# changelog

author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2301.6.0.0186
changelog:
  - bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal
  - of/fdt: Don't calculate initrd size from DT if start > end
  - lib/cmdline: avoid page fault in next_arg
  - genirq: Introduce warn log when irq be reentrant
  - net: sched: disallow noqueue for qdisc classes
  - net: sched: atm: dont intepret cls results when asked to drop
  - block: check 'bd_super' before rescanning partition
  - net: sched: cbq: dont intepret cls results when asked to drop
  - swapfile: fix soft lockup in scan_swap_map_slots
  - Huawei BMA: Fix iBMA driver bug


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2302.1.0.0187
changelog:
  - ring-buffer: Fix race between reset page and reading page
  - block: don't allow a disk link holder to itself
  - ext4: fix use-after-free in ext4_orphan_cleanup
  - ext4: lost matching-pair of trace in ext4_truncate
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
  - mm/swapfile: add cond_resched() in get_swap_pages()
  - hugetlbfs: don't delete error page from pagecache
  - mm: hwpoison: refactor refcount check handling
  - dhugetlb: set DYNAMIC_HUGETLB to y for hulk_defconfig
  - dhugetlb: use enable_dhugetlb to disable huge_memory
  - dhugetlb: skip dissolve hugepage belonging to dynamic hugetlb
  - dhugetlb: only support 1G/2M hugepage and ARM64_4K_PAGES
  - dhugetlb: isolate dynamic hugetlb code
  - dhugetlb: backport dynamic hugetlb feature
  - !344 mm: fix false-positive OVERCOMMIT_GUESS failures
  - cfq: fix memory leak for cfqq
  - mm: fix false-positive OVERCOMMIT_GUESS failures


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2302.3.0.0188
changelog:
  - block, bfq: switch 'bfqg->ref' to use atomic refcount apis
  - x86/bugs: Flush IBP in ib_prctl_set()
  - media: vivid: fix compose size exceed boundary
  - cifs: do not include page data when checking signature
  - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
  - net: stream: purge sk_error_queue in sk_stream_kill_queues()
  - net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
  - ext4: fix deadlock due to mbcache entry corruption
  - mbcache: automatically delete entries from cache on freeing
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
  - mm/khugepaged: fix GUP-fast interaction by sending IPI
  - mm: gup: fix the fast GUP race against THP collapse
  - prlimit: do_prlimit needs to have a speculation check
  - arm64: cmpxchg_double*: hazard against entire exchange variable
  - net/ulp: prevent ULP without clone op from entering the LISTEN status
  - driver core: Fix bus_type.match() error handling in __driver_attach()
  - md: fix a crash in mempool_free
  - bpf: pull before calling skb_postpull_rcsum()
  - SUNRPC: ensure the matching upcall is in-flight upon downcall
  - ovl: Use ovl mounter's fsuid and fsgid in ovl_link()
  - pnode: terminate at peers of source
  - cifs: Fix uninitialized memory read for smb311 posix symlink create
  - device_cgroup: Roll back to original exceptions after copy failure
  - PCI/sysfs: Fix double free in error path
  - PCI: Fix pci_device_is_present() for VFs by checking PF
  - ipmi: fix use after free in _ipmi_destroy_user()
  - ima: Fix a potential NULL pointer access in ima_restore_measurement_list
  - ipmi: fix long wait in unload when IPMI disconnect
  - binfmt: Fix error return code in load_elf_fdpic_binary()
  - chardev: fix error handling in cdev_device_add()
  - mrp: introduce active flags to prevent UAF when applicant uninit
  - bpf: make sure skb->len != 0 when redirecting to a tunneling device
  - ipmi: fix memleak when unload ipmi driver
  - ACPICA: Fix error code path in acpi_ds_call_control_method()
  - skbuff: Account for tail adjustment during pull operations
  - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle.
  - serial: amba-pl011: avoid SBSA UART accessing DMACR register
  - class: fix possible memory leak in __class_register()
  - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
  - blktrace: Fix output non-blktrace event when blk_classic option enabled
  - SUNRPC: Fix missing release socket in rpc_sockname()
  - bonding: uninitialized variable in bond_miimon_inspect()
  - pinctrl: pinconf-generic: add missing of_node_put()
  - ima: Fix misuse of dereference of pointer in template_desc_init_fields()
  - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed
  - blk-mq: fix possible memleak when register 'hctx' failed
  - perf: Fix possible memleak in pmu_dev_alloc()
  - cpuidle: dt: Return the correct numbers of parsed idle states
  - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP
  - pstore/ram: Fix error return code in ramoops_probe()
  - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()
  - sched/rt: Optimize checking group RT scheduler constraints
  - md: protect md_unregister_thread from reentrancy
  - hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
  - lib/list_debug.c: Detect uninitialized lists
  - crypto: tcrypt - avoid signed overflow in byte count
  - mm: sharepool: fix hugepage_rsvd count increase error
  - config: enbale irq pending config for openeuler
  - genirq: introduce CONFIG_GENERIC_PENDING_IRQ_FIX_KABI
  - irqchip/gic-v3-its: introduce CONFIG_GENERIC_PENDING_IRQ
  - md: fix uaf in md_wakeup_thread
  - genirq: add printk safe in irq context
  - jbd2: Fix data missing when reusing bh which is ready to be checkpointed
  - x86/unwind: Fix orc entry for paravirt {save,restore}_fl
  - cifs: sanitize multiple delimiters in prepath
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2302.4.0.0189
changelog:
  - !213  net: bonding: Inherit MPLS features from slave devices
  - x86/unwind: Fix check_paravirt() calls orc_find() before declaration
  - dhugetlb: set hpool to NULL for cont-bit hugepage
  - arm64/ascend: Delete CONFIG_ASCEND_AUTO_TUNING_HUGEPAGE in hulk_defconfig
  - arm64/ascend: Delete unused feature auto-tuning hugepage
  - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
  - net: bridge: mcast: add and enforce query interval minimum
  - net: bridge: mcast: add and enforce startup query interval minimum
  - !396 anolis: bond: broadcast ARP or ND messages to all slaves
  - anolis: bond: broadcast ARP or ND messages to all slaves
  - net: bonding: Inherit MPLS features from slave devices


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2302.5.0.0190
changelog:
  - !423 genirq bugfix for arm64
  - genirq: Remove irqd_irq_disabled in __irq_move_irq
  - !422 iscsi bugfixes backport
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
  - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
  - !420 backport CVEs and bugfixes
  - net: mpls: fix stale pointer if allocation fails during device rename
  - nbd: fix assignment error for first_minor in nbd_dev_add
  - selinux: further adjust init order for cred_* hooks
  - selinux: further adjust init order for file_alloc_security hook
  - !415 mainline bugfix backport
  - selinux: reorder hooks to make runtime disable less broken
  - evm: Fix a small race in init_desc()
  - evm: Check also if *tfm is an error pointer in init_desc()
  - iommu: Properly export iommu_group_get_for_dev()
  - of: resolver: Add of_node_put() before return and break
  - of: unittest: Add of_node_put() before return
  - drivers/iommu: Allow IOMMU bus ops to be unregistered
  - drivers/iommu: Export core IOMMU API symbols to permit modular drivers
  - component: do not dereference opaque pointer in debugfs
  - ipmi: use %*ph to print small buffer
  - crypto: algif_skcipher - Use chunksize instead of blocksize
  - crypto: algif_skcipher - EBUSY on aio should be an error
  - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete()
  - dhugetlb: isolate hwpoison hugepage when release
  - mm/sharepool: Fix null-pointer-deference in sp_free_area


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2303.1.0.0191
changelog:
  - HID: check empty report_list in hid_validate_values()
  - dhugetlb: use mutex lock in update_reserve_pages()
  - ntfs: fix out-of-bounds read in ntfs_attr_find()
  - ntfs: fix use-after-free in ntfs_ucsncmp()
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
  - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
  - netfilter: nf_tables: fix null deref due to zeroed list head
  - tcp: Fix listen() regression in 5.15.88.
  - tap: tap_open(): correctly initialize socket uid
  - tun: tun_chr_open(): correctly initialize socket uid
  - net: add sock_init_data_uid()
  - rds: rds_rm_zerocopy_callback() use list_first_entry()


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2303.3.0.0192
changelog:
  - scsi: cancel the inflight async device probe when remove scsi_target
  - scsi: fix use-after-free problem in scsi_remove_target
  - HID: asus: use spinlock to safely schedule workers
  - HID: asus: use spinlock to protect concurrent accesses
  - HID: asus: Remove check for same LED brightness on set
  - blk-wbt: don't enable throttling if default elevator is bfq
  - block: Fix kabi broken by "block: split .sysfs_lock into two locks"
  - block: fix comment and add lockdep assert
  - block: don't release queue's sysfs lock during switching elevator
  - block: fix race between switching elevator and removing queues
  - block: split .sysfs_lock into two locks
  - crypto: rsa-pkcs1pad - restore signature length check
  - fs/proc: task_mmu.c: don't read mapcount for migration entry
  - migrate: hugetlb: check for hugetlb shared PMD in node migration
  - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
  - ipv6: Fix tcp socket connection with DSCP.
  - ipv6: Fix datagram socket connection with DSCP.
  - aio: fix mremap after fork null-deref
  - bpf: Always return target ifindex in bpf_fib_lookup
  - serial: 8250_dma: Fix DMA Rx rearm race
  - serial: 8250_dma: Fix DMA Rx completion race
  - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
  - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
  - netlink: annotate data races around sk_state
  - netlink: annotate data races around dst_portid and dst_group
  - netlink: annotate data races around nlk->portid
  - netlink: remove hash::nelems check in netlink_insert
  - net: fix UaF in netns ops registration error path
  - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state
  - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
  - binder: Address corner cases in deferred copy and fixup
  - binder: fix pointer cast warning
  - binder: defer copies of pre-patched txn data
  - binder: read pre-translated fds from sender buffer
  - binder: avoid potential data leakage when copying txn
  - binder: fix handling of error during copy
  - binder: use cred instead of task for getsecid
  - binder: don't detect sender/target during buffer cleanup
  - binder: make sure fd closes complete
  - binder: Remove bogus warning on failed same-process transaction
  - binder: fix incorrect calculation for num_valid
  - binder: Prevent repeated use of ->mmap() via NULL mapping
  - binder: Don't modify VMA bounds in ->mmap handler
  - binder: Set end of SG buffer area properly.
  - binder: return errors from buffer copy functions
  - binder: check for overflow when alloc for security context
  - binder: fix BUG_ON found by selinux-testsuite
  - binder: fix handling of misaligned binder object
  - binder: use userspace pointer as base of buffer space
  - binder: remove user_buffer_offset
  - binder: remove kernel vm_area for buffer space
  - binder: avoid kernel vm_area for buffer fixups
  - binder: add function to copy binder object from buffer
  - binder: add functions to copy to/from binder buffers
  - binder: create userspace-to-binder-buffer copy function
  - binder: fix use-after-free due to ksys_close() during fdget()
  - binder: fix kerneldoc header for struct binder_buffer
  - binder: create node flag to request sender's security context
  - binder: Add BINDER_GET_NODE_INFO_FOR_REF ioctl.
  - binder: use standard functions to allocate fds
  - block: fix kabi change since add bd_write_openers and bd_part_write_openers
  - block: add info when opening an exclusive opened block device for write
  - block: add info when opening a write opend block device exclusively
  - Revert "block: add info when opening an exclusive opened block device for write"
  - Revert "block: add info when opening a write opend block device exclusively"
  - ext4: fix WARNING in mb_find_extent
  - sctp: fail if no bound addresses can be used for a given scope


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2303.4.0.0193
changelog:
  - tipc: add an extra conn_get in tipc_conn_alloc
  - tipc: set con sock in tipc_conn_alloc
  - mm/oom_kill.c: fix oom_cpuset_eligible() comment
  - oom: decouple mems_allowed from oom_unkillable_task
  - mm, oom: remove redundant task_in_mem_cgroup() check
  - mm, oom: refactor dump_tasks for memcg OOMs
  - block: Fix wrong offset in bio_truncate()
  - fs: move guard_bio_eod() after bio_set_op_attrs
  - block: add bio_truncate to fix guard_bio_eod
  - mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
  - cifs: Fix use-after-free in rdata->read_into_pages()
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2303.5.0.0194
changelog:
  - net/sched: tcindex: search key must be 16 bits
  - net/sched: tcindex: update imperfect hash filters respecting rcu
  - rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer()
  - x86/speculation: Add RSB VM Exit protections
  - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts
  - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current
  - x86/speculation: Disable RRSBA behavior
  - x86/bugs: Add Cannon lake to RETBleed affected CPU list
  - x86/cpu/amd: Enumerate BTC_NO
  - x86/common: Stamp out the stepping madness
  - x86/speculation: Fill RSB on vmexit for IBRS
  - KVM: VMX: Fix IBRS handling after vmexit
  - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS
  - x86/speculation: Remove x86_spec_ctrl_mask
  - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit
  - x86/speculation: Fix SPEC_CTRL write on SMT state change
  - x86/speculation: Fix firmware entry SPEC_CTRL handling
  - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n
  - x86/speculation: Change FILL_RETURN_BUFFER to work with objtool
  - intel_idle: Disable IBRS during long idle
  - x86/bugs: Report Intel retbleed vulnerability
  - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation()
  - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS
  - x86/bugs: Optimize SPEC_CTRL MSR writes
  - x86/entry: Add kernel IBRS implementation
  - x86/entry: Remove skip_r11rcx
  - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value
  - x86/bugs: Add AMD retbleed= boot parameter
  - x86/bugs: Report AMD retbleed vulnerability
  - x86/cpufeatures: Move RETPOLINE flags to word 11
  - x86/cpu: Add a steppings field to struct x86_cpu_id
  - x86/cpu: Add consistent CPU match macros
  - x86/devicetable: Move x86 specific macro out of generic code
  - x86/cpufeature: Fix various quality problems in the <asm/cpu_device_hd.h> header
  - x86/cpufeature: Add facility to check for min microcode revisions
  - Revert "x86/cpu: Add a steppings field to struct x86_cpu_id"
  - Revert "x86/speculation: Add RSB VM Exit protections"
  - x86/nospec: Fix i386 RSB stuffing
  - ext4: make sure fs error flag setted before clear journal error
  - ext4: commit super block if fs record error when journal record without error
  - hugetlb: fix hugepages_setup when deal with pernode
  - hugetlb: fix wrong use of nr_online_nodes
  - tty: fix out-of-bounds access in tty_driver_lookup_tty()
  - arm64: errata: Remove AES hwcap for COMPAT tasks
  - kernel: Initialize cpumask before parsing
  - genirq: Disable interrupts for force threaded handlers
  - softirq: Don't try waking ksoftirqd before it has been spawned
  - scsi: hisi_sas: Clear interrupt status when exiting channel int0 for v3 hw
  - scsi: hisi_sas: Handle NCQ error when IPTT is valid
  - scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list
  - act_mirred: use the backlog for nested calls to mirred ingress
  - net/sched: act_mirred: refactor the handle of xmit
  - net: sched: don't expose action qstats to skb_tc_reinsert()
  - net: sched: protect against stack overflow in TC act_mirred
  - net: sched: refactor reinsert action
  - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  - ext4: fix another off-by-one fsmap error on 1k block filesystems


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2303.6.0.0195
changelog:
  - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
  - ftrace: Fix invalid address access in lookup_rec() when index is 0
  - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
  - scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
  - RDMA/core: Don't infoleak GRH fields
  - !480 mm  bugfixes backport
  - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
  - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
  - cgroup/cpuset: Change cpuset_rwsem and hotplug lock order
  - mm: memcontrol: fix cannot alloc the maximum memcg ID


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2304.1.0.0196
changelog:
  - ext4: Fix i_disksize exceeding i_size problem in paritally written case
  - ext4: ext4_put_super: Remove redundant checking for 'sbi->s_journal_bdev'
  - ext4: Fix reusing stale buffer heads from last failed mounting
  - kvm: initialize all of the kvm_debugregs structure before sending it to userspace
  - net: virtio_net_hdr_to_skb: count transport header in UFO
  - net: be more gentle about silly gso requests coming from user
  - ext4: fix race between writepages and remount


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2304.3.0.0197
changelog:
  - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach
  - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
  - !566 linux-4.19.y bugfixes backport
  - bpf: add missing header file include
  - uaccess: Add speculation barrier to copy_from_user()
  - random: always mix cycle counter in add_latent_entropy()
  - x86/mm: Fix use of uninitialized buffer in sme_enable()
  - ext4: fail ext4_iget if special inode unallocated
  - ext4: zero i_disksize when initializing the bootloader inode
  - irqdomain: Drop bogus fwspec-mapping error handling
  - irqdomain: Fix disassociation race
  - irqdomain: Fix association race
  - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range
  - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic
  - x86/bugs: Reset speculation control settings on init
  - timers: Prevent union confusion from unexpected restart_syscall()
  - crypto: rsa-pkcs1pad - Use akcipher_request_complete
  - crypto: seqiv - Handle EBUSY correctly
  - ACPI: battery: Fix missing NUL-termination with large strings
  - ACPICA: nsrepair: handle cases without a return value correctly
  - genirq: Fix the return type of kstat_cpu_irqs_sum()
  - ACPI: NFIT: fix a potential deadlock during NFIT teardown
  - alarmtimer: Prevent starvation by small intervals and SIG_IGN
  - ring-buffer: Fix race while reader and writer are on the same page
  - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
  - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
  - cgroup/cpuset: Change cpuset_rwsem and hotplug lock order
  - Revert "cgroup/cpuset: Change cpuset_rwsem and hotplug lock order"
  - Revert "cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock"
  - Revert "cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()"
  - block: fix wrong mode for blkdev_put() from disk_scan_partitions()
  - block: fix scan partition for exclusively open device again
  - block: fix kabi broken in ioctl.c
  - block: merge disk_scan_partitions and blkdev_reread_part
  - block: cleanup partition scanning in register_disk
  - block: Revert "block: check 'bd_super' before rescanning partition"
  - md: fix kabi broken in struct mddev
  - md: use interruptible apis in idle/frozen_sync_thread
  - md: wake up 'resync_wait' at last in md_reap_sync_thread()
  - md: refactor idle/frozen_sync_thread()
  - md: add a mutex to synchronize idle and frozen in action_store()
  - md: refactor action_store() for 'idle' and 'frozen'
  - mm: mem_reliable: Initialize reliable_nr_page when mm_init()
  - md: fix soft lockup in status_resync
  - md: don't update recovery_cp when curr_resync is ACTIVE
  - md: Ensure resync is reported after it starts
  - md: Use enum for overloaded magic numbers used by mddev->curr_resync
  - loop: Add parm check in loop_control_ioctl
  - block/wbt: enable wbt after switching cfq to other schedulers
  - Fix double fget() in vhost_net_set_backend()
  - sched/fair: Sanitize vruntime of entity being migrated
  - sched/fair: sanitize vruntime of entity being placed
  - Revert "sched: Reinit task's vruntime if a task sleep over 200 days"
  - btrfs: fix race between quota disable and quota assign ioctls


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2304.4.0.0198
changelog:
  - KVM: nVMX: add missing consistency checks for CR0 and CR4
  - drm/vmwgfx: Validate the box size for the snooped cursor
  - net/sched: Retire tcindex classifier
  - Documentation/hw-vuln: Fix rST warning
  - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
  - KVM: x86: Mitigate the cross-thread return address predictions bug
  - x86/speculation: Identify processors vulnerable to SMT RSB predictions
  - cpu/SMT: create and export cpu_smt_possible()
  - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2304.5.0.0199
changelog:
  - RDMA/hns: Add check for user-configured max_inline_data value
  - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
  - !430 [openEuler-1.0-LTS] ata: sata_zhaoxin: Update Zhaoxin Serial ATA product name
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
  - audit: fix a memleak caused by auditing load module
  - !595 [openEuler-1.0-LTS] iommu/arm-smmu-v3: Fix UAF when handle evt during iommu group removing
  - tcp: restrict net.ipv4.tcp_app_win
  - x86/speculation: Allow enabling STIBP with legacy IBRS
  - iommu/arm-smmu-v3: Fix UAF when handle evt during iommu group removing
  - ata: sata_zhaoxin: Update Zhaoxin Serial ATA product name


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2305.1.0.0200
changelog:
  - ipv6: Fix an uninit variable access bug in __ip6_make_skb()
  - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach()
  - verify_pefile: relax wrapper length check
  - udp6: fix potential access to stale information
  - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()
  - ftrace: Mark get_lock_parent_ip() __always_inline
  - perf/core: Fix the same task check in perf_event_set_output
  - net: don't let netpoll invoke NAPI if in xmit context
  - icmp: guard against too small mtu
  - sched_getaffinity: don't assume 'cpumask_size()' is fully initialized
  - dm stats: check for and propagate alloc_percpu failure
  - dm thin: fix deadlock when swapping to thin device
  - genirq: introduce handle_fasteoi_edge_irq for phytium
  - genirq: introduce handle_fasteoi_edge_irq flow handler
  - Revert "genirq: Remove irqd_irq_disabled in __irq_move_irq"
  - Revert "config: enbale irq pending config for openeuler"
  - Revert "genirq: introduce CONFIG_GENERIC_PENDING_IRQ_FIX_KABI"
  - Revert "irqchip/gic-v3-its: introduce CONFIG_GENERIC_PENDING_IRQ"
  - scsi: dpt_i2o: Remove obsolete driver
  - md: extend disks_mutex coverage
  - md: use msleep() in md_notify_reboot()
  - md: fix double free of mddev->private in autorun_array()
  - block/badblocks: fix badblocks loss when badblocks combine
  - block/badblocks: fix the bug of reverse order
  - block: Only set bb->changed when badblocks changes
  - md: fix sysfs duplicate file while adding rdev
  - md: replace invalid function flush_rdev_wq() with flush_workqueue()
  - bonding: Fix memory leak when changing bond type to Ethernet
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern
  - timers/nohz: Last resort update jiffies on nohz_full IRQ entry
  - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
  - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
  - net: qcom/emac: Fix use after free bug in emac_remove due to race condition
  - ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
  - ext4: only update i_reserved_data_blocks on successful block allocation
  - mm: mem_reliable: Use zone_page_state to count free reliable pages
  - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
  - sctp: leave the err path free in sctp_stream_init to sctp_stream_free
  - RDMA/core: Refactor rdma_bind_addr
  - Revert "RDMA/cma: Simplify rdma_resolve_addr() error flow"
  - fix kabi broken due to import new inode operation get_inode_acl
  - ovl: enable RCU'd ->get_acl()
  - vfs: add rcu argument to ->get_acl() callback


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2305.2.0.0201
changelog:
  - net: sctp: update stream->incnt after successful allocation of stream_in
  - !741 [openEuler-1.0-LTS] openeuler_defconfig: Add configuration items for zhaoxin
  - !752 arm64/mpam: modify mpam irq register error log
  - arm64/mpam: modify mpam irq register error log
  - !437 [openEuler-1.0-LTS] USB: HCD: Fix URB giveback issue in tasklet function
  - openeuler_defconfig: Add configuration items for zhaoxin
  - bluetooth: Perform careful capability checks in hci_sock_ioctl()
  - netrom: Fix use-after-free caused by accept on already connected socket
  - !689 Fix compile error in allyesconfigs
  - !441 [openEuler-1.0-LTS] Add support for Zhaoxin SM3 and SM4 instruction
  - !438 [openEuler-1.0-LTS] Add Zhaoxin I2C driver
  - i2c: Add Zhaoxin I2C driver
  - !432 [openEuler-1.0-LTS] Add Zhaoxin ACE driver
  - mm: memcontrol: switch to rcu protection in drain_all_stock()
  - !429 [openEuler-1.0.-LTS] ACPI, x86: Improve Zhaoxin processors support for NONSTOP TSC
  - !428 [openEuelr-1.0-LTS] x86/acpi/cstate: Optimize ARB_DISABLE on Centaur CPUs
  - !687 [HUST CSE] fix a use-after-free bug in uncore_pci_remove()
  - scsi/hifc: Fix compile error in allyesconfigs
  - net/hinic: Fix compile error in allyesconfigs
  - x86/perf: fix use-after-free bug in uncore_pci_remove()
  - crypto: Driver for Zhaoxin GMI SM4 Block Cipher Algorithm
  - crypto: Driver for Zhaoxin GMI SM3 Secure Hash algorithm
  - !433 [openEuler-1.0-LTS] Add support of turbo boost control interface for Zhaoxin CPUs
  - !431 [openEuler-1.0-LTS] Add Zhaoxin rng driver
  - crypto: Add Zhaoxin ACE driver
  - cpufreq: ACPI: Add Zhaoxin/Centaur turbo boost control interface support
  - hwrng: Add Zhaoxin rng driver
  - USB: HCD: Fix URB giveback issue in tasklet function
  - ACPI, x86: Improve Zhaoxin processors support for NONSTOP TSC
  - x86/acpi/cstate: Optimize ARB_DISABLE on Centaur CPUs


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2305.3.0.0202
changelog:
  - netfilter: nf_tables: deactivate anonymous set from preparation phase
  - x86/msr-index: make SPEC_CTRL_IBRS assembler-portable
  - xfs: verify buffer contents when we skip log replay
  - !586 [openEuelr-1.0-LTS] kvm: arm64: fix some pvsched bugs
  - kvm: arm64: fix some pvsched bugs


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2305.4.0.0203
changelog:
  - !841 【openEuler-1.0-LTS】cpufreq: conservative: Add a switch to enable fast mode
  - x86/pm: Fix false positive kmemleak report in msr_build_context()
  - drm: Lock pointer access in drm_master_release()
  - drm: Fix use-after-free read in drm_getunique()
  - cpufreq: conservative: Add a switch to enable fast mode
  - of: overlay: kmemleak in dup_and_fixup_symbol_prop()
  - iommu/dma: Fix MSI reservation allocation
  - lib/stackdepot.c: fix global out-of-bounds in stack_slabs
  - rcu: Use *_ONCE() to protect lockless ->expmask accesses
  - iommu: Don't print warning when IOMMU driver only supports unmanaged domains
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2306.1.0.0204
changelog:
  - !932 [sync] PR-922:  jbd2: fix checkpoint inconsistent
  - jbd2: remove t_checkpoint_io_list
  - jbd2: recheck chechpointing non-dirty buffer
  - irqchip/gic-v3-its: Balance initial LPI affinity across CPUs
  - irqchip/gic-v3-its: Track LPI distribution on a per CPU basis
  - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
  - net: sched: fix NULL pointer dereference in mq_attach


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2306.3.0.0205
changelog:
  - arm64: Add AMPERE1 to the Spectre-BHB affected list
  - sctp: Call inet6_destroy_sock() via sk->sk_destruct().
  - net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues().
  - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
  - sched: smart grid: init sched_grid_qos structure on QOS purpose
  - sched: Introduce smart grid scheduling strategy for cfs
  - ipmi: fix SSIF not responding under certain cond.
  - ipmi_ssif: Rename idle state and check
  - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock
  - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt().
  - nohz: Add TICK_DEP_BIT_RCU
  - perf/core: Fix hardlockup failure caused by perf throttle
  - of: Fix modalias string generation
  - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb()
  - crypto: drbg - Only fail when jent is unavailable in FIPS mode
  - crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors
  - net/packet: convert po->auxdata to an atomic flag
  - net/packet: convert po->origdev to an atomic flag
  - ring-buffer: Sync IRQ works before buffer destruction
  - dccp: Call inet6_destroy_sock() via sk->sk_destruct().
  - inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy().
  - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct().
  - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM).
  - lib/cmdline: fix get_option() for strings starting with hyphen
  - of: overlay: fix for_each_child.cocci warnings
  - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list
  - fs: hfsplus: fix UAF issue in hfsplus_put_super
  - block: Fix the partition start may overflow in add_partition()
  - block: refactor blkpg_ioctl
  - nbd: get config_lock before sock_shutdown
  - ipv6: sr: fix out-of-bounds read when setting HMAC data.
  - dm: add disk before alloc dax
  - dm thin: Fix ABBA deadlock by resetting dm_bufio_client


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2306.4.0.0206
changelog:
  - sched: Adjust few parameters range for smart grid
  - sched: clear credit count in error branch
  - sched: Fix memory leak on error branch
  - sched: fix dereference NULL pointers
  - sched: Fix timer storm for smart grid
  - memstick: r592: Fix UAF bug in r592_remove due to race condition
  - fbcon: Check font dimension limits
  - sched/rt: Fix possible warn when push_rt_task
  - !1152 pci: workaround multiple functions can be assigned to only one VM
  - pci: workaround multiple functions can be assigned to only one VM
  - sched: Fix negative count for jump label
  - sched: Fix possible deadlock in tg_set_dynamic_affinity_mode
  - sched: fix WARN found by deadlock detect
  - sched: fix smart grid usage count
  - sched: Add static key to reduce noise
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
  - !1134 【openEuler-1.0-LTS】cpufreq:conservative: Fix load in fast_dbs_update()
  - firewire: fix potential uaf in outbound_phy_packet_callback()
  - cpufreq: conservative: fix load in fast_dbs_update()


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2306.5.0.0207
changelog:
  - HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  - media: saa7134: fix use after free bug in saa7134_finidev due to race condition
  - config: enable CONFIG_QOS_SCHED_SMART_GRID by default
  - mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition
  - sched: Fix memory leak for smart grid
  - sched: Delete redundant updates to p->prefer_cpus
  - nbd: fix incomplete validation of ioctl arg
  - nbd: validate the block size in nbd_set_size
  - relayfs: fix out-of-bounds access in relay_file_read
  - kernel/relay.c: fix read_pos error when multiple readers
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt()


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2306.7.0.0208
changelog:
  - sched: Fix null pointer derefrence for sd->span
  - scsi: hisi_sas: Fix Null point exception after call debugfs_remove_recursive()
  - scsi: hisi_sas: Fix normally completed I/O analysed as failed
  - drm/msm/dpu: Add check for pstates
  - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2307.3.0.0209
changelog:
  - !1361 fix CVE-2023-1295
  - io_uring: get rid of intermediate IORING_OP_CLOSE stage
  - fs: provide locked helper variant of close_fd_get_file()
  - file: Rename __close_fd_get_file close_fd_get_file
  - Remove DECnet support from kernel
  - net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
  - net: tcp: fix kabi breakage in struct sock
  - tcp: deny tcp_disconnect() when threads are waiting
  - ping6: Fix send to link-local addresses with VRF.
  - net: sched: fix possible refcount leak in tc_chain_tmplt_add()
  - rfs: annotate lockless accesses to RFS sock flow table
  - rfs: annotate lockless accesses to sk->sk_rxhash
  - xfrm: Check if_id in inbound policy/secpath match
  - udp6: Fix race condition in udp6_sendmsg & connect
  - tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set
  - af_packet: do not use READ_ONCE() in packet_bind()
  - af_packet: Fix data-races of pkt_sk(sk)->num.
  - ipv{4,6}/raw: fix output xfrm lookup wrt protocol
  - ipv6: Fix out-of-bounds access in ipv6_find_tlv()
  - net: fix skb leak in __skb_tstamp_tx()
  - udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
  - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
  - af_key: Reject optional tunnel/BEET mode templates in outbound policies
  - net: Catch invalid index in XPS mapping
  - af_unix: Fix data races around sk->sk_shutdown.
  - af_unix: Fix a data race of sk->sk_receive_queue->qlen.
  - net: datagram: fix data-races in datagram_poll()
  - tcp: factor out __tcp_close() helper
  - net: annotate sk->sk_err write from do_recvmmsg()
  - netlink: annotate accesses to nlk->cb_running
  - quota: simplify drop_dquot_ref()
  - quota: fix dqput() to follow the guarantees dquot_srcu should provide
  - quota: add new helper dquot_active()
  - quota: rename dquot_active() to inode_quota_active()
  - quota: factor out dquot_write_dquot()
  - quota: add dqi_dirty_list description to comment of Dquot List Management
  - quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list
  - kernel/extable.c: use address-of operator on section symbols
  - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
  - x86/mm: Avoid incomplete Global INVLPG flushes
  - sched: Fix KCSAN noinstr violation
  - serial: 8250: Reinit port->pm on port specific driver unbind
  - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects
  - ACPI: EC: Fix oops when removing custom query handlers
  - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release()
  - lib: cpu_rmap: Avoid use after free on rmap->obj array entries
  - ext4: improve error recovery code paths in __ext4_remount()
  - scsi: core: Improve scsi_vpd_inquiry() checks
  - PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
  - loop: loop_set_status_from_info() check before assignment
  - loop: Check for overflow while configuring loop
  - Revert "loop: Check for overflow while configuring loop"
  - block: don't set GD_NEED_PART_SCAN if scan partition failed
  - block: return -EBUSY when there are open partitions in blkdev_reread_part
  - blk-wbt: make enable_state more accurate
  - block: Limit number of items taken from the I/O scheduler in one go
  - crypto: cryptd - Protect per-CPU resource by disabling BH.
  - random: fix data race on crng_node_pool
  - x86/kprobes: Fix the error judgment for debug exceptions
  - ext4: turning quotas off if mount failed after enable quotas
  - ext4: forbid commit inconsistent quota data when errors=remount-ro
  - quota: fixup *_write_file_info() to return proper error code
  - ipmi_si: fix a memleak in try_smi_init()
  - net: add vlan_get_protocol_and_depth() helper
  - net: tap: check vlan with eth_type_vlan() method
  - !1317  ext4: Stop trying writing pages if no free blocks generated
  - !1323  jbd2: fix several checkpoint
  - jbd2: fix checkpoint cleanup performance regression
  - jbd2: remove __journal_try_to_free_buffer()
  - jbd2: fix a race when checking checkpoint buffer busy
  - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
  - jbd2: remove journal_clean_one_cp_list()
  - nbd: fix null-ptr-dereference while accessing 'nbd->config'
  - nbd: factor out a helper to get nbd_config without holding 'config_lock'
  - nbd: fold nbd config initialization into nbd_alloc_config()
  - ext4: Stop trying writing pages if no free blocks generated
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2307.4.0.0210
changelog:
  - !1435 fix CVE-2023-3117
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  - !1400 [openEuler-1.0-LTS] block: Try to handle busy underlying device on discard
  - !1416  Fix generic/299 fail
  - ext4: Add debug message to notify user space is out of free
  - Revert "ext4: Stop trying writing pages if no free blocks generated"
  - !1404  bpf: cpumap: Fix memory leak in cpu_map_update_elem
  - bpf: cpumap: Fix memory leak in cpu_map_update_elem
  - block: Try to handle busy underlying device on discard
  - !1377 [sync] PR-1376:  jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - !1374  etmem: fix the div 0 problem in swapcache reclaim process
  - !177 net:bonding:support balance-alb interface with vlan to bridge
  - jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - etmem: fix the div 0 problem in swapcache reclaim process
  - bonding: fix reference count leak in balance-alb mode
  - net:bonding:support balance-alb interface with vlan to bridge


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2307.5.0.0211
changelog:
  - !1534 arm64/mpam: fix missing kfree domain's ctrl_val arrray
  - arm64/mpam: fix missing kfree domain's ctrl_val arrray
  - !1529  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - !1474 [openEuler-1.0-LTS] pmu: remove uncore code for Zhaoxin Platform
  - !1498  media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - !1444 ring-buffer: Fix deadloop issue on reading trace_pipe
  - !1469  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - !1472  ipv6/addrconf: fix a potential refcount underflow for idev
  - pmu: remove uncore code for Zhaoxin Platform
  - ipv6/addrconf: fix a potential refcount underflow for idev
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
  - ring-buffer: Fix deadloop issue on reading trace_pipe


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.1.0.0212
changelog:
  - !1571 【openEuler-1.0-LTS】net: hns: fix wrong head when modify the tx feature when sending packets
  - !1570 【openEuler-1.0-LTS】net: hns3: bugfixes for hns3 drivers 2023.07.29
  - net: hns: update hns version to 23.7.1
  - net: hns: fix wrong head when modify the tx feature when sending packets
  - net: hns3: update hns3 version to 23.7.1
  - net: hns3: fix tx timeout issue
  - net: hns3: fix incorrect hw rss hash type of rx packet
  - net: hns3: add barrier in vf mailbox reply process
  - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
  - net: hns3: fix not call nic_call_event() problem when reset failed
  - !1556  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - !1568  net/sched: cls_u32: Fix reference counter leak leading to overflow
  - net/sched: cls_u32: Fix reference counter leak leading to overflow
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - !1549  binder: fix UAF caused by faulty buffer cleanup
  - binder: fix UAF caused by faulty buffer cleanup


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.2.0.0213
changelog:
  - !1699 dm bugfixes backport from mainline
  - !1697  x86/cpu/amd: Add a Zenbleed fix
  - md: Flush workqueue md_rdev_misc_wq in md_alloc()
  - dm: don't lock fs when the map is NULL during suspend or resume
  - dm: don't lock fs when the map is NULL in process of resume
  - dm: requeue IO if mapping table not yet available
  - Revert "dm: make sure dm_table is binded before queue request"
  - dm thin metadata: check fail_io before using data_sm
  - !1662  media: usb: siano: Fix CVE-2023-4132
  - !1696  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
  - x86/cpu/amd: Add a Zenbleed fix
  - !1694 linux-4.19.y bugfixes backport
  - Revert "arm64/mpam: Fix mpam corrupt when cpu online"
  - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys
  - sch_netem: fix issues in netem_change() vs get_dist_table()
  - sch_netem: acquire qdisc lock in netem_change()
  - cgroup: Do not corrupt task iteration when rebinding subsystem
  - !1577  tracing: Fix warning in trace_buffered_event_disable()
  - !1663  tty: fix pid memleak in disassociate_ctty()
  - tty: fix pid memleak in disassociate_ctty()
  - media: usb: siano: Fix warning due to null work_func_t function pointer
  - media: usb: siano: Fix use after free bugs caused by do_submit_urb
  - !1629  can: raw: fix receiver memory leak
  - !1655  can: bcm: Fix UAF in bcm_proc_show()
  - can: bcm: Fix UAF in bcm_proc_show()
  - can: raw: fix lockdep issue in raw_release()
  - can: raw: fix receiver memory leak
  - !1625  Fix host zero page refcount overflow caused by kvm
  - !1595  net: nfc: Fix CVE-2023-3863
  - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE
  - KVM: fix overflow of zero page refcount with ksm running
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local
  - nfc: llcp: simplify llcp_sock_connect() error paths
  - nfc: llcp: nullify llcp_sock->dev on connect() error paths
  - nfc: Fix to check for kmemdup failure
  - tracing: Fix warning in trace_buffered_event_disable()


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.3.0.0214
changelog:
  - !1762  xen/netback: Fix buffer overrun triggered by unusual packet
  - xen/netback: Fix buffer overrun triggered by unusual packet
  - !1761 fix CVE-2023-4194
  - net: tap_open(): set sk_uid from current_fsuid()
  - net: tun_chr_open(): set sk_uid from current_fsuid()
  - !1728  fix CVE-2023-4128
  - !1673  sched: disable sched_autogroup by default
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free
  - !1712  xfrm: add NULL check in xfrm_update_ae_params
  - xfrm: add NULL check in xfrm_update_ae_params
  - sched: disable sched_autogroup by default


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.4.0.0215
changelog:
  - !1831  fix NULL pointer dereference in __nf_nat_mangle_tcp_packet
  - netfilter: nat: fix kabi change
  - netfilter: nat: fix udp checksum corruption
  - netfilter: nat: remove csum_recalc hook
  - !1769  workqueue: Make flush_workqueue() also watch flush_work()
  - !1803  net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
  - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
  - !1767  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
  - workqueue: Assign a color to barrier work items
  - workqueue: Mark barrier work with WORK_STRUCT_INACTIVE
  - workqueue: Change the code of calculating work_flags in insert_wq_barrier()
  - workqueue: Change arguement of pwq_dec_nr_in_flight()
  - workqueue: Rename "delayed" (delayed by active management) to "inactive"
  - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.5.0.0216
changelog:
  - !1863  nbd: pass nbd_sock to nbd_read_reply() instead of index
  - !1638 [openEuler-1.0-LTS] Add support for Hygon model 4h~6h processors
  - !1884  ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
  - !1882  ip6mr: Fix skb_under_panic in ip6mr_cache_report()
  - ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
  - ip6mr: Fix skb_under_panic in ip6mr_cache_report()
  - EDAC/amd64: Add support for Hygon family 18h model 6h
  - x86/amd_nb: Add support for Hygon family 18h model 6h
  - hwmon/k10temp: Add support for Hygon family 18h model 5h
  - EDAC/amd64: Add support for Hygon family 18h model 5h
  - x86/amd_nb: Add support for Hygon family 18h model 5h
  - x86/cpu: Get LLC ID for Hygon family 18h model 5h
  - i2c-piix4: Remove the IMC detecting for Hygon SMBus
  - hwmon/k10temp: Add support for Hygon family 18h model 4h
  - EDAC/mce_amd: Use struct cpuinfo_x86.logical_die_id for Hygon NodeId
  - EDAC/amd64: Adjust address translation for Hygon family 18h model 4h
  - EDAC/amd64: Add support for Hygon family 18h model 4h
  - EDAC/amd64: Get UMC channel from the 6th nibble for Hygon
  - iommu/hygon: Add support for Hygon family 18h model 4h IOAPIC
  - x86/amd_nb: Add northbridge support for Hygon family 18h model 4h
  - x86/amd_nb: Add Hygon family 18h model 4h PCI IDs
  - x86/microcode/hygon: Add microcode loading support for Hygon processors
  - x86/cpu/hygon: Modify the CPU topology deriving method for Hygon
  - x86/MCE/AMD: Use an u64 for bank_map
  - EDAC/mc_sysfs: Increase legacy channel support to 12
  - EDAC/amd64: Add new register offset support and related changes
  - EDAC/amd64: Set memory type per DIMM
  - rtc: mc146818-lib: Fix the AltCentury for AMD platforms
  - EDAC/amd64: Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh
  - EDAC: Add RDDR5 and LRDDR5 memory types
  - hwmon: (k10temp) Remove unused definitions
  - hwmon: (k10temp) Remove residues of current and voltage
  - hwmon: (k10temp) Rework the temperature offset calculation
  - hwmon: (k10temp) Don't show Tdie for all Zen/Zen2/Zen3 CPU/APU
  - x86/cstate: Allow ACPI C1 FFH MWAIT use on Hygon systems
  - x86/topology: Make __max_die_per_package available unconditionally
  - x86/cpu/amd: Set __max_die_per_package on AMD
  - hwmon: (k10temp) Remove support for displaying voltage and current on Zen CPUs
  - EDAC: Add DDR5 new memory type
  - x86/topology: Set cpu_die_id only if DIE_TYPE found
  - EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId
  - x86/CPU/AMD: Save AMD NodeId as cpu_die_id
  - EDAC/amd64: Set proper family type for Family 19h Models 20h-2Fh
  - hwmon: (k10temp) Add support for Zen3 CPUs
  - x86/mce: Increase maximum number of banks to 64
  - hwmon: (k10temp) Define SVI telemetry and current factors for Zen2 CPUs
  - hwmon: (k10temp) Create common functions and macros for Zen CPU families
  - i2c: designware: Add device HID for Hygon I2C controller
  - hwmon: (k10temp) make some symbols static
  - hwmon: (k10temp) Reorganize and simplify temperature support detection
  - hwmon: (k10temp) Swap Tdie and Tctl on Family 17h CPUs
  - hwmon: (k10temp) Display up to eight sets of CCD temperatures
  - hwmon: (k10temp) Don't show temperature limits on Ryzen (Zen) CPUs
  - hwmon: (k10temp) Show core and SoC current and voltages on Ryzen CPUs
  - hwmon: (k10temp) Report temperatures per CPU die
  - hmon: (k10temp) Convert to use devm_hwmon_device_register_with_info
  - hwmon: (k10temp) Use bitops
  - hwmon: Add convience macro to define simple static sensors
  - hwmon: (k10temp) Auto-convert to use SENSOR_DEVICE_ATTR_{RO, RW, WO}
  - hwmon: Introduce SENSOR_DEVICE_ATTR_{RO, RW, WO} and variants
  - x86/umip: Make the UMIP activated message generic
  - x86/umip: Print UMIP line only once
  - x86/microcode/AMD: Clean up per-family patch size checks
  - !1689 [openEuler-1.0-LTS] drm/atomic-helper: Bump vblank timeout to 100 ms
  - nbd: pass nbd_sock to nbd_read_reply() instead of index
  - !1807  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - !1844  net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
  - !1785  README: Remove out-of-date contribution guide
  - !1849  fs: jfs: fix possible NULL pointer dereference in dbFree()
  - fs: jfs: fix possible NULL pointer dereference in dbFree()
  - !1836  tcp: Reduce chance of collisions in inet6_hashfn().
  - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
  - tcp: Reduce chance of collisions in inet6_hashfn().
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - README: Remove out-of-date contribution guide
  - drm/atomic-helper: Bump vblank timeout to 100 ms


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2309.1.0.0217
changelog:
  - !1964  crypto:padata: Fix return err for PADATA_RESET
  - !1955  fuse: revalidate: don't invalidate if interrupted
  - !1973  sched/smt: fix unbalance sched_smt_present dec/inc
  - sched/smt: fix unbalance sched_smt_present dec/inc
  - !1906  tracing: Fix memleak due to race between current_tracer and trace
  - !1958  block: don't get gendisk if queue has not been registered
  - crypto:padata: Fix return err for PADATA_RESET
  - block: don't get gendisk if queue has not been registered
  - fuse: revalidate: don't invalidate if interrupted
  - !1902  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
  - tracing: Fix memleak due to race between current_tracer and trace
  - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2309.3.0.0218
changelog:
  - !2084  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - !2071 【openEuler-1.0-LTS】net: openvswitch: don't send internal clone attribute to the userspace
  - net: openvswitch: don't send internal clone attribute to the userspace.
  - !2089  net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - !335 efi: fix crash due to EFI runtime service page faults
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - !2088 [openEuler-1.0-LTS] bugfixes of scsi
  - scsi: fix kabi broken in struct Scsi_Host
  - scsi: don't fail if hostt->module is NULL
  - scsi: scsi_device_gets returns failure when the module is NULL.
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - !2069  x86/speculation: Add Gather Data Sampling mitigation
  - !1692  Mainline bugfix patches backport 4.19
  - !2075  x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
  - !2079 [openEuler-1.0-LTS] stable inclusion from linux-4.19.y
  - scsi: core: raid_class: Remove raid_component_add()
  - scsi: core: Fix possible memory leak if device_add() fails
  - scsi: core: Fix legacy /proc parsing buffer overflow
  - serial: 8250_dw: Preserve original value of DLF register
  - serial: 8250_dw: split Synopsys DesignWare 8250 common functions
  - nbd: Add the maximum limit of allocated index in nbd_dev_add
  - integrity: Fix possible multiple allocation in integrity_inode_get()
  - !2070 net bugfixes inclusion from linux-4.19.y
  - drivers: net: prevent tun_build_skb() to exceed the packet size limit
  - net/packet: annotate data-races around tp->status
  - tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
  - tcp_metrics: annotate data-races around tm->tcpm_net
  - tcp_metrics: annotate data-races around tm->tcpm_vals[]
  - tcp_metrics: annotate data-races around tm->tcpm_lock
  - tcp_metrics: annotate data-races around tm->tcpm_stamp
  - tcp_metrics: fix addr_same() helper
  - virtio-net: set queues after driver_ok
  - virtio-net: fix race between set queues and probe
  - team: reset team's flags when down link is P2P device
  - bonding: reset bond's flags when down link is P2P device
  - tcp: annotate data-races around fastopenq.max_qlen
  - tcp: annotate data-races around tp->notsent_lowat
  - tcp: annotate data-races around rskq_defer_accept
  - tcp: annotate data-races around tp->linger2
  - net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX
  - SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
  - net/sched: make psched_mtu() RTNL-less safe
  - udp6: fix udp6_ehashfn() typo
  - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
  - vrf: Increment Icmp6InMsgs on the original netdev
  - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
  - tcp: annotate data races in __tcp_oow_rate_limited()
  - net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode
  - ipvlan: Fix return value of ipvlan_queue_xmit()
  - netlink: do not hard code device address lenth in fdb dumps
  - netlink: Add __sock_i_ino() for __netlink_diag_dump().
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
  - !1987  tracing: Fix race issue between cpu buffer write and swap
  - !2067  memcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock()
  - netlink: fix potential deadlock in netlink_set_err()
  - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS
  - x86: Move gds_ucode_mitigated() declaration to header
  - Documentation/x86: Fix backwards on/off logic about YMM support
  - KVM: Add GDS_NO support to KVM
  - x86/speculation: Add Kconfig option for GDS
  - x86/speculation: Add force option to GDS mitigation
  - x86/speculation: Add cpu_show_gds() prototype
  - x86/speculation: Add Gather Data Sampling mitigation
  - !2063  cpu/hotplug: Prevent self deadlock on CPU hot-unplug
  - !2046  use precise io accounting apis
  - memcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock()
  - cpu/hotplug: Prevent self deadlock on CPU hot-unplug
  - !2050  memcg: fix a UAF problem in drain_all_stock()
  - !1976  fix race between setxattr and write back
  - memcg: fix a UAF problem in drain_all_stock()
  - dm: switch to precise io accounting
  - block: add precise io accouting apis
  - tracing: Fix race issue between cpu buffer write and swap
  - ext2: dump current reservation window info
  - ext2: fix race between setxattr and write back
  - ext2: introduce flag argument for ext2_new_blocks()
  - ext2: remove ext2_new_block()
  - arm64: efi: Make efi_rt_lock a raw_spinlock
  - efi: rt-wrapper: Add missing include
  - arm64: efi: Recover from synchronous exceptions occurring in firmware
  - arm64: efi: Execute runtime services from a dedicated stack
  - efi: fix userspace infinite retry read efivars after EFI runtime services page fault
  - arm64: efi: Restore register x18 if it was corrupted
  - x86/efi: fix a -Wtype-limits compilation warning
  - efi: Fix build error due to enum collision between efi.h and ima.h
  - efi: Fix debugobjects warning on 'efi_rts_work'
  - efi/x86: Handle page faults occurring while running EFI runtime services
  - efi: Make efi_rts_work accessible to efi page fault handler
  - lib/genalloc.c: change return type to unsigned long for bitmap_set_ll
  - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE
  - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2309.4.0.0219
changelog:
  - !2168  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  - !2226  crypto: hisilicon/qm - prevent soft lockup in qm_poll_qp()'s loop
  - !2225  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  - crypto: hisilicon/qm - prevent soft lockup in qm_poll_qp()'s loop
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  - !2177  sched/qos: Fix warning in CPU hotplug scenarios
  - !2207  crypto:hisilicon/qm - cache write back before flr and poweroff
  - !2206  Fix booting failure on arm64
  - crypto:hisilicon/qm - cache write back before flr and poweroff
  - !2205  crypto:hisilicon/sec - modify hw endian config
  - Revert "efi: Make efi_rts_work accessible to efi page fault handler"
  - Revert "efi/x86: Handle page faults occurring while running EFI runtime services"
  - Revert "efi: Fix debugobjects warning on 'efi_rts_work'"
  - Revert "efi: Fix build error due to enum collision between efi.h and ima.h"
  - Revert "x86/efi: fix a -Wtype-limits compilation warning"
  - Revert "arm64: efi: Restore register x18 if it was corrupted"
  - Revert "efi: fix userspace infinite retry read efivars after EFI runtime services page fault"
  - Revert "arm64: efi: Execute runtime services from a dedicated stack"
  - Revert "arm64: efi: Recover from synchronous exceptions occurring in firmware"
  - Revert "efi: rt-wrapper: Add missing include"
  - Revert "arm64: efi: Make efi_rt_lock a raw_spinlock"
  - crypto:hisilicon/sec - modify hw endian config
  - !2118 Compiler: Backport value profile support to openEuler 20.03 LTS SP3.
  - GCOV: Add value profile support for kernel.
  - sched/qos: Fix warning in CPU hotplug scenarios
  - !2154  netfilter: nftables: exthdr: fix 4-byte stack OOB write
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  - !2140  io_uring: ensure IOPOLL locks around deferred work
  - !2056 i2c: hisi: Add gpio bus recovery support
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write
  - !2082  fix CVE-2023-20588
  - io_uring: ensure IOPOLL locks around deferred work
  - i2c: hisi: Add gpio bus recovery support
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt
  - x86/CPU/AMD: Do not leak quotient data after a division by 0


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.0.20-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix issue about iomem file that contains too many contens.As a result,the kdump service failed


author: Zhipeng Xie<xiezhipeng1@huawei.com> -2.0-3.1.25
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:change livepatch and os_hotpatch to permission and exclude in main package


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:rebase from upstream version v0.9.1
         Use Epoch to make the version number consistent with the upstream


author: fuanan <fuanan3@huawei.com> - 551-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Minor memory leak.
         Remove unnecessary and incorrectly used variable same_pos_bell.
         Fix erroneous EOF calculation when F command is interrupted.
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: yaoxin <yaoxin30@huawei.com> - 1.0.13-1
changelog:
  - Upgrade libEMF to 1.0.13; fix CVE-2020-13999 CVE-2020-11863 CVE-2020-11864 CVE-2020-11865 CVE-2020-11866


author: zhangmingyi <zhangmingyi5@huawei.com> - 2:0.1.1-2
changelog:
  - backporting: 	backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
  		backport-libbpf-Fix-the-name-of-a-reused-map.patch 
  		backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: capsh better error handling for integer parsing
          setcap clean up error handling of the ns rootid argument


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: If needed search PATH for capsh (==) self-execution
          Guarantee sufficient memory for scratch pathname


author: hy <eulerstoragemt@huawei.com> - 1:1.39.8-4
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Remove Java bingdings, zz-packages-zfs command and rhsrvany.exe from mingw32-srvany.


author: haowenchao <haowenchao@huawei.com> - 1.19.0-2
changelog:
  - Split rpm package to avoid main rpm package CUnit dependency
    Previous implement place executable files in main package which leading
    to dependency of CUnit. This change add a package utils and move
    these executable files to utils package to avoid main package's CUnit
    dependency, making main package weak depend on libiscsi-utils


author: haowenchao <haowenchao@huawei.com> - 1.19.0-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-iscsi-ls-Fix-iser-url-scheme-parsing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-test-tool-Compare-Write-skip-InvalidDataOutSize-unle.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-test-tool-Compare-Write-override-driver-queue_pdu-ca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-test-tool-iSCSICmdSnTooLow-override-driver-queue_pdu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-test-tool-iSCSICmdSnTooHigh-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-test-tool-iSCSIDataSnInvalid-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-test-tool-BlockEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-test-tool-BlockEraseReserved-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-test-tool-CryptoEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-test-tool-CryptoEraseReserved-override-driver-queue_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0011-test-tool-OverwriteReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0012-test-tool-OverwriteReserved-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0013-test-tool-remove-unused-iscsi_queue_pdu-symbol-overl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0014-iser-remove-__packed-from-struct-iser_cm_hdr-declaration.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0015-test-tools-use-extern-init-in-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0016-iscsi-inq-handle-setting-of-debug_level-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0017-Updata-iscsi-dd.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0018-iscsi-swp-handle-setting-of-debug_level-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0019-fix-iscsi-ls-parameter-parse.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0020-Check-return-value-of-scsi_malloc-in-order-to.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0021-Fix-segmentation-fault-problem.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Ruijun Ge <geruijun@huawei.com> - 1.19.0-8
changelog:
  - DESC: backport patches to solve command parameter parse problem
          and dereference null pointer problem


author: songnannan<songnannan2@huawei.com> 0.8.0.dev.2-2.h1
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:the debuginfo and debugsource packages are not generated by default


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 3.1-3
changelog:
  - fix heap-use-after-free in cil_yy_switch_to_buffer
  - fix heap-use-after-free in __class_reset_perm_values()
  - fix heap-buffer-overflow in cil_print_recursive_blockinherit


author: xingxing <xingxing9@h-partners.com> - 0.7.14-5
changelog:
  - Type:cves
  - CVE:CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-2021-44576-CVE-2021-44577
  - SUG:NA
  - DESC:fix CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-2021-44576-CVE-2021-44577


author: gaihuiying <eaglegai@163.com> - 0.9.4-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport upstream patches:
         add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: shangyibin <shangyibin1@openeuler.org> - 1.4.2-4
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Adding help package to the installation dependency of the main package


author: shangyibin <shangyibin1@openeuler.org> - 1.4.2-5
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Change the dependency on the help package from requires to recommends.


author: wangye <wangye70@huawei.com> - 4.1.0-2
changelog:
  - Type:cves
  - ID:CVE-2020-35521 CVE-2020-35522 CVE-2020-35523 CVE-2020-35524
  - SUG:NA
  - DESC: fix CVE-2020-35521 CVE-2020-35522 CVE-2020-35523 CVE-2020-35524


author: wenjun<wenjun8@huawei.com> - 4.0.9-11.h1
changelog:
  - Type:cves
  - ID:CVE-2018-18557 CVE-2018-17101 CVE-2018-17100 CVE-2018-12900 CVE-2018-18661
  - SUG:NA
  - DESC:fix above cves


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-9
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: Xu Yandong <xuyandong2@huawei.com> - 6.2.0-4
changelog:
  - Fix virdaemon waiting for child processes return code error.
  - Fix virsh dump and migrate return code error.


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - rpc: gendispatch: handle empty flags
  - rpc: add support for filtering @acls by uint params
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses
  - qemu: agent: set ifname to NULL after freeing


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - util: Move virIsDevMapperDevice() to virdevmapper.c
  - virdevmapper: Don't use libdevmapper to obtain dependencies


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - libvirt: Add 'retry' support for error policy
  - qemu: Support 'retry' BLOCK_IO_ERROR event.
  - libvirt/conf: Set default values of retry fileds


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  - security: fix SELinux label generation logic


author: chengguipeng<chengguipeng1@huawei.com> - 0.8.4-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC:solve the issue which dispaly could not resolve keysym XF86FullScreen


author: zoulin <zoulin13@huawei.com> - 2.9.10-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] patches from upstream
         Fix-handling-of-unexpected-EOF-in-xmlParseContent.patch
         Fix-line-numbers-in-error-messages-for-mismatched-ta.patch
         Fix-null-deref-in-legacy-SAX1-parser.patch
         update-for-xsd-language-type-check.patch
         Fix-dangling-pointer-with-xmllint-dropdtd.patch
         Fix-duplicate-xmlStrEqual-calls-in-htmlParseEndTag.patch
         Fix-exponential-behavior-with-recursive-entities.patch
         Fix-quadratic-behavior-when-looking-up-xml-attribute.patch
         Fix-use-after-free-with-xmllint-html-push.patch
         Fix-xmlGetNodePath-with-invalid-node-types.patch
         Stop-checking-attributes-for-UTF-8-validity.patch


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix heap-use-after-free in xmlXIncludeIncludeNode
         fix stack overflow in xmlDocDumpMemory
         fix stack overflow in htmlDocContentDumpOutput


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix memory leaks in XPointer string-range function
         fix null pointer deref in xmlXPtrRangeInsideFunction
         stop using maxParserDepth in xpath.c
         hardcode maximum XPath recursion depth
         fix XPath recursion limit


author: fuanan <fuanan3@h-partners.com> - 2.9.10-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: fuanan <fuanan3@h-partners.com> - 2.9.10-28
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: yuboyun <yuboyun@huawei.com> - 33.6-2
changelog:
  - Do not use '--loglevel' option when running Anaconda
    Improve Imc no-virt error handling
    Add POSTIN scriptlet error to the log monitor list
    Remove LD_PRELOAD libgomp.so.1 from Imc --no-virt


author: Guoshuai Sun <sunguoshuai@huawei.com> 8.0.21-2
changelog:
  - New version 8.0.21 fix CVES: CVE-2020-14575 CVE-2020-14567 CVE-2020-14619
    CVE-2020-14651 CVE-2020-14641 CVE-2020-14568 CVE-2020-14623 CVE-2020-14591
    CVE-2020-14576 CVE-2020-14553 CVE-2020-14539 CVE-2020-14540 CVE-2020-14643
    CVE-2020-14702 CVE-2020-14614 CVE-2020-14680 CVE-2020-14633 CVE-2020-14632
    CVE-2020-14634 CVE-2020-14597 CVE-2020-14697 CVE-2020-14624 CVE-2020-14631
    CVE-2020-14678 CVE-2020-14550 CVE-2020-14559


author: wutao <wutao61@huawei.com> - 8.0.22-1
changelog:
  - upgrade to 8.0.22 fix CVES: CVE-2020-14852 CVE-2020-14794 CVE-2020-14775
    CVE-2020-14893 CVE-2020-14829 CVE-2020-14828 CVE-2020-14888 CVE-2020-14891
    CVE-2020-14812 CVE-2020-14870 CVE-2020-14769 CVE-2020-14878 CVE-2020-14789
    CVE-2020-14821 CVE-2020-14844 CVE-2020-14836 CVE-2020-14830 CVE-2020-14827
    CVE-2020-14773 CVE-2020-14765 CVE-2020-14869 CVE-2020-14776 CVE-2020-14861
    CVE-2020-14866 CVE-2020-14672 CVE-2020-14837 CVE-2020-14771 CVE-2020-14785
    CVE-2020-14838 CVE-2020-14848 CVE-2020-14791 CVE-2020-14793 CVE-2020-14804 
    CVE-2020-14777 CVE-2020-14800 CVE-2020-14786 CVE-2020-14845 CVE-2020-14839
    CVE-2020-14846 CVE-2020-14867 CVE-2020-14868 CVE-2020-14873 CVE-2020-14860
    CVE-2020-14814 CVE-2020-14790 CVE-2020-14809


author: wangxiao <wangxiao65@huawei.com> 8.0.23-1
changelog:
  - Upgrade mysql to 8.0.23, fix CVES: CVE-2021-1998 CVE-2021-2002
    CVE-2021-2010 CVE-2021-2011 CVE-2021-2016 CVE-2021-2021 CVE-2021-2022
    CVE-2021-2024 CVE-2021-2031 CVE-2021-2032 CVE-2021-2036 CVE-2021-2038
    CVE-2021-2046 CVE-2021-2048 CVE-2021-2056 CVE-2021-2058 CVE-2021-2060
    CVE-2021-2061 CVE-2021-2065 CVE-2021-2070 CVE-2021-2072 CVE-2021-2076
    CVE-2021-2081 CVE-2021-2087 CVE-2021-2088 CVE-2021-2122


author: wangxiao <wangxiao65@huawei.com> 8.0.24-1
changelog:
  - Upgrade mysql to 8.0.24, fix CVES: CVE-2021-2166 CVE-2021-2146
    CVE-2021-2162 CVE-2021-2212 CVE-2021-2299 CVE-2021-2293 CVE-2021-2215
    CVE-2021-2278 CVE-2021-2164 CVE-2021-2208 CVE-2021-2217 CVE-2021-2203
    CVE-2021-2226 CVE-2021-2298 CVE-2021-2230 CVE-2021-2300 CVE-2021-2304
    CVE-2021-2172 CVE-2021-2194 CVE-2021-2170 CVE-2021-2196 CVE-2021-2201
    CVE-2021-2180 CVE-2021-2307 CVE-2021-2169 CVE-2021-2171 CVE-2021-2305
    CVE-2021-2179 CVE-2021-2174 CVE-2021-2193 CVE-2021-2232 CVE-2021-2301
    CVE-2021-2308


author: liwu <liwu13@huawei.com> - 8.0.26-1
changelog:
  - Upgrade mysql to 8.0.26,fix CVE-2021-2356,fix CVE-2021-2339,CVE-2021-2354
    CVE-2021-2352,CVE-2021-2340


author: bzhaoop <bzhaojyathousandy@gmail.com> - 5.7.34-1
changelog:
  - Bump from 5.7.21 to latest 5.7.34
  - Correct the test steps and options
  - Refactor part of the file structure according to the new packages


author: bzhaoop <bzhaojyathousandy@gmail.com> - 5.7.37-1
changelog:
  - Fix CVE issues for bump to the 5.7.37 version
  - CVE-2022-21245
  - CVE-2022-21270
  - CVE-2022-21303
  - CVE-2022-21304
  - CVE-2022-21344
  - CVE-2022-21367
  - CVE-2021-35624
  - CVE-2021-2356
  - CVE-2021-2011
  - CVE-2021-2010
  - CVE-2021-2007


author: openEuler Buildteam <buildteam@openeuler.org> - 6.1-12
changelog:
  - Type:cves
  - ID:CVE-2019-17594  CVE-2019-17595
  - SUG:NA
  - DESC:fix CVE-2019-17594 and CVE-2019-17595


author: gaihuiying <gaihuiying1@huawei.com> - 5.9-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix undefined behavior in asn_build_int()
         libsnmp: Rework parse_imports()
         libsnmp: Increase MAX_IMPORTS
         libsnmp: Allocate the module import list on the heap
         libsnmp: Fix a memory leak in a MIB parser error path
         libsnmp: Fix the getoid() error path


author: gaihuiying <eaglegai@163.com> - 1:5.9-6
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: xingwei <xingwei14@h-partners.com> - 1:5.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
          IF-MIB: pass the network interface index to net
          IF-MIB: fix a memory leak
          IF-MIB: fix a recently introduced use after free
          IF-MIB: add a trailing newline to an error message


author: eaglegai <eaglegai@163.com> - 2.0-0.56
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ifconfig display error when the length of interface name is 15


author: openEuler Buildteam <buildteam@openeuler.org> - 2.4.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:stop the var-lib-nfs-rpc_pipefs.mount before remove the package


author: yuxiangyang <yuxiangyang4@huawei.com> - 1:1.16.1-2
changelog:
  - delete http_stub_status_module.This configuration creates a simple
    web page with basic status data,but it will affect cpu scale-out because
    it use atomic cas.


author: wangkai <13474090681@163.com> - 1:12.22.11-4
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-6
changelog:
  - Type:CVE
  - ID:CVE-2023-26551
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: Cui XuCui <cuixucui1@huawei.com> - 1.0.0-8
changelog:
  * Thu Jul 15 2021 zhangzikang <zhangzikang@kylinos.cn> - 1.0.0-7
  - Fix cdrom and cpufreq test failed


author: meitingli <bubble_mt@outlook.com> - 1.1.0-0
changelog:
  - 1. Add support os version: openEuler 22.03LTS
  - 2. Add FC/RAID/keycard/GPU/infiniband testcases
  - 3. Bugfix


author: cuixucui <cuixucui1@h-partners.com> - 1.1.1-0
changelog:
  -1. Reconstruct the log module and rectify the log printing
  -2. Add kabi testcase
  -3. Add driver, driver version, chip and module display to the console
  -4. Add configuration file for testsuite to improve automation rate
  -5. Add oech and oech-server version display
  -6. Add driver information display in hardware test logs


author: cuixucui <cuixucui1@h-partners> - 1.1.1-3
changelog:
  - Fix the problem that the client fails to send messages after the server port is modified
  - Fix the problem that the system test item failed to check the integrity of the software package


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-4
changelog:
  - Add requirements for system and bugfix
  - Upgrade oec-hardware-server
  - Update readme and design doc
  - Fix nvme error
  - Update network fibre check and log 
  - Update description for perf test
  - Add automatic configuration network card IP


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-5
changelog:
  - fix the bug that the test board information is not added to the configuration file
  - Add kabi for hardware critical test
  - Optimize disk/raid/fc/ethernet/infiniband test suite
  - Fix the bug of reading nvme data failed
  - Add file size check when uploading file to server


author: zhangyale <zhangyale3@h-partners.com> - 1.1.3-0
changelog:
  - Add support for openEuler 22.03 LTS SP1
  - Add AMD GPU testcase
  - Add automatic configuration network card IP
  - Add generate compatibility information


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: liqiang <liqiang332@h-partner.com> - 1.1.3-3
changelog:
  - Fix libswsds.so not stripped
  - Fix the value of kernel.src obtained by the kabi test case is incorrect
  - Add board infomation and fix memory bug
  - Fix the block size fails to be obtained during the NVME test
  - Judge whether to support kabi testing by architecture
  - Update readme and dev_design


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-0
changelog:
  - Add board information in the test report
  - Add spdk test case
  - Add dpdk test case
  - Update pci.ids file


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-1
changelog:
  - Add igc dpdk
  - Secure_filename to improve input robustness and security
  - Correcting bug, self.changed_ Logpath is a string
  - Increase the number of network card up detection times
  - Resolve the issue of IP configuration failure


author: haowenchao <haowenchao@huawei.com> - 2.1.1-8
changelog:
  - backport one patch for solving install problem, sync from branch openEuler-20.09
    which commit id is 81fd136


author: yixiangzhike <zhangxingliang3@huawei.com> - 1.0-43
changelog:
  - Revert "Turn off the audit service by default"
  - Revert "Change the terminal output loglevel to 4"


author: openEuler Buildteam <buildteam@openeuler.org> - 1.5.1-24
changelog:
  - Type:cves
  - ID:CVE-2016-10506 CVE-2016-7445
  - SUG:restart
  - DESC:fix CVE-2018-15173 and CVE-2016-7445


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: liulong <liulong20@huawei.com> - 2.4.50-3
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230


author: xingwei <xingwei14@h-partners.com> - 2.0.0-26
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to solve package upgrade failure problem


author: hy-euler <eulerstoragemt@huawei.com> - 3.3-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: delete -Sgit in 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0000-Switch-gpt-header-move-and-msdos-overlap-to-python3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/6000-add-support-of-gpt_sync_mbr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/9000-Add-extra-judgment-for-a-partition-created-success.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/9001-bugfix-parted-fix-failure-of-mklabel-gpt_sync_mbr.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


author: hy-euler <eulerstoragemt@huawei.com> - 3.6.2-5
changelog:
  - Type:enhancemnet
  - ID:NA
  - SUG:NA
  - DESC:add fedora patches for displaying more information while running lspci


author: yangmingtai <yangmingtai@huawei.com> - 10.35-4
changelog:
  - DESC:sync community patches
         backport-jit-fail-early-in-ffcps_-if-subject-shorter-than-off.patch
         backport-jit-fix-pcre2_jit_free_unused_memory-if-sljit-not-us.patch


author: Shen Yangyang <shenyangyang4@huawei.com> - 4:5.28.3-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete provide of perl-macros that actually provided by openEuler-rpm-config


author: wuchaochao<wuchaochao4@huawei.com> - 4:5.28.3-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix backport-perl-5.22.0-Install-libperl.so-to-shrpdir-on-Linux.patch


author: Funda Wang <fundawang@yeah.net> - 7.2.34-3
changelog:
  - Fix php BUG#81740 / CVE-2022-31631
  - Fix php BUG#81744 / CVE-2022-0567
  - Fix php BUG#81746 / CVE-2022-0568
  - Fix CVE-2023-0662
  - Fix CVE-2023-3247
  - Fix CVE-2023-3823
  - Fix CVE-2023-3824


author: wangye <wangye70@huawei.com> - 0.67.0-6
changelog:
  - Type:cves
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2019-10872 CVE-2018-16646 CVE-2018-18897 CVE-2018-19060 CVE-2018-20481 CVE-2019-14494 CVE-2019-7310


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-4
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: gaihuiying <eaglegai@163.com> - 2.4.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: liuxin <liuxin264@huawei.com> - 3.2.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix allocate_partitions threw an exception while adding /boot to RAID disk


author: yanan <yanan@huawei.com> - 3.2.2-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Convert LVM filter lists to sets
         Remove action device from LVM reject list


author: yanan <yanan@huawei.com> - 3.2.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the failure of not a valid name for this device while the hostname is setted as 63 maxlen


author: wanglu <wanglu210@huawei.com> - 1:3.2.2-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ignore devices marked as hidden in sysfs and fix reading hidden sysfs attribute


author: Enbo Kang <kangenbo@huawei.com> - 2.10-8
changelog:
  - Type:security
  - ID:CVE-2019-10906
  - SUG:NA
  - DESC:fix CVE-2019-10906 python-jinja2:str.format_map allows sandbox


author: shixuantong <shixuantong@huawei.com> - 4.5.2-6
changelog:
  - Cleaner: cover some more cases where scripts could sneak through in specially crafted style content.


author: shixuantong<shixuantong@huawei.com> - 5.3.0-6
changelog:
  - Type:cves
  - ID:CVE-2020-11538 CVE-2020-10378 CVE-2020-10177 CVE-2020-10994
  - SUG:NA
  - DESC:fix CVE-2020-11538 CVE-2020-10378 CVE-2020-10177 CVE-2020-10994


author: shixuantong<shixuantong@huawei.com> - 5.3.0-7
changelog:
  - Type:cves
  - ID:CVE-2019-19911 CVE-2020-5311
  - SUG:NA
  - DESC:fix CVE-2019-19911 and change patch name for CVE-2020-5311


author: shixuantong<shixuantong@huawei.com> - 5.3.0-10
changelog:
  - Type:cves
  - ID:CVE-2020-5310 CVE-2020-5312 CVE-2020-5313
  - SUG:NA
  - DESC:fix CVE-2020-5310 CVE-2020-5312 CVE-2020-5313


author: wangye <wangye70@huawei.com> - 8.1.1-2
changelog:
  - Type:CVE
  - CVE:CVE-2021-27921 CVE-2021-27922 CVE-2021-27923
  - SUG:NA
  - DESC: fix CVE-2021-27921CVE-2021-27922CVE-2021-27923


author: hanhui <hanhui15@huawei.com> - 8.1.1-3
changelog:
  - Type:bugfix
  - CVE:CVE-2021-25287、CVE-2021-25288、CVE-2021-28675、CVE-2021-28676、CVE-2021-28677、CVE-2021-28678
  - SUG:NA
  - DESC: incorporate community patch


author: yefei <yefei25@huawei.com> - 18.0-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:  add bash completion and repair python2 interpreter path


author: chenhaixing <chenhaixing@huawei.com> - 1.25.9-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.25.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify HOST_PORT_PAT in backport-fixed-issue-with-port-0-returning-None.patch


author: BruceGW<gyl93216@163.com> - 3.7.9-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix _PyEval_FiniThreads
         rewrite _PyObject_IsFreed unit tests
         get test_capi passing with address sanitize
         remove use after free reference in ctypes
         fix memory leak in _asynciomodule.c


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable profile guided optimizations for x86_64 and i686 architectures


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bpo-43124: Fix smtplib multiple CRLF injection
         bpo-12800: tarfile: Restore fix from 011525ee9
         bpo-41815: SQLite: segfault if backup called on closed database
         bpo-42183: Fix a stack overflow error for asyncio Task or Future repr()
         bpo-45001: Make email date parsing more robust against malformed input


author: yanglongkang <yanglongkang@h-partners.com> - 3.7.9-27
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:delete the .crl file, capath file and .pem file in the test case


author: wangjie<wangjie294@huawei.com> - 3.7.9-4
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Change the dependency on the help package from requires to recommends


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - hw: usb: hcd-ohci: check for processed TD before retire
  - hw: ehci: check return value of 'usb_packet_map'
  - hw: usb: hcd-ohci: check len and frame_number variables
  - hw/net/e1000e: advance desc_offset in case of null descriptor


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - ati: use vga_read_byte in ati_cursor_define
  - sd: sdhci: assert data_count is within fifo_buffer
  - msix: add valid.accepts methods to check address


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - scsi-bus: Refactor the code that retries requests
  - scsi-disk: Add support for retry on errors
  - qapi/block-core: Add retry option for error action
  - block-backend: Introduce retry timer
  - block-backend: Add device specific retry callback
  - block-backend: Enable retry action on errors
  - block-backend: Add timeout support for retry
  - block: Add error retry param setting
  - virtio-blk: Refactor the code that processes queued requests
  - virtio-blk: On restart, process queued requests in the proper context
  - virtio_blk: Add support for retry on errors
  - block-backend: Stop retrying when draining
  - block: Add sanity check when setting retry parameters


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - hw/sd: sdhci: Don't transfer any data when command time out
  - hw/sd: sdhci: Don't write to SDHC_SYSAD register when transfer is in progress
  - hw/sd: sdhci: Correctly set the controller status for ADMA
  - hw/sd: sdhci: Limit block size only when SDHC_BLKSIZE register is writable
  - hw/sd: sdhci: Reset the data pointer of s->fifo_buffer[] when a different block size is programmed


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - net: introduce qemu_receive_packet()
  - e1000: switch to use qemu_receive_packet() for loopback
  - dp8393x: switch to use qemu_receive_packet() for loopback packet
  - sungem: switch to use qemu_receive_packet() for loopback
  - tx_pkt: switch to use qemu_receive_packet_iov() for loopback
  - rtl8139: switch to use qemu_receive_packet() for loopback
  - pcnet: switch to use qemu_receive_packet() for loopback
  - cadence_gem: switch to use qemu_receive_packet() for loopback
  - lan9118: switch to use qemu_receive_packet() for loopback


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - hw/pci-host: add pci-intack write method
  - pci-host: add pcie-msi read method
  - vfio: add quirk device write method
  - prep: add ppc-parity write method
  - nvram: add nrf51_soc flash read method
  - spapr_pci: add spapr msi read method
  - tz-ppc: add dummy read/write methods
  - imx7-ccm: add digprog mmio write method


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - vhost-user-gpu: fix resource leak in 'vg_resource_create_2d' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in vg_resource_attach_backing (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak while calling 'vg_resource_unref' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in 'virgl_cmd_resource_unref' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in 'virgl_resource_attach_backing' (CVE-2021-3544)
  - vhost-user-gpu: fix memory disclosure in virgl_cmd_get_capset_info (CVE-2021-3545)
  - vhost-user-gpu: fix OOB write in 'virgl_cmd_get_capset' (CVE-2021-3546)


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - ide: ahci: add check to avoid null dereference (CVE-2019-12067)
  - hw/intc/arm_gic: Fix interrupt ID in GICD_SGIR register
  - usb: limit combined packets to 1 MiB (CVE-2021-3527)


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - fix cve-2020-35504 esp: always check current_req is not NULL before use in DMA callbacks
  - fix cve-2020-35505 esp: ensure cmdfifo is not empty and current_dev is non-NULL


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - x86: Intel AVX512_BF16 feature enabling
  - i386: Add MSR feature bit for MDS-NO
  - i386: Add macro for stibp
  - i386: Add new CPU model Cooperlake
  - target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  - target/i386: Add missed security features to Cooperlake CPU model
  - target/i386: add PSCHANGE_NO bit for the ARCH_CAPABILITIES MSR
  - target/i386: Export TAA_NO bit to guests


author: yezengruan <yezengruan@huawei.com>
changelog:
  - hw/rdma: Fix possible mremap overflow in the pvrdma device (CVE-2021-3582)
  - pvrdma: Ensure correct input on ring init (CVE-2021-3607)
  - pvrdma: Fix the ring init error flow (CVE-2021-3608)


author: yezengruan <yezengruan@huawei.com>
changelog:
  - vhost-vsock: detach the virqueue element in case of error (CVE-2022-26354)
  - virtio-net: fix map leaking on error during receive (CVE-2022-26353)


author: yezengruan <yezengruan@huawei.com>
changelog:
  - hw/block/fdc: Extract blk_create_empty_drive()
  - hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196
  - tests/fdc-test: Add a regression test for CVE-2021-20196
  - display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207)
  - ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206)


author: yezengruan <yezengruan@huawei.com>
changelog:
  - hw/intc/arm_gicv3_dist: Rename 64-bit accessors with 'q' suffix
  - hw/intc/arm_gicv3: Replace mis-used MEMTX_* constants by booleans
  - hw/intc/arm_gicv3: Check for !MEMTX_OK instead of MEMTX_ERROR (CVE-2021-3750)
  - net/colo-compare.c: Check that colo-compare is active


author: sundongxu <sundongxu3@huawei.com>
changelog:
  - e1000: fail early for evil descriptor
  - e1000: fix tx re-entrancy problem
  - hw/sd/sdcard: Do not allow invalid SD card sizes
  - hw/sd/sdcard: Do not switch to ReceivingData if address is invalid
  - hw/sd/sdcard: Restrict Class 6 commands to SCSD cards
  - hw/sd/sdcard: Simplify realize() a bit
  - hw/sd/sdcard: Update coding style to make checkpatch.pl happy
  - scsi/qemu-pr-helper: Fix out-of-bounds access to trnptid_list[]
  - curses: Fixes curses compiling errors.
  - net/dump.c: Suppress spurious compiler warning
  - tests: Replace deprecated ASN1 code


author: yezengruan <yezengruan@huawei.com>
changelog:
  - hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued
  - scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216)
  - scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216)


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - qga/win32: Use rundll for VSS installation
  - qga/win32: Remove change action from MSI installer
  - 9pfs: prevent opening special files (CVE-2023-2861)


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - accel/tcg: fix race in cpu_exec_step_atomic (bug 1863025)
  - pci: assert configuration access is within bounds
  - io: remove io watch if TLS channel is closed during handshake


author: yaoxin <yaoxin30@huawei.com> - 5.0.14-1
changelog:
  - Upgrade redis5 to 5.0.14 for fix cves: CVE-2021-41099
    CVE-2021-32762 CVE-2021-32675 CVE-2021-32687 CVE-2021-32626
    CVE-2021-32627 CVE-2021-32628


author: openEuler Buildteam <buildteam@openeuler.org> - 4.15.1-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert always execute file trigger scriptlet callbacks with owning header


author: shixuantong <shixuantong@huawei.com> - 4.15.1-24
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix data race in packageBinaries() function and prioritize large packages


author: wutao <wutao61@huawei.com> - 2.5.8-3
changelog:
  - fix CVE-2020-25613
  - WEBrick,a simple HTTP server bundled with Ruby,had not
  - checked the transfer-encoding header value rigorously.
  - An attacker may potentially exploit this issue to bypass
  - a reverse proxy,which may lead to an HTTP Request Smuggling
  - attack.


author: shixuantong <shixuantong@huawei.com> - 2.5.8-114
changelog:
  - Type:cves
  - ID:CVE-2021-31799 CVE-2021-31810 CVE-2021-32066
  - SUG:NA
  - DESC:fix CVE-2021-31799 CVE-2021-31810 CVE-2021-32066


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-4
changelog:
  - Type:cves
  - ID:CVE-2020-27840 CVE-2021-20277 CVE-2021-20254
  - SUG:NA
  - DESC:fix CVE-2020-27840 CVE-2021-20277 CVE-2021-20254


author: chxssg <chxssg@qq.com> - 4.11.12-6
changelog:
  - Type:cves
  - ID:CVE-2020-14318 CVE-2020-14323 CVE-2020-14383 
  - SUG:NA
  - DESC:fix CVE-2020-14318 CVE-2020-14323 CVE-2020-14383


author: xihaochen <xihaochen@huawei.com> - 4.11.12-8
changelog:
  - Type:cves
  - ID:CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738
  - SUG:NA
  - DESC:fix CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-9
changelog:
  - Type:cves
  - ID:CVE-2021-43566
  - SUG:NA
  - DESC:backport patches to fix CVE-2021-43566:
         s3/lib: add parent_smb_fname function
         smbd: use parent_smb_fname in check_parent_access
         smbd: use parent_smb_fname in inherit_new_acl
         s3/VFS: Add SMB_VFS_MKDIRAT
         vfs_full_audit: pass conn to smb_fname_str_do_log
         s3/VFS: change connection_struct cwd_fname to cwd_fsp
         s3/smbd: Change mkdir_internal to call SMB_VFS_MKDIRAT
         smbd: use parent_smb_fname in mkdir_internal
         fix CVE-2021-43566


author: xinghe <xinghe@h-partners.com> - 4.11.12-13
changelog:
  - Type:cves
  - CVE:CVE-2022-32746 CVE-2022-32744 CVE-2022-2031 CVE-2022-32742
  - SUG:NA
  - DESC:fix CVE-2022-32746 CVE-2022-32744 CVE-2022-2031 CVE-2022-32742


author: xinghe <xinghe2@h-partners.com> - 4.11.12-31
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: yuboyun <yuboyun@huawei.com> - 4.11.6-8
changelog:
  - Type:cves
  - ID:CVE-2020-10730 CVE-2020-10745 CVE-2020-14303 CVE-2020-10760
  - SUG:NA
  - DESC:fix CVE-2020-10730CVE-2020-10745CVE-2020-14303CVE-2020-10760


author: luhuaxin <1539327763@qq.com> - 3.14.2-66
changelog:
  - selinux_requires macro shouldn't depend on policycoreutils-python
  - add avc for allowing systemd services to check selinux status


author: luhuaxin <1539327763@qq.com> - 3.14.2-71
changelog:
  - backport some upstream patches
    backport-Allow-systemd-logind-dbus-chat-with-fwupd.patch
    backport-Allow-auditd-manage-kerberos-host-rcache-files.patch
    backport-Add-dev_lock_all_blk_files-interface.patch
    backport-Define-named-file-transition-for-sshd-on-tmp-krb5_0..patch
    backport-Allow-nsswitch_domain-to-connect-to-systemd-machined.patch
    backport-Allow-unconfined_t-to-node_bind-icmp_sockets-in-node.patch
    backport-Create-macro-corenet_icmp_bind_generic_node.patch
    backport-Allow-traceroute_t-and-ping_t-to-bind-generic-nodes.patch
    backport-Allow-passwd-to-get-attributes-in-proc_t.patch
    backport-Allow-login_pgm-attribute-to-get-attributes-in-proc_.patch
    backport-Allow-syslogd_t-domain-to-read-write-tmpfs-systemd-b.patch
    backport-Allow-all-users-to-connect-to-systemd-userdbd-with-a.patch
    backport-Add-new-devices-and-filesystem-interfaces.patch
    backport-Add-lvm_dbus_send_msg-lvm_rw_var_run-interfaces.patch
    backport-Allow-domain-write-to-an-automount-unnamed-pipe.patch
    backport-Allow-dyntransition-from-sshd_t-to-unconfined_t.patch
    backport-Allow-initrc_t-create-run-chronyd-dhcp-directory-wit.patch
    backport-Update-systemd_resolved_read_pid-to-also-read-symlin.patch
    backport-Allow-systemd-resolved-manage-its-private-runtime-sy.patch
    backport-Allow-systemd-logind-manage-init-s-pid-files.patch
    backport-Add-systemd_resolved_write_pid_sock_files-interface.patch
    backport-Allow-nsswitch-domain-write-to-systemd-resolved-PID-.patch
    backport-sysnetwork.if-avoid-directly-referencing-systemd_res.patch
    backport-Allow-stub-resolv.conf-to-be-a-symlink.patch
    backport-Allow-domain-stat-proc-filesystem.patch
    backport-Allow-domain-write-to-systemd-resolved-PID-socket-fi.patch
    backport-Allow-systemd-machined-manage-systemd-userdbd-runtim.patch
    backport-Allow-domain-stat-the-sys-filesystem.patch
    backport-Allow-login_userdomain-write-inaccessible-nodes.patch
    backport-Allow-local_login_t-get-attributes-of-tmpfs-filesyst.patch
    backport-Allow-dhcpc_t-domain-transition-to-chronyc_t.patch
    backport-Allow-nsswitch_domain-read-cgroup-files.patch
    backport-Allow-IPsec-and-certmonger-to-use-opencryptoki-servi.patch
    backport-Create-chronyd_pid_filetrans-interface.patch


author: jinlun <jinlun@huawei.com> - 15-23
changelog:
  - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
    CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
    CVE-2021-23841 CVE-2022-0778


author: lijian<lijian2@kylinos.cn> - 1:1.1.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: chenyanpanHW <chenyanpan@huawei.com> - 4.4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-Fix-typos-update-URLs-in-squashfs-tools-Makefile.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-Support-creating-sockets-in-unsquashfs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-squashfs-tools-fix-build-failure-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-xattr-Initialize-header-to-avoid-valgrind-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-CVE-2021-40153.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-CVE-2021-41072.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-2
changelog:
  - Type:cves
  - ID:CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450
  - SUG:restart
  - DESC:fix CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: majun<majun65@huawei.com> - 4.2-3
changelog:
  - Type:cves
  - ID:CVE-2019-12525 CVE-2019-12527 CVE-2019-12529 CVE-2019-12854 CVE-2019-13345
  - SUG:restart
  - DESC:fix cves


author: huanghaitao <huanghaitao8@huawei.com> - 1.4.0-2
changelog:
  - Add Requires: python2-gobject-base libnotify >= 0.7.7
  - fix command subunit-notify subunit2gtk --help error


author: shenyangyang <shenyangyang4@huawei.com> - 243-29
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:revert don't enable systemd-journald-audit.socket by default
         that may cause reboot problem if update systemd with out dracut -f
         from LTS-20.03


author: fangxiuning <fangxiuning@huawei.com> - 243-33
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: journald: enforce longer line length limit during "setup" phase of stream protocol


author: shenyangyang <shenyangyang4@huawei.com> - 243-35
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change requires to openssl-libs as post scripts systemctl requires libssl.so.1.1


author: fangxiuning <fangxiuning@huawei.com> - 243-39
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:udevd: don't kill worker in manager_kill_worker when it's running


author: yangmingtai <yangmingtai@huawei.com> - 243-41
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:udevd: fix broken symbolic links when same link for different devices


author: ExtinctFire <shenyining_00@126.com> - 243-47
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:core: fix free undefined pointer when strdup failed in the first loop


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: huanghaitao <huanghaitao8@huawei.com> - 1:9.0.10-13
changelog:
  - Type:cves
  - ID: CVE-2019-17563 CVE-2019-12418 CVE-2020-1935 CVE-2020-1938 
  - SUG:restart
  - DESC: fix CVE-2019-17563 CVE-2019-12418CVE-2020-1935 CVE-2020-1938


author: wangxiao <wangxiao65@huawei.com> - 1:9.0.10-14
changelog:
  - Type:cves
  - ID: CVE-2020-9484 CVE-2020-11996 CVE-2020-13934 CVE-2020-13935
  - SUG:restart
  - DESC: fix CVE-2020-9484 CVE-2020-11996 CVE-2020-13934 CVE-2020-13935


author: wangyue <wangyue92@huawei.com> - 1:9.0.10-18
changelog:
  - Type:cve
  - ID: CVE-2021-25122 CVE-2021-25329
  - SUG:restart
  - DESC: fix CVE-2021-25122 CVE-2021-25329


author: Hugel<gengqihu1@huawei.com> - 3.0.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 3.0.3
         use proper rundir tmpfilesdir and sysusersdir, so proper directories are used


author: openEuler Buildteam <buildteam@openeuler.org> - 2.8.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revise the bogus date in changelog and delete the unnecessary subpackage "udisks2-iscsi"


author: yanglu<yanglu72@h-partners.com> - 1.11.0-7
changelog:
  - Type:cves
  - CVE:CVE-2022-30698 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30698 and CVE-2022-30699


author: yangcheng <yangcheng87@huawei.com> - 20170801-12
changelog:
  - Fix the problem that the mkfontscale command and mkfontdir command were not found during installation


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.35.2-4
changelog:
  - Fix memleak in fdisk_script_read_file
    Fix heap-buffer-overflow in fdisk_partname
    Fix integer overflow in partno_from_devname


author: yuanxin<yuanxin24@huawei.com> - 2:8.2-11
changelog:
  - Type:CVE
  - ID:CVE-2021-4166 CVE-2021-4192 CVE-2021-4193
  - SUG:NA
  - DESC:fix CVE-2021-4166 CVE-2021-4192 CVE-2021-4193


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-15
changelog:
  - Type:CVE
  - ID:CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413
  - SUG:NA
  - DESC:fix CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413


author: tianwei <tianwei12@h-partners.com> - 2:8.2-16
changelog:
  - Type:CVE
  - ID:CVE-2022-0443 CVE-2022-0392 CVE-2022-0417
  - SUG:NA
  - DESC:fix CVE-2022-0443 CVE-2022-0392 CVE-2022-0417


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-27
changelog:
  - Type:CVE
  - ID:CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619
  - SUG:NA
  - DESC:fix CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619


author: tianwei <tianwei12@h-partners.com> - 2:8.2-33
changelog:
  - Type:CVE
  - ID:CVE-2022-1851 CVE-2022-1898 CVE-2022-1942
  - SUG:NA
  - DESC:fix CVE-2022-1851 CVE-2022-1898 CVE-2022-1942


author: shixuantong<shixuantong@h-partners.com> - 2:8.2-42
changelog:
  - Type:CVE
  - ID:CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345
  - SUG:NA
  - DESC:fix CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-43
changelog:
  - Type:CVE
  - ID:CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287
  - SUG:NA
  - DESC:fix CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:8.2-47
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the error of backport-cannot-list-options-one-per-line.patch


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-3
changelog:
  - Type:CVE
  - ID:CVE-2022-3491 CVE-2022-3520 CVE-2022-3591
  - SUG:NA
  - DESC:fix CVE-2022-3491 CVE-2022-3520 CVE-2022-3591


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-6
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-15
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: Guoshuai Sun <sunguoshuai@huawei.com> - 5.15-5
changelog:
  - scripts when uninstall in %preun and %postun should watchdog-ping.service but not watchdog.ping.service


author: wangzhishun <wangzhishun1@huawei.com> - 5.1.0-11
changelog:
  - Make sure sample rate is specified and non-zero in DFF files
  - Fix potential out-of-bounds heap read


author: jinzhimin<jinzhimin2@huawei.com> - 1.20.8-4
changelog:
  - Type:CVE
  - Id:CVE-2020-14347 CVE-2020-14360 CVE-2020-25712
  - SUG:NA
  - DESC:fix CVE-2020-14347 CVE-2020-14360 CVE-2020-25712


author: yangcheng<yangcheng87@huawei.com> - 1.20.8-10
changelog:
  - Type:CVE
  - Id:CVE-2021-4008,CVE-2021-4009,CVE-2021-4010,CVE-2021-4011
  - SUG:NA
  - DESC:fix CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011


author: zhouwenpei <zhouwenpei1@h-partners.com> - 1.20.8-14
changelog:
  - Fix openEuler hard code problem
  - use -git instead of .git as the filename, to avoid .git ignore
  - Fix changelog date


