# changelog

author: yaoxin <yaoxin30@huawei.com> 2.4.3-5
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-44228 is fixed, the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> 2.4.3-6
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-45105 is fixed, the version needs to be rebuild.


author: houyingchao <houyingchao@huawei.com> 2.4.3-7
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: wangxiao <wangxiao65@huawei.com> - 6.9.10.67-19
changelog:
  - Fix CVE-2020-25676 CVE-2020-27757 CVE-2020-27758 CVE-2020-27771
    CVE-2020-27772 CVE-2020-27774 CVE-2020-27775 CVE-2020-27751


author: chengguipeng <chengguipeng1@huawei.com> - 1.1.12-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:solove the problem that no message is displayed when running a uninstalled command.


author: openEuler Buildteam <buildteam@openeuler.org> - 0.16-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: change file from /etc/logrotate.d/aide/aide.logrotate to /etc/logrotate.d/aide


author: yaoxin <yaoxin30@huawei.com> - 2.5.5-2
changelog:
  - Fix CVE-2019-14904 CVE-2020-10684 CVE-2020-10729 CVE-2020-1735-to-CVE-2020-1740 CVE-2020-1753 CVE-2021-20191


author: wangkai <wangkai385@huawei.com> - 2.3
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0:4.3-24
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: pengyuan <pengyuan@cmss.chinamobile.com> 2.3-7
changelog:
  - add sshLogFacility in BC-Linux for Euler 22.10
  - add ALWAYS SET PATH in BC-Linux for Euler 22.10
  - add sshLogLevel in BC-Linux for Euler 22.10
  - Modify bse.spec


author: yuanxin <yuanxin21@huawei.com> - 9.11.21-2
changelog:
  - Type:CVE
  - ID:CVE-2020-8622.patch  CVE-2020-8623.patch  CVE-2020-8624.patch
  - SUG:NA
  - DESC:fix CVE-2020-8622.patch  CVE-2020-8623.patch  CVE-2020-8624.patch


author: hanzhijun <hanzhijun1@huawei.com> - 9.11.21-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix the difference at the macro definition using clock gettime instead of gettimeofda


author: panxiaohe <panxiaohe@huawei.com> - 2.34-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix erroneous decoding of LEB128 values
         heap-buffer-overflow on readelf -Ww


author: tangbin <tangbin@cmss.chinamobile.com> - 4.19.90-2302.3.0.0188.4
changelog:
  - block, bfq: switch 'bfqg->ref' to use atomic refcount apis
  - x86/bugs: Flush IBP in ib_prctl_set()
  - media: vivid: fix compose size exceed boundary
  - cifs: do not include page data when checking signature
  - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
  - net: stream: purge sk_error_queue in sk_stream_kill_queues()
  - net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
  - ext4: fix deadlock due to mbcache entry corruption
  - mbcache: automatically delete entries from cache on freeing
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
  - mm/khugepaged: fix GUP-fast interaction by sending IPI
  - mm: gup: fix the fast GUP race against THP collapse
  - prlimit: do_prlimit needs to have a speculation check
  - arm64: cmpxchg_double*: hazard against entire exchange variable
  - net/ulp: prevent ULP without clone op from entering the LISTEN status
  - driver core: Fix bus_type.match() error handling in __driver_attach()
  - md: fix a crash in mempool_free
  - bpf: pull before calling skb_postpull_rcsum()
  - SUNRPC: ensure the matching upcall is in-flight upon downcall
  - ovl: Use ovl mounter's fsuid and fsgid in ovl_link()
  - pnode: terminate at peers of source
  - cifs: Fix uninitialized memory read for smb311 posix symlink create
  - device_cgroup: Roll back to original exceptions after copy failure
  - PCI/sysfs: Fix double free in error path
  - PCI: Fix pci_device_is_present() for VFs by checking PF
  - ipmi: fix use after free in _ipmi_destroy_user()
  - ima: Fix a potential NULL pointer access in ima_restore_measurement_list
  - ipmi: fix long wait in unload when IPMI disconnect
  - binfmt: Fix error return code in load_elf_fdpic_binary()
  - chardev: fix error handling in cdev_device_add()
  - mrp: introduce active flags to prevent UAF when applicant uninit
  - bpf: make sure skb->len != 0 when redirecting to a tunneling device
  - ipmi: fix memleak when unload ipmi driver
  - ACPICA: Fix error code path in acpi_ds_call_control_method()
  - skbuff: Account for tail adjustment during pull operations
  - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle.
  - serial: amba-pl011: avoid SBSA UART accessing DMACR register
  - class: fix possible memory leak in __class_register()
  - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
  - blktrace: Fix output non-blktrace event when blk_classic option enabled
  - SUNRPC: Fix missing release socket in rpc_sockname()
  - bonding: uninitialized variable in bond_miimon_inspect()
  - pinctrl: pinconf-generic: add missing of_node_put()
  - ima: Fix misuse of dereference of pointer in template_desc_init_fields()
  - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed
  - blk-mq: fix possible memleak when register 'hctx' failed
  - perf: Fix possible memleak in pmu_dev_alloc()
  - cpuidle: dt: Return the correct numbers of parsed idle states
  - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP
  - pstore/ram: Fix error return code in ramoops_probe()
  - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()
  - sched/rt: Optimize checking group RT scheduler constraints
  - md: protect md_unregister_thread from reentrancy
  - hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
  - lib/list_debug.c: Detect uninitialized lists
  - crypto: tcrypt - avoid signed overflow in byte count
  - mm: sharepool: fix hugepage_rsvd count increase error
  - config: enbale irq pending config for openeuler
  - genirq: introduce CONFIG_GENERIC_PENDING_IRQ_FIX_KABI
  - irqchip/gic-v3-its: introduce CONFIG_GENERIC_PENDING_IRQ
  - md: fix uaf in md_wakeup_thread
  - genirq: add printk safe in irq context
  - jbd2: Fix data missing when reusing bh which is ready to be checkpointed
  - x86/unwind: Fix orc entry for paravirt {save,restore}_fl
  - cifs: sanitize multiple delimiters in prepath
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry


author: tangbin <tangbin@cmss.chinamobile.com> - 4.19.90-2302.4.0.0189.4
changelog:
  - !213  net: bonding: Inherit MPLS features from slave devices
  - x86/unwind: Fix check_paravirt() calls orc_find() before declaration
  - dhugetlb: set hpool to NULL for cont-bit hugepage
  - arm64/ascend: Delete CONFIG_ASCEND_AUTO_TUNING_HUGEPAGE in hulk_defconfig
  - arm64/ascend: Delete unused feature auto-tuning hugepage
  - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
  - net: bridge: mcast: add and enforce query interval minimum
  - net: bridge: mcast: add and enforce startup query interval minimum
  - !396 anolis: bond: broadcast ARP or ND messages to all slaves
  - anolis: bond: broadcast ARP or ND messages to all slaves
  - net: bonding: Inherit MPLS features from slave devices


author: tangbin <tangbin@cmss.chinamobile.com> - 4.19.90-2302.5.0.0190.4
changelog:
  - !423 genirq bugfix for arm64
  - genirq: Remove irqd_irq_disabled in __irq_move_irq
  - !422 iscsi bugfixes backport
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
  - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
  - !420 backport CVEs and bugfixes
  - net: mpls: fix stale pointer if allocation fails during device rename
  - nbd: fix assignment error for first_minor in nbd_dev_add
  - selinux: further adjust init order for cred_* hooks
  - selinux: further adjust init order for file_alloc_security hook
  - !415 mainline bugfix backport
  - selinux: reorder hooks to make runtime disable less broken
  - evm: Fix a small race in init_desc()
  - evm: Check also if *tfm is an error pointer in init_desc()
  - iommu: Properly export iommu_group_get_for_dev()
  - of: resolver: Add of_node_put() before return and break
  - of: unittest: Add of_node_put() before return
  - drivers/iommu: Allow IOMMU bus ops to be unregistered
  - drivers/iommu: Export core IOMMU API symbols to permit modular drivers
  - component: do not dereference opaque pointer in debugfs
  - ipmi: use %*ph to print small buffer
  - crypto: algif_skcipher - Use chunksize instead of blocksize
  - crypto: algif_skcipher - EBUSY on aio should be an error
  - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete()
  - dhugetlb: isolate hwpoison hugepage when release
  - mm/sharepool: Fix null-pointer-deference in sp_free_area


author: dingxiang <dingxiang@cmss.chinamobile.com> - 4.19.90-2302.5.0.0190.7
changelog:
  - net_sched: return correct value for *notify* functions
  - xfrm interface: don't take extra reference to netdev
  - gtp: add GTPA_LINK info to msg sent to userspace
  - netfilter: nf_tables: rt: allow checking if dst has xfrm attached
  - tun: implement carrier change
  - ipv6: constify rt6_nexthop()
  - ipv6: fix neighbour resolution with raw socket
  - ip6_tunnel: allow redirecting ip6gre and ipxip6 packets to eth devices
  - gre: let mac_header point to outer header only when necessary
  - sit: allow redirecting ip6ip, ipip and mplsip packets to eth devices
  - ipip: allow redirecting ipip and mplsip packets to eth devices
  - net: handle ARPHRD_IP6GRE in dev_is_mac_header_xmit()
  - netns: remove net arg from rtnl_net_fill()
  - netns: introduce 'struct net_fill_args'
  - rtnetlink: add rtnl_get_net_ns_capable()
  - netns: add support of NETNSA_TARGET_NSID
  - netns: enable to dump full nsid translation table
  - xfrm interface: fix memory leak on creation
  - xfrm interface: avoid corruption on changelink
  - xfrm interface: ifname may be wrong in logs
  - xfrm interface: fix list corruption for x-netns
  - xfrm interface: fix management of phydev
  - netns: fix NLM_F_ECHO mechanism for RTM_NEWNSID
  - vti[6]: fix packet tx through bpf_redirect()
  - vti[6]: fix packet tx through bpf_redirect() in XinY cases
  - xfrm interface: don't take extra reference to netdev
  - gtp: add notification mechanism
  - dev_forward_skb: do not scrub skb mark within the same name space
  - netfilter: nfqueue: enable to get skb->priority
  - nfqueue: enable to set skb->priority


author: tangbin <tangbin@cmss.chinamobile.com> - 4.19.90-2303.1.0.0191.7
changelog:
  - HID: check empty report_list in hid_validate_values()
  - dhugetlb: use mutex lock in update_reserve_pages()
  - ntfs: fix out-of-bounds read in ntfs_attr_find()
  - ntfs: fix use-after-free in ntfs_ucsncmp()
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
  - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
  - netfilter: nf_tables: fix null deref due to zeroed list head
  - tcp: Fix listen() regression in 5.15.88.
  - tap: tap_open(): correctly initialize socket uid
  - tun: tun_chr_open(): correctly initialize socket uid
  - net: add sock_init_data_uid()
  - rds: rds_rm_zerocopy_callback() use list_first_entry()


author: tangbin <tangbin@cmss.chinamobile.com> - 4.19.90-2303.3.0.0192.8
changelog:
  - scsi: cancel the inflight async device probe when remove scsi_target
  - scsi: fix use-after-free problem in scsi_remove_target
  - HID: asus: use spinlock to safely schedule workers
  - HID: asus: use spinlock to protect concurrent accesses
  - HID: asus: Remove check for same LED brightness on set
  - blk-wbt: don't enable throttling if default elevator is bfq
  - block: Fix kabi broken by "block: split .sysfs_lock into two locks"
  - block: fix comment and add lockdep assert
  - block: don't release queue's sysfs lock during switching elevator
  - block: fix race between switching elevator and removing queues
  - block: split .sysfs_lock into two locks
  - crypto: rsa-pkcs1pad - restore signature length check
  - fs/proc: task_mmu.c: don't read mapcount for migration entry
  - migrate: hugetlb: check for hugetlb shared PMD in node migration
  - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
  - ipv6: Fix tcp socket connection with DSCP.
  - ipv6: Fix datagram socket connection with DSCP.
  - aio: fix mremap after fork null-deref
  - bpf: Always return target ifindex in bpf_fib_lookup
  - serial: 8250_dma: Fix DMA Rx rearm race
  - serial: 8250_dma: Fix DMA Rx completion race
  - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
  - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
  - netlink: annotate data races around sk_state
  - netlink: annotate data races around dst_portid and dst_group
  - netlink: annotate data races around nlk->portid
  - netlink: remove hash::nelems check in netlink_insert
  - net: fix UaF in netns ops registration error path
  - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state
  - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
  - binder: Address corner cases in deferred copy and fixup
  - binder: fix pointer cast warning
  - binder: defer copies of pre-patched txn data
  - binder: read pre-translated fds from sender buffer
  - binder: avoid potential data leakage when copying txn
  - binder: fix handling of error during copy
  - binder: use cred instead of task for getsecid
  - binder: don't detect sender/target during buffer cleanup
  - binder: make sure fd closes complete
  - binder: Remove bogus warning on failed same-process transaction
  - binder: fix incorrect calculation for num_valid
  - binder: Prevent repeated use of ->mmap() via NULL mapping
  - binder: Don't modify VMA bounds in ->mmap handler
  - binder: Set end of SG buffer area properly.
  - binder: return errors from buffer copy functions
  - binder: check for overflow when alloc for security context
  - binder: fix BUG_ON found by selinux-testsuite
  - binder: fix handling of misaligned binder object
  - binder: use userspace pointer as base of buffer space
  - binder: remove user_buffer_offset
  - binder: remove kernel vm_area for buffer space
  - binder: avoid kernel vm_area for buffer fixups
  - binder: add function to copy binder object from buffer
  - binder: add functions to copy to/from binder buffers
  - binder: create userspace-to-binder-buffer copy function
  - binder: fix use-after-free due to ksys_close() during fdget()
  - binder: fix kerneldoc header for struct binder_buffer
  - binder: create node flag to request sender's security context
  - binder: Add BINDER_GET_NODE_INFO_FOR_REF ioctl.
  - binder: use standard functions to allocate fds
  - block: fix kabi change since add bd_write_openers and bd_part_write_openers
  - block: add info when opening an exclusive opened block device for write
  - block: add info when opening a write opend block device exclusively
  - Revert "block: add info when opening an exclusive opened block device for write"
  - Revert "block: add info when opening a write opend block device exclusively"
  - ext4: fix WARNING in mb_find_extent
  - sctp: fail if no bound addresses can be used for a given scope


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2304.5.0.0199.14
changelog:
  - RDMA/hns: Add check for user-configured max_inline_data value
  - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
  - audit: fix a memleak caused by auditing load module
  - tcp: restrict net.ipv4.tcp_app_win
  - x86/speculation: Allow enabling STIBP with legacy IBRS
  - iommu/arm-smmu-v3: Fix UAF when handle evt during iommu group removing
  - ata: sata_zhaoxin: Update Zhaoxin Serial ATA product name


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2305.1.0.0200.14
changelog:
  - ipv6: Fix an uninit variable access bug in __ip6_make_skb()
  - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach()
  - verify_pefile: relax wrapper length check
  - udp6: fix potential access to stale information
  - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()
  - ftrace: Mark get_lock_parent_ip() __always_inline
  - perf/core: Fix the same task check in perf_event_set_output
  - net: don't let netpoll invoke NAPI if in xmit context
  - icmp: guard against too small mtu
  - sched_getaffinity: don't assume 'cpumask_size()' is fully initialized
  - dm stats: check for and propagate alloc_percpu failure
  - dm thin: fix deadlock when swapping to thin device
  - genirq: introduce handle_fasteoi_edge_irq for phytium
  - genirq: introduce handle_fasteoi_edge_irq flow handler
  - Revert "genirq: Remove irqd_irq_disabled in __irq_move_irq"
  - Revert "config: enbale irq pending config for openeuler"
  - Revert "genirq: introduce CONFIG_GENERIC_PENDING_IRQ_FIX_KABI"
  - Revert "irqchip/gic-v3-its: introduce CONFIG_GENERIC_PENDING_IRQ"
  - scsi: dpt_i2o: Remove obsolete driver
  - md: extend disks_mutex coverage
  - md: use msleep() in md_notify_reboot()
  - md: fix double free of mddev->private in autorun_array()
  - block/badblocks: fix badblocks loss when badblocks combine
  - block/badblocks: fix the bug of reverse order
  - block: Only set bb->changed when badblocks changes
  - md: fix sysfs duplicate file while adding rdev
  - md: replace invalid function flush_rdev_wq() with flush_workqueue()
  - bonding: Fix memory leak when changing bond type to Ethernet
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern
  - timers/nohz: Last resort update jiffies on nohz_full IRQ entry
  - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
  - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
  - net: qcom/emac: Fix use after free bug in emac_remove due to race condition
  - ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
  - ext4: only update i_reserved_data_blocks on successful block allocation
  - mm: mem_reliable: Use zone_page_state to count free reliable pages
  - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
  - sctp: leave the err path free in sctp_stream_init to sctp_stream_free
  - RDMA/core: Refactor rdma_bind_addr
  - Revert "RDMA/cma: Simplify rdma_resolve_addr() error flow"
  - fix kabi broken due to import new inode operation get_inode_acl
  - ovl: enable RCU'd ->get_acl()
  - vfs: add rcu argument to ->get_acl() callback


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2305.2.0.0201.14
changelog:
  - net: sctp: update stream->incnt after successful allocation of stream_in
  - arm64/mpam: modify mpam irq register error log
  - openeuler_defconfig: Add configuration items for zhaoxin
  - bluetooth: Perform careful capability checks in hci_sock_ioctl()
  - netrom: Fix use-after-free caused by accept on already connected socket
  - i2c: Add Zhaoxin I2C driver
  - mm: memcontrol: switch to rcu protection in drain_all_stock()
  - scsi/hifc: Fix compile error in allyesconfigs
  - net/hinic: Fix compile error in allyesconfigs
  - x86/perf: fix use-after-free bug in uncore_pci_remove()
  - crypto: Driver for Zhaoxin GMI SM4 Block Cipher Algorithm
  - crypto: Driver for Zhaoxin GMI SM3 Secure Hash algorithm
  - crypto: Add Zhaoxin ACE driver
  - cpufreq: ACPI: Add Zhaoxin/Centaur turbo boost control interface support
  - hwrng: Add Zhaoxin rng driver
  - USB: HCD: Fix URB giveback issue in tasklet function
  - ACPI, x86: Improve Zhaoxin processors support for NONSTOP TSC
  - x86/acpi/cstate: Optimize ARB_DISABLE on Centaur CPUs


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2305.3.0.0202.14
changelog:
  - x86/msr-index: make SPEC_CTRL_IBRS assembler-portable
  - xfs: verify buffer contents when we skip log replay
  - kvm: arm64: fix some pvsched bugs


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2305.4.0.0203.14
changelog:
  - x86/pm: Fix false positive kmemleak report in msr_build_context()
  - drm: Lock pointer access in drm_master_release()
  - drm: Fix use-after-free read in drm_getunique()
  - cpufreq: conservative: Add a switch to enable fast mode
  - of: overlay: kmemleak in dup_and_fixup_symbol_prop()
  - iommu/dma: Fix MSI reservation allocation
  - lib/stackdepot.c: fix global out-of-bounds in stack_slabs
  - rcu: Use *_ONCE() to protect lockless ->expmask accesses
  - iommu: Don't print warning when IOMMU driver only supports unmanaged domains
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2306.2.0.0204.15
changelog:
  - ipmi: fix SSIF not responding under certain cond
  - ipmi_ssif: Rename idle state and check
  - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock
  - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt()
  - nohz: Add TICK_DEP_BIT_RCU
  - perf/core: Fix hardlockup failure caused by perf throttle
  - of: Fix modalias string generation
  - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb()
  - crypto: drbg - Only fail when jent is unavailable in FIPS mode
  - crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors
  - net/packet: convert po->auxdata to an atomic flag
  - net/packet: convert po->origdev to an atomic flag
  - ring-buffer: Sync IRQ works before buffer destruction
  - dccp: Call inet6_destroy_sock() via sk->sk_destruct().
  - inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy().
  - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct().
  - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM).
  - lib/cmdline: fix get_option() for strings starting with hyphen
  - of: overlay: fix for_each_child.cocci warnings
  - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list
  - fs: hfsplus: fix UAF issue in hfsplus_put_super
  - block: Fix the partition start may overflow in add_partition()
  - block: refactor blkpg_ioctl
  - nbd: get config_lock before sock_shutdown
  - ipv6: sr: fix out-of-bounds read when setting HMAC data.
  - dm: add disk before alloc dax
  - dm thin: Fix ABBA deadlock by resetting dm_bufio_client
  - jbd2: remove t_checkpoint_io_list
  - jbd2: recheck chechpointing non-dirty buffer
  - irqchip/gic-v3-its: Balance initial LPI affinity across CPUs
  - irqchip/gic-v3-its: Track LPI distribution on a per CPU basis
  - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
  - net: sched: fix NULL pointer dereference in mq_attach


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2306.3.0.0205.15
changelog:
  - arm64: Add AMPERE1 to the Spectre-BHB affected list
  - sctp: Call inet6_destroy_sock() via sk->sk_destruct().
  - net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues().
  - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
  - sched: smart grid: init sched_grid_qos structure on QOS purpose
  - sched: Introduce smart grid scheduling strategy for cfs


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2308.2.0.0213.20
changelog:
  - md: Flush workqueue md_rdev_misc_wq in md_alloc()
  - dm: don't lock fs when the map is NULL during suspend or resume
  - dm: don't lock fs when the map is NULL in process of resume
  - dm: requeue IO if mapping table not yet available
  - Revert "dm: make sure dm_table is binded before queue request"
  - dm thin metadata: check fail_io before using data_sm
  - x86/cpu/amd: Add a Zenbleed fix
  - Revert "arm64/mpam: Fix mpam corrupt when cpu online"
  - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys
  - sch_netem: fix issues in netem_change() vs get_dist_table()
  - sch_netem: acquire qdisc lock in netem_change()
  - cgroup: Do not corrupt task iteration when rebinding subsystem
  - tty: fix pid memleak in disassociate_ctty()
  - media: usb: siano: Fix warning due to null work_func_t function pointer
  - media: usb: siano: Fix use after free bugs caused by do_submit_urb
  - can: bcm: Fix UAF in bcm_proc_show()
  - can: raw: fix lockdep issue in raw_release()
  - can: raw: fix receiver memory leak
  - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE
  - KVM: fix overflow of zero page refcount with ksm running
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local
  - nfc: llcp: simplify llcp_sock_connect() error paths
  - nfc: llcp: nullify llcp_sock->dev on connect() error paths
  - nfc: Fix to check for kmemdup failure
  - tracing: Fix warning in trace_buffered_event_disable()


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2308.3.0.0214.20
changelog:
  - xen/netback: Fix buffer overrun triggered by unusual packet
  - net: tap_open(): set sk_uid from current_fsuid()
  - net: tun_chr_open(): set sk_uid from current_fsuid()
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free
  - xfrm: add NULL check in xfrm_update_ae_params
  - sched: disable sched_autogroup by default


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2308.4.0.0215.20
changelog:
  - netfilter: nat: fix kabi change
  - netfilter: nat: fix udp checksum corruption
  - netfilter: nat: remove csum_recalc hook
  - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
  - workqueue: Assign a color to barrier work items
  - workqueue: Mark barrier work with WORK_STRUCT_INACTIVE
  - workqueue: Change the code of calculating work_flags in insert_wq_barrier()
  - workqueue: Change arguement of pwq_dec_nr_in_flight()
  - workqueue: Rename "delayed" (delayed by active management) to "inactive"
  - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2308.4.0.0216.20
changelog:
  - ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
  - ip6mr: Fix skb_under_panic in ip6mr_cache_report()
  - EDAC/amd64: Add support for Hygon family 18h model 6h
  - x86/amd_nb: Add support for Hygon family 18h model 6h
  - hwmon/k10temp: Add support for Hygon family 18h model 5h
  - EDAC/amd64: Add support for Hygon family 18h model 5h
  - x86/amd_nb: Add support for Hygon family 18h model 5h
  - x86/cpu: Get LLC ID for Hygon family 18h model 5h
  - i2c-piix4: Remove the IMC detecting for Hygon SMBus
  - hwmon/k10temp: Add support for Hygon family 18h model 4h
  - EDAC/mce_amd: Use struct cpuinfo_x86.logical_die_id for Hygon NodeId
  - EDAC/amd64: Adjust address translation for Hygon family 18h model 4h
  - EDAC/amd64: Add support for Hygon family 18h model 4h
  - EDAC/amd64: Get UMC channel from the 6th nibble for Hygon
  - iommu/hygon: Add support for Hygon family 18h model 4h IOAPIC
  - x86/amd_nb: Add northbridge support for Hygon family 18h model 4h
  - x86/amd_nb: Add Hygon family 18h model 4h PCI IDs
  - x86/microcode/hygon: Add microcode loading support for Hygon processors
  - x86/cpu/hygon: Modify the CPU topology deriving method for Hygon
  - x86/MCE/AMD: Use an u64 for bank_map
  - EDAC/mc_sysfs: Increase legacy channel support to 12
  - EDAC/amd64: Add new register offset support and related changes
  - EDAC/amd64: Set memory type per DIMM
  - rtc: mc146818-lib: Fix the AltCentury for AMD platforms
  - EDAC/amd64: Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh
  - EDAC: Add RDDR5 and LRDDR5 memory types
  - hwmon: (k10temp) Remove unused definitions
  - hwmon: (k10temp) Remove residues of current and voltage
  - hwmon: (k10temp) Rework the temperature offset calculation
  - hwmon: (k10temp) Don't show Tdie for all Zen/Zen2/Zen3 CPU/APU
  - x86/cstate: Allow ACPI C1 FFH MWAIT use on Hygon systems
  - x86/topology: Make __max_die_per_package available unconditionally
  - x86/cpu/amd: Set __max_die_per_package on AMD
  - hwmon: (k10temp) Remove support for displaying voltage and current on Zen CPUs
  - EDAC: Add DDR5 new memory type
  - x86/topology: Set cpu_die_id only if DIE_TYPE found
  - EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId
  - x86/CPU/AMD: Save AMD NodeId as cpu_die_id
  - EDAC/amd64: Set proper family type for Family 19h Models 20h-2Fh
  - hwmon: (k10temp) Add support for Zen3 CPUs
  - x86/mce: Increase maximum number of banks to 64
  - hwmon: (k10temp) Define SVI telemetry and current factors for Zen2 CPUs
  - hwmon: (k10temp) Create common functions and macros for Zen CPU families
  - i2c: designware: Add device HID for Hygon I2C controller
  - hwmon: (k10temp) make some symbols static
  - hwmon: (k10temp) Reorganize and simplify temperature support detection
  - hwmon: (k10temp) Swap Tdie and Tctl on Family 17h CPUs
  - hwmon: (k10temp) Display up to eight sets of CCD temperatures
  - hwmon: (k10temp) Don't show temperature limits on Ryzen (Zen) CPUs
  - hwmon: (k10temp) Show core and SoC current and voltages on Ryzen CPUs
  - hwmon: (k10temp) Report temperatures per CPU die
  - hmon: (k10temp) Convert to use devm_hwmon_device_register_with_info
  - hwmon: (k10temp) Use bitops
  - hwmon: Add convience macro to define simple static sensors
  - hwmon: (k10temp) Auto-convert to use SENSOR_DEVICE_ATTR_{RO, RW, WO}
  - hwmon: Introduce SENSOR_DEVICE_ATTR_{RO, RW, WO} and variants
  - x86/umip: Make the UMIP activated message generic
  - x86/umip: Print UMIP line only once
  - x86/microcode/AMD: Clean up per-family patch size checks
  - nbd: pass nbd_sock to nbd_read_reply() instead of index
  - fs: jfs: fix possible NULL pointer dereference in dbFree()
  - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
  - tcp: Reduce chance of collisions in inet6_hashfn().
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - README: Remove out-of-date contribution guide
  - drm/atomic-helper: Bump vblank timeout to 100 ms


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2309.1.0.0217.20
changelog:
  - sched/smt: fix unbalance sched_smt_present dec/inc
  - crypto:padata: Fix return err for PADATA_RESET
  - block: don't get gendisk if queue has not been registered
  - fuse: revalidate: don't invalidate if interrupted
  - tracing: Fix memleak due to race between current_tracer and trace
  - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2309.3.0.0218.21
changelog:
  - net: openvswitch: don't send internal clone attribute to the userspace.
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - scsi: fix kabi broken in struct Scsi_Host
  - scsi: don't fail if hostt->module is NULL
  - scsi: scsi_device_gets returns failure when the module is NULL.
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - scsi: core: raid_class: Remove raid_component_add()
  - scsi: core: Fix possible memory leak if device_add() fails
  - scsi: core: Fix legacy /proc parsing buffer overflow
  - serial: 8250_dw: Preserve original value of DLF register
  - serial: 8250_dw: split Synopsys DesignWare 8250 common functions
  - nbd: Add the maximum limit of allocated index in nbd_dev_add
  - integrity: Fix possible multiple allocation in integrity_inode_get()
  - drivers: net: prevent tun_build_skb() to exceed the packet size limit
  - net/packet: annotate data-races around tp->status
  - tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
  - tcp_metrics: annotate data-races around tm->tcpm_net
  - tcp_metrics: annotate data-races around tm->tcpm_vals[]
  - tcp_metrics: annotate data-races around tm->tcpm_lock
  - tcp_metrics: annotate data-races around tm->tcpm_stamp
  - tcp_metrics: fix addr_same() helper
  - virtio-net: set queues after driver_ok
  - virtio-net: fix race between set queues and probe
  - team: reset team's flags when down link is P2P device
  - bonding: reset bond's flags when down link is P2P device
  - tcp: annotate data-races around fastopenq.max_qlen
  - tcp: annotate data-races around tp->notsent_lowat
  - tcp: annotate data-races around rskq_defer_accept
  - tcp: annotate data-races around tp->linger2
  - net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX
  - SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
  - net/sched: make psched_mtu() RTNL-less safe
  - udp6: fix udp6_ehashfn() typo
  - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
  - vrf: Increment Icmp6InMsgs on the original netdev
  - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
  - tcp: annotate data races in __tcp_oow_rate_limited()
  - net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode
  - ipvlan: Fix return value of ipvlan_queue_xmit()
  - netlink: do not hard code device address lenth in fdb dumps
  - netlink: Add __sock_i_ino() for __netlink_diag_dump().
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
  - netlink: fix potential deadlock in netlink_set_err()
  - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS
  - x86: Move gds_ucode_mitigated() declaration to header
  - Documentation/x86: Fix backwards on/off logic about YMM support
  - KVM: Add GDS_NO support to KVM
  - x86/speculation: Add Kconfig option for GDS
  - x86/speculation: Add force option to GDS mitigation
  - x86/speculation: Add cpu_show_gds() prototype
  - x86/speculation: Add Gather Data Sampling mitigation
  - memcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock()
  - cpu/hotplug: Prevent self deadlock on CPU hot-unplug
  - memcg: fix a UAF problem in drain_all_stock()
  - dm: switch to precise io accounting
  - block: add precise io accouting apis
  - tracing: Fix race issue between cpu buffer write and swap
  - ext2: dump current reservation window info
  - ext2: fix race between setxattr and write back
  - ext2: introduce flag argument for ext2_new_blocks()
  - ext2: remove ext2_new_block()
  - arm64: efi: Make efi_rt_lock a raw_spinlock
  - efi: rt-wrapper: Add missing include
  - arm64: efi: Recover from synchronous exceptions occurring in firmware
  - arm64: efi: Execute runtime services from a dedicated stack
  - efi: fix userspace infinite retry read efivars after EFI runtime services page fault
  - arm64: efi: Restore register x18 if it was corrupted
  - x86/efi: fix a -Wtype-limits compilation warning
  - efi: Fix build error due to enum collision between efi.h and ima.h
  - efi: Fix debugobjects warning on 'efi_rts_work'
  - efi/x86: Handle page faults occurring while running EFI runtime services
  - efi: Make efi_rts_work accessible to efi page fault handler
  - lib/genalloc.c: change return type to unsigned long for bitmap_set_ll
  - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE
  - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2309.4.0.0219.21
changelog:
  - crypto: hisilicon/qm - prevent soft lockup in qm_poll_qp()'s loop
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  - crypto:hisilicon/qm - cache write back before flr and poweroff
  - Revert "efi: Make efi_rts_work accessible to efi page fault handler"
  - Revert "efi/x86: Handle page faults occurring while running EFI runtime services"
  - Revert "efi: Fix debugobjects warning on 'efi_rts_work'"
  - Revert "efi: Fix build error due to enum collision between efi.h and ima.h"
  - Revert "x86/efi: fix a -Wtype-limits compilation warning"
  - Revert "arm64: efi: Restore register x18 if it was corrupted"
  - Revert "efi: fix userspace infinite retry read efivars after EFI runtime services page fault"
  - Revert "arm64: efi: Execute runtime services from a dedicated stack"
  - Revert "arm64: efi: Recover from synchronous exceptions occurring in firmware"
  - Revert "efi: rt-wrapper: Add missing include"
  - Revert "arm64: efi: Make efi_rt_lock a raw_spinlock"
  - crypto:hisilicon/sec - modify hw endian config
  - GCOV: Add value profile support for kernel.
  - sched/qos: Fix warning in CPU hotplug scenarios
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write
  - io_uring: ensure IOPOLL locks around deferred work
  - i2c: hisi: Add gpio bus recovery support
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt
  - x86/CPU/AMD: Do not leak quotient data after a division by 0


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2309.5.0.0220.22
changelog:
  - sdei_watchdog: Avoid exception during sdei handler
  - cec-api: prevent leaking memory through hole in structure
  - crypto: hisilicon - reset before init the device
  - jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2310.4.0.0223.24
changelog:
  - ktask: add memory leak handling for ktask_works in ktask_init()
  - ktask: add null-pointer checks for ktask_works in ktask_init()
  - igb: set max size RX buffer when store bad packet is enabled
  - netfilter: xt_u32: validate user space input
  - USB: ene_usb6250: Allocate enough memory for full object


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2311.1.0.0224.24
changelog:
  - ubi: Refuse attaching if mtd's erasesize is 0
  - DRM: Phytium display DRM document
  - DRM: Phytium display DRM driver
  - ASoC: hdmi-codec: Add an op to set callback function for plug event
  - char: pcmcia: remove all the drivers
  - tty: ipwireless: move Kconfig entry to tty
  - perf: Fix kabi breakage in struct perf_event
  - perf: Disallow mis-matched inherited group reads
  - can: can controller driver for phytium CPUs
  - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
  - printk: Drop console_sem during panic
  - printk: Avoid livelock with heavy printk during panic
  - printk: disable optimistic spin during panic
  - printk: Add panic_in_progress helper
  - xen/events: replace evtchn_rwlock with RCU
  - irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
  - irqchip/gic-v3-its: Make is_v4 use a TYPER copy
  - Revert "genirq: Introduce warn log when irq be reentrant"
  - Revert "genirq: add printk safe in irq context"
  - audit: fix possible soft lockup in __audit_inode_child()
  - can: add phytium can driver document
  - efi: use 32-bit alignment for efi_guid_t literals
  - can: raw: add missing refcount for memory leak fix


author: Tang Bin <tangbin@cmss.chinamobile.com> - 4.19.90-2311.1.0.0225.24
changelog:
  - !2793  handle uninitialized numa nodes gracefully.
  - !2789 linux-4.19.y inclusion
  - arch/x86/mm/numa: Do not initialize nodes twice
  - mm: handle uninitialized numa nodes gracefully
  - mm, memory_hotplug: make arch_alloc_nodedata independent on CONFIG_MEMORY_HOTPLUG
  - !2713  Fix netfilter conntrack
  - !2651  sched/membarrier: fix missing local execution of ipi_sync_rq_state()
  - tcp: fix delayed ACKs for MSS boundary condition
  - tcp: fix quick-ack counting to count actual ACKs of new data
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
  - team: fix null-ptr-deref when team device type is changed
  - af_unix: Fix data race around sk->sk_err.
  - af_unix: Fix data-races around sk->sk_shutdown.
  - af_unix: Fix data-race around unix_tot_inflight.
  - af_unix: Fix data-races around user->unix_inflight.
  - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
  - net: read sk->sk_family once in sk_mc_loop()
  - skbuff: skb_segment, Call zero copy functions before using skbuff frags
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
  - tcp: tcp_enter_quickack_mode() should be static
  - net: Avoid address overwrite in kernel_connect
  - md/raid1: fix error: ISO C90 forbids mixed declarations
  - md: raid1: fix potential OOB in raid1_remove_disk()
  - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
  - autofs: fix memory leak of waitqueues in autofs_catatonic_mode
  - pstore/ram: Check start of empty przs during init
  - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
  - fs: Fix error checking for d_hash_and_lookup()
  - !2767  crypto: hisilicon/qm - alloc reserve buffer to set and get xqc
  - crypto: hisilicon/qm - alloc reserve buffer to set and get xqc
  - !2760  fs: lockd: avoid possible wrong NULL parameter
  - !2164 Net: ethernet: Support 3snic 3s9xx network card
  - !2605 add CONFIG_NGBE for Wangxun 1G NIC for aarch64
  - !1873 [openEuler-1.0-LTS] Add Phytium hda driver support
  - !2564 [openEuler-1.0-LTS] Add Phytium i2c driver support
  - !2636  kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail
  - fs: lockd: avoid possible wrong NULL parameter
  - !2754  Sync LTS patches for openEuler-1.0-LTS
  - !2758  crypto: hisilicon - qm obtain the mailbox config at one time
  - crypto: hisilicon - qm obtain the mailbox config at one time
  - regmap: rbtree: Fix wrong register marked as in-cache when creating new node
  - regmap: rbtree: Use alloc_flags for memory allocations
  - !2730  PCI/IOV: Add pci_sriov_numvfs_lock to support enable pci sriov concurrently
  - !2722  net: sched: sch_qfq: Use non-work-conserving warning handler
  - !2650  sched/cpuacct: Fix charge cpuacct.usage_sys
  - PCI/IOV: Add pci_sriov_numvfs_lock to support enable pci sriov concurrently
  - net: sched: sch_qfq: Use non-work-conserving warning handler
  - arm64: config: add CONFIG_NGBE for Wangxun 1G NIC
  - netfilter: conntrack: fix infinite loop on rmmod
  - netfilter: conntrack: do not auto-delete clash entries on reply
  - netfilter: conntrack: allow insertion of clashing entries
  - netfilter: conntrack: split resolve_clash function
  - netfilter: conntrack: place confirm-bit setting in a helper
  - netfilter: conntrack: remove two args from resolve_clash
  - netfilter: conntrack: tell compiler to not inline nf_ct_resolve_clash
  - sched/membarrier: fix missing local execution of ipi_sync_rq_state()
  - sched/cpuacct: Fix charge cpuacct.usage_sys
  - kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail
  - hda: add phytium hda driver
  - hda: add phytium hda driver document
  - i2c: add Phytium i2c driver
  - i2c: add phytium i2c driver DT binding docs
  - Net: ethernet: Support 3snic 3s9xx network card


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2311.3.0.0226.26
changelog:
  - drm/qxl: fix UAF on handle creation
  - media: dvb-core: Fix use-after-free due to race at dvb_register_device()
  - media: media/dvb: Use kmemdup rather than duplicating its implementation
  - media: dvbdev: Fix memleak in dvb_register_device
  - drivers/gmjstcm: fix a dev_err() call in spi tcm device probe
  - SCSI: SSSRAID: Support 3SNIC 3S5XX serial RAID/HBA  controllers


author: Zhang Hua <zhanghua@cmss.chinamobile.com> - 4.19.90-2311.4.0.0227.26
changelog:
  - genirq: Take the proposed affinity at face value if force==true
  - optee: add phytium optee driver
  - optee: model OP-TEE as a platform device/driver
  - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
  - irqchip/gic-v3: Always trust the managed affinity provided by the core code
  - genirq: Always limit the affinity to online CPUs
  - genirq/msi: Shutdown managed interrupts with unsatifiable affinities
  - Revert "tcp: fix delayed ACKs for MSS boundary condition"
  - hwrng: Add support for Phytium SoC RNG
  - jpeg: Add a Phytium JPEG Engine driver
  - drivers/gmjstcm: import CVE-2011-1160 CVE-2011-1162 fixes to tcm.c
  - rtc: add phytium rtc driver document
  - rtc: add rtc drivers for Phytium SOCs
  - gpio: add phytium gpio driver
  - dwmac:add phytium dwmac driver
  - mailbox:add phytium mailbox driver document
  - mailbox: add phytium mailbox driver
  - mmc: add phytium mmc driver DT binding docs
  - mmc: add support for Phytium MMC
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty()
  - Revert "tty: fix pid memleak in disassociate_ctty()"
  - spi: add phytium spi driver DT binding docs
  - spi: add phytium spi support
  - qspi: add phytium qspi driver DT binding docs
  - qspi: add support for Phytium QSPI controller
  - gpio: add phytium gpio driver document
  - dwmac:add phytium dwmac driver DT binding docs
  - adc: add phytium adc driver
  - adc: add phytium adc driver document
  - w1: add phytium w1 driver
  - w1: add phytium w1 driver document
  - KEYPAD: Driver for the Phytium keypad port.
  - KEYPAD: Document for the Phytium keypad port.


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2403.1.0.0241.33
changelog:
  - powerpc/64s: Fix pte update for kernel memory on radix
  - i2c: validate user data in compat ioctl
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
  - ARM: footbridge: fix PCI interrupt mapping
  - usb: hub: Guard against accesses to uninitialized BOS descriptors
  - i2c: sprd: fix reference leak when pm_runtime_get_sync fails
  - net: qualcomm: rmnet: fix global oob in rmnet_policy
  - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  - media: dvbdev: Fix memory leak in dvb_media_device_free()
  - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
  - Input: appletouch - initialize work before device registration
  - i2c: cadence: fix reference leak when pm_runtime_get_sync fails
  - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
  - i2c: Fix a potential use after free
  - ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook
  - net: openvswitch: limit the number of recursions from action sets
  - usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup
  - usb: dwc3: core: balance phy init and exit
  - usb: dwc3: core: Do core softreset when switch mode
  - Input: powermate - fix use-after-free in powermate_config_complete
  - apparmor: avoid crash when parsed profile name is empty
  - hfsplus: prevent corruption in shrinking truncate
  - bus: qcom: Put child node before return
  - openvswitch: fix stack OOB read while fragmenting IPv4 packets
  - Drivers: hv: vmbus: Use after free in __vmbus_open()
  - sched/membarrier: reduce the ability to hammer on sys_membarrier
  - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails
  - PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter
  - parisc: Clear stale IIR value on instruction access rights trap
  - media: pvrusb2: fix use after free on context disconnection
  - powerpc/pseries/memhp: Fix access beyond end of drmem array
  - powerpc/pseries/memhotplug: Quieten some DLPAR operations
  - Revert "memcg: fix a UAF problem in drain_all_stock()"
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table
  - binder: signal epoll threads of self-work
  - i2c: hisi: Add clearing tx aempty interrupt operation
  - i2c: hisi: Optimized the value setting of maxwrite limit to fifo depth - 1
  - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
  - net: hso: fix NULL-deref on disconnect regression
  - net: hso: fix null-ptr-deref during tty device unregistration
  - usb: hso: check for return value in hso_serial_common_create()
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
  - mlxsw: spectrum_acl_tcam: Fix stack corruption
  - f2fs: fix to avoid dirent corruption
  - uio: Fix use-after-free in uio_open


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2403.2.0.0242.33
changelog:
  - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
  - NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
  - ALSA: hda: intel-sdw-acpi: harden detection of controller
  - soundwire: intel: filter SoundWire controller device search
  - crypto: scomp - fix req->dst buffer overflow
  - net: fix kabi check warning
  - net: Fix unwanted sign extension in netdev_stats_to_stats64()
  - net: bridge: use DEV_STATS_INC()
  - net: add atomic_long_t to net_device_stats fields
  - EDAC/thunderx: Fix possible out-of-bounds string access
  - netfilter: nft_compat: reject unused compat flag
  - ppp_async: limit MRU to 64K
  - inet: read sk->sk_family once in inet_recv_error()
  - bonding: remove print in bond_verify_device_path
  - af_unix: fix lockdep positive in sk_diag_dump_icons()
  - net: ipv4: fix a memleak in ip_setup_cork
  - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
  - virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
  - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
  - SUNRPC: Fix a suspicious RCU usage warning
  - tcp: Add memory barrier to tcp_push()
  - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
  - md: Whenassemble the array, consult the superblock of the freshest device
  - jbd2: correct the printing of write_flags in jbd2_write_superblock()
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  - wifi: mac80211: fix potential key use-after-free
  - drm: bridge/panel: Cleanup connector on bridge detach
  - uio_hv_generic: Fix a memory leak in error handling paths
  - of: unittest: Fix of_count_phandle_with_args() expected value message
  - of: unittest: Fix compile in the non-dynamic case
  - RDMA/rxe: Return CQE error if invalid lkey was supplied
  - nvme-loop: fix memory leak in nvme_loop_create_ctrl()
  - nvme-loop: don't put ctrl on nvme_init_ctrl error
  - !5060  net: fix possible store tearing in neigh_periodic_work()
  - RDMA/rxe: Clear all QP fields if creation failed
  - net: fix possible store tearing in neigh_periodic_work()
  - of: Fix double free in of_parse_phandle_with_args_map
  - pmdomain: core: Move the unused cleanup to a _sync initcall
  - tick/sched: Preserve number of idle sleeps across CPU hotplug events
  - acpi: property: Let args be NULL in __acpi_node_get_property_reference
  - tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
  - ACPI: LPIT: Avoid u32 multiplication overflow
  - audit: Send netlink ACK before setting connection in auditd_set
  - crypto: scompress - return proper error code for allocation failure
  - crypto: af_alg - Disallow multiple in-flight AIO requests
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
  - sched: remove wait bookmarks
  - filemap: remove use of wait bookmarks
  - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
  - ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
  - kyber: fix kabi broken in ->bio_merge()
  - kyber: fix out of bounds access when preempted
  - x86/alternatives: Disable KASAN in apply_alternatives()
  - soundwire: stream: fix memory leak in stream config error path
  - mpam/mpam_ctrlmon: update monitor config with its parent's ctrl_val
  - bnxt_en: Fix RX consumer index logic in the error path.
  - vt: fix memory overlapping when deleting chars in the buffer
  - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
  - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
  - arm64/mpam: support resctrl fs to show mounting option
  - arm64/mpam: set default feedback of last_cmd_status interface as null string
  - arm64/mpam: Skip updates of unrelated ctrl type
  - binder: fix async_free_space accounting for empty parcels
  - powerpc/64s: Fix crashes when toggling entry flush barrier
  - i2c: xiic: fix reference leak when pm_runtime_get_sync fails
  - scsi: qedf: Add pointer checks in qedf_update_link_speed()
  - vsock/virtio: free queued packets when closing socket
  - vsock/virtio: discard packets only when socket is really closed
  - virtio_vsock: Fix race condition in virtio_transport_recv_pkt
  - NFC: st21nfca: Fix memory leak in device probe and remove
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  - perf/x86/lbr: Filter vsyscall addresses
  - crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
  - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
  - HID: usbhid: fix info leak in hid_submit_ctrl
  - io_uring: fix overflows checks in provide buffers
  - block: add check that partition length needs to be aligned with block size
  - blk-mq: fix IO hang from sbitmap wakeup race
  - nvme: sanitize metadata bounce buffer for reads


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2403.3.0.0243.33
changelog:
  - s390/ptrace: handle setting of fpc register correctly
  - drm/msm/dpu: Add mutex lock in control vblank irq
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - crypto: algif_aead - fix uninitialized ctx->init
  - llc: call sock_orphan() at release time
  - ceph: fix deadlock or deadcode of misusing dget()
  - powerpc/lib: Validate size for vector operations
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
  - crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ
  - crypto: qcom-rng - ensure buffer for generate is completely filled
  - drm: Don't unref the same fb many times by mistake due to deadlock handling
  - net: nfc: llcp: Add lock when modifying device list
  - arm64/mpam: Fix use-after-free when deleting resource groups
  - arm64/mpam: remove kernfs_get() calls() and add kernfs_put() calls to prevent refcount leak
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
  - nfc: constify several pointers to u8, char and sk_buff
  - nfc: nci: assert requested protocol is valid
  - RDMA/srp: Do not call scsi_done() from srp_abort()
  - arm64/mpam: Expand the monitor number of the resctrl root


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2403.4.0.0244.33
changelog:
  - l2tp: pass correct message length to ip6_append_data
  - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
  - spi: spi-fsl-dspi: Fix a resource leak in an error handling path
  - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
  - x86/kvm: Do not try to disable kvmclock if it was not enabled
  - x86/kvm: Disable kvmclock on all CPUs on shutdown
  - pstore/ram: Fix crash when setting number of cpus to an odd number
  - llc: make llc_ui_sendmsg() more robust against bonding changes
  - llc: Drop support for ETH_P_TR_802_2.
  - tcp: add sanity checks to rx zerocopy
  - nfsd: fix use-after-free due to delegation race
  - jfs: fix uaf in jfs_evict_inode
  - JFS: fix memleak in jfs_mount
  - jfs: fix array-index-out-of-bounds in diNewExt
  - x86/kvm: Teardown PV features on boot CPU as well
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
  - ocfs2: issue zeroout to EOF blocks
  - ocfs2: fix zero out valid data
  - ocfs2: fix data corruption by fallocate
  - KVM: s390: fix setting of fpc register
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng
  - btrfs: abort in rename_exchange if we fail to insert the second ref
  - net: caif: fix memory leak in caif_device_notify
  - net: caif: fix memory leak in cfusbl_device_notify
  - net: caif: add proper error handling
  - net: caif: added cfserl_release function
  - rt2x00: Fix kabi breakage in struct rt2x00lib_ops
  - wifi: rt2x00: restart beacon queue when hardware reset
  - rt2x00: clear up IV's on key removal
  - rt2x00: clear IV's on start to fix AP mode regression
  - rt2800: add pre_reset_hw callback
  - rt2800: do not nullify initialization vector data
  - binder: fix race between mmput() and do_exit()
  - UBSAN: array-index-out-of-bounds in dtSplitRoot
  - jfs: fix slab-out-of-bounds Read in dtSearch
  - printk: avoid deadlock in panic
  - phonet/pep: refuse to enable an unbound pipe
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump
  - tomoyo: fix UAF write bug in tomoyo_write_control()


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2404.1.0.0245.33
changelog:
  - scsi: hisi_sas: Update disk locked timeout to 7 seconds
  - ARM: ep93xx: Add terminator to gpiod_lookup_table
  - drm/amd/amdgpu: fix refcount leak
  - netfilter: nft_limit: reject configurations that cause integer overflow
  - net: fec: fix the potential memory leak in fec_enet_init()
  - sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
  - asix: fix wrong return value in asix_check_host_enable()
  - asix: fix uninit-value in asix_mdio_read()
  - net: asix: fix uninit value bugs
  - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
  - ALSA: aica: Fix a long-time build breakage
  - net: hns3: update hns3 version to 24.3.1
  - net: hns3: fix port vlan filter not disabled problem in dynamic vlan mode
  - tipc: wait and exit until all work queues are done
  - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
  - ext4: Validate inode pa before using preallocation blocks
  - sr9800: Add check for usbnet_get_endpoints
  - NFS: Fix an Oopsable condition in __nfs_pageio_add_request()
  - tipc: skb_linearize the head skb when reassembling msgs
  - USB: usbfs: Don't WARN about excessively large memory allocations
  - IB/ipoib: Fix mcast list locking
  - RDMA/IPoIB: Fix error code return in ipoib_mcast_join
  - mac80211: fix locking in ieee80211_start_ap error path
  - arm64/mpam: Allocate new partid for the created ctrl group
  - arm64/mpam_ctrlmon: Update ctrl group config with rdtgrp's partid
  - net/tls: Use RCU API to access tls_ctx->netdev
  - net/tls: Remove the context from the list in tls_device_down
  - tls: Fix context leak on tls_device_down
  - net/tls: Resolve KABI break when backport bugfix of CVE-2021-47131
  - net/tls: Fix use-after-free after the TLS device goes down and up
  - net/tls: Replace TLS_RX_SYNC_RUNNING with RCU
  - arm64/mpam: Fix repeated enabling in mpam_enable()
  - i2c: i801: Don't generate an interrupt on bus reset
  - net: usb: fix possible use-after-free in smsc75xx_bind
  - net: usb: fix memory leak in smsc75xx_bind
  - ext4: avoid online resizing failures due to oversized flex bg
  - ext4: unify the type of flexbg_size to unsigned int
  - ext4: remove unnecessary check from alloc_flex_gd()
  - mm: ksm: fix use-after-free kasan report in ksm_might_need_to_copy
  - net: dsa: fix a crash if ->get_sset_count() fails
  - net: dsa: mt7530: fix VLAN traffic leaks again
  - net: dsa: mt7530: fix VLAN traffic leaks
  - mld: fix panic in mld_newpack()
  - mm/mlock: return EINVAL for illegal user memory range in mlock
  - tracing: Ensure visibility when inserting an element into tracing_map
  - serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
  - drm/amdgpu: Fix a use-after-free
  - usb: misc: fix improper handling of refcount in uss720_probe()
  - misc/uss720: fix memory leak in uss720_probe
  - net: fujitsu: fix potential null-ptr-deref
  - NFC: nci: fix memory leak in nci_allocate_device
  - net/smc: remove device from smcd_dev_list after failed device_add()
  - pciehp: clear p_slot->work.data after powering off a slot
  - netfilter: nf_tables: disallow anonymous set with timeout flag
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
  - btrfs: do not BUG_ON in link_to_fixup_dir
  - md/raid5: fix atomicity violation in raid5_cache_count
  - dm: revert partial fix for redundant bio-based IO accounting
  - netfilter: nf_tables: disallow timeout for anonymous sets
  - jfs: fix array-index-out-of-bounds in dbAdjTree
  - keys: safe concurrent user->{session,uid}_keyring access
  - crypto: af_alg - Work around empty control messages without MSG_MORE
  - crypto: af_alg - Fix regression on empty requests
  - crypto: algif_aead - Only wake up when ctx->more is zero


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2404.2.0.0246.33
changelog:
  - drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put()
  - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
  - net/sched: act_mirred: don't override retval if we already lost the skb
  - vfio/pci: Create persistent INTx handler
  - vfio: Introduce interface to flush virqfd inject workqueue
  - iavf: free q_vectors before queues in iavf_disable_vf
  - xen/events: close evtchn after mapping cleanup
  - vfio/pci: Disable auto-enable of exclusive INTx IRQ
  - genirq: Add IRQF_NO_AUTOEN for request_irq/nmi()
  - vfio/pci: Lock external INTx masking ops
  - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
  - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
  - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
  - fs/proc: do_task_stat: use __for_each_thread()
  - exit: Use the correct exit_code in /proc/<pid>/stat
  - net: ip_tunnel: prevent perpetual headroom growth
  - wifi: mac80211: fix race condition on enabling fast-xmit
  - nilfs2: fix data corruption in dsync block recovery for small block sizes
  - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
  - nilfs2: fix potential bug in end_buffer_async_write
  - nilfs2: fix buffer corruption due to concurrent device reads
  - net/sched: act_mirred: use the backlog for mirred ingress
  - btrfs: don't drop extent_map for free space inode on write error
  - PM / devfreq: Synchronize devfreq_monitor_[start/stop]
  - KVM: s390: vsie: fix race during shadow creation
  - mm/swap: fix race when skipping swapcache
  - ipv6: sr: fix possible use-after-free and null-ptr-deref
  - btrfs: dev-replace: properly validate device names
  - fbdev: savage: Error out if pixclock equals zero
  - RDMA/qedr: Fix qedr_create_user_qp error flow
  - RDMA/srpt: Support specifying the srpt_service_guid parameter
  - ext4: fix double-free of blocks due to wrong extents moved_len
  - dm-crypt: don't modify the data when using authenticated encryption
  - dmaengine: ti: edma: Add some null pointer checks to the edma_probe
  - dmaengine: ti: edma: Fix error return code in edma_probe()
  - dmaengine: ti: edma: add missed operations
  - dmaengine: ti: edma: fix missed failure handling
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
  - fbdev: sis: Error out if pixclock equals zero
  - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2404.3.0.0247.34
changelog:
  - bpf: Fix hashtab overflow check on 32-bit arches
  - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
  - tracing/trigger: Fix to return error if failed to alloc snapshot
  - x86/xen: Add some null pointer checking to smp.c
  - ima: Avoid blocking in RCU read-side critical section
  - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  - media: xc4000: Fix atomicity violation in xc4000_get_frequency
  - scsi: advansys: Fix kernel pointer leak
  - Bluetooth: Avoid potential use-after-free in hci_error_reset
  - gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
  - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
  - arp: Prevent overflow in arp_req_get().
  - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
  - usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
  - ubi: Check for too small LEB size in VTBL code
  - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
  - arm64/mpam: Not allowed setting 0 to cache portion bit mask
  - arm64/mpam: return EOPNOTSUPP when changing rmid of monitor group or resource group with monitor
  - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
  - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2405.1.0.0248.34
changelog:
  - bpf: Fix stackmap overflow check on 32-bit arches
  - bpf: Check for integer overflow when using roundup_pow_of_two()
  - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
  - erofs: fix pcluster use-after-free on UP platforms
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  - fat: fix uninitialized field in nostale filehandles
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
  - af_unix: Fix garbage collector racing against connect()
  - scsi: target: core: Add TMF to tmr_list handling
  - rtmutex: Add acquire semantics for rtmutex lock acquisition slow path
  - tun: Fix xdp_rxq_info's queue_index when detaching
  - btrfs: fix hang during unmount when stopping a space reclaim worker
  - Btrfs: fix crash during unmount due to race with delayed inode workers
  - binder: check offset alignment in binder_get_object()
  - mm/madvise: fix potential pte_unmap_unlock pte error
  - PCI/IOV: Improve performance of creating VFs concurrently
  - drm/amdgpu: validate the parameters of bo mapping operations more clearly
  - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va
  - drm/amdgpu: restrict bo mapping within gpu address limits
  - drm/amdgpu: check alignment on CPU page for bo map
  - quota: Fix potential NULL pointer dereference
  - quota: check time limit when back out space/inode change
  - quota: code cleanup for __dquot_alloc_space()
  - cifs: fix underflow in parse_server_interfaces()
  - drm/bridge: adv7511: fix crash on irq during probe
  - sched/rt: Disallow writing invalid values to sched_rt_period_us
  - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
  - geneve: make sure to pull inner header in geneve_rx()
  - cpuset: fix race between rebuild scheduler domains and hotplug work
  - x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
  - hsr: Fix uninit-value access in hsr_get_node()
  - net: hsr: fix placement of logical operator in a multi-line statement
  - amdkfd: use calloc instead of kzalloc to avoid integer overflow
  - net/bnx2x: Prevent access to a freed page in page_pool
  - drm/amdgpu: Reset IH OVERFLOW_CLEAR bit
  - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
  - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
  - media: rc: bpf attach/detach requires write permission
  - nfc: nci: free rx_data_reassembly skb on NCI device cleanup
  - IB/hfi1: Fix a memleak in init_credit_return
  - Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  - Bluetooth: Move {min,max}_key_size debugfs into hci_debugfs_create_le
  - netfilter: nf_conntrack_h323: Add protection for bmp length out of range
  - scsi: lpfc: Fix link down processing to address NULL pointer dereference
  - cachefiles: fix memory leak in cachefiles_add_cache()
  - RDMA/srpt: Do not register event handler until srpt device is fully setup
  - mm: oom_kill: fix KABI broken by "oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup"
  - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup
  - sched: Allocate a new task_struct_resvd object for fork task
  - media: pvrusb2: fix uaf in pvr2_context_set_notify
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
  - vfio/platform: Create persistent IRQ handlers
  - vfio/platform: Disable virqfds on cleanup
  - scsi: core: Fix scsi_mode_sense() buffer length handling
  - scsi: core: Reshuffle response handling in scsi_mode_sense()
  - scsi: core: Fixup calling convention for scsi_mode_sense()
  - dm: call the resume method on internal suspend
  - tty: fix read of tty->pgrp outside of ctrl_lock
  - btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2405.4.0.0250.35
changelog:
  - ext4: fix corruption during on-line resize
  - Bluetooth: af_bluetooth: Fix deadlock
  - sched/all: Change all BUG_ON() instances in the scheduler to WARN_ON_ONCE()
  - powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
  - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
  - btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
  - firewire: nosy: ensure user_length is taken into account when fetching packet contents
  - net: openvswitch: Fix Use-After-Free in ovs_ct_exit
  - net: gtp: Fix Use-After-Free in gtp_dellink
  - s390/zcrypt: fix reference counting on zcrypt card objects
  - sk_buff: Fix KABI break for the modification of struct sk_buff
  - inet: inet_defrag: prevent sk release while still in use
  - inet: frags: re-introduce skb coalescing for local delivery
  - net: Fix KABI break for introducing is_skb_wmem()
  - skb_expand_head() adjust skb->truesize incorrectly
  - skbuff: introduce skb_expand_head()
  - tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge()
  - tcp: Clean up kernel listener's reqsk in inet_twsk_purge()


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2405.5.0.0251.35
changelog:
  - usb: dwc3: ep0: fix NULL pointer exception
  - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
  - isdn: mISDN: netjet: Fix crash in nj_probe:
  - soc: fsl: qbman: Always disable interrupts when taking cgr_lock
  - drm/client: Fully protect modes[] with dev->mode_config.mutex
  - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
  - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL
  - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
  - perf/core: Bail out early if the request AUX area is out of bound
  - net/tls: Fix flipped sign in tls_err_abort() calls
  - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
  - ptp: fix code indentation issues
  - ptp: Fix possible memory leak in ptp_clock_register()
  - drm/radeon: fix a possible null pointer dereference
  - fbmon: prevent division by zero in fb_videomode_from_videomode()
  - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
  - ipv6: Fix infinite recursion in fib6_dump_done().
  - sched/rt: Fix rt_runtime leaks with cpu hotplug and RT_RUNTIME_SHARE
  - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
  - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs
  - f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances
  - thermal: core: prevent potential string overflow
  - media: bttv: fix use after free error due to btv->timeout timer
  - net/mlx5e: fix a double-free in arfs_create_groups
  - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser
  - netrom: Fix a data-race around sysctl_netrom_transport_timeout
  - netfilter: nft_flow_offload: reset dst in route object after setting up flow
  - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
  - io_uring: drop any code related to SCM_RIGHTS
  - io_uring/unix: drop usage of io_uring socket
  - drm/amd/pm: fix a double-free in si_dpm_init
  - calipso: fix memory leak in netlbl_calipso_add_pass()
  - netlabel: remove unused parameter in netlbl_netlink_auditinfo()
  - net: netlabel: Fix kerneldoc warnings
  - drm/radeon: possible buffer overflow
  - netrom: Fix data-races around sysctl_net_busy_read
  - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
  - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
  - dm snapshot: fix lockup in dm_exception_table_exit
  - btrfs: send: handle path ref underflow in header iterate_inode_ref()
  - irqchip/gic-v3-its: Prevent double free on error
  - ip: Treat IPv4 segment's lowest address as unicast
  - x86/CPU/AMD: Update the Zenbleed microcode revisions
  - cpu/SMT: Make SMT control more robust against enumeration failures
  - scsi: sr: Do not leak information in ioctl


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2405.5.0.0251.36
changelog:
  - bcache: avoid oversized read request in cache missing code path
  - net: hamradio: fix memory leak in mkiss_close
  - smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
  - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
  - mISDN: fix possible use-after-free in HFC_cleanup()
  - memory: fsl_ifc: fix leak of private memory on probe failure
  - tty: vcc: Add check for kstrdup() in vcc_probe()
  - ppdev: Add an error check in register_device
  - ppdev: Remove usage of the deprecated ida_simple_xx() API
  - udf: Fix NULL pointer dereference in udf_symlink function
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
  - hugetlb: pass head page to remove_hugetlb_page()
  - hugetlbfs: fix hugetlbfs_statfs() locking
  - hugetlb: make free_huge_page irq safe
  - hugetlb: change free_pool_huge_page to remove_pool_huge_page
  - hugetlb: call update_and_free_page without hugetlb_lock
  - hugetlb: create remove_hugetlb_page() to separate functionality
  - Revert "hugetlb: make free_huge_page irq safe"
  - Revert "hugetlbfs: fix hugetlbfs_statfs() locking"
  - md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
  - md/dm-raid: don't call md_reap_sync_thread() directly
  - watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()
  - net: fix uninit-value in caif_seqpkt_sendmsg
  - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
  - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
  - drm/amd/pm: Update intermediate power state for SI
  - pinctrl: core: delete incorrect free in pinctrl_enable()
  - comedi: dt9812: fix DMA buffers on stack
  - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
  - NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
  - arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
  - arm64: Make CPU_BIG_ENDIAN depend on ld.bfd or ld.lld 13.0.0+
  - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
  - iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
  - tty: serial: 8250: serial_cs: Fix a memory leak in error handling path
  - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
  - hugetlbfs: fix hugetlbfs_statfs() locking
  - Bluetooth: Fix memory leak in hci_req_sync_complete()
  - drm/nouveau/debugfs: fix file release memory leak
  - kvm: fix previous commit for 32-bit builds
  - kvm: avoid speculation-based attacks from out-of-range memslot accesses
  - perf hist: Fix memory leak of a perf_hpp_fmt
  - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
  - net/mlx5: Properly link new fs rules into the tree
  - wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
  - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
  - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
  - mcb: fix error handling in mcb_alloc_bus()
  - jfs: fix array-index-out-of-bounds in dbFindLeaf
  - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
  - mac80211: fix use-after-free in CCMP/GCMP RX
  - ipvlan: add ipvlan_route_v6_outbound() helper
  - powerpc/mm: Fix lockup on kernel exec fault
  - atm: iphase: fix possible use-after-free in ia_module_exit()
  - netfilter: conntrack: serialize hash resizes and cleanups
  - usb: udc: remove warning when queue disabled ep
  - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
  - sysv: don't call sb_bread() with pointers_lock held
  - gfs2: ignore negated quota changes
  - fs/jfs: Add validity check for db_maxag and db_agpref
  - fs: jfs: fix shift-out-of-bounds in dbAllocAG
  - jfs: fix divide error in dbNextAG
  - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
  - x86/mm/pat: fix VM_PAT handling in COW mappings
  - net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()
  - ocfs2: mount fails with buffer overflow in strlen
  - drm/msm: Fix null pointer dereference on pointer edp
  - RDMA: Verify port when creating flow rule
  - hugetlb: make free_huge_page irq safe
  - mm/hugetlb: defer freeing of huge pages if in non-task context
  - atm: nicstar: Fix possible use-after-free in nicstar_cleanup()
  - HID: usbhid: free raw_report buffers in usbhid_stop
  - ACPI: video: check for error while searching for backlight device parent
  - ALSA: hda: Fix possible null-ptr-deref when assigning a stream
  - cpu/hotplug: Don't offline the last non-isolated CPU
  - usbnet: fix error return code in usbnet_probe()
  - usbnet: sanity check for maxpacket
  - jfs: fix array-index-out-of-bounds in diAlloc
  - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
  - ipack: ipoctal: fix stack information leak
  - pinctrl: single: fix potential NULL dereference
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
  - sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
  - x86/ioapic: Unbreak check_timer()
  - irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling
  - genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()
  - HID: betop: fix slab-out-of-bounds Write in betop_probe
  - scsi: iscsi: Fix iscsi_task use after free
  - scsi: iscsi: Have abort handler get ref to conn
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
  - mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN
  - comedi: vmk80xx: fix expression for tx buffer size
  - comedi: vmk80xx: fix transfer-buffer overflows
  - block: prevent division by zero in blk_rq_stat_sum()
  - vt: fix unicode buffer corruption when deleting characters
  - ACPI: CPPC: Fix access width used for PCC registers
  - ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
  - ACPI: CPPC: Use access_width over bit_width for system memory accesses
  - ACPI: CPPC: Fix up I/O port access in cpc_read()
  - ACPI: CPPC: Implement support for SystemIO registers
  - KVM: x86: Handle SRCU initialization failure during page track init
  - selinux: avoid dereference of garbage after mount failure
  - crypto: s390/aes - Fix buffer overread in CTR mode
  - x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ
  - block: fix overflow in blk_ioctl_discard()


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2405.5.0.0251.37
changelog:
  - net: fix out-of-bounds access in ops_init
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
  - staging: rtl8712: fix use-after-free in rtl8712_dl_fw
  - PCI/PM: Drain runtime-idle callbacks before driver removal
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
  - watchdog: Fix possible use-after-free in wdt_startup()
  - media: zr364xx: fix memory leak in zr364xx_start_readpipe
  - netrom: Fix use-after-free of a listening socket.
  - netrom: Decrease sock refcount when sock timers expire
  - memory: fsl_ifc: fix leak of IO mapping on probe failure
  - sched: remove WARN_ON on checking rq->tmp_alone_branch
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
  - tcp: properly terminate timers for kernel sockets
  - mptcp: add sk_stop_timer_sync helper
  - media: imon: fix access to invalid resource for the second interface
  - regmap: Fix possible double-free in regcache_rbtree_exit()
  - isdn: mISDN: Fix sleeping function called from invalid context
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
  - can: pch_can: pch_can_rx_normal: fix use after free
  - net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound
  - mmc: mmc_spi: fix error handling in mmc_spi_probe()
  - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
  - ipv6: Fix potential uninit-value access in __ip6_make_skb()
  - erspan: make sure erspan_base_hdr is present in skb->head
  - fs/9p: only translate RWX permissions for plain 9P2000
  - netfilter: complete validation of user input
  - netfilter: validate user input for expected length
  - smackfs: restrict bytes count in smk_set_cipso()
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker
  - can: peak_pci: peak_pci_remove(): fix UAF
  - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
  - net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
  - mmc: sdhci-msm: pervent access to suspended controller
  - gfs2: Fix use-after-free in gfs2_glock_shrink_scan
  - net: cdc_eem: fix tx fixup skb leak
  - tipc: fix a possible memleak in tipc_buf_append
  - staging: greybus: uart: fix tty use after free
  - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
  - isofs: Fix out of bound access for corrupted isofs image
  - usb: dwc2: Fix memory leak in dwc2_hcd_init
  - usb: dwc2: check return value after calling platform_get_resource()
  - pwm: Fix double shift bug
  - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - drm/amd/display: Avoid NULL dereference of timing generator
  - i2c: smbus: fix NULL function pointer dereference
  - ALSA: pcm: oss: Fix negative period/buffer sizes
  - ALSA: pcm: oss: Fix a few more UBSAN fixes
  - ipack: ipoctal: fix module reference leak
  - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
  - drm/sched: Avoid data corruptions
  - platform/x86: wmi: Fix opening of char device
  - i40e: Fix freeing of uninitialized misc IRQ vector
  - comedi: ni_usb6501: fix NULL-deref in command paths
  - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
  - efi/capsule-loader: fix incorrect allocation size
  - perf report: Fix memory leaks around perf_tip()
  - nilfs2: fix underflow in second superblock position calculations
  - tcp: fix page frag corruption on page fault
  - soc: qcom: llcc: Handle a second device without data corruption
  - ocfs2: fix data corruption after conversion from inline format
  - s390/dasd: protect device queue against concurrent access
  - powerpc/powernv: Add a null pointer check in opal_event_init()


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2405.5.0.0251.41
changelog:
  - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
  - PCI: aardvark: Fix kernel panic during PIO transfer
  - PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
  - PCI: aardvark: Don't rely on jiffies while holding spinlock
  - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
  - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
  - RDMA/cma: Fix rdma_resolve_route() memory leak
  - dhugetlb: use rcu lock to protect hpool
  - watchdog: Fix possible use-after-free by calling del_timer_sync()
  - IB/mlx5: Fix initializing CQ fragments buffer
  - soc: fsl: qbman: Use raw spinlock for cgr_lock
  - net: rds: fix memory leak in rds_recvmsg
  - ALSA: seq: Fix race of snd_seq_timer_open()
  - ALSA: pcm: oss: Limit the period size to 16MB
  - ALSA: pcm: oss: Fix potential out-of-bounds shift
  - IB/hfi1: Restore allocated resources on failed copyout
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
  - misc/libmasm/module: Fix two use after free in ibmasm_init_one
  - net: encx24j600: check error in devm_regmap_init_encx24j600
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
  - i2c: acpi: fix resource leak in reconfiguration device addition
  - net: relax socket state check at accept time.
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
  - bna: ensure the copied buf is NUL terminated
  - nfp: Fix memory leak in nfp_cpp_area_cache_add()
  - comedi: vmk80xx: fix bulk-buffer overflow
  - net: ti: fix UAF in tlan_remove_one
  - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
  - drm/vmwgfx: Fix invalid reads in fence signaled events
  - ipv6: prevent NULL dereference in ip6_output()
  - igb: Fix use-after-free error during reset
  - fs/jfs: Add check for negative db_l2nbperpage
  - jfs: jfs_dmap: Validate db_l2nbperpage while mounting
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  - llc: verify mac len before reading mac header
  - tipc: fix UAF in error path
  - drm/amd/display: Skip on writeback when it's not applicable
  - ubifs: Set page uptodate in the correct place
  - net/sched: act_skbmod: prevent kernel-infoleak
  - usb: fix various gadget panics on 10gbps cabling
  - wifi: cfg80211: check A-MSDU format more carefully
  - net: batman-adv: fix error handling
  - net: macb: fix use after free on rmmod
  - phonet/pep: fix racy skb_queue_empty() use
  - dyndbg: fix old BUG_ON in >control parser
  - phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init()
  - net: ieee802154: fix null deref in parse dev addr
  - batman-adv: Avoid infinite loop trying to resize local TT
  - locking/ww_mutex/test: Fix potential workqueue corruption
  - EDAC/amd64: Adjust UMC channel for Hygon family 18h model 6h
  - x86/amd_nb: Get DF ID from F5 device for Hygon family 18h model 6h
  - EDAC/amd64: Fix intlv_num_chan for Hygon family 18h model 4h
  - EDAC/amd64: Revert hi_addr_offset for Hygon family 18h model 4h
  - ALSA: hda: Fix single byte write failure issue for Hygon
  - ALSA: hda: Add Hygon HD-Audio support
  - perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 6h


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2405.5.0.0251.43
changelog:
  - xhci: Fix commad ring abort, write all 64 bits to CRCR register.
  - xhci: Fix command ring pointer corruption while aborting a command
  - ASoC: ops: Fix bounds check for _sx controls
  - ipv6: fib6_rules: flush route cache when rule is changed
  - drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
  - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
  - net: bridge: fix corrupted ethernet header on multicast-to-unicast
  - net: bridge: fix multicast-to-unicast with fraglist GSO
  - net: mark racy access on sk->sk_rcvbuf
  - net l2tp: drop flow hash on forward
  - firmware: arm_scpi: Fix string overflow in SCPI genpd driver
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
  - vxlan: Fix regression when dropping packets due to invalid src addresses
  - udp: preserve the connected status if only UDP cmsg
  - vxlan: drop packets from invalid src-address
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
  - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
  - drm/amd/display: Fix potential index out of bounds in color transformation function
  - powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06
  - spi: fix kabi breakage in struct spi_controller
  - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
  - of: module: add buffer overflow check in of_modalias()
  - can: mcba_usb_start(): add missing urb->transfer_dma initialization
  - can: mcba_usb: fix memory leak in mcba_usb
  - inet_diag: fix kernel-infoleak for UDP sockets
  - ftrace: Fix possible use-after-free issue in ftrace_location()
  - batman-adv: Avoid WARN_ON timing related checks
  - coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()
  - kprobes: Fix possible use-after-free issue on kprobe registration
  - can: sja1000: fix use after free in ems_pcmcia_add_card()
  - sched: smart_grid: fix potential NULL pointer dereference
  - can: j1939: fix Use-after-Free, hold skb ref while in use
  - can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer()
  - can: j1939: transport: add j1939_session_skb_find_by_offset() function
  - serial: 8250_exar: Don't remove GPIO device on suspend
  - net: fix kabi breakage in struct dst_ops
  - net: fix __dst_negative_advice() race
  - iio: mma8452: Fix trigger reference couting
  - media: tc358743: register v4l2 async device only after successful setup
  - media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half
  - wifi: nl80211: don't free NULL coalescing rule
  - wl1251: Fix possible buffer overflow in wl1251_cmd_scan
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found.
  - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
  - hid: cp2112: Fix duplicate workqueue initialization
  - arm64/mpam: Fix softlockup when reading mondata
  - arm64/mpam: Fix wrong seconds to jiffies conversion
  - arm64/mpam: change allocation mode from GFP_KERNEL to GFP_NOWAIT
  - mpam/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup
  - mpam/resctrl: Clean up resctrl_group_rmdir_[ctrl/mon]()
  - mpam/resctrl: Clean up unused function parameter in mkdir path
  - mpam/resctrl: Fix a deadlock due to inaccurate reference
  - atl1c: Work around the DMA RX overflow issue
  - Fix page corruption caused by racy check in __free_pages
  - mm, slub: fix potential memoryleak in kmem_cache_open()
  - rpmsg: virtio: Free driver_override when rpmsg_remove()
  - scsi: mpt3sas: Fix kernel panic during drive powercycle test
  - loop: use lo->lo_disk for kobject_uevent
  - jbd2: export jbd2_journal_[grab|put]_journal_head
  - ocfs2: fix a deadlock when commit trans
  - ocfs2: fix race between searching chunks and release journal_head from buffer_head


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2405.5.0.0251.62
changelog:
  - acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
  - btrfs: clean up our handling of refs == 0 in snapshot delete
  - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
  - drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
  - ASoC: meson: axg-card: fix 'use-after-free'
  - rtmutex: Drop rt_mutex::wait_lock before scheduling
  - net: USB: Fix wrong-direction WARNING in plusb.c


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2405.5.0.0251.63
changelog:
  - ACPI: processor: Fix memory leaks in error paths of processor_add()
  - ntp: Safeguard against time_constant overflow
  - ntp: Clamp maxerror and esterror to operating range
  - Revert "ntp: Avoid undefined behaviour in second_overflow()"
  - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
  - hrtimer: Prevent queuing of hrtimer without a function callback
  - smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
  - ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
  - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
  - pinctrl: core: fix possible memory leak when pinctrl_enable() fails
  - selinux: fix potential counting error in avc_add_xperms_decision()
  - ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
  - ELF: fix kernel.randomize_va_space double read
  - md/raid1: don't free conf on raid0_run failure


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2405.5.0.0251.64
changelog:
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  - net: do not delay dst_entries_add() in dst_release()
  - NFC: nci: Bounds check struct nfc_target arrays
  - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
  - swap: stop add to avail list if swap is full
  - pinctrl: single: fix potential NULL dereference in pcs_get_function()
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk
  - gpio: amd8111: Fix PCI device reference count leak
  - media: pci: cx23885: check cx23885_vdev_init() return
  - ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
  - jfs: Fix uninit-value access of new_ea in ea_buffer
  - svm: fix UAF/Double Free in svm
  - nbd: fix race between timeout and normal completion
  - gtp: fix a potential NULL pointer dereference
  - gtp: make sure only SOCK_DGRAM UDP sockets are accepted
  - mm/swapfile: skip HugeTLB pages for unuse_vma
  - hwmon: (coretemp) Check for null before removing sysfs attrs
  - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
  - udf: Fix preallocation discarding at indirect extent boundary
  - btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
  - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
  - usb: dwc3: core: Prevent USB core invalid event buffer address access
  - usb: dwc3: core: Skip setting event buffers for host only controllers
  - cgroup: Protect css->cgroup write under css_set_lock
  - ida: Fix crash in ida_free when the bitmap is empty
  - net: busy-poll: use ktime_get_ns() instead of local_clock()
  - SUNRPC: Fix a race to wake a sync task
  - net: linkwatch: use system_unbound_wq
  - ext4: avoid deadlock in fs reclaim with page writeback


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2405.5.0.0251.65
changelog:
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem
  - ext4: explicitly exit when ext4_find_inline_entry returns an error
  - ext4: return error on ext4_find_inline_entry
  - ext4: ext4_search_dir should return a proper error
  - ext4: fix RENAME_WHITEOUT handling for inline directories
  - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
  - resource: fix region_intersects() vs add_memory_driver_managed()
  - mm/resource: Use resource_overlaps() to simplify region_intersects()
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect
  - Bluetooth: Return whether a connection is outbound
  - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
  - net: fix crash when config small gso_max_size/gso_ipv4_max_size
  - ext4: update orig_path in ext4_find_extent()
  - ASoC: soc-pcm: Add NULL check in BE reparenting
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
  - net: mvneta: Fix an out of bounds check
  - net: mvneta: Prevent out of bounds read in mvneta_config_rss()
  - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
  - ext4: fix double brelse() the buffer of the extents path
  - ext4: aovid use-after-free in ext4_ext_insert_extent()
  - ext4: avoid use-after-free in ext4_ext_show_leaf()
  - nfs: maintain nfs_server in the reclaim process
  - nfs: fix memory leak in error path of nfs4_do_reclaim
  - Bluetooth: Fix not cleanup led when bt_init fails
  - igb: Initialize mailbox message for VF reset
  - tipc: guard against string buffer overrun
  - net/9p: Fix a potential socket leak in p9_socket_open
  - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
  - iio: health: afe4403: Fix oob read in afe4403_read_raw
  - ACPI: sysfs: validate return type of _STR method
  - NFSv4: release seqid when open failed for nfs4.0
  - media: venus: fix use after free bug in venus_remove due to race condition
  - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too
  - ext4: fix slab-use-after-free in ext4_split_extent_at()
  - ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path
  - HID: core: fix shift-out-of-bounds in hid_report_raw_event
  - slip: make slhc_remember() more robust against malicious packets
  - net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
  - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
  - net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
  - selinux: add the processing of the failure of avc_add_xperms_decision()
  - smack: tcp: ipv4, fix incorrect labeling
  - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
  - usb: gadget: uvc: Prevent buffer overflow in setup handler
  - net/xen-netback: prevent UAF in xenvif_flush_hash()
  - net: phy: fix null-ptr-deref while probe() failed
  - ppp: fix ppp_async_encode() illegal access
  - fbdev: pxafb: Fix possible use after free in pxafb_task()
  - nilfs2: fix state management in error path of log writing function
  - init: Initialize noop_backing_dev_info early
  - writeback: Fix inode->i_io_list not be protected by inode->i_lock error
  - firmware_loader: Block path traversal
  - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2405.5.0.0251.66
changelog:
  - security/keys: fix slab-out-of-bounds in key_task_permission
  - net: fix data-races around sk->sk_forward_alloc
  - nfs: fix rpc_task use-after-free when open and close different files concurrently


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2405.5.0.0251.67
changelog:
  - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
  - posix-clock: Fix missing timespec64 check in pc_clock_settime()
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
  - drm/amd: Guard against bad data for ATIF ACPI method
  - Revert "sched/dynamic_affinity: fix preffered_cpu offline problem"
  - sched/dynamic_affinity: fix preffered_cpu offline problem
  - mm: split critical region in remap_file_pages() and invoke LSMs in between
  - mm: call the security_mmap_file() LSM hook in remap_file_pages()
  - mm/mmap.c: don't unlock VMAs in remap_file_pages()
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
  - serial: core: Fix atomicity violation in uart_tiocmget
  - sched: smart_grid: Prevent double-free in sched_grid_qos_free
  - fs: call fsnotify_sb_delete after evict_inodes


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2405.5.0.0251.68
changelog:
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
  - NFS: make sure open context mode have FMODE_EXEC when file open for exec
  - media: s5p-jpeg: prevent buffer overflows
  - btrfs: reinitialize delayed ref list after deleting it from the list
  - nfs: Fix KMSAN warning in decode_getfattr_attrs()
  - irqchip/gic-v3: Force propagation of the active state with a read-back
  - ceph: remove the incorrect Fw reference check when dirtying pages
  - nilfs2: propagate directory read errors from nilfs_find_entry()


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2405.5.0.0251.69
changelog:
  - fs: Fix uninitialized value issue in from_kuid and from_kgid
  - wifi: ath10k: Fix memory leak in management tx
  - ath10k: Remove msdu from idr when management pkt send fails
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
  - nfs: ignore SB_RDONLY when mounting nfs
  - nfs: pass flags to second superblock
  - bpf: Fix out-of-bounds write in trie_get_next_key()
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister
  - sctp: properly validate chunk size in sctp_sf_ootb()
  - nilfs2: fix kernel bug due to missing clearing of checked flag
  - vfs: fix race between evice_inodes() and find_inode()&iput()
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2405.5.0.0251.70
changelog:
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
  - USB: serial: io_edgeport: fix use after free in debug printk
  - usb: typec: altmode should keep reference to parent
  - HID: core: zero-initialize the report buffer
  - media: v4l2-tpg: prevent the risk of a division by zero
  - dm cache: fix potential out-of-bounds access on the first resume
  - dm cache: optimize dirty bit checking with find_next_bit when resizing
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing


author: bajing <bajing@cmss.chinamobile.com> - 4.19.90-2405.5.0.0251.71
changelog:
  - bclinux: txgbe: support to pcie bus reset
  - bclinux: txgbe: fix ipv6 with extension header bug
  - bclinux: txgbe: add support for 25G mode


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-11
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386


author: lutianxiong<lutianxiong@huawei.com> - 1.16.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix invalid read in ares_parse_soa_reply.c found during fuzzing


author: chixinze <xmdxcxz@gmail.com> - 1:12.2.8-13
changelog:
  - fix CVE-2020-27781
  - ceph-volume-client: allow atomic updates for RADOS objects
  - qa: make test_volume_client.py py3 compatible


author: liuqinfei <liuqinfei5@hisilicon.com> - 1:12.2.8-17
changelog:
  - Synchronize the performance optimization of the pick_a_shard
  - function in the upstream community.


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 19.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix the error level logs displayed for the cloud-init-local service


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. check task list to avoid unnecessary cleanup.
         2. fix dead loop
         3. cleanup dangling shim by brand new context
         4. fix potential panic for task in unknown state


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-201
changelog:
  - Type:bugfix                                          
  - ID:NA                                                   
  - SUG:NA
  - DESC:reduce permissions for bundle dir to fix CVE-2021-41103


author: fuanan <fuanan3@huawei.com> - 2.13-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add 'autoconf automake' to BuildRequires to use autoreconf command


author: eastb233 <xiezhiheng@huawei.com> - 7.3.0-20211123.42
changelog:
  - fix-PR83666-punt-BLKmode-when-expand_debug_expr.patch: New patch for bugfix
  - fix-AArch64-128-bit-immediate-ICEs.patch: Likewise
  - gcc.spec: Add new patch


author: kkz <zhaoshuang@uniontech.com> - 7.3.0-48
changelog:
  - Add patch Remove-_GLIBCXX_USE_INT128-autoconf-macro.patch to resolve int128 related compile issue
  - refer to https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=ad0a3be4df5eecc79075d899fd79179d0f61270e
             https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff;h=29a9de9b40277af98515eabebb75be1f154e9505
             https://www.mail-archive.com/gcc-patches@gcc.gnu.org/msg259436.html


author: yanglongkang <yanglongkang@huawei.com> - 2.3.3-4
changelog:
  - add buildrequire gcc
    add make check
    backport upstream patches to solve several problems -epoch2


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-Check-segment-gaps-regardless-of-heap-space.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-Fix-posible-buffer-overflows-in-LUKS-conversion.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-Fix-a-memleak-in-blockwise-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-CVE-2021-4122.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-4
changelog:
  - Type:cves
  - ID:CVE-2020-27840 CVE-2021-20277 CVE-2021-20254
  - SUG:NA
  - DESC:fix CVE-2020-27840 CVE-2021-20277 CVE-2021-20254


author: seuzw <930zhaowei@163.com> - 4.11.12-6
changelog:
  - Type:cves
  - ID:CVE-2020-14318 CVE-2020-14323 CVE-2020-14383 
  - SUG:NA
  - DESC:fix CVE-2020-14318 CVE-2020-14323 CVE-2020-14383


author: xihaochen <xihaochen@huawei.com> - 4.11.12-8
changelog:
  - Type:cves
  - ID:CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738
  - SUG:NA
  - DESC:fix CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-9
changelog:
  - Type:cves
  - ID:CVE-2021-43566
  - SUG:NA
  - DESC:backport patches to fix CVE-2021-43566:
         s3/lib: add parent_smb_fname function
         smbd: use parent_smb_fname in check_parent_access
         smbd: use parent_smb_fname in inherit_new_acl
         s3/VFS: Add SMB_VFS_MKDIRAT
         vfs_full_audit: pass conn to smb_fname_str_do_log
         s3/VFS: change connection_struct cwd_fname to cwd_fsp
         s3/smbd: Change mkdir_internal to call SMB_VFS_MKDIRAT
         smbd: use parent_smb_fname in mkdir_internal
         fix CVE-2021-43566


author: yuboyun <yuboyun@huawei.com> - 4.11.6-8
changelog:
  - Type:cves
  - ID:CVE-2020-10730 CVE-2020-10745 CVE-2020-14303 CVE-2020-10760
  - SUG:NA
  - DESC:fix CVE-2020-10730CVE-2020-10745CVE-2020-14303CVE-2020-10760


author: yanglu <yanglu72@huawei.com> - 7.71.1-11
changelog:
  - Type:CVE
  - CVE:CVE-2021-22945 CVE-2021-22946 CVE-2021-22947
  - SUG:NA
  - DESC:fix CVE-2021-22945 CVE-2021-22946 CVE-2021-22947


author: gaoxingwang<gaoxingwang@huawei.com> - 7.71.1-12
changelog:
  - Type:CVE
  - CVE:CVE-2021-22922 CVE-2021-22923
  - SUG:NA
  - DESC:disable metalink to fix CVE-2021-22922 and CVE-2021-22923


author: liyanan <liyanan32@huawei.com> - 2.1.27-13
changelog:
  - Split cyrus-sasl-ldap cyrus-sasl-gs2 cyrus-sasl-scram cyrus-sasl-gssapi
    cyrus-sasl-md5 cyrus-sasl-ntlm cyrus-sasl-plain sub-package


author: gaihuiying <gaihuiying1@huawei.com> - 4.2.23-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix errors when use "yum module remove --all per:common" command
         fix test test_mode_tty failed


author: gaihuiying <gaihuiying1@huawei.com> - 4.2.23-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove recommends rpm-plugins-systemd-inhibit
         backport community patches and fix CVE-2021-3445
         delete duplicate python3-libdnf dependency


author: openEuler Buildteam <buildteam@openeuler.org> - 0.26-19
changelog:
  - Type:cves
  - ID:CVE-2019-13109
  - SUG:NA
  - DESC:fix CVE-2019-13109
         fix ICC profile in PNG images


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29464 CVE-2021-29463 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29464,CVE-2021-29463,CVE-2021-29473


author: wangjie <wangjie375@huawei.com> - 2.2.9-4
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.2.9-6
changelog:
  - Type:CVE
  - ID:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: wangkai <wangkai385@huawei.com> - 1.0.6-20
changelog:
  - Rebuild for fix log4j1.x cves

   * Thu Mar 5 2020 wangzhishun <wangzhishun1@huawei.com> - 1.0.6-19
   - Package init


author: wangxiao <wangxiao65@huawei.com> - 79.0-4
changelog:
  - Fix CVE-2020-15664 CVE-2020-15665 CVE-2020-15666 CVE-2020-15667
    CVE-2020-15668 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678


author: wangxiao <wangxiao65@huawei.com> - 79.0-5
changelog:
  - Fix CVE-2020-15969 CVE-2020-15999 CVE-2020-16012 CVE-2020-26951
    CVE-2020-26953 CVE-2020-26956 CVE-2020-26957 CVE-2020-26958
    CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26963
    CVE-2020-26965 CVE-2020-25966 CVE-2020-26967


author: gaihuiying <gaihuiying1@huawei.com> - 2.23.0-16
changelog:
  - Type:cves
  - ID:CVE-2020-11008
  - SUG:NA
  - DESC:fix CVE-2020-11008
         credential: detect unrepresentable values when parsin urls
         fsck: detect gitmodules URLs with embedded newlines


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.27.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolved the problem that a failure message is displayed when the git-daemon package is uninstalled


author: panxiaohe <panxiaohe@huawei.com> - 2.27.0-4
changelog:
  - Fix CVE-2021-29468
  - Add gcc and gettext to BuildRequires
    - necessary for building and msgfmt command


author: Qingqing Li<liqingqing3@huawei.com> - 2.28-68
changelog:
  - fix CVE-2021-33574, fix use of __pthread_attr_copy in mq_notify (bug 27896)
    https://sourceware.org/bugzilla/show_bug.cgi?id=27896


author: Qingqing Li<liqingqing3@huawei.com> - 2.28-69
changelog:
  - aarch64: align stack in clone [BZ #27939]
    https://sourceware.org/bugzilla/show_bug.cgi?id=27939
    x86-64 Align child stack to 16 bytes [BZ #27902]
    https://sourceware.org/bugzilla/show_bug.cgi?id=27902


author: lvying<lvying6@huawei.com> - 2.28-71
changelog:
  - ldconfig: handle .dynstr located in separate segment (bug 25087)
    https://sourceware.org/git/?p=glibc.git;a=commit;h=58e8f5fd2ba47b6dc47fd4d0a35e4175c7c87aaa


author: Qingqing Li<liqingqing3@huawei.com> - 2.28-72
changelog:
  - wordexp: Use strtoul instead of atoi so that overflow can be detected. (bug 28011)
    https://sourceware.org/bugzilla/show_bug.cgi?id=28011


author: Qingqing Li<liqingqing3@huawei.com> - 2.28-73
changelog:
  - malloc: tcache shutdown sequence does not work if the thread never allocated anything. (bug 28028)
    https://sourceware.org/bugzilla/show_bug.cgi?id=28028


author: Lv Ying<lvying6@huawei.com> - 2.28-74
changelog:
  - ldconfig: Fix memory leaks
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=468d772e81e9842f4f73431c164b4a12f13d8658


author: Lv Ying<lvying6@huawei.com> - 2.28-75
changelog:
  - _dl_exception_create_format: Add missing va_end
    https://sourceware.org/git/?p=glibc.git;a=commit;h=81046e2812a3b41ad9a818eb42a1681bea232ce9


author: Lv Ying<lvying6@huawei.com> - 2.28-77
changelog:
  - ldconfig: avoid leak on empty paths in config file
    https://sourceware.org/git/?p=glibc.git;a=commit;h=b0234d79e7d82475d1666f25326ec045c045b3ed


author: Lv Ying<lvying6@huawei.com> - 2.28-78
changelog:
  - ldconfig: avoid leak on empty paths in config file
    https://sourceware.org/git/?p=glibc.git;a=commit;h=a4f5a3103fc3e7974dbe35b411cba9f670807cde


author: wangxiao<wangxia65@huawei.com> -3.30.1-6
changelog:
  - move the libcroco sources directly under src/st
    remove the libcroco dependency from the meson.build files


author: Carlos Garnacho <cgarnach@redhat.com> - 3.32.2-12
changelog:
  - Fix window dragging with tablets in the overview
    Resolves: #1716767
  - Fix high-contrast/symbolic race
    Resolves: #1730612
  - Make perf-tool usable on wayland
    Resolves: #1652178


author: chenjiankun <chenjiankun1@huawei.com> - 1.15.7-5
changelog:
  - fix CVE-2021-33195,CVE-2021-33196,CVE-2021-33197,CVE-2021-33198,CVE-2021-34558,CVE-2021-29923,CVE-2021-38297,CVE-2021-36221


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.3-1
changelog:
  - Upgrade to 1.2.3
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install', 'check' and 'files'


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.4-1
changelog:
  - Upgrade to 1.2.4
  - Update Version, Release, Source0, BuildRequires
  - Delete sed operation which existed in this version
  - Add patch for fix CVE-2021-33516
  - Update stage 'prep', 'build', 'install', 'check', 'files'


author: yuboyun <yuboyun@huawei.com> - 2.4.43-3
changelog:
  - Type:cves
  - ID:CVE-2020-9490 CVE-2020-11984 CVE-2020-11993
  - SUG:restart
  - DESC:fix CVE-2020-9490CVE-2020-11984CVE-2020-11993


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-8
changelog:
  - Type:cves
  - ID:CVE-2021-26690
  - SUG:NA
  - DESC:fix CVE-2021-26690
         modify version number in changelog


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-9
changelog:
  - Type:cves
  - ID:CVE-2021-34798 CVE-2021-36160 CVE-2021-40438
  - SUG:restart
  - DESC:fix CVE-2021-34798 CVE-2021-36160 CVE-2021-40438


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-10
changelog:
  - Type:cves
  - ID:CVE-2021-40438 CVE-2021-39275
  - SUG:restart
  - DESC:fix CVE-2021-40438 fully and correctly
         fix CVE-2021-39275


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix int overflow in ap_timeout_parameter_parse
         Improve fix to please a fuzzer int overflow


author: gaihuiying <eaglegai@163.com> - 2.4.43-14
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934


author: bclinux <bclinux@cmss.chinamobile.com> - 5.5.0-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: Fixed the issue that the network namespace could not be deleted when the ipip module was installed


author: leizhongkai<leizhongkai@huawei.com> - 0.9.5-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:restart
  - DESC:make `isula-build ctr-img images` display comfortably


author: DCCooper <1866858@gmail.com> - 0.9.5-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:modify file mode for isula-build client binary and public key


author: jingxiaolu <lujingxiao@huawei.com> - 0.9.5-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:sync patches from upstream, including fix for save multiple tags, test cases improvement


author: wangyue <wangyue92@huawei.com> - 2.9.8-6
changelog:
  - fix CVE-2020-36179 CVE-2020-36180 CVE-2020-36181
    CVE-2020-36182 CVE-2020-36188 CVE-2020-36189
    CVE-2020-36187 CVE-2020-36186 CVE-2020-36184 CVE-2020-36183


author: wutao <wutao61@huawei.com> - 2.0.14-9
changelog:
  - fix folllowing CVE in this revision
    CVE-2018-18873
    CVE-2018-19541 
    CVE-2018-9055
    CVE-2018-9154 
    CVE-2018-19539 
    CVE-2018-20570
    CVE-2018-9252 
    CVE-2018-19540 
    CVE-2018-20622
    CVE-2018-19139


author: linhaibing21 <linhaibing@huawei.com> - 1:11.0.12.7-0
changelog:
  - Update to 11.0.12+7 (GA)
  - delete 8207160-ClassReader-adjustMethodParams-can-potentially-return-null-if-the-args-list-is-empty.patch
  - delete 8217918-C2-XX-AggressiveUnboxing-is-broken.patch
  - delete 8223667-ASAN-build-broken.patch
  - delete 8264640.patch
  - other adaptations to 11.0.12


author: yaoxin <yaoxin30@huawei.com> - 1.0.13-1
changelog:
  - Upgrade libEMF to 1.0.13; fix CVE-2020-13999 CVE-2020-11863 CVE-2020-11864 CVE-2020-11865 CVE-2020-11866


author: zhujun2 <zhujun2@cmss.chinamobile.com> - 2.35.2-12
changelog:
  - Type:bugfix                                                                                                                                                                                         
  - ID:NA                                                                                                                                                                                               
  - SUG:NA                                                                                                                                                                                              
  - DESC:solve probe superblock abnormal


author: zhujun <zhujun2_yewu@cmss.chinamobile.com> - 2.35.2-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:solve a bug that disk device of ceph_bluestore file system,the disk by-partlabel probability loss problem


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.35.2-4
changelog:
  - Fix memleak in fdisk_script_read_file
    Fix heap-buffer-overflow in fdisk_partname
    Fix integer overflow in partno_from_devname


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7
changelog:
  - Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999303


author: openEuler Buildteam <buildteam@openeuler.org> - 2.8.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revise the bogus date in changelog and delete the unnecessary subpackage "udisks2-iscsi"


author: Xu Yandong <xuyandong2@huawei.com> - 6.2.0-4
changelog:
  - Fix virdaemon waiting for child processes return code error.
  - Fix virsh dump and migrate return code error.


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - rpc: gendispatch: handle empty flags
  - rpc: add support for filtering @acls by uint params
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses
  - qemu: agent: set ifname to NULL after freeing


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - util: Move virIsDevMapperDevice() to virdevmapper.c
  - virdevmapper: Don't use libdevmapper to obtain dependencies


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - libvirt: Add 'retry' support for error policy
  - qemu: Support 'retry' BLOCK_IO_ERROR event.
  - libvirt/conf: Set default values of retry fileds


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  - security: fix SELinux label generation logic


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix heap-use-after-free in xmlXIncludeIncludeNode
         fix stack overflow in xmlDocDumpMemory
         fix stack overflow in htmlDocContentDumpOutput


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix memory leaks in XPointer string-range function
         fix null pointer deref in xmlXPtrRangeInsideFunction
         stop using maxParserDepth in xpath.c
         hardcode maximum XPath recursion depth
         fix XPath recursion limit


author: fuanan <fuanan3@h-partners.com> - 2.9.10-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: Alex Williamson <alex.williamson@redhat.com> - 0.57-1
changelog:
  - 13f1322e576c ("Remove systemd support")
  - d84a2737e79c ("Fix device udev tagging")
  - 68c92c7beaca ("Tag before generating spec file")
  - c34c4f1ade60 ("Update mdevctl.spec.in for lsmdev.8")
  - ed86d345aae0 ("Fix systemd UUID escaping")
  - d4e83f08161d ("Merge pull request #13 from cpaelzer/fix-lsmdev-man-page")
  - 3c0d285b75ab ("lsmdev - add the alternative name to the man page")


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: liwu <liwu13@huawei.com> - 8.0.26-1
changelog:
  - Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356,CVE-2021-2339,CVE-2021-2354
    CVE-2021-2352,CVE-2021-2340


author: openEuler Buildteam <buildteam@openeuler.org> - 6.1-12
changelog:
  - Type:cves
  - ID:CVE-2019-17594  CVE-2019-17595
  - SUG:NA
  - DESC:fix CVE-2019-17594 and CVE-2019-17595


author: openEuler Buildteam <buildteam@openeuler.org> - 2.4.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:stop the var-lib-nfs-rpc_pipefs.mount before remove the package


author: haowenchao <haowenchao@huawei.com> - 2.1.1-8
changelog:
  - backport one patch for solving install problem, sync from branch openEuler-20.09
    which commit id is 81fd136


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: panxiaohe <panxiaohe@huawei.com> - 0.116-9
changelog:
  - Fix CVE-2021-4034

  - Tue Jun 22 2021 Hugel <gengqihu1@huawei.com> - 0.116-8
  - Port polkit to mozjs78


author: wangye <wangye70@huawei.com> - 0.67.0-6
changelog:
  - Type:cves
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2018-16646 CVE-2018-18897 CVE-2018-19060 CVE-2018-20481 CVE-2019-14494 CVE-2019-7310


author: wangye <wangye70@huawei.com> - 8.1.1-2
changelog:
  - Type:CVE
  - CVE:CVE-2021-27921 CVE-2021-27922 CVE-2021-27923
  - SUG:NA
  - DESC: fix CVE-2021-27921CVE-2021-27922CVE-2021-27923


author: hanhui <hanhui15@huawei.com> - 8.1.1-3
changelog:
  - Type:bugfix
  - CVE:CVE-2021-25287、CVE-2021-25288、CVE-2021-28675、CVE-2021-28676、CVE-2021-28677、CVE-2021-28678
  - SUG:NA
  - DESC: incorporate community patch


author: yefei <yefei25@huawei.com> - 18.0-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:  add bash completion and repair python2 interpreter path


author: liudabo<liudabo1@huawei.com> - 4.15.1-26
changelog:
  - Type:CVE
  - ID:CVE-2021-20271
  - SUG:NA
  - DESC:Fix CVE-2021-20271 and Optimize signature header merge a bit


author: shixuantong <shixuantong@huawei.com> - 4.15.1-28
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix data race in packageBinaries() function and prioritize large packages


author: huanghaitao <huanghaitao8@huawei.com> - 1.4.0-2
changelog:
  - Add Requires: python2-gobject-base libnotify >= 0.7.7
  - fix command subunit-notify subunit2gtk --help error
  - fix command subunit-notify warning


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable profile guided optimizations for x86_64 and i686 architectures


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bpo-43124: Fix smtplib multiple CRLF injection
         bpo-12800: tarfile: Restore fix from 011525ee9
         bpo-41815: SQLite: segfault if backup called on closed database
         bpo-42183: Fix a stack overflow error for asyncio Task or Future repr()
         bpo-45001: Make email date parsing more robust against malformed input


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - hw/sd: sdhci: Don't transfer any data when command time out
  - hw/sd: sdhci: Don't write to SDHC_SYSAD register when transfer is in progress
  - hw/sd: sdhci: Correctly set the controller status for ADMA
  - hw/sd: sdhci: Limit block size only when SDHC_BLKSIZE register is writable
  - hw/sd: sdhci: Reset the data pointer of s->fifo_buffer[] when a different block size is programmed
  - net: introduce qemu_receive_packet()
  - e1000: switch to use qemu_receive_packet() for loopback
  - dp8393x: switch to use qemu_receive_packet() for loopback packet
  - sungem: switch to use qemu_receive_packet() for loopback
  - tx_pkt: switch to use qemu_receive_packet_iov() for loopback
  - rtl8139: switch to use qemu_receive_packet() for loopback
  - pcnet: switch to use qemu_receive_packet() for loopback
  - cadence_gem: switch to use qemu_receive_packet() for loopback
  - lan9118: switch to use qemu_receive_packet() for loopback


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - hw/pci-host: add pci-intack write method
  - pci-host: add pcie-msi read method
  - vfio: add quirk device write method
  - prep: add ppc-parity write method
  - nvram: add nrf51_soc flash read method
  - spapr_pci: add spapr msi read method
  - tz-ppc: add dummy read/write methods
  - imx7-ccm: add digprog mmio write method


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - vhost-user-gpu: fix resource leak in 'vg_resource_create_2d' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in vg_resource_attach_backing (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak while calling 'vg_resource_unref' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in 'virgl_cmd_resource_unref' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in 'virgl_resource_attach_backing' (CVE-2021-3544)
  - vhost-user-gpu: fix memory disclosure in virgl_cmd_get_capset_info (CVE-2021-3545)
  - vhost-user-gpu: fix OOB write in 'virgl_cmd_get_capset' (CVE-2021-3546)


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - ide: ahci: add check to avoid null dereference (CVE-2019-12067)
  - hw/intc/arm_gic: Fix interrupt ID in GICD_SGIR register
  - usb: limit combined packets to 1 MiB (CVE-2021-3527)


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - x86: Intel AVX512_BF16 feature enabling
  - i386: Add MSR feature bit for MDS-NO
  - i386: Add macro for stibp
  - i386: Add new CPU model Cooperlake
  - target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  - target/i386: Add missed security features to Cooperlake CPU model
  - target/i386: add PSCHANGE_NO bit for the ARCH_CAPABILITIES MSR
  - target/i386: Export TAA_NO bit to guests


author: yezengruan <yezengruan@huawei.com>
changelog:
  - hw/rdma: Fix possible mremap overflow in the pvrdma device (CVE-2021-3582)
  - pvrdma: Ensure correct input on ring init (CVE-2021-3607)
  - pvrdma: Fix the ring init error flow (CVE-2021-3608)


author: yezengruan <yezengruan@huawei.com>
changelog:
  - vhost-vsock: detach the virqueue element in case of error (CVE-2022-26354)
  - virtio-net: fix map leaking on error during receive (CVE-2022-26353)


author: yezengruan <yezengruan@huawei.com> - 2:6.2.0-38
changelog:
  - acpi: fix QEMU crash when started with SLIC table
  - tests: acpi: whitelist expected blobs before changing them
  - tests: acpi: add SLIC table test
  - tests: acpi: SLIC: update expected blobs
  - hw/block/fdc: Prevent end-of-track overrun (CVE-2021-3507)
  - tests/qtest/fdc-test: Add a regression test for CVE-2021-3507


author: yezengruan <yezengruan@huawei.com> - 2:6.2.0-39
changelog:
  - hw/scsi/megasas: Use uint32_t for reply queue head/tail values
  - dma: Let dma_memory_valid() take MemTxAttrs argument
  - dma: Let dma_memory_set() take MemTxAttrs argument
  - dma: Let dma_memory_rw_relaxed() take MemTxAttrs argument
  - dma: Let dma_memory_rw() take MemTxAttrs argument
  - dma: Let dma_memory_read/write() take MemTxAttrs argument
  - dma: Let dma_memory_map() take MemTxAttrs argument
  - dma: Have dma_buf_rw() take a void pointer
  - dma: Have dma_buf_read() / dma_buf_write() take a void pointer
  - pci: Let pci_dma_rw() take MemTxAttrs argument
  - dma: Let dma_buf_rw() take MemTxAttrs argument
  - dma: Let dma_buf_write() take MemTxAttrs argument
  - dma: Let dma_buf_read() take MemTxAttrs argument
  - dma: Let dma_buf_rw() propagate MemTxResult
  - dma: Let st*_dma() take MemTxAttrs argument
  - dma: Let ld*_dma() take MemTxAttrs argument
  - dma: Let st*_dma() propagate MemTxResult
  - dma: Let ld*_dma() propagate MemTxResult
  - pci: Let st*_pci_dma() take MemTxAttrs argument
  - pci: Let ld*_pci_dma() take MemTxAttrs argument
  - pci: Let st*_pci_dma() propagate MemTxResult
  - pci: Let ld*_pci_dma() propagate MemTxResult
  - hw/audio/intel-hda: Do not ignore DMA overrun errors
  - hw/audio/intel-hda: Restrict DMA engine to memories (not MMIO devices)
  - tests/qtest/intel-hda-test: Add reproducer for issue #542


author: liuxiangdong <liuxiangdong5@huawei.com> - 2:6.2.0-42
changelog:
  - acpi: validate hotplug selector on access
  - virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358)


author: Wang Jinlei <wangjinlei@cmss.chinamobile.com> - 2:6.2.0-44.1
changelog:
  - 0001-qemu-ga-add-some-self-developed-interface.patch
  - 0002-qemu-only-use-rbd_diff_iterate2-when-object-maps-and.patch
  - 0003-Add-thread-to-get-volume-size-infomation.patch
  - 0006-vhost-user-free-vring-notifier-on-vq-destroy.patch
  - 0007-vhost-user-clean-up-all-queues-state-on-close.patch
  - 0008-vhost-user-blk-add-VIRTIO_BLK_F_SIZE_MAX.patch
  - 0001-RBD-volume-migration-acceleration.patch
  - 0001-Loosen-GCC-requirement-from-7.4.0-to-7.3.0.patch
  - obsoletes qemu-kvm* for upgrade


author: jianchunfu <jianchunfu@cmss.chinamobile.com> - 2:6.2.0-44.2
changelog:
  - 0001-liveupdate-qemu-memory-qemu_check_ram_volatile.patch
  - 0002-liveupdate-qemu-migration-fix-populate_vfio_info.patch
  - 0003-liveupdate-qemu-migration-qemu-file-wrappers.patch
  - 0004-liveupdate-qemu-migration-simplify-savevm.patch
  - 0005-liveupdate-qemu-vl-start-on-wakeup-request.patch
  - 0006-liveupdate-qemu-cpr-reboot-mode.patch
  - 0007-liveupdate-qemu-cpr-reboot-HMP-interfaces.patch
  - 0008-liveupdate-qemu-memory-flat-section-iterator.patch
  - 0009-liveupdate-qemu-oslib-qemu_clear_cloexec.patch
  - 0010-liveupdate-qemu-machine-memfd-alloc-option.patch
  - 0011-liveupdate-qemu-qapi-list-utility-functions.patch
  - 0012-liveupdate-qemu-vl-helper-to-request-re-exec.patch
  - 0013-liveupdate-qemu-cpr-preserve-extra-state.patch
  - 0014-liveupdate-qemu-cpr-restart-mode.patch
  - 0015-liveupdate-qemu-cpr-restart-HMP-interfaces.patch
  - 0016-liveupdate-qemu-hostmem-memfd-cpr-for-memory-back.patch
  - 0017-liveupdate-qemu-pci-export-functions-for-cpr.patch
  - 0018-liveupdate-qemu-vfio-pci-refactor-for-cpr.patch
  - 0019-liveupdate-qemu-vfio-pci-cpr-part-1-fd-and-dma.patch
  - 0020-liveupdate-qemu-vfio-pci-cpr-part-2-msi.patch
  - 0021-liveupdate-qemu-vfio-pci-cpr-part-3-intx.patch
  - 0022-liveupdate-qemu-vfio-pci-recover-from-unmap-allva.patch
  - 0023-liveupdate-qemu-vhost-reset-vhost-devices-for-cpr.patch
  - 0024-liveupdate-qemu-loader-suppress-rom_reset-during-.patch
  - 0025-liveupdate-qemu-chardev-cpr-framework.patch
  - 0026-liveupdate-qemu-chardev-cpr-for-simple-devices.patch
  - 0027-liveupdate-qemu-chardev-cpr-for-pty.patch
  - 0028-liveupdate-qemu-chardev-cpr-for-sockets.patch
  - 0029-liveupdate-qemu-cpr-only-cpr-capable-option.patch


author: Wang Jinlei <wangjinlei@cmss.chinamobile.com> - 16:6.2.0-44.3
changelog:
  - add rhel-7.6.0 machine type for live migration
  - update BuildRequires librbd to rbdclient
  - only build on x86 or arm target arch to reduce build time


author: Qi Hao <qihao@cmss.chinamobile.com> - 16:6.2.0-44-48
changelog:
  - Fix the guest-get-disk-status interface in an environment with containers, which under certain conditions can trigger memory out of bounds reading issues.
  - filter intermediate information in the container environment (such as overlay, shm) and only retain /dev information.


author: Qi Hao <qihao@cmss.chinamobile.com> - 16:6.2.0-44.49
changelog:
  - qga/main.c: Optimized the interface for change-password.
  - qga/commands-posix.c: add the guest-get-cpustinfo interface for qga.


author: Qi Hao <qihao@cmss.chinamobile.com> - 16:6.2.0-44.50
changelog:
  - qga/command-posix.c: add the guest-get-cpu-utilization interface for qga.
  - qga/command-posix.c: add the guest-get-lastboot-time interface for qga.


author: yaoxin <yaoxin30@huawei.com> - 5.0.14-1
changelog:
  - Upgrade redis5 to 5.0.14 for fix cves: CVE-2021-41099
    CVE-2021-32762 CVE-2021-32675 CVE-2021-32687 CVE-2021-32626
    CVE-2021-32627 CVE-2021-32628


author: wutao <wutao61@huawei.com> - 2.5.8-3
changelog:
  - fix CVE-2020-25613
  - WEBrick,a simple HTTP server bundled with Ruby,had not
  - checked the transfer-encoding header value rigorously.
  - An attacker may potentially exploit this issue to bypass
  - a reverse proxy,which may lead to an HTTP Request Smuggling
  - attack.


author: Shinwell_Hu <huxinwei@huawei.com> - 2.5.8-113
changelog:
  - Upgrade bundled REXML gem to fix CVE-2021-28965, which is an XML
    round-trip vulnerability in REXML.


author: pengyuan <pengyuan@cmss.chinamobile.com> 1.1-0
changelog:
  - Up to release 1.1
  - add services func 
  - add services and timers for secaid and sechkrootkit
  - add service commands, including on/off/status


author: pengyuan <pengyuan@cmss.chinamobile.com> 1.3-0
changelog:
  - up to release 1.3
  - Optimize reinforcement architecture
  - Add reinforcement baselines for level3, group, and euler
  - fix bugs


author: luhuaxin <1539327763@qq.com> - 3.14.2-72
changelog:
  - backport some upstream patches
    backport-Allow-systemd-logind-dbus-chat-with-fwupd.patch
    backport-Allow-auditd-manage-kerberos-host-rcache-files.patch
    backport-Add-dev_lock_all_blk_files-interface.patch
    backport-Allow-systemd-machined-create-userdbd-runtime-sock-f.patch
    backport-Define-named-file-transition-for-sshd-on-tmp-krb5_0..patch
    backport-Allow-nsswitch_domain-to-connect-to-systemd-machined.patch
    backport-Allow-unconfined_t-to-node_bind-icmp_sockets-in-node.patch
    backport-Create-macro-corenet_icmp_bind_generic_node.patch
    backport-Allow-traceroute_t-and-ping_t-to-bind-generic-nodes.patch
    backport-Allow-passwd-to-get-attributes-in-proc_t.patch
    backport-Allow-login_pgm-attribute-to-get-attributes-in-proc_.patch
    backport-Allow-syslogd_t-domain-to-read-write-tmpfs-systemd-b.patch
    backport-Allow-all-users-to-connect-to-systemd-userdbd-with-a.patch
    backport-Add-new-devices-and-filesystem-interfaces.patch
    backport-Add-lvm_dbus_send_msg-lvm_rw_var_run-interfaces.patch
    backport-Allow-domain-write-to-an-automount-unnamed-pipe.patch
    backport-Allow-dyntransition-from-sshd_t-to-unconfined_t.patch
    backport-Allow-initrc_t-create-run-chronyd-dhcp-directory-wit.patch
    backport-Update-systemd_resolved_read_pid-to-also-read-symlin.patch
    backport-Allow-systemd-resolved-manage-its-private-runtime-sy.patch
    backport-Allow-systemd-logind-manage-init-s-pid-files.patch
    backport-Add-systemd_resolved_write_pid_sock_files-interface.patch
    backport-Allow-nsswitch-domain-write-to-systemd-resolved-PID-.patch
    backport-sysnetwork.if-avoid-directly-referencing-systemd_res.patch
    backport-Allow-stub-resolv.conf-to-be-a-symlink.patch
    backport-Allow-domain-stat-proc-filesystem.patch
    backport-Allow-domain-write-to-systemd-resolved-PID-socket-fi.patch
    backport-Allow-systemd-machined-manage-systemd-userdbd-runtim.patch
    backport-Allow-domain-stat-the-sys-filesystem.patch
    backport-Allow-login_userdomain-write-inaccessible-nodes.patch
    backport-Allow-local_login_t-get-attributes-of-tmpfs-filesyst.patch
    backport-Allow-dhcpc_t-domain-transition-to-chronyc_t.patch
    backport-Allow-nsswitch_domain-read-cgroup-files.patch
    backport-Allow-IPsec-and-certmonger-to-use-opencryptoki-servi.patch
    backport-Create-chronyd_pid_filetrans-interface.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 4.4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-Fix-typos-update-URLs-in-squashfs-tools-Makefile.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-Support-creating-sockets-in-unsquashfs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-squashfs-tools-fix-build-failure-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-xattr-Initialize-header-to-avoid-valgrind-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-CVE-2021-40153.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-2
changelog:
  - Type:cves
  - ID:CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450
  - SUG:restart
  - DESC:fix CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058 CVE-2020-15049 CVE-2020-15810 CVE-2020-15811 CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: shenyangyang <shenyangyang4@huawei.com> - 243-34
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport from upstream to solve the problem when devices claim the same slot


author: shenyangyang <shenyangyang4@huawei.com> - 243-35
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change requires to openssl-libs as post scripts systemctl requires libssl.so.1.1


author: fangxiuning <fangxiuning@huawei.com> - 243-37
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: journald: enforce longer line length limit during "setup" phase of stream protocol


author: fangxiuning <fangxiuning@huawei.com> - 243-41
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:udevd: don't kill worker in manager_kill_worker when it's running


author: yangmingtai <yangmingtai@huawei.com> - 243-43
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:udevd: fix broken symbolic links when same link for different devices


author: huanghaitao <huanghaitao8@huawei.com> - 1:9.0.10-13
changelog:
  - Type:cves
  - ID: CVE-2019-17563 CVE-2019-12418 CVE-2020-1935 CVE-2020-1938 
  - SUG:restart
  - DESC: fix CVE-2019-17563 CVE-2019-12418CVE-2020-1935 CVE-2020-1938


author: wangxiao <wangxiao65@huawei.com> - 1:9.0.10-14
changelog:
  - Type:cves
  - ID: CVE-2020-9484 CVE-2020-11996 CVE-2020-13934 CVE-2020-13935
  - SUG:restart
  - DESC: fix CVE-2020-9484 CVE-2020-11996 CVE-2020-13934 CVE-2020-13935


author: wangyue <wangyue92@huawei.com> - 1:9.0.10-18
changelog:
  - Type:cve
  - ID: CVE-2021-25122 CVE-2021-25329
  - SUG:restart
  - DESC: fix CVE-2021-25122 CVE-2021-25329


author: yangcheng <yangcheng87@huawei.com> - 20170801-12
changelog:
  - Fix the problem that the mkfontscale command and mkfontdir command were not found during installation


author: yuanxin<yuanxin24@huawei.com> - 2:8.2-11
changelog:
  - Type:CVE
  - ID:CVE-2021-4166 CVE-2021-4192 CVE-2021-4193
  - SUG:NA
  - DESC:fix CVE-2021-4166 CVE-2021-4192 CVE-2021-4193


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-15
changelog:
  - Type:CVE
  - ID:CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413
  - SUG:NA
  - DESC:fix CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413


author: tianwei <tianwei12@h-partners.com> - 2:8.2-16
changelog:
  - Type:CVE
  - ID:CVE-2022-0443 CVE-2022-0392 CVE-2022-0417
  - SUG:NA
  - DESC:fix CVE-2022-0443 CVE-2022-0392 CVE-2022-0417


author: yangcheng<yangcheng87@huawei.com> - 1.20.8-11
changelog:
  - Type:CVE
  - Id:CVE-2021-4008,CVE-2021-4009,CVE-2021-4010,CVE-2021-4011
  - SUG:NA
  - DESC:fix CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011


