# changelog

author: wangkai <13474090681@163.com> - 1.4.3.36-1
changelog:
  - Update to 1.4.3.36
  - Fix dsidm user/posixgroup get_dn fails with search_ext()
  - Fix unable to add objectclass/attribute without x-origin
  - Fix execute dsconf to open pdb


author: wangkai <13474090681@163.com> - 1.4.3.36-8
changelog:
  - Fix dsidm role subtree-status fails with TypeError
  - Fix name cockpit_present is not defined.
  - Fix typo
  - Fix DirSrv has no attribute userid


author: gaoxingwang <gaoxingwang1@huawei.com> - 1.32.12-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed


author: Aichun Li <liaichun@huawei.com> - 1.32.12-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnm:fix warning when setting wrong ethtool ternary value
  core: reload config for active devices
  libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
  libnm: fix crash in _nm_ip_route_validate_all for invalid-route


author: Chenxi Mao <chenxi.mao@suse.com> - 1:1.32.12-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission


author: gaoxingwang<gaoxingwang1@huawei.com> - 1:1.32.12-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:merge ovs into main package

   Mon Jun 5 2023 gaoxingwang<gaoxingwang1@huawei.com> - 1:1.32.12-16
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: sunhai <sunhai10@huawei.com> - 36.16.5-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pxe kickstart version with local pykickstart
         and with build save patch by source4


author: sunhai <sunhai10@huawei.com> - 36.16.5-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add logo with install
         the kickstart version change to patch


author: Qingqing Li <liqingqing3@huawei.com> - 36.16.5-11
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:cgroup files is a additional enhanced cgroup feature, which will
         limit cgroup opened files, add cgroup_disable=files to
         default cmdline to disable this feature to keep cgroup's default behavior.


author: sunhai <sunhai10@huawei.com> - 36.16.5-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport password tooltip text adapt language
          close disk encryption


author: shenyangyang<shenyangyang4@huawei.com> - 1.7.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
         to /usr/lib/xxxx


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-heading capabilities for service


author: yaoxin <yao_xin001@hoperun.com> - 1.17-1
changelog:
  - Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730


author: huangyu <huangyu106@huawei.com> - 32:9.16.23-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix catalog zone reconfiguration crash
  Improve the logging on failed TCP accept
  Separate the locked parts of dns_zone_catz_enable-di
  Check if key-metadata is modified before writing
  Fix CID-352776 Concurrent data access violations
  Require valid key for dst_key functions


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
  - SUG:NA
  - DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: zhanghao <zhanghao383@huawei.com> - 32:9.16.23-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Don't perform arithmetic on NULL pointers
  Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
  Fix a use-after-free bug in dns_zonemgr_releasezone()
  Fix dns_fwdtable_addfwd() error path cleanup bug
  Detach the views in zone_shutdown(), not in zone_free()
  Detach the zone views outside of the zone lock
  delay trust anchor management until zones are loaded
  In hmac_createctx free ctx on isc_hmac_init failure
  Fix dns_kasp_attach / dns_kasp_detach usage
  Fix backport error in 84929d1c
  Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
  Searching catzs->zones requires a read lock
  Fix view's zones reverting bug during reconfiguration


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-21
changelog:
  - Type:CVE
  - CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-23
changelog:
  - Type:CVE
  - CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
  - SUG:NA
  - DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.25.0.101
changelog:
  - !530 Backport CVEs and bugfixes
  - block: fix use-after-free of q->q_usage_counter
  - block: move q_usage_counter release into blk_queue_release
  - Revert "block: fix null-deref in percpu_ref_put"
  - md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
  - xfs, iomap: limit individual ioend chain lengths in writeback
  - net/sched: tcindex: search key must be 16 bits
  - net/sched: tcindex: update imperfect hash filters respecting rcu
  - tty: fix out-of-bounds access in tty_driver_lookup_tty()
  - fs/ntfs3: Validate resident attribute name
  - Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
  - mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
  - coredump: fix kabi broken in struct coredump_params
  - coredump: Use the vma snapshot in fill_files_note
  - coredump/elf: Pass coredump_params into fill_note_info
  - coredump: Remove the WARN_ON in dump_vma_snapshot
  - coredump: Snapshot the vmas in do_coredump
  - mm/swapfile: add cond_resched() in get_swap_pages()
  - mm: slince possible data races about pgdat->kswapd
  - mm: fix null-ptr-deref in kswapd_is_running()
  - fs/ntfs3: Validate MFT flags before replaying logs
  - fs/ntfs3: Validate attribute name offset
  - bpf: Fixes possible race in update_prog_stats() for 32bit arches
  - bpf: Avoid races in __bpf_prog_run() for 32bit arches
  - ext4: make sure fs error flag setted before clear journal error
  - ext4: commit super block if fs record error when journal record without error
  - ima: Fix memory leakage in ima_store_template
  - af_unix: Get user_ns from in_skb in unix_diag_get_exact().
  - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  - arm64: errata: Remove AES hwcap for COMPAT tasks
  - ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
  - kernel: Initialize cpumask before parsing
  - softirq: Don't try waking ksoftirqd before it has been spawned
  - bpf: Prevent decl_tag from being referenced in func_proto arg
  - bpf: Skip task with pid=1 in send_signal_common()
  - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
  - !461 Backport CVEs and bugfixes
  - !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
  - uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
  - malidp: Fix NULL vs IS_ERR() checking


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.27.0.103
changelog:
  - !562 Backport CVEs and bugfixes
  - net: sched: Use struct_size() helper in kvmalloc()
  - net_sched: Use struct_size() and flex_array_size() helpers
  - ext4: dio take shared inode lock when overwriting preallocated blocks
  - ext4: fix race between writepages and remount
  - mm: mem_reliable: Initialize reliable_nr_page when mm_init()
  - clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
  - kvm: initialize all of the kvm_debugregs structure before sending it to userspace
  - nvme: use nvme_cid to generate command_id in trace event
  - xfs: don't report reserved bnobt space as available
  - xfs: don't include bnobt blocks when reserving free block pool
  - xfs: set aside allocation btree blocks from block reservation
  - xfs: introduce in-core global counter of allocbt blocks
  - act_mirred: use the backlog for nested calls to mirred ingress
  - net/sched: act_mirred: better wording on protection against excessive stack growth
  - net/sched: act_mirred: refactor the handle of xmit
  - scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
  - !557 net: hns3: modify reset delay time to avoid configuration timeout
  - net: hns3: modify reset delay time to avoid configuration timeout


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.28.0.104
changelog:
  - !573 Backport CVEs and bugfixes
  - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
  - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
  - ubi: ensure that VID header offset + VID header size <= alloc, size
  - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct()
  - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach
  - ring-buffer: Fix race while reader and writer are on the same page
  - loop: Add parm check in loop_control_ioctl
  - ext4: Fix i_disksize exceeding i_size problem in paritally written case
  - ext4: ext4_put_super: Remove redundant checking for 'sbi->s_journal_bdev'
  - ext4: Fix reusing stale buffer heads from last failed mounting
  - btrfs: fix race between quota disable and quota assign ioctls
  - dm crypt: add cond_resched() to dmcrypt_write()
  - driver core: Fix lockdep warning on wfs_lock
  - driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
  - xfs: don't leak memory when attr fork loading fails
  - xfs: delete unnecessary NULL checks
  - xfs: replace inode fork size macros with functions
  - xfs: replace XFS_IFORK_Q with a proper predicate function
  - xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
  - xfs: make inode attribute forks a permanent part of struct xfs_inode
  - xfs: convert XFS_IFORK_PTR to a static inline helper
  - xfs: don't reuse busy extents on extent trim
  - fs/xfs: convert comma to semicolon
  - xfs: xfs_ail_push_all_sync() stalls when racing with updates
  - xfs: check buffer pin state after locking in delwri_submit
  - xfs: log worker needs to start before intent/unlink recovery


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.29.0.105
changelog:
  - !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
  - !590 Backport CVEs and bugfixes
  - net/sched: Retire tcindex classifier
  - drm/vmwgfx: Validate the box size for the snooped cursor
  - netfilter: nf_tables: nft_parse_register can return a negative value
  - netfilter: nf_tables: validate registers coming from userspace.
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
  - KVM: nVMX: add missing consistency checks for CR0 and CR4
  - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
  - xfs: __percpu_counter_compare() inode count debug too expensive
  - xfs: fix memcpy fortify errors in EFI log format copying
  - xfs: fix memcpy fortify errors in RUI log format copying
  - xfs: fix memcpy fortify errors in CUI log format copying
  - xfs: fix memcpy fortify errors in BUI log format copying
  - xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
  - xfs: allow setting full range of panic tags
  - xfs: don't use BMBT btree split workers for IO completion
  - xfs: fix extent busy updating
  - xfs: get root inode correctly at bulkstat
  - xfs: invalidate xfs_bufs when allocating cow extents
  - xfs: attach dquots to inode before reading data/cow fork mappings
  - xfs: invalidate block device page cache during unmount
  - xfs: add selinux labels to whiteout inodes
  - xfs: convert buf_cancel_table allocation to kmalloc_array
  - xfs: don't leak xfs_buf_cancel structures when recovery fails
  - xfs: refactor buffer cancellation table allocation
  - xfs: fix type mismatches in the inode reclaim functions
  - xfs: don't allow log writes if the data device is readonly
  - x86/speculation: Allow enabling STIBP with legacy IBRS
  - !578  Backport 5.10.150 LTS
  - Revert "drm/amdgpu: make sure to init common IP before gmc"
  - gcov: support GCC 12.1 and newer compilers
  - f2fs: fix wrong condition to trigger background checkpoint correctly
  - thermal: intel_powerclamp: Use first online CPU as control_cpu
  - ext4: continue to expand file system when the target size doesn't reach
  - Revert "drm/amdgpu: use dirty framebuffer helper"
  - Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
  - net/ieee802154: don't warn zero-sized raw_sendmsg()
  - Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
  - net: ieee802154: return -EINVAL for unknown addr type
  - perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
  - clk: bcm2835: Make peripheral PLLC critical
  - usb: idmouse: fix an uninit-value in idmouse_open
  - nvmet-tcp: add bounds check on Transfer Tag
  - nvme: copy firmware_rev on each init
  - staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
  - Revert "usb: storage: Add quirk for Samsung Fit flash"
  - usb: musb: Fix musb_gadget.c rxstate overflow bug
  - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
  - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
  - soundwire: intel: fix error handling on dai registration issues
  - soundwire: cadence: Don't overwrite msg->buf during write commands
  - bcache: fix set_at_max_writeback_rate() for multiple attached devices
  - ata: libahci_platform: Sanity check the DT child nodes number
  - blk-throttle: prevent overflow while calculating wait time
  - staging: vt6655: fix potential memory leak
  - power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
  - nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
  - scsi: 3w-9xxx: Avoid disabling device if failing to enable it
  - usb: host: xhci-plat: suspend/resume clks for brcm
  - usb: host: xhci-plat: suspend and resume clocks
  - clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
  - media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
  - clk: zynqmp: Fix stack-out-of-bounds in strncpy`
  - btrfs: scrub: try to fix super block errors
  - arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
  - kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
  - ARM: dts: imx6sx: add missing properties for sram
  - ARM: dts: imx6sll: add missing properties for sram
  - ARM: dts: imx6sl: add missing properties for sram
  - ARM: dts: imx6qp: add missing properties for sram
  - ARM: dts: imx6dl: add missing properties for sram
  - ARM: dts: imx6q: add missing properties for sram
  - ARM: dts: imx7d-sdb: config the max pressure for tsc2046
  - drm/amd/display: Remove interface for periodic interrupt 1
  - drm/dp: Don't rewrite link config when setting phy test pattern
  - mmc: sdhci-msm: add compatible string check for sdm670
  - drm/meson: explicitly remove aggregate driver at module unload time
  - drm/amdgpu: fix initial connector audio value
  - ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
  - platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
  - platform/chrome: cros_ec: Notify the PM of wake events during resume
  - drm: panel-orientation-quirks: Add quirk for Anbernic Win600
  - drm/vc4: vec: Fix timings for VEC modes
  - drm: bridge: dw_hdmi: only trigger hotplug event on link change
  - udmabuf: Set ubuf->sg = NULL if the creation of sg table fails
  - drm/amd/display: fix overflow on MIN_I64 definition
  - gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
  - drm: Prevent drm_copy_field() to attempt copying a NULL pointer
  - drm: Use size_t type for len variable in drm_copy_field()
  - drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
  - Bluetooth: L2CAP: Fix user-after-free
  - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
  - wifi: rt2x00: correctly set BBP register 86 for MT7620
  - wifi: rt2x00: set SoC wmac clock register
  - wifi: rt2x00: set VGC gain for both chains of MT7620
  - wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
  - wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
  - can: bcm: check the result of can_send() in bcm_can_tx()
  - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
  - Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
  - regulator: core: Prevent integer underflow
  - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
  - xfrm: Update ipcomp_scratches with NULL when freed
  - wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
  - tcp: annotate data-race around tcp_md5sig_pool_populated
  - openvswitch: Fix overreporting of drops in dropwatch
  - openvswitch: Fix double reporting of drops in dropwatch
  - bpftool: Clear errno after libcap's checks
  - wifi: brcmfmac: fix invalid address access when enabling SCAN log level
  - NFSD: fix use-after-free on source server when doing inter-server copy
  - NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data
  - x86/entry: Work around Clang __bdos() bug
  - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
  - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
  - MIPS: BCM47XX: Cast memcmp() of function to (void *)
  - ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
  - rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
  - rcu: Back off upon fill_page_cache_func() allocation failure
  - selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
  - f2fs: fix to account FS_CP_DATA_IO correctly
  - f2fs: fix to avoid REQ_TIME and CP_TIME collision
  - f2fs: fix race condition on setting FI_NO_EXTENT flag
  - ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
  - thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
  - crypto: cavium - prevent integer overflow loading firmware
  - crypto: marvell/octeontx - prevent integer overflows
  - kbuild: rpm-pkg: fix breakage when V=1 is used
  - kbuild: remove the target in signal traps when interrupted
  - tracing: kprobe: Make gen test module work in arm and riscv
  - tracing: kprobe: Fix kprobe event gen test module on exit
  - iommu/iova: Fix module config properly
  - crypto: qat - fix DMA transfer direction
  - crypto: qat - use pre-allocated buffers in datapath
  - crypto: qat - fix use of 'dma_map_single'
  - crypto: inside-secure - Change swab to swab32
  - crypto: ccp - Release dma channels before dmaengine unrgister
  - crypto: akcipher - default implementation for setting a private key
  - iommu/omap: Fix buffer overflow in debugfs
  - cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
  - hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
  - crypto: sahara - don't sleep when in softirq
  - powerpc: Fix SPE Power ISA properties for e500v1 platforms
  - powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
  - x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
  - powerpc/powernv: add missing of_node_put() in opal_export_attrs()
  - powerpc/pci_dn: Add missing of_node_put()
  - powerpc/sysdev/fsl_msi: Add missing of_node_put()
  - powerpc/math_emu/efp: Include module.h
  - mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
  - clk: ast2600: BCLK comes from EPLL
  - clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
  - clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
  - clk: baikal-t1: Add SATA internal ref clock buffer
  - clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
  - clk: baikal-t1: Fix invalid xGMAC PTP clock divider
  - clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
  - spmi: pmic-arb: correct duplicate APID to PPID mapping logic
  - dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
  - clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
  - mfd: sm501: Add check for platform_driver_register()
  - mfd: fsl-imx25: Fix check for platform_get_irq() errors
  - mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
  - mfd: lp8788: Fix an error handling path in lp8788_probe()
  - mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
  - mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
  - fsi: core: Check error number after calling ida_simple_get
  - clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
  - scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
  - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
  - serial: 8250: Fix restoring termios speed after suspend
  - firmware: google: Test spinlock on panic path to avoid lockups
  - staging: vt6655: fix some erroneous memory clean-up loops
  - phy: qualcomm: call clk_disable_unprepare in the error handling
  - tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
  - serial: 8250: Toggle IER bits on only after irq has been set up
  - serial: 8250: Add an empty line and remove some useless {}
  - drivers: serial: jsm: fix some leaks in probe
  - usb: gadget: function: fix dangling pnp_string in f_printer.c
  - xhci: Don't show warning for reinit on known broken suspend
  - IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
  - RDMA/cm: Use SLID in the work completion as the DLID in responder side
  - md/raid5: Ensure stripe_fill happens on non-read IO with journal
  - md: Replace snprintf with scnprintf
  - mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
  - ata: fix ata_id_has_dipm()
  - ata: fix ata_id_has_ncq_autosense()
  - ata: fix ata_id_has_devslp()
  - ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
  - RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
  - mtd: rawnand: fsl_elbc: Fix none ECC mode
  - mtd: devices: docg3: check the return value of devm_ioremap() in the probe
  - dyndbg: drop EXPORTed dynamic_debug_exec_queries
  - dyndbg: let query-modname override actual module name
  - dyndbg: fix module.dyndbg handling
  - dyndbg: fix static_branch manipulation
  - dmaengine: hisilicon: Add multi-thread support for a DMA channel
  - dmaengine: hisilicon: Fix CQ head update
  - dmaengine: hisilicon: Disable channels when unregister hisi_dma
  - fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
  - misc: ocxl: fix possible refcount leak in afu_ioctl()
  - RDMA/rxe: Fix the error caused by qp->sk
  - RDMA/rxe: Fix "kernel NULL pointer dereference" error
  - media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
  - media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
  - tty: xilinx_uartps: Fix the ignore_status
  - media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
  - HSI: omap_ssi_port: Fix dma_map_sg error check
  - HSI: omap_ssi: Fix refcount leak in ssi_probe
  - clk: tegra20: Fix refcount leak in tegra20_clock_init
  - clk: tegra: Fix refcount leak in tegra114_clock_init
  - clk: tegra: Fix refcount leak in tegra210_clock_init
  - clk: sprd: Hold reference returned by of_get_parent()
  - clk: berlin: Add of_node_put() for of_get_parent()
  - clk: qoriq: Hold reference returned by of_get_parent()
  - clk: oxnas: Hold reference returned by of_get_parent()
  - clk: meson: Hold reference returned by of_get_parent()
  - usb: common: debug: Check non-standard control requests
  - usb: common: move function's kerneldoc next to its definition
  - usb: common: add function to get interval expressed in us unit
  - usb: common: Parse for USB SSP genXxY
  - usb: ch9: Add USB 3.2 SSP attributes
  - iio: ABI: Fix wrong format of differential capacitance channel ABI.
  - iio: inkern: only release the device node when done with it
  - iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
  - iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
  - iio: adc: at91-sama5d2_adc: check return status for pressure and touch
  - iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
  - ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
  - ARM: Drop CMDLINE_* dependency on ATAGS
  - ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
  - soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
  - ia64: export memory_add_physaddr_to_nid to fix cxl build error
  - ARM: dts: kirkwood: lsxl: remove first ethernet port
  - ARM: dts: kirkwood: lsxl: fix serial line
  - ARM: dts: turris-omnia: Fix mpp26 pin name and comment
  - soc: qcom: smem_state: Add refcounting for the 'state->of_node'
  - soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
  - memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
  - memory: of: Fix refcount leak bug in of_get_ddr_timings()
  - memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
  - ALSA: hda/hdmi: Don't skip notification handling during PM operation
  - ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
  - ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
  - ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
  - ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
  - mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
  - ALSA: dmaengine: increment buffer pointer atomically
  - ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
  - drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
  - drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx
  - ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
  - mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
  - drm/omap: dss: Fix refcount leak bugs
  - ALSA: hda: beep: Simplify keep-power-at-enable behavior
  - ASoC: rsnd: Add check for rsnd_mod_power_on
  - drm/bridge: megachips: Fix a null pointer dereference bug
  - drm: fix drm_mipi_dbi build errors
  - platform/x86: msi-laptop: Fix resource cleanup
  - platform/x86: msi-laptop: Fix old-ec check for backlight registering
  - ASoC: tas2764: Fix mute/unmute
  - ASoC: tas2764: Drop conflicting set_bias_level power setting
  - ASoC: tas2764: Allow mono streams
  - platform/chrome: fix memory corruption in ioctl
  - platform/chrome: fix double-free in chromeos_laptop_prepare()
  - drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
  - drm/dp_mst: fix drm_dp_dpcd_read return value checks
  - drm/bridge: parade-ps8640: Fix regulator supply order
  - drm/mipi-dsi: Detach devices when removing the host
  - drm/bridge: Avoid uninitialized variable warning
  - drm: bridge: adv7511: fix CEC power down control register offset
  - once: add DO_ONCE_SLOW() for sleepable contexts
  - net/ieee802154: reject zero-sized raw_sendmsg()
  - net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
  - spi: Ensure that sg_table won't be used after being freed
  - tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
  - sctp: handle the error returned from sctp_auth_asoc_init_active_key
  - vhost/vsock: Use kvmalloc/kvfree for larger packets.
  - wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
  - spi: s3c64xx: Fix large transfers with DMA
  - netfilter: nft_fib: Fix for rpath check with VRF devices
  - Bluetooth: hci_core: Fix not handling link timeouts propertly
  - i2c: mlxbf: support lock mechanism
  - spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
  - spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
  - x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
  - x86/microcode/AMD: Track patch allocation size explicitly
  - wifi: ath11k: fix number of VHT beamformee spatial streams
  - Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
  - bpf: Ensure correct locking around vulnerable function find_vpid()
  - net: fs_enet: Fix wrong check in do_pd_setup
  - wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
  - wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
  - bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
  - spi: meson-spicc: do not rely on busy flag in pow2 clk ops
  - wifi: rtl8xxxu: Fix skb misuse in TX queue selection
  - spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
  - spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
  - selftests/xsk: Avoid use-after-free on ctx
  - wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
  - Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
  - Bluetooth: btusb: fix excessive stack usage
  - Bluetooth: btusb: Fine-tune mt7663 mechanism.
  - x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
  - spi: mt7621: Fix an error message in mt7621_spi_probe()
  - bpftool: Fix a wrong type cast in btf_dumper_int
  - wifi: mac80211: allow bw change during channel switch in mesh
  - leds: lm3601x: Don't use mutex after it was destroyed
  - wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
  - nfsd: Fix a memory leak in an error handling path
  - objtool: Preserve special st_shndx indexes in elf_update_symbol
  - ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
  - ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
  - MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
  - MIPS: SGI-IP27: Free some unused memory
  - sh: machvec: Use char[] for section boundaries
  - userfaultfd: open userfaultfds with O_RDONLY
  - selinux: use "grep -E" instead of "egrep"
  - smb3: must initialize two ACL struct fields to zero
  - drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
  - drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
  - drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
  - drm/nouveau/kms/nv140-: Disable interlacing
  - staging: greybus: audio_helper: remove unused and wrong debugfs usage
  - KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
  - KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
  - KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
  - media: cedrus: Set the platform driver data earlier
  - efi: libstub: drop pointless get_memory_map() call
  - thunderbolt: Explicitly enable lane adapter hotplug events at startup
  - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
  - ring-buffer: Add ring_buffer_wake_waiters()
  - ring-buffer: Check pending waiters when doing wake ups as well
  - ring-buffer: Have the shortest_full queue be the shortest not longest
  - ring-buffer: Allow splice to read previous partially read pages
  - ftrace: Properly unset FTRACE_HASH_FL_MOD
  - livepatch: fix race between fork and KLP transition
  - ext4: update 'state->fc_regions_size' after successful memory allocation
  - ext4: fix potential memory leak in ext4_fc_record_regions()
  - ext4: fix potential memory leak in ext4_fc_record_modified_inode()
  - ext4: fix miss release buffer head in ext4_fc_write_inode
  - ext4: place buffer head allocation before handle start
  - ext4: don't increase iversion counter for ea_inodes
  - ext4: make ext4_lazyinit_thread freezable
  - ext4: avoid crash when inline data creation follows DIO write
  - jbd2: add miss release buffer head in fc_do_one_pass()
  - jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
  - jbd2: fix potential buffer head reference count leak
  - jbd2: wake up journal waiters in FIFO order, not LIFO
  - hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
  - hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
  - hardening: Clarify Kconfig text for auto-var-init
  - f2fs: fix to do sanity check on summary info
  - f2fs: fix to do sanity check on destination blkaddr during recovery
  - f2fs: increase the limit for reserve_root
  - btrfs: fix race between quota enable and quota rescan ioctl
  - scsi: qedf: Populate sysfs attributes for vport
  - powerpc/boot: Explicitly disable usage of SPE instructions
  - powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
  - PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
  - mm/mmap: undo ->mmap() when arch_validate_flags() fails
  - drm/udl: Restore display mode on resume
  - drm/virtio: Check whether transferred 2D BO is shmem
  - nvme-pci: set min_align_mask before calculating max_hw_sectors
  - UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - riscv: Pass -mno-relax only on lld < 15.0.0
  - riscv: Make VM_WRITE imply VM_READ
  - riscv: Allow PROT_WRITE-only mmap()
  - parisc: fbdev/stifb: Align graphics memory size to 4MB
  - RISC-V: Make port I/O string accessors actually work
  - regulator: qcom_rpm: Fix circular deferral regression
  - hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
  - ASoC: wcd934x: fix order of Slimbus unprepare/disable
  - ASoC: wcd9335: fix order of Slimbus unprepare/disable
  - platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
  - HID: multitouch: Add memory barriers
  - fs: dlm: handle -EBUSY first in lock arg validation
  - fs: dlm: fix race between test_bit() and queue_work()
  - mmc: sdhci-sprd: Fix minimum clock limit
  - can: kvaser_usb_leaf: Fix CAN state after restart
  - can: kvaser_usb_leaf: Fix TX queue out of sync after restart
  - can: kvaser_usb_leaf: Fix overread with an invalid command
  - can: kvaser_usb: Fix use of uninitialized completion
  - usb: add quirks for Lenovo OneLink+ Dock
  - iio: pressure: dps310: Reset chip after timeout
  - iio: pressure: dps310: Refactor startup procedure
  - iio: adc: ad7923: fix channel readings for some variants
  - iio: ltc2497: Fix reading conversion results
  - iio: dac: ad5593r: Fix i2c read protocol requirements
  - cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
  - cifs: destage dirty pages before re-reading them for cache=none
  - mtd: rawnand: atmel: Unmap streaming DMA mappings
  - ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
  - ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
  - ALSA: hda/realtek: Correct pin configs for ASUS G533Z
  - ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
  - ALSA: usb-audio: Fix NULL dererence at error path
  - ALSA: usb-audio: Fix potential memory leaks
  - ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
  - ALSA: oss: Fix potential deadlock at unregistration


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.30.0.106
changelog:
  - !631 Backport CVEs and bugfixes
  - bonding: Fix memory leak when changing bond type to Ethernet
  - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
  - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
  - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
  - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
  - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
  - mm: mem_reliable: Fix blank space issue in reliable_report_usage()
  - timers/nohz: Last resort update jiffies on nohz_full IRQ entry
  - xfs: don't leak btree cursor when insrec fails after a split
  - xfs: avoid unnecessary runtime sibling pointer endian conversions
  - xfs: detect self referencing btree sibling pointers
  - xfs: introduce xfs_buf_daddr()
  - xfs: move kernel-specific superblock validation out of libxfs
  - xfs: bound maximum wait time for inodegc work
  - xfs: introduce xfs_inodegc_push()
  - xfs: flush inodegc workqueue tasks before cancel
  - xfs: drop async cache flushes from CIL commits.
  - xfs: limit iclog tail updates
  - xfs: need to see iclog flags in tracing
  - io_uring: ensure that io_init_req() passes in the right issue_flags
  - io_uring: add missing lock in io_get_file_fixed


author: zhujun2 <zhujun2@cmss.chinamobile.com> - 5.10.0-136.30.0.106.1
changelog:
  - napi: fix race inside napi_enable
  - net/tls: getsockopt supports complete algorithm list
  - net/tls: tls_crypto_context add supported algorithms context
  - selftests/tls: add SM4 algorithm dependency for tls selftests
  - selftests/tls: add SM4 GCM/CCM to tls selftests
  - net/tls: support SM4 GCM/CCM algorithm
  - arm64: Add CPU freqency information for /proc/cpuinfo
  - arm64: Expose address bits (physical/virtual)
  - mm, kidled: fix race when free idle age
  - mm, kidled: skip node which has none memory
  - meminfo: Clean warnings in meminfo_proc_show()
  - mm: Pin code section of process in memory
  - mm:break in readahead when multiple threads detected
  - scripts: sign-file - support the sm2-with-sm3 signature based on openssl version less than 3.x
  - cpuacct: fix enumeration sequence error for sched sli latency
  - cpuacct: fix cgroup usage overflow when sirq grows
  - blk-throttle: fix race bug that loses wakeup event
  - selftests: openat2: Fix testing failure for O_LARGEFILE flag
  - arm64: Fix the CPPC ioremap failure
  - RDMA/erdma: fix SPDX header for erdma
  - RDMA/erdma: remove useless print info
  - RDMA/erdma: add irq affinity based on numa
  - net: enable PingTrace feature by default
  - RDMA/erdma: fix mr count bug in ib_alloc_mr
  - MAINTAINERS: Add maintainers for ERDMA
  - RDMA/erdma: Add ERDMA driver
  - net/smc: Introduce iWARP extended information in struct smc_link
  - Revert "net/smc: don't wait for send buffer space when data was already sent"
  - net: add PingTrace feature support
  - UKFEF: report kernel warning
  - UKFEF: report kernel crash event
  - UKFEF: report bad mm_struct state
  - UKFEF: report ext4-fs error
  - UKFEF: report fatal signal event
  - UKFEF: report memory alloc failed event
  - UKFEF: report softlockup event
  - UKFEF: report rcu-stall event
  - UKFEF: report hung-task event
  - UKFEF: report oom event
  - UKFEF: report block error
  - UKFEF: report mce event
  - UKFEF: unified kernel fault event framework
  - KVM: arm64: add pv_qspinlock select in menuconfig
  - KVM: arm64: Add SMCCC PV-qspinlock to kick cpu
  - KVM: arm64: Add SMCCC PV-qspinlock uid
  - net/smc: Remove redundant assignment to rc
  - virio-net: add lro option
  - X.509: Support parsing certificate using SM2 algorithm
  - virtio-net: fix for skb_over_panic inside big mode
  - virtio_net: get build_skb() buf by data ptr
  - virtio-net: fix for unable to handle page fault for address
  - fix use-after-free in skb_gro_receive
  - virtio-net: page_to_skb() use build_skb when there's sufficient tailroom
  - mm: Fix minus "Cached" in meminfo
  - memcg: Restrict memcg zombie scan interval
  - arm64: shield warn msgs when halt-poll is not supproted
  - cpuinfo: Add cpuinfo support of cpu quota and cpu shard
  - make the rich container support k8s.
  - sysctl: set different default value for rich container.
  - sched: Introduce load 1/5/15 for running tasks
  - sched: get_sched_lat_count_idx optimization
  - sched: Finer grain of sched latency
  - sched: Add "nr" to sched latency histogram
  - sched: Add cgroup's scheduling latency histograms
  - sched: Add cgroup-level blocked time histograms
  - Introduce cfs scheduling latency histograms
  - cpuacct: make cpuacct record nr_migrations
  - sched/fair: Add sched_cfs_statistics to export some
  - sched/fair: Add parent_wait_contrib statistics
  - meminfo: Add meminfo support for rich container
  - Revert "sched/debug: Use task_pid_nr_ns in /proc/$pid/sched"
  - sched: introduce asynchronous cgroup load calculation.
  - sched: Add SLI switch for cpuacct
  - fs,quota: Restrict privileged hardlimit in rich container
  - pidstat: Add task uptime support for rich container
  - proc/uptime: Add uptime support for rich container
  - proc/loadavg: Add load support for rich containr
  - proc/stat: Add top support for rich container
  - pidns: Support rich container switch on/off
  - sysfs/cpu: Add online cpus support for rich container
  - arm64: cpuinfo: Add cpuinfo support for rich container
  - x86: cpuinfo: Add cpuinfo support for rich
  - sched: Introduce per-cgroup iowait accounting
  - sched: Introduce per-cgroup steal accounting
  - cpuset: fix frame size longer than 2048 in update_cpumasks_hier
  - sched: Introduce per-cgroup idle accounting
  - cpuacct: Export nr_running & nr_uninterruptible
  - sched/cputime: Fix guest cputime of cpuacct.proc_stat
  - cpuacct/proc_stat: Consider isolcpus
  - cpuacct: export cpuacct.proc_stat interface
  - sched: Maintain "nr_uninterruptible" in runqueue
  - sched: add kconfig SCHED_SLI
  - mm, memcg: introduce per memcg switch to reap
  - mm, memcg: Provide users the ability to reap zombie memcgs
  - kidled: introduce local and accumulated idle_page_stats
  - mm: Support kidled
  - arm64: fix numa distance for HiSilicon chips
  - mm: memcontrol: enable oom.group on cgroup-v1
  - mm: memcontrol: introduce memcg priority oom
  - kernel: cgroup: account number of tasks in thecss and its descendants
  - EDAC/mce_amd: Print !SMCA processor warning for 0x19 family
  - io_uring: keep IORING_SETUP_SQPOLL_PERCPU consistent with liburing
  - virtio: add module option to force_xdp
  - jbd2: jbd2_seq_stats_next should increase position index
  - arm64: Pass an appropriate invalidate physicaladdress to KVM
  - Revert "virtio_net: enable napi_tx by default"
  - blk: fix wrong usage about __rq_for_each_bio()
  - livepatch: support forced patching with stop machine model
  - livepatch: adjust some printing level
  - locking/qspinlock/x86: Fix performance regression caused by virt_spin_lock
  - blk: add iohang check function
  - block: add counter to track io request's d2c time
  - cpuidle-haltpoll: Switch on cpuidle-haltpoll by default
  - arm64: add reliable stacktraces support
  - panic: change the default value of crash_kexec_post_notifiers to true
  - arm64: Re-define the hypervisor call of pv poll control
  - arm64: Fix the incorrect base address
  - arm64: Add new configs to support halt polling
  - cpuidle: Allow enabling the halt polling on MIME-Version: 1.0
  - arm64: Add new parameter to control halt polling
  - arm64: Introduce cpuidle_haltpoll.h header file
  - arm64: Add kvm_para.h header file
  - arm64: Introduce default_idle() interface
  - nitro_enclaves: Split mmio region and increase EIF_LOAD_OFFSET
  - arm64: Introduce command line parameter to disable CNP
  - pci/iohub-sriov: fix iohub-sriov VF probe issue
  - introduce deferred_meminit boot parameter
  - arm64: Support PV poll control feature
  - tcp_rt module: fix bug of using vfree to release the memory obtained by kmalloc
  - tcp_rt: add Documentation for tcp-rt
  - tcp_rt module: peer ports add more statistics
  - tcp_rt module: support pports_range
  - tcp_rt module: change the _tcp_rt_stats item type to u64
  - tcp_rt module: use atomic64_xchg replace atomic64_read and atomic64_set
  - tcp_rt module: save tcp rtt when R record, change the unit to us
  - tcp_rt module: P record add rt and tcp reorder info
  - tcp_rt module: simplify the parameter name
  - tcp_rt module: fix repeat stats for mrtt
  - tcp_rt module: change relay work mode
  - tcp_rt module: change real to stats
  - tcp_rt module: support ports_range
  - tcp_rt module: add tcp_rt module
  - add tcprt framework to kernel
  - mm: add an interface to adjust the penalty time dynamically
  - mm: support swap.high for cgroup v1
  - mm,memcg: record latency of memcg wmark reclaim
  - mm: count the memory pressure when wmark meets.
  - mm: memcontrol: make distance between wmark_low and wmark_high configurable
  - mm: vmscan: make memcg kswapd set memcg state to dirty or writeback
  - mm: memcontrol: treat memcg wmark reclaim work as kswapd
  - mm: memcontrol: add background reclaim support for cgroupv2
  - mm: memcontrol: support background async page reclaim
  - mm, memcg: make direct swapin latency more accurate
  - mm, memcg: optimize eventfds with rculist
  - mm, memcg: introduce memsli monitor
  - mm, memcg: record memory stall latency in every memcg
  - net: track the pid who created socks
  - virtio_net: introduce TX timeout dev_watchdog handler
  - udp: Add udp sockopt UDP_USE_WRITE_QUEUE
  - tcp: Add sysctl for tcp syn/synack retrans timeout
  - tcp: Add sysctl for TCP_INIT_CWND
  - net/sched: Output Tx queue state on timeout
  - tcp: Add feature support for tunable tcp delayed ack
  - tcp: add tcp_tw_timeout_inherit system wide option
  - net/tcp: Support tunable tcp timeout value in TIME-WAIT state
  - hookers: add arm64 dependency
  - Hookers: add arm64 support
  - net: kernel hookers service for toa module
  - arm64: use __kernel_text_address to tell unwind
  - Revert "kallsyms: unexport kallsyms_lookup_name() and kallsyms_on_each_symbol()"
  - mm: add ratelimit printk to prevent softlockup
  - mm: limit the print message frequency when memcg oom triggers
  - mm: restrict the print message frequency further when memcg oom triggers.
  - block: replace reserved field with extended bio_flags
  - fuse: add sysfs api to flush processing queue requests
  - block-throttle: only do io statistics if needed
  - blk-throttle: limit bios to fix amount of pages entering writeback prematurely
  - block-throttle: add counters for completed io
  - block-throttle: code cleanup
  - blk-throttle: add throttled io/bytes counter
  - blk-throttle: fix tg NULL pointer dereference
  - blk-throttle: support io delay stats
  - fs: record page or bio info while process is waitting on it
  - io_uring: revert io_file_supports_async()
  - dm: add support for DM_TARGET_NOWAIT for various targets
  - pci/iohub-sriov: Support for Alibaba PCIe IOHub SRIOV
  - mm: add proc interface to control context readahead
  - jbd2: track slow handle which is preventing transaction committing
  - iocost: add ioc_gq stat
  - nvme-pci: Disable dicard zero-out functionality on Intel's P3600 NVMe disk drive
  - jbd2: add proc entry to control whether doing buffer copy-out
  - fs,ext4: remove projid limit when create hard link
  - jbd2: add new "stats" proc file
  - jbd2: create jbd2-ckpt thread for journal checkpoint
  - virtio_ring: Support using kernel booting parameter when compiled as module
  - fs/writeback: Attach inode's wb to root if needed
  - fs/writeback: fix double free of blkcg_css
  - writeback: add debug info for memcg-blkcg link 3 i
  - kconfig: Disable x86 clocksource watchdog
  - drivers/virtio: add vring_force_dma_api boot param


author: zhujun2 <zhujun2@cmss.chinamobile.com> - 5.10.0-136.30.0.106.2
changelog:
  - sched: Queue task on wakelist in the same llc if the wakee cpu is idle
  - mm: damon: change kmalloc() flags in damon_new_region()
  - mm: damon: Fixed potential race issues when accessing "damon_regon"
  - mm: damon: add flush once in one sampling period
  - Documentation/filesystem/dax: DAX on virtiofs
  - fuse: mark inode DONT_CACHE when per inode DAX hint changes
  - fuse: negotiate per inode DAX in FUSE_INIT
  - fuse: enable per inode DAX
  - fuse: support per inode DAX in fuse protocol
  - fuse: make DAX mount option a tri-state
  - fuse: add fuse_should_enable_dax() helper
  - arm64: Export generic asm/kvm_para.h to userspace
  - mm: duptext: consider memory nodes allowed when duplicating
  - drm/cirrus: fix a NULL vs IS_ERR() checks
  - iommu/arm-smmu-v3: reading queue event info for pcie smmu
  - mm: correct slab meminfo in rich container
  - ACPI: add detection for core die topology
  - mm: disable proactive compaction by default
  - mm, kidled: optimize kidled_set_page_age() call
  - sched: Make membarrier_mm_sync_core_before_usermode() empty on ARM
  - RDMA/erdma: Fix bug in destroy qp
  - RDMA/erdma: ERDMA driver bugfix
  - RDMA/erdma: Update for hardware and SMC-R
  - RDMA/erdma: fix SPDX header for erdma
  - RDMA/erdma: remove useless print info
  - RDMA/erdma: add irq affinity based on numa
  - RDMA/erdma: fix mr count bug in ib_alloc_mr
  - RDMA/erdma: Add ERDMA driver
  - net/smc: Introduce rtoken validity check before sending
  - net/smc: Support rq flow control in smc-r link layer
  - net/smc: Avoid unmapping bufs from unused links
  - net/smc: don't call ib_req_notify_cq in the send routine
  - net/smc: Add TX and RX diagnosis information
  - net/smc: Introduce SMC-R-related proc files
  - net/smc: Expose SMCPROTO_SMC and SMCPROTO_SMC6 to userspace
  - net/smc: Send out the remaining data in sndbuf before close
  - Revert "net/smc: don't req_notify until all CQEs drained
  - net/smc: don't send in the BH context if sock_owned_by_user
  - net/smc: don't req_notify until all CQEs drained
  - net/smc: send directly on setting TCP_NODELAY
  - net/smc: add autocorking support
  - net/smc: Call trace_smc_tx_sendmsg when data corked
  - net/smc: Fix cleanup when register ULP fails
  - net/smc: return ETIMEDOUT when smc_connect_clc() timeout
  - net/smc: Add comment for smc_tx_pending
  - net/smc: Dynamic control handshake limitation by socket options
  - net/smc: Limit SMC visits when handshake workqueue congested
  - net/smc: Limit backlog connections
  - net/smc: Make smc_tcp_listen_work() independent
  - net/smc: Cork when sendpage with MSG_SENDPAGE_NOTLAST flag
  - net/smc: Remove corked dealyed work
  - net/smc: Send directly when TCP_CORK is cleared
  - net/smc: Fix hung_task when removing SMC-R devices
  - net/smc: Remove unused function declaration
  - net/smc: Introduce a new conn->lgr validity check helper
  - net/smc: Resolve the race between link group access and termination
  - net/smc: Reset conn->lgr when link group registration fails
  - net/smc: Introduce net namespace support for linkgroup
  - net/smc: don't send CDC/LLC message if link not ready
  - net/smc: Keep smc_close_final rc during active close
  - Revert "ck: RDMA/erdma: Add ERDMA driver"
  - mm: duptext: skip PG_mlocked operations on slave pages
  - x86/pkey: Re-fix undefined behaviour with PKRU_WD_BIT
  - mm: introduce ability to reserve page cache on system wide
  - userfaultfd/selftests: fixup supported features in userfaultfd_open
  - mm, kidled: add some missed comments
  - mm/damon: Solve the bug of NUMA statistics about threads
  - mm: fix suspicious RCU usage in mem_cgroup_account_oom_skip
  - mm/damon: Fix NUMA statistics bug
  - mm: add ability to restrict swapout in global reclaim
  - arm64: drivers/perf: add HN-F PMU filter events support
  - pci: Add a quirk for ALIBABA yitian710 to recover fatal aer
  - mm, memcg: use css_tryget_online() instead of css_get()
  - mm: duptext: cond_resched when truncating duplicated pages
  - mm: duptext: early bail out when mlock slave page
  - efi: cper: print error type string of raw data info
  - efi: cper: print raw data info of estatus for Yitian SoC
  - scsi: add a proc interface to cancel scsi eh reset
  - x86/fpu: Export some symbols to kvm
  - arm64:ipi: add crash nmi ipi support with PSEUDO_NMI
  - mm: kidled: show the kidled age layout in page flags
  - ACPI: APEI: rename ghes_init with an "acpi_" prefix
  - ACPI: APEI: explicit init HEST and GHES in apci_init
  - arm64: drivers/perf: support PCIe PMU counter multiplexing
  - arm64: drivers/perf: enable 64 bit time based analysis counter
  - arm64: drivers/perf: add PCIe PMU driver for Yitian SoC
  - arm64: drivers/perf: change DDRSS PMU irq_flag to IRQF_SHARED
  - arm64: drivers/perf: add cycle event to calculate bandwidth
  - arm64: driver/perf: disable DDRSS interrupt before free irq
  - arm64: drivers/perf: add DDR Sub-System PMU driver for Yitian SoC
  - arm64: drivers/perf: fix event_sel width of XP node
  - arm64: drivers/perf: overwrite the ccla_rni node with ccla
  - arm64: drivers/perf: overwrite the devid of ccla_rni node
  - arm64: drivers/perf: remove the haps workaround
  - arm64: drivers/perf: add CMN-700 PMU driver for Yitian SoC
  - script/sorttable: Fix some initialization problems
  - scripts: ftrace - move the sort-processing in ftrace_init
  - PCI: Waiting command completed in get_port_device_capability()
  - ACPI / APEI: restore interrupt before panic in sdei flow
  - coresight: change tmc from misc device to
  - perf: smmuv3_pmu: enable the global filter for yitian
  - arm64:mpam: Move KunPeng mpam relative codes to staging dir
  - kprobes: fix ftrace conflict check for aarch64
  - block: disable iopoll for split bio
  - ACPI: APEI: EINJ: Relax platform response timeout to 1 second
  - SPI: support Yitian spi
  - I2C: designware i2c support
  - RDMA/erdma: Fix bug in destroy qp
  - net/smc: add comments for smc_link_{usable|sendable}
  - net/smc: Introduce TCP ULP support
  - net/smc: Introduce net namespace support for linkgroup
  - net/smc: fix kernel panic caused by race of smc_sock
  - mm/damon/dbgfs: Add numa simulate switch
  - mm/damon: Add 'damon_region' NUMA local and remote access statistics
  - mm/damon: Add 'damon_region' NUMA fault simulation support
  - mm/damon: Add NUMA local and remote variables in 'damon_region'
  - RDMA/erdma: ERDMA driver bugfix
  - mm: set some slab function always inline
  - i2c: designware: Get right data length
  - task_work: cleanup notification modes
  - crypto: ccp: Don't check tee support on Hygon platform
  - crypto: ccp: Add Hygon CSV support
  - RDMA/erdma: Update for hardware and SMC-R
  - mm: duptext: truncate all duplicated pages when disable duptext
  - mm: duptext: do not mlock slave duplicated page
  - mm: duptext: stop migration when suitable for duptext
  - mm: duptext: keep mapped duplicated pages when drop caches
  - mm: duptext: remove duplicated pages when split file THP
  - mm: duptext: remove duplicated pages when
  - mm: duptext: remove duplicated pages when removed from page cache
  - mm: duptext: create duplicated page for
  - mm: duptext: add core implementation
  - mm: duptext: add PG_dup flag
  - net/smc: Supplement for SMC-R iWARP support
  - net/smc: Clear memory when release and reuse buffer
  - net/smc: Clean up local struct sock variables
  - net/smc: Print function name in smcr_link_down tracepoint
  - net/smc: Introduce tracepoint for smcr link down
  - net/smc: Introduce tracepoints for tx and rx msg
  - net/smc: Introduce tracepoint for fallback
  - mm, thp: hugetext: replace hugetext_enabled with hugetext_file{anon}_enabled
  - mm, thp: hugetext: redesign fine-grained hugetext_enabled
  - mm, thp: hugetext: accelerate khugepaged for hugetext vma
  - mm, thp: hugetext: add anonymous and executable vma into hugetext
  - mm, thp: hugetext: make PIC binary mapping address THP align
  - mm, thp: hugetext: make executable file mapping address THP align
  - mm, thp: introduce hugetext framework
  - mm, thp: check page mapping when truncating page cache
  - kprobes: Check function patched by module without kprobe
  - sched: Add a stub function in task's exiting
  - hooker: fix a crash when loading the hooker module
  - xsk: fugfix for xsk_pool_pgs_delay_unpin argument type when no XDP SOCKET
  - mm: coldpgs: replace PageTranshuge because not hold PageLock
  - virtio_net: change xsk_budget default to 64
  - virtio-net: support unpin xsk pages
  - virtio_net: add __netif_tx_lock_bh before access sq->xsk
  - virtio-net: bugfix for xsk free the xsk.hdr with race
  - virtio-net: add barrier for bit option
  - virtio-net: xsk remove the timer cancel option
  - virtio-net: fix kcalloc with GFP_ATOMIC inside xsk enable
  - virtio-net, xsk: add stats from xsk
  - virtio-net, xsk: virtio-net support xsk
  - virtio-net: prepare for support xsk
  - virtio-net: distinguish XDP_TX and XSK XMIT ctx
  - xsk: remove dma check
  - xsk: support xsk_pool_get_page
  - xsk: support unpin page delay
  - sched: Fix cg_nr_iowait race condition
  - cgroup: add fast path for cgroup_mkdir()
  - cgroup: add user space interface for cgroup pool
  - mm: use seq_file to show add_pid file
  - memcg: Account throttled time due to memory.wmark_min_adj
  - memcg: Introduce memory.wmark_min_adj
  - sched: fix load average always > 1


author: zhujun2 <zhujun2@cmss.chinamobile.com> - 5.10.0-136.30.0.106.3
changelog:
  - PHYTIUM: rtc: Add Phytium rtc device support
  - PHYTIUM: ACPI: APD: Add clock frequency for for phytium i2c control
  - PHYTIUM: ft2000: fixed smmu tlb timeout by msi iommu map
  - PHYTIUM: iommu: add iommu_hwfix to work around arm-smmu hw issues
  - ACPICA: Support using op_region by PCC master subspace
  - Add a boot command line for rich container
  - net/smc: fix panic smc_tcp_syn_recv_sock() while closing listen socket
  - net/smc: fix deadlock when lgr terminating
  - Revert "anolis: net/smc: fix deadlock when lgr terminating"
  - net/smc: Use SO_REUSEADDR if keep clcsock
  - Revert "anolis: net/smc: fix SMC_CLC_DECL_ERR_REGRMB without smc_server_lgr_pending"
  - drivers/perf: add a separate config for DesignWare PCIe controller PMU
  - drivers/perf: clean up unused variable
  - drivers/perf: simplify extended capability founding
  - drivers/perf: simplify Root Port check
  - mm: fcm: do not unconditionally call fixup ops
  - Revert "anolis: mm: fcm: do not unconditionally call fcm_fixup_vma"
  - crypto/ycc: optimize the flow of device error
  - efi: cper: add DDR raw data support for Yitian
  - efi: cper: refactor raw data handling for Yitian
  - efi: cper: check Yitian raw data signature
  - efi: cper: move Yitian specific raw data handling into CONFIG_YITIAN_CPER_RAWDATA
  - mm: change del_pid permission to write only
  - net/smc: Fix NULL pointer in smc_getname while first contact clcsock release
  - net/smc: skip smc_llc_flow_initiate while SMC-1RTT
  - net/smc: fix SMC_CLC_DECL_ERR_REGRMB without smc_server_lgr_pending
  - net/smc: remove locks smc_client_lgr_pending and smc_server_lgr_pending
  - Revert "anolis: net/smc: remove locks smc_client_lgr_pending and smc_server_lgr_pending"
  - Revert "anolis: net/smc: fix SMC_CLC_DECL_ERR_REGRMB without smc_server_lgr_pending"
  - Revert "anolis: net/smc: skip smc_llc_flow_initiate while SMC-1RTT"
  - mm: fcm: do not unconditionally call fcm_fixup_vma
  - arm64: spectre: added a description of the parameter nospectre_bhb
  - drivers: base: cacheinfo: export get_cpu_cacheinfo symbol
  - crypto/ycc: fix unexpected logic when devices probing
  - arm64: lib: __arch_copy_in_user(): fold fixups into body
  - mm: fix an compiler issue when memcg disabled
  - mm: Do not scan cold slab when fails to allocate memory
  - mm: fix cold slab memory leak
  - mm: fix an memory exception issue when kmem accouting
  - correct fd attach ioctl arg type
  - mm: duptext: fix build error when !CONFIG_MEMCG
  - mm: hugetext: pad binary mapping for THP candidate
  - efi/cper: Reformat CPER memory error location to more readable
  - efi/cper: Add a cper_mem_err_status_str() to decode error description
  - block: I/O error occurs during SATA disk stress test
  - net/smc: skip smc_llc_flow_initiate while SMC-1RTT
  - net/smc: fix SMC_CLC_DECL_ERR_REGRMB without smc_server_lgr_pending
  - net/smc: remove locks smc_client_lgr_pending and smc_server_lgr_pending
  - net/smc: check sk_ack_backlog before kernel_accept
  - net/smc: do not call cancel smc_listen_work when smc use fallback
  - net/smc: only cancel connect_work when connect nonblock
  - net/smc: Introduce multiple tcp listen works to enhance tcp_listen_work
  - net/smc: smc_sock_alloc after kernel_accept
  - net/smc: move sk_acceptq_{removed,add} into accept_q_lock's protection
  - net/smc: remove sock lock in smc_tcp_listen_work
  - net/smc: optimize for smc_accept_poll
  - net/smc: double check whether accept queue is empty before schedule_timeout
  - net/smc: only add wait queue when smc_accept_dequeue get null
  - net/smc: do not use free work if fallback
  - net/smc: queue free_work to smc_close_wq instead of smc_hs_wq
  - net/smc: Change listen wq to unbound highpri wq
  - net/smc: fix deadlock when lgr terminating
  - net/smc: Fix potential leaks on queued_smc_hs
  - net/smc: poll_cq one more time if the polled cqe is less than SMC_WR_MAX_POLL_CQE
  - net/smc: combine send cq and recv cq into one cq
  - net/smc: move wc loop out of smc_wr_rx_process_cqes
  - net/smc: Avoid syscall block by async smc_conn_free
  - net/smc: Disable confirm rkey message exchange when only one link exists
  - net/smc: Release lock before waiting for CLC accept message
  - net/smc: compress frequency of credits announcement by cdc msg
  - net/smc: do not send msg in receiving process when tx is not blocked.
  - net/smc: Avoid clcsock access panic
  - net/smc: Fix NULL sk pointer when access clcsock
  - net/smc: don't req_notify until all CQEs drained
  - net/smc: Introduce rtoken validity check before sending
  - net/smc: Multiple CQs per IB devices
  - net/smc: Introduce smc_ib_cq to bind link and cq
  - net/smc: Introduce link-related proc file
  - net/smc: Support rq flow control in smc-r link layer
  - net/smc: Introduce SMC-R-related proc files
  - net/smc: Expose SMCPROTO_SMC and SMCPROTO_SMC6 to userspace
  - net/smc: Allow virtually contiguous sndbufs or RMBs for SMC-R
  - net/smc: Use sysctl-specified types of buffers in new link group
  - net/smc: optimize for smc_sndbuf_sync_sg_for_device and smc_rmb_sync_sg_for_cpu
  - net/smc: remove redundant dma sync ops
  - net/smc: rdma write inline if qp has sufficient inline space
  - net/smc: send cdc msg inline if qp has sufficient inline space
  - net/smc: align the connect behaviour with TCP
  - Revert "anolis: net/smc: Expose SMCPROTO_SMC and SMCPROTO_SMC6 to userspace"
  - Revert "anolis: net/smc: Introduce SMC-R-related proc files"
  - Revert "anolis: net/smc: Add TX and RX diagnosis information"
  - Revert "anolis: net/smc: don't call ib_req_notify_cq in the send routine"
  - Revert "anolis: net/smc: Avoid unmapping bufs from unused links"
  - Revert "anolis: net/smc: Support rq flow control in smc-r link layer"
  - Revert "anolis: net/smc: Introduce rtoken validity check before sending"
  - Revert "anolis: net/smc: sync err info when TCP connection is refused"
  - arm64: drivers/perf: explicitly begin searching for PCI device
  - ACPI / PPTT: Downgrade the revision requirement in acpi_pptt_get_cpumask_from_cache_id_and_level
  - RDMA/erdma: Update for hardware
  - mm: fcm: introduce fast copy mm interface
  - MAINTAINERS: Add Yitian Cryptography Complex (YCC) driver maintainer entry
  - crypto/ycc: Add ycc iommu mapping for user space dma
  - crypto/ycc: Add hash algorithm support
  - crypto/ycc: Add sm2 algorithm support
  - crypto/ycc: Add rsa algorithm support
  - crypto/ycc: Add aead algorithm support
  - crypto/ycc: Add skcipher algorithm support
  - crypto/ycc: Send uevent when ycc gets fatal errors
  - crypto/ycc: Add device error handling support for ycc hw errors
  - crypto/ycc: Add uio support for ycc user rings
  - crypto/ycc: Add irq support for ycc kernel rings
  - crypto/ycc: Add ycc ring configuration
  - crypto/ycc: Add YCC (Yitian Cryptography Complex) accelerator driver
  - mm: support priority control when swap anonymous pages
  - net/hookers: modify hooker_uninstall comment
  - mm: kidled: Do not check the slab age when it disable the slab scan
  - mm: kidled: allocate slab age for specified kmem cache
  - mm: kidled: refactor cold slab
  - mm: kidled: use different variables to store the rounds
  - mm: kidled: Make kidled scan both page and slab equally
  - mm: kidled: make kidled to support scan slab separately
  - mm: kidled: isolate slab scan with page scan
  - mm: kidled: make kidled support to identify cold slab
  - mm: kidled: provide a unified interface in preparation for scanning slab
  - mm/damon: fix behaviour of init_regions
  - net/netfilter: rename nft_expr_info
  - efi: cper: check section header more appropriately
  - staging: mpam: Move the old MPAM ACPI definitions to staging directory
  - ACPI / PPTT: Add a helper to fill a cpumask from a cache with specific id and level
  - erofs: scan devices from device table
  - erofs: add 'fsid' mount option
  - erofs: implement fscache-based data read for inline layout
  - erofs: implement fscache-based data read for non-inline layout
  - erofs: implement fscache-based metadata read
  - erofs: register fscache context for extra data blobs
  - erofs: register fscache context for primary data blob
  - erofs: add anonymous inode caching metadata for data blobs
  - erofs: add fscache context helper functions
  - erofs: register fscache volume
  - erofs: add fscache mode check helper
  - erofs: make erofs_map_blocks() generally available
  - cachefiles: skip check for n_children in on-demand mode
  - cachefiles: enable on-demand read mode
  - cachefiles: implement on-demand read
  - cachefiles: notify the user daemon when withdrawing cookie
  - cachefiles: unbind cachefiles gracefully in on-demand mode
  - cachefiles: notify the user daemon when looking up cookie
  - erofs: use meta buffers for erofs_read_superblock()
  - erofs: use meta buffers for zmap operations
  - erofs: use meta buffers for xattr operations
  - erofs: use meta buffers for super operations
  - erofs: use meta buffers for inode operations
  - erofs: introduce meta buffer operations
  - erofs: clean up erofs_map_blocks tracepoints
  - erofs: add multiple device support
  - erofs: decouple basic mount options from fs_context
  - erofs: fix double free of 'copied'
  - erofs: support reading chunk-based uncompressed files
  - erofs: introduce chunk-based file on-disk format
  - erofs: clean up file headers & footers
  - fuse: Introduce fd attach ioctl to retrieve a fuse device
  - fuse: do not passthrough DIO file if unsupported
  - fuse: add fd passthrough IO metrics
  - fuse: update time properly for fd passthrough IO
  - fuse: allow further fs stacking on passthrough fuse
  - fuse: add ioctl to support fd passthrough write only
  - fuse: add sysctl API to toggle fd passthrough
  - fuse: Introduce passthrough for mmap
  - fuse: Use daemon creds in passthrough mode
  - fuse: Handle asynchronous read and write in passthrough
  - fuse: Introduce synchronous read and write for passthrough
  - fuse: Passthrough initialization and release
  - fuse: Definitions and ioctl for passthrough
  - fs: Generic function to convert iocb to rw flags
  - fuse: add sysfs api to resend processing queue requests
  - uio/uio_pci_generic: Introduce refcnt on open/release
  - staging: mpam: Fix compile conflicts with kunpeng mpam
  - xfs: drop all atomic staging extents when remounting
  - xfs: make atomic write extent reflects block size
  - tpm_tis_spi: workaround for yitian hardware bug
  - Revert "virtio_pci: Support surprise removal of virtio pci device"
  - net: make tcp_drop noinline
  - xfs: set atomic write sb flag
  - xfs: fix xfs atomic staging registration
  - xfs: take iolock when setting di_flags
  - xfs: fix uninitialized return value
  - xfs: add atomic write sysfs entry
  - xfs: persist atomic write di_flags
  - xfs: add missing cmap->br_state = XFS_EXT_NORM update
  - xfs: fix improper return value
  - xfs: release atomic staging extents when unmounting
  - xfs: staging atomic merging
  - xfs: limit the number of atomic staging CoW
  - xfs: atomic write end_cow sanity check
  - xfs: deal with truncate flow
  - xfs: introduce atomic staging
  - xfs: add ioctl to set DIO_ATOMIC_WRITE flag
  - xfs: introduce DIO atomic write feature


author: zhujun2 <zhujun2@cmss.chinamobile.com> - 5.10.0-136.30.0.106.4
changelog:
  - x86/setup: Preserve _ENC flag when initrd is being relocated
  - mm/early_ioremap.c: Always build early_memremap_prot() in x86
  - mm: gup:remove FOLL_GET_PGSTABLE flag checking
  - psi: fix compile error when cgroup disabled
  - x86/rapl: fix potentially NULL pointer access in rapl_cpu_offline.
  - Fix mouse enumeration issue after wakeup from s4
  - XHCI:Fix some device identify fail when enable xHCI runtime suspend
  - uapi/io_uring: adjust value of IORING_ENTER_SQ_SUBMIT_ON_IDLE
  - ipvs: add sysctl_run_estimation to support disable estimation
  - iommu: SMMU will be passthrough on PHYTIUM FT2000 & FT2500 Socs due to hardware limitation
  - cachefiles: reset object->private to NULL when it's freed
  - mm: hugetext: Split cold adaptive thp
  - mm: hugetext: Update adaptive entries
  - mm: hugetext: Adapt executable and anonymous vma
  - mm: hugetext: Implement principal part
  - mm: hugetext: Introduce max_nr_hugetext
  - net/smc: Avoid unmapping bufs from unused links
  - net/smc: don't call ib_req_notify_cq in the send routine
  - net/smc: Add TX and RX diagnosis information
  - net/smc: Support SO_REUSEPORT
  - cachefiles: resend an open request if the read request's object is closed
  - cachefiles: make on-demand request distribution fairer
  - cachefiles: extract ondemand info field from cachefiles_object
  - cachefiles: introduce object ondemand state
  - fscache: export fscache_object_wq
  - erofs: fix the name of erofs_fscache_super_index_def
  - fscrypt: Add SM4 XTS/CTS symmetric algorithm support
  - blk-crypto: Add support for SM4-XTS blk crypto mode
  - mm: kidled: Fix sleeping when irqs are disabled in allocate_slab()
  - RDMA/erdma: Update and bugfix
  - xfs: account extra freespace btree splits for multiple allocations
  - cachefiles: refactor cachefiles_ondemand_daemon_read()
  - cachefiles: fix volume key setup for cachefiles_open
  - cachefiles: replace BUG_ON() with WARN_ON()
  - virtio-net: open napi for tx
  - mm: mark zero page special and avoid being counted
  - mm: support unmapping zeropage of the same file offset
  - mm: add zero page judgement helper
  - crypto: arm64 - Fix unused variable compilation warnings of cpu_feature
  - crypto: arm64/sm4 - add CE implementation for GCM mode
  - crypto: arm64/sm4 - add CE implementation for CCM mode
  - crypto: arm64/sm4 - add CE implementation for cmac/xcbc/cbcmac
  - crypto: arm64/sm4 - add CE implementation for XTS mode
  - crypto: arm64/sm4 - add CE implementation for CTS-CBC mode
  - crypto: arm64/sm4 - export reusable CE acceleration functions
  - crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
  - crypto: arm64/sm4 - refactor and simplify CE implementation
  - crypto: tcrypt - add SM4 cts-cbc/xts/xcbc test
  - crypto: testmgr - add SM4 cts-cbc/xts/xcbc test vectors
  - crypto: arm64/sm4 - refactor and simplify NEON implementation
  - crypto: arm64/sm3 - add NEON assembly implementation
  - crypto: arm64/sm3 - raise the priority of the CE implementation
  - crypto: scatterwalk - remove duplicate function declarations
  - crypto: ccm - use local variables instead of indirect references
  - sched: Clear ttwu_pending after enqueue_task()
  - revert: pci: shorten waiting time in pci_reset_secondary_bus
  - arm64: qspinlock: add CNA support for arm64
  - mm: gup: allow to follow _PAGE_DEVMAP && !ZONE_DEVICE pages optionally
  - pci: shorten waiting time in pci_reset_secondary_bus
  - sched: disable optimizing stack frame pointer of __schedule
  - memcg: Support memory.wmark_min_adj in cgroup v2
  - iommu/svm: fix a bug of dereferencing null ptr
  - erofs,ovl: bypass [override|revert]_creds for overlayfs
  - crypto: tdm: Support dynamic protection for SCT and IDT by HYGON TDM
  - crypto: tdm: Compile the tdm driver into ccp.ko
  - crypto: ccp: Add psp mutex enable ioctl support
  - crypto: ccp: concurrent psp access support between user and kernel space
  - tpm: Fix keyctl failure of loading an encrypted key
  - tpm: keyring service support creating encrypted key from user provided plaintext key
  - alinux: tpm: add Hygon TPM2 driver
  - crypto: tdm: Add Hygon TDM driver
  - crypto: ccp: Add another mailbox interrupt support for PSP sending command to X86
  - crypto: ccp: Add a new interface for X86 sending command to PSP
  - efi: cper: fix raw data register iteration
  - sched: make __balance_callback() noinline
  - crypto: arm64/sm4 - add ARMv8 Crypto Extensions implementation
  - crypto: arm64/sm4 - add ARMv8 NEON implementation
  - crypto: arm64/sm4-ce - rename to sm4-ce-cipher
  - crypto: tcrypt - remove all multibuffer ahash tests
  - crypto: x86/sm3 - add AVX assembly implementation
  - crypto: sm3 - make dependent on sm3 library
  - crypto: sm2 - make dependent on sm3 library
  - crypto: arm64/sm3-ce - make dependent on sm3 library
  - crypto: s390/sha512 - Use macros instead of direct IV numbers
  - crypto: sparc/sha - remove duplicate hash init function
  - crypto: powerpc/sha - remove duplicate hash init function
  - crypto: mips/sha - remove duplicate hash init function
  - crypto: sha256 - remove duplicate generic hash init function
  - net/tls: simplify the tls_set_sw_offload function
  - crypto: public_key: Remove redundant header file from public_key.h
  - driver/crypto: Introduce HGSC_CERT_IMPORT API.
  - scsi: target: tcmu: Make cmd_ring_size changeable via configfs
  - mm,hwpoison: check mm when killing accessing process
  - RDMA/erdma: User interface for comp vector num and bugfix
  - arm64: add CPU freq sample on pcct non-support
  - sched: support group identity in cgroup v2
  - arm64: drivers/perf: modify the return value of unsupport event in m1_cmn_pmu
  - xfs: check atomic write flag before set
  - xfs: restrict atomic set ioctl permission
  - erofs: implement fscache-based data readahead
  - fscache,cachefiles: add fscache_prepare_read() helper
  - cachefiles: maintain a file descriptor to the backing file
  - mm: prezero: add page clear engine with DMA device hardware offloading
  - dmaengine: add a new DMA flag for direct data writes to be nontemporal
  - dmaengine: idxd: add memset operation
  - mm: prezero: make anon THP use __GFP_ZERO
  - mm: prezero: allocate page from tail for __GFP_ZERO
  - mm: prezero: pass gfp parameter to rmqueue_bulk
  - mm: prezero: set PG_zeroed after free to buddy
  - mm: prezero: introduce kprezerod
  - mm: prezero: add pre-zeroed page statistics
  - mm: prezero: manage pre-zeroed pages
  - mm: prezero: clear page->private when free pages
  - mm: prezero: clear page->private when free pages
  - mm: prezero: introduce PAGE_ZEROED bit
  - mm: prezero: introduce PG_zeroed flag
  - mm: prezero: introduce PAGE_PREZERO config
  - crypto/ycc: Fix error config for the register REG_RING_CFG
  - mm: Add ioremap_nohuge() func support
  - ovl: change pr_warn() to pr_warn_ratelimited()
  - Revert "anolis: crypto/ycc: Add hash algorithm support"
  - net/smc: Fix NULL sndbuf_desc in smc_cdc_tx_handler()
  - net/smc: Stop the CLC flow if there's no link to map RMBs on
  - net/smc: Fix UAF when fallback after lgr create
  - net/smc: Avoid use-after-free of smcibcq tasklet


author: zhujun2 <zhujun2@cmss.chinamobile.com> - 5.10.0-136.30.0.106.6
changelog:
  - Revert "fuse: Introduce fd attach ioctl to retrieve a fuse device" to solve os-prober stuck question
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
  - add CONFIG_UNICODE support


author: Liu Jing <liujing@cmss.chinamobile.com> 5.10.0-136.42.0.120.10
changelog:
  - !1525 [sync] PR-1482:  CVE-2023-3567 fix patches
  - !1336 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
  - vc_screen: modify vcs_size() handling in vcs_read()
  - vc_screen: don't clobber return value in vcs_read
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
  - !1490 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
  - !1486 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - !1495 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - ipv6/addrconf: fix a potential refcount underflow for idev
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - !1422 [sync] PR-1254:  Two CVE fixes of ksmbd
  - ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
  - ksmbd: fix memleak in session setup
  - bpf: Fix incorrect verifier pruning due to missing register precision taints


author: Liu Jing <liujing@cmss.chinamobile.com> 5.10.0-136.43.0.121.10
changelog:
  - !1588 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - !1583 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
  - !1599 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
  - !1602 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
  - !1615 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
  - net/sched: cls_u32: Fix reference counter leak leading to overflow
  - !1593 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
  - psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
  - binder: fix UAF caused by faulty buffer cleanup
  - ksmbd: fix global-out-of-bounds in smb2_find_context_vals
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - ksmbd: fix wrong UserName check in session_user
  - !1465 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
  - !1574 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - !1559 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
  - !1362 [sync] PR-1294:  dm stats: check for and propagate alloc_percpu failure
  - !1503  block: don't set GD_NEED_PART_SCAN if scan partition failed
  - !1478 [sync] PR-1345:  dm: requeue IO if mapping table not yet
  - mm: memcontrol: fix cannot alloc the maximum memcg ID
  - block: don't set GD_NEED_PART_SCAN if scan partition failed
  - dm: don't lock fs when the map is NULL during suspend or resume
  - dm: don't lock fs when the map is NULL in process of resume
  - dm: requeue IO if mapping table not yet available
  - Revert "dm: make sure dm_table is binded before queue request"
  - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
  - dm stats: check for and propagate alloc_percpu failure


author: Liu Jing <liujing@cmss.chinamobile.com> 5.10.0-136.44.0.122.10
changelog:
  - !1703 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
  - !1675 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
  - netfilter: nft_set_pipapo: fix improper element removal
  - !1642 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
  - !1644 [sync] PR-1605:  CVE-2023-38430
  - ksmbd: fix out-of-bound read in deassemble_neg_contexts()
  - ksmbd: validate smb request protocol id
  - ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
  - ksmbd: allocate one more byte for implied bcc[0]
  - ksmbd: validate smb request protocol id
  - ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h


author: Liu Jing <liujing@cmss.chinamobile.com> 5.10.0-136.45.0.123.10
changelog:
  - !1757 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
  - !1764 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
  - !1669 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
  - Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
  - !1754 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
  - cxgb4: fix use after free bugs caused by circular dependency problem
  - !1745 [sync] PR-1727:  add support for timer_shutdown() api
  - !1732 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
  - ksmbd: fix out of bounds read in smb2_sess_setup
  - timers: Keep del_timer[_sync]() exported
  - timers: Provide timer_shutdown[_sync]()
  - timers: Add shutdown mechanism to the internal functions
  - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
  - timers: Silently ignore timers with a NULL function
  - timers: Rename del_timer() to timer_delete()
  - timers: Rename del_timer_sync() to timer_delete_sync()
  - timers: Use del_timer_sync() even on UP
  - timers: Update kernel-doc for various functions
  - timers: Replace BUG_ON()s
  - timers: Get rid of del_singleshot_timer_sync()
  - sw64: Do not use timer namespace for timer_shutdown() function
  - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
  - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
  - ARM: spear: Do not use timer namespace for timer_shutdown() function
  - !1715 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
  - !1633 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
  - xfrm: add NULL check in xfrm_update_ae_params
  - media: usb: siano: Fix warning due to null work_func_t function pointer
  - media: usb: siano: Fix use after free bugs caused by do_submit_urb
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local
  - nfc: llcp: simplify llcp_sock_connect() error paths


author: Liu Jing <liujing@cmss.chinamobile.com> 5.10.0-136.46.0.124.10
changelog:
  - !1839  fix CVE-2023-20593 for openEuler
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
  - x86/cpu/amd: Add a Zenbleed fix
  - x86/cpu/amd: Move the errata checking functionality up
  - x86/cpu: Restore AMD's DE_CFG MSR after resume
  - !1776 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free


author: Liu Jing <liujing@cmss.chinamobile.com> 5.10.0-136.47.0.125.10
changelog:
  - !1892 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
  - !1886 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - !1867 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
  - !1781 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
  - !1889 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
  - net: tap_open(): set sk_uid from current_fsuid()
  - net: tun_chr_open(): set sk_uid from current_fsuid()
  - tcp: Reduce chance of collisions in inet6_hashfn().
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - !1828 [sync] PR-1813:  ksmbd: fix cve-2023-38432
  - nbd: pass nbd_sock to nbd_read_reply() instead of index
  - ksmbd: validate command request size
  - ksmbd: validate command payload size
  - xen/netback: Fix buffer overrun triggered by unusual packet


author: Liu Jing <liujing@cmss.chinamobile.com> 5.10.0-136.48.0.126.10
changelog:
  - !2003 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
  - !2010  block: don't get gendisk if queue has not been registered
  - block: don't get gendisk if queue has not been registered
  - !1627 [sync] PR-1621:  fix three CVEs by backport mainline patchs
  - !1818 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
  - ksmbd: fix out-of-bound read in smb2_write
  - !1980 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
  - Fix the default return value of dm_pool_dec_data_range()
  - !1385 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
  - exfat: check if filename entries exceeds max filename length
  - ksmbd: fix racy issue from session setup and logoff
  - ksmbd: Fix spelling mistake "excceed" -> "exceeded"
  - ksmbd: limit pdu length size according to connection status
  - ksmbd: Implements sess->ksmbd_chann_list as xarray
  - dm thin metadata: check fail_io before using data_sm


author: Liu Jing <liujing@cmss.chinamobile.com> 5.10.0-136.49.0.127.10
changelog:
  - !2146  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  - !2139  net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - !2138  netfilter: nf_tables: skip bound chain on rule flush
  - !2136  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - netfilter: nf_tables: skip bound chain on rule flush
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - !2114  Fixed 4 CVEs of the ksmbd
  - !2077 [sync] PR-2065:  dm: switch to precise io accounting
  - ksmbd: not allow guest user on multichannel
  - ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
  - ksmbd: block asynchronous requests when making a delay on session setup
  - ksmbd: destroy expired sessions
  - !1926 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
  - dm: switch to precise io accounting
  - !2058 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
  - SUNRPC: don't pause on incomplete allocation
  - net: hns3: only enable unicast promisc when mac table full
  - !2048 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
  - ksmbd: validate session id and tree id in the compound request


author: MingBing Zhai <zhaimingbing@cmss.chinamobile.com> 5.10.0-136.49.0.127.11
changelog:
  - crypto: ccp: Add pci device ID for Hygon CCP/PSP devices
  - crypto: ccp: No tee init on Hygon platform
  - KVM/SVM: add support for SEV attestation command
  - KVM: x86: Support VM_ATTESTATION hypercall
  - crypto: ccp: Support DOWNLOAD_FIRMWARE when probe CSV
  - crypto: ccp: Add userspace PLATFORM_INIT API
  - crypto: ccp: Add userspace PLATFORM_SHUTDOWN API
  - crypto: ccp: Add userspace DOWNLOAD_FIRMWARE API
  - KVM: SVM: Add KVM_SEV SEND_START command
  - KVM: SVM: Add KVM_SEND_UPDATE_DATA command
  - KVM: SVM: Add KVM_SEV_SEND_FINISH command
  - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command
  - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command
  - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command
  - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command
  - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length
  - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall
  - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails
  - KVM: SVM: fix missing sev_decommission in sev_receive_start
  - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
  - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA
  - x86/kvm: Add AMD SEV specific Hypercall3
  - mm: x86: Invoke hypercall when page encryption status is changed
  - EFI: Introduce the new AMD Memory
  - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature.
  - x86/kvm: Add kexec support for SEV Live Migration.
  - crypto:ccp: Add the initial and free API support for Secure Encrypted Virtualization (SEV) RING_BUFFER Mode
  - crypto:ccp: Add the command enqueue API support for Secure Encrypted Virtualization (SEV) RING_BUFFER Mode
  - crypto:ccp: Add the status dequeue API support for Secure Encrypted Virtualization (SEV) RING_BUFFER Mode
  - crypto:ccp: Implement SEV_RING_BUFFER command handler
  - crypto:ccp: Add support for issuing commands in RING_BUFFER Mode
  - kvm: svm: Introduce KVM_SEV_COMMAND_BATCH API which use RING_BUFFER Mode to handle CMDs
  - kvm: svm: Implement a memory pool for the memory allocation of CMDs in COMMAND_BATCH.
  - kvm: svm: Implement SEND_UPDATE_DATA command handler used by KVM_SEV_COMMAND_BATCH
  - kvm: svm: Implement RECEIVE_UPDATE_DATA command handler used by KVM_SEV_COMMAND_BATCH
  - KVM: SVM: Add flush_log_dirty callback function
  - x86/kvm: Correct number of pages calculation in kvm_init_platform()
  - crypto: ccp - Add SEV_INIT_EX support
  - include: Fix definition of struct sev_data_send_update_vmsa
  - x86/head/64: Fixup startup_gdt_descr address in startup_64_env_setup()
  - x86/csv: Print CSV(2) info into the kernel log
  - x86/boot: Remove unused finalize_identity_maps()
  - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests
  - x86/idt: Add __maybe_unused annotations to avoid build warnings
  - x86/cpu: Add VM page flush MSR availablility as a CPUID feature
  - KVM: SVM: Add support for SEV-ES capability in KVM
  - KVM: SVM: Add GHCB accessor functions for retrieving fields
  - KVM: SVM: Add support for the SEV-ES VMSA
  - KVM: x86: Mark GPRs dirty when written
  - KVM: x86: remove bogus #GP injection
  - KVM: x86: use kvm_complete_insn_gp in emulating RDMSR/WRMSR
  - KVM: x86: introduce complete_emulated_msr callback
  - KVM: SVM: Add required changes to support intercepts under SEV-ES
  - KVM: SVM: Prevent debugging under SEV-ES
  - KVM: SVM: Do not allow instruction emulation under SEV-ES
  - KVM: SVM: Cannot re-initialize the VMCB after shutdown with SEV-ES
  - KVM: SVM: Prepare for SEV-ES exit handling in the sev.c file
  - KVM: SVM: Add initial support for a VMGEXIT VMEXIT
  - KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x002
  - KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x004
  - KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x100
  - KVM: SVM: Create trace events for VMGEXIT processing
  - KVM: SVM: Create trace events for VMGEXIT MSR protocol processing
  - KVM: SVM: Support MMIO for an SEV-ES guest
  - KVM: SVM: Support string IO operations for an SEV-ES guest
  - KVM: SVM: Add support for EFER write traps for an SEV-ES guest
  - KVM: SVM: Add support for CR0 write traps for an SEV-ES guest
  - KVM: SVM: Add support for CR4 write traps for an SEV-ES guest
  - KVM: SVM: Add support for CR8 write traps for an SEV-ES guest
  - KVM: x86: Update __get_sregs() / __set_sregs() to support SEV-ES
  - KVM: SVM: Do not report support for SMM for an SEV-ES guest
  - KVM: SVM: Add NMI support for an SEV-ES guest
  - KVM: SVM: Set the encryption mask for the SVM host save area
  - KVM: SVM: Update ASID allocation to support SEV-ES guests
  - KVM: SVM: Provide support for SEV-ES vCPU creation/loading
  - KVM: SVM: Provide support for SEV-ES vCPU loading
  - KVM: SVM: Provide an updated VMRUN invocation for SEV-ES guests
  - KVM: SVM: Provide support to launch and run an SEV-ES guest
  - KVM: SVM: Add AP_JUMP_TABLE support in prep for AP booting
  - KVM: SVM: fix 32-bit compilation
  - KVM: SVM: Add support for booting APs in an SEV-ES guest
  - KVM: x86: __kvm_vcpu_halt can be static
  - KVM: SVM: Unconditionally sync GPRs to GHCB on VMRUN of SEV-ES guest
  - KVM: x86: Revert "KVM: x86: Mark GPRs dirty when written"
  - KVM: SVM: Add KVM_SEV_SEND_UPDATE_VMSA command
  - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_VMSA command
  - KVM: SVM: Don't check guest_state_protected in svm_set_cr0
  - KVM: x86: Restore some registers to support CSV2 VM live migration
  - x86/csv2: Pass L attribute bit when handle VMMCALL events
  - KVM: SVM: Sync L attribute bit when sync from ghcb page
  - KVM: SVM: Export MSR_AMD64_SEV_ES_GHCB to userspace for CSV2 guest
  - KVM: SVM: Grab kvm->lock before pinning memory when handling vm_attestation callback
  - x86/sev-es: Do not unroll string I/O for SEV-ES guests
  - x86/sev-es: Remove subtraction of res variable
  - crypto: ccp - Don't initialize SEV support without the SEV feature
  - x86/sev-es: Split vc_decode_insn()
  - x86/boot/compressed/64: Cleanup exception handling before booting kernel
  - x86/boot/compressed/64: Reload CS in startup_32
  - x86/boot/compressed/64: Setup IDT in startup_32 boot path
  - x86/boot/compressed/64: Add 32-bit boot #VC handler
  - x86/boot/compressed/64: Add CPUID sanity check to 32-bit boot-path
  - x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  - x86/sev-es: Optimize __sev_es_ist_enter() for better readability
  - KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs
  - KVM: SVM: Do not set sev->es_active until KVM_SEV_ES_INIT completes
  - KVM: SVM: Make sure GHCB is mapped before updating
  - KVM: SVM: Zero out the VMCB array used to track SEV ASID association
  - KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails
  - KVM: SVM: Skip SEV cache flush if no ASIDs have been used
  - KVM: SVM: Move GHCB unmapping to fix RCU warning
  - x86/sev-es: Rename sev-es.{ch} to sev.{ch}
  - x86/sev: Fix error message in runtime #VC handler
  - x86/insn-eval: Make 0 a valid RIP for insn_get_effective_ip()
  - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]()
  - x86/sev: Propagate #GP if getting linear instruction address failed
  - x86/sev: Use "SEV: " prefix for messages from sev.c
  - KVM: SEV: Acquire vcpu mutex when updating VMSA
  - KVM: SEV-ES: Set guest_state_protected after VMSA update
  - KVM: SEV-ES: fix length of string I/O
  - KVM: SEV-ES: reduce ghcb_sa_len to 32
  - x86/sev: Carve out HV call's return value verification
  - x86/sev: Include fpu/xcr.h
  - x86/sev: Allow #VC exceptions on the VC2 stack
  - KVM: SEV-ES: rename guest_ins_data to sev_pio_data
  - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out
  - KVM: SEV-ES: clean up kvm_sev_es_ins/outs
  - KVM: SEV-ES: keep INS functions together
  - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed
  - x86/sev: Expose sev_es_ghcb_hv_call() for use by HyperV
  - KVM: SEV-ES: fix another issue with string I/O VMGEXITs
  - KVM: SVM: Add support CSV2 guest reboot
  - KVM: SVM: Force flush caches before reboot CSV guest
  - x86/sev: Move GHCB MSR protocol and NAE definitions in a common header
  - x86/sev: Add defines for GHCB version 2 MSR protocol requests
  - KVM: x86: split the two parts of emulator_pio_in
  - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
  - kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions
  - crypto: ccp - Add support for CMD HGSC_CERT_IMPORT
  - x86/sev: Drop redundant and potentially misleading 'sev_enabled'
  - efi: Save location of EFI confidential computing area
  - efi: Register efi_secret platform device if EFI secret area is declared
  - docs: security: Add secrets/coco documentation
  - KVM: SEV: WARN if SEV-ES is marked active but SEV is not
  - KVM: SEV: Return appropriate error codes if SEV-ES scratch setup fails
  - KVM: SEV: Fall back to vmalloc for SEV-ES scratch area if necessary
  - KVM: SVM: Do not terminate SEV-ES guests on GHCB validation failure
  - dma-direct: always leak memory that can't be re-encrypted
  - crypto: ccp - Add SEV_INIT rc error logging on init
  - swiotlb: do not zero buffer in set_memory_decrypted()
  - KVM: SVM: Don't intercept #GP for SEV guests
  - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support
  - KVM: x86: Pass emulation type to can_emulate_instruction()
  - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests
  - KVM: SVM: Exit to userspace on ENOMEM/EFAULT GHCB errors
  - KVM: SEV: Add cond_resched() to loop in sev_clflush_pages()
  - x86/sev-es: Replace open-coded hlt-loop with sev_es_terminate()
  - KVM, SEV: Add KVM_EXIT_SHUTDOWN metadata for SEV-ES
  - KVM: SVM: Simplify and harden helper to flush SEV guest page(s)
  - x86/sev: Mark the code returning to user space as syscall gap
  - KVM: SVM: Fix the available asid range that can be assigned to CSV2 guest
  - KVM: SVM: Fix CSV2 info during module initialization
  - x86/csv2: Keep in atomic context when holding ghcb page if the #VC comes from user space
  - KVM: SVM: Rename *{deprotect,reprotect}_vcpu_state* to control_vcpu_{pre,post}_system_reset
  - x86/sev: Remove duplicated assignment to variable info
  - x86/head/64: Re-enable stack protection
  - x86/efi: Restore Firmware IDT before calling ExitBootServices()
  - KVM: x86: Exit to userspace if emulation prepared a completion callback
  - KVM: x86: Add proper ReST tables for userspace MSR exits/flags
  - doc/kvm: Fix wrong entry for KVM_CAP_X86_MSR_FILTER
  - KVM: nVMX: Handle dynamic MSR intercept toggling
  - KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER
  - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
  - crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware
  - x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses
  - KVM: X86: Fix failure to boost kernel lock holder candidate in SEV-ES guests
  - KVM: x86: Assume a 64-bit hypercall for guests with protected state
  - KVM: x86: Avoid warning when CSV2 guest invoke KVM_HC_MAP_GPA_RANGE hypercall
  - KVM: x86: Always set kvm_run->if_flag
  - KVM: SVM: Add register operand to vmsave call in sev_es_vcpu_load
  - crypto: ccp - Fail the PSP initialization when writing psp data file failed
  - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
  - KVM: VMX: Heed the 'msr' argument in msr_write_intercepted()
  - crypto: ccp - During shutdown, check SEV data pointer before using
  - x86/cpu: Show Hygon csv/csv2 features in /proc/cpuinfo
  - crypto: ccp: Print Hygon CSV API version when CSV support is detected
  - KVM: SVM: Print Hygon CSV support info if support is detected
  - KVM: SVM: Flush caches before backup encrypted VMSA
  - vfio/pci: Disable VFIO pci reset for hygon DCU device.
  - x86/cpufeatures: Add CSV3 CPU feature
  - x86/cpufeatures: Add CPUID_8C86_0000_EDX


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.49.0.127.12
changelog:
  - veth: allow enabling NAPI even without XDP
  - veth: factor out initialization helper
  - veth: implement support for set_channel ethtool op
  - veth: use skb_orphan_partial instead of skb_orphan


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.51.0.129.12
changelog:
  - !2221 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
  - !2232 [sync] PR-2086:  fix CVE-2023-20588
  - !2240 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  - !2243 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  - !2234 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  - x86: Move gds_ucode_mitigated() declaration to header
  - Documentation/x86: Fix backwards on/off logic about YMM support
  - KVM: Add GDS_NO support to KVM
  - x86/speculation: Add Kconfig option for GDS
  - x86/speculation: Add force option to GDS mitigation
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt
  - x86/CPU/AMD: Do not leak quotient data after a division by 0
  - !1878 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
  - jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
  - !2204 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write
  - !2152  io_uring: ensure IOPOLL locks around deferred work
  - io_uring: ensure IOPOLL locks around deferred work
  - x86/speculation: Add cpu_show_gds() prototype
  - x86/speculation: Add Gather Data Sampling mitigation


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.52.0.130.12
changelog:
  - !2392  netfilter: nf_tables: disallow rule removal from chain binding
  - netfilter: nf_tables: disallow rule removal from chain binding
  - !2385  nf_table LTS
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
  - netfilter: nf_tables: skip bound chain on rule flush
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  - netfilter: nf_tables: drop map element references from preparation phase
  - netfilter: nftables: rename set element data activation/deactivation functions
  - netfilter: nf_tables: reject unbound chain set before commit phase
  - netfilter: nf_tables: reject unbound anonymous set before commit phase
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  - netfilter: nf_tables: fix chain binding transaction logic
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  - netfilter: nf_tables: use net_generic infra for transaction data
  - Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
  - Revert "netfilter: nf_tables: skip bound chain on rule flush"
  - Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
  - Revert "netfilter: nf_tables: fix chain binding transaction logic"
  - Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
  - Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
  - Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
  - !2379 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  - !2278 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
  - etmem: Fixed an issue where the module reference counting is incorrect
  - !2250 [sync] PR-2224:  ext4: fix rec_len verify error
  - ext4: fix rec_len verify error


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.53.0.131.12
changelog:
  - !2421 [sync] PR-2323:  net/sched: Retire rsvp classifier
  - net/sched: Retire rsvp classifier
  - !1417  Replace the hulk patch with the lts patch
  - !2367 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
  - sdei_watchdog: Avoid exception during sdei handler
  - cgroup: Do not corrupt task iteration when rebinding subsystem
  - Revert "cgroup: Stop task iteration when rebinding subsystem"


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.54.0.132.12
changelog:
  - !2691 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
  - !2374 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
  - !2638 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
  - net: xfrm: Fix xfrm_address_filter OOB read
  - !2532 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
  - !2525 [sync] PR-2440:  netfilter: xt_u32: validate user space input
  - !2531 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
  - !2528 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
  - !2659 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
  - !2662  arm64: fix a concurrency issue in emulation_proc_handler()
  - arm64: armv8_deprecated: fix unused-function error
  - arm64: armv8_deprecated: rework deprected instruction handling
  - arm64: armv8_deprecated: move aarch32 helper earlier
  - arm64: armv8_deprecated move emulation functions
  - arm64: armv8_deprecated: fold ops into insn_emulation
  - arm64: rework EL0 MRS emulation
  - arm64: factor insn read out of call_undef_hook()
  - arm64: factor out EL1 SSBS emulation hook
  - arm64: split EL0/EL1 UNDEF handlers
  - arm64: allow kprobes on EL0 handlers
  - arm64: rework BTI exception handling
  - arm64: rework FPAC exception handling
  - arm64: consistently pass ESR_ELx to die()
  - arm64: die(): pass 'err' as long
  - Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
  - ubi: Refuse attaching if mtd's erasesize is 0
  - !2648 [sync] PR-2641:  Fix CVE-2023-5717
  - perf: Fix kabi breakage in struct perf_event
  - perf: Disallow mis-matched inherited group reads
  - !2640 [sync] PR-2558:  USB: ene_usb6250: Allocate enough memory for full object
  - !2570  Fix cgroup poll UAF
  - !2520 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
  - USB: ene_usb6250: Allocate enough memory for full object
  - igb: set max size RX buffer when store bad packet is enabled
  - !2596 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
  - !2567 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
  - !2581 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
  - !2622 [sync] PR-2613:  CVE-2022-44033
  - char: pcmcia: remove all the drivers
  - tty: ipwireless: move Kconfig entry to tty
  - !2585 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
  - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
  - xen/events: replace evtchn_rwlock with RCU
  - ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
  - ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
  - ksmbd: send proper error response in smb2_tree_connect()
  - ksmbd: fix racy issue from smb2 close and logoff with multichannel
  - ksmbd: call rcu_barrier() in ksmbd_server_exit()
  - ksmbd: fix racy issue under cocurrent smb2 tree disconnect
  - sched/psi: Select KERNFS as needed
  - kernfs: add stub helper for kernfs_generic_poll()
  - sched/psi: use kernfs polling functions for PSI trigger polling
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
  - ipv4: fix null-deref in ipv4_link_failure
  - netfilter: xt_sctp: validate the flag_info count
  - netfilter: nfnetlink_osf: avoid OOB read
  - netfilter: xt_u32: validate user space input
  - !2515 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
  - crypto: drbg - Only fail when jent is unavailable in FIPS mode
  - !2486 [sync] PR-2340:  xfs: recent patches to fix xfs issues
  - f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
  - xfs: update the last_sync_lsn with ctx start lsn
  - xfs: shutdown xfs once inode double free
  - xfs: fix off-by-one-block in xfs_discard_folio()
  - xfs: xfs_bmap_punch_delalloc_range() should take a byte range
  - iomap: buffered write failure should not truncate the page cache
  - xfs,iomap: move delalloc punching to iomap
  - xfs: use byte ranges for write cleanup ranges
  - xfs: punching delalloc extents on write failure is racy
  - xfs: longest free extent no need consider postalloc
  - xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
  - xfs: block reservation too large for minleft allocation
  - xfs: set minleft correctly for randomly sparse inode allocations
  - xfs: shutdown to ensure submits buffers on LSN boundaries
  - xfs: don't verify agf length when log recovery
  - xfs: Remove redundant assignment to busy
  - xfs: remove redundant pointer lip
  - xfs: remove redundant initializations of pointers drop_leaf and save_leaf
  - xfs: xfs_trans_cancel() path must check for log shutdown
  - xfs: fix bounds check in xfs_defer_agfl_block()
  - xfs: AGF length has never been bounds checked
  - xfs: journal geometry is not properly bounds checked
  - xfs: don't block in busy flushing when freeing extents
  - xfs: allow extent free intents to be retried
  - xfs: pass alloc flags through to xfs_extent_busy_flush()
  - Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
  - xfs: use deferred frees for btree block freeing
  - xfs: don't reverse order of items in bulk AIL insertion
  - xfs: validate block number being freed before adding to xefi
  - xfs: validity check agbnos on the AGFL
  - xfs: pass xfs_extent_free_item directly through the log intent code
  - xfs: remove unused parameter from refcount code
  - xfs: reduce the size of struct xfs_extent_free_item
  - xfs: rename xfs_bmap_add_free to xfs_free_extent_later
  - xfs: create slab caches for frequently-used deferred items
  - xfs: compact deferred intent item structures
  - xfs: rename _zone variables to _cache
  - xfs: remove kmem_zone typedef
  - xfs: remove xfs_setattr_time() declaration
  - xfs: use setattr_copy to set vfs inode attributes
  - xfs: set prealloc flag in xfs_alloc_file_space()
  - xfs: don't assert fail on perag references on teardown
  - xfs: fix dir3 block read verify fail during log recover
  - xfs: propagate the return value of xfs_log_force() to avoid soft lockup
  - xfs: keep growfs sb log item active until ail flush success
  - !1142 [sync] PR-953:  xfs: fixes patchs and backport patchs
  - ext4: do not mark inode dirty every time when appending using delalloc
  - xfs: atomic drop extent entries when inactiving attr
  - xfs: factor out __xfs_da3_node_read()
  - xfs: fix a UAF in xfs_iflush_abort_clean
  - xfs: fix a UAF when inode item push
  - xfs: fix the problem of mount failure caused by not refreshing mp->m_sb
  - iomap: iomap: fix memory corruption when recording errors during writeback
  - xfs: fix hung when transaction commit fail in xfs_inactive_ifree
  - xfs: fix dead loop when do mount with IO fault injection
  - xfs: fix ag count overflow during growfs
  - xfs: account extra freespace btree splits for multiple allocations
  - xfs: force shutdown xfs when xfs_attr_inactive fails
  - xfs: fix negative array access in xfs_getbmap
  - xfs: fix BUG_ON in xfs_getbmap()
  - xfs: use iomap_valid method to detect stale cached iomaps
  - iomap: write iomap validity checks
  - xfs: write page faults in iomap are not buffered writes
  - xfs: fix exception caused by unexpected illegal bestcount in leaf dir
  - Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
  - xfs: don't expose internal symlink metadata buffers to the vfs
  - xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
  - xfs: fix maxlevels comparisons in the btree staging code
  - xfs: sb verifier doesn't handle uncached sb buffer
  - xfs: fallocate() should call file_modified()
  - xfs: remove XFS_PREALLOC_SYNC
  - xfs: shutdown during log recovery needs to mark the log shutdown
  - xfs: xfs_trans_commit() path must check for log shutdown
  - xfs: xfs_do_force_shutdown needs to block racing shutdowns
  - xfs: log shutdown triggers should only shut down the log
  - xfs: shutdown in intent recovery has non-intent items in the AIL
  - xfs: AIL should be log centric
  - xfs: increase rename inode reservation
  - xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
  - xfs: check return codes when flushing block devices
  - xfs: remove xfs_blkdev_issue_flush
  - xfs: fix NULL pointer dereference in xfs_getbmap()


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.54.0.133.13
changelog:
  - !2718 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
  - !2740 [sync] PR-2443:  CVE-2023-37453
  - !2734 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
  - USB: core: Fix oversight in SuperSpeed initialization
  - USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
  - USB: core: Change usb_get_device_descriptor() API
  - USB: core: Unite old scheme and new scheme descriptor reads
  - nvmet-tcp: Fix a possible UAF in queue intialization setup
  - !2702 [sync] PR-2672:  fix CVE-2023-46813
  - io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
  - !2645 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
  - x86/sev: Check for user-space IOIO pointing to kernel space
  - x86/sev: Check IOBM for IOIO exceptions from user-space
  - x86/sev: Disable MMIO emulation from user mode
  - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.55.0.134.13
changelog:
  - !2859  bugfix for CVE-2022-45884
  - media: dvb-core: Fix use-after-free due to race at dvb_register_device()
  - media: dvbdev: fix error logic at dvb_register_device()
  - media: dvbdev: Fix memleak in dvb_register_device
  - !2847 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
  - drm/qxl: fix UAF on handle creation
  - !2801 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
  - cpufreq: make interface functions and lock holding state clear
  - cpufreq: Abort show()/store() for half-initialized policies


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.56.0.135.13
changelog:
  - !2998 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
  - !2903 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
  - !830 [sync] PR-739: Fix kvm-unit-tests  vmx_cr4_osxsave_test  case failed
  - !832 [sync] PR-601: fix  test_vmxon failed
  - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
  - !2975 Add script to check & update openeuler_defconfig
  - config: update openeuler_defconfig for arm64
  - config: update openeuler_defconfig for x86
  - kconfig: Add script to check & update openeuler_defconfig
  - Revert "kconfig: Add script to update openeuler_defconfig"
  - !1563 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
  - !2045 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
  - !1897 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
  - !1942 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
  - !1984 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
  - !2653 [sync] PR-2377:  tracing: Backport bugfixes
  - !1401 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
  - !2634 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
  - !1809 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
  - !2812 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
  - !1372 [sync] PR-1353:  ubifs mainline bugfix patch backport
  - !1409 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
  - !891 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
  - !901 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
  - !2020 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
  - !1789 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
  - !1513 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
  - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
  - !2749 [sync] PR-2683:  fix memcgv1 oom meminfo bug
  - ext4: recheck buffer valid after page unlock
  - memcg: dump memory.stat during cgroup OOM for v1
  - memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
  - seq_buf: Add seq_buf_do_printk() helper
  - seq_buf: Add seq_buf_terminate() API
  - ring-buffer: Do not attempt to read past "commit"
  - ring-buffer: Do not swap cpu_buffer during resize process
  - preempt/dynamic: Fix setup_preempt_mode() return value
  - Huawei BMA: To fix the bug in the iBMA driver code
  - crypto:padata: Fix return err for PADATA_RESET
  - tracing: Fix memleak due to race between current_tracer and trace
  - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
  - ring-buffer: Fix deadloop issue on reading trace_pipe
  - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
  - mm: disable kernelcore=mirror when no mirror memory
  - arm64/mpam: fix missing kfree domain's ctrl_val arrray
  - SUNRPC: Ensure that the gssproxy client can start in a connected state
  - ubi: Fix return value overwrite issue in try_write_vid_and_data()
  - bpf: cpumap: Fix memory leak in cpu_map_update_elem
  - ubifs: Fix memory leak in do_rename
  - ubifs: Free memory for tmpfile name
  - ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
  - net: sched: fix NULL pointer dereference in mq_attach
  - KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
  - kvm: x86: Sink cpuid update into vendor-specific set_cr4 functions


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.57.0.136.13
changelog:
  - !3194 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
  - !3002 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
  - ksmbd: delete asynchronous work from list
  - ksmbd: fix typo, syncronous->synchronous
  - ksmbd: fix possible memory leak in smb2_lock()
  - ksmbd: replace usage of found with dedicated list iterator variable
  - !3104 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
  - !3166 [sync] PR-3152:  scsi: scsi_device_gets returns failure
  - scsi: fix kabi broken in struct Scsi_Host
  - scsi: don't fail if hostt->module is NULL
  - scsi: scsi_device_gets returns failure when the module is NULL.
  - !3142 [sync] PR-2970:  Add error handle for add_disk
  - block: Set memalloc_noio to false in the error path
  - block: Fix minor range check in device_add_disk()
  - block: clear ->slave_dir when dropping the main slave_dir reference
  - block: call blk_get_queue earlier in __device_add_disk
  - block: check minor range in device_add_disk()
  - block: fix memory leak for elevator on add_disk failure
  - block: Fix the kabi change on blk_register_region
  - block: Fix the kabi change in device_add_disk
  - block: fix error unwinding in device_add_disk
  - block: fix device_add_disk() kobject_create_and_add() error handling
  - block: add error handling for device_add_disk / add_disk
  - block: return errors from blk_register_region
  - block: add the events* attributes to disk_attrs
  - block: return errors from disk_alloc_events
  - block: return errors from blk_integrity_add
  - block: call blk_integrity_add earlier in device_add_disk
  - block: fold register_disk into device_add_disk
  - !1395 [sync] PR-1355:  etmem: fix the div 0 problem in swapcache reclaim process
  - fs/dirty_pages: add last read check in seq_read_dirty()
  - !3079 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
  - !3076 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
  - fs/dirty_pages: fix some errors in seq_read_dirty()
  - fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
  - Revert "arm64/mpam: Fix mpam corrupt when cpu online"
  - etmem: fix the div 0 problem in swapcache reclaim process


author: Zhu Jun2 <zhujun2@cmss.chinamobile.com> 5.10.0-136.57.0.136.14
changelog:
  - mailbox: arm_mhuv2: Add mhu driver
  - mailbox: arm_mhuv2: Fix sparse warnings
  - mailbox: arm_mhuv2: make remove callback return void
  - mailbox: arm_mhuv2: Skip calling kfree() with invalid pointer
  - jaguar: add jaguar mhu driver support
  - mailbox: arm_mhuv2: Fix a bug for mhuv2_sender_interrupt
  - iommu/arm-smmu-v3: Support JMND Corsica SMMU


author: xiechengliang <xiechengliang1@huawei.com> - 1:1.33.1-12
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386


author: yanglu <yanglu72@h-partners.com> - 1.18.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:delete a static library file
         add BuildRequires make to fix build problem


author: hehuazhen <hehuazhen@huawei.com> - 1.18.1-6
changelog:
  - Type:CVE
  - CVE:CVE-2023-32067 CVE-2023-31130
  - SUG:restart
  - DESC:fix CVE-2023-32067 CVE-2023-31130


author: Lv Ying <lvying6@huawei.com> - 21.4-17
changelog:
  - backport upstream patches:
  https://github.com/canonical/cloud-init/commit/fa53c7f4086f5937bc9bd328dba9f91ca73b6614
  https://github.com/canonical/cloud-init/commit/9c7502a801763520639c66125eb373123d1e4f44
  https://github.com/canonical/cloud-init/commit/2e17a0d626d41147b7d0822013e80179b3a81ee4
  https://github.com/canonical/cloud-init/commit/9f0efc474ea430c75cd0abec3e2da719d4934346
  https://github.com/canonical/cloud-init/commit/bb414c7866c4728b2105e84f7b426ab81cc4bf4d
  https://github.com/canonical/cloud-init/commit/9cbd94dd57112083856ead0e0ff724e9d1c1f714
  https://github.com/canonical/cloud-init/commit/6d817e94beb404d3917bf973bcb728aa6cc22ffe
  https://github.com/canonical/cloud-init/commit/0450a1faff9e5095e6da0865916501772b3972e9


author: Lv Ying <lvying6@huawei.com> - 21.4-18
changelog:
  - backport upstream patches:
  https://github.com/canonical/cloud-init/commit/7136109df5a7b3c75dfb05a853fc4485fed25b5f
  https://github.com/canonical/cloud-init/commit/f51c352e6c6a7d05a61308c188450a1b818eac45
  https://github.com/canonical/cloud-init/commit/668a68fe577368555ea7f71577fc352494a98c25


author: shixuantong <shixuantong1@huawei.com> - 21.4-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Do not generate dsa and ed25519 key types when crypto FIPS mode is enabled
         Don't fail if IB and Ethernet devices 'collide'
         Fix default route rendering on v2 ipv6
         Fix IPv6 netmask format for sysconfig
         Fix KeyError when rendering sysconfig IPv6 routes
         Fix network v2 metric rendering
         Ignore duplicate macs from mscc_felix and fsl_enetc
         macs: ignore duplicate MAC for devs with driver driver qmi_wwan
         net/dhcp: catch dhclient failures and raise NoDHCPLeaseError
         net: skip duplicate mac check for netvsc nic and its VF
         Set ownership for new folders in Write Files Module
         cc_ubuntu_advantage: Redact token from logs
         Do not silently ignore integer uid
         Ensure network ready before cloud-init service runs
         Fix exception when no activator found
         Fix KeyError in iproute pformat
         Handle non existent ca-cert-config situation


author: shixuantong <shixuantong1@huawei.com> - 21.4-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:cc_mounts: Fix swapfile not working on btrfs
         cc_mounts: Use fallocate to create swapfile on btrfs
         collect-logs fix memory usage


author: shixuantong <shixuantong1@huawei.com> - 21.4-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable use-dns for secondary nics
         Make duplicate route add succeed
         Fix predictable interface rename issue


author: dongyuzhen <dongyuzhen@h-partners.com> - 21.4-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 21.4-32
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: songyanting<songyanting@huawei.com> - 1.2.0-300
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix, include
         1. add check in spec
         2. kill container init process if runc start returns error
         3. fix containerd-shim residual when kill containerd durin
         4. fix deadlock on commit error
         5. backport upstream & ttrpc patches
         6. fix exec event missing due to pid reuse
         7. fix dm left when pause container and kill shim
         8. add CGO security build options
         9. fix start container failed with id exists
        10. drop opt package
        11. fix race access for mobySubscribed
        12. improve log for debugging
        13. reduce permission for bundle dir
        14. fix publish command wait block forever


author: Vanient<xiadanni1@huawei.com> - 1.2.0-301
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Use fs.RootPath when mounting volumes for bundle dir to fix CVE-2022-23648


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-314
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker


author: lijian<lijian2@kylinos.cn> - 1:1.5.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: liukuo<liukuo@kylinos.cn> - 1:1.5.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang cvefix: CVE-2022-41723,CVE-2023-29406,CVE-2023-39326


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-10
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches


author: fuanan <fuanan3@huawei.com> - 2.13-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add 'autoconf automake' to BuildRequires to use autoreconf command


author: benniaobufeijiushiji <linda7@huawei.com> - 10.3.1-20
changelog:
  - Type:Sync
  - ID:NA
  - SUG:NA
  - DESC:Sync patch from openeuler/gcc
         Bugfix for loop-distribution, semi-relayout and mull64.


author: Xiong Zhou <xiongzhou4@huawei.com> - 10.3.1-22
changelog:
  - Type:Sync
  - ID:NA
  - SUG:NA
  - DESC:Sync patch from openeuler/gcc
         Fix typo in tree-ssa-reassoc.c.


author: Zhao Shujian <zhaoshujian@huawei.com> - 10.3.1-23
changelog:
  - Type:Spec
  - ID:NA
  - SUG:NA
  - DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.


author: wangbin <wangbin224@huawei.com> - 7.3.0-5
changelog:
  - Handle task_struct cpu member changes for kernels >= 5.16-rc1
    and delete use_system_readline_v3.patch


author: xinghe <xinghe2@h-partners.com> - 4.17.2-5
changelog:
  - Type:cves
  - ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
  - SUG:NA
  - DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967


author: xinghe <xinghe2@h-partners.com> - 4.17.5-3
changelog:
  - Type:cves
  - ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
  - SUG:NA
  - DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922


author: xinghe <xinghe2@h-partners.com> - 4.17.5-6
changelog:
  - Type:cves
  - ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: xinghe <xinghe2@h-partners.com> - 4.17.5-8
changelog:
  - Type:cves
  - ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
  - SUG:NA
  - DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670


author: gaihuiying <eaglegai@163.com> - 7.79.1-5
changelog:
  - Type:cves
  - CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
  - SUG:NA
  - DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776


author: gaihuiying <eaglegai@163.com> - 7.79.1-7
changelog:
  - Type:cves
  - CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
  - SUG:NA
  - DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208


author: gaihuiying <eaglegai@163.com> - 7.79.1-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix build error when add --disable-http-auth configure option


author: yanglu <yanglu72@h-partners.com> - 7.79.1-12
changelog:
  - Type:cves
  - CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
  - SUG:NA
  - DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916


author: xinghe <xinghe2@h-partners.com> - 7.79.1-14
changelog:
  - Type:cves
  - CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
  - SUG:NA
  - DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916


author: xingwei <xingwei14@h-partners.com> - 7.79.1-15
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-26
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tool_progress: avoid division by zero in parallel progress
         digest: pass over leading spaces in qop values
         Curl_close: call Curl_resolver_cancel to avoid memory-leak
         easy: fix the altsvc init for curl_easy_duphandle
         libssh: if sftp_init fails, don't get the sftp error code
         url: move back the IDN conversion of proxy names
         ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
         http: fix the ::1 comparison for IPv6 localhost for cookies
         multi: free up more data earleier in DONE
         curl_path: bring back support for SFTP path ending in /~
         transfer: refuse POSTFIELDS + RESUME_FROM combo
         tool_operate: refuse (--data or --form) and --continue-at
         http: free the url before storing a new copy
         url: fix null dispname for --connect-to option
         vtls: avoid memory leak if sha256 call fails
         urlapi: make sure zoneid is also duplicated in curl_url_dup


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:transfer: also stop the sending on closed connection
         openssl: avoid BN_num_bits() NULL pointer derefs


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: licunlong<licunlong1@huawei.com> - 29-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:don't enable/disable dbus.socket when install/uninstall dbus-broker.


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: chenhaixing <chenhaixing@huawei.com> 4.14.0-12
changelog:
  - CVE:NA
  - SUG:NA
  - DESC:dnf:fix undo error when include rollback of group upgrade
             fix can't download package when url have characters encoded


author: herengui <herengui@kylinsec.com.cn> - 4.14.0-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:remove useless patch of loongarch64
         dnf:recreate patch of sw64 and make arch sorted alphabetically


author: chenhaixing <chenhaixing@huawei.com> - 4.14.0-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Fix bash completion due to sqlite changes
             When parsing over a KVP list, do not return till the whole list is parsed


author: hanhuihui <hanhuihui5@huawei.com> - 4.14.0-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver


author: LuWu <2398491106@qq.com> - 4.14.0-20
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: chenhaixing <chenhaixing@huawei.com> - 4.3.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value


author: renmingshuai <renmingshuai@huawei.com> - 2.86-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix parsing of IPv6 addresses with peer from netlink
         Fix bad interaction between --address=/#/<ip> and
              --server=/some.domain/#
         Fix --address=/#/...... which was lost in 2.86


author: renmingshuai <renmingshuai@huawei.com> - 2.86-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: zhongjiawei<zhongjiawei1@huawei.com> - 18.09.0-323
changelog:
  - Type:CVE
  - CVE:CVE-2023-28840,CVE-2023-28841,CVE-2023-28842
  - SUG:NA
  - DESC:fix CVE-2023-28840,CVE-2023-28841,CVE-2023-28842


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libcontainer: skip chown of /dev/null caused by fd redirection


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix rootless /sys/fs/cgroup mounts bug and Prohibit /proc and /sys to be symlinks


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Set temporary single CPU affinity before cgroup cpuset transition


author: chenjiji <chenjiji09@163.com> - 21.11-33
changelog:
  refactor Rc/Tx function of hns3 PMD
   And patchs are as follows:
    - net/hns3: fix burst mode query with dummy function
    - net/hns3: add debug info for Rx/Tx dummy function
    - net/hns3: remove debug condition for Tx prepare
    - net/hns3: separate Tx prepare from getting Tx function
    - net/hns3: make getting Tx function static
    - net/hns3: extract common functions to set Rx/Tx


author: chenjiji <chenjiji09@163.com> - 21.11-34
changelog:
  Support flow rule keeping capability for hns3 PMD and
   testpmd. Patchs are as follow:
    - net/hns3: declare flow rule keeping capability
    - app/testpmd: add --disable-flow-flush option


author: chenjiji <chenjiji09@163.com> - 21.11-35
changelog:
  Fix some RSS bugs and reimplement hash flow function for hns3:
    - fix some RSS bugs and optimize RSS codes for hns3
    - reimplement hash flow function for hns3 to satisfy the
      mainstream usage of rte flow hash in the community


author: chenjiji <chenjiji09@163.com> - 21.11-36
changelog:
  Fix a m_buf pool was not freed bugs for test and support
   CPPC cpufreq for l3fwd-power. Patchs are as follow:
    - test/mbuf: fix mbuf reset test
    - examples/l3fwd-power: support CPPC cpufreq


author: chenjiji <chenjiji09@163.com> - 21.11-39
changelog:
  Sync some patchs from upstreaming branch and modifies
   are as follow:
   1. Add private dump for bonding, virtio and vhost.
   2. Support LACP info dump for bonding.
   3. Display RSS hash key of flow rule in testpmd.


author: chenjiji <chenjiji09@163.com> - 21.11-41
changelog:
  - Telemetry: support display as hexadecimal
   Sync some patchs from upstreaming for telemetry and modifies
   are as follow:
   1. Support dispaly integer as hexadecimal.
   2. Fix data truncation for some u64 accept as int.
   3. Add JSON pretty print.


author: chenjiji <chenjiji09@163.com> - 21.11-42
changelog:
  - fix empty devargs parsing
   Sync some patchs from upstreaming and modifies are as
   follow:
   1. The rte_kvargs_process() was used to parse KV pairs, it
   also supports to parse 'only keys' type. And the callback
   function parameter 'value' is NULL when parsed 'only keys'.
   This patch fixes segment fault when parse input args with
   'only keys'.
   2. The MAP_FAILED should be used to determine whether the
   mapping is successful but not NULL. This patch fix it.


author: chenjiji <chenjiji09@163.com> - 21.11-43
changelog:
  Sync some patchs from upstreaming for hns3 pmd and modifies
   are as follow:
   1. support flow control autoneg for fiber port
   2. support simplify hardware checksum offloading
   3. support dump media type
   4. add Tx Rx descriptor logs
   5. fix Rx multiple firmware reset interrupts
   6. ethdev: fix one address occupies two entries in MAC addrs


author: chenjiji <chenjiji09@163.com> - 21.11-55
changelog:
  Sync some patchs from upstreaming about add FDIR VLAN match
   mode runtime config and fix doc format for hns3 pmd. Patchs
   are as follow:
   - doc: unify sections of networking drivers guide
   - net/hns3: delete duplicate macro definition
   - net/hns3: add FDIR VLAN match mode runtime config
   - doc: fix kernel patch link in hns3 guide
   - doc: fix syntax in hns3 guide
   - doc: fix number of leading spaces in hns3 guide


author: huangdengdui <huangdengui@huawei.com> - 21.11-58
changelog:
  Sync some patchs from upstreaming and modifies are as follow:
   - maintainers: update for hns3 driver
   - app/testpmd: add command to flush multicast MAC addresses
   - app/testpmd: fix help string
   - app/testpmd: fix multicast address pool leak
   - net/hns3: optimize SVE Rx performance
   - net/hns3: optimize rearm mbuf for SVE Rx
   - net/hns3: optimize free mbuf for SVE Tx
   - net/hns3: fix order in NEON Rx
   - net/hns3: fix traffic management dump text alignment
   - net/hns3: fix traffic management thread safety
   - net/hns3: fix flushing multicast MAC address
   - net/hns3: fix error code for multicast resource
   - net/hns3: fix VF default MAC modified when set failed
   - net/hns3: fix index to look up table in NEON Rx
   - net/hns3: fix non-zero weight for disabled TC
   - config/arm: add HiSilicon HIP10


author: huangdengdui <huangdengui@huawei.com> - 21.11-59
changelog:
  Sync some patchs from upstreaming and modifies are as follow:
   - net/hns3: fix mailbox sync
   - net/hns3: report maximum buffer size
   - ethdev: add maximum Rx buffer size
   - app/procinfo: show RSS hash algorithm
   - ethdev: get RSS algorithm names
   - app/procinfo: adjust format of RSS info
   - app/procinfo: fix RSS info
   - net/hns3: support setting and querying RSS hash function
   - net/hns3: report RSS hash algorithms capability
   - ethdev: set and query RSS hash algorithm
   - ethdev: clarify RSS related fields usage
   - net/hns3: fix uninitialized hash algo value
   - net/hns3: keep set/get algo key functions local
   - net/hns3: fix some error logs
   - net/hns3: fix some return values
   - net/hns3: fix LRO offload to report
   - net/hns3: fix setting DCB capability
   - app/testpmd: ease configuring all offloads
   - net/hns3: refactor interrupt state query
   - net/hns3: fix IMP or global reset
   - net/hns3: fix multiple reset detected log
   - net/hns3: remove reset log in secondary
   - net/hns3: fix double stats for IMP and global reset
   - net/hns3: fix crash for NEON and SVE
   - net/hns3: fix unchecked Rx free threshold
   - net/hns3: fix typo in function name
   - net/hns3: fix build warning
   - telemetry: fix repeat display when callback don't init dict


author: huangdengdui <huangdengui@huawei.com> - 21.11-60
changelog:
  Sync some bugfix from upstreaming about hns3 reset and modifies
   are as follow:
   - net/hns3: fix VF reset handler interruption
   - net/hns3: fix reset event status
   - net/hns3: fix ignored reset event


author: huangdengdui <huangdengui@huawei.com> - 21.11-61
changelog:
  Sync some bugfix from upstreaming about testpmd and doc, modifies
   are as follow:
   - support set RSS hash algorithm
   - ethdev: add new API to get RSS hash algorithm by name
   - doc: fix description of RSS features
   - doc: fix RSS flow description in hns3 guide
   - doc: update features in hns3 guide
   - doc: fix hns3 build option about max queue number
   - app/testpmd: check port and queue Rx/Tx offloads
   - app/testpmd: fix Tx offload command
   - app/testpmd: allow offload config for all ports
   - app/testpmd: fix tunnel TSO configuration
   - app/testpmd: add explicit check for tunnel TSO
   - app/testpmd: fix tunnel TSO capability check
   - app/testpmd: remove useless check in TSO command


author: huangdengdui <huangdengui@huawei.com> - 21.11-62
changelog:
  Sync some patches for hns3 about refactor mailbox and bugfix, modifies
   are as follow:
   - net/hns3: fix reset level comparison
   - net/hns3: fix disable command with firmware
   - net/hns3: fix VF multiple count on one reset
   - net/hns3: refactor handle mailbox function
   - net/hns3: refactor send mailbox function
   - net/hns3: refactor PF mailbox message struct
   - net/hns3: refactor VF mailbox message struct


author: chenyi <chenyi211@huawei.com> - 21.11-66
changelog:
  Sync some patches from upstream about bugfix, modifies
   are as follow:
   - app/testpmd: fix crash in multi-process forwarding
   - net/hns3: fix offload flag of IEEE 1588
   - net/hns3: fix read Rx timestamp handle
   - net/hns3: fix double free for Rx/Tx queue
   - net/hns3: fix variable overflow
   - net/hns3: enable PFC for all user priorities
   - ring: add telemetry command for ring info
   - ring: add telemetry command to list rings
   - net/hns3: support power monitor
   - net/hns3: disable SCTP verification tag for RSS hash input
   - app/testpmd: fix RSS algorithm choice


author: chenyi <chenyi211@huawei.com> - 21.11-67
changelog:
  Sync some patches from upstream about bugfix, modifies
   are as follow:
   - net/hns3: support new device
   - dma/hisilicon: remove support for HIP09 platform


author: hankangknag <hankangknag5@huawei.com> - 21.11-68
changelog:
  Sync some patches from upstream about bugfix, modifies
   are as follow:
   - mlx5: device should be started to set the flow


author: chenyi <chenyi211@huawei.com> - 21.11-69
changelog:
  Sync some patches from upstream about bugfix, modifies
   are as follow:
   - net/hns3: check Rx DMA address alignmnent


author: hankangknag <hankangknag5@huawei.com> - 21.11-70
changelog:
  Sync some patches from upstream about bugfix, modifies are as follow:
  - net/af_xdp: parse UMEM map info from mempool
  - bpf: disable on 32-bit x86
  - net/af_xdp: remove unused local statistic
  - net/af_xdp: fix stats reset
  - net/af_xdp: count mbuf allocation failures
  - net/af_xdp: fix port ID in Rx mbuf
  - net/af_xdp: support AF_XDP device plugin pinned maps
  - net/af_xdp: fix multi-interface support for k8s
  - net/af_xdp: fix leak on XSK configuration failure
  - net/af_xdp: fix memzone leak on config failure
  - net/af_xdp: avoid error log for virtual interfaces
  - net/af_xdp: fix Rx and Tx queue state
  - net/af_xdp: fix missing UMEM feature
  - rework atomic intrinsics fetch operations
  - build: clarify configuration without IOVA field in mbuf
  - net/af_xdp: fix socket handler validation
  - net/af_xdp: support CNI Integration
  - net/af_xdp: parse NUMA node ID from sysfs
  - drivers: mark SW PMDs to support disabling IOVA as PA
  - net/af_xdp: make compatible with libbpf 0.8.0
  - net/af_xdp: add log on XDP program removal failures
  - net/af_xdp: avoid version-based check for program load
  - net/af_xdp: avoid version-based check for shared UMEM
  - net/af_xdp: make clear which libxdp version is required
  - net/af_xdp: move XDP library presence flag setting
  - net/af_xdp: allow using copy mode in XSK
  - net/af_xdp: fix shared UMEM fill queue reserve
  - net/af_xdp: fix custom program loading with multiple queues
  - net/af_xdp: reserve fill queue before socket create
  - net/af_xdp: ensure socket is deleted on Rx queue setup error
  - net/af_xdp: make compatible with libbpf >= 0.7.0
  - net/af_xdp: add missing trailing newline in logs
  - net/af_xdp: allow probing when multiprocess is disabled
  - ethdev: introduce generic dummy packet burst function
  - net/af_xdp: re-enable secondary process support
  - net/af_xdp: make UMEM configure more readable
  - net/af_xdp: use libxdp if available
  - net/af_xdp: fix build with -Wunused-function


author: chenyi <chenyi211@huawei.com> - 21.11-78
changelog:
  Sync some patches from upstream about bugfix, modifies are as follow:
  - bus/pci: fix UIO resource mapping in secondary process


author: gaihuiying <eaglegai@163.com> - 2.0.11-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-config file access permisson
         fix ebt_print_error for prints null


author: xinghe <xinghe2@h-partners.com> - 2.0.11-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: xinghe <xinghe2@h-partners.com> - 2.0.11-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: yexiao<yexiao7@huawei.com> - 202011-14
changelog:
  - fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727


author: yexiao<yexiao7@huawei.com> - 202011-16
changelog:
  - fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: yangcheng <yangcheng87@huawei.com> - 1:27.2-3
changelog:
  - DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: xinghe <xinghe2@h-partnres.com> - 1.0.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix zone combined forward must not default to True
         fix fw icmptype don't alter ipvs in io_object
         fix check config use the dictionary variants
         fix functions check config fails if direct.xml exists
         fix service adding includes


author: zhanghao <zhanghao383@huawei.com> - 1.0.2-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:chore nftables add delete table helper
         nftables always flush main table on start


author: zhanghao <zhanghao383@huawei.com> - 1.0.2-7
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload
         related ko when stopping firewalld service


author: zhouyihang <zhouyihang3@h-partners.com> - 1.0.2-8
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:To reduce unnecessary loading of ebtables-related kernel modules


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: wuchangsheng <wuchangsheng2@huawei.com> - 1.0.1-40
changelog:
  - add dfx rcv_nxt info
    mbuf private cache line align
    send pkts index bug fix
    free recv pkts in main loop


author: jiangheng12 <jiangheng14@huawei.com> - 1.0.1-56
changelog:
  - fix build err with dpdk-21.11
  - fix config flow rule race
  - update lstack.Makefile
  - add socket check before write it
  - optimize do_close
  - set kni_switch valid only in primary process
  - fix build err on select_path
  - optimite select_path and pbuf_take
  - check primary process idx and secondary lstack num
  - revert select_thread_path and optimize app thread when sendmsg
  - do not transfer broadcast arp pkts to other process


author: kircher <majun65@huawei.com> - 1.0.1-57
changelog:
  - add udp multicast support in gazelle
  - clean code
  - add bond4 suport
  - dfx: security function failed, return error directly
  - dfx: set g_unix_fd to -1 after abnormal close fd to avoid double close
  - fix bond_ports parse error fix socket_mem parse error when the value exceeds 65536 exit if create_rxtx_pktmbuf failed build.sh build failed return 1 clean code
  - add parentheses to fix build error
  - fix rpc msg alloc failed fix process_numa args error coredump fix sock->conn not free when fd is kernel mode
  - kni down not stop nic
  - fix client connect number unbalance on lstack
  - fix gazellectl -x error when multiplt user nic config


author: jiangheng12 <jiangheng14@huawei.com> - 1.0.1-68
changelog:
  - check return value of hugepage_init to avoid coredump when hugepage memory is insufficient
  - fix core dump when slave mac failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-17
changelog:
  - support vlan offload
  - add vlan_id in netif
  - dfx: add tcp exception and kernel event statistics
  - stack: fix coredump caused by gazelleclt in rtc mode when stack num defined is greater than the hijacked thread num
  - add tcp faste timer cnt
  - dfx: support bond get dpdk xstats
  - update src/ltran/ltran_param.c. 规范679行的报错日志信息，将“,”之后的“Please”修正为“please”
  - ltran support vlan
  - cfg: rm ipv6_enable
  - wrap: fix connect wrong port after addr bind two ports
  - add gazelle log
  - PRE_LOG: modify log info while there are repeated items in conf file
  - add gazelle log


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-18
changelog:
  - Fixed an issue where no packet is sent or received when UDP traffic is sent
  - support show nic offload and features
  - log: optimize lstack log
  - gazellectl add connect para
  - dfx: fix 'gazellectl lstack show ip' failed
  - The call stack is not printed in the proactive exit scenario.
  - dfx: gazellectl -c support ipv6
  - 1.solve the problem of 1w connection not being able to ping 2.add debug info : rpc_mempool availd size
  - wrap: support shutdown
  - add struct gz_addr_t
  - fix coredump because of addr null in lwip_fill_sendring
  - fix compilation error
  - fix coredump because sock closed before send data fully
  - gazellectl: fix gazellectl lstack show 1 -r error


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-19
changelog:
  - fix EPOLLIN event error
  - optimize gazelle exit process 1. close all fds 2. lstack thread exits, then gazelle process exits
  - mod unix time stamp to local time
  - fix close can't exit
  - add keep-alive info
  - dfx: fix kernel_events stat


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-22
changelog:
  - fix rte_ring_create/free time consuming
  - use default nonblock mode
  - fix func separate_str_to_array overflow problem
  - CFG:fix check func strdup return value is NULL
  - fix gazellectl -c msg error
  - sigaction: fix deprecated signal flags
  - fix alloc not free
  - optimize shutdown exit process


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-47
changelog:
  - fix coredump when get empty from udp sendring
  - [virtio]: distribute pkg by dst_port
  - parse packages type in rx_poll
  - [virtio]: cfg ipv4 and ipv6 addr
  - fix build failed in 2003sp4
  - fix dpdk_bond_primary_set bug
  - cfg: del unnecessary logs
  - perftool: add latency tool


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-48
changelog:
  - add flow_bifurcation switch in lstack_cfg file
  - virtio: dfx data of virtio
  - virtio: update g_rule_port by reg_ring_type enum
  - virtio: mode actual_queue_num
  - fix poll init not clear old fd


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-50
changelog:
  - cleancode: rename gazelle files in lwip
  - add .gitignore
  - cleancode: improving makefile readability


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-51
changelog:
  - cleancode: refactor sys_now and lwip_ioctl
  - add sem post when update event
  - cleancode: refactor lwipgz_hlist.h
  - fix EPOLLIN event dropd
  - cleancode: refactor lwipgz_list.h
  - cleancode: refactor posix_api
  - fix some error of NULL pointer
  - cleancode: refactor posix type and get_socket
  - cleancode: refactor lwipsock.h


author: yangchen555 <yangchen145@huawei.com> - 1.0.2-52
changelog:
  - fix redis coredump when hugetlbs pagesize is 1024M
  - vitio_user: modify mbuf index for bond4
  - Check the return of lwip_init
  - support kernel connect
  - POSIX: fix select timeout disable and build failed in openEuler 2003


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-53
changelog:
  - virtio_user: modify mbuf index for bond4
  - fix issue: create virtio_user based on bond4 main network card
  - virtio: fix dfx error with multiple cpus
  - dfx: optimize gazellectl -x for bond


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-54
changelog:
  - refector fill udp sendring
  - virtio_user: solve the issue that failed to bind virtio_user's IPv6 address
  - virtio_user: add vlan info for kernerl packets when vlan switch is on
  - WRAP:fix double connect lead posix api disable


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-55
changelog:
  - virtio: mod virtio_user_name when multi process is on
  - WRAP: fix bind log error
  - WRAP:fix ltran mode did not bind kernel while open kni
  - virtio_user: The program establishes a network connection when network card status is up
  - fix redis coredump ctrl-c during the pressure test


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-59
changelog:
  - epoll: fix wild pointer detected by cooddy
  - tools: fix sync patch script date wrong and update the way get patchnum
  - cfg: modify maximum tcp_conn_count to 2w
  - fix mbuf_total calculation error


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-64
changelog:
  - cleancode: declare different cfg_params types
  - cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
  - cleancode: move some API from stack to rpc and rtw
  - cleancode: refactor rtc_api rtw_api and dummy_api


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-66
changelog:
  - af_xdp: set rlimit unlimit when gazelle init
  - add interrupt mode support
  - add pingpong dfx support


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-67
changelog:
  - bugfix: fix gazelle init failed while setup by non-root user
  - rpc: fix rpc_sync_call spinlock block when msg be recalled
  - rtw: fix send length exceeding send_ring_size
  - fix stack null when register interrupt


author: hantwofish <yinbin8@huawei.com> - 1.0.2-73
changelog:
  - xdp: support XDP_STATISTICS by posix_api->getsockopt_fn
  - add SO_NUMA_ID(optname) for adapting opneGauss
  - remove the unused return variable.
  - Fix annotation errors
  - bugfix: start fail when executing the popen command for the second time in openGauss


author: yinbin <jiangheng14@huawei.com> - 1.0.2-74
changelog:
  - LOG: Optimize some log displays
  - remove: code about nobolck mode for mysql
  - interrupt: fix timeout events cannot be counted


author: yinbin <yinbin8@huawei.com> - 1.0.2-77
changelog:
  - openGauss: support kernel connnect
  - xdp: support stack bind numa
  - CFG: fix xdp iface check error
  - fix build error in 2003SP4
  - cfg: show dpdk args after dpdk_adjust_args
  - fix free null pointer when no matching device is found
  - update test/unitest/ltran/ltran_param_test.c.
  - Fix the wrong spelling description in the notes and logs
  - LWIP: adjust position of shutdown in callback of connect
  - fix socket of control thread is overwirtten due to another primary process start


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: zhangxianting <zhangxianting@uniontech.com> - 9.55.0-9
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.33.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch


author: fuanan <fuanan3@h-partners.com> - 2.33.0-10
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.33.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.33.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.33.0-14
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: panxiaohe <panxiaohe@huawei.com> - 2.30.0-4
changelog:
  - Fix CVE-2021-29468
  - Add gcc and gettext to BuildRequires
    - necessary for building and msgfmt command


author: yanan <yanan@huawei.com> - 2.68.1-12
changelog:
  - Type:bugfix
  - DESC:fix issues found by svace static code analyzer
         fix segfault,memory leak,EOF,arguments leak


author: shixuantong <shixuantong1@huawei.com> - 2.34-102
changelog:
  - elf: Do not completely clear reused namespace in dlmopen (bug 29600)
  - elf: Remove allocate use on _dl_debug_printf
  - elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
  - Fix OOB read in stdlib thousand grouping parsing [BZ#29727]


author: wanghongliang <wanghongliang@loongson.cn> - 2.34-105
changelog:
  - LoongArch Port
  - Add login-Add-back-libutil-as-an-empty-library.patch from upstream
    to fix libutil build error.
  - Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
    to fix memory bug
  - After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
  - Left some test fails in testsuite_whitelist.


author: Xue Liu <liuxue@loongson.cn> - 2.34-106
changelog:
  - LoongArch: Optimize some string functions including memcpy, memmove,
    memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.


author: Yang Yanchao <yangyanchao6@huawei.com> - 2.34-109
changelog:
  - Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
    versions, this symbol is required to keep the previous items compatible.


author: Lv Ying <lvying6@huawei.com> - 2.34-112
changelog:
  - elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
    - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
      specified segment, just try to use hugepage to mmap specified segment
      instead of all the segments in the shared object
    - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage


author: Qingqing Li <liqingqing3@huawei.com> - 2.34-145
changelog:
  - elf: Add a way to check if tunable is set (BZ 27069)
  - malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2


author: chengyechun <chengyechun1@huawei.com> - 2.34-148
changelog:
  - Type:CVE
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: chengyechun <chengyechun1@huaiwe.com> - 2.34-149
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:nscd: Use errval, not errno to guide cache update
         nsce :Skip unusable entries in first pass in prune_cache


author: shixuantong <shixuantong1@huawei.com> - 2.34-150
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:elf: Add TLS modid reuse test for bug 29039
         elf: Fix TLS modid reuse generation assignment
         elf: Check objname before calling fatal_error
         elf: Fix _dl_debug_vdprintf to work before self-relocation
         elf: ldconfig should skip temporary files created by package managers
         ldconfig: Fixes for skipping temporary files.


author: shixuantong <shixuantong1@huawei.com> - 2.34-157
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:enable shared library use huge page for aarch64 architecture
         revert "elf/ld.so: use special mmap for hugepage to get symbols"
         hugepageedit: static-link build
         elf: the hugepage feature of dynamic library keep compatible with llvm lld
         elf: add some debug info for dynamic library hugepage feature


author: chengyechun <chengyechun1@huawei.com> - 2.34-160
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:resolv: Track single-request fallback via _res._flags
         resolv: Allow short error responses to match any query


author: shixuantong <shixuantong1@huawei.com> - 2.34-162
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:elf: avoid jumping over a needed declaration
         elf: Move __rtld_malloc_init_stubs call into _dl_start_final


author: shixuantong <shixuantong1@huawei.com> - 2.34-163
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:elf: Handle static PIE with non-zero load address
         elf: Introduce _dl_relocate_object_no_relro
         elf: Switch to main malloc after final ld.so self-relocation


author: chenyanpanHW <chenyanpan@huawei.com> - 7.6-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: lihaoxiang <lihaoxiang9@huawei.com> - 10.0-7
changelog:
  - fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: hanchao <hanchao47@huawei.com> - 1.17.3-5
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
  	CVE-2022-30635,CVE-2022-30630,CVE-2022-30632,CVE-2022-28131,
  	CVE-2022-30631,CVE-2022-30629,CVE-2022-30634


author: hanchao<hanchao47@huawei.com> - 1.17.3-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: golang: modify the golang.spec to remove unnecessary files
  	from golang-help package


author: hanchao <hanchao47@huawei.com> - 1.17.3-10
changelog:
  - Type:CVE
  - CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
  - SUG:NA
  - DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879


author: hanchao <hanchao47@huawei.com> - 1.17.3-12
changelog:
  - Type:CVE
  - CVE:CVE-2022-41716
  - SUG:NA
  - DESC: remove hard code and strong dependency of git, subversion and mercurial


author: hanchao <hanchao47@huawei.com> - 1.17.3-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
  - SUG:NA
  - DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717


author: hanchao <hanchao47@huawei.com> - 1.17.3-15
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
  - SUG:NA
  - DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725


author: hanchao <hanchao47@huawei.com> - 1.17.3-16
changelog:
  - Type:CVE
  - CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
  - SUG:NA
  - DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: hanchao <hanchao63@huawei.com> - 1.17.3-18
changelog:
  - Type:CVE
  - CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
  - SUG:NA
  - DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540


author: hanchao <hanchao63@huawei.com> - 1.17.3-19
changelog:
  - Type:CVE
  - CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
  - SUG:NA
  - DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405


author: hanchao <hanchao63@huawei.com> - 1.17.3-23
changelog:
  - Type:CVE
  - CVE:CVE-2023-39318,CVE-2023-39319
  - SUG:NA
  - DESC:fix CVE-2023-39318 and CVE-2023-39319


author: hanchao <hanchao63@huawei.com> - 1.17.3-28
changelog:
  - Type:CVE
  - CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
  - SUG:NA
  - DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289


author: wangshuo <wangshuo@kylinos.cn> - 1.17.3-31
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters


author: wanglu <wanglu210@huawei.com> - 1:2.06-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tests: Disable blkid cache usage
         disk/efi/efidisk: Pass buffers with higher alignment


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
         in grub2-tools to 644


author: mengyingkun <mengyingkun@loongson.cn> - 1:2.06-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:loongarch modify the location where initrd is loaded into memory


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disk/diskfilter: Check calloc() result for NULL
         kern/buffer: Handle NULL input pointer in grub_buffer_free()
         disk/diskfilter: Don't make a RAID array with more than 1024 disks
         loader/multiboot_elfxx: Fix memory leak
         loader/linux: Ensure the newc pathname is NULL-terminated
         term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
         normal/cmdline: Fix two related integer underflows
         fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
         fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
         fs/xfs: Fix memory leaks in XFS module
         kern/file: Fix error handling in grub_file_open()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
         net/bootp: Fix unchecked return value
         fs/iso9660: Avoid reading past the entry boundary
         fs/iso9660: Incorrect check for entry boundary
         fs/iso9660: Prevent skipping CE or ST at start of continuation area
         fs/iso9660: Prevent read past the end of system use area
         fs/iso9660: Add check to prevent infinite loop
         gentpl.py: Remove .interp section from .img files
         kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
         font: Reject fonts with negative max_char_width or max_char_height
         font: Assign null_font to unknown_glyph
         font: Check return value of grub_malloc() in ascii_glyph_lookup()


author: Funda Wang <fundawang@yeah.net> - 1.18.4-8
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: yangchenguang <yangchenguang@kylinsec.com.cn> - 3.24.30-8
changelog:
  - Fix the problem that the prompt information of network icon volume icon is not displayed
  - update xscreen size when x11 screen size change
  - always send the monitors changed signal when screen size change
  - Add function definition of gtk_image_set_from_pixbuf_with_scale


author: xinghe <xinghe2@h-partners.com> - 2.6.6-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:connection: Clear flags when a conn is removed
         connection: Preserve flags when a conn is removed
         stream: do not try to free a failed stream-conn
         http_ana/txn: don't re-initialize txn and req var
         mworker: prevent incorrect values in uptime
         protocol: fix minor memory leak in protocol_bind_all()
         stream: Perform errors handling in right order in stream_new()


author: xinghe <xinghe2@h-partners.com> - 2.6.6-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:backport to fix potential coredump:
         errors: handle malloc failure in usermsgs_put
         ssl_sock: add check for ha_meth
         thread: add a check for pthread_creat


author: xinghe <xinghe2@h-partners.com> - 2.6.6-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:server: add missing free for server->rdr_pfx
         server: do not leak default-server in defaults


author: xinghe <xinghe2@h-partners.com> - 2.6.6-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: xinghe <xinghe2@h-partners.com> - 2.6.6-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         fix timehopping in freq_ctr_total


author: xinghe <xinghe2@h-partners.com> - 2.6.6-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: gaihuiying <eaglegai@163.com> - 2.4.51-4
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-8
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556


author: liweiganga <liweiganga@uniontech.com> - 2.4.51-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:change default value of HeartbeatMaxServers
         fix setting and comparison of IPs fileds
         avoid voerflow in case of indecently large session
         make ap_escape_quotes() work correctly
         fix lua_request with cast first
         Handle children killed pathologically
         mod_md do not interfere with requests if challenge type http-01


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:reduce the dependency of httpd on system-logos installation


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-13
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-15
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyehcun1@huawei.com> - 2.4.51-16
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Report an error if the AJP backend sends an invalid number of headers
         handled a negative value when parsing the config
         avoid delimiting the query with a backreference
         fix missing APLOGNO


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-17
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Fix double encoding of the uri-path of the request
         Do not match the extention against possible query string
         Do not double encode slashes
         Check before forwarding that a nocanon path has not been rewriteen


author: panchenbo <panchenbo@kylinsec.com.cn> - 2.4.51-18
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:add sw_64 support,optimize sw build patch,add loongarch64 support


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.51-21
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-22
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: yangjiaqi <yangjiaqi16@huawei.com> - 2.0.17-10
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: remove chmod 751 permission for dirs by engine when user-remap enabled


author: yangjiaqi <yangjiaqi16@huawei.com> - 2.0.18-15
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: keep the service status unchanged after iSulad service upgrade


author: chenyanpanHW <chenyanpan@huawei.com> - 10.06-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaoxingwang <gaoxingwang1@huawei.com> - 10.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1.2-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:after executing hook scripts, remove their executable permission
         of non root users


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: sunsuwan<sunsuwan3@huawei.com> - 5.15.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lnstat: fix buffer overflow in header output 
         libnetlink: fix socket leak in rtnl_open_byptoyo
         lnstat: fix strdup leak in w argument parsing
         q_cake: allow fix buffer overflow on large labels
         tc flower: fix buffer overflow on large labels
         tc_tuil: fix parsing action control with space and sl
         tipc: fix keylen check
         fix devlink health dump command without arg
         tc: em_u32: fix offset parsing
         l2tp fix typo in AF_INET6 checksum JSON print
         ip: Fix size_columns() for very large values
         ip: Fix size_columns() invocation that passes a 32-bit quantity


author: jiangheng<jiangheng14@huawei.com> - 5.15.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bridge: fix memory leak when doing fdb get
         mptcp: fix memory leak when doing 'endpoint show'
         mptcp: fix memory leak when getting limits
         ip neigh: fix memory leak when doing 'get'
         ip address: fix memory leak when specifying device
         fix marco expansion in changelog


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add epoch version in changelog to fix check_spec_file ci failure


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ipnetns: fix fd leak with 'ip netns set'
         iproute2: optimize code and fix some mem-leak risk
         iproute_lwtunnel: fix array boundary check
         iproute_lwtunnel: fix possible use of NULL when malloc()
         m_action: fix warning of overwrite of const string
         netem: fix NULL deref on allocation failure
         nstat: fix potential NULL deref
         rdma/utils: fix some analyzer warnings
         rt_names: check for malloc() failure
         tc/prio: handle possible truncated kernel response
         tc_exec: don't dereference NULL on calloc failure
         tc_util fix unitialized warning
         iptunnel: detect protocol mismatch on tunnel change
         ipmaddr: fix dereference of NULL on malloc() failure


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
         tc: ct: Fix invalid pointer dereference
         tc_util: Change datatype for maj to avoid overflow issue
         tc_util: Fix no error return when large parent id used
         xfrm: prepare state offload logic to set mode


author: liubo335 <liubo335@huawei.com> - 1:5.15.0-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:f_flower: Treat port 0 as valid
         ip: error out if iplink does not consume all options
         iplink_bridge: fix incorrect root id dump
         ss: change aafilter port from int to long (inode support)
         ss: Fix socket type check in packet_show_line()
         ss: print unix socket "ports" as unsigned int (inode)
         Add utility to convert an unsigned int to string
         Add get_long utility and adapt get_integer accordingly
         utils: fix get_integer() logic


author: eaglegai <eaglegai@163.com> - 20210722-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport to fix no reply when ping6 from Subnet-Router anycast address


author: zengweifeng <zwfeng@huawei.com> - 20210722-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix ping2 bingding to VRF and address
          Avoid binding to non-VRF
          Fix ARP protocol field for AX.25 and NETROM


author: crash888 <wangmengqi13@huawei.com> - 1:1.8.0.372-b07.0
changelog:
  - deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
  - deleted 8287109-Distrust-failed-with-CertificateExpired.patch
  - deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
  - deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
  - deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
  - deleted fix-CVE-2023-21930.patch
  - deleted fix-CVE-2023-21954.patch
  - deleted fix-CVE-2023-21967.patch
  - modified 8202951-Support-default-jsa.patch
  - modified 8204595-add-more-thread-related-system-settings-info.patch
  - modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
  - modified add-appcds-test-case.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch
  - modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch
  - add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
  - add jcmd-mnt-add-start-time-and-end-time.patch                    
  - add Fix-localtime_r-not-defined-on-windows.patch                  
  - add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
  - add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
  - upgrade to jdk8u372-b07


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.372-b07.2
changelog:
  - 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
  - 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
  - 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
  - 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
  - 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
  - 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
  - 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
  - 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
  - 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
  - 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
  - 0012-8301187-Memory-leaks-in-OopMapCache.patch
  - 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
  - 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
  - 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
  - 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
  - 0017-8054889-Compiler-team-s-implementation-task.patch
  - 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
  - 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
  - 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
  - 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
  - 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
  - 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
  - 0025-8220166-Performance-regression-in-deserialization.patch
  - 0026-8072070-Improve-interpreter-stack-banging.patch
  - 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
  - 0028-Display-more-information-about-the-codedump-file-pat.patch
  - 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
  - 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
  - 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
  - 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
  - 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
  - 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
  - 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
  - 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
  - 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
  - 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
  - 0040-Print-the-Exception-event-in-more-detail.patch
  - 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
  - 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
  - 0043-Cache-dom-in-xml-transform.patch
  - 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
  - 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
  - 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
  - 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
  - 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
  - 0049-Modify-G1GC-log-information.patch
  - 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
  - 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
  - 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
  - 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
  - 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
  - 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch


author: wanghao_hw <wanghao564@huawei.com> - 1:1.8.0.382-b05.0
changelog:
  - add Huawei-Print-more-information-when-AbortVMOnException.patch
  - deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
  - deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch
  - modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
  - add fixing-a-bug-in-the-processing-of-default-attributes.patch
  - add enhance-java-heap-oom-err-log.patch
  - add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
  - del --with-zlib=system
  - upgrade to jdk8u382-b05


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.382-b05.9
changelog:
  - add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
  - add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
  - add Record-the-number-of-processes-to-errlog-file.patch.patch
  - add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
  - add The-OverWriteOldestGCLog-option-is-added-to-control.patch
  - add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
  - add add-make-Appcds-jsa-rw-region-deterministic.patch
  - add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - add add-8198423-Improve-metaspace-chunk-allocation.patch
  - add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
  - add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - add add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - add add-8226530-test-case-fixed.patch
  - add add-8147940-Modify-testcase-this-test-does-not-assum.patch
  - add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
  - add add-Do-not-collect_class-when-DynamicCDS-dump.patch
  - add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
  - add add-Adapting-IOException-of-Zip-to-ZipException.patch
  - add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
  - add add-fix-windows-build-Dynamic-CDS-failure.patch
  - add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.392-b08.0
changelog:
  - add 8308682-Enhance-AES-performance.patch
  - add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
  - add Add-metaspace-memory-allocation-failure-validation.patch
  - add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
  - del 8202952.patch
  - del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
  - modified Dynamic-CDS-Archive.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase1.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - upgrade to jdk8u392-b08


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.2
changelog:
  - remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - remove add-8226530-test-case-fixed.patch
  - remove add-Adapting-IOException-of-Zip-to-ZipException.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.402-b06.0
changelog:
  - modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified g1gc-numa-aware-Implementation.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8203699.patch
  - add Add-CaptchaTest-and-fix-KAE-Testcases.patch
  - add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
  - add Add-compiling-option-GS-when-building-windows-JDK.patch
  - add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
  - add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
  - add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
  - add 8057967-CallSite-dependency-tracking-scales-devastat.patch
  - add 8079205-CallSite-dependency-tracking-is-broken-after.patch


author: Benshuai5D <benshuai5d@163.com> - 1:1.8.0.402-b06.4
changelog:
  - add 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - add 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
  - add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
  - add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
  - add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
  - add GCC-12-reports-some-compiler-warnings.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.412-b08.0
changelog:
  - del 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - del 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase2.patch
  - modified support-numactl-for-hadoop-yarn.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.412-b08.3
changelog:
  - add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
  - add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.412-b08.4
changelog:
  - fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
  - fix loongson vendor error


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.16.8-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
  - modified fast-serializer-jdk11.patch
  - modified dfx-enhancement-of-FastSerializer.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
  - modified add-missing-inline.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix_X509TrustManagerImpl_symantec_distrust.patch
  - add fix_Internal_and_external_code_inconsistency.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.6-0
changelog:
  - update to 11.0.17+5
  - modified NUMA-Aware-Implementation-humongous-region.patch
  - modified Add-KAE-implementation.patch
  - modified fast-serializer-jdk11.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.8-0
changelog:
  - update to 11.0.17+8(GA)
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.18.10-0
changelog:
  - update to 11.0.18+10(GA)
  - modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
  - delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch


author: wanghao <wanghao564@huawei.com> - 1:11.0.19.7-0
changelog:
  - update to 11.0.19+7(GA)
  - deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
  - modified Add-KAE-implementation.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified delete_expired_certificates.patch
  - modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
  - deleted fix-CVE-2023-21930.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.21.9-0
changelog:
  - update to 11.0.21+9(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified 8214527-AArch64-ZGC-for-Aarch64.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.22.7-0
changelog:
  - update to 11.0.22+7(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: huangjie <huangjie150@huawei.com> - 1:11.0.23.9-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified delete_expired_certificates.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.8.7-2
changelog:
  - add add-Parallel-Full-gc-mark-stack-draining-should.patch
  - add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
  - add add-8267185-Add-string-deduplication-support-to.patch
  - add add-8292296-Use-multiple-threads-to-process-Par.patch
  - add fix-cds-SignedJar_java-test-fails.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.9.8-0.rolling
changelog:
  - fix 8253495-CDS-generates-non-deterministic-outpu.patch
  - fix add-8267185-Add-string-deduplication-support-to.patch
  - fix add-version-txt.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.9.8-1
changelog:
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
  - add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
  - add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8168469-Memory-leak-in-JceSecurity.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch


author: neu-mobi <liuyulong.work@qq.com> - 1:17.0.10.9-0.rolling
changelog:
  - del 8168469-Memory-leak-in-JceSecurity.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
  - del 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - del 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - del 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
  - del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
  - modified 8253495-CDS-generates-non-deterministic-outpu.patch
  - modified 8280872-Reorder-code-cache-segments-to-improv.patch
  - modified add-version-txt.patch
  - add Add-problemlist.patch
  - add puyuan-jdk17.0.9-patch.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.11.9-0.rolling
changelog:
  - del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
  - modify puyuan-jdk17.0.9-patch.patch


author: songliyang <songliyang@kylinos.cn> - 1:17.0.11.9-1
changelog:
  - rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
  - fix loongarch vendor error and delete redundant vendor args


author: songliyang <songliyang@kylinos.cn> - 1:17.0.12.7-1
changelog:
  - update Loongarch support patch to fix the error while applying in prep stage
  - delete redundant symbols while viewing spec file with vim that make it strange on highlight


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.12.7-2
changelog:
  - add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
  - add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.12.7-5
changelog:
  - Add Backport-of-JDK-8305680.patch
  - Add Backport-of-JDK-8305937.patch
  - Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
  - Add 8337982-Remove-dead-undef-assrt0n.patch
  - Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
  - Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
  - Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
  - Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
  - Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
  - Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch


author: Benshuai5D <zhangyunbo7@huawei.com> - 1:17.0.13.11-0
changelog:
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8264806-Backport-Graal-Compiler.patch
  - modify Add-JBooster-Lazy-AOT-module.patch
  - modify Apply-TBI-to-ZGC-of-JDK17.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify KAE-zip-Features.patch
  - modify add-version-txt.patch
  - add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
  - update to 17.0.13+11(ga)


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.4.8-0.2
changelog:
  - del pr3183-rh1340845-support_system_crypto_policy.patch
  - del rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
  - del rh1648644-java_access_bridge_privileged_security.patch


author: neu-mobi <liuyulong.work@qq.com> - 1:17.0.5.8-0.1
changelog:
  - add 8253495-CDS-generates-non-deterministic-outpu.patch
  - add 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
  - add 8296485-BuildEEBasicConstraints.java-test-fai.patch
  - add Fast-Serializer.patch
  - add Apply-TBI-barrier-patch-to-C1.patch
  - add Add-Fast-serializer-testcase.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.6.9-0.rolling
changelog:
  - modified add-version-txt.patch
  - del 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch
  - del 8296480-Fix-the-problem-that-the-TestPolicy.j.patch
  - del 8296485-BuildEEBasicConstraints.java-test-fai.patch
  - del Add-Fast-serializer-testcase.patch
  - add jdk17.0.6-ga


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.7.7-0.rolling
changelog:
  - add 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
  - modified add-version-txt.patch
  - modified 8253495-CDS-generates-non-deterministic-outpu.patch
  - modified Delete-expired-certificate.patch
  - modified Apply-TBI-to-ZGC-of-JDK17.patch
  - add jdk17.0.7-ga


author: noah <hedongbo@huawei.com> - 1:18.0.0.37-0.0.ea.rolling
changelog:
  - Update to jdk-18.0.0.0+37
  - adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch


author: DXwangg <wangjiawei80@huawei.com> -1:19.0.0.36-0.0.ea.rolling
changelog:
  - Update to jdk-19.0.0.0+36
  - Remove references to sample directory removed by JDK-8284999
  - Need to include the '.S' suffix in debuginfo checks after JDK-8284661


author: kuenking111 <wangkun49@huawei.com> - 1:21.0.0.35-0-rolling
changelog:
  * Mon Aug 07 2023 misaka00251 <liuxin@iscas.ac.cn> - 1:20.0.2.9-1-rolling
  - Add riscv64 to jit_arches


author: yaoxin <yao_xin001@hoperun.com> - 1.5.4-1
changelog:
  - Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
    CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436


author: fengtao <fengtao40@huawei.com> - 0.15-5
changelog:
  - we got upgrade error when upgrade json-c from very low version,
    for example json-c-0.11-5. because old version has a softlink:
    /usr/include/json-c  --> /usr/include/json
    and now, softlink has been removed. so, we fix this in pretrans


author: mengkanglai <mengkanglai2@huawei.com> - 0.16-2
changelog:
  - add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
  - add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
  - add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch


author: sunhai <sunhai10@huawei.com> - 0.16-4
changelog:
  - backport patch to Fix build with clang-15+
  - backport patch to Fix json_tokener_parse_ex: handle out of memory errors


author: bajing <bajing@cmss.chinamobile.com> - 5.10.0-136.96.0.177.27
changelog:
  - um: line: always fill *error_out in setup_one_line()
  - net/mlx5: Fix bridge mode operations when there are no VFs
  - net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
  - perf/x86/intel: Limit the period on Haswell
  - drm/amd/display: Assign linear_pitch_alignment even for VM
  - serial: sc16is7xx: fix invalid FIFO access with special register set
  - drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
  - ksmbd: discard write access to the directory open
  - ASoC: meson: axg-card: fix 'use-after-free'
  - drm/amd/display: Check gpio_id before used as array index
  - rtmutex: Drop rt_mutex::wait_lock before scheduling
  - nvmet-tcp: fix kernel crash if commands allocation fails
  - drm/amd/display: Add array index check for hdcp ddc access
  - usb: typec: ucsi: Fix null pointer dereference in trace
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk
  - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
  - drm/amd/display: Check msg_id before processing transcation
  - drm/amd/pm: Fix negative array index read
  - sched/smt: Fix unbalance sched_smt_present dec/inc
  - sched/smt: Introduce sched_smt_present_inc/dec() helper
  - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
  - btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
  - nilfs2: protect references to superblock parameters exposed in sysfs
  - btrfs: handle errors from btrfs_dec_ref() properly
  - hwmon: (lm95234) Fix underflows seen when writing limit attributes
  - ethtool: check device is present when getting link settings
  - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
  - ksmbd: unset the binding mark of a reused connection
  - scsi: aacraid: Fix double-free on probe failure
  - drm/amd/display: Ensure index calculation will not overflow
  - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
  - PCI: Add missing bridge lock to pci_bus_lock()
  - usb: dwc3: st: fix probed platform device ref count on probe error path
  - ext4: Fix race in buffer_head read fault injection
  - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
  - pktgen: use cpus_read_lock() in pg_net_init()
  - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
  - s390/cio: rename bitmap_size() -> idset_bitmap_size()
  - bitmap: introduce generic optimized bitmap_size()
  - fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
  - tools: move alignment-related macros to new <linux/align.h>
  - selinux,smack: don't bypass permissions check in inode_setsecctx hook
  - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
  - bcache: fix variable length array abuse in btree_iter
  - bpf: verifier: prevent userspace memory access
  - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
  - can: bcm: Remove proc entry when dev is unregistered.
  - scsi: bfa: Ensure the copied buf is NUL terminated
  - enic: Validate length of nl attributes in enic_set_vf_port
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found.
  - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
  - nilfs2: fix missing cleanup on rollforward recovery error
  - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
  - apparmor: fix possible NULL pointer dereference
  - drm/amdgpu: Fix out-of-bounds write warning
  - can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
  - ALSA: line6: Fix racy access to midibuf
  - lib: objagg: Fix general protection fault
  - jfs: fix null ptr deref in dtInsertEntry
  - drm/vmwgfx: Fix a deadlock in dma buf fence polling
  - media: xc2028: avoid use-after-free in load_firmware_cb()
  - scsi: qedi: Fix crash while reading debugfs attribute
  - hwmon: (adc128d818) Fix underflows seen when writing limit attributes
  - driver: iio: add missing checks on iio_info's callback access
  - Input: MT - limit max slots
  - sch/netem: fix use after free in netem_dequeue
  - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
  - powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
  - driver core: Fix uevent_show() vs driver detach race
  - selftests: forwarding: devlink_lib: Wait for udev events after reloading
  - drivers: core: synchronize really_probe() and dev_uevent()
  - smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
  - udf: Avoid excessive partition lengths
  - udf: Define EFSCORRUPTED error code
  - binder: fix UAF caused by offsets overwrite
  - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
  - netem: fix return value if duplicate enqueue fails


author: bajing <bajing@cmss.chinamobile.com> - 5.10.0-136.97.0.178.27
changelog:
  - atm: idt77252: prevent use after free in dequeue_rx()
  - spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
  - fou: remove warn in gue_gro_receive on unsupported protocol
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
  - crypto: stm32/cryp - call finalize with bh disabled
  - bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
  - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
  - nfc: pn533: Add poll mod list filling check
  - sched: sch_cake: fix bulk flow accounting logic for host fairness
  - ice: Add netif_device_attach/detach into PF reset flow
  - bpf: Remove tst_run from lwt_seg6local_prog_ops.
  - md: ensure child flush IO does not affect origin bio->bi_status
  - md: Remove flush handling
  - md: fix a crash in mempool_free
  - mptcp: pm: Fix uaf in __timer_delete_sync
  - mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
  - mptcp: export lookup_anno_list_by_saddr
  - net: dpaa: Pad packets to ETH_ZLEN
  - netfilter: nft_socket: fix sk refcount leaks
  - USB: usbtmc: prevent kernel-usb-infoleak
  - acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
  - drm/i915/gt: Cleanup partial engine discovery failures
  - btrfs: clean up our handling of refs == 0 in snapshot delete
  - drm/amdgpu: the warning dereferencing obj for nbio_v7_4
  - s390/dasd: fix error recovery leading to data corruption on ESE devices
  - s390/sclp: Prevent release of buffer in I/O


author: bajing <bajing@cmss.chinamobile.com> - 5.10.0-136.98.0.179.27
changelog:
  - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
  - arm64: acpi: Move get_cpu_for_acpi_id() to a header
  - drm/amd/display: Avoid overflow from uint32_t to uint8_t
  - drm/lima: fix a memleak in lima_heap_alloc
  - octeontx2-af: Use separate handlers for interrupts
  - media: go7007: fix a memleak in go7007_load_encoder
  - greybus: Fix use-after-free bug in gb_interface_release due to race condition.
  - net/mlx5e: Fix netif state handling
  - nbd: Fix signal handling
  - nbd: Improve the documentation of the locking assumptions
  - dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
  - drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
  - locks: fix TOCTOU race when granting write lease
  - ubi: block: fix null-pointer-dereference in ubiblock_create()
  - ubi: block: Remove in vain semicolon
  - ext4: dax: keep orphan list before truncate overflow allocated blocks
  - ext4: dax: fix overflowing extents beyond inode size when partially writing
  - ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
  - ELF: fix kernel.randomize_va_space double read
  - scsi: qla2xxx: During vport delete send async logout explicitly
  - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
  - net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
  - mlxsw: spectrum_acl_tcam: Fix warning during rehash
  - tcp: do not accept ACK of bytes we never sent
  - netfilter: nft_flow_offload: reset dst in route object after setting up flow
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
  - mlxsw: spectrum_acl_erp: Fix object nesting warning
  - netns: Make get_net_ns() handle zero refcount net
  - net/sched: taprio: extend minimum interval restriction to entire cycle too
  - net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
  - ipv6: sr: fix invalid unregister error path
  - md/raid1: don't free conf on raid0_run failure
  - bonding: fix xfrm real_dev null pointer dereference
  - netfilter: flowtable: initialise extack before use
  - bonding: fix null pointer deref in bond_ipsec_offload_ok
  - bonding: fix bond_ipsec_offload_ok return type
  - blk-mq: Fix potential io hung for shared sbitmap per tagset
  - blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
  - sbitmap: fix lockup while swapping
  - sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
  - sbitmap: fix possible io hung due to lost wakeup
  - block: Fix lockdep warning in blk_mq_mark_tag_wait
  - blk-mq: fix potential io hang by wrong 'wake_batch'
  - sbitmap: correct wake_batch recalculation to avoid potential IO hung
  - blk-mq: Fix wrong wakeup batch configuration which will cause hang
  - blk-mq: fix tag_get wait task can't be awakened
  - gpio: prevent potential speculation leaks in gpio_device_get_desc()
  - riscv: process: Fix kernel gp leakage
  - octeontx2-af: Fix possible null pointer dereference.


author: zhouding <zhouding@cmss.chinamobile.com> - 5.10.0-136.99.0.180.27
changelog:
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation
  - NFSD: Limit the number of concurrent async COPY operations
  - mm/gup: fix gup_pud_range() for dax
  - sock_map: Add a cond_resched() in sock_hash_free()
  - tcp: check skb is non-NULL in tcp_rto_delta_us()
  - RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
  - net: do not delay dst_entries_add() in dst_release()
  - ALSA: asihpi: Fix potential OOB array access
  - drm/amd/display: fix mixed declarations warning
  - drm/amd/display: added NULL check at start of dc_validate_stream
  - libbpf: Handle size overflow for ringbuf mmap
  - net: ethernet: nixge: fix NULL dereference
  - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
  - NFC: nci: Bounds check struct nfc_target arrays
  - PCI: mt7621: Add sentinel to quirks table
  - drm/amd/display: Check null pointer before dereferencing se
  - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
  - drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
  - drm/amd/display: Fix index out of bounds in DCN30 color transformation
  - drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
  - gpio: amd8111: Fix PCI device reference count leak
  - ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
  - PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
  - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
  - jfs: Fix uninit-value access of new_ea in ea_buffer
  - x86/ioapic: Handle allocation failures gracefully
  - media: pci: cx23885: check cx23885_vdev_init() return
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  - devres: Fix memory leakage caused by driver API devm_free_percpu()
  - jfs: Fix array-index-out-of-bounds in diFree
  - ocfs2: cancel dqi_sync_work before freeing oinfo
  - i2c: lpi2c: Avoid calling clk_get_rate during transfer
  - i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
  - i2c: imx-lpi2c: use bulk clk API
  - clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
  - clk: Add a devm variant of clk_rate_exclusive_get()
  - riscv: prevent pt_regs corruption for secondary idle threads
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
  - ocfs2: add bounds checking to ocfs2_check_dir_entry()
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
  - parport: Proper fix for array out-of-bounds access
  - dev/parport: fix the array out-of-bounds risk
  - soundwire: cadence: fix invalid PDI offset
  - nfsd: map the EBADMSG to nfserr_io to avoid warning
  - scsi: fnic: Move flush_work initialization out of if block
  - scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
  - iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
  - nilfs2: fix potential oob read in nilfs_btree_check_delete()
  - tracing: Free buffers when a used dynamic event is removed
  - tracing: Add tracing_reset_all_online_cpus_unlocked() function
  - drm/client: fix null pointer dereference in drm_client_modeset_probe
  - udf: Fix preallocation discarding at indirect extent boundary
  - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
  - jfs: Fix uaf in dbFreeBits
  - jfs: check if leafidx greater than num leaves per dmap tree
  - btrfs: wait for fixup workers before stopping cleaner kthread during umount
  - btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
  - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
  - wifi: virt_wifi: don't use strlen() in const context
  - wifi: virt_wifi: avoid reporting connection success with wrong SSID
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
  - tracing/timerlat: Fix a race during cpuhp processing
  - mm/swapfile: skip HugeTLB pages for unuse_vma
  - spi: nxp-fspi: fix the KASAN report out-of-bounds bug
  - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
  - usb: dwc3: core: Prevent USB core invalid event buffer address access
  - usb: dwc3: core: Skip setting event buffers for host only controllers
  - of: module: prevent NULL pointer dereference in vsnprintf()
  - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment
  - nfsd: call cache_put if xdr_reserve_space returns NULL
  - drm/nouveau: prime: fix refcount underflow
  - i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
  - dma: xilinx_dpdma: Fix locking
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
  - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
  - soc: qcom: cmd-db: Map shared memory as WC, not WB
  - media: imon: fix access to invalid resource for the second interface
  - blk-mq: fix blk_mq_hw_ctx active request accounting
  - drm/amdgpu: fix mc_data out-of-bounds read warning
  - KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS
  - nilfs2: fix state management in error path of log writing function
  - blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
  - ext4: avoid deadlock in fs reclaim with page writeback


author: bajing <bajing@cmss.chinamobile.com> - 5.10.0-136.100.0.181.27
changelog:
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem
  - ext4: explicitly exit when ext4_find_inline_entry returns an error
  - ext4: return error on ext4_find_inline_entry
  - ext4: ext4_search_dir should return a proper error
  - ext4: fix RENAME_WHITEOUT handling for inline directories
  - ext4: update orig_path in ext4_find_extent()
  - drm/shmem-helper: Remove errant put in error path
  - Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
  - iio: health: afe4403: Fix oob read in afe4403_read_raw
  - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
  - l2tp: prevent possible tunnel refcount underflow
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect
  - Bluetooth: Return whether a connection is outbound
  - f2fs: get rid of online repaire on corrupted directory
  - drm/amd/display: Check BIOS images before it is used
  - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
  - net: mvneta: Fix an out of bounds check
  - net: mvneta: Prevent out of bounds read in mvneta_config_rss()
  - uprobes: fix kernel info leak via "[uprobes]" vma
  - wifi: cfg80211: fix buffer overflow in elem comparison
  - memcg_write_event_control(): fix a user-triggerable oops
  - drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
  - jfs: Fix sanity check in dbMount
  - jfs: fix out-of-bounds in dbNextAG() and diAlloc()
  - ASoC: soc-pcm: Add NULL check in BE reparenting
  - gpiolib: fix memory leak in gpiochip_setup_dev()
  - tcp: fix mptcp DSS corruption due to large pmtu xmit
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
  - gso: fix udp gso fraglist segmentation after pull from frag_list
  - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
  - tipc: re-fetch skb cb after tipc_msg_validate
  - net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
  - net: mdio: use device_set_node() to setup both fwnode and of
  - driver core: add a helper to setup both the of_node and fwnode of a device
  - ethernet: aeroflex: fix potential skb leak in greth_init_rings()
  - fsnotify: clear PARENT_WATCHED flags lazily
  - fsnotify: remove unused declaration
  - fsnotify: Fix comment typo
  - io_uring: check if we need to reschedule during overflow flush
  - io_uring: always lock __io_cqring_overflow_flush
  - ext4: fix double brelse() the buffer of the extents path
  - ext4: aovid use-after-free in ext4_ext_insert_extent()
  - ext4: avoid use-after-free in ext4_ext_show_leaf()
  - drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw
  - drm/amd/display: Avoid overflow assignment in link_dp_cts
  - drm/stm: Avoid use-after-free issues with crtc and plane
  - tipc: guard against string buffer overrun
  - bpf, lsm: Add check for BPF LSM return value
  - bpf, lsm: Add disabled BPF LSM hook list
  - net/9p: Fix a potential socket leak in p9_socket_open
  - ACPI: sysfs: validate return type of _STR method
  - ocfs2: reserve space for inline xattr before attaching reflink tree
  - ASoC: ops: Fix bounds check for _sx controls
  - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
  - drm/amd/display: Check null pointers before using them
  - f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
  - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too
  - ext4: fix slab-use-after-free in ext4_split_extent_at()
  - uprobe: avoid out-of-bounds memory access of fetching args
  - platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
  - net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
  - slip: make slhc_remember() more robust against malicious packets
  - net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
  - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
  - riscv: Sync efi page table's kernel mappings before switching
  - thermal: core: Reference count the zone in thermal_zone_get_by_id()
  - selftests/bpf: Add test for lsm tail call
  - bpf: Prevent tail call between progs attached to different hooks
  - smack: tcp: ipv4, fix incorrect labeling
  - net/xen-netback: prevent UAF in xenvif_flush_hash()
  - r8169: add tally counter fields added with RTL8125
  - ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
  - net: phy: fix null-ptr-deref while probe() failed
  - ppp: fix ppp_async_encode() illegal access
  - drm: omapdrm: Add missing check for alloc_ordered_workqueue
  - fbdev: pxafb: Fix possible use after free in pxafb_task()
  - vhost_vdpa: assign irq bypass producer token correctly
  - mm: memcg: don't periodically flush stats when memcg is disabled
  - crypto: xor - fix template benchmarking
  - crypto: xor - Fix typo of optimization
  - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
  - scsi: mpt3sas: Remove scsi_dma_map() error messages
  - ocfs2: remove unreasonable unlock in ocfs2_read_blocks
  - block: fix potential invalid pointer dereference in blk_add_partition
  - smb: client: fix UAF in async decryption
  - wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
  - iwlwifi: mvm: move iwl_mvm_stop_device() out of line
  - IB/core: Fix ib_cache_setup_one error flow cleanup
  - ACPI: battery: Fix possible crash when unregistering a battery hook
  - ACPI: battery: Simplify battery hook locking
  - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
  - Bluetooth: Fix crash when replugging CSR fake controllers
  - blk_iocost: fix more out of bound shifts
  - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
  - cifs: Fix buffer overflow when parsing NFS reparse points
  - fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
  - ipv6: avoid use-after-free in ip6_fragment()
  - firmware_loader: Block path traversal
  - nbd: fix race between timeout and normal completion
  - gtp: fix a potential NULL pointer dereference
  - padata: use integer wrap around to prevent deadlock on seq_nr overflow
  - static_call: Replace pointless WARN_ON() in static_call_module_notify()
  - nfsd: return -EINVAL when namelen is 0
  - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()


author: bajing <bajing@cmss.chinamobile.com> - 5.10.0-136.101.0.182.27
changelog:
  - LoongArch: Don't crash in stack_top() for tasks without vDSO
  - cgroup: add cgroup_root_ext to keep kabi
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show()
  - cgroup: Make operations on the cgroup root_list RCU safe
  - Revert "cgroup: fix uaf when proc_cpuset_show"
  - RDMA/mad: Improve handling of timed out WRs of mad agent
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset
  - tracing: Consider the NULL character when validating the event length
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
  - resource: fix region_intersects() vs add_memory_driver_managed()
  - thunderbolt: Mark XDomain as unplugged when router is removed
  - pinctrl: single: fix potential NULL dereference in pcs_get_function()
  - bpf, net: Fix a potential race in do_sock_getsockopt()
  - static_call: Handle module init failure correctly in static_call_del_module()
  - f2fs: fix to check atomic_file in f2fs ioctl interfaces
  - [Backport]scsi: libsas: Fix disk not being scanned in after being removed
  - [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
  - [Backport]scsi: libsas: Introduce struct smp_disc_resp
  - net: avoid potential underflow in qdisc_pkt_len_init() with UFO
  - f2fs: fix to wait dio completion
  - drm/amd/display: Check stream before comparing them
  - net: add more sanity checks to qdisc_pkt_len_init()
  - ext4: no need to continue when the number of entries is 1
  - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
  - vfs: fix race between evice_inodes() and find_inode()&iput()
  - ext4: fix timer use-after-free on failed mount
  - ext4: fix i_data_sem unlock order in ext4_ind_migrate()
  - ext4: fix access to uninitialised lock in fc replay path
  - exfat: fix memory leak in exfat_load_bitmap()
  - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]


author: zhouding <zhouding@cmss.chinamobile.com> - 5.10.0-136.102.0.183.27
changelog:
  - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
  - posix-clock: Fix missing timespec64 check in pc_clock_settime()
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  - mailbox: bcm2835: Fix timeout during suspend mode
  - scsi: libsas: Add smp_ata_check_ready_type()
  - bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
  - Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
  - Bluetooth: hci_qca: Fixed issue during suspend
  - Bluetooth: hci_qca: check for SSR triggered flag while suspend
  - Bluetooth: hci_qca: Wait for SSR completion during suspend
  - Bluetooth: hci_qca: Fix driver shutdown on closed serdev
  - Bluetooth: hci_qca: Wait for timeout during suspend
  - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave()
  - staging: iio: frequency: ad9834: Validate frequency parameter value
  - Revert "tty: n_gsm: avoid call of sleeping functions from atomic context"
  - fs/ntfs3: Fix possible deadlock in mi_read
  - fs/ntfs3: Check if more than chunk-size bytes are written
  - fs/ntfs3: Add rough attr alloc_size check
  - e100: Fix possible use after free in e100_xmit_prepare
  - aoe: fix the potential use-after-free problem in more places
  - scsi: pm80xx: Set phy->enable_completion only when we wait for it
  - arm64: probes: Remove broken LDR (literal) uprobe support
  - virtio_pmem: Check device status before requesting flush
  - iio: light: veml6030: fix IIO device retrieval from embedded device
  - fs/ntfs3: Additional check in ntfs_file_release
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
  - net/ncsi: Disable the ncsi work before freeing the associated structure
  - bpf: Use raw_spinlock_t in ringbuf
  - drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe
  - rtc: cmos: Fix wake alarm breakage
  - rtc: cmos: Fix event handler registration ordering issue
  - wifi: mac80211: fix NULL dereference at band check in starting tx ba session
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half
  - dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
  - netfilter: nf_tables: honor table dormant flag from netdev release event path


author: bajing <bajing@cmss.chinamobile.com> 5.10.0-136.103.0.184.28
changelog:
  - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
  - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
  - nilfs2: fix kernel bug due to missing clearing of checked flag
  - nilfs2: fix potential deadlock with newly created symlinks
  - media: av7110: fix a spectre vulnerability
  - drm/amd/display: Initialize denominators' default to 1
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
  - io_uring: use kiocb_{start,end}_write() helpers
  - fs: create kiocb_{start,end}_write() helpers
  - io_uring: rename kiocb_end_write() local helper
  - NFSD: Initialize struct nfsd4_copy earlier
  - RDMA/rtrs-srv: Avoid null pointer deref during path establishment
  - netfilter: xtables: fix typo causing some targets not to load on IPv6
  - netfilter: xtables: avoid NFPROTO_UNSPEC where needed
  - RDMA/cxgb4: Added NULL check for lookup_atid
  - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
  - netfilter: br_netfilter: fix panic with metadata_dst skb
  - netfilter: nf_tables: prevent nf_skb_duplicated corruption
  - wifi: iwlwifi: mvm: avoid NULL pointer dereference
  - xen-netfront: Fix NULL sring after live migration
  - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
  - SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
  - bonding: stop the device in bond_setup_by_slave()
  - bonding: reset bond's flags when down link is P2P device
  - llc: verify mac len before reading mac header
  - media: s5p-jpeg: prevent buffer overflows
  - nfs: Fix KMSAN warning in decode_getfattr_attrs()
  - btrfs: reinitialize delayed ref list after deleting it from the list
  - udf: fix uninit-value use in udf_get_fileshortad
  - mm: split critical region in remap_file_pages() and invoke LSMs in between
  - mm: call the security_mmap_file() LSM hook in remap_file_pages()
  - remap_file_pages: Use vma_lookup() instead of find_vma()
  - mm/mmap.c: don't unlock VMAs in remap_file_pages()
  - security/keys: fix slab-out-of-bounds in key_task_permission
  - usb: musb: sunxi: Fix accessing an released usb phy
  - bpf: Fix out-of-bounds write in trie_get_next_key()
  - fbdev: sisfb: Fix strbuf array overflow
  - perf: Fix kabi problem by put mutex in front of perf_buffer
  - perf/aux: Fix AUX buffer serialization
  - ceph: remove the incorrect Fw reference check when dirtying pages
  - nilfs2: propagate directory read errors from nilfs_find_entry()
  - fs/ntfs3: Sequential field availability check in mi_enum_attr()
  - ntfs3: Add bounds checking to mi_enum_attr()
  - smb: client: fix OOBs when building SMB2_IOCTL request
  - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
  - unicode: Don't special case ignorable code points
  - fs/ntfs3: Additional check in ni_clear()
  - ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()


author: Zhang Hua <zhanghua@cmss.chinamobile.com> 5.10.0-136.57.0.136.18
changelog:
  - Cloud phone kernel: binder changed to binderfs
  - Revert "Cloud phone kernel - Update bind and ashmem"


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.60.0.139.18
changelog:
  - !3987 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
  - !3990 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
  - !3984 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
  - !3796 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - !3772 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
  - net/rose: Fix Use-After-Free in rose_ioctl
  - appletalk: Fix Use-After-Free in atalk_ioctl
  - nvmet: nul-terminate the NQNs passed in the connect command
  - !3878 [sync] PR-3466:  livepatch/core: Disable support for replacing
  - livepatch/core: Disable support for replacing
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.61.0.141.18
changelog:
  - !4130 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
  - !4126 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
  - !4056  ext4: correct return value of ext4_convert_meta_bg
  - !4060  ext4: synchronize the casefold bugfix from the mainline
  - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
  - netfilter: nf_tables: Reject tables of unsupported family
  - !4078 [sync] PR-4069:  tipc: fix a potential deadlock on &tx->lock
  - !4074 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
  - !4017  mm/filemap: avoid buffered read/write race to read inconsistent data
  - tipc: fix a potential deadlock on &tx->lock
  - smb: client: fix OOB in receive_encrypted_standard()
  - !4041 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
  - ext4: improve error handling from ext4_dirhash()
  - ext4: reject casefold inode flag without casefold feature
  - ext4: correct return value of ext4_convert_meta_bg
  - vhost: use kzalloc() instead of kmalloc() followed by memset()
  - mm/filemap: avoid buffered read/write race to read inconsistent data


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.62.0.142.18
changelog:
  - !4335 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
  - !4325 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - fs:/dcache.c: fix negative dentry limit not complete problem
  - !4286 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
  - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - !4264 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
  - nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
  - !4223 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
  - !4206 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
  - !4005  ext4: fix some ext4_lblk_t overflow issues
  - drm/amdgpu: Fix potential fence use-after-free v2
  - netlink: fix potential sleeping issue in mqueue_flush_file
  - mm/dynamic_hugetlb: skip unexpected migration
  - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
  - ext4: avoid overlapping preallocations due to overflow
  - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
  - ext4: add two helper functions extent_logical_end() and pa_logical_end()
  - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.63.0.143.18
changelog:
  - !4498 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
  - !4447 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
  - ubifs: Queue up space reservation tasks if retrying many times
  - !4096 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
  - !4420 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
  - io_uring/af_unix: disable sending io_uring over sockets
  - !4118 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
  - drm/atomic: Fix potential use-after-free in nonblocking commits
  - !3859 [sync] PR-3756:  md: mainline backport
  - !4282 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
  - !4239 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
  - !3362 [sync] PR-1680:  nvme-pci: fix doorbell buffer value endianness
  - !3361 [sync] PR-2188:  nvme-pci: fix mempool alloc size
  - !3023 [sync] PR-1666:  nvme-pci: fix timeout request state check
  - !3359 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  - !3358 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
  - !3355 [sync] PR-1779:  nvme-pci: clear the prp2 field when not used
  - !3354 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
  - !4194 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
  - !4191 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
  - !4187 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
  - !4186 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
  - !4182 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
  - !4181 [sync] PR-3955:  drm/radeon: possible buffer overflow
  - !4226 [sync] PR-4149:  block: remove precise_iostat
  - !4349 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
  - ubifs: fix possible dereference after free
  - ubi: block: Fix use-after-free in ubiblock_cleanup
  - Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
  - ipv6: init the accept_queue's spinlocks in inet6_create
  - tcp: make sure init the accept_queue's spinlocks once
  - net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
  - block: remove precise_iostat
  - drm/amdgpu: correct the amdgpu runtime dereference usage count
  - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
  - drm/amdgpu: correct chunk_ptr to a pointer to chunk.
  - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
  - drm/amd/display: Exit idle optimizations before attempt to access PHY
  - drm/radeon: possible buffer overflow
  - md/raid1-10: fix casting from randomized structure in raid1_submit_write()
  - md/raid1-10: limit the number of plugged bio
  - md/raid1-10: don't handle pluged bio by daemon thread
  - md/md-bitmap: add a new helper to unplug bitmap asynchrously
  - md/raid1-10: submit write io directly if bitmap is not enabled
  - md/raid1-10: factor out a helper to submit normal write
  - md/raid1-10: factor out a helper to add bio to plug
  - md/raid10: prevent soft lockup while flush writes
  - md: raid1/raid10: drop pending_cnt
  - md: drop queue limitation for RAID1 and RAID10
  - Revert "md/raid10: fix softlockup in raid10_unplug"
  - ida: Fix crash in ida_free when the bitmap is empty
  - md: fix error handling in md_alloc
  - md: Constify attribute_group structs
  - md: fix mddev->kobj lifetime
  - md: properly unwind when failing to add the kobject in md_alloc
  - md: extend disks_mutex coverage
  - md: add the bitmap group to the default groups for the md kobject
  - md: add error handling support for add_disk()
  - md: convert to blk_alloc_disk/blk_cleanup_disk
  - md/raid10: fix improper BUG_ON() in raise_barrier()
  - md: use msleep() in md_notify_reboot()
  - md: fix double free of mddev->private in autorun_array()
  - nvme-pci: fix doorbell buffer value endianness
  - nvme-pci: fix mempool alloc size
  - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
  - nvme-pci: clear the prp2 field when not used
  - nvme-pci: fix DMA direction of unmapping integrity data
  - nvme-pci: fix timeout request state check


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.64.0.144.19
changelog:
  - !4516 [sync] PR-4431: v2  patchset for CVE-2023-52340
  - !4444 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
  - !4614 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
  - !4592  sctp: fix potential deadlock on &net->sctp.addr_wq_lock
  - !4549 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - !4608 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  - xen-netback: don't produce zero-size SKB frags
  - !4586 [sync] PR-4562: v4  tracing: Backport bugfixes
  - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  - !3343 [sync] 22.03 LTS SP1 sync vdpa patches from branch OLK-5.10
  - sctp: fix potential deadlock on &net->sctp.addr_wq_lock
  - trace: Fix kabi breakage in struct trace_event_file
  - tracing: Fix uaf issue when open the hist or hist_debug file
  - tracing: Have event inject files inc the trace array ref count
  - tracing: Have trace_event_file have ref counters
  - tracing: Increase trace array ref count on enable and filter files
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - ipv6: fix kabi change in struct dst_ops
  - ipv6: Document that max_size sysctl is deprecated
  - ipv6: remove max_size check inline with ipv4
  - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
  - vdpa: add vmstate header file
  - vhost-vdpa: add reset state params to indicate reset level
  - vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
  - vhost-vdpa: fix compile warnings
  - vhost-vdpa: fix msi irq request err
  - vhost-vdpa: Allow transparent MSI IOV
  - export iommu_get_resv_regions and iommu_set_resv_regions
  - vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
  - vhost-vdpa: add uAPI for device migration status
  - vdpa: add vdpa device migration status ops
  - vhost-vdpa: add uAPI for device buffer
  - vdpa: add device state operations
  - vhost-vdpa: add uAPI for logging
  - vdpa: add log operations
  - tools include UAPI: Sync linux/vhost.h with the kernel sources
  - vdpa: add get_backend_features vdpa operation
  - virtio: fix virtio transitional ids
  - virtio: update virtio id table, add transitional ids
  - PCI/IOV: Add pci_iov_vf_id() to get VF index
  - vhost_vdpa: support PACKED when setting-getting vring_base
  - vhost_vdpa: tell vqs about the negotiated
  - vhost_vdpa: fix unmap process in no-batch mode
  - vhost-vdpa: use bind_mm/unbind_mm device callbacks
  - vdpa: add bind_mm/unbind_mm callbacks
  - vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
  - vhost-vdpa: free iommu domain after last use during cleanup
  - vhost-vdpa: uAPI to resume the device
  - vhost-vdpa: Introduce RESUME backend feature bit
  - vdpa: Add resume operation
  - vhost_vdpa: fix the crash in unmap a large memory
  - vhost-vdpa: fix an iotlb memory leak


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.65.0.145.19
changelog:
  - !4467 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
  - !4682 [sync] PR-4662: v3  CVE-2023-52435
  - !4692  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
  - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
  - !4626 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
  - net: Fix compile warning in skb_segment()
  - net: prevent mss overflow in skb_segment()
  - fs:/dcache.c: fix negative dentry flag warning in dentry_free
  - scsi: core: Always send batch on reset or error handling command
  - Revert "scsi: core: Add scsi_prot_ref_tag() helper"
  - Revert "scsi: core: Introduce scsi_get_sector()"
  - Revert "scsi: core: Make scsi_get_lba() return the LBA"
  - Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
  - Revert "scsi: core: Use a structure member to track the SCSI command submitter"
  - Revert "scsi: core: Always send batch on reset or error handling command"
  - scsi: core: Always send batch on reset or error handling command
  - scsi: core: Use a structure member to track the SCSI command submitter
  - scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
  - scsi: core: Make scsi_get_lba() return the LBA
  - scsi: core: Introduce scsi_get_sector()
  - scsi: core: Add scsi_prot_ref_tag() helper


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.66.0.146.19
changelog:
  - !4956 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
  - !4961 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
  - apparmor: avoid crash when parsed profile name is empty
  - net: openvswitch: limit the number of recursions from action sets
  - !4755 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
  - !4814 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
  - !4796 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
  - efivarfs: force RO when remounting if SetVariable is not supported
  - !4792 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
  - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
  - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
  - blk-mq: fix IO hang from sbitmap wakeup race
  - !4723 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
  - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.67.0.147.20
changelog:
  - !5154 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
  - !5147 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
  - !4668 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
  - !4831 [sync] PR-4803:  CVE-2024-26583
  - f2fs: explicitly null-terminate the xattr list
  - !4749 [sync] PR-4672:  uio: Fix use-after-free in uio_open
  - !5069 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
  - btrfs: fix double free of anonymous device after snapshot creation failure
  - btrfs: do not ASSERT() if the newly created subvolume already got read
  - !5084 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
  - !5086 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
  - !5126 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  - !5080 [sync] PR-5051:  dm: limit the number of targets and parameter size area
  - !5001 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  - !4839 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
  - !5066 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
  - net: rds: Fix possible NULL-pointer dereference
  - net: fix possible store tearing in neigh_periodic_work()
  - !4953  arm64: head.S: always initialize PSTATE
  - dm: limit the number of targets and parameter size area
  - sched: remove wait bookmarks
  - filemap: remove use of wait bookmarks
  - net/sched: act_ct: fix wild memory access when clearing fragments
  - !4985 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
  - !4964 [sync] PR-4901:  fix CVE-2021-47036
  - !5012  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
  - !5006 [sync] PR-4979:  CVE-2021-47028
  - !5014 [sync] PR-4991:  CVE-2023-52568
  - x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
  - mt76: mt7915: fix txrate reporting
  - mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
  - !4732 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  - pmem: compile pmem legacy device while libnvdimm as a module
  - udp: properly flush normal packet at GRO time
  - udp: skip L4 aggregation for UDP tunnel packets
  - arm64: head.S: always initialize PSTATE
  - block: add check that partition length needs to be aligned with block size
  - tls: fix race between tx work scheduling and socket close
  - tls: fix race between async notify and socket close
  - net: tls: factor out tls_*crypt_async_wait()
  - tls: rx: simplify async wait
  - uio: Fix use-after-free in uio_open
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
  - binder: fix use-after-free in shinker's callback


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.68.0.148.20
changelog:
  - !5344  CVE-2023-52447
  - !5366 v2  CVE-2023-52452
  - !5360  iommu/arm-smmu-v3: Disable ECMDQ before reset
  - bpf: Fix accesses to uninit stack slots
  - bpf: Fix verification of indirect var-off stack access
  - bpf: Allow reads from uninit stack
  - bpf: expose bpf_strtol and bpf_strtoul to all program types
  - bpf, verifier: Fix memory leak in array reallocation for stack state
  - bpf: verifier: Use copy_array for jmp_history
  - bpf: verifier: Improve function state reallocation
  - iommu/arm-smmu-v3: Disable ECMDQ before reset
  - !5182 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
  - bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
  - bpf: Defer the free of inner map when necessary
  - bpf: Set need_defer as false when clearing fd array during map free
  - bpf: Add map and need_defer parameters to .map_fd_put_ptr()
  - !5278 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
  - !5294 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
  - powerpc/lib: Validate size for vector operations
  - !5226 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
  - !4853 [sync] PR-4847:  btrfs: mainline backport
  - ceph: fix deadlock or deadcode of misusing dget()
  - !5204  Upgrade driver for Broadcom NIC BCM57414
  - !5192 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
  - !5185 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
  - !5124 [sync] PR-5109:  CVE-2024-26586
  - !5098 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
  - drm: Don't unref the same fb many times by mistake due to deadlock handling
  - !5201 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
  - Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
  - bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
  - bnxt_en: Query default VLAN before VNIC setup on a VF
  - bnxt_en: Don't issue AP reset during ethtool's reset operation
  - net: bcmgenet: Restore phy_stop() depending upon suspend/close
  - net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
  - net: nfc: llcp: Add lock when modifying device list
  - nfc: nci: assert requested protocol is valid
  - RDMA/srp: Do not call scsi_done() from srp_abort()
  - !5166 [sync] PR-5117:  fix CVE-2023-52527
  - powerpc/pseries/memhp: Fix access beyond end of drmem array
  - powerpc/pseries/memhotplug: Quieten some DLPAR operations
  - l2tp: pass correct message length to ip6_append_data
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
  - mlxsw: spectrum_acl_tcam: Fix stack corruption
  - mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
  - mlxsw: spectrum_acl_tcam: Make fini symmetric to init
  - mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
  - mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
  - mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
  - RDMA/rxe: Return CQE error if invalid lkey was supplied
  - btrfs: fix deadlock when cloning inline extents and using qgroups
  - btrfs: do not start and wait for delalloc on snapshot roots on transaction commit


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.69.0.149.20
changelog:
  - !5534  media: pvrusb2: fix use after free on context disconnection
  - !5503 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
  - media: pvrusb2: fix use after free on context disconnection
  - !5138 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
  - !5028 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
  - iomap: add support to track dirty state of sub pages
  - !5439 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
  - !5324  jfs: fix slab-out-of-bounds Read in dtSearch
  - !5329  UBSAN: array-index-out-of-bounds in dtSplitRoot
  - !5436 [sync] PR-5355:  CVE-2023-52593
  - !5311  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - !5390 [sync] PR-5259:  CVE-2024-26627​
  - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
  - wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
  - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
  - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
  - !5372 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
  - !5288 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
  - bus: mhi: host: Add alignment check for event ring read pointer
  - UBSAN: array-index-out-of-bounds in dtSplitRoot
  - jfs: fix slab-out-of-bounds Read in dtSearch
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - af_unix: fix lockdep positive in sk_diag_dump_icons()
  - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg


author: Zhu Jun2 <zhujun2@cmss.chinamobile.com> 5.10.0-136.69.0.149.21
changelog:
  - jm: Change loglevel of mhu
  - macb: Update macb acpi driver
  - media: videobuf2 : Add bmc kvm support
  - auxiliary bus: Add auxiliary bus support


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.70.0.150.21
changelog:
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
  - tomoyo: fix UAF write bug in tomoyo_write_control()
  - llc: call sock_orphan() at release time
  - ext4: avoid online resizing failures due to oversized flex bg
  - ext4: unify the type of flexbg_size to unsigned int
  - ext4: remove unnecessary check from alloc_flex_gd()
  - arm64/mpam: Fix repeated enabling in mpam_enable()
  - mm/readahead: don't decrease mmap_miss when folio has workingset flags
  - mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
  - dm: revert partial fix for redundant bio-based IO accounting
  - md/raid5: fix atomicity violation in raid5_cache_count
  - mm/mlock: return EINVAL for illegal user memory range in mlock
  - KVM: x86/mmu: Don't advance iterator after restart due to yielding
  - KVM: x86/mmu: Factor out tdp_iter_return_to_root
  - jfs: fix array-index-out-of-bounds in dbAdjTree
  - jfs: fix array-index-out-of-bounds in diNewExt
  - jfs: fix uaf in jfs_evict_inode
  - scsi: mpt3sas: Fix loop logic
  - scsi: mpt3sas: Perform additional retries if doorbell read returns 0
  - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
  - scsi: mpt3sas: Remove usage of dma_get_required_mask() API
  - scsi: mpt3sas: Don't change DMA mask while reallocating pools
  - scsi: mpt3sas: Fix a memory leak
  - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.71.0.151.21
changelog:
  - ksmbd: fix uaf in smb20_oplock_break_ack
  - ALSA: hda: intel-sdw-acpi: harden detection of controller
  - iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
  - iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range()
  - i2c: i801: Fix block process call transactions
  - dmaengine: fsl-qdma: init irq after reg initialization
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table
  - ASoC: q6afe-clocks: fix reprobing of the driver
  - ASoC: q6afe-clocks: fix warning on symbol scope
  - drm/bridge: sii902x: Fix probing race issue
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
  - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
  - mfd: syscon: Fix null pointer dereference in of_syscon_register()
  - serial: imx: fix tx statemachine deadlock
  - net: qualcomm: rmnet: fix global oob in rmnet_policy
  - perf/x86/lbr: Filter vsyscall addresses
  - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
  - nvmet-tcp: Fix the H2C expected PDU len calculation
  - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
  - usb: hub: Guard against accesses to uninitialized BOS descriptors
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
  - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
  - ksmbd: fix global oob in ksmbd_nl_policy
  - ext4: Optimize endio process for DIO overwrites
  - iomap: Add a IOMAP_DIO_MAY_INLINE_COMP flag
  - iomap: pass a flags argument to iomap_dio_rw
  - iomap: rename the flags variable in __iomap_dio_rw
  - iomap: add IOMAP_DIO_INLINE_COMP
  - iomap: use an unsigned type for IOMAP_DIO_* defines
  - iomap: cleanup up iomap_dio_bio_end_io()
  - ext4: Validate inode pa before using preallocation blocks
  - Input: powermate - fix use-after-free in powermate_config_complete
  - binder: signal epoll threads of self-work
  - x86/fpu: Stop relying on userspace for info to fault in xsave buffer


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.72.0.152.22
changelog:
  - x86/alternatives: Disable KASAN in apply_alternatives()
  - arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
  - uio_hv_generic: Fix another memory leak in error handling paths
  - RDMA/siw: Fix connection failure handling
  - tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
  - wifi: mac80211: fix potential key use-after-free
  - vfio/pci: Lock external INTx masking ops
  - IB/ipoib: Fix mcast list locking
  - RDMA/IPoIB: Fix error code return in ipoib_mcast_join
  - vfio/pci: Disable auto-enable of exclusive INTx IRQ
  - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
  - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
  - asix: fix wrong return value in asix_check_host_enable()
  - asix: fix uninit-value in asix_mdio_read()
  - net: asix: fix uninit value bugs
  - dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
  - wifi: rt2x00: restart beacon queue when hardware reset
  - cifs: Fix UAF in cifs_demultiplex_thread()
  - EDAC/thunderx: Fix possible out-of-bounds string access
  - fs/ntfs3: Fix oob in ntfs_listxattr
  - fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
  - ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
  - drm/amdgpu: fix use-after-free bug
  - mm/swap: fix race when skipping swapcache
  - fbdev: savage: Error out if pixclock equals zero
  - ARM: ep93xx: Add terminator to gpiod_lookup_table
  - crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
  - afs: Increase buffer size in afs_update_volume_status()
  - KVM: arm64: vgic-its: Fix CVE-2024-26598 fix patch issue
  - fbdev: sis: Error out if pixclock equals zero
  - dmaengine: ti: edma: Add some null pointer checks to the edma_probe
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
  - s390/ptrace: handle setting of fpc register correctly
  - KVM: s390: fix setting of fpc register
  - net: fix kabi check warning
  - net: Fix unwanted sign extension in netdev_stats_to_stats64()
  - net: bridge: use DEV_STATS_INC()
  - net: add atomic_long_t to net_device_stats fields
  - team: fix null-ptr-deref when team device type is changed


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.73.0.153.22
changelog:
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
  - media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
  - PM: sleep: Fix error handling in dpm_prepare()
  - PM: sleep: Fix possible deadlocks in core system-wide PM code
  - PM: core: Remove unnecessary (void *) conversions
  - PM: sleep: Avoid calling put_device() under dpm_list_mtx
  - PM: sleep: Use dev_printk() when possible
  - async: Introduce async_schedule_dev_nocall()
  - async: Split async_schedule_node_domain()
  - PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
  - PCI: switchtec: Fix stdev_release() crash after surprise hot remove
  - firmware: arm_scmi: Check mailbox/SMT channel for consistency
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
  - scsi: core: Fix scsi_mode_sense() buffer length handling
  - scsi: core: Reshuffle response handling in scsi_mode_sense()
  - media: xc4000: Fix atomicity violation in xc4000_get_frequency
  - bus: mhi: host: Drop chan lock before queuing buffers
  - dmaengine: fix NULL pointer in channel unregistration function
  - cgroup_writeback: fix softlockup for blkcg->memcg_list
  - cgroup_writeback: fix deadlock in cgroup1_writeback
  - riscv: Sparse-Memory/vmemmap out-of-bounds fix
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
  - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
  - ksmbd: fix out of bounds in init_smb2_rsp_hdr()
  - ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
  - ksmbd: return unsupported error on smb1 mount
  - ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.74.0.154.22
changelog:
  - firmware: arm_scmi: Harden accesses to the reset domains
  - bpf: Fix stackmap overflow check on 32-bit arches
  - bpf: Fix hashtab overflow check on 32-bit arches
  - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
  - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
  - kprobes: Fix check for probe enabled in kill_kprobe()
  - mm/madvise: fix potential pte_unmap_unlock pte error
  - mm/page_alloc: always attempt to allocate at least one page during bulk allocation
  - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
  - amdkfd: use calloc instead of kzalloc to avoid integer overflow
  - md: fix kmemleak of rdev->serial
  - firmware: arm_scmi: Fix double free in SMC transport cleanup path
  - efi: runtime: Fix potential overflow of soft-reserved region size
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
  - media: rc: bpf attach/detach requires write permission
  - IB/hfi1: Fix a memleak in init_credit_return
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
  - media: pvrusb2: fix uaf in pvr2_context_set_notify
  - cachefiles: fix memory leak in cachefiles_add_cache()
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
  - net/mlx5: Update error handler for UCTX and UMEM
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
  - ubi: Check for too small LEB size in VTBL code


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.81.0.162.22
changelog:
  - rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
  - net/mlx5: Discard command completions in internal error
  - hid: cp2112: Fix duplicate workqueue initialization
  - ASoC: SOF: Fix DSP oops stack dump output contents
  - sk_buff: Fix KABI break for the modification of struct sk_buff
  - inet: inet_defrag: prevent sk release while still in use
  - net: Fix KABI break for introducing is_skb_wmem()
  - skb_expand_head() adjust skb->truesize incorrectly
  - skbuff: introduce skb_expand_head()
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
  - RDMA/hns: Fix deadlock on SRQ async events.
  - RDMA/hns: Fix UAF for cq async event
  - serial: max3100: Lock port->lock when calling uart_handle_cts_change()
  - drm/amd/display: Fix && vs || typos
  - drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
  - Revert "drm/amd/display: Fix && vs || typos"
  - powerpc/powernv: Add a null pointer check in opal_powercap_init()
  - btrfs: remove stale comment about the btrfs_show_devname
  - btrfs: update latest_dev when we create a sprout device
  - btrfs: use latest_dev in btrfs_show_devname
  - btrfs: convert latest_bdev type to btrfs_device and rename
  - net: bridge: xmit: make sure we have at least eth header len bytes
  - drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
  - net: sched: sch_multiq: fix possible OOB write in multiq_tune()
  - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
  - drm/mediatek: Add 0 size check to mtk_drm_gem_obj
  - ring-buffer: Fix a race between readers and resize checks
  - drm/amd/display: Fix division by zero in setup_dsc_config
  - arm64: syscall: unmask DAIF for tracing status
  - arm64: Snapshot thread flags
  - entry: Snapshot thread flags
  - x86: Snapshot thread flags
  - thread_info: Add helpers to snapshot thread flags
  - irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
  - sched/fair: Optimize test_idle_cores() for !SMT
  - init/main.c: Fix potential static_command_line memory overflow
  - spi: fix kabi breakage in struct spi_controller
  - spi: fix use-after-free of the add_lock mutex
  - spi: Fix deadlock when adding SPI controllers on SPI buses
  - wifi: wilc1000: fix RCU usage in connect path
  - ubifs: dbg_orphan_check: Fix missed key type checking
  - ubifs: Fix unattached inode when powercut happens in creating
  - ubifs: Fix space leak when powercut happens in linking tmpfile
  - ubifs: Move ui->data initialization after initializing security
  - ubifs: Fix adding orphan entry twice for the same inode
  - ubifs: Remove insert_dead_orphan from replaying orphan process
  - ubifs: Don't add xattr inode into orphan area
  - ubifs: Fix unattached xattr inode if powercut happens after deleting
  - ubifs: Fix some kernel-doc comments
  - ubifs: Fix spelling mistakes
  - i2c: core: Fix atomic xfer check for non-preempt config
  - i2c: core: Run atomic i2c xfer when !preemptible
  - fs/jfs: Add check for negative db_l2nbperpage
  - jfs: jfs_dmap: Validate db_l2nbperpage while mounting
  - ksmbd: no response from compound read
  - fs/9p: fix uninitialized values during inode evict
  - drm/amd/display: Skip on writeback when it's not applicable
  - media: tc358743: register v4l2 async device only after successful setup
  - scsi: iscsi: Fix iscsi_task use after free
  - scsi: iscsi: Have abort handler get ref to conn
  - drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
  - block: check io size before submit discard
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify()


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.82.0.163.22
changelog:
  - ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
  - f2fs: fix to avoid potential panic during recovery
  - f2fs: fix to check return value of f2fs_reserve_new_block()
  - dyndbg: fix old BUG_ON in >control parser
  - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
  - scsi: core: Fix unremoved procfs host directory regression
  - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
  - clk: Fix clk_core_get NULL dereference
  - net: phy: fix phy_get_internal_delay accessing an empty array


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.83.0.164.22
changelog:
  - cgroup: fix uaf when proc_cpuset_show
  - RDMA/hns: Modify the print level of CQE error
  - drm/arm/malidp: fix a possible null pointer dereference
  - ARM: 9170/1: fix panic when kasan and kprobe are enabled
  - um: Add winch to winch_handlers before registering winch IRQ
  - eth: sungem: remove .ndo_poll_controller to avoid deadlocks
  - net: fec: remove .ndo_poll_controller to avoid deadlocks
  - s390/ap: Fix crash in AP internal function modify_bitmap()
  - of: module: add buffer overflow check in of_modalias()
  - i2c: acpi: Unbind mux adapters before delete
  - i2c: add fwnode APIs
  - btrfs: fix crash on racing fsync and size-extending write into prealloc
  - drm/amd/display: Fix potential index out of bounds in color transformation function
  - driver core: Fix kabi broken
  - of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
  - driver core: Introduce device_link_wait_removal()
  - fs/ntfs3: Check 'folio' pointer for NULL
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
  - net/mlx5e: Avoid field-overflowing memcpy()
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
  - params: lift param_set_uint_minmax to common code
  - media: lgdt3306a: Add a check against null-pointer-def
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
  - netrom: fix possible dead-lock in nr_rt_ioctl()
  - fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
  - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
  - net/mlx5: Add a timeout to acquire the command queue semaphore
  - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
  - jffs2: prevent xattr node from overflowing the eraseblock
  - thermal: int340x_thermal: Consolidate priv->data_vault checks
  - thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
  - kprobes: Fix possible use-after-free issue on kprobe registration
  - tracing: Fix permissions for the buffer_percent file
  - vfio/pci: fix potential memory leak in vfio_intx_enable()
  - serial: max3100: Update uart_driver_registered on driver removal
  - ALSA: core: Fix NULL module pointer assignment at card init
  - fs/ntfs3: Use variable length array instead of fixed size
  - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
  - af_unix: Fix data-races around sk->sk_shutdown.
  - af_unix: Fix data races around sk->sk_shutdown.
  - ftrace: Fix possible use-after-free issue in ftrace_location()
  - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
  - ftrace: Store the order of pages allocated in ftrace_page
  - xfs: don't use current->journal_info
  - ext4: fix warning in ext4_dio_write_end_io()
  - ext4: properly sync file size update after O_SYNC direct IO
  - iomap: update ki_pos a little later in iomap_dio_complete
  - ubifs: Set page uptodate in the correct place
  - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.84.0.165.22
changelog:
  - riscv: Fix TASK_SIZE on 64-bit NOMMU
  - riscv: fix VMALLOC_START definition
  - nilfs2: fix use-after-free of timer for log writer thread
  - net/sched: act_skbmod: prevent kernel-infoleak
  - netfilter: nf_tables: flush pending destroy work before exit_net release
  - mmc: davinci: Don't strip remove function when driver is builtin
  - kdb: Fix buffer overflow during tab-complete
  - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
  - null_blk: Move driver into its own directory
  - drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
  - clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6
  - btrfs: fix use-after-free after failure to create a snapshot
  - iomap: Don't finish dio under irq when there exists pages
  - f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
  - x86/boot: Ignore relocations in .notes sections in walk_relocs() too
  - x86, relocs: Ignore relocations in .notes section
  - dma-mapping: benchmark: handle NUMA_NO_NODE correctly
  - media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
  - media: stk1160: fix bounds checking in stk1160_copy_video()
  - net/9p: fix uninit-value in p9_client_rpc()
  - drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
  - ext4: delete redundant uptodate check for buffer
  - KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
  - ax25: Fix reference count leak issues of ax25_dev
  - dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
  - greybus: lights: check return of get_channel_from_mode
  - ax25: Fix reference count leak issue of net_device
  - crypto: bcm - Fix pointer arithmetic
  - tls: fix missing memory barrier in tls_init
  - wifi: carl9170: add a proper sanity check for endpoints
  - USB: core: Add routines for endpoint checks in old drivers
  - r8169: Fix possible ring buffer corruption on fragmented Tx packets.
  - r8169: remove nr_frags argument from rtl_tx_slots_avail
  - r8169: improve rtl8169_start_xmit
  - r8169: improve rtl_tx
  - r8169: use READ_ONCE in rtl_tx_slots_avail
  - r8169: remove unneeded memory barrier in rtl_tx
  - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
  - nilfs2: fix potential hang in nilfs_detach_log_writer()
  - nilfs2: fix unexpected freezing of nilfs_segctor_sync()
  - net/smc: Fix slab-out-of-bounds issue in fallback
  - net/smc: Only save the original clcsock callback functions
  - net/smc: Avoid overwriting the copies of clcsock callback functions
  - net/smc: Forward wakeup to smc socket waitqueue after fallback
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
  - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path


author: Ba Jing <bajing@cmss.chinamobile.com> 5.10.0-136.85.0.166.22
changelog:
  - nilfs2: fix potential kernel bug due to lack of writeback flag waiting
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
  - lib/generic-radix-tree.c: Don't overflow in peek()
  - ipv6: prevent possible NULL dereference in rt6_probe()
  - Bluetooth: btusb: Add date->evt_skb is NULL check
  - netpoll: Fix race condition in netpoll_owner_active
  - ext4: do not create EA inode under buffer lock
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
  - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
  - usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
  - USB: core: Change configuration warnings to notices
  - netfilter: nft_set_pipapo: do not free live element
  - drm/komeda: check for error-valued pointer
  - f2fs: remove clear SB_INLINECRYPT flag in default_options
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
  - ocfs2: fix races between hole punching and AIO+DIO
  - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - sock_map: avoid race between sock_map_close and sk_psock_put
  - mptcp: ensure snd_una is properly initialized on connect
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
  - ipv6: sr: fix memleak in seg6_hmac_init_algo
  - gfs2: Fix potential glock use-after-free on unmount
  - gfs2: Rename sd_{ glock => kill }_wait
  - cifs: Fix deadlock in cifs_writepages during reconnect
  - md: fix resync softlockup when bitmap size is less than array size
  - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
  - Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup
  - cgroup: Fix AA deadlock caused by cgroup_bpf_release
  - ksmbd: fix slab out of bounds write in smb_inherit_dacl()
  - smb: client: fix potential deadlock when releasing mids
  - cpufreq: exit() callback is optional
  - cpufreq: Rearrange locking in cpufreq_remove_dev()
  - cpufreq: Split cpufreq_offline()
  - cpufreq: Reorganize checks in cpufreq_offline()
  - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
  - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
  - nilfs2: return the mapped address from nilfs_get_page()
  - ice: Do not use WQ_MEM_RECLAIM flag for workqueue


author: bajing <bajing@cmss.chinamobile.com> 5.10.0-136.86.0.167.25
changelog:
  - usb-storage: alauda: Check whether the media is initialized
  - of: unittest: Fix compile in the non-dynamic case
  - of: unittest: Fix of_count_phandle_with_args() expected value message
  - of: Fix double free in of_parse_phandle_with_args_map
  - SUNRPC: Do not dereference non-socket transports in sysfs
  - SUNRPC: lock against ->sock changing during sysfs read
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
  - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
  - dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
  - Bluetooth: hci_core: Fix leaking sent_cmd skb
  - ima: Avoid blocking in RCU read-side critical section
  - tcp: avoid too many retransmit packets
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
  - net: tcp: fix unexcepted socket die when snd_wnd is 0
  - ima: Fix use-after-free on a dentry's dname.name
  - scsi: ufs: Fix a deadlock in the error handler
  - drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
  - drm/amdgpu: Skip do PCI error slot reset during RAS recovery
  - drm/amdgpu : Add hive ras recovery check
  - bpf: Fix overrunning reservations in ringbuf
  - drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
  - net: dsa: seville: register the mdiobus under devres
  - dma-mapping: benchmark: fix node id validation
  - fpga: manager: add owner module and take its refcount
  - drop_monitor: replace spin_lock by raw_spin_lock
  - RDMA/mlx5: Add check for srq max_sge attribute
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
  - MIPS: Octeon: Add PCIe link status check
  - ALSA: timer: Set lower bound of start tick time
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
  - tracing: Build event generation tests only as modules
  - ecryptfs: Fix buffer size for tag 66 packet
  - scsi: qedf: Ensure the copied buf is NUL terminated
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
  - net/sched: act_api: rely on rcu in tcf_idr_check_alloc
  - nfs: Ensure write and flush consume writeback errors
  - NFS: Don't report ENOSPC write errors twice
  - NFS: Use of mapping_set_error() results in spurious errors
  - nfs: ensure correct writeback errors are returned on close()
  - nfs: nfs_file_write() should check for writeback errors
  - drm/amdgpu: fix UBSAN warning in kv_dpm.c
  - vmci: prevent speculation leaks by sanitizing event in event_deliver()
  - tipc: force a dst refcount before doing decryption
  - sunrpc: fix KABI broken in struct rpc_create_args
  - nfs: Handle error of rpc_proc_register() in nfs_net_init().
  - nfs: make the rpc_stat per net namespace
  - nfs: expose /proc/net/sunrpc/nfs in net namespaces
  - sunrpc: add a struct rpc_stats arg to rpc_create_args
  - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
  - drm/exynos/vidi: fix memory leak in .get_modes()
  - xfs: fix mount hung while sb recover fail
  - io_uring/io-wq: Use set_bit() and test_bit() at worker->flags
  - dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
  - nvdimm/pmem: use add_disk() error handling
  - powerpc/pseries: Enforce hcall result buffer validity and size
  - ipv6: fix possible race in __fib6_drop_pcpu_from()
  - ksmbd: fix wrong DataOffset validation of create context


author: bajing <bajing@cmss.chinamobile.com> 5.10.0-136.87.0.168.25
changelog:
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
  - BMA/kbox_drv: Change the version number.
  - BMA/veth_drv: Change the version number.
  - BMA/cdev_drv: Change the version number.
  - BMA/edma_drv: Fix DMA reset problem and change the version number.
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  - drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
  - net/sched: initialize noop_qdisc owner
  - net/sched: fix kabi change in struct Qdisc
  - net/sched: Fix mirred deadlock on device recursion
  - fpga: bridge: add owner module and take its refcount
  - fpga: remove redundant checks for bridge ops
  - fpga: bridge: properly initialize bridge device before populating children
  - fpga: bridge: Use standard dev_release for class driver
  - fpga: bridge: Rename dev to parent for parent device
  - media: i2c: et8ek8: Don't strip remove function when driver is builtin
  - clk: sunxi-ng: Unregister clocks/resets when unbinding
  - riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
  - net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref()
  - fbdev: savage: Handle err return when savagefb_check_var failed
  - net: mvpp2: clear BM pool before initialization
  - udp: do not accept non-tunnel GSO skbs landing in a tunnel
  - serial: imx: Introduce timeout when waiting on transmitter empty
  - iommu: Return right value in iommu_sva_bind_device()
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
  - md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
  - md/dm-raid: don't call md_reap_sync_thread() directly


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.9-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix update cpu-rt period failed and fix layer size type as int64


author: jikai<jikai11@huawei.com> - 2.0.9-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix potential log error, empty pointer reference and overflow


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.8-9
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:add macro to adapt musl libc and add add-gids option for exec


author: fuanan <fuanan3@huawei.com> - 563-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: Eibz-Chan <chenbingzhao@huawei.com> - 590-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
  	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
  	Fix-crash-when-enter-invaid-pattern-in-command.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-libfdisk-Fix-randomly-generated-GPT-UUID-s.patch
         backport-write-correctly-handle-wide-characters.patch
         backport-wall-convert-homebrew-buffering-to-open_memstream.patch
         backport-wall-use-fputs_careful.patch
         backport-hexdump-parse-handle-truncated-format-pattern.patch
         backport-libblkid-copy-BLKID_PARTS_FORCE_GPT-to-whole-disk-pr.patch
         backport-lscpu-fix-p-output-all-caches-delimiter.patch
         backport-add-return-in-supam_conv-function.patch
         backport-wrap-return-in-else-directive-to-avoid-dead-code.patch
         backport-sulogin-ignore-none-existing-console-devices.patch
         backport-sulogin-fix-KDGKBMODE-ifdef.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-lib-caputils-fix-integer-handling-issues-coverity-sc.patch
         backport-unshare-Move-implementation-of-keep-caps-option-to-l.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-libblkid-jfs-avoid-undefined-shift.patch
         backport-cfdisk-add-hint-about-labels-for-bootable-flag.patch
         backport-logger-initialize-socket-credentials-contol-union.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-22
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-column-fix-buffer-overflow-when-l-specified.patch
         backport-column-fix-greedy-mode-on-l.patch
         backport-column-fix-memory-leak.patch
         backport-column-fix-l.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-23
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-scriptreplay-support-ctrl-s-and-ctrl-g.patch
         backport-login-use-correct-terminal-fd-during-setup.patch
         backport-login-prevent-undefined-ioctl-and-tcsetattr-calls.patch
         backport-libblkid-avoid-memory-leak-of-cachefile-path.patch
         backport-more-avoid-out-of-bound-access.patch
         backport-lslogins-fix-realloc-loop-allocation-size.patch
         backport-ldattach-don-t-call-exit-from-signal-handler.patch
         backport-libblkid-ntfs-validate-that-sector_size-is-a-power-o.patch
         backport-blkid-fix-call-to-err_exclusive_options.patch
         backport-libblkid-reset-errno-before-calling-probefuncs.patch
         backport-lib-path-fix-possible-out-of-boundary-access.patch
         backport-libmount-improve-mnt_table_next_child_fs.patch
         backport-libmount-fix-possible-NULL-dereference-coverity-scan.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
  	[add]backport-libsmartcols-drop-spourious-newline-in-between-strea.patch
  	backport-libsmartcols-flush-correct-stream.patch
  	backport-libsmartcols-only-recognize-closed-object-as-final-e.patch
  	backport-cal-avoid-out-of-bound-write.patch
  	backport-libfdisk-sun-properly-initialize-partition-data.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:solve the issue of ext4 is incorrectly probed as drbd
          [add]backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
          backport-libblkid-probe-read-data-in-chunks.patch
          backport-libblkid-avoid-aligning-out-of-probing-area.patch
          backport-libblkid-drbd-validate-zero-padding.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-26
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-receive.patch
         backport-libblkid-hfsplus-reduce-false-positive.patch
         backport-wall-fix-calloc-cal-Werror-calloc-transposed-args.patch
         backport-libblkid-drbd-reduce-false-positive.patch
         backport-lib-cpuset-exit-early-from-cpulist_parse.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-sys-utils-lscpu-Unblock-SIGSEGV-before-vmware_bdoor.patch
         backport-libblkid-Check-offset-in-LUKS2-header.patch
         backport-more-fix-poll-use.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add provides and support enable-raw
         The current version of the kernel also supports the raw driver.
         To keep consistent with the previous version, roll back the modification.


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-30
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix lscpu core dump
         backport-lscpu-don-t-use-NULL-sharedmap.patch
         backport-lscpu-use-topology-maps-in-more-robust-way.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-hexdump-check-blocksize-when-display-data.patch
         backport-lslocks-fix-buffer-overflow.patch
         backport-last-avoid-out-of-bounds-array-access.patch
         backport-lsipc-fix-semaphore-USED-counter.patch


author: yanglongkang <yanglongkang@h-partners.com> - 2.37.2-32
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-uuidd-fix-open-lock-state-issue.patch


author: zhangmingyi<zhangmingyi5@huawei.com> - 2:0.8.1-3
changelog:
  -- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                  backport-libbpf-Fix-the-name-of-a-reused-map.patch
                  backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch


author: JofDiamonds <kwb0523@163.com> -2:0.8.1-4
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
    backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
    backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
    backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
    backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
    backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
    backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch


author: SuperCharge <xiesongyang@huawei.com> -2:0.8.1-6
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch


author: zhangmingyi <zhangmingyi5@huawei.com> -2:0.8.1-8
changelog:
  - backport patches from upstream:
    backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
    backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
    backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-9
changelog:
  - backport patches from upstream:
    backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
    backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-10
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
    backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
    backport-libbpf-Fix-is_pow_of_2.patch
    backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - capsh better error handling for integer parsing
  - setcap clean up error handling of the ns rootid argument


author: chenhaixing <chenhaixing@huawei.com> - 0.69.0-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
                Fix utimes error message in dnf-repo
                Do not download repository if our local cache is up to date in dnf-repo
                python bindings:Load all modules with RTLD_GLOBAL


author: hanhuihui <hanhuihui5@huawei.com> - 0.69.0-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix history rollback cmd not meet the expectation
         Fix memory leak in subject-py


author: yanglu<yanglu72@h-partners.com> - 8.17.1-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix newaliases command error and postfix service start execption after sendmail install


author: ZhengZhenyu <zhengzhenyu@openeuler.sh> - 13.12-1
changelog:
  - aupgrade libpq to 13.12,fix CVE-2023-2455, CVE-2023-2454, CVE-2023-39417, CVE-2023-39418, CVE-2020-21469


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: zhangjun<zhangjun@kylinos.cn> - 0.7.20-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak when using testsolv to execute cases 
         Fix segfault on conflict resolution when using bindings


author: xinghe <xinghe2@h-partners.com> - 2.74.2-5
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zengweifeng <zwfeng@huawei.com> - 0.9.6-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: xinghe <xinghe2@h-partners.com> - 0.9.6-4
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:options: Parse hostname by last '@'
         torture_options: Add test for '@' in login name
         session: Initialize pointers
         tests: Ensure the mode of the created file is what we set


author: seuzw <930zhaowei@163.com> - 0.9.6-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport some upstream patches:
         Avoid false positive report from Coveritt CID 1470006
         kdf: Avoid endianess issues
         misc: Fix format truncation in ssh_path_expand_escape()
         misc: Fix expanding port numbers
         misc: rename gettimeofday symbol
         session: Initialize the port with the standard port (22)
         session->socket_callbacks.data will be set to ssh_packet_socket_callback
         socket: Add error message if execv fails
         tests: Add test for expanding port numbers


author: renmingshuai <renmingshuai@huawei.com> - 0.9.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:config: Escape brackets in ProxyCommand build
         packet: do not enqueue outgoing packets


author: renmingshuai <renmingshuai@huawei.com> - 0.9.6-8
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-6918,CVE-2023-48795
  - SUG:NA
  - DESC:fix CVE-2023-6004, CVE-2023-6918 and CVE-2023-48795


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-23
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: yezengruan <yezengruan@huawei.com> - 0.7.3-7
changelog:
  - tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
  - tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
  - tpm2: Restore original value if unmarsalled value was illegal
  - fix CVE-2021-3623


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0
  - Fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: XuFei <xufei30@huawei.com> - 6.2.0-56
changelog:
  - nodedev: ignore EINVAL from libudev in udevEventHandleThread
  - qemu: tpm: Pass --logfile to swtpm_setup for incoming migration


author: zhangxinhao <zhangxinhao1@huawei.com> - 6.2.0-57
changelog:
  - cpu_topo: support for cpu_topo "clusters” in conf
  - cpu_topo: support for specifying "clusters" in qemu comand
  - cpu_topo: support for reporting cluster_id in NUMA topology
  - cpu_topo: fix detection of vCPU pids when multiple clusters are present


author: Jiabo Feng <fengjiabo1@huawei.com> - 6.2.0-58
changelog:
  - virnetsshsession: Adapt to change libssh2 API
  - selinux: Reflect context_str() type change
  - Revert "selinux: adapt to libselinux"
  - selinux: adapt to libselinux
  - fix error in printf format string


author: Jiabo Feng <fengjiabo1@huawei.com> - 6.2.0-61
changelog:
  - lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
  - qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
  - tests: upstream Fixing compiler warning in cputest
  - qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
  - virrandom: Fix printf format string in virRandomGenerateWWN()
  - fix the issue of errors when saving after 'virsh edit'
  - Use (un)signed printf specifiers correctly
  - admin: fix leak of typed parameters on error
  - esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
  - qemu: Fix incorrect command name in error messages


author: jiangdongxu <jiangdongxu1@huawei.com> - 6.2.0-62
changelog:
  - vdpa: Release pci slot address when unplugging vdpa device
  - vdpa: return pcieFlags when calculate vdpa passthrough devices.
  - vdpa: support vdpa device migrate
  - vdpa: support vdpa device hot plug/unplug
  - vdpa: Introduce the new device type vdpa to hostdev
  - node_device: fix leak of DIR*
  - Include vdpa devices in node device list


author: caozhongwang <caozhongwang1@huawei.com>
changelog:
  - interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
  - remote: check for negative array lengths before allocation (CVE-2024-2494)
  - vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)


author: jiangjiacheng <jiangjiacheng@huawei.com> - 6.2.0-64
changelog:
  - util: keep track of full GSource object not source ID number
  - rpc: mark source returned by virEventGLibAddSocketWatch as unused
  - rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)


author: Jiabo Feng <fengjiabo1@huawei.com> - 6.2.0-65
changelog:
  - remote: fix double free of migration params on error
  - qemu: avoid deadlock in qemuDomainObjStopWorker We are dropping the only reference here so that the event loop thread is going to be exited synchronously. In order to avoid deadlocks we need to unlock the VM so that any handler being called can finish execution and thus even loop thread be finished too.
  - virsh: add tmm main command word Add tmm command word into virsh tool to call get tmm memory info API. It makes virsh can use tmm main commmand to show tmm memory info on console. This command requires specific kernel and a kernel driver to make sure its regular function. If runnning environment missing the above reliance, this command will show error result on console.
  - libvirt: add get tmm memory info API and libvirtd RPC Add the get tmm memory info API into libvirt-host. Also should add the RPC calls into libvirtd for API calling.
  - libvirt: support the virtCCA feature Add cvm parameter into the type of LaunchSecurity which is a optional filed for libvirt xml. Its purpose is to pass the cvm parameter through to qemu. Also this patch support virsh edit to save cvm parameter into libvirt temporary xml.
  - qemu_driver: Add calc_mode for dirtyrate statistics
  - virsh: Add mode option to domdirtyrate-calc virsh api
  - qemu: Generate command line for dirty-ring-size
  - qemu: support dirty ring feature
  - conf: Turn virDomainDef.kvm_features into a struct
  - qemu_validate: Allow kvm hint-dedicated on non-passthrough VMs
  - virDomainFeaturesKVMDefParse: Remove tautological "if"
  - virDomainFeaturesKVMDefParse: Remove tautological "switch"
  - virxml: Add virXMLPropUInt
  - virxml: Add virXMLPropInt
  - virxml: Add virXMLPropTristateSwitch
  - virxml: Add virXMLPropTristateBool
  - virDomainFeaturesKVMDefParse: Remove ctxt
  - virDomainFeaturesDefParse: Factor out KVM parsing into separate function
  - internal.h: Introduce and use VIR_IS_POW2()
  - hotpatch: if hotpatch_path not in qemu.conf,the hotpatch doesn't antoload


author: fuanan <fuanan3@h-partners.com> - 2.9.14-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation


author: fuanan <fuanan3@h-partners.com> - 2.9.12-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: fuanan <fuanan3@h-partners.com> - 2.9.12-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: zhaoxiaohu <zhaoxiaohu@kuaishou.com> - 20211027-3
changelog:
  - fix build install need use copy-firmware.sh ice Intel(R) E810 Series intel/ice/ddp/ice.pkg -> ice-1.3.26.0.pkg


author: Xiong Zhou <xiongzhou4@huawei.com> 0-2.20211016.gitb72f753
changelog:
  - Type:backport
  - ID:NA
  - SUG:NA
  - DESC: Handle data at the beginning of a function when disassembling and building CFG.


author: Xiong Zhou <xiongzhou4@huawei.com> 15.0.7-2
changelog:
  - Type:Update
  - ID:NA
  - SUG:NA
  - DESC: Backport bugfix and add AArch64 support for hugify and inline.


author: yinbin <yinbin8@huawei.com> - 2.2.0-60
changelog:
  - IPV6: Enable IPV6_FRAG_COPYHEADER macro to adapt 64bit
  - IPV6: fix array out of bounds in function ip6_ntoa_r
  - IPV6: add group check while mld6 schedule a report


author: hankangkang <hankangkang5@huawei.com> - 2.2.0-62
changelog:
  - When the GAZELLE_TCP_REUSE_IPPORT is on, min_cnts_lpcb is NULL
  - Turn on the LWIP_SO-LINGER switch


author: bzhaoop<bzhaojyathousandy@gmail.com> -4:10.5.15-1
changelog:
  - Bump to 10.5.15
  - For resolving CVEs:
  - CVE-2022-24048
  - CVE-2022-24052
  - CVE-2022-24050
  - CVE-2022-24051
  - CVE-2021-46668
  - CVE-2021-46658


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.15-2
changelog:
  - Fix the systemd service issue about the env variable.
  - Apply the patches from old branch.
  - Adaption the cmake version and integrate into the spec file.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.16-1
changelog:
  - Bump to 10.5.16 for resolving CVEs below
  - CVE-2022-27385
  - CVE-2022-27382
  - CVE-2022-27451
  - CVE-2022-27457
  - CVE-2022-27446
  - CVE-2022-27455
  - CVE-2022-27444
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387
  - And we fit the latest packages for the new mariadb release, such as errmsg package.


author: xiejing <xiejing@kylinos.cn> - 1:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
  - Fix version description in systemd service file


author: weishengjing <weishengjing1@huawei.com> - 8.0.22-1
changelog:
  - New version 8.0.22 fix CVES:   CVE-2020-14852 CVE-2020-14794 CVE-2020-14775
     CVE-2020-14893 CVE-2020-14829 CVE-2020-14828 CVE-2020-14888 CVE-2020-14891
     CVE-2020-14812 CVE-2020-14870 CVE-2020-14769 CVE-2020-14878 CVE-2020-14789
     CVE-2020-14821 CVE-2020-14844 CVE-2020-14836 CVE-2020-14830 CVE-2020-14827
     CVE-2020-14773 CVE-2020-14765 CVE-2020-14869 CVE-2020-14776 CVE-2020-14861
     CVE-2020-14866 CVE-2020-14672 CVE-2020-14837 CVE-2020-14771 CVE-2020-14785
     CVE-2020-14838 CVE-2020-14848 CVE-2020-14791 CVE-2020-14793 CVE-2020-14804
     CVE-2020-14777 CVE-2020-14800 CVE-2020-14786 CVE-2020-14845 CVE-2020-14839
     CVE-2020-14846 CVE-2020-14867 CVE-2020-14868 CVE-2020-14873 CVE-2020-14860
     CVE-2020-14814 CVE-2020-14790 CVE-2020-14809


author: wangxiao <wangxiao65@huawei.com> - 8.0.23-1
changelog:
  - Upgrade mysql to 8.0.23, fix CVES: CVE-2021-1998 CVE-2021-2002
    CVE-2021-2010 CVE-2021-2011 CVE-2021-2016 CVE-2021-2021 CVE-2021-2022
    CVE-2021-2024 CVE-2021-2031 CVE-2021-2032 CVE-2021-2036 CVE-2021-2038
    CVE-2021-2046 CVE-2021-2048 CVE-2021-2056 CVE-2021-2058 CVE-2021-2060
    CVE-2021-2061 CVE-2021-2065 CVE-2021-2070 CVE-2021-2072 CVE-2021-2076
    CVE-2021-2081 CVE-2021-2087 CVE-2021-2088 CVE-2021-2122


author: wutao <wutao61@huawei.com> - 8.0.24-1
changelog:
  - Upgrade mysql to 8.0.24, fix CVES: CVE-2021-2166 CVE-2021-2146
    CVE-2021-2162 CVE-2021-2212 CVE-2021-2299 CVE-2021-2293 CVE-2021-2215
    CVE-2021-2278 CVE-2021-2164 CVE-2021-2208 CVE-2021-2217 CVE-2021-2203
    CVE-2021-2226 CVE-2021-2298 CVE-2021-2230 CVE-2021-2300 CVE-2021-2304
    CVE-2021-2172 CVE-2021-2194 CVE-2021-2170 CVE-2021-2196 CVE-2021-2201
    CVE-2021-2180 CVE-2021-2307 CVE-2021-2169 CVE-2021-2171 CVE-2021-2305
    CVE-2021-2179 CVE-2021-2174 CVE-2021-2193 CVE-2021-2232 CVE-2021-2301
    CVE-2021-2308


author: liwu <liwu13@huawei.com> - 8.0.26-1
changelog:
  - Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
    CVE-2021-2352 CVE-2021-2340


author: yaoxin <yaoxin30@huawei.com> - 8.0.27-1
changelog:
  - Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
    CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
    CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
    CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
    CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
    CVE-2021-35644-to-CVE-2021-35648


author: jintang song<jintang.song@epro.com.cn> - 8.0.29-1
changelog:
  - Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
    CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
    CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
    CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
    CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
    CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
    CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490


author: wangkai <13474090681@163.com> - 8.0.37-1
changelog:
  - Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
    CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
    CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
    CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
    CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
    CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
    CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
    CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
    CVE-2024-21057,CVE-2023-6129)


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: gaihuiying <gaihuiying1@huawei.com> - 5.8-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix undefined behavior in asn_build_int()
         libsnmp: Rework parse_imports()
         libsnmp: Increase MAX_IMPORTS
         libsnmp: Allocate the module import list on the heap
         libsnmp: Fix a memory leak in a MIB parser error path
         libsnmp: Fix the getoid() error path


author: gaihuiying <eaglegai@163.com> - 1:5.9.1-3
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: xingwei <xingwei14@h-partners.com> - 1:5.9.1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
          IF-MIB: pass the network interface index to net
          IF-MIB: fix a memory leak
          IF-MIB: fix a recently introduced use after free
          IF-MIB: add a trailing newline to an error message


author: wangkai <wangkai385@huawei.com> - 4.1.13-17
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: xinghe <xinghe2@h-partners.com> - 1:1.0.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cache prepare nft_cache evaluate to return error
         fix cache validate handle string length
         add src support for implicit chain bindings
         fix cache release pending rules
         fix segtree map listing
         parser_json fix device parsing in netdev family
         fix src Don't parse string as verdict in map


author: huangyu <huangyu106@huawei.com> - 1:1.0.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix string prefix expression must retain original length
  fix release top level scope


author: zhanghao <zhanghao383@huawei.com> - 1:1.0.0-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:evaluate allow implicit ether vlan dep
  evaluate datatype memleak after binop transfer
  evaluate bogus datatype assertion in binary operation evaluation
  netlink delinearize do not transfer binary operation to non anonymous sets
  payload do not kill dependency for proto unknown
  monitor missing cache and set handle initialization
  netlink linearize fix timeout with map updates


author: zhanghao <zhanghao383@huawei.com> - 1:1.0.0-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix potential array out of bounds access
  evaluate: fix shift exponent underflow in concatenation evaluation
  netlink: Fix for potential NULL-pointer deref
  mnl: dump_nf_hooks() leaks memory in error path


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: error out if basetypes are different
         evaluate: guard against NULL basetype
         evaluate: handle invalid mapping expressions gracefully
         evaluate: reject attempt to update a set
         evaluate: release mpz type in expr_evaluate_list() error path
         expression: missing line in describe command with invalid expression

  Thu Apr 18 2024 lingsheng <lingsheng1@h-partners.com> - 1:1.0.0-10
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: fix tcpopt_find_template to use length after mask adjustment
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6
         netlink: reset temporary set element stmt list after list splice


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:parser: split tcp option rules
         cache: prepare nft_cache_evaluate() to return error
         ct timeout: fix 'list object x' vs. 'list objects in table' confusion
         ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: xingwei <xingwei14@h-partners.com> - 2:7.92-4
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: chenyanpanHW <chenyanpan@huawei.com> - 4.29.0-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/nspr-gcc-atomics.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-10
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-4
changelog:
  - Add requirements for system and bugfix
  - Upgrade oec-hardware-server
  - Update readme and design doc
  - Fix nvme error
  - Update network fibre check and log 
  - Update description for perf test
  - Add automatic configuration network card IP


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-5
changelog:
  - fix the bug that the test board information is not added to the configuration file
  - Add kabi for hardware critical test
  - Optimize disk/raid/fc/ethernet/infiniband test suite
  - Fix the bug of reading nvme data failed
  - Add file size check when uploading file to server


author: zhangyale <zhangyale3@h-partners.com> - 1.1.3-0
changelog:
  - Add support for openEuler 22.03 LTS SP1
  - Add AMD GPU testcase
  - Add automatic configuration network card IP
  - Add generate compatibility information


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: liqiang <liqiang332@h-partner.com> - 1.1.3-3
changelog:
  - Fix libswsds.so not stripped
  - Fix the value of kernel.src obtained by the kabi test case is incorrect
  - Add board infomation and fix memory bug
  - Fix the block size fails to be obtained during the NVME test
  - Judge whether to support kabi testing by architecture
  - Update readme and dev_design


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-0
changelog:
  - Add board information in the test report
  - Add spdk test case
  - Add dpdk test case
  - Update pci.ids file


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-1
changelog:
  - Add igc dpdk
  - Secure_filename to improve input robustness and security
  - Correcting bug, self.changed_ Logpath is a string
  - Increase the number of network card up detection times
  - Resolve the issue of IP configuration failure


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-0
changelog:
  - Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
  - Add modifications to Kylinsec with oec-hardware
  - Add support for Loongson and SW architectures
  - Bugfix


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
  - Add fio test cases:read,write,randread,randwrite
  - Solve the nvme line break issue in the command line interface
  - Fix compilation errors in the make command
  - Add Vulkan testcase for nvida GPU
  - Resolve the issue of oech server startup failure on version 24.03


author: xiaochn <xiaochuannan@inspur.com> - 1.1.5-3
changelog:
  - Resolve the issue of different kernel source download locations in kabi test case
  - Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
  - Add the way for manually adding kabiwhitelist file
  - For custom vendors, refer to the method of obtaining openEuler os information
  - Supports custom vendor


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-0
changelog:
  - Add new test suite srpm and intel
  - Add virtual branch of test suite
  - Add support for Kylin and UOS
  - Bugfix


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: Noah <hedongbo@huawei.com> - 8u330.1
changelog:
  - change upstream to openeuler
  - rm 0004-Fix-Compilation-Flags.patch
  - rm 0005-fxpackager-extract-jre-accept-symlink.patch
  - rm 0003-fix-cast-between-incompatible-function-types.patch


author: Funda Wang <fundawang@yeah.net> - 0.21.0-11
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: renmingshuai<renmingshuai@huawei.com> - 8.8p1-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport some upstream patches and modify some patches numbers


author: renmingshuai<renmingshuai@huawei.com> - 8.8p1-25
changelog:
  - Type:CVE
  - CVE:CVE-2023-48795,CVE-2023-51385
  - SUG:NA
  - DESC:fix CVE-2023-48795 and CVE-2023-51385


author: wujie <wujie@nj.iscas.ac.cn> - 5.6.0-10
changelog:
  - add support for riscv64 from http://fedora.riscv.rocks/koji/buildinfo?buildID=31200
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: panxiaohe <panxh.life@foxmail.com> - 8.0.0-8
changelog:
  - use lmdb instead of Berkeley DB for package dba
  - update %configure for riscv
  - delete unused rcver


author: Funda Wang <fundawang@yeah.net> - 8.0.30-7
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-6
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: xiongyi <xiongyi@uniontech.com> - 0.90.0-7
changelog:
  - fix CVE-2020-36023
  - fix infinite looping in cvtGlyph with broken files
  - patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013


author: chenyanpanHW <chenyanpan@huawei.com> - 0.67.0-8
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-gcc11.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-27337.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: bzhaoop <bzhaojyathousandy@gmail.com> - 13.3-6
changelog:
  - Porting "Fix subtransaction test failed" from master branch
  - Fri May 6 2022 caodongxia <caodongxia@h-partners.com> - 13.3-4
  - sync the same line with master


author: dillon chen <dillon.chen@gmail.com> - 13.3-8
changelog:
  - Fix build error for loongarch64
  - Fix issue: confilct between libpq-devel and postgresql-devel
  - guess init spec from redhat
  - change redhat spec:rm private package and add files to server-devel
  - so add delete lines to Fix issue
  - Next: write oe libpq and postgresql spec by myself


author: gaihuiying <eaglegai@163.com> - 2.4.9-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: yangcheng <yangcheng1203@163.com> - 8.1.2-4
changelog:
  - Type:CVE
  - CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
  - SUG:NA
  - DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817


author: dongyuzhen <dongyuzhen@h-partners.com> - 9.0.1-2
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: Chenxi Mao <chenxi.mao@suse.com> - 3.9.9-23
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC: Enable link time optimizaitons (LTO) for better performance.


author: zhaoyu <zhaoyu64@huawei.com>- 3.9.9-25
changelog:
  - Type:CVE
  - CVE:CVE-2007-4559
  - SUG:NA
  - DESC:Add a filter parameter to tarfile.extractall will allow users to avoid CVE-2007-4559 by changing their code/settings.


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-31
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-32
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup
      - CVE-2024-4032: Fix "private" (non-global) IP address ranges


author: wangshuo <wangshuo@kylinos.cn> - 3.9.9-33
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch, fix the bug introduced by the fix for CVE-2007-4559
  -      gh-107845: Fix symlink handling for tarfile.data_filter


author: Funda Wang <fundawang@yeah.net> - 3.9.9-35
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
    - Quote template strings in venv activation scripts


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-37
changelog:
  - Type:CVE
  - CVE:CVE-2024-11168
  - SUG:NA
  - DESC:fix CVE-2024-11168
         - Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.2-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-BUG-fix-a-minor-refcounting-issue-in-Py_FindObjects.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-BUG-fix-small-refcount-issue-in-ndimage._ctest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaihuiying <eaglegai@163.com> - 1.13.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove buildin key
         add macros to control if key files permissons is 600 or 644
         remove useless BuildRequires:unbound-libs


author: yanglu <yanglu72@h-partners.com> - 1.13.2-5
changelog:
  - Type:cves
  - CVE:CVE-2022-30698 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30698 and CVE-2022-30699


author: gaihuiying <eaglegai@163.com> - 1.13.2-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"


author: chenhaixing <chenhaixing@huawei.com> - 1.26.8-2
changelog:
  - delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.26.12-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix socket timeout value when HTTPConnect is reused
         remove Exclamation mark character from the unreserved characters
         fix _idna_encode handling of x80


author: chengyechun <chengyechun1@huawei.com> - 1.26.12-7
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorization header on redirects


author: <fengjiabo1@huawei.com> - 10:6.2.0-91
changelog:
  - hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/virtio: Introduce virtio_bh_new_guarded() helper
  - hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
  - checkpatch: add qemu_bh_new/aio_bh_new checks
  - async: avoid use-after-free on re-entrancy guard
  - async: Add an optional reentrancy guard to the BH API
  - hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
  - rtl8139: Remove unused variable
  - tulip: Remove unused variable
  - virtio-mem: Fix the bitmap index of the section offset
  - virtio-mem: Fix the iterator variable in a vmem->rdl_list loop
  - system/memory: use ldn_he_p/stn_he_p
  - block: Fix crash when loading snapshot on inactive node
  - smmu: Clear SMMUPciBus pointer cache when system reset
  - block/mirror: Fix NULL s->job in active writes
  - amd_iommu: Fix APIC address check
  - virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
  - libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
  - ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
  - ivshmem.c: change endianness to LITTLE_ENDIAN
  - hw/ppc/mac.h: Remove MAX_CPUS macro
  - configure: remove dead variables
  - virtio-gpu: do not byteswap padding
  - hw/intc: clean-up error reporting for failed ITS cmd
  - qemu-iotests: Discard stderr when probing devices
  - linux-user: un-parent OBJECT(cpu) when closing thread
  - hw/net/rocker: Avoid undefined shifts with more than 31 ports
  - contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
  - scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE


author: <fengjiabo1@huawei.com> - 10:6.2.0-92
changelog:
  - s390x/sclp: Simplify get_sclp_device() 
  - target/ppc: Remove msr_pr macro
  - docs/system/target-arm: Re-alphabetize board list
  - migration: Extend query-migrate to provide dirty page limit info
  - migration: Implement dirty-limit convergence algo
  - migration: Put the detection logic before auto-converge checking
  - migration: Refactor auto-converge capability logic
  - migration: Introduce dirty-limit capability
  - qapi/migration: Introduce vcpu-dirty-limit parameters
  - qapi/migration: Introduce x-vcpu-dirty-limit-period parameter
  - Change the value of no_ged from true to false
  - Allow UNIX socket option for VNC websocket
  - tpm_emulator: Avoid double initialization during
  - chardev/char-socket: Update AF_UNIX for Windows
  - KVM: dirty ring: add missing memory barrier
  - i386: reset KVM nested state upon CPU reset
  - esp: Handle CMD_BUSRESET by resetting the SCSI bus
  - dbus-vmstate: Restrict error checks to registered proxies in dbus_get_proxies
  - vfio/pci: Add Ascend310b scend910b support
  - target/i386: Export RFDS bit to guests
  - target/i386: Add new CPU model SierraForest
  - target/i386: Introduce Icelake-Server-v7 to enable TSX
  - hw/virtio: handle un-configured shutdown in virtio-pci
  - target/s390x: display deprecation status in '-cpu  help'
  - target/i386: display deprecation status in '-cpu  help'
  - pc-bios/s390-ccw: Fix booting with logical block size < physical block size


author: <fengjiabo1@huawei.com> - 10:6.2.0-93
changelog:
  - cvm: bug-fix for macro isolation
  - tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fix CVE-2023-5088)
  - hw/ide: reset: cancel async DMA operation before resetting state (Fix CVE-2023-5088)
  - Add support for the virtcca cvm feature.


author: <fengjiabo1@huawei.com> - 10:6.2.0-96
changelog:
  - vdpa: Fix bug where vdpa appliance migration does not resume after rollback
  - block: Parse filenames only when explicitly requested (CVE-2024-4467)
  - block: introduce bdrv_open_file_child() helper
  - iotests/270: Don't store data-file with json: prefix in image (CVE-2024-4467)
  - iotests/244: Don't store data-file with protocol in image (CVE-2024-4467)
  - qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
  - qcow2: Do not reopen data_file in invalidate_cache
  - hw/intc/arm_gic: Fix deactivation of SPI lines chery-pick from 7175a562f157d39725ab396e39c1e8e410d206b3
  - vhost-user: Skip unnecessary duplicated VHOST_USER_SET_LOG_BASE requests
  - target/ppc: Split off common embedded TLB init cheery-pick from 581eea5d656b73c6532109f4ced4c73fd4e5fd47`
  - vdpa: fix vdpa device migrate rollback wrong when suspend device failed 1. 
  - hw/virtio/virtio-pci:Support shadow device for virtio-net/blk/scsi devices


author: <fengjiabo1@huawei.com> - 10:6.2.0-97
changelog:
  - nbd/server: CVE-2024-7409: Close stray clients at server-stop
  - main-loop.h: introduce qemu_in_main_thread()
  - aio-wait.h: introduce AIO_WAIT_WHILE_UNLOCKED
  - nbd/server: CVE-2024-7409: Drop non-negotiating clients
  - nbd/server: CVE-2024-7409: Cap default max-connections to 100
  - nbd/server: Plumb in new args to nbd_client_add()
  - nbd: Minor style and typo fixes


author: <fengjiabo1@huawei.com> - 10:6.2.0-98
changelog:
  - pci-host: designware: Limit value range of iATU viewport register
  - hmat acpi: Fix out of bounds access due to missing use of indirection
  - migration: Skip only empty block devices
  - aspeed/hace: Initialize g_autofree pointer
  - hw/net/vmxnet3: Fix guest-triggerable assert()
  - qxl: don't assert() if device isn't yet initialized
  - Avoid unaligned fetch in ladr_match()
  - linux-user: Fix waitid return of siginfo_t and rusage
  - hw/net/lan9118: Replace magic '2048' value by MIL_TXFIFO_SIZE definition
  - stdvga: fix screen blanking
  - virtio-net: drop too short packets early
  - ebpf: replace deprecated bpf_program__set_socket_filter
  - vhsot-user: only read reply of SET_LOG_BASE from vq 0
  - cpu: add Tengyun S5000C cpu support
  - hw/virtio: Fix obtain the buffer id from the last descriptor
  - hw/core: ensure kernel_end never gets used undefined


author: <fengjiabo1@huawei.com> - 10:6.2.0-99
changelog:
  - target/i386: Introduce SapphireRapids-v3 to add missing features
  - qtest/fuzz-lsi53c895a-test: set guest RAM to 2G
  - hw/net/lan9118: Signal TSFL_INT flag when TX FIFO reaches specified level
  - target/arm: Fix alignment for VLD4.32
  - hw/microblaze: pass random seed to fdt
  - tests/qtest: npcm7xx-emc-test: Skip checking MAC
  - tests: mark io-command test as skipped if socat is missing
  - tests: unit: add NULL-pointer check
  - tests: test-qga: close socket on failure to connect
  - vdpa:block device capacity expansion online support vdpa block device update capacity.
  - virtio-net: Ensure queue index fits with RSS(CVE-2024-6505)
  - nbd/server: CVE-2024-7409: Avoid use-after-free when closing server
  - ppc/vof: Fix unaligned FDT property access
  - vvfat: Fix reading files with non-continuous clusters
  - vvfat: Fix bug in writing to middle of file
  - savevm: Fix load_snapshot error path crash
  - hw/dma/xilinx_axidma: Use semicolon at end of statement, not comma
  - hw/remote/message.c: Don't directly invoke DeviceClass:reset
  - crypto/tlscredspsk: Free username on finalize
  - hw/display/vhost-user-gpu.c: fix vhost_user_gpu_chr_read()
  - virtio: remove virtio_tswap16s() call in vring_packed_event_read()
  - char-stdio: Restore blocking mode of stdout on exit
  - hw/ppc: spapr: Use qemu_vfree() to free spapr->htab
  - smbios: sanitize type from external type before checking have_fields_bitmap
  - spapr_pci: fix leak in spapr_phb_vfio_get_loc_code
  - KVM: use store-release to mark dirty pages as harvested
  - monitor/hmp: print trace as option in help for log command
  - tpm_crb: Avoid backend startup just before shutdown under Xen
  - crypto/block-luks: make range overlap check more readable
  - spapr: Free stdout path
  - target/rx: Use target_ulong for address in LI
  - virtio-pci: Fix the use of an uninitialized irqfd
  - rtl8139: Fix behaviour for old kernels.
  - virtio-rng: block max-bytes=0 MIME-Version: 1.0
  - hw/audio/es1370: Clean up comment
  - vhost-user-server: do not set memory fd non-blocking
  - ui: reject extended clipboard message if not activated
  - virtio-net: Fix vhost virtqueue notifiers for RSS
  - hw/misc/applesmc: Fix memory leak in reset() handler


author: <fengjiabo1@huawei.com> - 10:6.2.0-100
changelog:
  - mac_dbdma: Remove leftover `dma_memory_unmap` calls(CVE-2024-8612)
  - softmmu: Support concurrent bounce buffers(CVE-2024-8612)
  - system/physmem: Per-AddressSpace bounce buffering
  - system/physmem: Propagate AddressSpace to MapClient helpers


author: yezengruan <yezengruan@huawei.com> - 10:6.2.0-65
changelog:
  - linux-user: Add strace output for timer_settime64() syscall
  - fix qemu-core when vhost-user-net config with server mode


author: <xufei30@huawei.com> - 10:6.2.0-67
changelog:
  - hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
  - net/eth: Don't consider ESP to be an IPv6 option header mainline
  - net: Fix uninitialized data usage mainline
  - block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
  - i386: add notify VM exit support
  - kvm: expose struct KVMState
  - kvm: allow target-specific accelerator properties
  - i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
  - linux-headers: include missing changes from 6.0
  - dsoundaudio: fix crackling audio recordings mainline
  - hw/audio/intel-hda: fix stream reset mainline
  - hw/pvrdma: Protect against buggy or malicious guest driver
  - qemu support for loongarch
  - hw/pci: Trace IRQ routing on PCI topology
  - hw/pci: Fix a typo
  - hw/riscv: virt: Simplify virt_{get,set}_aclint()
  - curl: Fix error path in curl_open()
  - tests: add (riscv virt) machine mapping to testenv from v7.0.0
  - tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
  - hw/core/machine:Fix the missing consideration of cluster-id
  - arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
  - arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
  - hw/acpi: Support acpi-ged to report CPU's OST info
  - hw/acpi: Add ospm_status hook implementation for acpi-ged
  - fix qmp command migrate-set-parameters


author: <xufei30@huawei.com> - 10:6.2.0-71
changelog:
  - vhost-user-blk: fix the resize crash
  - plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
  - linux-user: fix strace build w/out munlockall
  - ui: fix crash on serial reset, during init
  - qga/win/vss: requester_freeze changes
  - migration: fix populate_vfio_info
  - block/rbd: workaround for ceph issue #53784
  - target/i386: add FZRM, FSRS, FSRC
  - i386: Add new CPU model SapphireRapids
  - core/cpu-common: Fix the wrong '#ifdef __aarch64__'


author: <xufei30@huawei.com> - 10:6.2.0-72
changelog:
  - migration/xbzrle: fix out-of-bounds write with axv512
  - migration/xbzrle: use ctz64 to avoid undefined result
  - Update bench-code for addressing CI problem
  - AVX512 support for xbzrle_encode_buffer
  - configure, meson: move AVX tests to meson
  - target/i386: KVM: allow fast string operations if host supports them
  - target/i386: add FSRM to TCG
  - hw/nvme: fix memory leak in nvme_dsm
  - aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
  - target/i386: Add SGX aex-notify and EDECCSSA support
  - hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
  - target/i386: Set maximum APIC ID to KVM prior to vCPU creation
  - target/i386: Fix sanity check on max APIC ID / X2APIC enablement


author: <fengjiabo1@huawei.com> - 10:6.2.0-75
changelog:
  - Add lbt support for kvm.
  - Fix smp.cores value and Fix divide 0 error
  - hw/nvme: Change alignment in dma functions for nvme_blk_*
  - virtio: fix reachable assertion due to stale value of cached region size
  - hw/nvme: fix missing DNR on compare failure


author: <fengjiabo1@huawei.com> - 10:6.2.0-76
changelog:
  - qga/win32: Use rundll for VSS installation
  - qga/win32: Remove change action from MSI installer
  - ide: Increment BB in-flight counter for TRIM BH
  - hw/pci-bridge/pxb: Fix missing swizzle
  - host-vdpa: make notifiers _init()/_uninit() symmetric
  - hw/virtio: vdpa: Fix leak of host-notifier memory-region
  - accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
  - Allow setting up to 8 bytes with the generic loader
  - hw/net/virtio-net: make some VirtIONet const
  - accel/tcg: Optimize jump cache flush during tlb range flush
  - 9pfs: prevent opening special files (CVE-2023-2861)
  - tcg: Reduce tcg_assert_listed_vecop() scope
  - gitlab: Disable plugins for cross-i386-tci
  - vfio/pci: Fix a segfault in vfio_realize
  - block/iscsi: fix double-free on BUSY or similar statuses
  - tests/tcg: fix unused variable in linux-test
  - hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
  - qga/vss-win32: fix warning for clang++-15
  - vnc: avoid underflow when accessing user-provided address
  - block/monitor: Fix crash when executing HMP commit
  - virtio-gpu: add a FIXME for virtio_gpu_load()
  - hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
  - migration: report compress thread pid to libvirt


author: <fengjiabo1@huawei.com> - 10:6.2.0-78
changelog:
  - sw_64: Added sw64 architecture related updates
  - virtio-crypto: verify src&dst buffer length for sym request
  - vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
  - qga: Fix suspend on Linux guests without systemd
  - tests: vhost-user-test: release mutex on protocol violation
  - qapi: support updating expected test output via make
  - block: Fix misleading hexadecimal format
  - block/rbd: fix write zeroes with growing images
  - block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
  - block/nfs: Fix 32-bit Windows build
  - qapi/qdev: Tidy up device_add documentation
  - hw/xen/xen_pt: fix uninitialized variable
  - migration/ram: Fix error handling in ram_write_tracking_start()
  - docs/about/build-platforms: Refine the distro support policy
  - xen-block: Avoid leaks on new error path
  - QGA VSS: Add wrapper to send log to debugger and stderr
  - chardev/char-socket: set s->listener = NULL in char_socket_finalize
  - qapi/block: Tidy up block-latency-histogram-set documentation
  - disas/riscv Fix ctzw disassemble
  - vfio: Fix vfio_get_dev_region() trace event
  - migration/ram: Fix populate_read_range()
  - Check and report for incomplete 'global' option  format


author: <fengjiabo1@huawei.com> - 10:6.2.0-79
changelog:
  - test: Fix test-crypto-secret when compiling without keyring support
  - aio-posix: fix build failure io_uring 2.2


author: <fengjiabo1@huawei.com> - 10:6.2.0-80
changelog:
  - io: remove io watch if TLS channel is closed during handshake
  - hw/ssi: Fix Linux driver init issue with xilinx_spi
  - chardev: report the handshake error
  - vhost: Drop unused eventfd_add|del hooks
  - virtio-iommu: use-after-free fix
  - hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
  - hw/rx: rx-gdbsim DTB load address aligned of 16byte
  - vhost-user: Use correct macro name TARGET_PPC64
  - accel/kvm: Make kvm_dirty_ring_reaper_init() void
  - accel/kvm: Free as when an error occurred


author: <fengjiabo1@huawei.com> - 10:6.2.0-81
changelog:
  - hw/nvme: Avoid dynamic stack allocation
  - ppc/vof: Fix missed fields in VOF cleanup
  - ui: fix crash when there are no active_console
  - tests/qtest/pflash: Clean up local variable shadowing
  - target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
  - tulip: Assign default MAC address if not specified
  - hw/char: fix qcode array bounds check in ESCC impl


author: <fengjiabo1@huawei.com> - 10:6.2.0-82
changelog:
  - thread-pool: optimize scheduling of completion bottom half
  - migration/rdma: zore out head.repeat to make the error more clear
  - vhost-user-fs: Back up vqs before cleaning up vhost_dev
  - hw/vfio/pci-quirks: Sanitize capability pointer
  - hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
  - replay: fix event queue flush for qemu shutdown
  - hw/net: Fix read of uninitialized memory in ftgmac100
  - target/ppc: Fix tlbie
  - target/i386: fix INVD vmexit
  - qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
  - aio-posix: zero out io_uring sqe user_data


author: <fengjiabo1@huawei.com> - 10:6.2.0-83
changelog:
  - hw/virtio/virtio-pmem: Replace impossible check by assertion
  - tests: Fix printf format string in acpi-utils.c
  - softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
  - disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
  - qga: Fix memory leak when output stream is unused
  - ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  - target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  - target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  - target/i386: Allow MCDT_NO if host supports
  - target/i386: Add support for MCDT_NO in CPUID enumeration
  - target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  - target/i386: add support for FB_CLEAR feature
  - target/i386: add support for FLUSH_L1D feature
  - crypto: remove shadowed 'ret' variable
  - hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
  - hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number


author: <fengjiabo1@huawei.com> - 10:6.2.0-84
changelog:
  - hw/arm/fsl-imx: Do not ignore Error argument
  - hw/net/cadence_gem.c: spelling fixes: Octects
  - tests/qtest: check the return value
  - libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
  - io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
  - libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
  - qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
  - net: Fix a misleading error message
  - vdpa: stop all svq on device deletion
  - vhost: release virtqueue objects in error path
  - vhost: fix the fd leak
  - virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
  - hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
  - virtio-net: clear guest_announce feature if no cvq backend
  - vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
  - vdpa: do not block migration if device has cvq and x-svq=on
  - vdpa net: block migration if the device has CVQ
  - vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
  - vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
  - vdpa: fix not using CVQ buffer in case of error
  - vdpa: Fix possible use-after-free for VirtQueueElement
  - hw/virtio: fix vhost_user_read tracepoint
  - vhost: Fix false positive out-of-bounds
  - vhost: fix possible wrap in SVQ descriptor ring
  - vhost: move iova_tree set to vhost_svq_start
  - vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
  - virtio-crypto: verify src&dst buffer length for sym request
  - vdpa: commit all host notifier MRs in a single MR transaction
  - vdpa: harden the error path if get_iova_range failed
  - vdpa-dev: get iova range explicitly
  - virtio-pci: add support for configure interrupt
  - virtio-mmio: add support for configure interrupt
  - virtio-net: add support for configure interrupt
  - vhost: add support for configure interrupt
  - virtio: add support for configure interrupt
  - vhost-vdpa: add support for config interrupt
  - vhost: introduce new VhostOps vhost_set_config_call
  - virtio-pci: decouple the single vector from the interrupt process
  - virtio-pci: decouple notifier from interrupt process
  - virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
  - vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
  - vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
  - vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
  - hw/virtio: gracefully handle unset vhost_dev vdev
  - hw/virtio/vhost: Fix typo in comment.
  - vdpa: always start CVQ in SVQ mode if possible
  - vdpa: add shadow_data to vhost_vdpa
  - vdpa: store x-svq parameter in VhostVDPAState
  - vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
  - vdpa: allocate SVQ array unconditionally
  - vdpa: move SVQ vring features check to net/
  - vdpa: request iova_range only once
  - vdpa: add vhost_vdpa_net_valid_svq_features
  - vhost: allocate SVQ device file descriptors at device start
  - vhost: set SVQ device call handler at SVQ start
  - vdpa: use v->shadow_vqs_enabled in vhost_vdpa_svqs_start & stop
  - vhost: enable vrings in vhost_dev_start() for vhost-user devices
  - vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)->async_tx.elem in virtio_net_reset
  - net/vhost-vdpa.c: Fix clang compilation failure
  - vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
  - vdpa: Remove shadow CVQ command check
  - vdpa: Delete duplicated vdpa_feature_bits entry
  - hw/virtio: add some vhost-user trace events
  - vdpa: Allow MQ feature in SVQ
  - virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
  - vdpa: validate MQ CVQ commands
  - vdpa: Add vhost_vdpa_net_load_mq
  - vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
  - vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
  - vdpa: Delete CVQ migration blocker
  - vdpa: Add virtio-net mac address via CVQ at start
  - vhost_net: add NetClientState->load() callback
  - vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
  - vdpa: Move command buffers map to start of net device
  - vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
  - vhost_net: Add NetClientInfo stop callback
  - vhost_net: Add NetClientInfo start callback
  - vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
  - vdpa: Make SVQ vring unmapping return void
  - vdpa: Remove SVQ vring from iova_tree at shutdown
  - util: accept iova_tree_remove_parameter by value
  - vdpa: do not save failed dma maps in SVQ iova tree
  - vdpa: Skip the maps not in the iova tree
  - vdpa: Fix file descriptor leak on get features error
  - vdpa: Fix memory listener deletions of iova tree
  - vhost: Get vring base from vq, not svq
  - vdpa: Add x-svq to NetdevVhostVDPAOptions
  - vdpa: Add device migration blocker
  - vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
  - vdpa: Buffer CVQ support on shadow virtqueue
  - vdpa: manual forward CVQ buffers
  - vdpa: Export vhost_vdpa_dma_map and unmap calls
  - vhost: Add svq avail_handler callback
  - vhost: add vhost_svq_poll
  - vhost: Expose vhost_svq_add
  - vhost: add vhost_svq_push_elem
  - vhost: Track number of descs in SVQDescState
  - vhost: Add SVQDescState
  - vhost: Decouple vhost_svq_add from VirtQueueElement
  - vhost: Check for queue full at vhost_svq_add
  - vhost: Move vhost_svq_kick call to vhost_svq_add
  - vhost: Reorder vhost_svq_kick
  - vdpa: Avoid compiler to squash reads to used idx
  - virtio-net: Expose ctrl virtqueue logic
  - virtio-net: Expose MAC_TABLE_ENTRIES
  - vhost: move descriptor translation to vhost_svq_vring_write_descs
  - util: Return void on iova_tree_remove
  - virtio-net: don't handle mq request in userspace handler for vhost-vdpa
  - vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
  - vhost-vdpa: backend feature should set only once
  - vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
  - virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
  - virtio: add vhost support for virtio devices
  - include/hw: start documenting the vhost API
  - hw/virtio: add vhost_user_[read|write] trace points
  - vhost: Fix element in vhost_svq_add failure
  - vdpa: Fix index calculus at vhost_vdpa_svqs_start
  - vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
  - vhost: Fix device's used descriptor dequeue
  - vhost: Track descriptor chain in private at SVQ
  - vdpa: Add missing tracing to batch mapping functions
  - vhost-vdpa: fix typo in a comment
  - virtio: fix --enable-vhost-user build on non-Linux
  - vdpa: Expose VHOST_F_LOG_ALL on SVQ
  - vdpa: Never set log_base addr if SVQ is enabled
  - vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
  - vdpa: Add custom IOTLB translations to SVQ
  - vhost: Add VhostIOVATree
  - util: add iova_tree_find_iova
  - util: Add iova_tree_alloc_map
  - vhost: Shadow virtqueue buffers forwarding
  - vdpa: adapt vhost_ops callbacks to svq
  - virtio: Add vhost_svq_get_vring_addr
  - vhost: Add vhost_svq_valid_features to shadow vq
  - vhost: Add Shadow VirtQueue call forwarding capabilities
  - vhost: Add Shadow VirtQueue kick forwarding capabilities
  - vhost: Add VhostShadowVirtqueue
  - vdpa: Make ncs autofree
  - Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
  - Revert "virtio-pci: decouple notifier from interrupt process"
  - Revert "virtio-pci: decouple the single vector from the interrupt process"
  - Revert "vhost-vdpa: add support for config interrupt"
  - Revert "virtio: add support for configure interrupt"
  - Revert "vhost: add support for configure interrupt"
  - Revert "virtio-net: add support for configure interrupt"
  - Revert "virtio-mmio: add support for configure interrupt"
  - Revert "virtio-pci: add support for configure interrupt"
  - Revert "vhost: introduce new VhostOps vhost_set_config_call"
  - virtio: signal after wrapping packed used_idx
  - target/i386: Adjust feature level according to FEAT_7_1_EDX
  - target/i386: Add new CPU model GraniteRapids
  - target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  - target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  - target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  - target/i386: Add support for AVX-IFMA in CPUID enumeration
  - target/i386: Add support for AMX-FP16 in CPUID enumeration
  - target/i386: Add support for CMPCCXADD in CPUID enumeration
  - tracetool: avoid invalid escape in Python string
  - hw/pvrdma: Protect against buggy or malicious guest driver
  - vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
  - qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
  - artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
  - virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
  - e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
  - vhost: introduce new VhostOps vhost_set_config_call
  - vhost: stick to -errno error return convention
  - vhost-user: stick to -errno error return convention
  - vhost-vdpa: stick to -errno error return convention
  - virtio-pci: add support for configure interrupt
  - virtio-mmio: add support for configure interrupt
  - virtio-net: add support for configure interrupt
  - vhost: add support for configure interrupt
  - virtio: add support for configure interrupt
  - vhost-vdpa: add support for config interrupt
  - virtio-pci: decouple the single vector from the interrupt process
  - virtio-pci: decouple notifier from interrupt process
  - virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
  - pci: Fix the update of interrupt disable bit in PCI_COMMAND register
  - hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
  - tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
  - pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
  - hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
  - qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
  - semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
  - semihosting: fix memleak at semihosting_arg_fallback
  - target/i386: Export GDS_NO bit to guests


author: <fengjiabo1@huawei.com> - 10:6.2.0-86
changelog:
  - vdpa: move memory listener to the realize stage
  - vdpa: implement vdpa device migration
  - vhost: implement post resume bh
  - vhost: implement migration state notifier for vdpa device
  - vhost: implement savevm_hanlder for vdpa device
  - vhost: implement vhost_vdpa_device_suspend/resume
  - vhost: implement vhost-vdpa suspend/resume
  - vhost: add vhost_dev_suspend/resume_op
  - vhost: introduce bytemap for vhost backend logging
  - vhost-vdpa: add migration log ops for VhostOps
  - vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
  - vhost: fix null pointer access
  - ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
  - hw/usb: dev-mtp: Use g_mkdir()
  - target/ppc/cpu-models: Remove the "default" CPU alias
  - hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
  - Fixed a QEMU hang when guest poweroff in COLO mode
  - migration/colo: More accurate update checkpoint time
  - scripts/entitlement.sh: Use backward-compatible cp flags
  - block/nvme: fix infinite loop in nvme_free_req_queue_cb()
  - hw/net: npcm7xx_emc fix missing queue_flush
  - Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
  - hw/arm: ast2600: Fix address mapping of second SPI controller
  - vhost-user-blk: reconnect on any error during realize
  - vhost-user-blk: propagate error return from generic vhost
  - hw/riscv: boot: Reduce FDT address alignment constraints
  - Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
  - Fix STM32F2XX USART data register readout
  - block: use 'unsigned' for in_flight field on driver state
  - sphinx: change default language to 'en'
  - tests/qtest: Fix two format strings
  - trivial typos: namesapce
  - hw/ide/atapi.c: Correct typos (CD-CDROM -> CD-ROM)
  - hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
  - hw/display/next-fb: Fix comment typo
  - xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
  - tests/qtest/migration-test.c: spelling fix: bandwith
  - target/i386/cpu: Improve error message for property "vendor"
  - balloon: Fix a misleading error message
  - target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
  - disas/hppa: Show hexcode of instruction along with disassembly
  - tcg/loongarch64: Fix tcg_out_mov() Aborted
  - ui/qmp-cmds: Improve two error messages
  - qga: Improve guest-exec-status error message
  - hmp: Improve sync-profile error message
  - spapr/pci: Correct "does not support hotplugging error messages
  - xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix


author: <fengjiabo1@huawei.com> - 10:6.2.0-87
changelog:
  - vdpa: suspend function return 0 when the vdpa device is stopped
  - vdpa: don't suspend/resume device when vdpa device not started
  - vdpa: support vdpa device suspend/resume
  - vdpa: correct param passed in when unregister save
  - vdpa: set vring enable only if the vring address has already been set
  - shadow_dev: introduce shadow dev for virtio-net device
  - revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
  - migration: Set downtime_start even for postcopy
  - gdb-xml: fix duplicate register in arm-neon.xml
  - iotests: fix default machine type detection
  - migration: fix RAMBlock add NULL check
  - s390x: Fix spelling errors
  - ppc: spelling fixes
  - hw/scsi/vhost-scsi: don't double close vhostfd on error
  - virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
  - hw/scsi/vhost-scsi: don't leak vqs on error
  - hw/i386/pc: Add missing property descriptions
  - pcie_aer: Don't trigger a LSI if none are defined
  - pci: Export the pci_intx() function
  - hw/qdev: Cosmetic around documentation
  - tests/unit: fix a -Wformat-truncation warning
  - tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
  - i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
  - ui/vnc-clipboard: fix inflate_buffer
  - hw/usb/hcd-xhci.c: spelling: tranfer


author: <fengjiabo1@huawei.com> - 10:6.2.0-88
changelog:
  - ui/vnc.c: Fixed a deadlock bug.
  - hw/i386: Fix comment style in topology.h
  - migration/multifd: Remove unnecessary usage of local Error
  - linux-user: fix sockaddr_in6 endianness
  - vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
  - iotests: fix 194: filter out racy postcopy-active event
  - tests/avocado: fix waiting for vm shutdown in replay_linux
  - ui/vnc: fix debug output for invalid audio message


author: <fengjiabo1@huawei.com> - 10:6.2.0-89
changelog:
  - qga-win: Fix guest-get-fsinfo multi-disks collection
  - hw/timer: fix systick trace message
  - virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
  - ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
  - esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
  - hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
  - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  - net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
  - net: Provide MemReentrancyGuard * to qemu_new_nic()


author: <fengjiabo1@huawei.com> - 10:6.2.0-90
changelog:
  - i386/cpuid: Move leaf 7 to correct group
  - i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
  - i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
  - i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
  - target/i386: Change wrong XFRM value in SGX CPUID leaf
  - target/i386: Enable support for XSAVES based features
  - target/i386: Add kvm_get_one_msr helper
  - hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
  - linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
  - ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
  - tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
  - qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
  - target/ppc: Modify the uncorrect value irq to n_IRQ
  - block-migration: Ensure we don't crash during migration cleanup
  - target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
  - hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
  - configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
  - vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
  - hw/ide/core: set ERR_STAT in unsupported command completion
  - linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
  - load_elf: fix iterator's type for elf file processing
  - hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
  - hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
  - hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
  - chardev/char.c: fix "abstract device type" error message
  - block/rbd: fix handling of holes in .bdrv_co_block_status
  - qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
  - usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
  - hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
  - block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
  - vl: Improve error message for conflicting -incoming and -loadvm
  - hw/smbios: Fix OEM strings table option validation


author: Qi Hao <qihao@cmss.chinamobile.com> - 16:6.2.0-44-48
changelog:
  - Fix the guest-get-disk-status interface in an environment with containers, which under certain conditions can trigger memory out of bounds reading issues.
  - filter intermediate information in the container environment (such as overlay, shm) and only retain /dev information.


author: Qi Hao <qihao@cmss.chinamobile.com> - 16:6.2.0-44.49
changelog:
  - qga/main.c: Optimized the interface for change-password.
  - qga/commands-posix.c: add the guest-get-cpustinfo interface for qga.


author: Qi Hao <qihao@cmss.chinamobile.com> - 16:6.2.0-44.50
changelog:
  - qga/command-posix.c: add the guest-get-cpu-utilization interface for qga.
  - qga/command-posix.c: add the guest-get-lastboot-time interface for qga.


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: chenziyang <chenziyang4@huawei.com> - 8.1-3
changelog:
  - Add shell command to switch bracketed-paste mode from on to off to keep consistent with realine-8.0


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change the uid and gid of directories newly created when run with --change-files


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix failure when recompiling noarch rpm and remove the require to rpm-build


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2110.0-15
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:omprog bugfix: invalid status handling at called program
         core bugfix: template system may generate invalid json


author: linzhuorong <linzhuorong@huawei.com> - 8.2110.0-16
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: OpenSSL: fix depreacted API issues for OpenSSL 3.x
          MMDBLOOKUP::FIXED:: Don't crash Rsyslog on mmdb
          support sha256 for StreamDriverAuthMode="x509/fingerprint"
          imjournal: add second fallback to _COMM
          bugfix: prevent pot. segfault when switchung to
          core/bugfix: using $uuid msg prop can deadlock rsyslog on shutdown
          GNUTls Driver: Fix memory leaks in gtlsInitCred


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2110.0-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tcp net subsystem: handle data race gracefully
         fix startup issue on modern systemd systems
         tcpflood bugfix: plain tcp send error not properly reported
         tcpflood bugfix: TCP sending was not implemented properly
         lookup tables: fix static analyzer issue
         lookup tables bugfix: reload on HUP did not work when backgrounded
         openssl: Replaced depreceated method SSLv23_method with TLS_method
         testbench: make waiting for HUP processing more reliable
         bugfix: cosmetic data races
         mmnormalize bugfix: if msg cannot be parsed, parser chain is stopped
         core bugfix: potential segfault on busy systems
         imfile: fix ext directory's fd leak in case of inotify on symlink
         imfile tests: ext directory's fd leak in case of inotify on symlink
         testbench: fix imfile-statefile-delete.sh (INOTIFY trigger)
         imfile bugfix: message loss/duplication when monitored file is rotated
         testbench: add testcase for frequent imfile input file change
         Use runConf instead of loadConf in ratelimiting during runtime


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-3
changelog:
  - Type:CVES
  - ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
  - SUG:NA
  - DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-4
changelog:
  - Type:CVES
  - ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
  - SUG:NA
  - DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572


author: wangjiang <wangjiang37@h-partners.com> - 35.5-16
changelog:
  - backport patch Allow virt_domain read device sysctls
                   Allow icecast rename its log files


author: jinlun <jinlun@huawei.com> - 15.4-5
changelog:
  - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
    CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
    CVE-2021-23841 CVE-2022-0778 CVE-2021-3712


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.0.0-6
changelog:
  - docs: fix some statement
  - machine_manager: add autodeflate for balloon
  - migration: add dev_id into VirtioPciState when save and restore device state
  - machine: fix more than one pcie-root-ports with same id
  - migration: move function "transport_reset" to save state stage for vhost vsock device
  - vfio: adding ram device region to vfio bar region
  - machine_manager: move argument "serial" from -drive to -device virtio-blk-pci/device
  - machine_manager: add multifunction for devices
  - machine: add init_multifunction function to init multifunction
  - machine: add realization for multifunction


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-1
changelog:
  - Add support for PCIe native hotplugging.
  - Reduce memory consumption of reading edk2 firmware files on aarch64.
  - Add support for booting from disk image directly.
  - Add support for VM reboot and VM shutdown.
  - Add support for guest memory preallocation.
  - Add more test cases.
  - Add and fix documentation.
  - Replace lazy_static crate with once_cell.
  - Performance enhancement for virtio-blk and virtio-net devices.
  - Add ftrace support.


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-2
changelog:
  - Fix VFIO hotplugging failure caused by missing seccomp rules.
  - Fix booting failure from disk image on x86_64.
  - Update some documents.


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-3
changelog:
  - Fix memory snapshot failure with hotplugged devices.
  - Fix address translation for virtio devices.
  - Add some test cases for microvm.
  - Update some documents.


author: yangmingtai <yangmingtai@huawei.com> -249-42
changelog:
  - 1.change /etc/systemd/journald.conf ForwardToWall to no
    2.change DefaultLimitMEMLOCK to 64M
    3.replace openEuler to vendor
    4.delete useless file udev-61-openeuler-persistent-storage.rules


author: wangyuhang <wangyuhang27@huawei.com> - 249-54
changelog:
  - add a new switch to control whether udev complies with the new SAT standards
    and add sense_data.py to check if the device meets the new SAT standards


author: shixin <shixin21@huawei.com> - 249-55
changelog:
  - sysuesrs_dir, sysctl_dir, binfmt_dir, modules_load_dir reference directories in /usr/lib for embedded
  - modify dns server address to avoid security risk for embedded
  - add support to relabel systemd process for embedded
  - add noexec mount option to strenthen tmp partition for embedded
  - use yocto configs for embedded


author: huyubiao <huyubiao@huawei.com> - 249-60
changelog:
  - backport: sync patches from systemd community
    add backport-core-path-do-not-enqueue-new-job-in-.trigger_notify-.patch
        backport-socket-fix-use-of-ERRNO_IS_DISCONNECT.patch
        backport-sd-bus-fix-use-of-ERRNO_IS_DISCONNECT.patch
        backport-resolved-fix-use-of-ERRNO_IS_DISCONNECT.patch
        backport-bus-add-some-minimal-bounds-check-on-signatures.patch
        backport-udev-builtin-net_id-fix-potential-buffer-overflow.patch
        backport-hostname-Make-sure-we-pass-error-to-bus_verify_polki.patch
        backport-Limit-rlim_max-in-rlimit_nofile_safe-to-nr_open.patch
        backport-udev-raise-RLIMIT_NOFILE-as-high-as-we-can.patch


author: wangyuhang <wangyuhang27@huawei.com> - 249-62
changelog:
  - add: backport-json-use-unsigned-for-refernce-counter.patch
        backport-macro-check-over-flow-in-reference-counter.patch
        backport-sd-bus-fix-reference-counter-to-be-incremented.patch
        backport-sd-bus-introduce-ref-unref-function-for-track_item.patch
        backport-sd-bus-do-not-read-unused-value.patch
        backport-sd-bus-do-not-return-negative-errno-when-unknown-nam.patch
        backport-sd-bus-use-hashmap_contains-and-drop-unnecessary-cas.patch
        backport-test-shorten-code-a-bit.patch
        backport-test-add-several-tests-for-track-item.patch
        backport-Use-dummy-allocator-to-make-accesses-defined-as-per-standard.patch
        backport-sd-bus-switch-to-a-manual-overflow-check-in.patch


author: wangyuhang <wangyuhang27@huawei.com> - 249-68
changelog:
  - backport: sync patches from systemd community
              add backport-journal-recalculate-line_max-when-stdout-stream-stat.patch
              backport-pid1-terminate-cylon-string.patch
              backport-pid1-move-draw_cylong-to-pretty-print.-ch.patch
              backport-test-add-test-for-draw_cylon.patch
              backport-locale-util-do-not-call-setlocale-when-multi-threade.patch
              backport-resolve-fix-wrong-error-cause-assignment-to-log_debu.patch
              backport-resolve-do-not-trigger-assertion-on-exit.patch
              backport-network-neighbor-add-missing-OOM-check.patch
              backport-dissect-tool-right-align-the-partition-number.patch
              backport-dissect-image-fix-fd-leak-in-dissected_image_acquire.patch
              backport-udev-even-if-a-device-is-a-zac-device-scsi-ID_SERIAL.patch
              backport-core-log-message-when-reloading-finishes.patch


author: huyubiao <huyubiao@huawei.com> - 249-69
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add backport-basic-fix-overflow-detection-in-sigbus_pop.patch
         backport-busctl-avoid-asserting-on-NULL-message.patch
         backport-resolve-don-t-add-sockets-to-the-graveyard-on-shutdo.patch
         backport-sd-journal-check-sd-event-state-before-setting-up-po.patch


author: huyubiao <huyubiao@huawei.com> - 249-70
changelog:
  - move the architecture patches after Patch9800 (excluding Patch9800)
    delete the duplicate systemd-coredump.socket


author: huyubiao <huyubiao@huawei.com> - 249-73
changelog:
  - DESC:add backport-core-exec-do-not-crash-with-UtmpMode-user-without-Us.patch
         backport-resolved-limit-the-number-of-signature-validations-i.patch
         backport-resolved-reduce-the-maximum-nsec3-iterations-to-100.patch


author: huyubiao <huyubiao@huawei.com> - 249-76
changelog:
  - add backport-login-user-runtime-dir-properly-check-for-mount-poin.patch
        backport-user-util-validate-the-right-field.patch


author: zhaoxiaohu <zhaoxiaohu@kuaishou.com> - 249-85
changelog:
  - add backport-man-fix-directory-for-user-home-bind-mounts.patch
        backport-nspawn-fix-directory-in-logged-error.patch
        backport-test-boot-timestamp-Handle-ERANGE-error.patch


author: zhaoxiaohu <zhaoxiaohu@kuaishou.com> - 249-87
changelog:
  - add backport-userdb-Use-json_dispatch_user_group_name-to-parse-Ge.patch
        backport-README-explicitly-note-that-util-linux-s-mount-swap-.patch
        backport-man-fix-section-number.patch
        backport-repart-fix-invalid-errno-in-log.patch
        backport-sysusers-insist-that-root-group-is-0.patch
        backport-importd-Always-specify-file-unpacked-by-tar.patch
        backport-docs-remove-dev-tty-confusion.patch


author: zhaoxiaohu <zhaoxiaohu@kuaishou.com> - 249-88
changelog:
  - wait-online: fix handling of unmanaged state
  - add backport-wait-online-make-manager_link_is_online-return-0-whe.patch


author: zhaoxiaohu <zhaoxiaohu@kuaishou.com> - 249-91
changelog:
  - add backport-cgroup-util-introduce-cg_is_threaded.patch
        backport-core-execute-warn-when-threaded-mode-is-detected.patch


author: huyubiao <huyubiao@huawei.com> - 249-94
changelog:
  - backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table


author: zhangyao <zhangyao108@huawei.com> - 249-95
changelog:
  - add backport-logind-give-better-error-messages-when-failing-to-at.patch
        backport-sd-journal-refuse-entry-objects-with-an-empty-boot-I.patch
        backport-fs-util-readlinkat-supports-an-empty-string.patch
        backport-exec-invoke-correct-dont_close-size.patch
        backport-core-fix-NULL-pointer-dereference-during-deserializa.patch
        backport-core-service-fix-accept-socket-deserialization.patch
        backport-resolved-correct-parsing-of-OPT-extended-RCODEs.patch
        backport-coredump-correctly-take-tmpfs-size-into-account-for-.patch
        backport-sysusers-handle-NSS-errors-gracefully.patch
        backport-shared-log-error-when-execve-fail.patch


author: wangyuhang <wangyuhang27@huawei.com> - 249-96
changelog:
  - add backport-run-split-out-creation-of-unit-creation-messages.patch
        backport-run-pass-the-pty-slave-fd-to-transient-service.patch
        backport-run-do-not-pass-the-pty-slave-fd-to-transient-servic.patch
        backport-sd-event-do-not-assert-on-invalid-signal.patch
        backport-sd-event-change-error-code-EINVAL-EIO.patch
        backport-basic-log-do-not-treat-all-negative-errnos-as-synthe.patch
        backport-sd-ipv4acd-fix-assertion-triggered-when-an-ARP-recei.patch
        backport-main-reopen-dev-console-for-user-service-manager.patch
        backport-log-add-common-helper-log_set_target_and_open.patch
        backport-resolved-log-error-messages-for-openssl-gnutls-conte.patch
        backport-journalctl-erase-verify-key-before-free.patch
        backport-core-service-use-log_unit_-where-appropriate.patch
        backport-manager-log-unit-pid-of-sender-when-Reload-is-called.patch
        backport-Manager-also-log-caller-of-daemon-reexec.patch
        backport-manager-improve-message-about-Reload-Reexec-requests.patch
        backport-core-fix-null-in-output.patch
        backport-core-Bump-log-level-of-reexecute-request-to-notice.patch
        backport-core-Log-in-more-scenarios-about-which-process-initi.patch


author: xingwei <xingwei14@h-partners.com> - 14:4.99.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Set SA_RESTART on non-lethal signals (REQ_INFO, FLUSH_PCAP) to avoid corrupting binary pcap output


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


author: Liu Chao <liuchao173@huawei.com> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)


author: qinyu<qinyu32@huawei.com> - 2022a-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Greenland change should affect only America/Nuuk; The northern edge of Chihuahua changes to US rules


author: langfei<langfei@huawei.com> - 2022a-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: liuchao <liuchao173@huawei.com> - 2022a-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Vostok switches to +05; Sync Casey data from timeanddata.com; Kazakhstan unifies on UTC+5


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-4
changelog:
  - Type:CVE
  - ID:CVE-2022-3491 CVE-2022-3520 CVE-2022-3591
  - SUG:NA
  - DESC:fix CVE-2022-3491 CVE-2022-3520 CVE-2022-3591


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-7
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-17
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-22
changelog:
  - Type:CVE
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
  - SUG:NA
  - DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237


author: ouyangminxiang<ouyangminxiang@kylinsec.com.cn> - 1.20.11-7
changelog:
  - Fix the crash in shadowUpdatePacked because of memcpy acts randomly with overlapping areas.
  - Fix the problem of black screen after entering the login interface


author: wanglin <wangl29@chinatelecom.cn> - 1.20.11-14
changelog:
  - Fix openEuler hard code problem
  - use -git instead of .git as the filename, to avoid .git ignore
  - Fix changelog date


author: yanglu <yanglu72@h-partners.com> -1.20.11-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix regression caused by the fix for CVE-2024-0229 
         fix use after free related to CVE-2024-21886


author: shuaijiakun <shuaijiakun1288@phytium.com.cn> -1.20.11-32
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:fix display error for ps23xx when using ast and pe2201 bmc card.


author: xingwei <xingwei14@h-partners.com> - 4.2.3-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add haveged requires and optimize random number function replacement patch


