# changelog

author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2211.4.0.0177
changelog:
  - block: fix use after free for bd_holder_dir
  - Revert "block: Fix UAF in bd_link_disk_holder()"
  - init/main.c: return 1 from handled __setup() functions
  - x86/pm: Save the MSR validity status at context setup
  - x86/speculation: Restore speculation related MSRs during S3 resume
  - x86/cpu: Load microcode during restore_processor_state()
  - genirq: Synchronize interrupt thread startup
  - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
  - once: add DO_ONCE_SLOW() for sleepable contexts
  - inet: fully convert sk->sk_rx_dst to RCU rules
  - ext4: continue to expand file system when the target size doesn't reach
  - nvme: copy firmware_rev on each init
  - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
  - can: bcm: check the result of can_send() in bcm_can_tx()
  - xfrm: Update ipcomp_scratches with NULL when freed
  - tcp: annotate data-race around tcp_md5sig_pool_populated
  - tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
  - ext4: fix null-ptr-deref in ext4_write_info
  - Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
  - ima: Free the entire rule if it fails to parse
  - ima: Free the entire rule when deleting a list of rules
  - ima: Have the LSM free its audit rule
  - mm/migrate_device.c: flush TLB while holding PTL
  - mm: prevent page_frag_alloc() from corrupting the memory
  - mm/page_alloc: fix race condition between build_all_zonelists and page allocation
  - net: team: Unsync device addresses on ndo_stop
  - mm/slub: fix to return errno if kmalloc() fails
  - of: fdt: fix off-by-one error in unflatten_dt_nodes()


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2211.5.0.0178
changelog:
  - svm: Delete unused ioctl command
  - Revert "posix-cpu-timers: Make timespec to nsec conversion safe"
  - block: limit request dispatch loop duration
  - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM
  - Bluetooth: L2CAP: Fix attempting to access uninitialized memory
  - block: check flags of claimed slave bdev to fix uaf for bd_holder_dir


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2211.6.0.0179
changelog:
  - x86/tsc: use topology_max_packages() in tsc watchdog check
  - scsi: hisi_sas: Set iptt aborted flag when receiving an abnormal CQ
  - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2212.1.0.0180
changelog:
  - !272 [openEuler-1.0-LTS] Add MWAIT Cx support for Zhaoxin CPUs.
  - Bluetooth: L2CAP: Fix u8 overflow
  - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
  - l2tp: Serialize access to sk_user_data with sk_callback_lock
  - !288 Add support for ConnectX6 Lx and ConnectX6Dx with openEuler inbox driver
  - net/mlx5: Update the list of the PCI supported devices
  - net/mlx5: Update the list of the PCI supported devices
  - drivers: net: slip: fix NPD bug in sl_tx_timeout()
  - staging: rtl8712: fix use after free bugs
  - Add MWAIT Cx support for Zhaoxin CPUs.


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2212.2.0.0181
changelog:
  - mm/sharepool: Fix a double free problem caused by init_local_group
  - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()
  - macvlan: enforce a consistent minimal mtu
  - net: macvlan: fix memory leaks of macvlan_common_newlink
  - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
  - net: gso: fix panic on frag_list with mixed head alloc types
  - tcp/udp: Make early_demux back namespacified.
  - ipv6: fix WARNING in ip6_route_net_exit_late()
  - net, neigh: Fix null-ptr-deref in neigh_table_clear()
  - tcp: fix indefinite deferral of RTO with SACK reneging
  - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed
  - serial: 8250: Flush DMA Rx on RLSI
  - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs
  - capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
  - security: commoncap: fix -Wstringop-overread warning
  - ring_buffer: Do not deactivate non-existant pages
  - ftrace: Fix null pointer dereference in ftrace_add_mod()
  - ftrace: Optimize the allocation for mcount entries
  - kprobe: reverse kp->flags when arm_kprobe failed
  - mm: fs: initialize fsdata passed to write_begin/write_end interface
  - nfs4: Fix kmemleak when allocate slot failed
  - kernfs: fix use-after-free in __kernfs_remove
  - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
  - mm: /proc/pid/smaps_rollup: fix no vma's null-deref
  - signal handling: don't use BUG_ON() for debugging
  - ida: don't use BUG_ON() for debugging


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2212.3.0.0182
changelog:
  - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
  - Bluetooth: L2CAP: Fix build errors in some archs
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put
  - hv_netvsc: Add check for kvmalloc_array
  - xen/netback: don't call kfree_skb() with interrupts disabled
  - xen/netback: fix build warning
  - xen/netback: Ensure protocol headers don't fall in the non-linear area
  - !273 [openEuler-1.0-LTS] Fix mouse enumeration issue after wakeup from s4
  - arm64: fix a concurrency issue in emulation_proc_handler()
  - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
  - sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos
  - media: mceusb: Use new usb_control_msg_*() routines
  - media: mceusb: fix control-message timeouts
  - USB: add usb_control_msg_send() and usb_control_msg_recv()
  - Fix mouse enumeration issue after wakeup from s4


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2212.4.0.0183
changelog:
  - dm thin: Use last transaction's pmd->root when commit failed
  - drm: mali-dp: potential dereference of null pointer
  - power: supply: wm8350-power: Add missing free in free_charger_irq
  - sched: Reinit task's vruntime if a task sleep over 200 days
  - media: dvb-core: Fix UAF due to refcount races at releasing
  - drm/amdkfd: Check for null pointer after calling kmemdup
  - !325 Support enabling dirty log gradually in small chunks
  - KVM: arm64: Support enabling dirty log gradually in small chunks
  - KVM: x86: enable dirty log gradually in small chunks
  - KVM: Introduce KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2
  - KVM: Fix kvm_clear_dirty_log_protect off-by-(minus-)one
  - KVM: Fix the bitmap range to copy during clear dirty
  - kvm_main: fix some comments
  - KVM: fix KVM_CLEAR_DIRTY_LOG for memory slots of unaligned size
  - Revert "KVM: Eliminate extra function calls in kvm_get_dirty_log_protect()"
  - KVM: validate userspace input in kvm_clear_dirty_log_protect()
  - kvm: introduce manual dirty log reprotect
  - kvm: rename last argument to kvm_get_dirty_log_protect
  - kvm: make KVM_CAP_ENABLE_CAP_VM architecture agnostic


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2301.3.0.0184
changelog:
  - arm64: Kconfig: default unset ARCH_LLC_128_LINE_SIZE
  - mm/sharepool: clean up ABI breakage
  - timekeeping: Avoiding false sharing in field access of tk_core
  - mm/hwpoison: put page in already hwpoisoned case with MF_COUNT_INCREASED
  - mm/memory-failure.c: fix race with changing page more robustly
  - mm,memory_failure: always pin the page in madvise_inject_error
  - kobject: Fix slab-out-of-bounds in fill_kobj_path()
  - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access()
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
  - mm/sharepool: Charge Buddy hugepage to memcg


author: Zheng Zengkai <zhengzengkai@huawei.com> - 4.19.90-2301.5.0.0185
changelog:
  - USB: Fix kABI for usb_device->reset_in_progress
  - rndis_wlan: Prevent buffer overflow in rndis_query_oid
  - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
  - ima: Directly assign the ima_default_policy pointer to ima_rules
  - driver core: Don't probe devices after bus_type.match() probe deferral
  - KEYS: trusted: Fix migratable=1 failing
  - certs: Fix blacklist flag type confusion
  - crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  - ipc/sem: Fix dangling sem_array access in semtimedop race
  - ipv6: avoid use-after-free in ip6_fragment()
  - nvme initialize core quirks before calling nvme_init_subsystem
  - memcg: fix possible use-after-free in memcg_write_event_control()
  - x86/ioremap: Fix page aligned size calculation in __ioremap_caller()
  - nvme: restrict management ioctls to admin
  - arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72
  - arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors
  - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
  - net: tun: Fix use-after-free in tun_detach()
  - of: property: decrement node refcount in of_fwnode_get_reference_args()
  - af_key: Fix send_acquire race with pfkey_register
  - audit: fix undefined behavior in bit shift for AUDIT_BIT
  - USB: core: Fix RST error in hub.c
  - USB: core: Prevent nested device-reset calls
  - ima: Do not print policy rule with inactive LSM labels
  - lsm: Resolve KABI changes on lsm_notifier
  - ima: Evaluate error in init_ima()
  - ima: ima/lsm policy rule loading logic bug fixes
  - ima: Handle -ESTALE returned by ima_filter_rule_match()
  - ima: use the lsm policy update notifier
  - LSM: switch to blocking policy update notifiers
  - mm/hwpoison: do not lock page again when me_huge_page() successfully recovers


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2301.6.0.0186
changelog:
  - bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal
  - of/fdt: Don't calculate initrd size from DT if start > end
  - lib/cmdline: avoid page fault in next_arg
  - genirq: Introduce warn log when irq be reentrant
  - net: sched: disallow noqueue for qdisc classes
  - net: sched: atm: dont intepret cls results when asked to drop
  - block: check 'bd_super' before rescanning partition
  - net: sched: cbq: dont intepret cls results when asked to drop
  - swapfile: fix soft lockup in scan_swap_map_slots
  - Huawei BMA: Fix iBMA driver bug


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2302.1.0.0187
changelog:
  - ring-buffer: Fix race between reset page and reading page
  - block: don't allow a disk link holder to itself
  - ext4: fix use-after-free in ext4_orphan_cleanup
  - ext4: lost matching-pair of trace in ext4_truncate
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
  - mm/swapfile: add cond_resched() in get_swap_pages()
  - hugetlbfs: don't delete error page from pagecache
  - mm: hwpoison: refactor refcount check handling
  - dhugetlb: set DYNAMIC_HUGETLB to y for hulk_defconfig
  - dhugetlb: use enable_dhugetlb to disable huge_memory
  - dhugetlb: skip dissolve hugepage belonging to dynamic hugetlb
  - dhugetlb: only support 1G/2M hugepage and ARM64_4K_PAGES
  - dhugetlb: isolate dynamic hugetlb code
  - dhugetlb: backport dynamic hugetlb feature
  - !344 mm: fix false-positive OVERCOMMIT_GUESS failures
  - cfq: fix memory leak for cfqq
  - mm: fix false-positive OVERCOMMIT_GUESS failures


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2302.3.0.0188
changelog:
  - block, bfq: switch 'bfqg->ref' to use atomic refcount apis
  - x86/bugs: Flush IBP in ib_prctl_set()
  - media: vivid: fix compose size exceed boundary
  - cifs: do not include page data when checking signature
  - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
  - net: stream: purge sk_error_queue in sk_stream_kill_queues()
  - net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
  - ext4: fix deadlock due to mbcache entry corruption
  - mbcache: automatically delete entries from cache on freeing
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
  - mm/khugepaged: fix GUP-fast interaction by sending IPI
  - mm: gup: fix the fast GUP race against THP collapse
  - prlimit: do_prlimit needs to have a speculation check
  - arm64: cmpxchg_double*: hazard against entire exchange variable
  - net/ulp: prevent ULP without clone op from entering the LISTEN status
  - driver core: Fix bus_type.match() error handling in __driver_attach()
  - md: fix a crash in mempool_free
  - bpf: pull before calling skb_postpull_rcsum()
  - SUNRPC: ensure the matching upcall is in-flight upon downcall
  - ovl: Use ovl mounter's fsuid and fsgid in ovl_link()
  - pnode: terminate at peers of source
  - cifs: Fix uninitialized memory read for smb311 posix symlink create
  - device_cgroup: Roll back to original exceptions after copy failure
  - PCI/sysfs: Fix double free in error path
  - PCI: Fix pci_device_is_present() for VFs by checking PF
  - ipmi: fix use after free in _ipmi_destroy_user()
  - ima: Fix a potential NULL pointer access in ima_restore_measurement_list
  - ipmi: fix long wait in unload when IPMI disconnect
  - binfmt: Fix error return code in load_elf_fdpic_binary()
  - chardev: fix error handling in cdev_device_add()
  - mrp: introduce active flags to prevent UAF when applicant uninit
  - bpf: make sure skb->len != 0 when redirecting to a tunneling device
  - ipmi: fix memleak when unload ipmi driver
  - ACPICA: Fix error code path in acpi_ds_call_control_method()
  - skbuff: Account for tail adjustment during pull operations
  - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle.
  - serial: amba-pl011: avoid SBSA UART accessing DMACR register
  - class: fix possible memory leak in __class_register()
  - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
  - blktrace: Fix output non-blktrace event when blk_classic option enabled
  - SUNRPC: Fix missing release socket in rpc_sockname()
  - bonding: uninitialized variable in bond_miimon_inspect()
  - pinctrl: pinconf-generic: add missing of_node_put()
  - ima: Fix misuse of dereference of pointer in template_desc_init_fields()
  - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed
  - blk-mq: fix possible memleak when register 'hctx' failed
  - perf: Fix possible memleak in pmu_dev_alloc()
  - cpuidle: dt: Return the correct numbers of parsed idle states
  - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP
  - pstore/ram: Fix error return code in ramoops_probe()
  - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()
  - sched/rt: Optimize checking group RT scheduler constraints
  - md: protect md_unregister_thread from reentrancy
  - hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
  - lib/list_debug.c: Detect uninitialized lists
  - crypto: tcrypt - avoid signed overflow in byte count
  - mm: sharepool: fix hugepage_rsvd count increase error
  - config: enbale irq pending config for openeuler
  - genirq: introduce CONFIG_GENERIC_PENDING_IRQ_FIX_KABI
  - irqchip/gic-v3-its: introduce CONFIG_GENERIC_PENDING_IRQ
  - md: fix uaf in md_wakeup_thread
  - genirq: add printk safe in irq context
  - jbd2: Fix data missing when reusing bh which is ready to be checkpointed
  - x86/unwind: Fix orc entry for paravirt {save,restore}_fl
  - cifs: sanitize multiple delimiters in prepath
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2302.4.0.0189
changelog:
  - !213  net: bonding: Inherit MPLS features from slave devices
  - x86/unwind: Fix check_paravirt() calls orc_find() before declaration
  - dhugetlb: set hpool to NULL for cont-bit hugepage
  - arm64/ascend: Delete CONFIG_ASCEND_AUTO_TUNING_HUGEPAGE in hulk_defconfig
  - arm64/ascend: Delete unused feature auto-tuning hugepage
  - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
  - net: bridge: mcast: add and enforce query interval minimum
  - net: bridge: mcast: add and enforce startup query interval minimum
  - !396 anolis: bond: broadcast ARP or ND messages to all slaves
  - anolis: bond: broadcast ARP or ND messages to all slaves
  - net: bonding: Inherit MPLS features from slave devices


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2302.5.0.0190
changelog:
  - !423 genirq bugfix for arm64
  - genirq: Remove irqd_irq_disabled in __irq_move_irq
  - !422 iscsi bugfixes backport
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
  - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
  - !420 backport CVEs and bugfixes
  - net: mpls: fix stale pointer if allocation fails during device rename
  - nbd: fix assignment error for first_minor in nbd_dev_add
  - selinux: further adjust init order for cred_* hooks
  - selinux: further adjust init order for file_alloc_security hook
  - !415 mainline bugfix backport
  - selinux: reorder hooks to make runtime disable less broken
  - evm: Fix a small race in init_desc()
  - evm: Check also if *tfm is an error pointer in init_desc()
  - iommu: Properly export iommu_group_get_for_dev()
  - of: resolver: Add of_node_put() before return and break
  - of: unittest: Add of_node_put() before return
  - drivers/iommu: Allow IOMMU bus ops to be unregistered
  - drivers/iommu: Export core IOMMU API symbols to permit modular drivers
  - component: do not dereference opaque pointer in debugfs
  - ipmi: use %*ph to print small buffer
  - crypto: algif_skcipher - Use chunksize instead of blocksize
  - crypto: algif_skcipher - EBUSY on aio should be an error
  - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete()
  - dhugetlb: isolate hwpoison hugepage when release
  - mm/sharepool: Fix null-pointer-deference in sp_free_area


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2303.1.0.0191
changelog:
  - HID: check empty report_list in hid_validate_values()
  - dhugetlb: use mutex lock in update_reserve_pages()
  - ntfs: fix out-of-bounds read in ntfs_attr_find()
  - ntfs: fix use-after-free in ntfs_ucsncmp()
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
  - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
  - netfilter: nf_tables: fix null deref due to zeroed list head
  - tcp: Fix listen() regression in 5.15.88.
  - tap: tap_open(): correctly initialize socket uid
  - tun: tun_chr_open(): correctly initialize socket uid
  - net: add sock_init_data_uid()
  - rds: rds_rm_zerocopy_callback() use list_first_entry()


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2303.3.0.0192
changelog:
  - scsi: cancel the inflight async device probe when remove scsi_target
  - scsi: fix use-after-free problem in scsi_remove_target
  - HID: asus: use spinlock to safely schedule workers
  - HID: asus: use spinlock to protect concurrent accesses
  - HID: asus: Remove check for same LED brightness on set
  - blk-wbt: don't enable throttling if default elevator is bfq
  - block: Fix kabi broken by "block: split .sysfs_lock into two locks"
  - block: fix comment and add lockdep assert
  - block: don't release queue's sysfs lock during switching elevator
  - block: fix race between switching elevator and removing queues
  - block: split .sysfs_lock into two locks
  - crypto: rsa-pkcs1pad - restore signature length check
  - fs/proc: task_mmu.c: don't read mapcount for migration entry
  - migrate: hugetlb: check for hugetlb shared PMD in node migration
  - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
  - ipv6: Fix tcp socket connection with DSCP.
  - ipv6: Fix datagram socket connection with DSCP.
  - aio: fix mremap after fork null-deref
  - bpf: Always return target ifindex in bpf_fib_lookup
  - serial: 8250_dma: Fix DMA Rx rearm race
  - serial: 8250_dma: Fix DMA Rx completion race
  - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
  - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
  - netlink: annotate data races around sk_state
  - netlink: annotate data races around dst_portid and dst_group
  - netlink: annotate data races around nlk->portid
  - netlink: remove hash::nelems check in netlink_insert
  - net: fix UaF in netns ops registration error path
  - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state
  - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
  - binder: Address corner cases in deferred copy and fixup
  - binder: fix pointer cast warning
  - binder: defer copies of pre-patched txn data
  - binder: read pre-translated fds from sender buffer
  - binder: avoid potential data leakage when copying txn
  - binder: fix handling of error during copy
  - binder: use cred instead of task for getsecid
  - binder: don't detect sender/target during buffer cleanup
  - binder: make sure fd closes complete
  - binder: Remove bogus warning on failed same-process transaction
  - binder: fix incorrect calculation for num_valid
  - binder: Prevent repeated use of ->mmap() via NULL mapping
  - binder: Don't modify VMA bounds in ->mmap handler
  - binder: Set end of SG buffer area properly.
  - binder: return errors from buffer copy functions
  - binder: check for overflow when alloc for security context
  - binder: fix BUG_ON found by selinux-testsuite
  - binder: fix handling of misaligned binder object
  - binder: use userspace pointer as base of buffer space
  - binder: remove user_buffer_offset
  - binder: remove kernel vm_area for buffer space
  - binder: avoid kernel vm_area for buffer fixups
  - binder: add function to copy binder object from buffer
  - binder: add functions to copy to/from binder buffers
  - binder: create userspace-to-binder-buffer copy function
  - binder: fix use-after-free due to ksys_close() during fdget()
  - binder: fix kerneldoc header for struct binder_buffer
  - binder: create node flag to request sender's security context
  - binder: Add BINDER_GET_NODE_INFO_FOR_REF ioctl.
  - binder: use standard functions to allocate fds
  - block: fix kabi change since add bd_write_openers and bd_part_write_openers
  - block: add info when opening an exclusive opened block device for write
  - block: add info when opening a write opend block device exclusively
  - Revert "block: add info when opening an exclusive opened block device for write"
  - Revert "block: add info when opening a write opend block device exclusively"
  - ext4: fix WARNING in mb_find_extent
  - sctp: fail if no bound addresses can be used for a given scope


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2303.4.0.0193
changelog:
  - tipc: add an extra conn_get in tipc_conn_alloc
  - tipc: set con sock in tipc_conn_alloc
  - mm/oom_kill.c: fix oom_cpuset_eligible() comment
  - oom: decouple mems_allowed from oom_unkillable_task
  - mm, oom: remove redundant task_in_mem_cgroup() check
  - mm, oom: refactor dump_tasks for memcg OOMs
  - block: Fix wrong offset in bio_truncate()
  - fs: move guard_bio_eod() after bio_set_op_attrs
  - block: add bio_truncate to fix guard_bio_eod
  - mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
  - cifs: Fix use-after-free in rdata->read_into_pages()
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2303.5.0.0194
changelog:
  - net/sched: tcindex: search key must be 16 bits
  - net/sched: tcindex: update imperfect hash filters respecting rcu
  - rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer()
  - x86/speculation: Add RSB VM Exit protections
  - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts
  - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current
  - x86/speculation: Disable RRSBA behavior
  - x86/bugs: Add Cannon lake to RETBleed affected CPU list
  - x86/cpu/amd: Enumerate BTC_NO
  - x86/common: Stamp out the stepping madness
  - x86/speculation: Fill RSB on vmexit for IBRS
  - KVM: VMX: Fix IBRS handling after vmexit
  - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS
  - x86/speculation: Remove x86_spec_ctrl_mask
  - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit
  - x86/speculation: Fix SPEC_CTRL write on SMT state change
  - x86/speculation: Fix firmware entry SPEC_CTRL handling
  - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n
  - x86/speculation: Change FILL_RETURN_BUFFER to work with objtool
  - intel_idle: Disable IBRS during long idle
  - x86/bugs: Report Intel retbleed vulnerability
  - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation()
  - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS
  - x86/bugs: Optimize SPEC_CTRL MSR writes
  - x86/entry: Add kernel IBRS implementation
  - x86/entry: Remove skip_r11rcx
  - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value
  - x86/bugs: Add AMD retbleed= boot parameter
  - x86/bugs: Report AMD retbleed vulnerability
  - x86/cpufeatures: Move RETPOLINE flags to word 11
  - x86/cpu: Add a steppings field to struct x86_cpu_id
  - x86/cpu: Add consistent CPU match macros
  - x86/devicetable: Move x86 specific macro out of generic code
  - x86/cpufeature: Fix various quality problems in the <asm/cpu_device_hd.h> header
  - x86/cpufeature: Add facility to check for min microcode revisions
  - Revert "x86/cpu: Add a steppings field to struct x86_cpu_id"
  - Revert "x86/speculation: Add RSB VM Exit protections"
  - x86/nospec: Fix i386 RSB stuffing
  - ext4: make sure fs error flag setted before clear journal error
  - ext4: commit super block if fs record error when journal record without error
  - hugetlb: fix hugepages_setup when deal with pernode
  - hugetlb: fix wrong use of nr_online_nodes
  - tty: fix out-of-bounds access in tty_driver_lookup_tty()
  - arm64: errata: Remove AES hwcap for COMPAT tasks
  - kernel: Initialize cpumask before parsing
  - genirq: Disable interrupts for force threaded handlers
  - softirq: Don't try waking ksoftirqd before it has been spawned
  - scsi: hisi_sas: Clear interrupt status when exiting channel int0 for v3 hw
  - scsi: hisi_sas: Handle NCQ error when IPTT is valid
  - scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list
  - act_mirred: use the backlog for nested calls to mirred ingress
  - net/sched: act_mirred: refactor the handle of xmit
  - net: sched: don't expose action qstats to skb_tc_reinsert()
  - net: sched: protect against stack overflow in TC act_mirred
  - net: sched: refactor reinsert action
  - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  - ext4: fix another off-by-one fsmap error on 1k block filesystems


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2303.6.0.0195
changelog:
  - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
  - ftrace: Fix invalid address access in lookup_rec() when index is 0
  - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
  - scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
  - RDMA/core: Don't infoleak GRH fields
  - !480 mm  bugfixes backport
  - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
  - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
  - cgroup/cpuset: Change cpuset_rwsem and hotplug lock order
  - mm: memcontrol: fix cannot alloc the maximum memcg ID


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2304.1.0.0196
changelog:
  - ext4: Fix i_disksize exceeding i_size problem in paritally written case
  - ext4: ext4_put_super: Remove redundant checking for 'sbi->s_journal_bdev'
  - ext4: Fix reusing stale buffer heads from last failed mounting
  - kvm: initialize all of the kvm_debugregs structure before sending it to userspace
  - net: virtio_net_hdr_to_skb: count transport header in UFO
  - net: be more gentle about silly gso requests coming from user
  - ext4: fix race between writepages and remount


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2304.3.0.0197
changelog:
  - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach
  - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
  - !566 linux-4.19.y bugfixes backport
  - bpf: add missing header file include
  - uaccess: Add speculation barrier to copy_from_user()
  - random: always mix cycle counter in add_latent_entropy()
  - x86/mm: Fix use of uninitialized buffer in sme_enable()
  - ext4: fail ext4_iget if special inode unallocated
  - ext4: zero i_disksize when initializing the bootloader inode
  - irqdomain: Drop bogus fwspec-mapping error handling
  - irqdomain: Fix disassociation race
  - irqdomain: Fix association race
  - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range
  - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic
  - x86/bugs: Reset speculation control settings on init
  - timers: Prevent union confusion from unexpected restart_syscall()
  - crypto: rsa-pkcs1pad - Use akcipher_request_complete
  - crypto: seqiv - Handle EBUSY correctly
  - ACPI: battery: Fix missing NUL-termination with large strings
  - ACPICA: nsrepair: handle cases without a return value correctly
  - genirq: Fix the return type of kstat_cpu_irqs_sum()
  - ACPI: NFIT: fix a potential deadlock during NFIT teardown
  - alarmtimer: Prevent starvation by small intervals and SIG_IGN
  - ring-buffer: Fix race while reader and writer are on the same page
  - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
  - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
  - cgroup/cpuset: Change cpuset_rwsem and hotplug lock order
  - Revert "cgroup/cpuset: Change cpuset_rwsem and hotplug lock order"
  - Revert "cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock"
  - Revert "cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()"
  - block: fix wrong mode for blkdev_put() from disk_scan_partitions()
  - block: fix scan partition for exclusively open device again
  - block: fix kabi broken in ioctl.c
  - block: merge disk_scan_partitions and blkdev_reread_part
  - block: cleanup partition scanning in register_disk
  - block: Revert "block: check 'bd_super' before rescanning partition"
  - md: fix kabi broken in struct mddev
  - md: use interruptible apis in idle/frozen_sync_thread
  - md: wake up 'resync_wait' at last in md_reap_sync_thread()
  - md: refactor idle/frozen_sync_thread()
  - md: add a mutex to synchronize idle and frozen in action_store()
  - md: refactor action_store() for 'idle' and 'frozen'
  - mm: mem_reliable: Initialize reliable_nr_page when mm_init()
  - md: fix soft lockup in status_resync
  - md: don't update recovery_cp when curr_resync is ACTIVE
  - md: Ensure resync is reported after it starts
  - md: Use enum for overloaded magic numbers used by mddev->curr_resync
  - loop: Add parm check in loop_control_ioctl
  - block/wbt: enable wbt after switching cfq to other schedulers
  - Fix double fget() in vhost_net_set_backend()
  - sched/fair: Sanitize vruntime of entity being migrated
  - sched/fair: sanitize vruntime of entity being placed
  - Revert "sched: Reinit task's vruntime if a task sleep over 200 days"
  - btrfs: fix race between quota disable and quota assign ioctls


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2304.4.0.0198
changelog:
  - KVM: nVMX: add missing consistency checks for CR0 and CR4
  - drm/vmwgfx: Validate the box size for the snooped cursor
  - net/sched: Retire tcindex classifier
  - Documentation/hw-vuln: Fix rST warning
  - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
  - KVM: x86: Mitigate the cross-thread return address predictions bug
  - x86/speculation: Identify processors vulnerable to SMT RSB predictions
  - cpu/SMT: create and export cpu_smt_possible()
  - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2304.5.0.0199
changelog:
  - RDMA/hns: Add check for user-configured max_inline_data value
  - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
  - !430 [openEuler-1.0-LTS] ata: sata_zhaoxin: Update Zhaoxin Serial ATA product name
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
  - audit: fix a memleak caused by auditing load module
  - !595 [openEuler-1.0-LTS] iommu/arm-smmu-v3: Fix UAF when handle evt during iommu group removing
  - tcp: restrict net.ipv4.tcp_app_win
  - x86/speculation: Allow enabling STIBP with legacy IBRS
  - iommu/arm-smmu-v3: Fix UAF when handle evt during iommu group removing
  - ata: sata_zhaoxin: Update Zhaoxin Serial ATA product name


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2305.1.0.0200
changelog:
  - ipv6: Fix an uninit variable access bug in __ip6_make_skb()
  - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach()
  - verify_pefile: relax wrapper length check
  - udp6: fix potential access to stale information
  - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()
  - ftrace: Mark get_lock_parent_ip() __always_inline
  - perf/core: Fix the same task check in perf_event_set_output
  - net: don't let netpoll invoke NAPI if in xmit context
  - icmp: guard against too small mtu
  - sched_getaffinity: don't assume 'cpumask_size()' is fully initialized
  - dm stats: check for and propagate alloc_percpu failure
  - dm thin: fix deadlock when swapping to thin device
  - genirq: introduce handle_fasteoi_edge_irq for phytium
  - genirq: introduce handle_fasteoi_edge_irq flow handler
  - Revert "genirq: Remove irqd_irq_disabled in __irq_move_irq"
  - Revert "config: enbale irq pending config for openeuler"
  - Revert "genirq: introduce CONFIG_GENERIC_PENDING_IRQ_FIX_KABI"
  - Revert "irqchip/gic-v3-its: introduce CONFIG_GENERIC_PENDING_IRQ"
  - scsi: dpt_i2o: Remove obsolete driver
  - md: extend disks_mutex coverage
  - md: use msleep() in md_notify_reboot()
  - md: fix double free of mddev->private in autorun_array()
  - block/badblocks: fix badblocks loss when badblocks combine
  - block/badblocks: fix the bug of reverse order
  - block: Only set bb->changed when badblocks changes
  - md: fix sysfs duplicate file while adding rdev
  - md: replace invalid function flush_rdev_wq() with flush_workqueue()
  - bonding: Fix memory leak when changing bond type to Ethernet
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern
  - timers/nohz: Last resort update jiffies on nohz_full IRQ entry
  - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
  - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
  - net: qcom/emac: Fix use after free bug in emac_remove due to race condition
  - ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
  - ext4: only update i_reserved_data_blocks on successful block allocation
  - mm: mem_reliable: Use zone_page_state to count free reliable pages
  - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
  - sctp: leave the err path free in sctp_stream_init to sctp_stream_free
  - RDMA/core: Refactor rdma_bind_addr
  - Revert "RDMA/cma: Simplify rdma_resolve_addr() error flow"
  - fix kabi broken due to import new inode operation get_inode_acl
  - ovl: enable RCU'd ->get_acl()
  - vfs: add rcu argument to ->get_acl() callback


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2305.2.0.0201
changelog:
  - net: sctp: update stream->incnt after successful allocation of stream_in
  - !741 [openEuler-1.0-LTS] openeuler_defconfig: Add configuration items for zhaoxin
  - !752 arm64/mpam: modify mpam irq register error log
  - arm64/mpam: modify mpam irq register error log
  - !437 [openEuler-1.0-LTS] USB: HCD: Fix URB giveback issue in tasklet function
  - openeuler_defconfig: Add configuration items for zhaoxin
  - bluetooth: Perform careful capability checks in hci_sock_ioctl()
  - netrom: Fix use-after-free caused by accept on already connected socket
  - !689 Fix compile error in allyesconfigs
  - !441 [openEuler-1.0-LTS] Add support for Zhaoxin SM3 and SM4 instruction
  - !438 [openEuler-1.0-LTS] Add Zhaoxin I2C driver
  - i2c: Add Zhaoxin I2C driver
  - !432 [openEuler-1.0-LTS] Add Zhaoxin ACE driver
  - mm: memcontrol: switch to rcu protection in drain_all_stock()
  - !429 [openEuler-1.0.-LTS] ACPI, x86: Improve Zhaoxin processors support for NONSTOP TSC
  - !428 [openEuelr-1.0-LTS] x86/acpi/cstate: Optimize ARB_DISABLE on Centaur CPUs
  - !687 [HUST CSE] fix a use-after-free bug in uncore_pci_remove()
  - scsi/hifc: Fix compile error in allyesconfigs
  - net/hinic: Fix compile error in allyesconfigs
  - x86/perf: fix use-after-free bug in uncore_pci_remove()
  - crypto: Driver for Zhaoxin GMI SM4 Block Cipher Algorithm
  - crypto: Driver for Zhaoxin GMI SM3 Secure Hash algorithm
  - !433 [openEuler-1.0-LTS] Add support of turbo boost control interface for Zhaoxin CPUs
  - !431 [openEuler-1.0-LTS] Add Zhaoxin rng driver
  - crypto: Add Zhaoxin ACE driver
  - cpufreq: ACPI: Add Zhaoxin/Centaur turbo boost control interface support
  - hwrng: Add Zhaoxin rng driver
  - USB: HCD: Fix URB giveback issue in tasklet function
  - ACPI, x86: Improve Zhaoxin processors support for NONSTOP TSC
  - x86/acpi/cstate: Optimize ARB_DISABLE on Centaur CPUs


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2305.3.0.0202
changelog:
  - netfilter: nf_tables: deactivate anonymous set from preparation phase
  - x86/msr-index: make SPEC_CTRL_IBRS assembler-portable
  - xfs: verify buffer contents when we skip log replay
  - !586 [openEuelr-1.0-LTS] kvm: arm64: fix some pvsched bugs
  - kvm: arm64: fix some pvsched bugs


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2305.4.0.0203
changelog:
  - !841 【openEuler-1.0-LTS】cpufreq: conservative: Add a switch to enable fast mode
  - x86/pm: Fix false positive kmemleak report in msr_build_context()
  - drm: Lock pointer access in drm_master_release()
  - drm: Fix use-after-free read in drm_getunique()
  - cpufreq: conservative: Add a switch to enable fast mode
  - of: overlay: kmemleak in dup_and_fixup_symbol_prop()
  - iommu/dma: Fix MSI reservation allocation
  - lib/stackdepot.c: fix global out-of-bounds in stack_slabs
  - rcu: Use *_ONCE() to protect lockless ->expmask accesses
  - iommu: Don't print warning when IOMMU driver only supports unmanaged domains
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2306.1.0.0204
changelog:
  - !932 [sync] PR-922:  jbd2: fix checkpoint inconsistent
  - jbd2: remove t_checkpoint_io_list
  - jbd2: recheck chechpointing non-dirty buffer
  - irqchip/gic-v3-its: Balance initial LPI affinity across CPUs
  - irqchip/gic-v3-its: Track LPI distribution on a per CPU basis
  - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
  - net: sched: fix NULL pointer dereference in mq_attach


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2306.3.0.0205
changelog:
  - arm64: Add AMPERE1 to the Spectre-BHB affected list
  - sctp: Call inet6_destroy_sock() via sk->sk_destruct().
  - net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues().
  - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
  - sched: smart grid: init sched_grid_qos structure on QOS purpose
  - sched: Introduce smart grid scheduling strategy for cfs
  - ipmi: fix SSIF not responding under certain cond.
  - ipmi_ssif: Rename idle state and check
  - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock
  - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt().
  - nohz: Add TICK_DEP_BIT_RCU
  - perf/core: Fix hardlockup failure caused by perf throttle
  - of: Fix modalias string generation
  - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb()
  - crypto: drbg - Only fail when jent is unavailable in FIPS mode
  - crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors
  - net/packet: convert po->auxdata to an atomic flag
  - net/packet: convert po->origdev to an atomic flag
  - ring-buffer: Sync IRQ works before buffer destruction
  - dccp: Call inet6_destroy_sock() via sk->sk_destruct().
  - inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy().
  - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct().
  - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM).
  - lib/cmdline: fix get_option() for strings starting with hyphen
  - of: overlay: fix for_each_child.cocci warnings
  - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list
  - fs: hfsplus: fix UAF issue in hfsplus_put_super
  - block: Fix the partition start may overflow in add_partition()
  - block: refactor blkpg_ioctl
  - nbd: get config_lock before sock_shutdown
  - ipv6: sr: fix out-of-bounds read when setting HMAC data.
  - dm: add disk before alloc dax
  - dm thin: Fix ABBA deadlock by resetting dm_bufio_client


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2306.4.0.0206
changelog:
  - sched: Adjust few parameters range for smart grid
  - sched: clear credit count in error branch
  - sched: Fix memory leak on error branch
  - sched: fix dereference NULL pointers
  - sched: Fix timer storm for smart grid
  - memstick: r592: Fix UAF bug in r592_remove due to race condition
  - fbcon: Check font dimension limits
  - sched/rt: Fix possible warn when push_rt_task
  - !1152 pci: workaround multiple functions can be assigned to only one VM
  - pci: workaround multiple functions can be assigned to only one VM
  - sched: Fix negative count for jump label
  - sched: Fix possible deadlock in tg_set_dynamic_affinity_mode
  - sched: fix WARN found by deadlock detect
  - sched: fix smart grid usage count
  - sched: Add static key to reduce noise
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
  - !1134 【openEuler-1.0-LTS】cpufreq:conservative: Fix load in fast_dbs_update()
  - firewire: fix potential uaf in outbound_phy_packet_callback()
  - cpufreq: conservative: fix load in fast_dbs_update()


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2306.5.0.0207
changelog:
  - HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  - media: saa7134: fix use after free bug in saa7134_finidev due to race condition
  - config: enable CONFIG_QOS_SCHED_SMART_GRID by default
  - mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition
  - sched: Fix memory leak for smart grid
  - sched: Delete redundant updates to p->prefer_cpus
  - nbd: fix incomplete validation of ioctl arg
  - nbd: validate the block size in nbd_set_size
  - relayfs: fix out-of-bounds access in relay_file_read
  - kernel/relay.c: fix read_pos error when multiple readers
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt()


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2306.7.0.0208
changelog:
  - sched: Fix null pointer derefrence for sd->span
  - scsi: hisi_sas: Fix Null point exception after call debugfs_remove_recursive()
  - scsi: hisi_sas: Fix normally completed I/O analysed as failed
  - drm/msm/dpu: Add check for pstates
  - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2307.3.0.0209
changelog:
  - !1361 fix CVE-2023-1295
  - io_uring: get rid of intermediate IORING_OP_CLOSE stage
  - fs: provide locked helper variant of close_fd_get_file()
  - file: Rename __close_fd_get_file close_fd_get_file
  - Remove DECnet support from kernel
  - net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
  - net: tcp: fix kabi breakage in struct sock
  - tcp: deny tcp_disconnect() when threads are waiting
  - ping6: Fix send to link-local addresses with VRF.
  - net: sched: fix possible refcount leak in tc_chain_tmplt_add()
  - rfs: annotate lockless accesses to RFS sock flow table
  - rfs: annotate lockless accesses to sk->sk_rxhash
  - xfrm: Check if_id in inbound policy/secpath match
  - udp6: Fix race condition in udp6_sendmsg & connect
  - tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set
  - af_packet: do not use READ_ONCE() in packet_bind()
  - af_packet: Fix data-races of pkt_sk(sk)->num.
  - ipv{4,6}/raw: fix output xfrm lookup wrt protocol
  - ipv6: Fix out-of-bounds access in ipv6_find_tlv()
  - net: fix skb leak in __skb_tstamp_tx()
  - udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
  - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
  - af_key: Reject optional tunnel/BEET mode templates in outbound policies
  - net: Catch invalid index in XPS mapping
  - af_unix: Fix data races around sk->sk_shutdown.
  - af_unix: Fix a data race of sk->sk_receive_queue->qlen.
  - net: datagram: fix data-races in datagram_poll()
  - tcp: factor out __tcp_close() helper
  - net: annotate sk->sk_err write from do_recvmmsg()
  - netlink: annotate accesses to nlk->cb_running
  - quota: simplify drop_dquot_ref()
  - quota: fix dqput() to follow the guarantees dquot_srcu should provide
  - quota: add new helper dquot_active()
  - quota: rename dquot_active() to inode_quota_active()
  - quota: factor out dquot_write_dquot()
  - quota: add dqi_dirty_list description to comment of Dquot List Management
  - quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list
  - kernel/extable.c: use address-of operator on section symbols
  - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
  - x86/mm: Avoid incomplete Global INVLPG flushes
  - sched: Fix KCSAN noinstr violation
  - serial: 8250: Reinit port->pm on port specific driver unbind
  - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects
  - ACPI: EC: Fix oops when removing custom query handlers
  - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release()
  - lib: cpu_rmap: Avoid use after free on rmap->obj array entries
  - ext4: improve error recovery code paths in __ext4_remount()
  - scsi: core: Improve scsi_vpd_inquiry() checks
  - PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
  - loop: loop_set_status_from_info() check before assignment
  - loop: Check for overflow while configuring loop
  - Revert "loop: Check for overflow while configuring loop"
  - block: don't set GD_NEED_PART_SCAN if scan partition failed
  - block: return -EBUSY when there are open partitions in blkdev_reread_part
  - blk-wbt: make enable_state more accurate
  - block: Limit number of items taken from the I/O scheduler in one go
  - crypto: cryptd - Protect per-CPU resource by disabling BH.
  - random: fix data race on crng_node_pool
  - x86/kprobes: Fix the error judgment for debug exceptions
  - ext4: turning quotas off if mount failed after enable quotas
  - ext4: forbid commit inconsistent quota data when errors=remount-ro
  - quota: fixup *_write_file_info() to return proper error code
  - ipmi_si: fix a memleak in try_smi_init()
  - net: add vlan_get_protocol_and_depth() helper
  - net: tap: check vlan with eth_type_vlan() method
  - !1317  ext4: Stop trying writing pages if no free blocks generated
  - !1323  jbd2: fix several checkpoint
  - jbd2: fix checkpoint cleanup performance regression
  - jbd2: remove __journal_try_to_free_buffer()
  - jbd2: fix a race when checking checkpoint buffer busy
  - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
  - jbd2: remove journal_clean_one_cp_list()
  - nbd: fix null-ptr-dereference while accessing 'nbd->config'
  - nbd: factor out a helper to get nbd_config without holding 'config_lock'
  - nbd: fold nbd config initialization into nbd_alloc_config()
  - ext4: Stop trying writing pages if no free blocks generated
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2307.4.0.0210
changelog:
  - !1435 fix CVE-2023-3117
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  - !1400 [openEuler-1.0-LTS] block: Try to handle busy underlying device on discard
  - !1416  Fix generic/299 fail
  - ext4: Add debug message to notify user space is out of free
  - Revert "ext4: Stop trying writing pages if no free blocks generated"
  - !1404  bpf: cpumap: Fix memory leak in cpu_map_update_elem
  - bpf: cpumap: Fix memory leak in cpu_map_update_elem
  - block: Try to handle busy underlying device on discard
  - !1377 [sync] PR-1376:  jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - !1374  etmem: fix the div 0 problem in swapcache reclaim process
  - !177 net:bonding:support balance-alb interface with vlan to bridge
  - jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - etmem: fix the div 0 problem in swapcache reclaim process
  - bonding: fix reference count leak in balance-alb mode
  - net:bonding:support balance-alb interface with vlan to bridge


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2307.5.0.0211
changelog:
  - !1534 arm64/mpam: fix missing kfree domain's ctrl_val arrray
  - arm64/mpam: fix missing kfree domain's ctrl_val arrray
  - !1529  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - !1474 [openEuler-1.0-LTS] pmu: remove uncore code for Zhaoxin Platform
  - !1498  media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - !1444 ring-buffer: Fix deadloop issue on reading trace_pipe
  - !1469  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - !1472  ipv6/addrconf: fix a potential refcount underflow for idev
  - pmu: remove uncore code for Zhaoxin Platform
  - ipv6/addrconf: fix a potential refcount underflow for idev
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
  - ring-buffer: Fix deadloop issue on reading trace_pipe


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.1.0.0212
changelog:
  - !1571 【openEuler-1.0-LTS】net: hns: fix wrong head when modify the tx feature when sending packets
  - !1570 【openEuler-1.0-LTS】net: hns3: bugfixes for hns3 drivers 2023.07.29
  - net: hns: update hns version to 23.7.1
  - net: hns: fix wrong head when modify the tx feature when sending packets
  - net: hns3: update hns3 version to 23.7.1
  - net: hns3: fix tx timeout issue
  - net: hns3: fix incorrect hw rss hash type of rx packet
  - net: hns3: add barrier in vf mailbox reply process
  - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
  - net: hns3: fix not call nic_call_event() problem when reset failed
  - !1556  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - !1568  net/sched: cls_u32: Fix reference counter leak leading to overflow
  - net/sched: cls_u32: Fix reference counter leak leading to overflow
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - !1549  binder: fix UAF caused by faulty buffer cleanup
  - binder: fix UAF caused by faulty buffer cleanup


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.2.0.0213
changelog:
  - !1699 dm bugfixes backport from mainline
  - !1697  x86/cpu/amd: Add a Zenbleed fix
  - md: Flush workqueue md_rdev_misc_wq in md_alloc()
  - dm: don't lock fs when the map is NULL during suspend or resume
  - dm: don't lock fs when the map is NULL in process of resume
  - dm: requeue IO if mapping table not yet available
  - Revert "dm: make sure dm_table is binded before queue request"
  - dm thin metadata: check fail_io before using data_sm
  - !1662  media: usb: siano: Fix CVE-2023-4132
  - !1696  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
  - x86/cpu/amd: Add a Zenbleed fix
  - !1694 linux-4.19.y bugfixes backport
  - Revert "arm64/mpam: Fix mpam corrupt when cpu online"
  - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys
  - sch_netem: fix issues in netem_change() vs get_dist_table()
  - sch_netem: acquire qdisc lock in netem_change()
  - cgroup: Do not corrupt task iteration when rebinding subsystem
  - !1577  tracing: Fix warning in trace_buffered_event_disable()
  - !1663  tty: fix pid memleak in disassociate_ctty()
  - tty: fix pid memleak in disassociate_ctty()
  - media: usb: siano: Fix warning due to null work_func_t function pointer
  - media: usb: siano: Fix use after free bugs caused by do_submit_urb
  - !1629  can: raw: fix receiver memory leak
  - !1655  can: bcm: Fix UAF in bcm_proc_show()
  - can: bcm: Fix UAF in bcm_proc_show()
  - can: raw: fix lockdep issue in raw_release()
  - can: raw: fix receiver memory leak
  - !1625  Fix host zero page refcount overflow caused by kvm
  - !1595  net: nfc: Fix CVE-2023-3863
  - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE
  - KVM: fix overflow of zero page refcount with ksm running
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local
  - nfc: llcp: simplify llcp_sock_connect() error paths
  - nfc: llcp: nullify llcp_sock->dev on connect() error paths
  - nfc: Fix to check for kmemdup failure
  - tracing: Fix warning in trace_buffered_event_disable()


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.3.0.0214
changelog:
  - !1762  xen/netback: Fix buffer overrun triggered by unusual packet
  - xen/netback: Fix buffer overrun triggered by unusual packet
  - !1761 fix CVE-2023-4194
  - net: tap_open(): set sk_uid from current_fsuid()
  - net: tun_chr_open(): set sk_uid from current_fsuid()
  - !1728  fix CVE-2023-4128
  - !1673  sched: disable sched_autogroup by default
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free
  - !1712  xfrm: add NULL check in xfrm_update_ae_params
  - xfrm: add NULL check in xfrm_update_ae_params
  - sched: disable sched_autogroup by default


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.4.0.0215
changelog:
  - !1831  fix NULL pointer dereference in __nf_nat_mangle_tcp_packet
  - netfilter: nat: fix kabi change
  - netfilter: nat: fix udp checksum corruption
  - netfilter: nat: remove csum_recalc hook
  - !1769  workqueue: Make flush_workqueue() also watch flush_work()
  - !1803  net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
  - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
  - !1767  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
  - workqueue: Assign a color to barrier work items
  - workqueue: Mark barrier work with WORK_STRUCT_INACTIVE
  - workqueue: Change the code of calculating work_flags in insert_wq_barrier()
  - workqueue: Change arguement of pwq_dec_nr_in_flight()
  - workqueue: Rename "delayed" (delayed by active management) to "inactive"
  - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.5.0.0216
changelog:
  - !1863  nbd: pass nbd_sock to nbd_read_reply() instead of index
  - !1638 [openEuler-1.0-LTS] Add support for Hygon model 4h~6h processors
  - !1884  ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
  - !1882  ip6mr: Fix skb_under_panic in ip6mr_cache_report()
  - ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
  - ip6mr: Fix skb_under_panic in ip6mr_cache_report()
  - EDAC/amd64: Add support for Hygon family 18h model 6h
  - x86/amd_nb: Add support for Hygon family 18h model 6h
  - hwmon/k10temp: Add support for Hygon family 18h model 5h
  - EDAC/amd64: Add support for Hygon family 18h model 5h
  - x86/amd_nb: Add support for Hygon family 18h model 5h
  - x86/cpu: Get LLC ID for Hygon family 18h model 5h
  - i2c-piix4: Remove the IMC detecting for Hygon SMBus
  - hwmon/k10temp: Add support for Hygon family 18h model 4h
  - EDAC/mce_amd: Use struct cpuinfo_x86.logical_die_id for Hygon NodeId
  - EDAC/amd64: Adjust address translation for Hygon family 18h model 4h
  - EDAC/amd64: Add support for Hygon family 18h model 4h
  - EDAC/amd64: Get UMC channel from the 6th nibble for Hygon
  - iommu/hygon: Add support for Hygon family 18h model 4h IOAPIC
  - x86/amd_nb: Add northbridge support for Hygon family 18h model 4h
  - x86/amd_nb: Add Hygon family 18h model 4h PCI IDs
  - x86/microcode/hygon: Add microcode loading support for Hygon processors
  - x86/cpu/hygon: Modify the CPU topology deriving method for Hygon
  - x86/MCE/AMD: Use an u64 for bank_map
  - EDAC/mc_sysfs: Increase legacy channel support to 12
  - EDAC/amd64: Add new register offset support and related changes
  - EDAC/amd64: Set memory type per DIMM
  - rtc: mc146818-lib: Fix the AltCentury for AMD platforms
  - EDAC/amd64: Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh
  - EDAC: Add RDDR5 and LRDDR5 memory types
  - hwmon: (k10temp) Remove unused definitions
  - hwmon: (k10temp) Remove residues of current and voltage
  - hwmon: (k10temp) Rework the temperature offset calculation
  - hwmon: (k10temp) Don't show Tdie for all Zen/Zen2/Zen3 CPU/APU
  - x86/cstate: Allow ACPI C1 FFH MWAIT use on Hygon systems
  - x86/topology: Make __max_die_per_package available unconditionally
  - x86/cpu/amd: Set __max_die_per_package on AMD
  - hwmon: (k10temp) Remove support for displaying voltage and current on Zen CPUs
  - EDAC: Add DDR5 new memory type
  - x86/topology: Set cpu_die_id only if DIE_TYPE found
  - EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId
  - x86/CPU/AMD: Save AMD NodeId as cpu_die_id
  - EDAC/amd64: Set proper family type for Family 19h Models 20h-2Fh
  - hwmon: (k10temp) Add support for Zen3 CPUs
  - x86/mce: Increase maximum number of banks to 64
  - hwmon: (k10temp) Define SVI telemetry and current factors for Zen2 CPUs
  - hwmon: (k10temp) Create common functions and macros for Zen CPU families
  - i2c: designware: Add device HID for Hygon I2C controller
  - hwmon: (k10temp) make some symbols static
  - hwmon: (k10temp) Reorganize and simplify temperature support detection
  - hwmon: (k10temp) Swap Tdie and Tctl on Family 17h CPUs
  - hwmon: (k10temp) Display up to eight sets of CCD temperatures
  - hwmon: (k10temp) Don't show temperature limits on Ryzen (Zen) CPUs
  - hwmon: (k10temp) Show core and SoC current and voltages on Ryzen CPUs
  - hwmon: (k10temp) Report temperatures per CPU die
  - hmon: (k10temp) Convert to use devm_hwmon_device_register_with_info
  - hwmon: (k10temp) Use bitops
  - hwmon: Add convience macro to define simple static sensors
  - hwmon: (k10temp) Auto-convert to use SENSOR_DEVICE_ATTR_{RO, RW, WO}
  - hwmon: Introduce SENSOR_DEVICE_ATTR_{RO, RW, WO} and variants
  - x86/umip: Make the UMIP activated message generic
  - x86/umip: Print UMIP line only once
  - x86/microcode/AMD: Clean up per-family patch size checks
  - !1689 [openEuler-1.0-LTS] drm/atomic-helper: Bump vblank timeout to 100 ms
  - nbd: pass nbd_sock to nbd_read_reply() instead of index
  - !1807  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - !1844  net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
  - !1785  README: Remove out-of-date contribution guide
  - !1849  fs: jfs: fix possible NULL pointer dereference in dbFree()
  - fs: jfs: fix possible NULL pointer dereference in dbFree()
  - !1836  tcp: Reduce chance of collisions in inet6_hashfn().
  - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
  - tcp: Reduce chance of collisions in inet6_hashfn().
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - README: Remove out-of-date contribution guide
  - drm/atomic-helper: Bump vblank timeout to 100 ms


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2309.1.0.0217
changelog:
  - !1964  crypto:padata: Fix return err for PADATA_RESET
  - !1955  fuse: revalidate: don't invalidate if interrupted
  - !1973  sched/smt: fix unbalance sched_smt_present dec/inc
  - sched/smt: fix unbalance sched_smt_present dec/inc
  - !1906  tracing: Fix memleak due to race between current_tracer and trace
  - !1958  block: don't get gendisk if queue has not been registered
  - crypto:padata: Fix return err for PADATA_RESET
  - block: don't get gendisk if queue has not been registered
  - fuse: revalidate: don't invalidate if interrupted
  - !1902  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
  - tracing: Fix memleak due to race between current_tracer and trace
  - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2309.3.0.0218
changelog:
  - !2084  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - !2071 【openEuler-1.0-LTS】net: openvswitch: don't send internal clone attribute to the userspace
  - net: openvswitch: don't send internal clone attribute to the userspace.
  - !2089  net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - !335 efi: fix crash due to EFI runtime service page faults
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - !2088 [openEuler-1.0-LTS] bugfixes of scsi
  - scsi: fix kabi broken in struct Scsi_Host
  - scsi: don't fail if hostt->module is NULL
  - scsi: scsi_device_gets returns failure when the module is NULL.
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - !2069  x86/speculation: Add Gather Data Sampling mitigation
  - !1692  Mainline bugfix patches backport 4.19
  - !2075  x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
  - !2079 [openEuler-1.0-LTS] stable inclusion from linux-4.19.y
  - scsi: core: raid_class: Remove raid_component_add()
  - scsi: core: Fix possible memory leak if device_add() fails
  - scsi: core: Fix legacy /proc parsing buffer overflow
  - serial: 8250_dw: Preserve original value of DLF register
  - serial: 8250_dw: split Synopsys DesignWare 8250 common functions
  - nbd: Add the maximum limit of allocated index in nbd_dev_add
  - integrity: Fix possible multiple allocation in integrity_inode_get()
  - !2070 net bugfixes inclusion from linux-4.19.y
  - drivers: net: prevent tun_build_skb() to exceed the packet size limit
  - net/packet: annotate data-races around tp->status
  - tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
  - tcp_metrics: annotate data-races around tm->tcpm_net
  - tcp_metrics: annotate data-races around tm->tcpm_vals[]
  - tcp_metrics: annotate data-races around tm->tcpm_lock
  - tcp_metrics: annotate data-races around tm->tcpm_stamp
  - tcp_metrics: fix addr_same() helper
  - virtio-net: set queues after driver_ok
  - virtio-net: fix race between set queues and probe
  - team: reset team's flags when down link is P2P device
  - bonding: reset bond's flags when down link is P2P device
  - tcp: annotate data-races around fastopenq.max_qlen
  - tcp: annotate data-races around tp->notsent_lowat
  - tcp: annotate data-races around rskq_defer_accept
  - tcp: annotate data-races around tp->linger2
  - net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX
  - SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
  - net/sched: make psched_mtu() RTNL-less safe
  - udp6: fix udp6_ehashfn() typo
  - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
  - vrf: Increment Icmp6InMsgs on the original netdev
  - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
  - tcp: annotate data races in __tcp_oow_rate_limited()
  - net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode
  - ipvlan: Fix return value of ipvlan_queue_xmit()
  - netlink: do not hard code device address lenth in fdb dumps
  - netlink: Add __sock_i_ino() for __netlink_diag_dump().
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
  - !1987  tracing: Fix race issue between cpu buffer write and swap
  - !2067  memcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock()
  - netlink: fix potential deadlock in netlink_set_err()
  - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS
  - x86: Move gds_ucode_mitigated() declaration to header
  - Documentation/x86: Fix backwards on/off logic about YMM support
  - KVM: Add GDS_NO support to KVM
  - x86/speculation: Add Kconfig option for GDS
  - x86/speculation: Add force option to GDS mitigation
  - x86/speculation: Add cpu_show_gds() prototype
  - x86/speculation: Add Gather Data Sampling mitigation
  - !2063  cpu/hotplug: Prevent self deadlock on CPU hot-unplug
  - !2046  use precise io accounting apis
  - memcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock()
  - cpu/hotplug: Prevent self deadlock on CPU hot-unplug
  - !2050  memcg: fix a UAF problem in drain_all_stock()
  - !1976  fix race between setxattr and write back
  - memcg: fix a UAF problem in drain_all_stock()
  - dm: switch to precise io accounting
  - block: add precise io accouting apis
  - tracing: Fix race issue between cpu buffer write and swap
  - ext2: dump current reservation window info
  - ext2: fix race between setxattr and write back
  - ext2: introduce flag argument for ext2_new_blocks()
  - ext2: remove ext2_new_block()
  - arm64: efi: Make efi_rt_lock a raw_spinlock
  - efi: rt-wrapper: Add missing include
  - arm64: efi: Recover from synchronous exceptions occurring in firmware
  - arm64: efi: Execute runtime services from a dedicated stack
  - efi: fix userspace infinite retry read efivars after EFI runtime services page fault
  - arm64: efi: Restore register x18 if it was corrupted
  - x86/efi: fix a -Wtype-limits compilation warning
  - efi: Fix build error due to enum collision between efi.h and ima.h
  - efi: Fix debugobjects warning on 'efi_rts_work'
  - efi/x86: Handle page faults occurring while running EFI runtime services
  - efi: Make efi_rts_work accessible to efi page fault handler
  - lib/genalloc.c: change return type to unsigned long for bitmap_set_ll
  - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE
  - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2309.4.0.0219
changelog:
  - !2168  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  - !2226  crypto: hisilicon/qm - prevent soft lockup in qm_poll_qp()'s loop
  - !2225  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  - crypto: hisilicon/qm - prevent soft lockup in qm_poll_qp()'s loop
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  - !2177  sched/qos: Fix warning in CPU hotplug scenarios
  - !2207  crypto:hisilicon/qm - cache write back before flr and poweroff
  - !2206  Fix booting failure on arm64
  - crypto:hisilicon/qm - cache write back before flr and poweroff
  - !2205  crypto:hisilicon/sec - modify hw endian config
  - Revert "efi: Make efi_rts_work accessible to efi page fault handler"
  - Revert "efi/x86: Handle page faults occurring while running EFI runtime services"
  - Revert "efi: Fix debugobjects warning on 'efi_rts_work'"
  - Revert "efi: Fix build error due to enum collision between efi.h and ima.h"
  - Revert "x86/efi: fix a -Wtype-limits compilation warning"
  - Revert "arm64: efi: Restore register x18 if it was corrupted"
  - Revert "efi: fix userspace infinite retry read efivars after EFI runtime services page fault"
  - Revert "arm64: efi: Execute runtime services from a dedicated stack"
  - Revert "arm64: efi: Recover from synchronous exceptions occurring in firmware"
  - Revert "efi: rt-wrapper: Add missing include"
  - Revert "arm64: efi: Make efi_rt_lock a raw_spinlock"
  - crypto:hisilicon/sec - modify hw endian config
  - !2118 Compiler: Backport value profile support to openEuler 20.03 LTS SP3.
  - GCOV: Add value profile support for kernel.
  - sched/qos: Fix warning in CPU hotplug scenarios
  - !2154  netfilter: nftables: exthdr: fix 4-byte stack OOB write
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  - !2140  io_uring: ensure IOPOLL locks around deferred work
  - !2056 i2c: hisi: Add gpio bus recovery support
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write
  - !2082  fix CVE-2023-20588
  - io_uring: ensure IOPOLL locks around deferred work
  - i2c: hisi: Add gpio bus recovery support
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt
  - x86/CPU/AMD: Do not leak quotient data after a division by 0


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2309.5.0.0220
changelog:
  - !2274  cec-api: prevent leaking memory through hole in structure
  - !2281  sdei_watchdog: Avoid exception during sdei handler
  - sdei_watchdog: Avoid exception during sdei handler
  - cec-api: prevent leaking memory through hole in structure
  - !2262  crypto: hisilicon - reset before init the device
  - crypto: hisilicon - reset before init the device
  - !2212 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
  - jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2310.2.0.0221
changelog:
  - !2322  net/sched: Retire rsvp classifier
  - !2346  RDMA/irdma: Prevent zero-length STAG registration
  - !2349  net: ipv4: fix one memleak in __inet_del_ifa()
  - !2329  ipv4: fix null-deref in ipv4_link_failure
  - !2342 linux-4.19.y inclusion
  - !2345  Backport lts bugfix patch for macvlan
  - !2344  PCI: acpiphp: linux-4.19.y bugfixes backport
  - !2341  quota: fix warning in dqgrab()
  - net: ipv4: fix one memleak in __inet_del_ifa()
  - !1706  cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks()
  - rtnetlink: Reject negative ifindexes in RTM_NEWLINK
  - netfilter: nf_queue: fix socket leak
  - net/sched: fix a qdisc modification with ambiguous command request
  - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
  - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled
  - sock: annotate data-races around prot->memory_pressure
  - !2337  mm: memory-failure: use rcu lock instead of tasklist_lock when collect_procs()
  - RDMA/irdma: Prevent zero-length STAG registration
  - bonding: fix macvlan over alb bond support
  - net: remove bond_slave_has_mac_rcu()
  - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus
  - PCI: acpiphp: Reassign resources on bridge if necessary
  - sock: Fix misuse of sk_under_memory_pressure()
  - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
  - ip_vti: fix potential slab-use-after-free in decode_session6
  - net: af_key: fix sadb_x_filter validation
  - net: xfrm: Fix xfrm_address_filter OOB read
  - serial: 8250: Fix oops for port->pm on uart_change_pm()
  - quota: Properly disable quotas when add_dquot_ref() fails
  - quota: fix warning in dqgrab()
  - !2335  x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms
  - mm: memory-failure: use rcu lock instead of tasklist_lock when collect_procs()
  - x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms
  - ipv4: fix null-deref in ipv4_link_failure
  - net/sched: Retire rsvp classifier
  - !2301  xfrm6: fix inet6_dev refcount underflow problem
  - !2303  cifs: Release folio lock on fscache read hit.
  - cifs: Release folio lock on fscache read hit.
  - !2294  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  - xfrm6: fix inet6_dev refcount underflow problem
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  - !2276  cpuidle: Fix kobject memory leaks in error paths
  - cpuidle: Fix kobject memory leaks in error paths
  - cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks()


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2310.3.0.0222
changelog:
  - !2466  x86/microcode/AMD: Make stub function static inline
  - !2461  perf/core: Fix reentry problem in perf_output_read_group()
  - x86/microcode/AMD: Make stub function static inline
  - perf/core: Fix reentry problem in perf_output_read_group()
  - !2409  netfilter: nfnetlink_osf: avoid OOB read
  - !2330 Add a check of uvhub_mask in init_per_cpu()
  - x86/platform/uv: Fix missing checks of kcalloc() return values
  - x86/platform/UV: Replace kmalloc() and memset() with k[cz]alloc() calls
  - !2412  netfilter: xt_sctp: validate the flag_info count
  - !2419  ext4: fix rec_len verify error
  - ext4: fix rec_len verify error
  - netfilter: xt_sctp: validate the flag_info count
  - netfilter: nfnetlink_osf: avoid OOB read
  - !2360  scsi: hisi_sas: Handle the NCQ error returned by D2H frame
  - scsi: hisi_sas: Handle the NCQ error returned by D2H frame


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2310.4.0.0223
changelog:
  - !2334 ktask: add memory leak handling for ktask_works in ktask_init()
  - !2333 ktask: add null-pointer checks for ktask_works in ktask_init()
  - !2453  igb: set max size RX buffer when store bad packet is enabled
  - ktask: add memory leak handling for ktask_works in ktask_init()
  - ktask: add null-pointer checks for ktask_works in ktask_init()
  - !2441  netfilter: xt_u32: validate user space input
  - !2435  USB: ene_usb6250: Allocate enough memory for full object
  - igb: set max size RX buffer when store bad packet is enabled
  - netfilter: xt_u32: validate user space input
  - USB: ene_usb6250: Allocate enough memory for full object


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2311.1.0.0224
changelog:
  - !2609  Fix CVE-2023-5717
  - !2588 [openEuler-1.0-LTS] Add Phytium Display Engine support.
  - !2627  ubi: Refuse attaching if mtd's erasesize is 0
  - !2473  Revert irq reentrant warm log
  - !1860 irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
  - !2551  Avoid spin or livelock during panic
  - !2314  can: raw: add missing refcount for memory leak fix
  - !2396  efi: use 32-bit alignment for efi_guid_t literals
  - ubi: Refuse attaching if mtd's erasesize is 0
  - !2446  audit: fix possible soft lockup in __audit_inode_child()
  - !2614  CVE-2022-44033
  - DRM: Phytium display DRM document
  - DRM: Phytium display DRM driver
  - ASoC: hdmi-codec: Add an op to set callback function for plug event
  - char: pcmcia: remove all the drivers
  - tty: ipwireless: move Kconfig entry to tty
  - !1974 CAN driver for phytium CPUs
  - perf: Fix kabi breakage in struct perf_event
  - perf: Disallow mis-matched inherited group reads
  - !2577  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
  - can: can controller driver for phytium CPUs
  - !2550  xen/events: replace evtchn_rwlock with RCU
  - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
  - !2557  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
  - printk: Drop console_sem during panic
  - printk: Avoid livelock with heavy printk during panic
  - printk: disable optimistic spin during panic
  - printk: Add panic_in_progress helper
  - xen/events: replace evtchn_rwlock with RCU
  - irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
  - irqchip/gic-v3-its: Make is_v4 use a TYPER copy
  - Revert "genirq: Introduce warn log when irq be reentrant"
  - Revert "genirq: add printk safe in irq context"
  - audit: fix possible soft lockup in __audit_inode_child()
  - can: add phytium can driver document
  - efi: use 32-bit alignment for efi_guid_t literals
  - can: raw: add missing refcount for memory leak fix


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2311.2.0.0225
changelog:
  - !2793  handle uninitialized numa nodes gracefully.
  - !2789 linux-4.19.y inclusion
  - arch/x86/mm/numa: Do not initialize nodes twice
  - mm: handle uninitialized numa nodes gracefully
  - mm, memory_hotplug: make arch_alloc_nodedata independent on CONFIG_MEMORY_HOTPLUG
  - !2713  Fix netfilter conntrack
  - !2651  sched/membarrier: fix missing local execution of ipi_sync_rq_state()
  - tcp: fix delayed ACKs for MSS boundary condition
  - tcp: fix quick-ack counting to count actual ACKs of new data
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
  - team: fix null-ptr-deref when team device type is changed
  - af_unix: Fix data race around sk->sk_err.
  - af_unix: Fix data-races around sk->sk_shutdown.
  - af_unix: Fix data-race around unix_tot_inflight.
  - af_unix: Fix data-races around user->unix_inflight.
  - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
  - net: read sk->sk_family once in sk_mc_loop()
  - skbuff: skb_segment, Call zero copy functions before using skbuff frags
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
  - tcp: tcp_enter_quickack_mode() should be static
  - net: Avoid address overwrite in kernel_connect
  - md/raid1: fix error: ISO C90 forbids mixed declarations
  - md: raid1: fix potential OOB in raid1_remove_disk()
  - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
  - autofs: fix memory leak of waitqueues in autofs_catatonic_mode
  - pstore/ram: Check start of empty przs during init
  - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
  - fs: Fix error checking for d_hash_and_lookup()
  - !2767  crypto: hisilicon/qm - alloc reserve buffer to set and get xqc
  - crypto: hisilicon/qm - alloc reserve buffer to set and get xqc
  - !2760  fs: lockd: avoid possible wrong NULL parameter
  - !2164 Net: ethernet: Support 3snic 3s9xx network card
  - !2605 add CONFIG_NGBE for Wangxun 1G NIC for aarch64
  - !1873 [openEuler-1.0-LTS] Add Phytium hda driver support
  - !2564 [openEuler-1.0-LTS] Add Phytium i2c driver support
  - !2636  kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail
  - fs: lockd: avoid possible wrong NULL parameter
  - !2754  Sync LTS patches for openEuler-1.0-LTS
  - !2758  crypto: hisilicon - qm obtain the mailbox config at one time
  - crypto: hisilicon - qm obtain the mailbox config at one time
  - regmap: rbtree: Fix wrong register marked as in-cache when creating new node
  - regmap: rbtree: Use alloc_flags for memory allocations
  - !2730  PCI/IOV: Add pci_sriov_numvfs_lock to support enable pci sriov concurrently
  - !2722  net: sched: sch_qfq: Use non-work-conserving warning handler
  - !2650  sched/cpuacct: Fix charge cpuacct.usage_sys
  - PCI/IOV: Add pci_sriov_numvfs_lock to support enable pci sriov concurrently
  - net: sched: sch_qfq: Use non-work-conserving warning handler
  - arm64: config: add CONFIG_NGBE for Wangxun 1G NIC
  - netfilter: conntrack: fix infinite loop on rmmod
  - netfilter: conntrack: do not auto-delete clash entries on reply
  - netfilter: conntrack: allow insertion of clashing entries
  - netfilter: conntrack: split resolve_clash function
  - netfilter: conntrack: place confirm-bit setting in a helper
  - netfilter: conntrack: remove two args from resolve_clash
  - netfilter: conntrack: tell compiler to not inline nf_ct_resolve_clash
  - sched/membarrier: fix missing local execution of ipi_sync_rq_state()
  - sched/cpuacct: Fix charge cpuacct.usage_sys
  - kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail
  - hda: add phytium hda driver
  - hda: add phytium hda driver document
  - i2c: add Phytium i2c driver
  - i2c: add phytium i2c driver DT binding docs
  - Net: ethernet: Support 3snic 3s9xx network card


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2311.3.0.0226
changelog:
  - !2803 drivers/gmjstcm: fix a dev_err() call in spi tcm device probe
  - !2841  drm/qxl: fix UAF on handle creation
  - !2785  [openEuler-1.0-LTS] SCSI: SSSRAID: Support 3SNIC 3S5XX serial RAID/HBA controllers
  - drm/qxl: fix UAF on handle creation
  - !2809  bugfix for CVE-2022-45884
  - media: dvb-core: Fix use-after-free due to race at dvb_register_device()
  - media: media/dvb: Use kmemdup rather than duplicating its implementation
  - media: dvbdev: Fix memleak in dvb_register_device
  - drivers/gmjstcm: fix a dev_err() call in spi tcm device probe
  - SCSI: SSSRAID: Support 3SNIC 3S5XX serial RAID/HBA  controllers


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2311.4.0.0227
changelog:
  - !1935 [openEuler-1.0-LTS] Add Phytium optee driver support
  - !2895  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
  - !2873 Fix SAS start error with maxcpus=1
  - genirq: Take the proposed affinity at face value if force==true
  - optee: add phytium optee driver
  - optee: model OP-TEE as a platform device/driver
  - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
  - irqchip/gic-v3: Always trust the managed affinity provided by the core code
  - genirq: Always limit the affinity to online CPUs
  - genirq/msi: Shutdown managed interrupts with unsatifiable affinities
  - !2508 [openEuler-1.0-LTS] jpeg: Add a Phytium JPEG Engine driver
  - !2522 [openEuler-1.0-LTS] Add support for Phytium SoC RNG
  - !2877  Revert "tcp: fix delayed ACKs for MSS boundary condition"
  - !2693 [openEuler-1.0-LTS] Add support for Phytium QSPI
  - !2402 [openEuler-1.0-LTS] Add Phytium w1 driver support
  - !2403 [openEuler-1.0-LTS] Add Phytium adc driver support
  - !1874 [openEuler-1.0-LTS] Add Phytium mailbox driver support
  - !2024 [openEuler-1.0-LTS] Add Phytium RTC driver support
  - !2682 [openEuler-1.0-LTS] Add support for Phytium MMC
  - !2671 [openEuler-1.0-LTS] phytium dwmac net driver
  - !2676 [openEuler-1.0-LTS] Add Phytium gpio driver support
  - !2604 [openEuler-1.0-LTS] Add support for Phytium SPI
  - !2540 [openEuler-1.0-LTS] Driver for the Phytium keypad port.
  - Revert "tcp: fix delayed ACKs for MSS boundary condition"
  - hwrng: Add support for Phytium SoC RNG
  - jpeg: Add a Phytium JPEG Engine driver
  - !2818  Fix memleak in disassociate_ctty()
  - !2810 drivers/gmjstcm: import CVE-2011-1160 CVE-2011-1162 fixes to tcm.c
  - drivers/gmjstcm: import CVE-2011-1160 CVE-2011-1162 fixes to tcm.c
  - rtc: add phytium rtc driver document
  - rtc: add rtc drivers for Phytium SOCs
  - gpio: add phytium gpio driver
  - dwmac:add phytium dwmac driver
  - mailbox:add phytium mailbox driver document
  - mailbox: add phytium mailbox driver
  - mmc: add phytium mmc driver DT binding docs
  - mmc: add support for Phytium MMC
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty()
  - Revert "tty: fix pid memleak in disassociate_ctty()"
  - spi: add phytium spi driver DT binding docs
  - spi: add phytium spi support
  - qspi: add phytium qspi driver DT binding docs
  - qspi: add support for Phytium QSPI controller
  - gpio: add phytium gpio driver document
  - dwmac:add phytium dwmac driver DT binding docs
  - adc: add phytium adc driver
  - adc: add phytium adc driver document
  - w1: add phytium w1 driver
  - w1: add phytium w1 driver document
  - KEYPAD: Driver for the Phytium keypad port.
  - KEYPAD: Document for the Phytium keypad port.


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2311.5.0.0228
changelog:
  - !3000 [openEuler-1.0-LTS] add Phytium drivers CONFIG
  - arm64: config: add config for Phytium drivers
  - !2908  mm/migrate.c: fix potential indeterminate pte entry in migrate_vma_insert_page()
  - !2869  mm, memory_hotplug: update pcp lists everytime onlining a memory block
  - !2805  sched/fair: Refill bandwidth before scaling
  - !2804  signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal
  - !2960  Add script to check & update openeuler_defconfig
  - config: update openeuler_defconfig for arm64
  - config: update openeuler_defconfig for x86
  - kconfig: Add script to check & update openeuler_defconfig
  - kbuild: ensure full rebuild when the compiler is updated
  - mm/migrate.c: fix potential indeterminate pte entry in migrate_vma_insert_page()
  - mm, memory_hotplug: update pcp lists everytime onlining a memory block
  - sched/fair: Refill bandwidth before scaling
  - signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2312.1.0.0229
changelog:
  - !3158  mm: don't let userspace spam allocations warnings
  - mm: don't let userspace spam allocations warnings
  - !2781  cpufreq: Abort show()/store() for half-initialized policies
  - !3118  sched: smart grid: check is active in affinity timer
  - sched: smart grid: check is active in affinity timer
  - !2977  Backport crypto bugfix
  - !3071  perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled
  - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled
  - !3038  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
  - !3031  x86/mce/amd: Publish the bank pointer only after setup has succeeded
  - !3030  x86/mce/inject: Fix a wrong assignment of i_mce.status
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
  - x86/mce/amd: Publish the bank pointer only after setup has succeeded
  - x86/mce/inject: Fix a wrong assignment of i_mce.status
  - crypto: fix kabi broken in struct crypto_instance
  - crypto: api - Use work queue in crypto_destroy_instance
  - cpufreq: make interface functions and lock holding state clear
  - cpufreq: Abort show()/store() for half-initialized policies


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2312.3.0.0230
changelog:
  - !3347  tun: avoid double free in tun_free_netdev
  - tun: avoid double free in tun_free_netdev
  - !3239  net: hns: fix fake link up
  - !3113 KVM: arm64: limit PMU version to PMUv3 for ARMv8.1
  - !3281  LTS patch backport
  - !3122  nvme: retain split access workaround for capability reads
  - !3262  icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.
  - net: fix kabi broken in struct netns_xfrm
  - xfrm: fix a data-race in xfrm_gen_index()
  - !3276  linux-4.19.y inclusion
  - !3263  workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask()
  - !3267  x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
  - dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.
  - can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on()
  - can: dev: can_restart(): don't crash kernel if carrier is OK
  - can: dev: move driver related infrastructure into separate subdir
  - ipv6: avoid atomic fragment on GSO packets
  - tcp_metrics: do not create an entry from tcp_init_metrics()
  - tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics()
  - tcp_metrics: add missing barriers on delete
  - tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb
  - tcp: fix excessive TLP and RACK timeouts from HZ rounding
  - genirq/matrix: Exclude managed interrupts in irq_matrix_allocated()
  - ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias()
  - ACPI: irq: Fix incorrect return value in acpi_register_gsi()
  - ext4: move 'ix' sanity check to corrent position
  - vfs: fix readahead(2) on block devices
  - overlayfs: set ctime when setting mtime and atime
  - quota: Fix slow quotaoff
  - mcb: remove is_added flag from mcb_device struct
  - sched,idle,rcu: Push rcu_idle deeper into the idle path
  - cgroup: Remove duplicates in cgroup v1 tasks file
  - x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
  - workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask()
  - icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.
  - net: hns: update hns version to 23.12.1
  - net: hns: fix fake link up on xge port
  - !3021  fix CFS bandwidth vs. hrtimer self deadlock
  - !3202  regmap: fix NULL deref on lookup
  - regmap: fix NULL deref on lookup
  - KVM: arm64: limit PMU version to PMUv3 for ARMv8.1
  - arm64: cpufeature: Extract capped perfmon fields
  - nvme: retain split access workaround for capability reads
  - cpu/hotplug: fix kabi breakage in enum cpuhp_state
  - hrtimers: Push pending hrtimers away from outgoing CPU earlier


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2312.4.0.0231
changelog:
  - !3426  Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier"
  - Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier"
  - Revert "cpu/hotplug: fix kabi breakage in enum cpuhp_state"


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2312.6.0.0232
changelog:
  - !3607  Fix CVE-2023-6546
  - !3606  perf/core: Fix CVE-2023-6931
  - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
  - tty: n_gsm: fix restart handling via CLD command
  - perf: Fix perf_event_validate_size() lockdep splat
  - perf: Fix perf_event_validate_size()
  - !3417  SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers
  - !3531 Fix kernel panic occurs during ISO installation on the 20.03 SP3/SP4
  - i2c: hisi: Only handle the interrupt of the driver's transfer
  - i2c: hisi: Only use the completion interrupt to finish the transfer
  - i2c: hisi: Avoid redundant interrupts
  - !3483  net: Remove acked SYN flag from packet in the transmit queue correctly
  - net: Remove acked SYN flag from packet in the transmit queue correctly
  - SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2401.1.0.0233
changelog:
  - !3660  atm: Fix Use-After-Free in do_vcc_ioctl
  - !3687  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
  - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
  - !3672  smb: client: fix potential OOB in smb2_dump_detail()
  - !3671  smb: client: fix OOB in smbCalcSize()
  - !3627  jbd2: fix soft lockup in journal_finish_inode_data_buffers()
  - !3189  fs: don't audit the capability check in simple_xattr_list()
  - smb: client: fix potential OOB in smb2_dump_detail()
  - smb: client: fix OOB in smbCalcSize()
  - !3555  net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()
  - atm: Fix Use-After-Free in do_vcc_ioctl
  - !3592  CVE-2023-35827 patchset
  - !3449  Fix data-races around
  - jbd2: fix soft lockup in journal_finish_inode_data_buffers()
  - ravb: Fix races between ravb_tx_timeout_work() and net related ops
  - ravb: Fix use-after-free issue in ravb_tx_timeout_work()
  - net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()
  - ip: Fix data-races around sysctl_ip_no_pmtu_disc.
  - ip: Fix data-races around sysctl_ip_fwd_update_priority.
  - fs: don't audit the capability check in simple_xattr_list()


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2401.3.0.0234
changelog:
  - !3768  iomap: add support to track dirty state of sub pages
  - !3845  netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
  - !3847  nvmet: nul-terminate the NQNs passed in the connect command
  - !3863 linux-4.19.y inclusion(4.19.299..4.19.303) part2
  - team: Fix use-after-free when an option instance allocation fails
  - packet: Move reference count in packet_sock to atomic_long_t
  - tcp: do not accept ACK of bytes we never sent
  - ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit()
  - ipv6: fix potential NULL deref in fib6_add()
  - ipv4: Correct/silence an endian warning in __ip_do_redirect
  - net: sched: fix race condition in qdisc_graft()
  - macvlan: Don't propagate promisc change to lower dev in passthru
  - ppp: limit MRU to 64K
  - tty: Fix uninit-value access in ppp_sync_receive()
  - net: annotate data-races around sk->sk_dst_pending_confirm
  - net: annotate data-races around sk->sk_tx_queue_mapping
  - !3862 linux-4.19.y inclusion(4.19.299..4.19.303) part1
  - ring-buffer: Fix memory leak of free page
  - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation
  - Revert "PCI: acpiphp: Reassign resources on bridge if necessary"
  - x86/CPU/AMD: Check vendor in the AMD microcode callback
  - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware
  - audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare()
  - audit: don't take task_lock() in audit_exe_compare() code path
  - nvmet: nul-terminate the NQNs passed in the connect command
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
  - !3823 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
  - ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
  - !3803  net/sched: cbs: Fix not adding cbs instance to list
  - net/sched: cbs: Fix not adding cbs instance to list
  - !3770  ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - iomap: add support to track dirty state of sub pages
  - !3757  Fix bugs from LTS patches
  - devcoredump: Send uevent once devcd is ready
  - devcoredump : Serialize devcd_del work
  - driver core: Release all resources during unbind before updating device links
  - !3716  appletalk: Fix Use-After-Free in atalk_ioctl
  - !3667  net/rose: Fix Use-After-Free in rose_ioctl
  - appletalk: Fix Use-After-Free in atalk_ioctl
  - net/rose: Fix Use-After-Free in rose_ioctl


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2401.4.0.0235
changelog:
  - !4006  crypto: hisilicon/sec2: fix memory use-after-free issue
  - crypto: hisilicon/sec2: fix memory use-after-free issue
  - !3923  net: bridge: multicast: fix UAF of net_bridge
  - net: bridge: multicast: fix UAF of net_bridge


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2401.5.0.0236
changelog:
  - !4101  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
  - !2954 spi: phytium: fix phytium_spi_irq panic on boot
  - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
  - !4067  fix CVE-2022-48619
  - !4080  rtnetlink: Reject negative ifindexes in RTM_NEWLINK
  - rtnetlink: Reject negative ifindexes in RTM_NEWLINK
  - Revert "rtnetlink: Reject negative ifindexes in RTM_NEWLINK"
  - !4065  smb: client: fix OOB in receive_encrypted_standard()
  - !4021  netfilter: nf_tables: Reject tables of unsupported family
  - Input: add bounds checking to input_set_capability()
  - smb: client: fix OOB in receive_encrypted_standard()
  - !4039  crypto: hisilicon/qm: fix several issues
  - !4025  crypto: hisilicon - replace 'smp_processor_id' with the raw version of the macro
  - !3980  vhost: use kzalloc() instead of kmalloc() followed by memset()
  - crypto: hisilicon/qm: fix several issues
  - crypto: hisilicon - replace 'smp_processor_id' with the raw version of the macro
  - netfilter: nf_tables: Reject tables of unsupported family
  - vhost: use kzalloc() instead of kmalloc() followed by memset()
  - spi: phytium: fix phytium_spi_irq panic on boot


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2402.1.0.0237
changelog:
  - !4277  fs:/dcache.c: fix negative dentry limit not complete problem
  - !4288  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
  - !4299  smb: client: fix NULL deref in asn1_ber_decoder()
  - smb: client: fix NULL deref in asn1_ber_decoder()
  - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
  - !4228  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
  - fs:/dcache.c: fix negative dentry limit not complete problem
  - !4235  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
  - !4255  drm/amdgpu: Fix potential fence use-after-free v2
  - !4209  dhugetlb: skip unexpected migration
  - drm/amdgpu: Fix potential fence use-after-free v2
  - !4231  crypto: hisilicon/qm - drop unnecessary IS_ENABLE(CONFIG_NUMA) check
  - nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
  - crypto: hisilicon/qm - drop unnecessary IS_ENABLE(CONFIG_NUMA) check
  - ipv6: init the accept_queue's spinlocks in inet6_create
  - tcp: make sure init the accept_queue's spinlocks once
  - !4212  netlink: fix potential sleeping issue in mqueue_flush_file
  - netlink: fix potential sleeping issue in mqueue_flush_file
  - dhugetlb: skip unexpected migration
  - dhugetlb: introduce page_belong_to_dynamic_hugetlb() function
  - !3944  time: Handle negative seconds correctly in timespec64_to_ns()
  - !3943  timerqueue: Use rb_entry_safe() in timerqueue_getnext()
  - !3942  efi/x86: Map the entire EFI vendor string before copying it
  - !4166  sched/fair: Fix qos_timer deadlock when cpuhp offline
  - sched/fair: Fix qos_timer deadlock when cpuhp offline
  - !4137  sctp: fix potential deadlock on &net->sctp.addr_wq_lock
  - sctp: fix potential deadlock on &net->sctp.addr_wq_lock
  - time: Handle negative seconds correctly in timespec64_to_ns()
  - timerqueue: Use rb_entry_safe() in timerqueue_getnext()
  - efi/x86: Map the entire EFI vendor string before copying it


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2402.4.0.0238
changelog:
  - !4454  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - !4411 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
  - !4412 v3  Save and restore msg_namelen in sock_sendmsg
  - net: Save and restore msg_namelen in sock_sendmsg
  - net: prevent rewrite of msg_name in sock_sendmsg()
  - !4399  net: dst: Optimized route gc
  - drm/atomic: Fix potential use-after-free in nonblocking commits
  - !4392 linux-4.19.y inclusion
  - !4369  mm/filemap: avoid buffered read/write race to read inconsistent data
  - net/dst: use a smaller percpu_counter batch for dst entries accounting
  - net: add a route cache full diagnostic message
  - net: check dev->gso_max_size in gso_features_check()
  - net: warn if gso_type isn't set for a GSO SKB
  - mm: fix unmap_mapping_range high bits shift bug
  - x86/alternatives: Sync core before enabling interrupts
  - mm/filemap: avoid buffered read/write race to read inconsistent data
  - !4360  net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
  - !4320  io_uring/af_unix: disable sending io_uring over sockets
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
  - io_uring/af_unix: disable sending io_uring over sockets


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2402.5.0.0239
changelog:
  - !4601 v2  xen-netback: don't produce zero-size SKB frags
  - xen-netback: don't produce zero-size SKB frags
  - !4583  net: hns3: fix a bug and modify the hns3 driver version
  - net: hns3: update hns3 version to 24.2.1
  - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization
  - !4552 v4  CVE-2023-52340
  - !4526 v2  fs:/dcache.c: fix negative dentry flag warning in dentry_free
  - ipv6: fix kabi broken in struct dst_ops
  - ipv6: Document that max_size sysctl is deprecated
  - ipv6: remove max_size check inline with ipv4
  - !4538  fix kprobe reenter bug
  - arm64/openeuler_defconfig: add not set config to fix compiling error
  - tracing/kprobes: Do the notrace functions check without kprobes on ftrace
  - fs:/dcache.c: fix negative dentry flag warning in dentry_free


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2402.6.0.0240
changelog:
  - !4701 v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
  - !4684 v3  CVE-2023-52435
  - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
  - net: Fix compile warning in skb_segment()
  - net: prevent mss overflow in skb_segment()
  - !4643  f2fs: explicitly null-terminate the xattr list
  - f2fs: explicitly null-terminate the xattr list


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2403.1.0.0241
changelog:
  - !4947  powerpc/64s: Fix pte update for kernel memory on radix
  - !4932  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
  - powerpc/64s: Fix pte update for kernel memory on radix
  - !4874 v2  net: openvswitch: limit the number of recursions from action sets
  - !4920  ARM: footbridge: remove personal server platform
  - !4887  KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
  - !4918 v3  usb: hub: Guard against accesses to uninitialized BOS descriptors
  - !4936  i2c: validate user data in compat ioctl
  - i2c: validate user data in compat ioctl
  - !4898  platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
  - !4879  KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
  - !4869  Fix CVE-2021-46941
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
  - !4904  i2c: sprd: fix reference leak when pm_runtime_get_sync fails
  - !4859  hfsplus: prevent corruption in shrinking truncate
  - !4877  i2c: Fix a potential use after free
  - ARM: footbridge: fix PCI interrupt mapping
  - !4888 v3  media: dvbdev: Fix memory leak in dvb_media_device_free()
  - usb: hub: Guard against accesses to uninitialized BOS descriptors
  - !4825  sched/membarrier: reduce the ability to hammer on sys_membarrier
  - !4882  Input: appletouch - initialize work before device registration
  - !4876  backport patch to fix CVE-2021-47077
  - !4899  net: qualcomm: rmnet: fix global oob in rmnet_policy
  - i2c: sprd: fix reference leak when pm_runtime_get_sync fails
  - !4892  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  - !4881  i2c: cadence: fix reference leak when pm_runtime_get_sync fails
  - net: qualcomm: rmnet: fix global oob in rmnet_policy
  - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
  - !4865  Input: powermate - fix use-after-free in powermate_config_complete
  - !4860  apparmor: avoid crash when parsed profile name is empty
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  - media: dvbdev: Fix memory leak in dvb_media_device_free()
  - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
  - Input: appletouch - initialize work before device registration
  - i2c: cadence: fix reference leak when pm_runtime_get_sync fails
  - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
  - i2c: Fix a potential use after free
  - ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook
  - net: openvswitch: limit the number of recursions from action sets
  - usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup
  - usb: dwc3: core: balance phy init and exit
  - usb: dwc3: core: Do core softreset when switch mode
  - Input: powermate - fix use-after-free in powermate_config_complete
  - !4856  bus: qcom: Put child node before return
  - apparmor: avoid crash when parsed profile name is empty
  - hfsplus: prevent corruption in shrinking truncate
  - bus: qcom: Put child node before return
  - !4828  Drivers: hv: vmbus: Use after free in __vmbus_open()
  - !4806 v2  media: pvrusb2: fix use after free on context disconnection
  - !4777  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
  - !4819 v2  fix CVE-2020-36782
  - !4833  openvswitch: fix stack OOB read while fragmenting IPv4 packets
  - !4677  f2fs: fix to avoid dirent corruption
  - !4804  CVE-2023-52451 backport to 4.19 v2
  - openvswitch: fix stack OOB read while fragmenting IPv4 packets
  - Drivers: hv: vmbus: Use after free in __vmbus_open()
  - !4778 v3  Revert "memcg: fix a UAF problem in drain_all_stock()"
  - sched/membarrier: reduce the ability to hammer on sys_membarrier
  - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails
  - PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter
  - !4812  parisc: Clear stale IIR value on instruction access rights trap
  - parisc: Clear stale IIR value on instruction access rights trap
  - media: pvrusb2: fix use after free on context disconnection
  - powerpc/pseries/memhp: Fix access beyond end of drmem array
  - powerpc/pseries/memhotplug: Quieten some DLPAR operations
  - !4758  binder: signal epoll threads of self-work
  - !4746  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
  - Revert "memcg: fix a UAF problem in drain_all_stock()"
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table
  - !4751 [sync] PR-4623: i2c: Optimized the value setting of maxwrite limit to  fifo depth - 1
  - !4707  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
  - !4686  mlxsw: spectrum_acl_tcam: Fix stack corruption
  - binder: signal epoll threads of self-work
  - !4710  CVE-2021-46904 for openEuler1.0
  - i2c: hisi: Add clearing tx aempty interrupt operation
  - i2c: hisi: Optimized the value setting of maxwrite limit to fifo depth - 1
  - !4671  uio: Fix use-after-free in uio_open
  - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
  - net: hso: fix NULL-deref on disconnect regression
  - net: hso: fix null-ptr-deref during tty device unregistration
  - usb: hso: check for return value in hso_serial_common_create()
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
  - mlxsw: spectrum_acl_tcam: Fix stack corruption
  - f2fs: fix to avoid dirent corruption
  - uio: Fix use-after-free in uio_open


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2403.2.0.0242
changelog:
  - !5133  CVE-2021-46926
  - !5136  NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
  - !5052 v3  Remove WQ_FLAG_BOOKMARK flag
  - !5140 linux-4.19.y inclusion(4.19.305..4.19.307) part3
  - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
  - NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
  - ALSA: hda: intel-sdw-acpi: harden detection of controller
  - soundwire: intel: filter SoundWire controller device search
  - !5114  fix CVE-2023-52578
  - !5119  crypto: scomp - fix req->dst buffer overflow
  - !5101  EDAC/thunderx: Fix possible out-of-bounds string access
  - !5094  HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  - crypto: scomp - fix req->dst buffer overflow
  - net: fix kabi check warning
  - net: Fix unwanted sign extension in netdev_stats_to_stats64()
  - net: bridge: use DEV_STATS_INC()
  - net: add atomic_long_t to net_device_stats fields
  - !5092  wifi: mac80211: fix potential key use-after-free
  - EDAC/thunderx: Fix possible out-of-bounds string access
  - !5095 linux-4.19.y inclusion(4.19.305..4.19.307) part 2
  - !5090  drm: bridge/panel: Cleanup connector on bridge detach
  - !5088  uio_hv_generic: Fix a memory leak in error handling paths
  - !4952  scsi: qedf: Add pointer checks in qedf_update_link_speed()
  - !5076 v3  CVE-2021-47074
  - netfilter: nft_compat: reject unused compat flag
  - ppp_async: limit MRU to 64K
  - inet: read sk->sk_family once in inet_recv_error()
  - bonding: remove print in bond_verify_device_path
  - af_unix: fix lockdep positive in sk_diag_dump_icons()
  - net: ipv4: fix a memleak in ip_setup_cork
  - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
  - virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
  - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
  - SUNRPC: Fix a suspicious RCU usage warning
  - tcp: Add memory barrier to tcp_push()
  - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
  - md: Whenassemble the array, consult the superblock of the freshest device
  - jbd2: correct the printing of write_flags in jbd2_write_superblock()
  - !5073  RDMA/rxe: Clear all QP fields if creation failed
  - !5077  RDMA/rxe: Return CQE error if invalid lkey was supplied
  - !5055 linux-4.19.y inclusion(4.19.305..4.19.307) part 1
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  - wifi: mac80211: fix potential key use-after-free
  - drm: bridge/panel: Cleanup connector on bridge detach
  - uio_hv_generic: Fix a memory leak in error handling paths
  - of: unittest: Fix of_count_phandle_with_args() expected value message
  - of: unittest: Fix compile in the non-dynamic case
  - RDMA/rxe: Return CQE error if invalid lkey was supplied
  - nvme-loop: fix memory leak in nvme_loop_create_ctrl()
  - nvme-loop: don't put ctrl on nvme_init_ctrl error
  - !5060  net: fix possible store tearing in neigh_periodic_work()
  - RDMA/rxe: Clear all QP fields if creation failed
  - net: fix possible store tearing in neigh_periodic_work()
  - of: Fix double free in of_parse_phandle_with_args_map
  - pmdomain: core: Move the unused cleanup to a _sync initcall
  - tick/sched: Preserve number of idle sleeps across CPU hotplug events
  - acpi: property: Let args be NULL in __acpi_node_get_property_reference
  - tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
  - ACPI: LPIT: Avoid u32 multiplication overflow
  - audit: Send netlink ACK before setting connection in auditd_set
  - crypto: scompress - return proper error code for allocation failure
  - crypto: af_alg - Disallow multiple in-flight AIO requests
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
  - !5046  usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
  - sched: remove wait bookmarks
  - filemap: remove use of wait bookmarks
  - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
  - !4929  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
  - !4752  block: add check that partition length needs to be aligned with block size
  - !4735  blk-mq: fix IO hang from sbitmap wakeup race
  - !3864  nvme: sanitize metadata bounce buffer for reads
  - !4946  NFC: st21nfca: Fix memory leak in device probe and remove
  - !4999  CVE-2021-46984
  - !4938  crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
  - !4990  vt: fix memory overlapping when deleting chars in the buffer
  - !4978  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
  - !5018  ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
  - !4992  bnxt_en: Fix RX consumer index logic in the error path.
  - !4997  Fixed CVE-2023-52504
  - !4982  i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
  - !4983  net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
  - !4995  mpam/mpam_ctrlmon: update monitor config with its parent's ctrl_val
  - !4974  arm64/mpam: set default feedback of last_cmd_status interface as null string
  - !4975  arm64/mpam: support resctrl fs to show mounting option
  - !4973  arm64/mpam: Skip updates of unrelated ctrl type
  - ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
  - !4996  soundwire: stream: fix memory leak in stream config error path
  - !4817 v2  io_uring: fix overflows checks in provide buffers
  - kyber: fix kabi broken in ->bio_merge()
  - kyber: fix out of bounds access when preempted
  - x86/alternatives: Disable KASAN in apply_alternatives()
  - soundwire: stream: fix memory leak in stream config error path
  - mpam/mpam_ctrlmon: update monitor config with its parent's ctrl_val
  - bnxt_en: Fix RX consumer index logic in the error path.
  - !4969  CVE-2021-46990
  - vt: fix memory overlapping when deleting chars in the buffer
  - !4945  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  - !4944  perf/x86/lbr: Filter vsyscall addresses
  - !4967  i2c: xiic: fix reference leak when pm_runtime_get_sync fails
  - !4970  binder: fix async_free_space accounting for empty parcels
  - !4919 v2  HID: usbhid: fix info leak in hid_submit_ctrl
  - !4980  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
  - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
  - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
  - !4949  CVE-2021-47024
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
  - arm64/mpam: support resctrl fs to show mounting option
  - arm64/mpam: set default feedback of last_cmd_status interface as null string
  - arm64/mpam: Skip updates of unrelated ctrl type
  - binder: fix async_free_space accounting for empty parcels
  - powerpc/64s: Fix crashes when toggling entry flush barrier
  - i2c: xiic: fix reference leak when pm_runtime_get_sync fails
  - scsi: qedf: Add pointer checks in qedf_update_link_speed()
  - vsock/virtio: free queued packets when closing socket
  - vsock/virtio: discard packets only when socket is really closed
  - virtio_vsock: Fix race condition in virtio_transport_recv_pkt
  - NFC: st21nfca: Fix memory leak in device probe and remove
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  - perf/x86/lbr: Filter vsyscall addresses
  - crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
  - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
  - HID: usbhid: fix info leak in hid_submit_ctrl
  - io_uring: fix overflows checks in provide buffers
  - block: add check that partition length needs to be aligned with block size
  - blk-mq: fix IO hang from sbitmap wakeup race
  - nvme: sanitize metadata bounce buffer for reads


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2403.3.0.0243
changelog:
  - !5306  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - !5347  s390/ptrace: handle setting of fpc register correctly
  - !5309  drm/msm/dpu: Add mutex lock in control vblank irq
  - s390/ptrace: handle setting of fpc register correctly
  - !5267  llc: call sock_orphan() at release time
  - drm/msm/dpu: Add mutex lock in control vblank irq
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - !5241  powerpc/lib: Validate size for vector operations
  - !5246  ceph: fix deadlock or deadcode of misusing dget()
  - !5268  crypto: algif_aead - fix uninitialized ctx->init
  - crypto: algif_aead - fix uninitialized ctx->init
  - llc: call sock_orphan() at release time
  - !5220  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
  - !5196  drm: Don't unref the same fb many times by mistake due to deadlock handling
  - ceph: fix deadlock or deadcode of misusing dget()
  - powerpc/lib: Validate size for vector operations
  - !5210 v2  Fix CVE-2022-48629 and CVE-2022-48630
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
  - !5175  arm64/mpam: Fix use-after-free when deleting resource groups
  - !5163  nfc: nci: assert requested protocol is valid
  - !5172  CVE-2023-52502 for openEuler-1.0-LTS
  - crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ
  - crypto: qcom-rng - ensure buffer for generate is completely filled
  - drm: Don't unref the same fb many times by mistake due to deadlock handling
  - !5177  net: nfc: llcp: Add lock when modifying device list
  - !5157  RDMA/srp: Do not call scsi_done() from srp_abort()
  - net: nfc: llcp: Add lock when modifying device list
  - arm64/mpam: Fix use-after-free when deleting resource groups
  - arm64/mpam: remove kernfs_get() calls() and add kernfs_put() calls to prevent refcount leak
  - !5142  arm64/mpam: Expand the monitor number of the resctrl root
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
  - nfc: constify several pointers to u8, char and sk_buff
  - nfc: nci: assert requested protocol is valid
  - RDMA/srp: Do not call scsi_done() from srp_abort()
  - arm64/mpam: Expand the monitor number of the resctrl root


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2403.4.0.0244
changelog:
  - !5539  spi: spi-fsl-dspi: Fix a resource leak in an error handling path
  - !5542  round lts patches
  - !5520  scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
  - l2tp: pass correct message length to ip6_append_data
  - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
  - spi: spi-fsl-dspi: Fix a resource leak in an error handling path
  - !5514 CVE-2021-47110
  - !5497  llc: Drop support for ETH_P_TR_802_2.
  - !5498  llc: make llc_ui_sendmsg() more robust against bonding changes
  - !5490  tcp: add sanity checks to rx zerocopy
  - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
  - x86/kvm: Do not try to disable kvmclock if it was not enabled
  - x86/kvm: Disable kvmclock on all CPUs on shutdown
  - !5502  pstore/ram: Fix crash when setting number of cpus to an odd number
  - !5477  Fixed CVE-2021-47112
  - pstore/ram: Fix crash when setting number of cpus to an odd number
  - llc: make llc_ui_sendmsg() more robust against bonding changes
  - llc: Drop support for ETH_P_TR_802_2.
  - tcp: add sanity checks to rx zerocopy
  - !5479  jfs: fix cve-2023-52600
  - !5478  jfs: fix array-index-out-of-bounds in diNewExt
  - !5485  nfsd: fix use-after-free due to delegation race
  - nfsd: fix use-after-free due to delegation race
  - !5281  printk: avoid deadlock in panic
  - jfs: fix uaf in jfs_evict_inode
  - JFS: fix memleak in jfs_mount
  - jfs: fix array-index-out-of-bounds in diNewExt
  - x86/kvm: Teardown PV features on boot CPU as well
  - !5465  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
  - !5361  btrfs: abort in rename_exchange if we fail to insert the second ref
  - !5254  tomoyo: fix UAF write bug in tomoyo_write_control()
  - !5321  UBSAN: array-index-out-of-bounds in dtSplitRoot
  - !5455  CVE-2021-47114
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
  - !5320  jfs: fix slab-out-of-bounds Read in dtSearch
  - ocfs2: issue zeroout to EOF blocks
  - ocfs2: fix zero out valid data
  - ocfs2: fix data corruption by fallocate
  - !5374  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
  - !5418 [sync] PR-5317:  KVM: s390: fix setting of fpc register
  - !5272  net/smc: fix illegal rmb_desc access in SMC-D connection dump
  - !5274  phonet/pep: refuse to enable an unbound pipe
  - !5359  CVE-2021-47121 and CVE-2021-47122
  - KVM: s390: fix setting of fpc register
  - !5358 v5  CVE-2023-52595
  - !5336  binder: fix race between mmput() and do_exit()
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng
  - btrfs: abort in rename_exchange if we fail to insert the second ref
  - net: caif: fix memory leak in caif_device_notify
  - net: caif: fix memory leak in cfusbl_device_notify
  - net: caif: add proper error handling
  - net: caif: added cfserl_release function
  - rt2x00: Fix kabi breakage in struct rt2x00lib_ops
  - wifi: rt2x00: restart beacon queue when hardware reset
  - rt2x00: clear up IV's on key removal
  - rt2x00: clear IV's on start to fix AP mode regression
  - rt2800: add pre_reset_hw callback
  - rt2800: do not nullify initialization vector data
  - binder: fix race between mmput() and do_exit()
  - UBSAN: array-index-out-of-bounds in dtSplitRoot
  - jfs: fix slab-out-of-bounds Read in dtSearch
  - printk: avoid deadlock in panic
  - phonet/pep: refuse to enable an unbound pipe
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump
  - tomoyo: fix UAF write bug in tomoyo_write_control()


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2404.1.0.0245
changelog:
  - !5874  scsi: hisi_sas: Update disk locked timeout to 7 seconds
  - scsi: hisi_sas: Update disk locked timeout to 7 seconds
  - !5841  fixup CVE-2024-26751
  - !5834  CVE-2021-47144
  - ARM: ep93xx: Add terminator to gpiod_lookup_table
  - drm/amd/amdgpu: fix refcount leak
  - !5796  netfilter: nft_limit: reject configurations that cause integer overflow
  - netfilter: nft_limit: reject configurations that cause integer overflow
  - !5755  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
  - !5767 v5  net: fec: fix the potential memory leak in fec_enet_init()
  - !5718  CVE-2024-26654
  - net: fec: fix the potential memory leak in fec_enet_init()
  - !5722  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
  - sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
  - !5727  fix CVE-2021-47101
  - !5531  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
  - !5715  net: hns3: updates 2024.04.02
  - !5710 v2  ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
  - asix: fix wrong return value in asix_check_host_enable()
  - asix: fix uninit-value in asix_mdio_read()
  - net: asix: fix uninit value bugs
  - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
  - !5700  sr9800: Add check for usbnet_get_endpoints
  - !5680  USB: usbfs: Don't WARN about excessively large memory allocations
  - !5679  fix CVE-2023-52587
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
  - ALSA: aica: Fix a long-time build breakage
  - !5713 v2  tipc: wait and exit until all work queues are done
  - net: hns3: update hns3 version to 24.3.1
  - net: hns3: fix port vlan filter not disabled problem in dynamic vlan mode
  - !5696  NFS: Fix an Oopsable condition in __nfs_pageio_add_request()
  - tipc: wait and exit until all work queues are done
  - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
  - !5702  ext4: Validate inode pa before using preallocation blocks
  - !5694  tipc: skb_linearize the head skb when reassembling msgs
  - ext4: Validate inode pa before using preallocation blocks
  - !5674  mac80211: fix locking in ieee80211_start_ap error path
  - !5672  arm64/mpam_ctrlmon: Update ctrl group config with rdtgrp's partid
  - sr9800: Add check for usbnet_get_endpoints
  - !5528  btrfs: do not BUG_ON in link_to_fixup_dir
  - NFS: Fix an Oopsable condition in __nfs_pageio_add_request()
  - tipc: skb_linearize the head skb when reassembling msgs
  - !5522  md/raid5: fix atomicity violation in raid5_cache_count
  - USB: usbfs: Don't WARN about excessively large memory allocations
  - IB/ipoib: Fix mcast list locking
  - RDMA/IPoIB: Fix error code return in ipoib_mcast_join
  - mac80211: fix locking in ieee80211_start_ap error path
  - arm64/mpam: Allocate new partid for the created ctrl group
  - arm64/mpam_ctrlmon: Update ctrl group config with rdtgrp's partid
  - !5581  CVE-2023-52622
  - !5658 v2  CVE-2021-47131
  - !5645 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
  - !5559  fix CVE-2021-47173
  - !5575  net: dsa: fix a crash if ->get_sset_count() fails
  - net/tls: Use RCU API to access tls_ctx->netdev
  - net/tls: Remove the context from the list in tls_device_down
  - tls: Fix context leak on tls_device_down
  - net/tls: Resolve KABI break when backport bugfix of CVE-2021-47131
  - net/tls: Fix use-after-free after the TLS device goes down and up
  - net/tls: Replace TLS_RX_SYNC_RUNNING with RCU
  - !5625  i2c: i801: Don't generate an interrupt on bus reset
  - !5517  dm: revert partial fix for redundant bio-based IO accounting
  - arm64/mpam: Fix repeated enabling in mpam_enable()
  - !5481  jfs: fix array-index-out-of-bounds in dbAdjTree
  - !5572  mld: fix panic in mld_newpack()
  - !5565  tracing: Ensure visibility when inserting an element into tracing_map
  - !5571 v2  mm/mlock: return EINVAL for illegal user memory range in mlock
  - i2c: i801: Don't generate an interrupt on bus reset
  - !5587  Fix CVE-2021-47171
  - !5579  mm: ksm: fix use-after-free kasan report in ksm_might_need_to_copy
  - !5573  Fix CVE-2021-47160
  - !5564  serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
  - !5560  drm/amdgpu: Fix a use-after-free
  - net: usb: fix possible use-after-free in smsc75xx_bind
  - net: usb: fix memory leak in smsc75xx_bind
  - ext4: avoid online resizing failures due to oversized flex bg
  - ext4: unify the type of flexbg_size to unsigned int
  - ext4: remove unnecessary check from alloc_flex_gd()
  - mm: ksm: fix use-after-free kasan report in ksm_might_need_to_copy
  - !5558  net: fujitsu: fix potential null-ptr-deref
  - !5556  NFC: nci: fix memory leak in nci_allocate_device
  - net: dsa: fix a crash if ->get_sset_count() fails
  - net: dsa: mt7530: fix VLAN traffic leaks again
  - net: dsa: mt7530: fix VLAN traffic leaks
  - mld: fix panic in mld_newpack()
  - mm/mlock: return EINVAL for illegal user memory range in mlock
  - tracing: Ensure visibility when inserting an element into tracing_map
  - serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
  - !5552  net/smc: remove device from smcd_dev_list after failed device_add()
  - !5290  crypto: algif_aead - Only wake up when ctx->more is zero
  - !5446  keys: safe concurrent user->{session,uid}_keyring access
  - drm/amdgpu: Fix a use-after-free
  - !5550  pciehp: clear p_slot->work.data after powering off a slot
  - usb: misc: fix improper handling of refcount in uss720_probe()
  - misc/uss720: fix memory leak in uss720_probe
  - !5515  netfilter: nf_tables: disallow timeout for anonymous sets
  - !5538  netfilter: nf_tables: disallow anonymous set with timeout flag
  - net: fujitsu: fix potential null-ptr-deref
  - NFC: nci: fix memory leak in nci_allocate_device
  - net/smc: remove device from smcd_dev_list after failed device_add()
  - pciehp: clear p_slot->work.data after powering off a slot
  - netfilter: nf_tables: disallow anonymous set with timeout flag
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
  - btrfs: do not BUG_ON in link_to_fixup_dir
  - md/raid5: fix atomicity violation in raid5_cache_count
  - dm: revert partial fix for redundant bio-based IO accounting
  - netfilter: nf_tables: disallow timeout for anonymous sets
  - jfs: fix array-index-out-of-bounds in dbAdjTree
  - keys: safe concurrent user->{session,uid}_keyring access
  - crypto: af_alg - Work around empty control messages without MSG_MORE
  - crypto: af_alg - Fix regression on empty requests
  - crypto: algif_aead - Only wake up when ctx->more is zero


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.0.20-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix issue about iomem file that contains too many contens.As a result,the kdump service failed


author: Zhipeng Xie<xiezhipeng1@huawei.com> -2.0-3.1.25
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:change livepatch and os_hotpatch to permission and exclude in main package


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:rebase from upstream version v0.9.1
         Use Epoch to make the version number consistent with the upstream


author: fuanan <fuanan3@huawei.com> - 551-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Minor memory leak.
         Remove unnecessary and incorrectly used variable same_pos_bell.
         Fix erroneous EOF calculation when F command is interrupted.
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: yaoxin <yaoxin30@huawei.com> - 1.0.13-1
changelog:
  - Upgrade libEMF to 1.0.13; fix CVE-2020-13999 CVE-2020-11863 CVE-2020-11864 CVE-2020-11865 CVE-2020-11866


author: zhangmingyi <zhangmingyi5@huawei.com> - 2:0.1.1-2
changelog:
  - backporting: 	backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
  		backport-libbpf-Fix-the-name-of-a-reused-map.patch 
  		backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: capsh better error handling for integer parsing
          setcap clean up error handling of the ns rootid argument


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: If needed search PATH for capsh (==) self-execution
          Guarantee sufficient memory for scratch pathname


author: hy <eulerstoragemt@huawei.com> - 1:1.39.8-4
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Remove Java bingdings, zz-packages-zfs command and rhsrvany.exe from mingw32-srvany.


author: haowenchao <haowenchao@huawei.com> - 1.19.0-2
changelog:
  - Split rpm package to avoid main rpm package CUnit dependency
    Previous implement place executable files in main package which leading
    to dependency of CUnit. This change add a package utils and move
    these executable files to utils package to avoid main package's CUnit
    dependency, making main package weak depend on libiscsi-utils


author: haowenchao <haowenchao@huawei.com> - 1.19.0-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-iscsi-ls-Fix-iser-url-scheme-parsing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-test-tool-Compare-Write-skip-InvalidDataOutSize-unle.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-test-tool-Compare-Write-override-driver-queue_pdu-ca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-test-tool-iSCSICmdSnTooLow-override-driver-queue_pdu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-test-tool-iSCSICmdSnTooHigh-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-test-tool-iSCSIDataSnInvalid-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-test-tool-BlockEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-test-tool-BlockEraseReserved-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-test-tool-CryptoEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-test-tool-CryptoEraseReserved-override-driver-queue_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0011-test-tool-OverwriteReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0012-test-tool-OverwriteReserved-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0013-test-tool-remove-unused-iscsi_queue_pdu-symbol-overl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0014-iser-remove-__packed-from-struct-iser_cm_hdr-declaration.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0015-test-tools-use-extern-init-in-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0016-iscsi-inq-handle-setting-of-debug_level-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0017-Updata-iscsi-dd.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0018-iscsi-swp-handle-setting-of-debug_level-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0019-fix-iscsi-ls-parameter-parse.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0020-Check-return-value-of-scsi_malloc-in-order-to.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0021-Fix-segmentation-fault-problem.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Ruijun Ge <geruijun@huawei.com> - 1.19.0-8
changelog:
  - DESC: backport patches to solve command parameter parse problem
          and dereference null pointer problem


author: songnannan<songnannan2@huawei.com> 0.8.0.dev.2-2.h1
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:the debuginfo and debugsource packages are not generated by default


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 3.1-3
changelog:
  - fix heap-use-after-free in cil_yy_switch_to_buffer
  - fix heap-use-after-free in __class_reset_perm_values()
  - fix heap-buffer-overflow in cil_print_recursive_blockinherit


author: xingxing <xingxing9@h-partners.com> - 0.7.14-5
changelog:
  - Type:cves
  - CVE:CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-2021-44576-CVE-2021-44577
  - SUG:NA
  - DESC:fix CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-2021-44576-CVE-2021-44577


author: gaihuiying <eaglegai@163.com> - 0.9.4-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport upstream patches:
         add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: renmingshuai <renmingshuai@huawei.com> - 0.9.4-9
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: shangyibin <shangyibin1@openeuler.org> - 1.4.2-4
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Adding help package to the installation dependency of the main package


author: shangyibin <shangyibin1@openeuler.org> - 1.4.2-5
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Change the dependency on the help package from requires to recommends.


author: wangye <wangye70@huawei.com> - 4.1.0-2
changelog:
  - Type:cves
  - ID:CVE-2020-35521 CVE-2020-35522 CVE-2020-35523 CVE-2020-35524
  - SUG:NA
  - DESC: fix CVE-2020-35521 CVE-2020-35522 CVE-2020-35523 CVE-2020-35524


author: wenjun<wenjun8@huawei.com> - 4.0.9-11.h1
changelog:
  - Type:cves
  - ID:CVE-2018-18557 CVE-2018-17101 CVE-2018-17100 CVE-2018-12900 CVE-2018-18661
  - SUG:NA
  - DESC:fix above cves


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-9
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: Xu Yandong <xuyandong2@huawei.com> - 6.2.0-4
changelog:
  - Fix virdaemon waiting for child processes return code error.
  - Fix virsh dump and migrate return code error.


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - rpc: gendispatch: handle empty flags
  - rpc: add support for filtering @acls by uint params
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses
  - qemu: agent: set ifname to NULL after freeing


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - util: Move virIsDevMapperDevice() to virdevmapper.c
  - virdevmapper: Don't use libdevmapper to obtain dependencies


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - libvirt: Add 'retry' support for error policy
  - qemu: Support 'retry' BLOCK_IO_ERROR event.
  - libvirt/conf: Set default values of retry fileds


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  - security: fix SELinux label generation logic


author: chengguipeng<chengguipeng1@huawei.com> - 0.8.4-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC:solve the issue which dispaly could not resolve keysym XF86FullScreen


author: zoulin <zoulin13@huawei.com> - 2.9.10-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] patches from upstream
         Fix-handling-of-unexpected-EOF-in-xmlParseContent.patch
         Fix-line-numbers-in-error-messages-for-mismatched-ta.patch
         Fix-null-deref-in-legacy-SAX1-parser.patch
         update-for-xsd-language-type-check.patch
         Fix-dangling-pointer-with-xmllint-dropdtd.patch
         Fix-duplicate-xmlStrEqual-calls-in-htmlParseEndTag.patch
         Fix-exponential-behavior-with-recursive-entities.patch
         Fix-quadratic-behavior-when-looking-up-xml-attribute.patch
         Fix-use-after-free-with-xmllint-html-push.patch
         Fix-xmlGetNodePath-with-invalid-node-types.patch
         Stop-checking-attributes-for-UTF-8-validity.patch


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix heap-use-after-free in xmlXIncludeIncludeNode
         fix stack overflow in xmlDocDumpMemory
         fix stack overflow in htmlDocContentDumpOutput


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix memory leaks in XPointer string-range function
         fix null pointer deref in xmlXPtrRangeInsideFunction
         stop using maxParserDepth in xpath.c
         hardcode maximum XPath recursion depth
         fix XPath recursion limit


author: fuanan <fuanan3@h-partners.com> - 2.9.10-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: fuanan <fuanan3@h-partners.com> - 2.9.10-28
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: yuboyun <yuboyun@huawei.com> - 33.6-2
changelog:
  - Do not use '--loglevel' option when running Anaconda
    Improve Imc no-virt error handling
    Add POSTIN scriptlet error to the log monitor list
    Remove LD_PRELOAD libgomp.so.1 from Imc --no-virt


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.34-1
changelog:
  - Bump version to latest 10.3.34 version
  - For resolving the CVEs, which includes:
  - CVE-2021-46659
  - CVE-2021-46664
  - CVE-2021-46665
  - CVE-2021-46663
  - CVE-2021-46662
  - CVE-2021-46666
  - CVE-2021-46667
  - CVE-2021-46661
  - CVE-2021-46669
  - CVE-2021-46657
  - Above all CVEs needs to bump to the latest version for resolve.
  - Refresh all patches relies on the latest tar package.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.35-1
changelog:
  - Bump version to 10.3.35 for resolving CVEs as below
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387


author: Guoshuai Sun <sunguoshuai@huawei.com> 8.0.21-2
changelog:
  - New version 8.0.21 fix CVES: CVE-2020-14575 CVE-2020-14567 CVE-2020-14619
    CVE-2020-14651 CVE-2020-14641 CVE-2020-14568 CVE-2020-14623 CVE-2020-14591
    CVE-2020-14576 CVE-2020-14553 CVE-2020-14539 CVE-2020-14540 CVE-2020-14643
    CVE-2020-14702 CVE-2020-14614 CVE-2020-14680 CVE-2020-14633 CVE-2020-14632
    CVE-2020-14634 CVE-2020-14597 CVE-2020-14697 CVE-2020-14624 CVE-2020-14631
    CVE-2020-14678 CVE-2020-14550 CVE-2020-14559


author: wutao <wutao61@huawei.com> - 8.0.22-1
changelog:
  - upgrade to 8.0.22 fix CVES: CVE-2020-14852 CVE-2020-14794 CVE-2020-14775
    CVE-2020-14893 CVE-2020-14829 CVE-2020-14828 CVE-2020-14888 CVE-2020-14891
    CVE-2020-14812 CVE-2020-14870 CVE-2020-14769 CVE-2020-14878 CVE-2020-14789
    CVE-2020-14821 CVE-2020-14844 CVE-2020-14836 CVE-2020-14830 CVE-2020-14827
    CVE-2020-14773 CVE-2020-14765 CVE-2020-14869 CVE-2020-14776 CVE-2020-14861
    CVE-2020-14866 CVE-2020-14672 CVE-2020-14837 CVE-2020-14771 CVE-2020-14785
    CVE-2020-14838 CVE-2020-14848 CVE-2020-14791 CVE-2020-14793 CVE-2020-14804 
    CVE-2020-14777 CVE-2020-14800 CVE-2020-14786 CVE-2020-14845 CVE-2020-14839
    CVE-2020-14846 CVE-2020-14867 CVE-2020-14868 CVE-2020-14873 CVE-2020-14860
    CVE-2020-14814 CVE-2020-14790 CVE-2020-14809


author: wangxiao <wangxiao65@huawei.com> 8.0.23-1
changelog:
  - Upgrade mysql to 8.0.23, fix CVES: CVE-2021-1998 CVE-2021-2002
    CVE-2021-2010 CVE-2021-2011 CVE-2021-2016 CVE-2021-2021 CVE-2021-2022
    CVE-2021-2024 CVE-2021-2031 CVE-2021-2032 CVE-2021-2036 CVE-2021-2038
    CVE-2021-2046 CVE-2021-2048 CVE-2021-2056 CVE-2021-2058 CVE-2021-2060
    CVE-2021-2061 CVE-2021-2065 CVE-2021-2070 CVE-2021-2072 CVE-2021-2076
    CVE-2021-2081 CVE-2021-2087 CVE-2021-2088 CVE-2021-2122


author: wangxiao <wangxiao65@huawei.com> 8.0.24-1
changelog:
  - Upgrade mysql to 8.0.24, fix CVES: CVE-2021-2166 CVE-2021-2146
    CVE-2021-2162 CVE-2021-2212 CVE-2021-2299 CVE-2021-2293 CVE-2021-2215
    CVE-2021-2278 CVE-2021-2164 CVE-2021-2208 CVE-2021-2217 CVE-2021-2203
    CVE-2021-2226 CVE-2021-2298 CVE-2021-2230 CVE-2021-2300 CVE-2021-2304
    CVE-2021-2172 CVE-2021-2194 CVE-2021-2170 CVE-2021-2196 CVE-2021-2201
    CVE-2021-2180 CVE-2021-2307 CVE-2021-2169 CVE-2021-2171 CVE-2021-2305
    CVE-2021-2179 CVE-2021-2174 CVE-2021-2193 CVE-2021-2232 CVE-2021-2301
    CVE-2021-2308


author: liwu <liwu13@huawei.com> - 8.0.26-1
changelog:
  - Upgrade mysql to 8.0.26,fix CVE-2021-2356,fix CVE-2021-2339,CVE-2021-2354
    CVE-2021-2352,CVE-2021-2340


author: bzhaoop <bzhaojyathousandy@gmail.com> - 5.7.34-1
changelog:
  - Bump from 5.7.21 to latest 5.7.34
  - Correct the test steps and options
  - Refactor part of the file structure according to the new packages


author: bzhaoop <bzhaojyathousandy@gmail.com> - 5.7.37-1
changelog:
  - Fix CVE issues for bump to the 5.7.37 version
  - CVE-2022-21245
  - CVE-2022-21270
  - CVE-2022-21303
  - CVE-2022-21304
  - CVE-2022-21344
  - CVE-2022-21367
  - CVE-2021-35624
  - CVE-2021-2356
  - CVE-2021-2011
  - CVE-2021-2010
  - CVE-2021-2007


author: openEuler Buildteam <buildteam@openeuler.org> - 6.1-12
changelog:
  - Type:cves
  - ID:CVE-2019-17594  CVE-2019-17595
  - SUG:NA
  - DESC:fix CVE-2019-17594 and CVE-2019-17595


author: gaihuiying <gaihuiying1@huawei.com> - 5.9-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix undefined behavior in asn_build_int()
         libsnmp: Rework parse_imports()
         libsnmp: Increase MAX_IMPORTS
         libsnmp: Allocate the module import list on the heap
         libsnmp: Fix a memory leak in a MIB parser error path
         libsnmp: Fix the getoid() error path


author: gaihuiying <eaglegai@163.com> - 1:5.9-6
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: xingwei <xingwei14@h-partners.com> - 1:5.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
          IF-MIB: pass the network interface index to net
          IF-MIB: fix a memory leak
          IF-MIB: fix a recently introduced use after free
          IF-MIB: add a trailing newline to an error message


author: eaglegai <eaglegai@163.com> - 2.0-0.56
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ifconfig display error when the length of interface name is 15


author: openEuler Buildteam <buildteam@openeuler.org> - 2.4.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:stop the var-lib-nfs-rpc_pipefs.mount before remove the package


author: yuxiangyang <yuxiangyang4@huawei.com> - 1:1.16.1-2
changelog:
  - delete http_stub_status_module.This configuration creates a simple
    web page with basic status data,but it will affect cpu scale-out because
    it use atomic cas.


author: wangkai <13474090681@163.com> - 1:12.22.11-4
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-6
changelog:
  - Type:CVE
  - ID:CVE-2023-26551
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: Cui XuCui <cuixucui1@huawei.com> - 1.0.0-8
changelog:
  * Thu Jul 15 2021 zhangzikang <zhangzikang@kylinos.cn> - 1.0.0-7
  - Fix cdrom and cpufreq test failed


author: meitingli <bubble_mt@outlook.com> - 1.1.0-0
changelog:
  - 1. Add support os version: openEuler 22.03LTS
  - 2. Add FC/RAID/keycard/GPU/infiniband testcases
  - 3. Bugfix


author: cuixucui <cuixucui1@h-partners.com> - 1.1.1-0
changelog:
  -1. Reconstruct the log module and rectify the log printing
  -2. Add kabi testcase
  -3. Add driver, driver version, chip and module display to the console
  -4. Add configuration file for testsuite to improve automation rate
  -5. Add oech and oech-server version display
  -6. Add driver information display in hardware test logs


author: cuixucui <cuixucui1@h-partners> - 1.1.1-3
changelog:
  - Fix the problem that the client fails to send messages after the server port is modified
  - Fix the problem that the system test item failed to check the integrity of the software package


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-4
changelog:
  - Add requirements for system and bugfix
  - Upgrade oec-hardware-server
  - Update readme and design doc
  - Fix nvme error
  - Update network fibre check and log 
  - Update description for perf test
  - Add automatic configuration network card IP


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-5
changelog:
  - fix the bug that the test board information is not added to the configuration file
  - Add kabi for hardware critical test
  - Optimize disk/raid/fc/ethernet/infiniband test suite
  - Fix the bug of reading nvme data failed
  - Add file size check when uploading file to server


author: zhangyale <zhangyale3@h-partners.com> - 1.1.3-0
changelog:
  - Add support for openEuler 22.03 LTS SP1
  - Add AMD GPU testcase
  - Add automatic configuration network card IP
  - Add generate compatibility information


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: liqiang <liqiang332@h-partner.com> - 1.1.3-3
changelog:
  - Fix libswsds.so not stripped
  - Fix the value of kernel.src obtained by the kabi test case is incorrect
  - Add board infomation and fix memory bug
  - Fix the block size fails to be obtained during the NVME test
  - Judge whether to support kabi testing by architecture
  - Update readme and dev_design


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-0
changelog:
  - Add board information in the test report
  - Add spdk test case
  - Add dpdk test case
  - Update pci.ids file


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-1
changelog:
  - Add igc dpdk
  - Secure_filename to improve input robustness and security
  - Correcting bug, self.changed_ Logpath is a string
  - Increase the number of network card up detection times
  - Resolve the issue of IP configuration failure


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-0
changelog:
  - Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
  - Add modifications to Kylinsec with oec-hardware
  - Add support for Loongson and SW architectures
  - Bugfix


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: haowenchao <haowenchao@huawei.com> - 2.1.1-8
changelog:
  - backport one patch for solving install problem, sync from branch openEuler-20.09
    which commit id is 81fd136


author: yixiangzhike <zhangxingliang3@huawei.com> - 1.0-43
changelog:
  - Revert "Turn off the audit service by default"
  - Revert "Change the terminal output loglevel to 4"


author: openEuler Buildteam <buildteam@openeuler.org> - 1.5.1-24
changelog:
  - Type:cves
  - ID:CVE-2016-10506 CVE-2016-7445
  - SUG:restart
  - DESC:fix CVE-2018-15173 and CVE-2016-7445


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: liulong <liulong20@huawei.com> - 2.4.50-3
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230


author: xingwei <xingwei14@h-partners.com> - 2.0.0-26
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to solve package upgrade failure problem


author: hy-euler <eulerstoragemt@huawei.com> - 3.3-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: delete -Sgit in 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0000-Switch-gpt-header-move-and-msdos-overlap-to-python3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/6000-add-support-of-gpt_sync_mbr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/9000-Add-extra-judgment-for-a-partition-created-success.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/9001-bugfix-parted-fix-failure-of-mklabel-gpt_sync_mbr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


author: hy-euler <eulerstoragemt@huawei.com> - 3.6.2-5
changelog:
  - Type:enhancemnet
  - ID:NA
  - SUG:NA
  - DESC:add fedora patches for displaying more information while running lspci


author: yangmingtai <yangmingtai@huawei.com> - 10.35-4
changelog:
  - DESC:sync community patches
         backport-jit-fail-early-in-ffcps_-if-subject-shorter-than-off.patch
         backport-jit-fix-pcre2_jit_free_unused_memory-if-sljit-not-us.patch


author: Shen Yangyang <shenyangyang4@huawei.com> - 4:5.28.3-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete provide of perl-macros that actually provided by openEuler-rpm-config


author: wuchaochao<wuchaochao4@huawei.com> - 4:5.28.3-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix backport-perl-5.22.0-Install-libperl.so-to-shrpdir-on-Linux.patch


author: Funda Wang <fundawang@yeah.net> - 7.2.34-3
changelog:
  - Fix php BUG#81740 / CVE-2022-31631
  - Fix php BUG#81744 / CVE-2022-0567
  - Fix php BUG#81746 / CVE-2022-0568
  - Fix CVE-2023-0662
  - Fix CVE-2023-3247
  - Fix CVE-2023-3823
  - Fix CVE-2023-3824


author: wangye <wangye70@huawei.com> - 0.67.0-6
changelog:
  - Type:cves
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2019-10872 CVE-2018-16646 CVE-2018-18897 CVE-2018-19060 CVE-2018-20481 CVE-2019-14494 CVE-2019-7310


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-4
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: gaihuiying <eaglegai@163.com> - 2.4.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: liuxin <liuxin264@huawei.com> - 3.2.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix allocate_partitions threw an exception while adding /boot to RAID disk


author: yanan <yanan@huawei.com> - 3.2.2-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Convert LVM filter lists to sets
         Remove action device from LVM reject list


author: yanan <yanan@huawei.com> - 3.2.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the failure of not a valid name for this device while the hostname is setted as 63 maxlen


author: wanglu <wanglu210@huawei.com> - 1:3.2.2-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ignore devices marked as hidden in sysfs and fix reading hidden sysfs attribute


author: Enbo Kang <kangenbo@huawei.com> - 2.10-8
changelog:
  - Type:security
  - ID:CVE-2019-10906
  - SUG:NA
  - DESC:fix CVE-2019-10906 python-jinja2:str.format_map allows sandbox


author: shixuantong <shixuantong@huawei.com> - 4.5.2-6
changelog:
  - Cleaner: cover some more cases where scripts could sneak through in specially crafted style content.


author: shixuantong<shixuantong@huawei.com> - 5.3.0-6
changelog:
  - Type:cves
  - ID:CVE-2020-11538 CVE-2020-10378 CVE-2020-10177 CVE-2020-10994
  - SUG:NA
  - DESC:fix CVE-2020-11538 CVE-2020-10378 CVE-2020-10177 CVE-2020-10994


author: shixuantong<shixuantong@huawei.com> - 5.3.0-7
changelog:
  - Type:cves
  - ID:CVE-2019-19911 CVE-2020-5311
  - SUG:NA
  - DESC:fix CVE-2019-19911 and change patch name for CVE-2020-5311


author: shixuantong<shixuantong@huawei.com> - 5.3.0-10
changelog:
  - Type:cves
  - ID:CVE-2020-5310 CVE-2020-5312 CVE-2020-5313
  - SUG:NA
  - DESC:fix CVE-2020-5310 CVE-2020-5312 CVE-2020-5313


author: wangye <wangye70@huawei.com> - 8.1.1-2
changelog:
  - Type:CVE
  - CVE:CVE-2021-27921 CVE-2021-27922 CVE-2021-27923
  - SUG:NA
  - DESC: fix CVE-2021-27921CVE-2021-27922CVE-2021-27923


author: hanhui <hanhui15@huawei.com> - 8.1.1-3
changelog:
  - Type:bugfix
  - CVE:CVE-2021-25287、CVE-2021-25288、CVE-2021-28675、CVE-2021-28676、CVE-2021-28677、CVE-2021-28678
  - SUG:NA
  - DESC: incorporate community patch


author: wangkai <13474090681@163.com> - 9.0.1-5
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: yefei <yefei25@huawei.com> - 18.0-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:  add bash completion and repair python2 interpreter path


author: chenhaixing <chenhaixing@huawei.com> - 1.25.9-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.25.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify HOST_PORT_PAT in backport-fixed-issue-with-port-0-returning-None.patch


author: xzf1244 <xzff@hust.edu.cn> - 1.25.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix field NRESERVED_PAT and function _idna_encode that will cause bugs


author: BruceGW<gyl93216@163.com> - 3.7.9-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix _PyEval_FiniThreads
         rewrite _PyObject_IsFreed unit tests
         get test_capi passing with address sanitize
         remove use after free reference in ctypes
         fix memory leak in _asynciomodule.c


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable profile guided optimizations for x86_64 and i686 architectures


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bpo-43124: Fix smtplib multiple CRLF injection
         bpo-12800: tarfile: Restore fix from 011525ee9
         bpo-41815: SQLite: segfault if backup called on closed database
         bpo-42183: Fix a stack overflow error for asyncio Task or Future repr()
         bpo-45001: Make email date parsing more robust against malformed input


author: yanglongkang <yanglongkang@h-partners.com> - 3.7.9-27
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:delete the .crl file, capath file and .pem file in the test case


author: wangjie<wangjie294@huawei.com> - 3.7.9-4
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Change the dependency on the help package from requires to recommends


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - hw: usb: hcd-ohci: check for processed TD before retire
  - hw: ehci: check return value of 'usb_packet_map'
  - hw: usb: hcd-ohci: check len and frame_number variables
  - hw/net/e1000e: advance desc_offset in case of null descriptor


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - ati: use vga_read_byte in ati_cursor_define
  - sd: sdhci: assert data_count is within fifo_buffer
  - msix: add valid.accepts methods to check address


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - scsi-bus: Refactor the code that retries requests
  - scsi-disk: Add support for retry on errors
  - qapi/block-core: Add retry option for error action
  - block-backend: Introduce retry timer
  - block-backend: Add device specific retry callback
  - block-backend: Enable retry action on errors
  - block-backend: Add timeout support for retry
  - block: Add error retry param setting
  - virtio-blk: Refactor the code that processes queued requests
  - virtio-blk: On restart, process queued requests in the proper context
  - virtio_blk: Add support for retry on errors
  - block-backend: Stop retrying when draining
  - block: Add sanity check when setting retry parameters


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - hw/sd: sdhci: Don't transfer any data when command time out
  - hw/sd: sdhci: Don't write to SDHC_SYSAD register when transfer is in progress
  - hw/sd: sdhci: Correctly set the controller status for ADMA
  - hw/sd: sdhci: Limit block size only when SDHC_BLKSIZE register is writable
  - hw/sd: sdhci: Reset the data pointer of s->fifo_buffer[] when a different block size is programmed


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - net: introduce qemu_receive_packet()
  - e1000: switch to use qemu_receive_packet() for loopback
  - dp8393x: switch to use qemu_receive_packet() for loopback packet
  - sungem: switch to use qemu_receive_packet() for loopback
  - tx_pkt: switch to use qemu_receive_packet_iov() for loopback
  - rtl8139: switch to use qemu_receive_packet() for loopback
  - pcnet: switch to use qemu_receive_packet() for loopback
  - cadence_gem: switch to use qemu_receive_packet() for loopback
  - lan9118: switch to use qemu_receive_packet() for loopback


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - hw/pci-host: add pci-intack write method
  - pci-host: add pcie-msi read method
  - vfio: add quirk device write method
  - prep: add ppc-parity write method
  - nvram: add nrf51_soc flash read method
  - spapr_pci: add spapr msi read method
  - tz-ppc: add dummy read/write methods
  - imx7-ccm: add digprog mmio write method


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - vhost-user-gpu: fix resource leak in 'vg_resource_create_2d' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in vg_resource_attach_backing (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak while calling 'vg_resource_unref' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in 'virgl_cmd_resource_unref' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in 'virgl_resource_attach_backing' (CVE-2021-3544)
  - vhost-user-gpu: fix memory disclosure in virgl_cmd_get_capset_info (CVE-2021-3545)
  - vhost-user-gpu: fix OOB write in 'virgl_cmd_get_capset' (CVE-2021-3546)


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - ide: ahci: add check to avoid null dereference (CVE-2019-12067)
  - hw/intc/arm_gic: Fix interrupt ID in GICD_SGIR register
  - usb: limit combined packets to 1 MiB (CVE-2021-3527)


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - fix cve-2020-35504 esp: always check current_req is not NULL before use in DMA callbacks
  - fix cve-2020-35505 esp: ensure cmdfifo is not empty and current_dev is non-NULL


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - x86: Intel AVX512_BF16 feature enabling
  - i386: Add MSR feature bit for MDS-NO
  - i386: Add macro for stibp
  - i386: Add new CPU model Cooperlake
  - target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  - target/i386: Add missed security features to Cooperlake CPU model
  - target/i386: add PSCHANGE_NO bit for the ARCH_CAPABILITIES MSR
  - target/i386: Export TAA_NO bit to guests


author: yezengruan <yezengruan@huawei.com>
changelog:
  - hw/rdma: Fix possible mremap overflow in the pvrdma device (CVE-2021-3582)
  - pvrdma: Ensure correct input on ring init (CVE-2021-3607)
  - pvrdma: Fix the ring init error flow (CVE-2021-3608)


author: yezengruan <yezengruan@huawei.com>
changelog:
  - vhost-vsock: detach the virqueue element in case of error (CVE-2022-26354)
  - virtio-net: fix map leaking on error during receive (CVE-2022-26353)


author: yezengruan <yezengruan@huawei.com>
changelog:
  - hw/block/fdc: Extract blk_create_empty_drive()
  - hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196
  - tests/fdc-test: Add a regression test for CVE-2021-20196
  - display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207)
  - ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206)


author: yezengruan <yezengruan@huawei.com>
changelog:
  - hw/intc/arm_gicv3_dist: Rename 64-bit accessors with 'q' suffix
  - hw/intc/arm_gicv3: Replace mis-used MEMTX_* constants by booleans
  - hw/intc/arm_gicv3: Check for !MEMTX_OK instead of MEMTX_ERROR (CVE-2021-3750)
  - net/colo-compare.c: Check that colo-compare is active


author: sundongxu <sundongxu3@huawei.com>
changelog:
  - e1000: fail early for evil descriptor
  - e1000: fix tx re-entrancy problem
  - hw/sd/sdcard: Do not allow invalid SD card sizes
  - hw/sd/sdcard: Do not switch to ReceivingData if address is invalid
  - hw/sd/sdcard: Restrict Class 6 commands to SCSD cards
  - hw/sd/sdcard: Simplify realize() a bit
  - hw/sd/sdcard: Update coding style to make checkpatch.pl happy
  - scsi/qemu-pr-helper: Fix out-of-bounds access to trnptid_list[]
  - curses: Fixes curses compiling errors.
  - net/dump.c: Suppress spurious compiler warning
  - tests: Replace deprecated ASN1 code


author: yezengruan <yezengruan@huawei.com>
changelog:
  - hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued
  - scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216)
  - scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216)


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - qga/win32: Use rundll for VSS installation
  - qga/win32: Remove change action from MSI installer
  - 9pfs: prevent opening special files (CVE-2023-2861)


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - accel/tcg: fix race in cpu_exec_step_atomic (bug 1863025)
  - pci: assert configuration access is within bounds
  - io: remove io watch if TLS channel is closed during handshake


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
  - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  - net: Update MemReentrancyGuard for NIC
  - net: Provide MemReentrancyGuard * to qemu_new_nic()
  - memory: prevent dma-reentracy issues
  - softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR
  - Fixed the early version of CVE-2022-4144 patch is not fully adapted
  - target/arm: fix typo in cpu.h ID_AA64PFR1 field name


author: yaoxin <yaoxin30@huawei.com> - 5.0.14-1
changelog:
  - Upgrade redis5 to 5.0.14 for fix cves: CVE-2021-41099
    CVE-2021-32762 CVE-2021-32675 CVE-2021-32687 CVE-2021-32626
    CVE-2021-32627 CVE-2021-32628


author: openEuler Buildteam <buildteam@openeuler.org> - 4.15.1-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert always execute file trigger scriptlet callbacks with owning header


author: shixuantong <shixuantong@huawei.com> - 4.15.1-24
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix data race in packageBinaries() function and prioritize large packages


author: wutao <wutao61@huawei.com> - 2.5.8-3
changelog:
  - fix CVE-2020-25613
  - WEBrick,a simple HTTP server bundled with Ruby,had not
  - checked the transfer-encoding header value rigorously.
  - An attacker may potentially exploit this issue to bypass
  - a reverse proxy,which may lead to an HTTP Request Smuggling
  - attack.


author: shixuantong <shixuantong@huawei.com> - 2.5.8-114
changelog:
  - Type:cves
  - ID:CVE-2021-31799 CVE-2021-31810 CVE-2021-32066
  - SUG:NA
  - DESC:fix CVE-2021-31799 CVE-2021-31810 CVE-2021-32066


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-4
changelog:
  - Type:cves
  - ID:CVE-2020-27840 CVE-2021-20277 CVE-2021-20254
  - SUG:NA
  - DESC:fix CVE-2020-27840 CVE-2021-20277 CVE-2021-20254


author: chxssg <chxssg@qq.com> - 4.11.12-6
changelog:
  - Type:cves
  - ID:CVE-2020-14318 CVE-2020-14323 CVE-2020-14383 
  - SUG:NA
  - DESC:fix CVE-2020-14318 CVE-2020-14323 CVE-2020-14383


author: xihaochen <xihaochen@huawei.com> - 4.11.12-8
changelog:
  - Type:cves
  - ID:CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738
  - SUG:NA
  - DESC:fix CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-9
changelog:
  - Type:cves
  - ID:CVE-2021-43566
  - SUG:NA
  - DESC:backport patches to fix CVE-2021-43566:
         s3/lib: add parent_smb_fname function
         smbd: use parent_smb_fname in check_parent_access
         smbd: use parent_smb_fname in inherit_new_acl
         s3/VFS: Add SMB_VFS_MKDIRAT
         vfs_full_audit: pass conn to smb_fname_str_do_log
         s3/VFS: change connection_struct cwd_fname to cwd_fsp
         s3/smbd: Change mkdir_internal to call SMB_VFS_MKDIRAT
         smbd: use parent_smb_fname in mkdir_internal
         fix CVE-2021-43566


author: xinghe <xinghe@h-partners.com> - 4.11.12-13
changelog:
  - Type:cves
  - CVE:CVE-2022-32746 CVE-2022-32744 CVE-2022-2031 CVE-2022-32742
  - SUG:NA
  - DESC:fix CVE-2022-32746 CVE-2022-32744 CVE-2022-2031 CVE-2022-32742


author: xinghe <xinghe2@h-partners.com> - 4.11.12-31
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: yuboyun <yuboyun@huawei.com> - 4.11.6-8
changelog:
  - Type:cves
  - ID:CVE-2020-10730 CVE-2020-10745 CVE-2020-14303 CVE-2020-10760
  - SUG:NA
  - DESC:fix CVE-2020-10730CVE-2020-10745CVE-2020-14303CVE-2020-10760


author: luhuaxin <1539327763@qq.com> - 3.14.2-66
changelog:
  - selinux_requires macro shouldn't depend on policycoreutils-python
  - add avc for allowing systemd services to check selinux status


author: luhuaxin <1539327763@qq.com> - 3.14.2-71
changelog:
  - backport some upstream patches
    backport-Allow-systemd-logind-dbus-chat-with-fwupd.patch
    backport-Allow-auditd-manage-kerberos-host-rcache-files.patch
    backport-Add-dev_lock_all_blk_files-interface.patch
    backport-Define-named-file-transition-for-sshd-on-tmp-krb5_0..patch
    backport-Allow-nsswitch_domain-to-connect-to-systemd-machined.patch
    backport-Allow-unconfined_t-to-node_bind-icmp_sockets-in-node.patch
    backport-Create-macro-corenet_icmp_bind_generic_node.patch
    backport-Allow-traceroute_t-and-ping_t-to-bind-generic-nodes.patch
    backport-Allow-passwd-to-get-attributes-in-proc_t.patch
    backport-Allow-login_pgm-attribute-to-get-attributes-in-proc_.patch
    backport-Allow-syslogd_t-domain-to-read-write-tmpfs-systemd-b.patch
    backport-Allow-all-users-to-connect-to-systemd-userdbd-with-a.patch
    backport-Add-new-devices-and-filesystem-interfaces.patch
    backport-Add-lvm_dbus_send_msg-lvm_rw_var_run-interfaces.patch
    backport-Allow-domain-write-to-an-automount-unnamed-pipe.patch
    backport-Allow-dyntransition-from-sshd_t-to-unconfined_t.patch
    backport-Allow-initrc_t-create-run-chronyd-dhcp-directory-wit.patch
    backport-Update-systemd_resolved_read_pid-to-also-read-symlin.patch
    backport-Allow-systemd-resolved-manage-its-private-runtime-sy.patch
    backport-Allow-systemd-logind-manage-init-s-pid-files.patch
    backport-Add-systemd_resolved_write_pid_sock_files-interface.patch
    backport-Allow-nsswitch-domain-write-to-systemd-resolved-PID-.patch
    backport-sysnetwork.if-avoid-directly-referencing-systemd_res.patch
    backport-Allow-stub-resolv.conf-to-be-a-symlink.patch
    backport-Allow-domain-stat-proc-filesystem.patch
    backport-Allow-domain-write-to-systemd-resolved-PID-socket-fi.patch
    backport-Allow-systemd-machined-manage-systemd-userdbd-runtim.patch
    backport-Allow-domain-stat-the-sys-filesystem.patch
    backport-Allow-login_userdomain-write-inaccessible-nodes.patch
    backport-Allow-local_login_t-get-attributes-of-tmpfs-filesyst.patch
    backport-Allow-dhcpc_t-domain-transition-to-chronyc_t.patch
    backport-Allow-nsswitch_domain-read-cgroup-files.patch
    backport-Allow-IPsec-and-certmonger-to-use-opencryptoki-servi.patch
    backport-Create-chronyd_pid_filetrans-interface.patch


author: jinlun <jinlun@huawei.com> - 15-23
changelog:
  - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
    CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
    CVE-2021-23841 CVE-2022-0778


author: lijian<lijian2@kylinos.cn> - 1:1.1.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: chenyanpanHW <chenyanpan@huawei.com> - 4.4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-Fix-typos-update-URLs-in-squashfs-tools-Makefile.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-Support-creating-sockets-in-unsquashfs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-squashfs-tools-fix-build-failure-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-xattr-Initialize-header-to-avoid-valgrind-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-CVE-2021-40153.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-2
changelog:
  - Type:cves
  - ID:CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450
  - SUG:restart
  - DESC:fix CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: majun<majun65@huawei.com> - 4.2-3
changelog:
  - Type:cves
  - ID:CVE-2019-12525 CVE-2019-12527 CVE-2019-12529 CVE-2019-12854 CVE-2019-13345
  - SUG:restart
  - DESC:fix cves


author: huanghaitao <huanghaitao8@huawei.com> - 1.4.0-2
changelog:
  - Add Requires: python2-gobject-base libnotify >= 0.7.7
  - fix command subunit-notify subunit2gtk --help error


author: shenyangyang <shenyangyang4@huawei.com> - 243-29
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:revert don't enable systemd-journald-audit.socket by default
         that may cause reboot problem if update systemd with out dracut -f
         from LTS-20.03


author: fangxiuning <fangxiuning@huawei.com> - 243-33
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: journald: enforce longer line length limit during "setup" phase of stream protocol


author: shenyangyang <shenyangyang4@huawei.com> - 243-35
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change requires to openssl-libs as post scripts systemctl requires libssl.so.1.1


author: fangxiuning <fangxiuning@huawei.com> - 243-39
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:udevd: don't kill worker in manager_kill_worker when it's running


author: yangmingtai <yangmingtai@huawei.com> - 243-41
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:udevd: fix broken symbolic links when same link for different devices


author: ExtinctFire <shenyining_00@126.com> - 243-47
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:core: fix free undefined pointer when strdup failed in the first loop


author: huyubiao <huyubiao@huawei.com> - 243-63
changelog:
  - add backport-pstore-fix-use-after-free.patch
        backport-udev-also-logs-file-permission.patch
        backport-core-Fix-setting-StatusUnitFormat-from-config-files.patch
        backport-udevadm-missing-initialization-of-descriptor.patch
        backport-udevadm-use-usec_add.patch
        backport-shared-install-fix-error-codes-returned-by-install_c.patch
        backport-udevadm-trigger-do-not-propagate-EACCES-and-ENODEV.patch
        backport-pstore-rework-memory-handling-for-dmesg.patch
        backport-udev-fix-memleak-caused-by-wrong-cleanup-function.patch
        backport-network-ndisc-do-not-drop-all-prefixes-when-a-prefix.patch
        backport-nspawn-fix-handling-of-console-help.patch
        backport-core-job-fix-breakage-of-ordering-dependencies-by-sy.patch
        backport-sd-device-enumerator-do-not-return-error-when-a-devi.patch
        backport-udev-ignore-ENOENT-when-chmod_and_chown-device-node.patch
        backport-udev-fix-error-code-in-the-log-message.patch
        backport-udev-do-not-append-newline-when-write-attributes.patch
        backport-udevd-wait-for-workers-to-finish-when-exiting.patch
        backport-verify-fix-segmentation-fault.patch
        backport-core-path-serialize-the-previous_exists-state.patch
        backport-core-path-fix-spurious-triggering-of-PathExists-on-r.patch
        backport-udevadm-ignore-EROFS-and-return-earlier.patch
        backport-udevd-don-t-use-monitor-after-manager_exit.patch
        backport-hibernate-resume-generator-wait-infinitely-for-the-r.patch
        backport-time-util-deal-with-systems-where-userspace-has-64bi.patch
        backport-time-util-also-use-32bit-hack-on-EOVERFLOW.patch
        backport-test-condition-fix-group-check-condition.patch
        backport-udev-do-not-use-exact-match-of-file-permission.patch
        backport-network-udev-use-uint64_t-for-bit-rate.patch
        backport-unit-add-AF_ALG-to-systemd-networkd.service.patch
        backport-Fix-generator-name-in-hibernate-resume-generator-s-d.patch
        backport-udevadm-show-more-error-message-during-exporting-dat.patch


author: huyubiao <huyubiao@huawei.com> - 243-65
changelog:
  - add backport-journalctl-allow-running-vacuum-on-remote-journals-t.patch
        backport-systemctl-skip-non-existent-units-in-the-cat-verb.patch
        backport-journalctl-implement-facility-foo.patch
        backport-journalctl-show-duplicate-entries-if-they-are-from-t.patch
        backport-fix-journal-regression.patch
        backport-fs-util-when-calling-chase_symlinks-with-root-path-l.patch
        backport-test-add-test-for-the-non-resolving-of-chase_symlink.patch
        backport-fs-util-make-sure-we-output-normalized-paths-in-chas.patch
        backport-test-make-sure-chase_symlink-returns-normalized-path.patch
        backport-test-fix-rename_noreplace-test.patch
        backport-logind-check-PolicyKit-before-allowing-VT-switch.patch
        backport-errno-ETIMEDOUT-is-also-a-connection-error.patch
        backport-sd-bus-break-the-loop-in-bus_ensure_running-if-the-b.patch


author: huyubiao <huyubiao@huawei.com> - 243-66
changelog:
  - add backport-core-make-sure-we-don-t-get-confused-when-setting-TE.patch
        backport-mount-setup-change-the-system-mount-propagation-to-s.patch
        backport-core-transition-to-FINAL_SIGTERM-state-after-ExecSto.patch


author: huyubiao <huyubiao@huawei.com> - 243-68
changelog:
  - backport: sync patches from systemd community
    add backport-sd-device-do-no-allocate-strings-of-unknown-length-o.patch
        backport-sd-device-minor-optimization-for-sd_device_new_from_.patch
        backport-sd-device-use-memdupa_suffix0-where-appropriate.patch
        backport-sd-device-reject-empty-driver-name.patch
        backport-tmpfiles-use-a-entry-in-hashmap-as-ItemArray-in-read.patch
        backport-dissect-ext4-and-loopback-files-are-unimpressed-by-r.patch
        backport-mount-until-make-sure-we-ll-exit-bind_remount_recurs.patch
        backport-sd-device-use-strjoina-more-again-in-sd_device_new_f.patch
        backport-core-when-looping-over-mount-swap-names-continue-if-.patch
        backport-libblkid-open-device-in-nonblock-mode.patch
        backport-udev-ignore-the-case-that-the-device-is-already-remo.patch
        backport-udev-fix-key-name-in-debug-log.patch
        backport-sd-event-use-usec_add.patch
        backport-timesync-fix-wrong-type-for-receiving-timestamp-in-n.patch
        backport-udev-fix-potential-memleak.patch
        backport-journalctl-never-fail-at-flushing-when-the-flushed-f.patch
        backport-core-fix-SIGABRT-on-empty-exec-command-argv.patch
        backport-core-service-also-check-path-in-exec-commands.patch


author: hongjinghao <hongjinghao@huawei.com> - 243-69
changelog:
  - add: backport-json-use-unsigned-for-refernce-counter.patch
        backport-macro-check-over-flow-in-reference-counter.patch
        backport-sd-bus-fix-reference-counter-to-be-incremented.patch
        backport-sd-bus-introduce-ref-unref-function-for-track_item.patch
        backport-sd-bus-do-not-read-unused-value.patch
        backport-sd-bus-do-not-return-negative-errno-when-unknown-nam.patch
        backport-sd-bus-use-hashmap_contains-and-drop-unnecessary-cas.patch
        backport-test-shorten-code-a-bit.patch
        backport-test-add-several-tests-for-track-item.patch
        backport-sd-bus-switch-to-a-manual-overflow-check-in.patch


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: huanghaitao <huanghaitao8@huawei.com> - 1:9.0.10-13
changelog:
  - Type:cves
  - ID: CVE-2019-17563 CVE-2019-12418 CVE-2020-1935 CVE-2020-1938 
  - SUG:restart
  - DESC: fix CVE-2019-17563 CVE-2019-12418CVE-2020-1935 CVE-2020-1938


author: wangxiao <wangxiao65@huawei.com> - 1:9.0.10-14
changelog:
  - Type:cves
  - ID: CVE-2020-9484 CVE-2020-11996 CVE-2020-13934 CVE-2020-13935
  - SUG:restart
  - DESC: fix CVE-2020-9484 CVE-2020-11996 CVE-2020-13934 CVE-2020-13935


author: wangyue <wangyue92@huawei.com> - 1:9.0.10-18
changelog:
  - Type:cve
  - ID: CVE-2021-25122 CVE-2021-25329
  - SUG:restart
  - DESC: fix CVE-2021-25122 CVE-2021-25329


author: Hugel<gengqihu1@huawei.com> - 3.0.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 3.0.3
         use proper rundir tmpfilesdir and sysusersdir, so proper directories are used


author: qinyu<qinyu32@huawei.com> - 2022a-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Greenland change should affect only America/Nuuk; The northern edge of Chihuahua changes to US rules


author: langfei<langfei@huawei.com> - 2022a-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: liuchao <liuchao173@huawei.com> - 2022a-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Vostok switches to +05; Sync Casey data from timeanddata.com; Kazakhstan unifies on UTC+5


author: openEuler Buildteam <buildteam@openeuler.org> - 2.8.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revise the bogus date in changelog and delete the unnecessary subpackage "udisks2-iscsi"


author: yanglu<yanglu72@h-partners.com> - 1.11.0-7
changelog:
  - Type:cves
  - CVE:CVE-2022-30698 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30698 and CVE-2022-30699


author: yangcheng <yangcheng87@huawei.com> - 20170801-12
changelog:
  - Fix the problem that the mkfontscale command and mkfontdir command were not found during installation


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.35.2-4
changelog:
  - Fix memleak in fdisk_script_read_file
    Fix heap-buffer-overflow in fdisk_partname
    Fix integer overflow in partno_from_devname


author: yuanxin<yuanxin24@huawei.com> - 2:8.2-11
changelog:
  - Type:CVE
  - ID:CVE-2021-4166 CVE-2021-4192 CVE-2021-4193
  - SUG:NA
  - DESC:fix CVE-2021-4166 CVE-2021-4192 CVE-2021-4193


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-15
changelog:
  - Type:CVE
  - ID:CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413
  - SUG:NA
  - DESC:fix CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413


author: tianwei <tianwei12@h-partners.com> - 2:8.2-16
changelog:
  - Type:CVE
  - ID:CVE-2022-0443 CVE-2022-0392 CVE-2022-0417
  - SUG:NA
  - DESC:fix CVE-2022-0443 CVE-2022-0392 CVE-2022-0417


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-27
changelog:
  - Type:CVE
  - ID:CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619
  - SUG:NA
  - DESC:fix CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619


author: tianwei <tianwei12@h-partners.com> - 2:8.2-33
changelog:
  - Type:CVE
  - ID:CVE-2022-1851 CVE-2022-1898 CVE-2022-1942
  - SUG:NA
  - DESC:fix CVE-2022-1851 CVE-2022-1898 CVE-2022-1942


author: shixuantong<shixuantong@h-partners.com> - 2:8.2-42
changelog:
  - Type:CVE
  - ID:CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345
  - SUG:NA
  - DESC:fix CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-43
changelog:
  - Type:CVE
  - ID:CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287
  - SUG:NA
  - DESC:fix CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:8.2-47
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the error of backport-cannot-list-options-one-per-line.patch


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-3
changelog:
  - Type:CVE
  - ID:CVE-2022-3491 CVE-2022-3520 CVE-2022-3591
  - SUG:NA
  - DESC:fix CVE-2022-3491 CVE-2022-3520 CVE-2022-3591


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-6
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-15
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-21
changelog:
  - Type:CVE
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
  - SUG:NA
  - DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237


author: Guoshuai Sun <sunguoshuai@huawei.com> - 5.15-5
changelog:
  - scripts when uninstall in %preun and %postun should watchdog-ping.service but not watchdog.ping.service


author: wangzhishun <wangzhishun1@huawei.com> - 5.1.0-11
changelog:
  - Make sure sample rate is specified and non-zero in DFF files
  - Fix potential out-of-bounds heap read


author: jinzhimin<jinzhimin2@huawei.com> - 1.20.8-4
changelog:
  - Type:CVE
  - Id:CVE-2020-14347 CVE-2020-14360 CVE-2020-25712
  - SUG:NA
  - DESC:fix CVE-2020-14347 CVE-2020-14360 CVE-2020-25712


author: yangcheng<yangcheng87@huawei.com> - 1.20.8-10
changelog:
  - Type:CVE
  - Id:CVE-2021-4008,CVE-2021-4009,CVE-2021-4010,CVE-2021-4011
  - SUG:NA
  - DESC:fix CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011


author: zhouwenpei <zhouwenpei1@h-partners.com> - 1.20.8-14
changelog:
  - Fix openEuler hard code problem
  - use -git instead of .git as the filename, to avoid .git ignore
  - Fix changelog date


