - qcom: vpu: add video firmware for sa8775p
  - amdgpu: DMCUB updates for various AMDGPU ASICs


author: cunshunxia <cunshunxia@tencent.com> - 1.4.0-4
changelog:
  - add scriptlets for rpm-ostree and user-nsswitch.
  - change default profile to minimal with specified password-auth


author: Tracker Robot <trackbot@opencloudos.tech> - 1.4.3-6
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Feature Add/Remove] configure: drop user-nsswitch.conf support
  - [Bug Fix] profiles: merge groups records with [SUCCESS=merge]


author: Tracker Robot <trackbot@opencloudos.tech> - 1.4.3-7
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ddad860e11087ab21d5533f31c2da89f8200dd58.patch: configure: fix typo


author: Xiaojie Chen <jackxjchen@tencent.com> - 5.2-3
changelog:
  - fix crash with unset arrays in arithmetic contexts
  - fix crash in readline when started with an invalid locale specification


author: Doris Chao <doriscchao@tencent.com> - 5.2.15-3
changelog:
  - [Type] other
  - [DESC] Define NON_INTERACTIVE_LOGIN_SHELLS config to run the
  - login shell startup files if argv[0][0] == '-'


author: Tracker Robot <trackbot@opencloudos.tech> - 2.41-13
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] baac6c221e9d69335bf41366a1c7d87d8ab2f893.patch: PR32560 stack-buffer-overflow at objdump disassemble_bytes


author: Kairui Song <kasong@tencent.com> - 6.6.6-2401.0.1
changelog:
  - kabi: freeze kabi for x86_64 and arm64
  - x86/mpparse, kexec: switch apic driver early when x2apic is pre-enabled
  - tracing: workaround UAF caused by memory ordering issue
  - mm/slub.c: sanitize freelist pointer assignment even more
  - mm/slub.c: fix a potential UAF
  - cgroup: use a standalone workqueue for killing css
  - mm/vmscan.c: add cond_resched function call into __shrink_page_cache
  - swap: expose required symbols for some 3rd part modules
  - swapfile: add a helper get_cached_swap_page_of_type
  - mm: memcg: introduce v2's interface to v1
  - psi: only show SOME PSI for non-IRQ in cgroup v1
  - psi: support cgroup v1 psi accounting
  - psi: expose cgroup v1 interface for psi
  - psi: link legacy root to psi_system
  - sched/psi: simplify cgroup psi retrieving
  - arm64: fake a reliable stacktrace for livepath
  - arm64: enable livepatch without stable stacktrace
  - arm64: basic infrastructure for livepatch
  - pagecachelimit: limit the pagecache ratio of totalram
  - blkcg: add buffer IO throttle for cgroup v1
  - cgroupfs: support stat based on cpuacct
  - cgroupfs: fix non inited i_ino when inode created
  - cgroupfs: add files inside sys
  - cgroupfs: support for proc and sys
  - cgroupfs: quota aware support
  - cgroupfs: refactor cgroup resource statistics for reuse
  - memcg: make meminfo optionally recursive and rework
  - memcg: add meminfo and vmstat show
  - cpuset: add switch support for cpuset.stat in container
  - cpuset: fix cpuset.stat process field value exception
  - cpuset: add switch for cpuinfo in container
  - cpuset: add loadavg calc for each container
  - cpuset: add cpuinfo and stat show
  - sysfs: add sysfs attribute to hide disk devices
  - blkcg/diskstats/dm: add support for blkcg diskstats
  - blkcg/diskstats/md: add support for blkcg diskstats
  - blkcg/diskstats: add per blkcg diskstats support
  - ext4: Add an error info during new_inode
  - ext4: fix soft lockup caused by sbi->s_es_lru
  - ceph: add mds request pid info into debugfs
  - ceph: Add new mount option req_resend
  - ceph: re-send osd requests if timeout
  - nvme: add the hotplug info output about drive letter and BDF
  - nbd: add the nbd_ignore_blksize_set support
  - xfs: add kmem_alloc_by_vmalloc and kmem_alloc_large_dump_stack sysctl
  - xfs: set xfs default error level to 5
  - ceph: add sysctl to ignore error epoch barrier
  - ext3: set nobarrier as default
  - block: check whether queue is NULL or not in stats functions
  - net: modify default value of host max_orphan
  - net: namespaceify sysctl_tcp_max_orphans
  - vm: isolate max_map_count by pid namespace
  - cpuacct: get the uptime of container
  - proc: add pid mapping between host and container
  - taskstats: expose taskstats to all netspace
  - tcp: make TCP_RTO_MIN/MAX be tunable
  - tcp: support self define parameter to tune rto of syn/synack packets
  - tcp: introduce sysctl tcp_inherit_buffsize
  - net: ipv6 neigh tunnel bypass
  - net: add sysctl to control page frag
  - net: add sriov debug info
  - net: increase tcp listen hash
  - tcp: add TCP_FULLNAT_REAL setsockopt options for fullnat real ip
  - net: reduce the confliction while multi threads connecting same host
  - bonding: add broadcast_arp param to send arp broadcast
  - netlink: don't modprobe proto audit & selinux
  - tcp: add proc parameter to change init cwnd
  - net: add tcp_no_delay_ack to enable absolute quick ack
  - tcp: add tcp_loss_init_cwnd sysctl to tunnel packet numbers in loss
  - network: default zero bond_devices to support
  - tcp: double the default value of thash_entries
  - tcp: backoff the commit allowing timestamps even if SYN packet has tsval=0
  - net: dev ipv4/v6 stat
  - net: add tcp drop stats
  - ipmi: set kipmid_max_busy_us default to 1
  - sched: adaptive default skew_tick value
  - ipc/msg: increase defaults for shmmall, shmmax, msgmax and msgmnb
  - mm: increase dirty-ratio from 20 to 40
  - tkernel: netfilter: conntrack: add netagent extention slot
  - tkernel: net: add toa support
  - tkernel: mounts: add shield mountpoint in container support
  - tkernel: netatop: add netatop module in kernel/tkernel/
  - tkernel: ttools: add ttools module to support ptrace protect
  - tkernel: initial support and nonpriv_bind
  - sysrq: add ALT+LEFTCTRL to trigger crash dump
  - kabi: add paddings and optimize (part 3)
  - kabi: add paddings (part 2)
  - kabi: add paddings (part 1)
  - kabi: add kabi.h
  - kabi: modules: better vermagic check on module load
  - config: update config for ocks-2401
  - dist: config: update config from ocks-2303
  - dist: config: add default config files
  - dist: fix script checker
  - dist: tools/vm -> tools/mm
  - dist: move libcpupower.so to kernel-libs
  - dist: initial support
  - Linux 6.6.6


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.26-1
changelog:
  - SUNRPC: discard sv_refcnt, and svc_get/svc_put
  - svc: don't hold reference for poolstats, only mutex.
  - config: support phytium soc and ampereone pmu
  - sched/eevdf: fix soft lockup while __pick_eevdf failed
  - Merge linux 6.6.26
  - Merge linux 6.6.25
  - Merge linux 6.6.24
  - Merge linux 6.6.23
  - Merge linux 6.6.22
  - Merge linux 6.6.21
  - x86/perf: Add PMU uncore support for Zhaoxin CPU
  - BeiZhongWangXin:Add Chengdu BeiZhongWangXin Technology N5/N6 Series Network Card Driver
  - Hygon：Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
  - Loogarch:add steal time hypcall software breakpoint pmu support for loongarch kvm
  - Add Phytium Display Engine support to the linux-6.6
  - Intel: Backport QuickAssist Technology(QAT) in-tree driver
  - Loongarch: support loongarch and add kvm support for loongarch
  - platform/x86/intel/ifs: Call release_firmware() when handling errors.
  - crypto: ccp: Add support to detect Hygon PSP on Hygon 2nd/3rd CPUs
  - crypto: ccp: Fixup the capability of Hygon PSP during initialization
  - Support zhaoxin cpu
  - zhaoxin: Fix CRC32C instruction low performance issue
  - crypto: x86/crc32c-intel Exclude low performance CRC32C instruction CPUs
  - x86/cpu: Set low performance CRC32C flag on some Zhaoxin CPUs
  - x86/cpufeatures: Add low performance CRC32C instruction CPU feature
  - ALSA: hda: Add support of Zhaoxin SB HDAC
  - x86/cpu: Add detect extended topology for Zhaoxin CPUs
  - x86/cpufeatures: Add Zhaoxin feature bits
  - btrfs: fix double free of anonymous device after snapshot creation failure
  - arm64: Work around Ampere Altra erratum #82288 PCIE_65
  - rue/io: fix blkcg_dkstats_show_comm implicit declaration error
  - emm: fix compile error of MEMCG_ZRAM_B undeclared
  - tcp/dccp: add support for port usage in proportion to allocation
  - cgroup: add cgroup.id to show each css id within a cgroup
  - tcp: fix issues when enabling tcp_wan_timestamps feature.
  - tcp: initialize sysctl_tcp_wan_timestamps to 1 by default.
  - net: add net.ipv4.tcp_wan_timestamps sysctl to switch timestamps function
  - mm/workingset: fix compile error when using allyesconfig in aarch64
  - ck: mm: Pin code section of process in memory
  - mm, oom_kill: introduce oom_kill_largest_task sysctl interface
  - emm: configs: enabled EMM related configs
  - emm: memcg/reclaim: adapt for enhanced memory reclaim interface
  - emm: memcg/reclaim: add support for enhanced memory reclaim
  - emm: memcg: add support for core memcg handling
  - emm: mm: support forcing swappiness for global reclaim
  - emm: mm: Kconfig: add EMM config
  - emm: memcg, zram: add support for ZRAM memory accounting
  - ocfs2: Avoid touching renamed directory if parent does not change
  - rue/scx/sched_ext: Add a basic, userland vruntime scheduler
  - rue/scx/sched_ext: Implement core-sched support
  - rue/scx/sched_ext: Implement sched_ext_ops.cpu_online/offline()
  - rue/scx/sched_ext: Implement sched_ext_ops.cpu_acquire/release()
  - rue/scx/sched_ext: Implement runnable task stall watchdog
  - rue/scx/sched_ext: Implement BPF extensible scheduler class
  - script: update check-kabi script
  - kabi: provide kabi check/update/create commands for local users
  - config: add kernel/configs/tkci.config
  - pci: bypass NVMe when booting PCIe storage with 5s delay
  - pci: prohibit storage probe delay of virtio block device
  - pci: delay 5s to proble multiple storage controllers
  - perf vendor events arm64 AmpereOneX: Add core PMU events and metrics
  - KVM: arm64: Always invalidate TLB for stage-2 permission faults
  - KVM: arm64: Avoid soft lockups due to I-cache maintenance
  - arm64: tlbflush: Rename MAX_TLBI_OPS
  - docs/perf: Add ampere_cspmu to toctree to fix a build warning
  - perf: arm_cspmu: ampere_cspmu: Add support for Ampere SoC PMU
  - perf: arm_cspmu: Support implementation specific validation
  - perf: arm_cspmu: Support implementation specific filters
  - perf: arm_cspmu: Split 64-bit write to 32-bit writes
  - perf: arm_cspmu: Separate Arm and vendor module
  - x86 and arm64 config: add more module config
  - config: enable slub debug as default in debug.config
  - config: enable CONFIG_HARDLOCKUP_DETECTOR
  - Add support for Hygon model 4h~6h processors Merge
  - Intel: Backport GNR/SRF PMU uncore support to kernel v6.6
  - Intel: Backport SRF/GRR perf cstate support to kernel v6.6
  - Intel: Backport SRF LBR branch counter support to kernel v6.6
  - Intel-SIG: microcode restructuring backport Merge pull request
  - Intel-SIG: backport cluster scheduler wakeup optimization
  - SAF & Array BIST support for GNR & SRF
  - RDT non-contiguous CBM support


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.30-2
changelog:
  - irqchip/loongson-pch-pic: Update interrupt registration policy
  - Merge linux 6.6.30
  - Merge linux 6.6.29
  - Merge branch 'ock/next'
  - !146 [next-6.6]kunpeng：Backport hns3 features and bugfixes Merge pull request !146 from hongrongxuan/linux-6.6/next-ronson-dev
  - net: hns3: add support for Hisilicon ptp sync device
  - net: hns3: fix port vlan filter not disabled problem in dynamic vlan mode
  - net: hns3: default select PAGE_POOL_STATS
  - net: hns3: fix kernel crash when devlink reload during vf initialization
  - net: hns3: support set/get VxLAN rule of rx flow director by ethtool
  - net: ethtool: add VxLAN to the NFC API
  - net: hns3: Add support for some CMIS transceiver modules
  - net: sfp: Synchronize some CMIS transceiver modules from ethtool
  - net: hns3: add command queue trace for hns3
  - net: hns3: dump more reg info based on ras mod
  - net: hns3: add support for page_pool_get_stats
  - net: hns3: add support to query scc version by devlink info
  - net: hns3: correct the logic of hclge_sync_vf_qb_mode()
  - net: hns3: add support for FD counter
  - net: hns3: allocate fd counter for queue bonding
  - net: hns3: refactor the debugfs for dumping FD tcam
  - net: hns3: add queue bonding mode support for VF
  - net: hns3: add support for queue bonding mode of flow director
  - net: hns3: add checking for vf id of mailbox
  - net: hns3: fix reset timeout under full functions and queues
  - net: hns3: fix delete tc fail issue
  - net: hns3: Disable SerDes serial loopback for HiLink H60
  - net: hns3: add new 200G link modes for hisilicon device
  - net: hns3: add input parameters checking
  - net: hns3: add extend interface support for read and write phy register
  - net: hns3: add support set led
  - net: hns3: add support set mac state
  - net: hns3: add support detect port wire type
  - net: hns3: add support PF provides customized interfaces to detect port faults.
  - net: hns3: support set pfc pause trans time
  - net: hns3: add support disable nic clock
  - net: hns3: add support config and query serdes lane status
  - net: hns3: add supports configure optical module enable
  - net: hns3: add support query the presence of optical module
  - net: hns3: add support modified tx timeout
  - net: hns3: add support query port ext information
  - net: hns3: add support configuring function-level interrupt affinity
  - net: hns3: add support clear mac statistics
  - net: hns3: add support to get/set 1d torus param
  - net: hns3: add supports fast reporting of faulty nodes
  - net: hns3: add supports pfc storm detection and suppression
  - net: hns3: add support customized exception handling interfaces
  - net: hns3: add some link modes for hisilicon device
  - net: hns3: add vf fault detect support
  - net: hns3: add hns3 vf fault detect cap bit support
  - kunpeng：Backport some bugfixes for hisi_sas Merge pull request !143 from chenyi/linux-6.6/next-cy-dev
  - scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
  - scsi: hisi_sas: Remove hisi_hba->timer for v3 hw
  - scsi: hisi_sas: Check whether debugfs is enabled before removing or releasing it
  - scsi: libsas: Allocation SMP request is aligned to ARCH_DMA_MINALIGN
  - scsi: hisi_sas: Fix the deadlock issue that occurs during automatic dump
  - scsi: hisi_sas: Handle the NCQ error returned by D2H frame
  - scsi: hisi_sas: Remove redundant checks for automatic debugfs dump
  - scsi: hisi_sas: Allocate DFX memory during dump trigger
  - scsi: hisi_sas: Directly call register snapshot instead of using workqueue
  - scsi: hisi_sas: Check usage count only when the runtime PM status is RPM_SUSPENDING
  - scsi: hisi_sas: Add slave_destroy interface for v3 hw
  - Revert "scsi: hisi_sas: Disable SATA disk phy for severe I_T nexus reset failure"
  - Hygon:Update ccp-crypto driver to support Hygon 4th CPU & add hct.ko module which needed by HCT engine Merge pull request !149 from partyCoder/next
  - Commit Message: Support 1024 processes simutaneously in the hct-mdev mode.
  - Commit Message: Change the maximum number of supported ccps from 16 to 48.
  - Commit Message: Compiling hct.ko when the module mdev is disabled.
  - ccp: supporting memory encryption features for host vfio-noiommu mode, and wb attribute for the bar memory of virtual machine.
  - Add mediated ccp driver support for hygon crypto technology.
  - ccp: ccp-crypto support sm2 on Hygon generation 4th CPU
  - Hygon:Support CSV(2) guest attestation, CSV firmware update, CSV(2) guest migration, CSV(2) guest reboot, x86-psp communicate interfaces Merge pull request !148 from hanliyang/next
  - KVM: SVM: Force flush caches before reboot CSV guest
  - KVM: SVM: Add support for rebooting CSV2 guest
  - KVM: x86: Introduce control_{pre,post}_system_reset ioctl interfaces
  - KVM: SVM: Export MSR_AMD64_SEV_ES_GHCB to userspace for CSV2 guest
  - KVM: x86: Restore control registers in __set_sregs() to support CSV2 guest live migration
  - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_VMSA command
  - KVM: SVM: Add KVM_SEV_SEND_UPDATE_VMSA command
  - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa
  - crypto: ccp: Add another mailbox interrupt support for PSP sending command to X86
  - crypto: ccp: Add a new interface for X86 sending command to PSP
  - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
  - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
  - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH
  - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode
  - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode
  - crypto: ccp: Add support to switch to CSV RING_BUFFER mode
  - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode
  - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode
  - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues
  - crypto: ccp: Implement CSV_DOWNLOAD_FIRMWARE ioctl command
  - crypto: ccp: Implement CSV_PLATFORM_SHUTDOWN ioctl command
  - crypto: ccp: Implement CSV_PLATFORM_INIT ioctl command
  - crypto: ccp: Support DOWNLOAD_FIRMWARE when detect CSV
  - driver/virt/coco: Add HYGON CSV Guest dirver.
  - KVM: x86: Support VM_ATTESTATION hypercall
  - Montage：add support for Montage Mont-TSSE Driver Merge pull request !147 from carrie.cai/next
  - add support for Montage Mont-TSSE driver
  - Support PSP identification for Hygon 4th CPU and print secure features when running on Hygon CPUs Merge pull request !144 from hanliyang/next_ident-hygon-cc-all-others
  - x86/config: Set CONFIG_HYGON_CSV by default
  - x86/cpu/hygon: Clear SME feature flag when not in use
  - x86/cpufeatures: Add CSV3 CPU feature
  - x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
  - x86/cpu: Detect memory encryption features on Hygon CPUs
  - KVM: SVM: Print Hygon CSV support info if support is detected
  - crypto: ccp: Print Hygon CSV API version when CSV support is detected
  - x86/mm: Print CSV info into the kernel log
  - x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
  - Documentation/arch/x86: Add HYGON secure virtualization description
  - crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
  - !141 add 3snic 3s9xx NIC driver Merge pull request !141 from cleanerleon/next
  - add 3snic 3s9xx driver
  - Hyper-V: support Hyper-V synthetic video device
  - amdkfd: use calloc instead of kzalloc to avoid integer overflow
  - emm: add submodule of emm
  - block: fix deadlock between bd_link_disk_holder and partition scan
  - md: fix kmemleak of rdev->serial
  - Kconfig: delete intel atom and apple human interface device support
  - driver: compile mdev.ko by default
  - Kconfig: update many tencent.config of x86
  - driver: make regmap-mmio.c compiled in by default
  - net/proc: added sockets details statistics
  - net: rps using pvipi
  - smp: introduce a new interface smp_call_function_many_async
  - virtio_net: disable napi_tx by default
  - tcp: backport two patch from tk4 about gso
  - Merge linux 6.6.28
  - Merge linux 6.6.27
  - dist: config: add LOCALVERSION="+debug" for debug config
  - config: enable CONFIG_DEBUG_INFO_BTF in eks config
  - exit: wait_task_zombie: kill the no longer necessary spin_lock_irq(siglock)
  - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
  - fs/proc: do_task_stat: use __for_each_thread()
  - net: ip_tunnel: prevent perpetual headroom growth
  - dist: ensure release start with decimal number
  - dist: sanitize usage of unamer
  - dist: add missing place holder for loongarch64 kabi
  - emm/oversell: fix memsw page counter


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.30-4
changelog:
  - 3snic：change sssnic kernel driver name Merge pull request !159 from cleanerleon/next
  - change kernel driver name to sssnic
  - Hygon: CSV3 patch series part 1 (Secure memory management and initialization) Merge pull request !157 from hanliyang/next_CSV3-host-cma-smr-smcr
  - crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV3
  - x86/mm: Manage CSV3 guest's private memory by CMA
  - crypto: ccp: Define CSV3 key management command id
  - KVM: SEV: Pin SEV guest memory out of CMA area
  - Hygon：Fixed bugs related to THP allocation and memory page migration Merge pull request !154 from hanliyang/next_mm-fix
  - mm/gup: don't check if a page is in lru before draining it
  - mm/page_alloc: don't use PCP list for THP-sized allocations when using PF_MEMALLOC_PIN
  - Hygon: Support reuse ASID feature for Hygon CSV Merge pull request !156 from hanliyang/next_CSV-reuse-ASID
  - KVM: SVM: Add support for different CSV guests to reuse the same ASID
  - Hygon: Support passthru DCU to virtual machine Merge pull request !151 from hanliyang/next_hydcu
  - drm/hygon: Add support to passthrough Hygon DCU to virtual machine
  - Hygon: Some enhancement and bugfixes for HYGON SME/CSV/CSV2 Merge pull request !150 from hanliyang/next_SME_CSV1_CSV2_robust
  - KVM: SVM: Unmap ghcb pages if they're still mapped when destroy guest
  - anolis: x86/setup: Preserve _ENC flag when initrd is being relocated
  - anolis: mm/early_ioremap.c: Always build early_memremap_prot() in x86
  - KVM: x86: Fix KVM_GET_MSRS stack info leak
  - KVM: SEV: Do not intercept accesses to MSR_IA32_XSS for SEV-ES guests
  - x86/head/64: Flush caches for .bss..decrypted section after CR3 switches to early_top_pgt
  - KVM: x86: Calls is_64_bit_hypercall() instead of is_64_bit_mode() in complete_hypercall_exit()
  - x86/csv2: Keep in atomic context when holding ghcb page if the #VC comes from userspace
  - KVM: SVM: Fix the available ASID range for CSV2 guest
  - mm/unevictable: avoid root memcg calling mem_cgroup_scan_tasks to  trigger BUG_ON
  - config: add SIMPLEFB and SIMPLEDRM


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.30-5
changelog:
  - emm: update emm to v0.1.4
  - config: enable CONFIG_SQUASHFS_ZSTD
  - KVM: x86: Use actual kvm_cpuid.base for clearing KVM_FEATURE_PV_UNHALT
  - KVM: x86: Introduce __kvm_get_hypervisor_cpuid() helper
  - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - ksmbd: fix potencial out-of-bounds when buffer offset is invalid
  - KVM: x86: Virtualize HWCR.TscFreqSel[bit 24]
  - KVM: x86: Allow HWCR.McStatusWrEn to be cleared once set
  - cpustat: make get_iowait_time external


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.31-6
changelog:
  - Hygon: CSV3 patch series part 4 (Enable the concurrent memory allocation of CMA for Hygon CSV3) Merge pull request !173
  - x86/mm: CSV allows CMA allocation concurrently
  - mm/cma: add API to enable concurrent allocation from the CMA
  - LoongArch: fix KASLR can not be disabled by nokaslr when boot from old BPI Merge pull request !153
  - LoongArch: fix KASLR can not be disabled by nokaslr when boot from old BPI
  - irqchip/loongson-pch-pic: Update interrupt registration policy
  - Hygon: CSV3 patch series part 3 (Support live migration for Hygon CSV3 guest, and manage shared page by rbtree) Merge pull request !171
  - x86/mm: Merge contiguous pages into a large range when notifying pages enc status changes
  - KVM: SVM: CSV: Manage CSV3 guest's shared pages by rbtree
  - KVM: SVM: CSV: Add ioctl API to unpin shared pages of CSV3 guest
  - KVM: SVM: CSV: Add KVM_CSV3_RECEIVE_ENCRYPT_CONTEXT command
  - KVM: SVM: CSV: Add KVM_CSV3_RECEIVE_ENCRYPT_DATA command
  - KVM: SVM: CSV: Add KVM_CSV3_SEND_ENCRYPT_CONTEXT command
  - KVM: SVM: CSV: Add KVM_CSV3_SEND_ENCRYPT_DATA command
  - crypto: ccp: Define CSV3 migration command id
  - Hygon:Support TKM function Merge pull request !164 from xisme/tkm
  - crypto: ccp: Eliminate dependence of the kvm module on the ccp module
  - Allow VM without a configured vid to use TKM
  - support tkm key isolation
  - Support tkm virtualization
  - Support psp virtualization
  - newfeature: crypto: ccp: Add psp mutex enable ioctl support
  - newfeature: crypto: ccp: concurrent psp access support between user and kernel space
  - Hygon: CSV3 patch series part 2 (launch and running support on both KVM and guest sides) Merge pull request !162
  - x86/mm: Print CSV3 info into kernel log
  - x86: Add support for changing the memory attribute for CSV3 guest
  - x86: Update memory shared/private attribute in early boot for CSV3 guest
  - x86/kernel: Set bss decrypted memory as shared in CSV3 guest
  - x86/kernel: Add CSV3 early update(enc/dec)/reset memory helpers
  - x86/boot/compressed/64: Add CSV3 update page attr(private/shared)
  - x86/boot/compressed/64: Init CSV3 secure call pages
  - x86/boot/compressed/64: Add CSV3 guest detection
  - KVM: SVM: CSV: Manage CSV3 guest's nested page table
  - KVM: SVM: CSV: Add KVM_CSV3_LAUNCH_ENCRYPT_VMCB command
  - KVM: SVM: CSV: Add KVM_CSV3_LAUNCH_ENCRYPT_DATA command
  - KVM: SVM: CSV: Add KVM_CSV3_INIT command
  - KVM: Define CSV3 key management command id
  - Hygon:Support TPM/TCM/TDM/TPCM function Merge pull request !160
  - newfeature: linux: tcm: add Hygon TCM2 driver
  - newfeature: linux: tpm: add Hygon TPM2 driver
  - newfeature:crypto: tdm: Support dynamic protection for SCT and IDT by HYGON TDM
  - newfeature: crypto: tdm: Add Hygon TDM driver
  - Merge linux 6.6.31


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.33-7
changelog:
  - emm: update to v0.1.5
  - arm64: add unprivileged instruction support
  - arm64: fix the error for instruction :b9400000
  - arm64: Add new code for unaligned pcie access
  - arm64: remove the hardcode about PCI address checking
  - arm64: Add alignment faults handler for Advanced SIMD load/store single
  - arm64: Add a fixup handler for alignment faults in aarch64 code
  - arm64: update Work around Ampere Altra erratum #82288 PCIE_65
  - Merge Linux 6.6.33
  - [next-6.6] Intel: Backport Granite Rapids RAPL PMU support to kernel 6.6 Merge pull request !186
  - powercap: intel_rapl_tpmi: Enable PMU support
  - powercap: intel_rapl: Introduce APIs for PMU support
  - powercap: intel_rapl: Sort header files
  - [next-6.6] LoongArch:  Fix some irqchip/loongson-eiointc issues and kdump function for loongarch. Merge pull request !182
  - anolis: LoongArch: fix efi map page table error
  - Revert "LoongArch: kdump: Add memory reservation for old kernel"
  - Revert "LoongArch: Fix kdump failure on v40 interface specification"
  - Revert "LoongArch: kdump: Add high memory reservation"
  - irqchip/loongson-eiointc: fix gsi register error
  - irqchip: LoongArch: Fix secondary bridge routing errors
  - PCI/MSI: LoongArch: Limit min pci msi-x/msi vector number
  - [next-6.6]Intel: Backport QuickAssist Technology(QAT) live migration for in-tree driver Merge pull request !184
  - x86: configs: Enable QAT_VFIO_PCI as kernel module
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
  - crypto: qat - specify firmware files for 402xx
  - crypto: qat - validate slices count returned by FW
  - crypto: qat - improve error logging to be consistent across features
  - crypto: qat - improve error message in adf_get_arbiter_mapping()
  - crypto: qat - implement dh fallback for primes > 4K
  - crypto: qat - Fix spelling mistake "Invalide" -> "Invalid"
  - crypto: qat - Avoid -Wflex-array-member-not-at-end warnings
  - vfio/qat: Add vfio_pci driver for Intel QAT SR-IOV VF devices
  - crypto: qat - implement interface for live migration
  - crypto: qat - add interface for live migration
  - crypto: qat - add bank save and restore flows
  - crypto: qat - expand CSR operations for QAT GEN4 devices
  - crypto: qat - rename get_sla_arr_of_type()
  - crypto: qat - relocate CSR access code
  - crypto: qat - move PFVF compat checker to a function
  - crypto: qat - relocate and rename 4xxx PF2VM definitions
  - crypto: qat - adf_get_etr_base() helper
  - iommu/vt-d: Set variable intel_dirty_ops to static
  - iommufd/selftest: Fix _test_mock_dirty_bitmaps()
  - iommufd/selftest: Fix page-size check in iommufd_test_dirty()
  - iommu/vt-d: Enhance capability check for nested parent domain allocation
  - iommufd/selftest: Test IOMMU_HWPT_GET_DIRTY_BITMAP_NO_CLEAR flag
  - iommufd/selftest: Test out_capabilities in IOMMU_GET_HW_INFO
  - iommufd/selftest: Test IOMMU_HWPT_GET_DIRTY_BITMAP
  - iommufd/selftest: Test IOMMU_HWPT_SET_DIRTY_TRACKING
  - iommufd/selftest: Test IOMMU_HWPT_ALLOC_DIRTY_TRACKING
  - iommufd/selftest: Expand mock_domain with dev_flags
  - iommu/vt-d: Access/Dirty bit support for SS domains
  - iommu/amd: Access/Dirty bit support in IOPTEs
  - iommu/amd: Add domain_alloc_user based domain allocation
  - iommufd: Add a flag to skip clearing of IOPTE dirty
  - iommufd: Add capabilities to IOMMU_GET_HW_INFO
  - iommufd: Add IOMMU_HWPT_GET_DIRTY_BITMAP
  - iommufd: Add IOMMU_HWPT_SET_DIRTY_TRACKING
  - iommufd: Add a flag to enforce dirty tracking on attach
  - iommufd: Correct IOMMU_HWPT_ALLOC_NEST_PARENT description
  - iommu: Add iommu_domain ops for dirty tracking
  - iommufd/iova_bitmap: Move symbols to IOMMUFD namespace
  - vfio: Move iova_bitmap into iommufd
  - vfio/iova_bitmap: Export more API symbols
  - iommufd/selftest: Rework TEST_LENGTH to test min_size explicitly
  - iommu/vt-d: Add domain_alloc_user op
  - iommufd/selftest: Add domain_alloc_user() support in iommu mock
  - iommufd/selftest: Iterate idev_ids in mock_domain's alloc_hwpt test
  - iommufd: Support allocating nested parent domain
  - iommufd: Flow user flags for domain allocation to domain_alloc_user()
  - iommufd: Use the domain_alloc_user() op for domain allocation
  - iommu: Add new iommu op to create domains owned by userspace
  - !183 [next-6.6] Intel IAA Compression Accelerator Crypto Driver (iaa_crypto) Merge pull request !183 from Xiaochen Shen/intel-iaa-crypto-driver-next-6.6
  - x86/config: Add kernel config for Intel IAA crypto driver
  - dmaengine: idxd: Avoid unnecessary destruction of file_ida
  - dmaengine: idxd: Check for driver name match before sva user feature
  - crypto: iaa - Use cpumask_weight() when rebalancing
  - crypto: iaa - Fix some errors in IAA documentation
  - crypto: iaa - Change iaa statistics to atomic64_t
  - crypto: iaa - Add global_stats file and remove individual stat files
  - crypto: iaa - Remove comp/decomp delay statistics
  - crypto: iaa - fix decomp_bytes_in stats
  - crypto: iaa - Fix nr_cpus < nr_iaa case
  - crypto: iaa - fix the missing CRYPTO_ALG_ASYNC in cra_flags
  - crypto: iaa - Fix comp/decomp delay statistics
  - crypto: iaa - Fix async_disable descriptor leak
  - crypto: iaa - Remove unnecessary debugfs_create_dir() error check in iaa_crypto_debugfs_init()
  - crypto: iaa - Remove header table code
  - dmaengine: idxd: constify the struct device_type usage
  - dmaengine: idxd: make dsa_bus_type const
  - dmaengine: idxd: Remove usage of the deprecated ida_simple_xx() API
  - crypto: iaa - Account for cpu-less numa nodes
  - crypto: iaa - remove unneeded semicolon
  - crypto: iaa - Remove unneeded newline in update_max_adecomp_delay_ns()
  - crypto: iaa - Change desc->priv to 0
  - dmaengine: idxd: Add support for device/wq defaults
  - crypto: iaa - Add IAA Compression Accelerator stats
  - crypto: iaa - Add irq support for the crypto async interface
  - crypto: iaa - Add support for deflate-iaa compression algorithm
  - crypto: iaa - Add compression mode management along with fixed mode
  - crypto: iaa - Add per-cpu workqueue table with rebalancing
  - crypto: iaa - Add Intel IAA Compression Accelerator crypto driver core
  - crypto: iaa - Add IAA Compression Accelerator Documentation
  - dmaengine: idxd: add callback support for iaa crypto
  - dmaengine: idxd: Add wq private data accessors
  - dmaengine: idxd: Export wq resource management functions
  - dmaengine: idxd: Export descriptor management functions
  - dmaengine: idxd: Rename drv_enable/disable_wq to idxd_drv_enable/disable_wq, and export
  - dmaengine: idxd: add external module driver support for dsa_bus_type
  - dmaengine: idxd: Fix incorrect descriptions for GRPCFG register
  - dmaengine: idxd: add wq driver name support for accel-config user tool
  - dmaengine: idxd: rate limit printk in misc interrupt thread
  - drm/phytium: Replace default efi fb0 with dc fb
  - [next-6.6] phytium-Bugfix-Xorg-startup-for-ps23xx Merge pull request !188
  - drm/ast: Fixed display error for ps23xx
  - drm/phytium: Bugfix Xorg startup for ps23xx
  - anolis: LoongArch: fix efi map page table error
  - Revert "LoongArch: kdump: Add memory reservation for old kernel"
  - Revert "LoongArch: Fix kdump failure on v40 interface specification"
  - Revert "LoongArch: kdump: Add high memory reservation"
  - LoongArch: fix HT RX INT TRANS register not initialized
  - irqchip/loongson-eiointc: fix gsi register error
  - irqchip: LoongArch: Fix secondary bridge routing errors
  - PCI/MSI: LoongArch: Limit min pci msi-x/msi vector number
  - cgroup: allow cgroup to split direct io and buffered io into different blkio cgroup
  - io/tqos: add sysctl_buffer_io_limit switch for buffer io limit.
  - io/tqos: merge buffer io limit series patch from brookxu, and rework some function.
  - Merge branch 'caelli/cgroupfs' into 'master' (merge request !102)
  - cgroupfs: optimize cpu usage
  - sli: open CONFIG_CGROUP_SLI
  - sli: backport sli function from tk3
  - mbuf: backport mbuf functions for memcontrol/cpuacct from tk3
  - btrfs: make sure that WRITTEN is set on all metadata blocks
  - nvme:driver core probes in serial
  - config: enable ce instruction set optimization for shangmi support
  - config: enable some configs for shangmi support
  - kconfig: add more module for arm64
  - Merge ock repo's next branch into tk5 repo's master branch
  - [next-6.6]Hisi:backport some bugfix from upstream about PCIe_PMU and hisi_hns3 perf Merge pull request !179
  - drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
  - drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
  - docs: perf: Update usage for target filter of hisi-pcie-pmu
  - drivers/perf: hisi_pcie: Merge find_related_event() and get_event_idx()
  - drivers/perf: hisi_pcie: Relax the check on related events
  - drivers/perf: hisi_pcie: Check the target filter properly
  - drivers/perf: hisi_pcie: Add more events for counting TLP bandwidth
  - drivers/perf: hisi_pcie: Fix incorrect counting under metric mode
  - drivers/perf: hisi_pcie: Introduce hisi_pcie_pmu_get_event_ctrl_val()
  - drivers/perf: hisi_pcie: Rename hisi_pcie_pmu_{config,clear}_filter()
  - !176 [next-6.6] net: stmmac: add 7A2000 chipset gnet support Merge pull request !176 from Ming Wang/master
  - net: stmmac: dwmac-loongson: Add loongson module author
  - net: stmmac: dwmac-loongson: Move disable_force flag to _gnet_date
  - net: stmmac: dwmac-loongson: Add Loongson GNET support
  - net: stmmac: dwmac-loongson: Fixed failure to set network speed to 1000.
  - net: stmmac: dwmac-loongson: Add loongson_dwmac_config_legacy
  - net: stmmac: dwmac-loongson: Add full PCI support
  - net: stmmac: dwmac-loongson: Add phy_interface for Loongson GMAC
  - net: stmmac: dwmac-loongson: Add phy mask for Loongson GMAC
  - net: stmmac: dwmac-loongson: Add ref and ptp clocks for Loongson
  - net: stmmac: dwmac-loongson: Split up the platform data initialization
  - net: stmmac: dwmac-loongson: Use PCI_DEVICE_DATA() macro for device identification
  - net: stmmac: dwmac-loongson: Drop useless platform data
  - net: stmmac: Export dwmac1000_dma_ops
  - net: stmmac: Add multi-channel support
  - net: stmmac: Move the atds flag to the stmmac_dma_cfg structure
  - net: stmmac: Move MAC caps init to phylink MAC caps getter
  - net: stmmac: Rename phylink_get_caps() callback to update_caps()
  - net: phylink: provide mac_get_caps() method
  - Merge branch 'dev/mengensun/netlat_v2' into 'master' (merge request !100)
  - netlat: fix warnning when del netns
  - netlat: not use ack_seq to keeping timestamp
  - netlat: add more queue latency check point
  - net/netlat: add a tcp latency watcher
  - netns/mbuf: add a per net namespace ring buffer
  - tqos: open CONFIG_RQM
  - tqos/mbuf: backport mbuf infrastructure from tk3
  - dist: using "tk_private=1" to judge private release
  - Merge branch 'frankjpliu/master' into 'master' (merge request !107)
  - Merge linux 6.6.32
  - Linux 6.6.32
  - block: add a partscan sysfs attribute for disks
  - block: add a disk_has_partscan helper
  - Docs/admin-guide/mm/damon/usage: fix wrong example of DAMOS filter matching sysfs file
  - docs: kernel_include.py: Cope with docutils 0.21
  - admin-guide/hw-vuln/core-scheduling: fix return type of PR_SCHED_CORE_GET
  - KEYS: trusted: Do not use WARN when encode fails
  - remoteproc: mediatek: Make sure IPI buffer fits in L2TCM
  - serial: kgdboc: Fix NMI-safety problems from keyboard reset code
  - usb: typec: tipd: fix event checking for tps6598x
  - usb: typec: ucsi: displayport: Fix potential deadlock
  - net: usb: ax88179_178a: fix link status when link is set to down/up
  - usb: dwc3: Wait unconditionally after issuing EndXfer command
  - binder: fix max_thread type inconsistency
  - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
  - erofs: reliably distinguish block based and fscache mode
  - erofs: get rid of erofs_fs_context
  - bpf: Add missing BPF_LINK_TYPE invocations
  - kselftest: Add a ksft_perror() helper
  - mmc: core: Add HS400 tuning in HS400es initialization
  - KEYS: trusted: Fix memory leak in tpm2_key_encode()
  - Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
  - Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()
  - ice: remove unnecessary duplicate checks for VF VSI ID
  - ice: pass VSI pointer into ice_vc_isvalid_q_id
  - net: ks8851: Fix another TX stall caused by wrong ISR flag handling
  - drm/amd/display: Fix division by zero in setup_dsc_config
  - smb: smb2pdu.h: Avoid -Wflex-array-member-not-at-end warnings
  - ksmbd: add continuous availability share parameter
  - cifs: Add tracing for the cifs_tcon struct refcounting
  - smb: client: instantiate when creating SFU files
  - smb: client: fix NULL ptr deref in cifs_mark_open_handles_for_deleted_file()
  - smb3: add trace event for mknod
  - smb311: additional compression flag defined in updated protocol spec
  - smb311: correct incorrect offset field in compression header
  - cifs: Move some extern decls from .c files to .h
  - ksmbd: fix potencial out-of-bounds when buffer offset is invalid
  - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - ksmbd: Fix spelling mistake "connction" -> "connection"
  - ksmbd: fix possible null-deref in smb_lazy_parent_lease_break_close
  - cifs: remove redundant variable assignment
  - cifs: fixes for get_inode_info
  - cifs: defer close file handles having RH lease
  - ksmbd: add support for durable handles v1/v2
  - ksmbd: mark SMB2_SESSION_EXPIRED to session when destroying previous session
  - smb: common: simplify compression headers
  - smb: common: fix fields sizes in compression_pattern_payload_v1
  - smb: client: negotiate compression algorithms
  - smb3: add dynamic trace point for ioctls
  - smb: client: return reparse type in /proc/mounts
  - smb: client: set correct d_type for reparse DFS/DFSR and mount point
  - smb: client: parse uid, gid, mode and dev from WSL reparse points
  - smb: client: introduce SMB2_OP_QUERY_WSL_EA
  - smb: client: Fix a NULL vs IS_ERR() check in wsl_set_xattrs()
  - smb: client: add support for WSL reparse points
  - smb: client: reduce number of parameters in smb2_compound_op()
  - smb: client: fix potential broken compound request
  - smb: client: move most of reparse point handling code to common file
  - smb: client: introduce reparse mount option
  - smb: client: retry compound request without reusing lease
  - smb: client: do not defer close open handles to deleted files
  - smb: client: reuse file lease key in compound operations
  - smb: client: get rid of smb311_posix_query_path_info()
  - smb: client: parse owner/group when creating reparse points
  - smb3: update allocation size more accurately on write completion
  - smb: client: handle path separator of created SMB symlinks
  - cifs: update the same create_guid on replay
  - ksmbd: Add kernel-doc for ksmbd_extract_sharename() function
  - cifs: set replay flag for retries of write command
  - cifs: commands that are retried should have replay flag set
  - smb: client: delete "true", "false" defines
  - smb: Fix some kernel-doc comments
  - cifs: new mount option called retrans
  - smb: client: don't clobber ->i_rdev from cached reparse points
  - cifs: new nt status codes from MS-SMB2
  - cifs: pick channel for tcon and tdis
  - cifs: minor comment cleanup
  - cifs: remove redundant variable tcon_exist
  - ksmbd: vfs: fix all kernel-doc warnings
  - ksmbd: auth: fix most kernel-doc warnings
  - cifs: remove unneeded return statement
  - cifs: get rid of dup length check in parse_reparse_point()
  - cifs: Pass unbyteswapped eof value into SMB2_set_eof()
  - smb3: Improve exception handling in allocate_mr_list()
  - cifs: fix in logging in cifs_chan_update_iface
  - smb: client: handle special files and symlinks in SMB3 POSIX
  - smb: client: cleanup smb2_query_reparse_point()
  - smb: client: allow creating symlinks via reparse points
  - smb: client: optimise reparse point querying
  - smb: client: allow creating special files via reparse points
  - smb: client: extend smb2_compound_op() to accept more commands
  - smb: client: Fix minor whitespace errors and warnings
  - smb: client: introduce cifs_sfu_make_node()
  - cifs: fix use after free for iface while disabling secondary channels
  - Missing field not being returned in ioctl CIFS_IOC_GET_MNT_INFO
  - smb3: minor cleanup of session handling code
  - smb3: more minor cleanups for session handling routines
  - smb3: minor RDMA cleanup
  - cifs: print server capabilities in DebugData
  - smb: use crypto_shash_digest() in symlink_hash()
  - Add definition for new smb3.1.1 command type
  - SMB3: clarify some of the unused CreateOption flags
  - cifs: Add client version details to NTLM authenticate message
  - dist: remove usb-storage.ko and nouveau.ko when install private release
  - dist: revert "add a modules-private rpm subpackage"
  - Kconfig: add more modules
  - Merge branch 'kasong/tk5/dist-optimization' into 'master' (merge request !106)
  - dist: don't parse kernel version unless needed
  - dist: optimize version parsing
  - dist: stop using --show-toplevel for speed up


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.34-9
changelog:
  - dist: do not run scripts fail in kernel.template.spec
  - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.43-10
changelog:
  - !199 [next-6.6] LoongArch: Add writecombine support for DMW-based ioremap and fix kexec boot faild issue.
  - pci-driver: Do not disable PCIE ports and bridge on kexec reboot
  - LoongArch: enable CONFIG_CRYPTO_XTS by default
  - LoongArch: Add writecombine support for DMW-based ioremap()
  - Merge linux 6.6.43
  - Merge linux 6.6.42
  - !197 [next-6.6] AMD: Backport Turin patches from upstream Merge pull request !197 from kile2009/next-turin-6.6
  - perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
  - x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
  - x86/CPU/AMD: Do the common init on future Zens too
  - x86/CPU/AMD: Add more models to X86_FEATURE_ZEN5
  - x86/CPU/AMD: Add X86_FEATURE_ZEN5
  - x86/CPU/AMD: Drop now unused CPU erratum checking function
  - x86/CPU/AMD: Get rid of amd_erratum_1485[]
  - x86/CPU/AMD: Get rid of amd_erratum_400[]
  - x86/CPU/AMD: Get rid of amd_erratum_383[]
  - x86/CPU/AMD: Rename init_amd_zn() to init_amd_zen_common()
  - x86/CPU/AMD: Call the spectral chicken in the Zen2 init function
  - x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function
  - Revert "vfio/type1: Unpin zero pages"
  - drivers/thirdparty: keep compile bnxt_re if not using thirdparty drivers
  - iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
  - thermal: intel: powerclamp: fix mismatch in get function for max_idle
  - Merge linux 6.6.41
  - drivers/thirdparty: add copy-drivers.sh to using thirdparty drivers
  - Merge linux 6.6.40
  - Merge linux 6.6.39
  - Merge linux 6.6.38
  - Merge linux 6.6.37
  - config: enable CONFIG_WIREGUARD
  - Merge linux 6.6.36
  - kabi: fix check-kabi file path when checking kABI
  - x86/tencentconfig: Enable CONFIG_UNWINDER_ORC in tencent.config
  - Merge linux 6.6.35
  - emm: don't set zram_memcg_nocharge as true until module load


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.47-11
changelog:
  - config,oc: support WLAN and MTD and more SND drivers
  - Merge linux 6.6.47
  - Merge linux 6.6.46
  - Merge linux 6.6.45
  - Merge OCK next branch to TK5 master branch
  - x86/hpet: Read HPET directly if panic in progress
  - i2c/zhaoxin: I2C controller driver enhancement and optimization
  - x86/mce: Add NMIs setup in machine_check func
  - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors
  - x86/mce: Set bios_cmci_threshold for CMCI threshold
  - perf/x86/zhaoxin/uncore: update KX-7000 support
  - iommu/dma: Fix not fully traversing iova reservations issue
  - x86/cpu: Remove pointless evaluation of x86_coreid_bits
  - i2c: smbus: Add support for Zhaoxin SMBUS controller
  - anolis: efi: cper: Add Zhaoxin/Centaur ZDI/ZPI error decode
  - ata: ahci: Add support for AHCI SGPIO Enclosure Management
  - Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
  - cpufreq: ACPI: add ITMT support when CPPC enabled
  - iommu/vt-d: Add support for detecting ACPI namespace device in RMRR
  - Add kh40000_iommu_dma_ops for KH-40000 platform
  - Add kh40000_direct_dma_ops for KH-40000 platform
  - Add early quirk to identify kh-40000
  - Merge OCK next branch to TK5 master branch
  - !201 [next-6.6] Intel: Backport some core PMU bugfixes to kernel 6.6
  - !200 [next-6.6] Intel: Backport SPR/EMR CXL and HBM perfmon support to kernel 6.6
  - USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
  - hwmon: Add support for Zhaoxin core temperature monitoring
  - anolis: Add support for Zhaoxin Serial ATA IDE.
  - rue/scx: Kill user tasks in SCHED_EXT when scheduler is gone
  - rue/scx: Add readonly sysctl knob kernel.cpu_qos for SCHED_BT compatibility
  - rue/scx: Add /proc/bt_stat to maintain SCHED_BT compatibility
  - rue/scx: Add cpu.offline to maintain SCHED_BT compatibility
  - rue/scx: Add cpu.scx to the cpu cgroup controller
  - rue/scx: Add /proc/scx_stat to do scx cputime accounting
  - rue/scx: Fix lockdep warn on printk with rq lock held
  - rue/scx: Reorder scx_fork_rwsem, cpu_hotplug_lock and scx_cgroup_rwsem
  - Revert "sched: adaptive default skew_tick value"
  - KVM: x86: Don't sync user-written TSC against startup values
  - KVM: s390: Don't re-setup dummy routing when KVM_CREATE_IRQCHIP
  - KVM: x86: Don't re-setup empty IRQ routing when KVM_CAP_SPLIT_IRQCHIP
  - KVM: Setup empty IRQ routing when creating a VM
  - kabi: Introduce CONFIG_KABI_RESERVE
  - null_blk: Fix return value of nullb_device_power_store()
  - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
  - [PATCH] security: add security hook point
  - dist: provide mlnx-ofed-dist rpm
  - drivers,dist: add mlnx commercial quality drivers
  - submodule: update emm and thirdparty/release-drivers
  - net: csig toa patch toa patch from csig luckyqiu@tencent.com
  - Merge linux 6.6.44


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.47-12
changelog:
  - crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
  - emm: upadate to v0.1.7.3
  - emm: fix cgroup initilization check
  - tools headers UAPI: Sync kvm headers with the kernel sources
  - KVM: x86: Prevent excluding the BSP on setting max_vcpu_ids
  - KVM: x86: Limit check IDs for KVM_SET_BOOT_CPU_ID
  - KVM: Reject overly excessive IDs in KVM_CREATE_VCPU
  - KVM: x86: Make x2APIC ID 100% readonly
  - KVM: Introduce KVM_SET_USER_MEMORY_REGION2
  - config/x86: Add EROFS_FS and CACHEFILES for image-granularity acceleration
  - config,x86: open edr
  - riscv/purgatory: align riscv_kernel_entry
  - config,x86: disable CONFIG_IOMMU_DEBUGFS
  - hung_task,watchdog: set thresh time to 600 seconds
  - zhaoxin_rng: Remove redundant pr_err log after matching cpu_ids
  - config,x86: set CONFIG_HW_RANDOM_ZHAOXIN to m
  - emm: fix panic in kdump
  - config: trace: enable CONFIG_FUNCTION_GRAPH_RETVAL
  - rue/scx: Fix cgroupv2 cpu controller regression
  - watchdog: increase watchdog_thresh max value to 300 in debug kernel
  - dist: delete useless code in kernel.template.spec
  - i2c/zhaoxin: switch i2c registration to devm functions
  - lkp: intel: selftests/bpf: Add netlink helper library


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.58-15
changelog:
  - integrity: add dynamic integrity measurement (DIM) support
  - Merge branch 'honglin/release' into 'release' (merge request !220)
  - rue/mm: fix suspicious RCU usage in mem_cgroup_account_oom_skip
  - rue/mm: fix some sparse warnings of incorrect type in argument
  - rue/mm: fix compile error of dereferencing pointer to incomplete type
  - rue/mm: fix some sparse warnings due to no previous prototype
  - rue/net: fix some sparse warnings in netclassid_cgroup.c
  - Merge linux 6.6.58
  - kunit/overflow: Fix UB in overflow_allocation_test
  - Merge branch 'frankjpliu/master-mr-ocknext' into 'release' (merge request !217)
  - Loongarch: Dynamically enable Write Combining
  - Loongarch: Driver for loongson SE SDF
  - pci/quirks: Enable MSI for LS7A2000 PCIe devices
  - !240 [next-6.6] LoongArch: Add AVEC irqchip support and add acpi mcfg quirk for 3C6000
  - acpi: mcfg quirk: Increased multi-chip support for the 3C6000
  - LoongArch: Add AVEC irqchip support
  - !239 [next-6.6] LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
  - LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
  - rue/io: fix child blkcg of hier buffered write can not exceed 2MB
  - crashkernel: auto adjust crashkernel min size to 800MB for KASAN
  - sli: fix crash when open the sli.monitor file in rw mode
  - Merge linux 6.6.57
  - Merge branch 'cunhuang/jitterentropy-failed' into 'master' (merge request !209)
  - crypto: jitter - set default OSR to 3
  - crypto: jitter - use permanent health test storage
  - crypto: jitter - reuse allocated entropy collector
  - crypto: jitter - Allow configuration of oversampling rate
  - crypto: jitter - Allow configuration of memory size
  - crypto: jitter - add RCT/APT support for different OSRs
  - watchdog: handle the ENODEV failure case of lockup_detector_delay_init() separately
  - Merge branch 'haisu/master-fix-rue-lore-issues' into 'master' (merge request !207)
  - rue/io: mem_cgroup_bind_blkio_write also require CONFIG_SWAP
  - rue/io: fix sparse error of restricted blk_opf_t degrades to integer
  - rue/io: fix compile errors of redefinition blkg_policy_data
  - config: iommu: default arm64 iommu Lazy mode
  - mpt3sas: add mpt3sas commercial-quality driver
  - Merge branch 'likexu/kvm/fixes' into 'master' (merge request !205)
  - KVM: x86: Add fastpath handling of HLT VM-Exits
  - KVM: x86: Reorganize code in x86.c to co-locate vCPU blocking/running helpers
  - KVM: x86: Exit to userspace if fastpath triggers one on instruction skip
  - KVM: x86: Dedup fastpath MSR post-handling logic
  - KVM: x86: Re-enter guest if WRMSR(X2APIC_ICR) fastpath is successful
  - KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
  - KVM: nVMX: Assert that vcpu->mutex is held when accessing secondary VMCSes
  - KVM: nVMX: Explicitly invalidate posted_intr_nv if PI is disabled at VM-Enter
  - KVM: x86: Fold kvm_get_apic_interrupt() into kvm_cpu_get_interrupt()
  - KVM: nVMX: Detect nested posted interrupt NV at nested VM-Exit injection
  - KVM: nVMX: Suppress external interrupt VM-Exit injection if there's no IRQ
  - KVM: nVMX: Get to-be-acknowledge IRQ for nested VM-Exit at injection site
  - KVM: x86: Move "ack" phase of local APIC IRQ delivery to separate API
  - KVM: Fix coalesced_mmio_has_room() to avoid premature userspace exit
  - KVM: x86: Fully defer to vendor code to decide how to force immediate exit
  - KVM: VMX: Handle KVM-induced preemption timer exits in fastpath for L2
  - KVM: x86: Move handling of is_guest_mode() into fastpath exit handlers
  - KVM: VMX: Handle forced exit due to preemption timer in fastpath
  - KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer exits
  - KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint
  - Merge branch 'haisu/master-cve-v9' into 'master' (merge request !204)
  - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
  - btrfs: handle errors from btrfs_dec_ref() properly
  - binfmt_elf_fdpic: fix AUXV size calculation when ELF_HWCAP2 is defined
  - f2fs: fix null reference error when checking end of zone
  - nfs: pass explicit offset/count to trace events
  - Merge linux 6.6.56
  - Merge linux 6.6.55
  - Merge linux 6.6.54
  - Merge linux 6.6.53
  - Merge linux 6.6.52
  - Merge linux 6.6.51
  - Merge linux 6.6.50
  - Merge linux 6.6.49
  - Merge linux 6.6.48
  - Merge branch 'haisu/master-tryrue-20240905-merge-honglin' into 'master' (merge request !197)
  - rue/io: introduce wbt class for cgroup priority
  - rue/io: skip throttle REQ_META/REQ_PRIO IO
  - rue/io: buffered_write_bps hierarchy support
  - rue/io: support readwrite unified configuration
  - rue/io: Add iocost and iolatency entry for cgroup v1
  - rue/io: add io_cgv1_buff_wb to enable buffer IO counting in cgroup v1
  - rue/io: introduce per mem_cgroup sync interface
  - rue/io: add bufio isolation based for cgroup v1
  - rue/io: Add bps information to blkio.throttle.stat
  - rue/io: Add blkio.throttle.stat
  - rue/io: add buffer IO writeback throtl for cgroup v1
  - rue/io: add io_qos switch and throtl hierarchy
  - rue/io: Enable CONFIG_BLK_DEV_THROTTLING_CGROUP_V1 configuration
  - rue/io: Correct the alloc type to disk_stats
  - rue/io: add support for recursive diskstats
  - rue/io: blkcg export blkcg symbols to be used in bpf accounting
  - rue/mm: add sysctl_vm_use_priority_oom to enable priority oom for all cgroups
  - rue/mm: compatible with mglru for pagecache limit
  - rue/mm: fix file page_counter 'memcg->pagecache' error when THP enabled
  - rue/mm: introduce new feature to async clean dying memcgs
  - rue/mm: introduce memcg page cache hit & miss ratio tool
  - rue/mm: introduce memory allocation latency for per-cgroup tool
  - rue/mm: async free memory while process exiting
  - rue/mm: pagecache limit per cgroup support
  - rue/mm: add memory cgroup async page reclaim mechanism
  - rue/mm: introduce memcg priority oom
  - rue/mm: add priority reclaim support
  - pagecachelimit: set an initial value for may_deactivate in shrink page cache
  - rue/net: avoid wrong memory access to struct net_device
  - rue/net: avoid wrong memory access to struct cgroup_cls_state
  - rue/net: adapt to the new rue modular framework
  - rue/net: add dynamic bandwidth allocation between online cgroups
  - rue/net: add netdev-based rate limit for per cgroup
  - rue/net: add total bandwidth limit for multiprio preemption
  - rue/net: add support for cgroup whitelist ports
  - rue/net: add rx && tx rate limit for per cgroup
  - rue/net: init netcls traffic controller
  - rue: Revert "kallsyms: unexport kallsyms_lookup_name() and kallsyms_on_each_symbol()"
  - rue: Add support for rue modularization
  - rue: init rue module
  - rue: cgroup priority
  - blkcg/diskstats: Fix the extra cpu parameter
  - mm: set default watermark_boost_factor value to 0
  - Revert "io/tqos: merge buffer io limit series patch from brookxu, and rework some function."
  - Revert "io/tqos: add sysctl_buffer_io_limit switch for buffer io limit."
  - Revert "cgroup: allow cgroup to split direct io and buffered io into different blkio cgroup"
  - emm: update to v0.1.7.4
  - dist,spec: provide kernel-debug-debuginfo in debug version
  - dist,sepc: supprot kernel-debug in core and modules and devel rpm
  - Merge branch 'frankjpliu/master-mr-ocknext' into 'master' (merge request !202)
  - !234 [next-6.6] Intel: Backport to support Intel IFS(In Field Scan) SBAF on GNR for kernel 6.6
  - platform/x86/intel/ifs: Fix SBAF title underline length
  - trace: platform/x86/intel/ifs: Add SBAF trace support
  - platform/x86/intel/ifs: Add SBAF test support
  - platform/x86/intel/ifs: Add SBAF test image loading support
  - platform/x86/intel/ifs: Refactor MSR usage in IFS test code
  - selftests: ifs: verify IFS ARRAY BIST functionality
  - selftests: ifs: verify IFS scan test functionality
  - selftests: ifs: verify test image loading functionality
  - selftests: ifs: verify test interfaces are created by the driver
  - platform/x86/intel/ifs: Disable irq during one load stage
  - platform/x86/intel/ifs: trace: display batch num in hex
  - platform/x86/intel/ifs: Classify error scenarios correctly
  - platform/x86/intel/ifs: Remove unnecessary initialization of 'ret'
  - platform/x86/intel/ifs: Add an entry rendezvous for SAF
  - platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST
  - platform/x86/intel/ifs: Add current batch number to trace output
  - platform/x86/intel/ifs: Trace on all HT threads when executing a test
  - ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
  - hwmon/k10temp: Add support for Hygon family 18h model 10h
  - EDAC/amd64: Add support for Hygon family 18h model 10h
  - x86/amd_nb: Add support for Hygon family 18h model 10h
  - x86/cpu: Get LLC ID for Hygon family 18h model 10h
  - perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
  - EDAC/amd64: Add support for Hygon family 18h model 7h
  - x86/amd_nb: Add support for Hygon family 18h model 7h
  - crypto: ccp: add more checks for sev_dev_hooks_installed
  - config: set CONFIG_KASAN_STACK=y in debug.config
  - net/netlat: fix a deadlock when reset the /proc/net/twatcher/log
  - xfs: allow symlinks with short remote targets
  - Merge branch 'likexu/kvm/vpmu/fixes' into 'master' (merge request !200)
  - KVM: x86/pmu: Explicitly check NMI from guest to reducee false positives
  - KVM: x86: Get CPL directly when checking if loaded vCPU is in kernel mode
  - KVM: VMX: Disable LBR virtualization if the CPU doesn't support LBR callstacks
  - perf/x86/intel: Expose existence of callback support to KVM
  - KVM: VMX: Snapshot LBR capabilities during module initialization
  - KVM: x86/pmu: Explicitly check for RDPMC of unsupported Intel PMC types
  - KVM: x86/pmu: Treat "fixed" PMU type in RDPMC as index as a value, not flag
  - KVM: x86/pmu: Disallow "fast" RDPMC for architectural Intel PMUs
  - KVM: x86/pmu: Apply "fast" RDPMC only to Intel PMUs
  - KVM: x86/pmu: Prioritize VMX interception over #GP on RDPMC due to bad index
  - KVM: x86/pmu: Don't ignore bits 31:30 for RDPMC index on AMD
  - KVM: x86/pmu: Get eventsel for fixed counters from perf
  - KVM: x86/pmu: Setup fixed counters' eventsel during PMU initialization
  - KVM: x86/pmu: Remove KVM's enumeration of Intel's architectural encodings
  - KVM: x86/pmu: Allow programming events that match unsupported arch events
  - KVM: x86/pmu: Always treat Fixed counters as available when supported
  - KVM: x86/pmu: Track emulated counter events instead of previous counter
  - KVM: x86/pmu: Update sample period in pmc_write_counter()
  - KVM: x86/pmu: Remove manual clearing of fields in kvm_pmu_init()
  - KVM: x86/pmu: Stop calling kvm_pmu_reset() at RESET (it's redundant)
  - selftests/bpf: DENYLIST.aarch64: Skip fexit_sleep again
  - bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
  - closures: Change BUG_ON() to WARN_ON()
  - dist,Makefile: inherit the existing value of the DISABLED variable
  - config: configure panic_timeout=-1, restart immediately when panic occurs
  - config,debug: set CONFIG_LOCALVERSION="+debug" in debug*.config
  - dist,Makefile: generic-debug config only build kernel rpm
  - config: split debug.config to debug.config and debug-sched.config


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.63-17
changelog:
  - smc: Enable smc as module
  - config: disable CONFIG_SYSFB_SIMPLEFB
  - Merge branch 'linuszeng/CVE-2024-50278' into 'release' (merge request !254)
  - dm cache: fix potential out-of-bounds access on the first resume
  - dm cache: optimize dirty bit checking with find_next_bit when resizing
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr error
  - dm cache: correct the number of origin blocks to match the target length
  - Merge branch 'linuszeng/CVE-2024-53083' into 'release' (merge request !253)
  - usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
  - Merge branch 'linuszeng/CVE-2024-50300' into 'release' (merge request !252)
  - regulator: rtq2208: Fix uninitialized use of regulator_config
  - Merge branch 'katrinzhou/cve/release' into 'release' (merge request !236)
  - ext4: fix error message when rejecting the default hash
  - ext4: filesystems without casefold feature cannot be mounted with siphash
  - f2fs: fix to wait dio completion
  - xfs: add bounds checking to xlog_recover_process_data
  - xfs: don't walk off the end of a directory data block
  - Merge linux-6.6.63 into TK5 release branch
  - Linux 6.6.63
  - Merge branch 'cunhuang/6.6-release/CVE-2024-46775' into 'release' (merge request !251)
  - drm/amd/display: Validate function returns
  - Merge branch 'cunhuang/cve/6.6-release-24nov20' into 'release' (merge request !248)
  - drm/amd/display: Check phantom_stream before it is used
  - drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw
  - Merge linux 6.6.62 into TK5 release branch
  - Linux 6.6.62
  - Merge linux 6.6.61 into TK5 release branch
  - Linux 6.6.61
  - Merge linux 6.6.60 into TK5 release branch
  - Linux 6.6.60
  - Merge linux 6.6.59 into TK5 release branch
  - Linux 6.6.59
  - cifs: Fix server re-repick on subrequest retry


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.64-18
changelog:
  - Merge linux-6.6.64 into TK5 release branch
  - Linux 6.6.64
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !285 [linux-6.6] LoongArch: Revert "drm/loongson: disable loongson drm driver by default for LS7A2000"
  - Revert "drm/loongson: disable loongson drm driver by default for LS7A2000"
  - !284 [linux-6.6/devel] drm: loongson: Always build Loongson DRM drivers Merge pull request !284 from Ming Wang/linux-6.6/devel
  - drm: loongson: Always build Loongson DRM drivers
  - !282 [devel-6.6] linkdata: ps3stor compilation optimization Merge pull request !282 from liujie_answer/linux-6.6/devel
  - scsi: linkdata ps3stor compilation optimization category: feature
  - !280 [linux6.6-devel] LoongArch: backport ptw&set_pte patches from upstream Merge pull request !280 from Ming Wang/backport
  - LoongArch: Set initial pte entry with PAGE_GLOBAL for kernel space
  - LoongArch: Improve hardware page table walker
  - LoongArch: Use accessors to page table entries instead of direct dereference
  - LoongArch: Remove superfluous flush_dcache_page() definition
  - !281 [linux-6.6/devel] LoongArch: drm/loongson: disable loongson drm driver by default for LS7A2000 Merge pull request !281 from Ming Wang/drm
  - drm/loongson: disable loongson drm driver by default for LS7A2000
  - !279 [linux-6.6/devel] Makefile: Use `filter` for dist Makefile inclusion condition Merge pull request !279 from Ming Wang/dist-style
  - Makefile: Use `filter` for dist Makefile inclusion condition
  - !278 [linux-6.6/devel] loongarch:  Enables the Advanced Extended Interrupt Controllers (AVEC) functionality in multi-node 3C6000 systems and fix irq issue.
  - irq-loongarch-avec.c: Enables the Advanced Extended Interrupt Controllers (AVEC) functionality in multi-node 3C6000 systems.
  - drivers/irqchip: Disable pci_irq_limit when using avec interrupt controller
  - !277 Intel pstate backport from6.11 Merge pull request !277 from jiayingbao/intel_pstate_backport_from6.11
  - !276 Tpmi based drivers backport from 6.11 Merge pull request !276 from jiayingbao/tpmi_based_drivers_backport_from6.11
  - !274 [devel-6.6] linkdata: add ps3stor driver support Merge pull request !274 from liujie_answer/linux-6.6/devel
  - scsi: add support for linkdata HBA/RAID Controller driver category: feature
  - !273 [linux-6.6/devel] perf/x86/zhaoxin/uncore: fix pci_driver conflict issue Merge pull request
  - perf/x86/zhaoxin/uncore: fix pci_driver conflict issue
  - Merge branch 'leonylgao/check_kconfig' into 'release' (merge request !265)
  - configs: check whether TencentOS Kennel configs is compliant
  - Merge branch 'leonylgao/check_kapi' into 'release' (merge request !264)
  - kapi: check whether TencentOS Kernel KAPI is compliant
  - tkernel: support check the compliance of KAPI
  - Merge branch 'alexyonghe/reparent_memcg' into 'release' (merge request !267)
  - mm: Reparent page cache to parent memory cgroup
  - Merge branch 'aurelianliu/origin/master_CVE-2024-49885' into 'release' (merge request !218)
  - mm, slub: avoid zeroing kmalloc redzone
  - Merge branch 'leonylgao/check_kabi' into 'release' (merge request !266)
  - kabi: use pr_xxx to print colors
  - Merge branch 'cunhuang/6.6-release/CONFIG_SCSI_HISI_SAS' into 'release' (merge request !259)
  - config: arm64: SCSI_HISI_SAS=m
  - Merge branch 'costinchen/dim' into 'release' (merge request !262)
  - dim: optimized dim logging for dynamic measurements
  - drivers,3snic: support incremental compilation
  - Merge branch 'katrinzhou/smc_module' into 'release' (merge request !261)
  - smc: Enable smc as module


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.68-20
changelog:
  - emm: update emm to v0.1.7.5
  - Merge branch 'frankjpliu/release-mr-ock' into 'release' (merge request !282)
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !299 Enhanced Hygon processor's processing capabilities for large memory copying
  - [6.6][feat]Hygon: Enhanced Hygon processor's processing capabilities for large memory copying.
  - !298 Fix some known issues related to the LoongArch architecture
  - net: stmmac: dwmac-loongson: Fix slow MAC DMA reset
  - LoongArch: eiointc: Fix external interrupt routing errors
  - i2c: ls2x: Fix incorrect frequency register configuration causing functional issues
  - loongarch: Modularize Loongson DRM driver (CONFIG_DRM_LOONGSON=m)
  - pci/quirks: ls7a2000: fix pm transition of devices under pcie port
  - !297 Add CPU hardware monitoring platform driver and ACPI firmware support for Loongson SE driver
  - LoongArch: Adjust calculation method for the number of CPU packages
  - drivers/char: add ACPI firmware support for Loongson SE driver
  - LoongArch: Add CPU HWMon platform driver
  - Merge branch 'frankjpliu/release-mr-stable' into 'release' (merge request !281)
  - Merge linux 6.6.68 into TK5 release branch
  - Linux 6.6.68
  - Merge linux 6.6.67 into TK5 release branch
  - Linux 6.6.67
  - Merge linux 6.6.66 into release branch
  - Linux 6.6.66
  - Merge linux 6.6.65 into release branch
  - Linux 6.6.65
  - Merge branch 'frankjpliu/release-mr-ock' into 'release' (merge request !280)
  - !296 Fixed multiple vfio devices not working properly
  - driver/iommu: Fixed multiple vfio devices not working properly
  - !295 Hygon: kernel startup hash verification and secret injection for CSV3
  - KVM: SVM: CSV: Support inject secret to Hygon CSV3 guest
  - KVM: SVM: CSV: Support issue non-4K aligned CSV3_CMD_LAUNCH_ENCRYPT_DATA and more than once
  - KVM: SVM: CSV: Provide KVM_CSV3_SET_GUEST_PRIVATE_MEMORY ioctl interface
  - KVM: SVM: CSV: Provide KVM_CAP_HYGON_COCO_EXT interface
  - crypto: ccp: Provide csv_get_extension_info() to present extensions of newer CSV firmware
  - KVM: SVM: CSV: Ensure all the GPRs and some non-GPRs are synced before LAUNCH_ENCRYPT_VMCB
  - crypto: ccp: Get api version again when update Hygon CSV firmware at runtime
  - KVM: SVM: CSV: Fix the vm_size even if CSV3 feature is unsupported on Hygon CPUs
  - !294 Hygon: Add remote authentication support for Hygon CSV3 virtual machines
  - virt/csv-guest: Provide interface for request of CSV3 attestation report
  - x86/csv: Add support for CSV3 ATTESTATION secure call
  - x86/csv: Define ATTESTATION secure call command
  - !293 Hygon: Fix regressions on CSV2 live migration, CSV3 boot, CSV3 live migration
  - KVM: SVM: CSV: Explicitly enable LBR Virtualization after succeed to RECEIVE_ENCRYPT_CONTEXT
  - KVM: SVM: CSV: Explicitly enable LBR Virtualization after succeed to LAUNCH_ENCRYPT_VMCB
  - KVM: SVM: CSV: Explicitly enable LBR Virtualization after succeed to RECEIVE_UPDATE_VMSA
  - !286 Intel RDT monitoring support on Sub-NUMA Cluster (SNC) enabled systems
  - x86/resctrl: Fix arch_mbm_* array overrun on SNC
  - x86/resctrl: Update documentation with Sub-NUMA cluster changes
  - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode
  - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems
  - x86/resctrl: Make __mon_event_count() handle sum domains
  - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter
  - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode
  - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files
  - x86/resctrl: Allocate a new field in union mon_data_bits
  - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function
  - x86/resctrl: Initialize on-stack struct rmid_read instances
  - x86/resctrl: Add a new field to struct rmid_read for summation of domains
  - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files
  - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems
  - x86/resctrl: Introduce snc_nodes_per_l3_cache
  - x86/resctrl: Add node-scope to the options for feature scope
  - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures
  - x86/resctrl: Prepare for different scope for control/monitor operations
  - x86/resctrl: Prepare to split rdt_domain structure
  - x86/resctrl: Prepare for new domain scope
  - x86/resctrl: Replace open coded cacheinfo searches
  - cacheinfo: Add function to get cacheinfo for a given CPU and cache level
  - cpu: Drop "extern" from function declarations in cpuhplock.h
  - cpu: Move CPU hotplug function declarations into their own header
  - x86/resctrl: Don't try to free nonexistent RMIDs
  - x86/resctrl: Add tracepoint for llc_occupancy tracking
  - x86/resctrl: Rename pseudo_lock_event.h to trace.h
  - x86/resctrl: Simplify call convention for MSR update functions
  - x86/resctrl: Pass domain to target CPU
  - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline
  - Documentation/x86: Document that resctrl bandwidth control units are MiB
  - x86/resctrl: Remove lockdep annotation that triggers false positive
  - x86/resctrl: Separate arch and fs resctrl locks
  - x86/resctrl: Move domain helper migration into resctrl_offline_cpu()
  - x86/resctrl: Add CPU offline callback for resctrl work
  - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU
  - x86/resctrl: Add CPU online callback for resctrl work
  - x86/resctrl: Add helpers for system wide mon/alloc capable
  - x86/resctrl: Make rdt_enable_key the arch's decision to switch
  - x86/resctrl: Move alloc/mon static keys into helpers
  - x86/resctrl: Make resctrl_mounted checks explicit
  - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read()
  - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep
  - x86/resctrl: Queue mon_event_read() instead of sending an IPI
  - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow
  - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers
  - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid
  - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding
  - x86/resctrl: Track the number of dirty RMID a CLOSID has
  - x86/resctrl: Allow RMID allocation to be scoped by CLOSID
  - x86/resctrl: Access per-rmid structures by index
  - x86/resctrl: Track the closid with the rmid
  - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare()
  - x86/resctrl: Create helper for RMID allocation and mondata dir creation
  - x86/resctrl: Free rmid_ptrs from resctrl_exit()
  - tick/nohz: Move tick_nohz_full_mask declaration outside the #ifdef
  - x86/resctrl: Remove redundant variable in mbm_config_write_domain()
  - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe()
  - x86/resctrl: Display RMID of resource group
  - x86/resctrl: Add support for the files of MON groups only
  - x86/resctrl: Display CLOSID for resource group
  - x86/resctrl: Introduce "-o debug" mount option
  - x86/resctrl: Move default group file creation to mount
  - x86/resctrl: Unwind properly from rdt_enable_ctx()
  - x86/resctrl: Rename rftype flags for consistency
  - x86/resctrl: Simplify rftype flag definitions
  - x86/resctrl: Add multiple tasks to the resctrl group at once
  - x86/resctrl: Fix remaining kernel-doc warnings
  - !290 drivers: ethernet: Add motorcomm yt6801 support
  - drivers: ethernet: Add motorcomm yt6801 support
  - !291 Fix extioi restart issue in vm
  - arch/loongarch/kvm: Fix extioi restart issue
  - Merge branch 'korantli/release-cve' into 'release' (merge request !279)
  - drm/amd/display: Check denominator crb_pipes before used
  - Merge branch 'frankjpliu/release-cves' into 'release' (merge request !274)
  - net: napi: Prevent overflow of napi_defer_hard_irqs
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.69-21
changelog:
  - Merge branch OCK linux-6.6/devel branch into TK5 release branch
  - !305 [linux-6.6/devel][bugfix]: LoongArch: set CONFIG_CMA_SIZE_MBYTES to 0
  - LoongArch: set CONFIG_CMA_SIZE_MBYTES to 0
  - !303 perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4-7h and 10h
  - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4-7h and 10h
  - Merge branch 'paulning/tk5-mglru-pclimit' into 'release' (merge request !277)
  - rue/mm: support for sysctl pagecache_limit_ignore_slab when mglru enabled.
  - rue/mm: support for pagecache_limit_ignore_dirty when mglru enabled.
  - rue/mm: global pagecache limit support when mglru enabled.
  - rue/mm: check page_max in mem_cgroup_shrink_pagecache
  - rue/mm: pagecache limit feature for memcg when mglru enabled
  - Merge branch 'likexu/kvm/fixes' into 'release' (merge request !283)
  - tools headers: Sync x86 kvm and cpufeature headers with the kernel
  - KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits
  - KVM: x86: Remove ordering check b/w MSR_PLATFORM_INFO and MISC_FEATURES_ENABLES
  - KVM: x86: Reject userspace attempts to access ARCH_CAPABILITIES w/o support
  - KVM: VMX: Remove restriction that PMU version > 0 for PERF_CAPABILITIES
  - KVM: x86: Reject userspace attempts to access PERF_CAPABILITIES w/o PDCM
  - KVM: x86: Quirk initialization of feature MSRs to KVM's max configuration
  - KVM: x86: Disallow changing MSR_PLATFORM_INFO after vCPU has run
  - KVM: x86: Co-locate initialization of feature MSRs in kvm_arch_vcpu_create()
  - KVM: x86: Suppress userspace access failures on unsupported, "emulated" MSRs
  - KVM: x86: Suppress failures on userspace access to advertised, unsupported MSRs
  - KVM: x86: Hoist x86.c's global msr_* variables up above kvm_do_msr_access()
  - KVM: x86: Funnel all fancy MSR return value handling into a common helper
  - KVM: x86: Refactor kvm_get_feature_msr() to avoid struct kvm_msr_entry
  - KVM: x86: Rename get_msr_feature() APIs to get_feature_msr()
  - KVM: x86: Refactor kvm_x86_ops.get_msr_feature() to avoid kvm_msr_entry
  - KVM: x86: Rename KVM_MSR_RET_INVALID to KVM_MSR_RET_UNSUPPORTED
  - KVM: x86: Move MSR_TYPE_{R,W,RW} values from VMX to x86, as enums
  - KVM: SVM: Disallow guest from changing userspace's MSR_AMD64_DE_CFG value
  - Merge branch 'katrinzhou/release-fix-errno' into 'release' (merge request !285)
  - KEYS: include header for EINVAL definition
  - rue/io: check blkcg exist before doing account cgroup IO
  - configs: update std-configs-list
  - config,loongarch: delete the duplicate configuration of CONFIG_DRM_LOONGSON
  - config: keep with wangxinban
  - Merge linux 6.6.69 into TK5 release branch
  - Linux 6.6.69
  - !300 net: yt6801: Fix NULL pointer dereference in fxgmac_map_tx_skb
  - net: yt6801: Fix NULL pointer dereference in fxgmac_map_tx_skb


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.70-22
changelog:
  - Merge branch 'paulning/tk5-mglru-pclimit' into 'release' (merge request !297)
  - rue/mm: fix a line of code to comply with coding standards
  - Merge branch 'frankjpliu/release-mr-stable' into 'release' (merge request !295)
  - drivers,linkdata: fix tkci compile error after merge OCK linux-6.6/devel
  - Merge branch 'frankjpliu/release-mr-stable' into 'release' (merge request !294)
  - Merge branch OCK linux-6.6/devel branch into TK5 release branch
  - !301 linkdata: Add support for sxe/sxevf Controller driver in 6.6 kernel
  - fix compile error when using allyesconfig config
  - Add support for sxe/sxevf Controller driver in 6.6 kernel
  - Merge branch 'frankjpliu/release-mr-stable' into 'release' (merge request !292)
  - Merge linux 6.6.70 into TK5 release branch
  - Linux 6.6.70


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.70-23
changelog:
  - emm: update emm to v0.1.7.6
  - Merge branch 'cunhuang/arm64-mlnx-BuildRequires' into 'release' (merge request !315)
  - dist: fix BuildRequires for mlnx commercial-grade driver
  - Merge branch 'cunhuang/pick-v6.6.71_kdump' into 'release' (merge request !314)
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation
  - Revert "x86, crash: wrap crash dumping code into crash related ifdefs"
  - Revert "x86/hyperv: Fix hv tsc page based sched_clock for hibernation"
  - dist: fix the method of arch judge
  - dist: compile mlnx commercial-grade driver only on x86 and arm64
  - Merge branch 'cunhuang/kabi-vermagic-match-release' into 'release' (merge request !300)
  - kabi: modules: vermagic check match to release number
  - Merge branch 'aurelianliu/release_1030' into 'release' (merge request !298)
  - ACPI: PRM: Remove unnecessary strict handler address checks
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !306 Hygon: sync upstream bugfix patch for LRU and revert the workaround patch
  - Revert "mm/gup: don't check if a page is in lru before draining it"
  - mm: vmscan.c: fix OOM on swap stress test
  - mm/gup: clear the LRU flag of a page before adding to LRU batch
  - Revert "mm/page_alloc: don't use PCP list for THP-sized allocations when using PF_MEMALLOC_PIN"
  - dist: delete inner url for some reason
  - dist: change OC kernel URL discription


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.80-26
changelog:
  - Merge linux-6.6.80 into TK5 release branch
  - Linux 6.6.80
  - Merge branch 'haisu/release-fix-cgroupfs' into 'release' (merge request !350)
  - rue/cgroupfs: use effective_cpus to replace cpus_allowed
  - rue/cgroupfs: show 2 cores when quota=1 and cpuset>1
  - rue/cgroupfs: align the CPU quota_aware and cpuset show
  - rue/cgroupfs: simplify the cgroupfs_cpu_dir_filter function
  - rue/cgroupfs: rename cpu_subdir_xxx to cfs_subdir_xxx
  - rue/cgroupfs: remove the unnecessary cgroupfs_dentry_simple_ops
  - rue/cgroupfs: cpu/online show the same result of cpuset instead of number
  - fs: cgroup: fix compile errors on allyesconfig
  - cgroupfs: get data from ancestor cgroup
  - cgroupfs: add role in cgroup
  - Merge branch 'linuszeng/local_counter' into 'release' (merge request !352)
  - mm/memcontrol: add fields to memory.stat of cgroupv2
  - Merge branch 'likexu/kvm/fixes' into 'release' (merge request !344)
  - KVM: x86: Drop the now unused KVM_X86_DISABLE_VALID_EXITS
  - KVM: x86: Reject disabling of MWAIT/HLT interception when not allowed
  - KVM: x86: Disallow KVM_CAP_X86_DISABLE_EXITS after vCPU creation
  - KVM: x86: Drop now-redundant MAXPHYADDR and GPA rsvd bits from vCPU creation
  - KVM: x86/pmu: Drop now-redundant refresh() during init()
  - KVM: x86: Move __kvm_is_valid_cr4() definition to x86.h
  - KVM: x86: Account for KVM-reserved CR4 bits when passing through CR4 on VMX
  - KVM: x86: Explicitly do runtime CPUID updates "after" initial setup
  - KVM: x86: Do all post-set CPUID processing during vCPU creation
  - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}()
  - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID
  - KVM: nVMX: fix canonical check of vmcs12 HOST_RIP
  - KVM: x86: model canonical checks more precisely
  - KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical checks
  - KVM: x86: Route non-canonical checks in emulator through emulate_ops
  - KVM: x86: drop x86.h include from cpuid.h
  - Merge branch 'frankjpliu/release-mr-ock' into 'release' (merge request !353)
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !320 [linux-6.6/devel][[bugfix] LoongArch: Correct Cache Sharing, Update Flush Policy, HDA and Bluetooth Fixes
  - blutetooth/btusb: delay 1ms while suspending
  - LoongArch: Correct the cacheinfo sharing information
  - hda/pci: Add AZX_DCAPS_NO_TCSEL flag for Loongson HDA devices
  - LoongArch: Update the flush cache policy
  - !319 [linux-6.6/devel] LoongArch: Update Loongson-3 default config file
  - LoongArch: Update Loongson-3 default config file
  - !315 Backport upstream auto-tune per-CPU pageset size patchset
  - mm and cache_info: remove unnecessary CPU cache info update
  - mm, pcp: reduce detecting time of consecutive high order page freeing
  - mm, pcp: decrease PCP high if free pages < high watermark
  - mm: tune PCP high automatically
  - mm: add framework for PCP high auto-tuning
  - mm, page_alloc: scale the number of pages that are batch allocated
  - mm, pcp: reduce lock contention for draining high-order pages
  - cacheinfo: calculate size of per-CPU data cache slice
  - mm, pcp: avoid to drain PCP when process exit
  - tkernel: support kill protect feature
  - Merge branch 'costinchen/release' into 'release' (merge request !345)
  - dim: fix memory allocation size in store_task_pids()
  - integrity: Add a boot parameter to explicitly enable integrity subsystems
  - dist,copy-drivers: exit 1 if download driver fail
  - Merge linux 6.6.79 into TK5 release branch
  - Linux 6.6.79
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !314 [linux-6.6/devel]  Some eevdf scheduling enhancements from upstream
  - sched/eevdf: O(1) fastpath for task selection
  - sched/eevdf: Sort the rbtree by virtual deadline
  - !313 Add support for Hygon model 8h processor Merge pull request !313 from fuhao/linux-6.6-hygon-model8h
  - EDAC/amd64: Add support for Hygon family 18h model 8h
  - x86/amd_nb: Add support for Hygon family 18h model 8h
  - !311 [linux-6.6/devel]montage: update Mont-TSSE driver update Montage Mont-TSSE driver from 1.0.0 to 1.1.2 in 6.6.
  - montage: update Mont-TSSE driver
  - dist: check mlnx driver sha256sum before copy it
  - Merge branch linux-6.6.78 into TK5 release branch
  - Linux 6.6.78
  - Merge linux 6.6.77 into TK5 release branch
  - Linux 6.6.77
  - !310 Some fixes and optimization for Hygon model 7h10h processors
  - perf/x86/amd/core: Fix performance monitor for Hygon family 18h processor
  - EDAC/amd64: Get instance_id for Hygon family 18h model 10h
  - EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
  - EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
  - EDAC/amd64: Adjust address translation for Hygon family 18h model 10h
  - x86/amd_nb: Add helper function to identify Hygon family 18h model 10h
  - iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
  - EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
  - !309 Some fixes and optimization for Hygon model 4h~6h processors
  - EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
  - EDAC/amd64: Fix the calculation of instance_id for Hygon family 18h model 6h
  - EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
  - EDAC/amd64: Fix the calculation of cs_id for Hygon family 18h model 4h
  - x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
  - KVM: x86/svm: Add set_guest_pat_wb parameter for non-passthrough application scenarios
  - pinctrl: Add device HID for Hygon GPIO controller
  - !307 [linux-6.6/devel] Intel: backport KVM Fix for Clearing SGX EDECCSSA to 6.6
  - KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
  - Merge branch 'alexyonghe/reparent_memcg' into 'release' (merge request !338)
  - selftests: cgroup: Add memory.reparent_file test case
  - mm: Drop memory cgroup css reference when reparent page cache
  - Merge branch 'haisu/rue-compile-loongarch-fix' into 'release' (merge request !335)
  - rue/io: enable CONFIG_BLK_DEV_THROTTLING_CGROUP_V1 in loongarch
  - Merge linux 6.6.76 into TK5 release branch
  - Linux 6.6.76
  - Merge linux 6.6.75 into TK5 release branch
  - Linux 6.6.75
  - Merge linux 6.6.74 into TK5 release branch
  - Linux 6.6.74
  - Merge linux 6.6.73 into TK5 release
  - Linux 6.6.73
  - Merge linux 6.6.72 into TK5 release
  - Linux 6.6.72
  - Merge linux 6.6.71 into TK5 release
  - Linux 6.6.71


author: Jianping Liu <frankjpliu@tencent.com> - 6.6.80-27
changelog:
  - Merge OCK linux-6.6/devel branch into TK5 release branch
  - !331 [linux-6.6/devel][bugfix]: LoongArch: config: enable pci host controller fdt driver
  - LoongArch: config: enable pci host controller fdt driver
  - dist: only generate kernel-source rpm when build x86_64
  - Merge branch 'honglin/release' into 'release' (merge request !369)
  - rue/net: fix the association between sock and cgroup
  - Merge branch 'aurelianliu/release_0305' into 'release' (merge request !359)
  - epoll: introduce min_wait_time
  - dist: do not build kernel-source rpm in debug version
  - Merge branch OCK linux-6.6/devel into TK5 release branch
  - !327 added source subpackage for dist/rpm scripts
  - added source subpackage for dist/rpm scripts
  - !330 [linux-6.6/devel][bugfix]: LoongArch: Disable CONFIG_RT_GROUP_SCHED to prevent cgroup2 issues
  - LoongArch: Disable CONFIG_RT_GROUP_SCHED to prevent cgroup2 issues
  - !326 Backport PRM update and bugfixes up to v6.14
  - ACPI: PRM: Add PRM handler direct call support
  - ACPI: PRM: Annotate struct prm_module_info with __counted_by
  - !325 [Intel-SIG] Backport SierreForest MAXPHYSADDR support
  - KVM: selftests: x86: Prioritize getting max_gfn from GuestPhysBits
  - KVM: x86: Advertise max mappable GPA in CPUID.0x80000008.GuestPhysBits
  - !323 [Intel-SIG] 6.6: x86/cpu: KVM: Advertise CPUIDs for new instructions in Clearwater Forest (CWF)
  - x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
  - dist: take turns to download mlnx packages from two URLs
  - emm: add empty emm kernel module
  - emm: Remove submodule emm
  - Merge branch 'cunhuang/hinic_update' into 'release' (merge request !364)
  - net/hinic: Fix several compilation warnings with aarch64-openEuler-linux toolchain
  - net/hinic: Update Huawei Intelligent Network Card Driver: hinic
  - Revert "net: hinic: Fix cleanup in create_rxqs/txqs()"
  - Merge branch 'haisu/release-cgroupfs-remove-burst' into 'release' (merge request !362)
  - rue/cgroupfs: support quota_aware to /proc/stat
  - rue/cgroupfs: remove the CPU burst field


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.50-5
changelog:
  - integrate Adam William's /etc/ssl/certs with Debian-compatibility
  - back out blocklist change since p11-kit .24 is not yet available on rawhide


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.52-2
changelog:
  - Update to CKBI 2.52 from NSS 3.72
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"


author: wynnfeng <wynnfeng@tencent.com> - 2023.2.60-1
changelog:
  - Update to CKBI 2.60 from NSS 3.86
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "Global Chambersign Root"


author: Miaojun Dong <zoedong@tencent.com> - 8.4.0-6
changelog:
  - Rebuilt for loongarch release
  - Add BR glibc-langpack-en for testing, since it was separated from
    glibc-common


author: Tracker Robot <trackbot@opencloudos.tech> - 35-5
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] 4fa73fd2dc8429ff0fbbda39bce8e8af92681b07.patch: launch/policy: prevent linking policies on invalid gids
  - [Bug Fix] fedceff76af876d3069d4df2eedd0a974d16c3ff.patch: launch/policy: deallocate unused records during import
  - [Bug Fix] 9c2d3e310bb40c6db2966570695e896b540e467e.patch: util/misc: dont overload rvalue of get_seals()
  - [Bug Fix] f805f4114f33ddb61382f7d6989cc3f94e0f7f1a.patch: bus/match: fix matching against arguments beyond the zeroth


author: Pavel Raiskup <praiskup@redhat.com> - 3.14-4
changelog:
  - /proc and /sys made %ghost to allow filesystem package updates in rootless
    container environments (rhbz#1548403)


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-9
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] b269e6853be6278cc9fe06b1c1d92f7d31504c01.patch: Fix invalid escape character \s


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-10
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] eaa335e7c4686c622f31e691f8a41fdf30ea42b3.patch: Fix a memory leak in _get_real_paths_from_prefix


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-11
changelog:
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ab765827101787d49c0a66b23addc1f68f99a455.patch: Set FcTypeVoid if no valid types to convert


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-12
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 3a0ed05722feec5c478d076d87a64bf15f4bacdb.patch: Use proper postscriptname for named instance if any


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-13
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] aae5ff1f2e1be978272c41bf809d15b6e47b1e2c.patch: Remove redundant leaf assignment in fcfreetype.c


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-14
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ec20037908963870e27572fadef766cc8a6d9818.patch: Unlock on allocation failure in FcCacheInsert


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-15
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] b892c2196d0d9e74df61620e79ad8e846b01637d.patch: Ensure config is locked during retry in FcConfigReference


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-16
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ad58277b71415b714009bee33f04e8c18c7ab44d.patch: Fix FcSerialize null pointer usage
  - [Bug Fix] 9164a7bcbd3be022f074bb0530dd5c12e3c83b44.patch: Fix qsort nullpointer issue


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-17
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 71a6a990aa8578ddd7140fe0b2c9f87508d2b59b.patch: Fix a memory leak in fc-list/fc-query/fc-scan


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-18
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 084752e737a12c99800b2a35ea80eab11a12eabe.patch: Accept integer for pixelsize


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-7
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] c22908828fb2dbfdf38733d119adc1cf5fe00173.patch: Clean up .uuid files with fc-cache -f too


author: Tracker Robot <trackbot@opencloudos.tech> - 2.14.2-8
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] 42b12fc7c0855cddecdf6f4a0a26b897d53432a5.patch: More information when no writable cache directories


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-9
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] f42ce25563b73fed0123d18a2556b9ba01d2c76b.patch: [colr] Ensure enough bytes for PaintColrLayers


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-10
changelog:
  - [Type] other
  - [DESC] Apply patches from rpm-tracker
  - [Performance] 17545d4bf72175a8ea8020dcbd4d462234d2b5d0.patch: Avoid n^2 scanning for binary data.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-11
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 2a790a9f4937c3950028bd3de29e63c6b0d419ce.patch: [cff, truetype] Always set up default variable instance.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-12
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 57c4252ab5f435c52e66b619bd514068f7a683b0.patch: [sfnt] Guard access in COLR v1 glyph binary search.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-13
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 2b9fdec5fafd16fba93a9947563260ab9feb9029.patch: * src/pfr/pfrgload.c (pfr_glyph_curve_to): Avoid casting.
  - [Bug Fix] 93a067e31240058103ce04057dd76dcf98c18d15.patch: [base, autofit, psaux] Remove unnecessary casting.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-14
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 37cefe33b284d0bad4ec52bcccc1a8c2d8704340.patch: * psobjs.c (ps_table_add): Check length before calling FT_MEM_CPY.
  - [Bug Fix] b1cbcb20454e3b465b0d3ea4d5457975cfa747e7.patch: [ttgxvar] Avoid applying zero offset to null pointer


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-15
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] db83e9c0ec8b4ec8d7fa3bb3383d5160d1cfa719.patch: * src/cache/ftcglyph.c [!FTC_INLINE]: Fix compilation.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-16
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] d091bca546fa15928db36c8447e126ee43ddb5f4.patch: [cache] Fix error handling.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-17
changelog:
  - [Type] other
  - [DESC] Apply patches from rpm-tracker
  - [Performance] 1452355de99d22b0cba6ccc17bf5cdf3682ef61e.patch: * src/truetype/ttobjs.c (tt_size_run_prep): Correct scaling of CVT values.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-18
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 139443663368617b30b70cf6912e9577ecbb845f.patch: Move generic destroy to later in the face and size destruction.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-19
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 26b545f36867508da2f2f318a93d78e673436598.patch: apinames: Fix out-of-scope reference of a static array.


author: Tracker Robot <trackbot@opencloudos.tech> - 2.13.1-20
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 38272bf85341348eb0a5162ba4e1c95d370f9bce.patch: [ftstroke] Fix invalid pointer assignement to arc


author: Tracker Robot <trackbot@opencloudos.tech> - 2.78.3-6
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] ef064d625b847e05a017fcc307e67c6f31880ce7.patch: gopenuriportal: Fix two memory leaks
  - [Bug Fix] 092fedd5f085a2f1966b5c34befe8b603c1a0f07.patch: gdbus: Fix leak of method invocation when registering an object with closures


author: Zhao Zhen <jeremiazhao@tencent.com> - 2.78.3-8
changelog:
  - [Type] bugfix
  - [DESC] fixed building error for gjs 1.83.2+
  - gcc occur uninitialized variable ‘_g_boolean_var_46’ in ‘constexpr’ function;
  - because meson 1.3+ makes compiler checks stricter


author: Shuo Wang <abushwang@tencent.com> - 2.38-5
changelog:
  - backport patch to fix CVE-2023-6246, CVE-2023-6779, CVE-2023-6780
  - Fix heap buffer overflow for syslog


author: Shuo Wang <abushwang@tencent.com> - 2.38-11
changelog:
  - backport patch to fix CVE-2024-33599 - CVE-2024-33601
  - These patch fix buffers and null pointer crashes problem in netgroup


author: Shuo Wang <abushwang@tencent.com> - 2.38-23
changelog:
  - backport patch to fix str{n}cmp-evex performance degradation
  - x86/string: Fixup alignment of main loop in str{n}cmp-evex [BZ #32212]


author: Shuo Wang <abushwang@tencent.com> - 2.38-24
changelog:
  - requires zh and en defaultly
  - fix update glibc fail from old version to 2.38-16 when 'weakdependency=False'


author: Tracker Robot <trackbot@opencloudos.tech> - 2.38-28
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Performance] 950891b5e7a5307272da3e632832ac9da4c9eeec.patch: Optimize bsearch() implementation for performance
  - [Bug Fix] 6fd215d6ae9a4a6e75f7ea18d89db6a10f158eaf.patch: posix: fix system when a child cannot be created [BZ #32450]


author: Tracker Robot <trackbot@opencloudos.tech> - 3.8.2-7
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] 0337521f88799f616faca089026c4c45a2ed3d76.patch: nettle: avoid potential memleak with GMP older than 6.2.0
  - [Bug Fix] b7cd1e93d900675a80fe0701475a3f947bc4039e.patch: lib: fix a potential segfault in _gnutls13_recv_finished
  - [Bug Fix] f979aa3d0fcf1c79accc038b6599382efc6e64da.patch: lib: fix a segfault in _gnutls13_recv_end_of_early_data
  - [Bug Fix] b5faada34e63ca14657e72bebfa4a71f52000116.patch: serv: fix memleak when a connected client disappears
  - [Bug Fix] d76f43f2518f9167f868ab09db7b885459cca0b2.patch: fips: Zeroize temporary values
  - [Performance] 0a97df525fa12ac19ca95462e5ebaecb66066721.patch: lib/accellerated: update asm and enable PAC/BTI
  - [Performance] beba3bd9e0e678c0b804d400af839a3538bf1e17.patch: gnutls_pkcs12_generate_mac2: factor out mac generation logic
  - [Performance] 2c87dc3ae4f9629830923560774fbf9f6b55e273.patch: _gnutls_x509_read_uint: accept values greater than 0x7FFFFFFF


author: Feng Weiyao <wynnfeng@tencent.com> - 2.12-13
changelog:
  - [Type] security
  - [DESC] - Resolves: CVE-2024-45781 CVE-2024-45783 CVE-2024-45778
  - Resolves: CVE-2024-45775 CVE-2024-45780 CVE-2024-45774 CVE-2025-0684
  - Resolves: CVE-2025-0690 CVE-2025-1118 CVE-2024-45782 CVE-2025-0685
  - Resolves: CVE-2025-0624 CVE-2024-45779 CVE-2024-45776 CVE-2025-0686
  - Resolves: CVE-2025-0622 CVE-2025-0677 CVE-2024-45777 CVE-2025-0678
  - Resolves: CVE-2025-0689 CVE-2025-1125


author: Doris Chao <doriscchao@tencent.com> - 7.0.3-4
changelog:
  - [Type] bugfix
  - [DESC] Change the way info files information is updated, no longer using
  - the fix-info-dir script,since bash no loonger provies the /usr/share/info/dir


author: Qian Liang <renaliang@tencent.com> - 12.3.1-1
changelog:
  - updated to tgcc-12.3.1
  - Security updates: fix CVE-2023-4039. merge from https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=75c37e031408262263442f5b4cdb83d3777b6422
  - fix ICE in ipa profile multiple target speculative.


author: Zhao Zhen <jeremiazhao@tencent.com> - 12.3.1.1-1
changelog:
  - Added libsanitizer for loongarch
  - Added Ada libffi libvtv libitm for loongarch
  - Optimized multiplication and immediate instruction generation for loongarch
  - Added vector instruction test set for loongarch
  - Fixed link error when building libgccjit for loongarch
  - Added supports of [f]copysign for loongarch
  - Added supports of mcmodel=medium and extreme for loongarch
  - Added fmin/fmax RTL backend template for loongarch
  - fixed some building error for loongarch


author: Huang Yang <huangyang@loongson.cn> - 12.3.1.1-2
changelog:
  - [Type] other
  - [DESC] enable partial compilation options on loongarch architectures
  - Added longarch vector instruction header file


author: Huang Yang <huangyang@loongson.cn> - 12.3.1.2-3
changelog:
  - [Type] bugfix
  - [DESC] Fix GNOME desktop startup failure on loongarch architecture
  - Remove some duplicate configure options


author: Zhao Zhen <jeremiazhao@tencent.com> - 12.3.1.3-1
changelog:
  - [Type] other
  - [DESC] backport LoongArch patches
  -    Fixed duplicate link errors when building libgccjit.
  -    Changed the value of branch_cost: Optimized the generation of branch-related instructions.
  -    Fixed build and test errors caused by version differences.
  -    Optimized the generation of instructions for immediate loading.
  -    Optimized the implementation of stack-check.
  -    Optimized the generation of multiplication instructions.
  -    Added support for 3A6000.
  -    Modified the library installation path.
  -    Fixed GNOME desktop startup failure.
  -    Fixed dependencies on loongarch header files.
  -    Fixed the behavior of the macro instruction .align.
  -    Fixed the vec_initv32qiv16qi template to avoid ICE errors.
  -    Optimized the use of fcmp.caf.s instead of movgr2cf for copying from the zero register.
  -    Fixed the lsx_vreplgr2vr_<lsxfmt_f> instruction template error.
  -    Fixed backend subreg nesting errors.
  -    Fixed redundant barrier instructions before LL-SC.
  -    Optimized immediate loading.
  -    Fixed runtime errors when building gcc.
  -    Fixed incorrect use of frint and ftint instructions.
  -    Changed vector usage to standard template names.
  -    Allowed S9 as an alias for the r22 register.
  -    Changed the dynamic library installation path to lib64.
  -    Fixed memory reference errors with base address 0.
  -    Added a test suite for vector instructions.
  -    Added support for Ada, libffi, libvtv, libitm on LoongArch.
  -    Added support for prefetch instructions, commonly used floating-point instructions, and [f]copysign.
  -    Added support for mcmodel=medium and extreme.
  -    Added fmin/fmax RTL backend templates.
  -    Added the -mdirect-extern-access option.
  -    Added support for libsanitizer.
  -    Added the -mexplicit-relocs option as an optional target.
  -    Implemented __builtin_thread_pointer.
  -    Added support for xorsign.
  -    Added the alslsi3_extend template.
  -    Added a D language frontend.
  -    Added TLS relocation types.
  -    Added fmin/fmax RTL templates.
  -    Added a test suite for vector instructions.
  -    Defined ISA versions.


author: Wang Guodong <gordonwwang@tencent.com> - 4.33-2
changelog:
  - Move event.h from libev-devel to a subpackage(libev-event-devel), so 
    libev-devel no longer conflicts with libevent-devel.


author: kianli <kianli@tencent.com> - 4.18.8-1
changelog:
  - Upgrade to 4.18.8
  - Security fix for CVE-2023-3961
  - Security fix for CVE-2023-4091
  - Security fix for CVE-2023-4154
  - Security fix for CVE-2023-42669
  - Security fix for CVE-2023-42670


author: Xin Cheng <denisecheng@tencent.com> - 0.10.5-3
changelog:
  - Fix CVE-2023-48795: fix prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918: fix missing checks for return values for digests
  - Fix CVE-2023-6004: fix ProxyCommand/ProxyJump features allow injection


author: Upgrade Robot <upbot@opencloudos.tech> - 4.99.4-1
changelog:
  - Upgrade to version 4.99.4
  - Fixes lsof got stuck when ulimit was set too high(https://github.com/lsof-org/lsof/issues/281)


author: Doris Chao <doriscchao@tencent.com> - 8.0-1
changelog:
  - Update to nano-8.0 
    • CVE-2024-5742: Avoid privilege escalations via symlink attacks
    on emergency save file.
    • By default ^F is bound to starting a forward search, and ^B to
    starting a backward search, while M-F and M-B repeat the search
    in the corresponding direction.  (See the documentation if you
    want the old bindings back.)
    • Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
    ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a
    file, ^R replace, ^G find again, ^D find again backwards, ^A set
    the mark, ^T jump to a line, ^P show the position, and ^E execute.
    • Above modern bindings are activated also when the name of nano's
    executable (or a symlink to it) starts with the letter "e".
    • To open a file at a certain line number, one can now use also
    `nano filename:number`, besides `nano +number filename`.
    • <Alt+Home> and <Alt+End> put the cursor on the first and last
    row in the viewport, while retaining the horizontal position.
    • When the three digits in an #RGB color code are all the same,
    the code is mapped to the xterm grey scale, giving access to
    fourteen levels of grey instead of just four.
    • For easier access, M-" is bound to placing/removing an anchor,
    and M-' to jumping to the next anchor.
    • Whenever an error occurs, the keystroke buffer is cleared, thus
    stopping the execution of a macro or a string bind.
    • The mousewheel scrolls the viewport instead of moving the cursor.


author: denisecheng <denisecheng@tencent.com> - 1.0-11
changelog:
  - don't provide golang macros, independent as go-rpm-macros and requires it in default.
  - \
  /usr/bin/python3 /usr/lib/rpm/OpenCloudOS/pyproject_save_files.py \
    --output-files "/builddir/build/BUILD/pyproject-files" \
    --output-modules "/builddir/build/BUILD/pyproject-modules" \
    --buildroot "/builddir/build/BUILDROOT/opencloudos-rpm-config-1.0-11.oc9.noarch" \
    --sitelib "/usr/lib/python3.11/site-packages" \
    --sitearch "/usr/lib64/python3.11/site-packages" \
    --python-version "3.11" \
    --pyproject-record "/builddir/build/BUILD/pyproject-record" \
    --prefix "/usr" \
    
  : add support for nested directories and License-Files
  - add forge.lua macros.forge to support go rpm packaging.
  - add mono_arches for mono pkgs building
  - add macros.nodejs-srpm for nodejs building.
  - add loongarch64 support


author: Xin Cheng <denisecheng@tencent.com> - 9.3p2-4
changelog:
  - CVE-2023-51385: forbid shell metasymbols in username/hostname
  - CVE-2023-51384: apply destination constraints to all p11 keys
  - CVE-2023-48795: fix Terrapin attack


author: Feng Weiyao <wynnfeng@tencent.com> - 3.0.12-5
changelog:
  - [Type] other
  - [DESC] Support TLCP & GM/T 0024, including cipher suites ECDHE-SM2-SM4-CBC-SM3,ECDHE-SM2-SM4-GCM-SM3, 
  - ECC-SM2-SM4-CBC-SM3, ECC-SM2-SM4-GCM-SM3,RSA-SM4-CBC-SM3, RSA-SM4-GCM-SM3, RSA-SM4-CBC-SHA256, RSA-SM4-GCM-SHA256.


author: Tracker Robot <trackbot@opencloudos.tech> - 3.0.12-16
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] 95dfb4244a8b6f23768714619f4f4640d51dc3ff.patch: Add NULL check before accessing PKCS7 encrypted algorithm
  - [Bug Fix] a473d59db1ce6943c010c5ba842e7c17fbe81aab.patch: Fix unbounded memory growth when using no-cached-fetch
  - [Bug Fix] 17d12183797033f55aec03376ffd3969cd703c0e.patch: Fix dasync_rsa_decrypt to call EVP_PKEY_meth_get_decrypt
  - [Bug Fix] d44aa28b0db3ba355fe68c5971c90c9a1414788f.patch: Fix off by one issue in buf2hexstr_sep()
  - [Bug Fix] d9d260eb95ec129b93a55965b6f2f392df0ed0a9.patch: SSL_set1_groups_list(): Fix memory corruption with 40 groups and more
  - [Bug Fix] 112754183a720b4db0f2770a80a55805010b4e68.patch: KDF_CTX_new API has incorrect signature (const should not be there)
  - [Bug Fix] 3732a8963d7aacde04f138204e235478609cba8a.patch: Fix memory leaks on error cases during drbg initializations
  - [Bug Fix] 5781c0a181c97530e57708fa67bb5faa44368246.patch: Fix error reporting in EVP_PKEY_{sign,verify,verify_recover}


author: Feng Weiyao <wynnfeng@tencent.com> - 3.0.9-1
changelog:
  - update to version 3.0.9
    Resolves: CVE-2023-0464            
    Resolves: CVE-2023-0465            
    Resolves: CVE-2023-0466            
    Resolves: CVE-2023-1255            
    Resolves: CVE-2023-2650


author: Feng Weiyao <wynnfeng@tencent.com> - 3.0.12-3
changelog:
  - Revert "Improved detection of engine-provided private "classic" keys" to temporaryly fix openssl-pkcs11 test failures


author: Feng Weiyao <wynnfeng@tencent.com> - 3.0.12-4
changelog:
  - backport upstream patch: RSA-PKCS15-implicit-rejection
  - #https://github.com/openssl/openssl/pull/13817


author: Tracker Robot <trackbot@opencloudos.tech> - 1.5.3-9
changelog:
  - Apply patches from rpm-tracker
  - [Bug Fix] 9e4e3e42554fc6344a0b20b42aafb48011e9b2c9.patch: pam_env: remove escaped newlines from econf lines
  - [Bug Fix] 0703453bec6ac54ad31d7245be4529796a3ef764.patch: pam_env: check VENDORDIR after config.h inclusion
  - [Bug Fix] 28894b319488e8302899ee569b6e0911905f374e.patch: pam_env: fix --enable-vendordir fallback logic
  - [Bug Fix] 49b0b16a3d9781c6d7294b3d04a4d6d57b388c1b.patch: pam_access: do not call pam_sm_authenticate
  - [Bug Fix] 66106ea2c9c20c1c5c05f919b363ae6ca3e7d5ca.patch: pam_localuser: do not call pam_sm_authenticate
  - [Bug Fix] 6bd4e4e54c2cdc38ce08436ac786330af72b6207.patch: pam_usertype: do not call pam_sm_authenticate
  - [Bug Fix] 8295f092f6138ced15decc05e094667b0a8488e3.patch: pam_lastlog: do not call pam_sm_authenticate
  - [Bug Fix] d3b8c0723d0d691585474b0e14982f62b115a672.patch: pam_unix: do not truncate user names
  - [Bug Fix] 76af6380776a81ffd6ff50de254fb448ec6bce79.patch: pam_timestamp: correct failure condition


author: cunshunxia <cunshunxia@tencent.com> - 3.11.6-15
changelog:
  - fix CVE-2025-0938.
  - gh-105704: Disallow square brackets (`[` and `]`) in
   domain names for parsed URLs (GH-129418) (#129528)


author: Shuo Wang <abushwang@tencent.com> - 3.11.6-16
changelog:
  - fix CVE-2025-1795
  - email/_header_value_parser: don't encode list separators (GH-100885) (GH-115593)
  - Fix UnicodeEncodeError in TokenList.fold() (GH-113730)
  - Fix for email.generator.Generator with whitespace between encoded words. (#92281)
  - Fix AttributeError in the email module (GH-119099)


author: Zhao Zhen <jeremiazhao@tencent.com> - 3.11.4-1
changelog:
  - upgraded for upstream 3.11.4
  - fixed CVE-2023-24329, CVE-2022-45061, CVE-2022-42919, CVE-2021-28861, CVE-2020-10735, CVE-2015-20107
  - removed python-unversioned-command, it is now merged into python3 package, so python3 package contains
  - /usr/bin/python by default


author: Wang Guodong <gordonwwang@tencent.com> - 1.70.0-3
changelog:
  - include -Cstrip=none in %build_rustflags for rust-1.77.0
  - sync rust-toolset macros to rust-packaging v25.2


author: Wang Guodong <gordonwwang@tencent.com> - 38.6-1
changelog:
  - upgrade to version 38.6 and update source files;
  - relabel some dirs such as /usr/lib/sysimages/rpm;
  - set selinux-policy config to enforcing mode by default.


author: Yi Lin <nilusyi@tencent.com> - 15.7-5
changelog:
  - fix CVE-2023-40546, CVE-2023-40551, CVE-2023-40550, 
    CVE-2023-40549, CVE-2023-40548, CVE-2023-40547


author: Miaojun Dong <zoedong@tencent.com> - 4.5.5-1
changelog:
  - Bump version to 4.5.5
  - Add build requirement python3-setuptools
  - Comment the line to generates i18n docs because it is broken


author: Upgrade Robot <upbot@opencloudos.org> - 1.9.14p1-1
changelog:
  - Upgrade to version 1.9.14p1
  - not support log-server, disable configure options and remove openssl-devel


author: cunshunxia <cunshunxia@tencent.com> - 255-4
changelog:
  - fix unexpected `preset-all` when upgrade systemd.
  - create /var/log/journal at first boot to make log persistent.


author: Doris Chao <doriscchao@tencent.com> - 3.4-1
changelog:
  - [Type] bugfix
  - [DESC] Update to version 3.4 to resolve crashes when copying in copy-mode
  - https://github.com/tmux/tmux/issues/3699


author: Zhao Zhen <jeremiazhao@tencent.com> - 9.0.2092-1
changelog:
  - updated to upstream version 9.0.2092
  - fixed CVE-2023-4735 CVE-2023-4736 CVE-2023-4734 CVE-2023-4738 CVE-2023-4752 
    CVE-2023-4781 CVE-2023-4733 CVE-2023-4750 CVE-2023-5344 CVE-2023-5441 CVE-2023-5535


author: Yi Lin <nilusyi@tencent.com> - 9.0.2092-2
changelog:
  - fixed CVE-2023-48231 CVE-2023-48232 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 
    CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-22667


author: Tracker Robot <trackbot@opencloudos.tech> - 1.2.13-7
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 7a7202de3568522dfc75a455927ccbd7faf63411.patch: Correct a variable type in deflate.c.


author: Tracker Robot <trackbot@opencloudos.tech> - 1.2.13-8
changelog:
  - [Type] security
  - [DESC] Apply patches from rpm-tracker
  - [CVE Fix] 14a5f8f266c16c87ab6c086fc52b770b27701e01.patch: Neutralize zip file traversal attacks in miniunz.


author: Tracker Robot <trackbot@opencloudos.tech> - 1.2.13-9
changelog:
  - [Type] bugfix
  - [DESC] Apply patches from rpm-tracker
  - [Bug Fix] 431a9b65eacab7efabf2230ba97ff426c0e07f9d.patch: Add bounds checking to ERR_MSG() macro, used by zError().


