# changelog

author: Cheng Jian <cj.chengjian@huawei.com> - 4.19.90-2107.4.0.0097
changelog:
  - Revert "smp: Fix smp_call_function_single_async prototype"
  - Revert "vt: Fix character height handling with VT_RESIZEX"
  - block: only call sched requeue_request() for scheduled requests
  - KVM: arm: replace WARN_ON with pr_warn for UNKNOWN type
  - net/packet: annotate accesses to po->ifindex
  - net/packet: annotate accesses to po->bind
  - inet: annotate date races around sk->sk_txhash
  - ping: Check return value of function 'ping_queue_rcv_skb'
  - net: ethtool: clear heap allocations for ethtool function
  - x86/fpu: Reset state for all signal restore failures
  - inet: use bigger hash table for IP ID generation
  - net: bridge: fix vlan tunnel dst refcnt when egressing
  - net: bridge: fix vlan tunnel dst null pointer dereference
  - tracing: Do no increment trace_clock_global() by one
  - tracing: Do not stop recording comms if the trace file is being read
  - tracing: Do not stop recording cmdlines when tracing is off
  - icmp: don't send out ICMP messages with a source address of 0.0.0.0
  - net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
  - net: ipv4: fix memory leak in ip_mc_add1_src
  - net: make get_net_ns return error if NET_NS is disabled
  - net: add documentation to socket.c
  - sch_cake: Fix out of bounds when parsing TCP options and header
  - netfilter: synproxy: Fix out of bounds when parsing TCP options
  - rtnetlink: Fix regression in bridge VLAN configuration
  - udp: fix race between close() and udp_abort()
  - net: ipv4: fix memory leak in netlbl_cipsov4_add_std
  - fib: Return the correct errno code
  - net: Return the correct errno code
  - rtnetlink: Fix missing error code in rtnl_bridge_notify()
  - net: ipconfig: Don't override command-line hostnames or domains
  - nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue()
  - nvme-loop: clear NVME_LOOP_Q_LIVE when nvme_loop_configure_admin_queue() fails
  - nvme-loop: reset queue count to 1 in nvme_loop_destroy_io_queues()
  - scsi: target: core: Fix warning on realtime kernels
  - proc: only require mm_struct for writing
  - tracing: Correct the length check which causes memory corruption
  - ftrace: Do not blindly read the ip address in ftrace_bug()
  - scsi: core: Only put parent device if host state differs from SHOST_CREATED
  - scsi: core: Put .shost_dev in failure path if host state changes to RUNNING
  - scsi: core: Fix error handling of scsi_host_alloc()
  - NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
  - NFS: Fix use-after-free in nfs4_init_client()
  - NFS: Fix a potential NULL dereference in nfs_get_client()
  - sched/fair: Make sure to update tg contrib for blocked load
  - perf: Fix data race between pin_count increment/decrement
  - cgroup1: don't allow '
  - wq: handle VM suspension in stall detection
  - cgroup: disable controllers at parse time
  - net: mdiobus: get rid of a BUG_ON()
  - netlink: disable IRQs for netlink_lock_table()
  - bonding: init notify_work earlier to avoid uninitialized use
  - proc: Track /proc/$pid/attr/ opener mm_struct
  - ACPI: EC: Look for ECDT EC after calling acpi_load_tables()
  - ACPI: probe ECDT before loading AML tables regardless of module-level code flag
  - mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY
  - x86/apic: Mark _all_ legacy interrupts when IO/APIC is missing
  - pid: take a reference when initializing `cad_pid`
  - netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches
  - ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service
  - vfio/platform: fix module_put call in error flow
  - vfio/pci: zap_vma_ptes() needs MMU
  - vfio/pci: Fix error return code in vfio_ecap_init()
  - efi: cper: fix snprintf() use in cper_dimm_err_location()
  - efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared
  - lib/clear_user: ensure loop in __arch_clear_user cache-aligned
  - scsi: core: Treat device offline as a failure
  - Revert "scsi: check the whole result for reading write protect flag"
  - ext4: fix WARN_ON_ONCE(!buffer_uptodate) after an error writing the superblock
  - arm64/config: Set CONFIG_TXGBE=m by default
  - make bch_btree_check() to be multiple threads
  - Make compile successful when CONFIG_BCACHE is not set.
  - Move only dirty data when gc runnning, in order to reducing write amplification.
  - Add traffic policy for low cache available.
  - igmp: Add ip_mc_list lock in ip_check_mc_rcu
  - memcg: fix unsuitable null check after alloc memory
  - cpuidle: fix a build error when compiling haltpoll into module
  - config: enable KASAN and UBSAN by default
  - KVM: x86: expose AVX512_BF16 feature to guest
  - KVM: cpuid: remove has_leaf_count from struct kvm_cpuid_param
  - KVM: cpuid: rename do_cpuid_1_ent
  - KVM: cpuid: set struct kvm_cpuid_entry2 flags in do_cpuid_1_ent
  - KVM: cpuid: extract do_cpuid_7_mask and support multiple subleafs
  - KVM: cpuid: do_cpuid_ent works on a whole CPUID function
  - ext4: fix possible UAF when remounting r/o a mmp-protected file system
  - locks: Fix UBSAN undefined behaviour in flock64_to_posix_lock
  - iomap: Mark read blocks uptodate in write_begin
  - iomap: Clear page error before beginning a write
  - iomap: move the zeroing case out of iomap_read_page_sync
  - nbd: handle device refs for DESTROY_ON_DISCONNECT properly
  - cifs: Fix leak when handling lease break for cached root fid
  - mm/memcontrol.c: fix kasan slab-out-of-bounds in mem_cgroup_css_alloc
  - module: limit enabling module.sig_enforce
  - selftests/bpf: add test_spec_readahead_xfs_file to support specail async readahead
  - mm: support special async readahead
  - selftests/bpf: test_xfs_file support to clear FMODE_RANDOM
  - xfs: let writable tracepoint enable to clear flag of f_mode
  - jbd2: fix kabi broken in struct journal_s
  - btrfs: allow btrfs_truncate_block() to fallback to nocow for data space reservation
  - NFSv4.1: fix kabi for struct rpc_xprt
  - usb: gadget: rndis: Fix info leak of rndis
  - once: Fix panic when module unload
  - SUNRPC: Should wake up the privileged task firstly.
  - SUNRPC: Fix the batch tasks count wraparound.
  - bpf: Fix leakage under speculation on mispredicted branches
  - bpf: Do not mark insn as seen under speculative path verification
  - bpf: Inherit expanded/patched seen count from old aux data
  - bpf: Update selftests to reflect new error states
  - bpf, test_verifier: switch bpf_get_stack's 0 s> r8 test
  - bpf: Test_verifier, bpf_get_stack return value add <0
  - bpf: extend is_branch_taken to registers
  - selftests/bpf: add selftest part of "bpf: improve verifier branch analysis"
  - selftests/bpf: Test narrow loads with off > 0 in test_verifier
  - bpf, selftests: Fix up some test_verifier cases for unprivileged
  - bpf: fix up selftests after backports were fixed
  - nvme-rdma: avoid request double completion for concurrent nvme_rdma_timeout
  - binfmt: Move install_exec_creds after setup_new_exec to match binfmt_elf
  - ext4: fix memory leak in ext4_fill_super
  - RDMA/hns: Add support for addressing when hopnum is 0
  - RDMA/hns: Optimize hns buffer allocation flow
  - RDMA/hns: Check if depth of qp is 0 before configure
  - RDMA/hns: Optimize qp param setup flow
  - RDMA/hns: Optimize qp buffer allocation flow
  - RDMA/hns: Optimize qp destroy flow
  - RDMA/hns: Remove asynchronic QP destroy
  - RDMA/hns: Bugfix for posting a wqe with sge
  - RDMA/hns: Delete unnecessary variable max_post
  - RDMA/hns: optimize the duplicated code for qpc setting flow
  - RDMA/hns: Prevent undefined behavior in hns_roce_set_user_sq_size()
  - RDMA/umem: Add rdma_umem_for_each_dma_block()
  - RDMA/verbs: Add a DMA iterator to return aligned contiguous memory blocks
  - can: bcm: delay release of struct bcm_op after synchronize_rcu()
  - etmem_scan: fix memleak in vm_idle_read
  - x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes
  - Revert "arm64: capabilities: Merge entries for ARM64_WORKAROUND_CLEAN_CACHE"
  - Revert "arm64: capabilities: Merge duplicate Cavium erratum entries"
  - Revert "arm64: capabilities: Merge duplicate entries for Qualcomm erratum 1003"
  - net: hns3: update hns3 version to 1.9.40.24
  - net: hns3: remove redundant assignment to rx_index
  - net: hns3: Fix potential null pointer defererence of null ae_dev
  - net: hns3: not reset TQP in the DOWN while VF resetting
  - net: hns3: remove redundant enum type HNAE3_RESTORE_CLIENT
  - net: hns3: add stats logging when skb padding fails
  - net: hns3: add tx send size handling for tso skb
  - net: hns3: add handling for xmit skb with recursive fraglist
  - net: hns3: use napi_consume_skb() when cleaning tx desc
  - net: hns3: use writel() to optimize the barrier operation
  - net: hns3: optimize the rx clean process
  - net: hns3: optimize the tx clean process
  - net: hns3: batch tx doorbell operation
  - net: hns3: batch the page reference count updates
  - net: hns3: streaming dma buffer sync between cpu and device
  - net: hns3: rename buffer-related functions
  - net: hns3: pointer type of buffer should be void
  - net: hns3: remove unnecessary devm_kfree
  - net: hns3: add suspend and resume pm_ops
  - Revert "net: hns3: add suspend/resume function for hns3 driver"
  - net: hns3: change flr_prepare/flr_done function names
  - net: hns3: change hclge_reset_done function name
  - net: hns3: configure promisc mode for VF asynchronously
  - kabi: add kabi list for x86_64
  - kabi: update kabi list for arm64
  - hugetlbfs: hugetlb_fault_mutex_hash() cleanup
  - ipv6: record frag_max_size in atomic fragments in input path
  - scsi: libsas: Use _safe() loop in sas_resume_port()
  - SMB3: incorrect file id in requests compounded with open
  - NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config
  - NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()
  - NFS: fix an incorrect limit in filelayout_decode_layout()
  - dm snapshot: properly fix a crash when an origin has no snapshots
  - proc: Check /proc/$pid/attr/ writes against file opener
  - iommu/vt-d: Fix sysfs leak in alloc_iommu()
  - NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
  - cifs: set server->cipher_type to AES-128-CCM for SMB3.0
  - tty: vt: always invoke vc->vc_sw->con_resize callback
  - vt: Fix character height handling with VT_RESIZEX
  - vgacon: Record video mode changes with VT_RESIZEX
  - Revert "niu: fix missing checks of niu_pci_eeprom_read"
  - Revert "qlcnic: Avoid potential NULL pointer dereference"
  - Revert "rtlwifi: fix a potential NULL pointer dereference"
  - Revert "media: rcar_drif: fix a memory disclosure"
  - Revert "gdrom: fix a memory leak bug"
  - Revert "scsi: ufs: fix a missing check of devm_reset_control_get"
  - Revert "video: imsttfb: fix potential NULL pointer dereferences"
  - Revert "hwmon: (lm80) fix a missing check of bus read in lm80 probe"
  - Revert "leds: lp5523: fix a missing check of return value of lp55xx_read"
  - Revert "net: stmicro: fix a missing check of clk_prepare"
  - Revert "video: hgafb: fix potential NULL pointer dereference"
  - dm snapshot: fix crash with transient storage and zero chunk size
  - Revert "serial: mvebu-uart: Fix to avoid a potential NULL pointer dereference"
  - Revert "rapidio: fix a NULL pointer dereference when create_workqueue() fails"
  - Revert "ALSA: sb8: add a check for request_region"
  - cifs: fix memory leak in smb2_copychunk_range
  - locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal
  - nvmet: seset ns->file when open fails
  - ptrace: make ptrace() fail if the tracee changed its pid unexpectedly
  - firmware: arm_scpi: Prevent the ternary sign expansion bug
  - ipv6: remove extra dev_hold() for fallback tunnels
  - ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods
  - sit: proper dev_{hold|put} in ndo_[un]init methods
  - ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
  - block: reexpand iov_iter after read/write
  - scsi: target: tcmu: Return from tcmu_handle_completions() if cmd_id not found
  - ACPI / hotplug / PCI: Fix reference count leak in enable_slot()
  - nvme: do not try to reconfigure APST when the controller is not live
  - netfilter: conntrack: Make global sysctls readonly in non-init netns
  - kobject_uevent: remove warning in init_uevent_argv()
  - blk-mq: Swap two calls in blk_mq_exit_queue()
  - userfaultfd: release page in error path to avoid BUG_ON
  - netfilter: nftables: avoid overflows in nft_hash_buckets()
  - kernel: kexec_file: fix error return code of kexec_calculate_store_digests()
  - sched/fair: Fix unfairness caused by missing load decay
  - netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check
  - net: fix nla_strcmp to handle more then one trailing null character
  - ksm: fix potential missing rmap_item for stable_node
  - mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts()
  - khugepaged: fix wrong result value for trace_mm_collapse_huge_page_isolate()
  - netfilter: xt_SECMARK: add new revision to fix structure layout
  - sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b
  - sctp: do asoc update earlier in sctp_sf_do_dupcook_a
  - NFSv4.2 fix handling of sr_eof in SEEK's reply
  - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh()
  - NFS: Deal correctly with attribute generation counter overflow
  - NFSv4.2: Always flush out writes in nfs42_proc_fallocate()
  - PCI: Release OF node in pci_scan_device()'s error path
  - ethtool: ioctl: Fix out-of-bounds warning in store_link_ksettings_for_user()
  - sctp: Fix out-of-bounds warning in sctp_process_asconf_param()
  - cuse: prevent clone
  - ip6_vti: proper dev_{hold|put} in ndo_[un]init methods
  - tpm: fix error return code in tpm2_get_cc_attrs_tbl()
  - sctp: delay auto_asconf init until binding the first addr
  - Revert "net/sctp: fix race condition in sctp_destroy_sock"
  - smp: Fix smp_call_function_single_async prototype
  - net: Only allow init netns to set default tcp cong to a restricted algo
  - mm/memory-failure: unnecessary amount of unmapping
  - mm/sparse: add the missing sparse_buffer_fini() in error branch
  - drivers/block/null_blk/main: Fix a double free in null_init.
  - sched/debug: Fix cgroup_path[] serialization
  - x86/events/amd/iommu: Fix sysfs type mismatch
  - vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer
  - ata: libahci_platform: fix IRQ check
  - x86/kprobes: Fix to check non boostable prefixes correctly
  - ACPI: CPPC: Replace cppc_attr with kobj_attribute
  - irqchip/gic-v3: Fix OF_BAD_ADDR error handling
  - x86/microcode: Check for offline CPUs before requesting new microcode
  - ovl: fix missing revert_creds() on error path
  - x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported
  - md: Fix missing unused status line of /proc/mdstat
  - md: md_open returns -EBUSY when entering racing area
  - md: factor out a mddev_find_locked helper from mddev_find
  - md: split mddev_find
  - md-cluster: fix use-after-free issue when removing rdev
  - md/bitmap: wait for external bitmap writes to complete during tear down
  - dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails
  - dm space map common: fix division bug in sm_ll_find_free_block()
  - dm persistent data: packed struct should have an aligned() attribute too
  - tracing: Restructure trace_clock_global() to never block
  - tracing: Map all PIDs to command lines
  - tty: fix memory leak in vc_deallocate
  - ext4: fix error code in ext4_commit_super
  - posix-timers: Preserve return value in clock_adjtime32()
  - Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op")
  - dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload sequences
  - md/raid1: properly indicate failure when ending a failed write request
  - NFSv4: Don't discard segments marked for return in _pnfs_return_layout()
  - NFS: Don't discard pNFS layout segments that are marked for return
  - ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure
  - arm64/vdso: Discard .note.gnu.property sections in vDSO
  - perf/arm_pmu_platform: Fix error handling
  - genirq/matrix: Prevent allocation counter corruption
  - crypto: api - check for ERR pointers in crypto_destroy_tfm()
  - cifs: Return correct error code from smb2_get_enc_key
  - ftrace: Handle commands when closing set_ftrace_filter file
  - ACPI/IORT: Fix 'Number of IDs' handling in iort_id_map()
  - ext4: do not use extent after put_bh
  - modpost: explain why we can't use strsep
  - modpost: remove use of non-standard strsep() in HOSTCC code
  - modpost: use read_text_file() and get_line() for reading text files
  - modpost: add read_text_file() and get_line() helpers
  - arm64: capabilities: Merge duplicate entries for Qualcomm erratum 1003
  - arm64: capabilities: Merge duplicate Cavium erratum entries
  - arm64: capabilities: Merge entries for ARM64_WORKAROUND_CLEAN_CACHE
  - net: phy: ensure phylib state machine is stopped after calling phy_stop
  - net: linkwatch: add check for netdevice being present to linkwatch_do_dev
  - net: phy: call state machine synchronously in phy_stop
  - of: fix kmemleak crash caused by imbalance in early memory reservation
  - random: fix soft lockup when trying to read from an uninitialized blocking pool
  - random: only read from /dev/random after its pool has received 128 bits
  - block: check queue's limits.discard_granularity in __blkdev_issue_discard()
  - block: loop: set discard granularity and alignment for block device backed loop
  - posix-cpu-timers: Stop disabling timers on mt-exec
  - kprobes: Fix compiler warning for !CONFIG_KPROBES_ON_FTRACE
  - perf top: Fix stdio interface input handling with glibc 2.28+
  - iommu/vt-d: Fix mm reference leak
  - iommu/dma: Fix for dereferencing before null checking
  - srcu: Apply *_ONCE() to ->srcu_last_gp_end
  - arm64: Kconfig: select HAVE_FUTEX_CMPXCHG
  - kill kernfs_pin_sb()
  - mm, thp: fix defrag setting if newline is not used
  - nfsd: Clone should commit src file metadata too
  - nfsd: Ensure CLONE persists data and metadata changes to the target file
  - x86/sysfb: Fix check for bad VRAM size
  - x86/timer: Force PIT initialization when !X86_FEATURE_ARAT
  - x86/timer: Don't skip PIT setup when APIC is disabled or in legacy mode
  - x86/timer: Skip PIT initialization on modern chipsets
  - x86/apic: Rename 'lapic_timer_frequency' to 'lapic_timer_period'
  - iommu/vt-d: Handle PCI bridge RMRR device scopes in intel_iommu_get_resv_regions
  - iommu/vt-d: Handle RMRR with PCI bridge device scopes
  - iommu/vt-d: Introduce is_downstream_to_pci_bridge helper
  - crypto: x86 - remove SHA multibuffer routines and mcryptd
  - iommu/vt-d: Duplicate iommu_resv_region objects per device list
  - memcg: fix kabi broken when memory cgroup enhance
  - mm: memcontrol: fix NULL-ptr deref in percpu stats flush
  - mm: memcg: get number of pages on the LRU list in memcgroup base on lru_zone_size
  - mm: memcontrol: fix percpu vmstats and vmevents flush
  - mm, memcg: partially revert "mm/memcontrol.c: keep local VM counters in sync with the hierarchical ones"
  - mm/memcontrol.c: keep local VM counters in sync with the hierarchical ones
  - mm: memcontrol: flush percpu vmevents before releasing memcg
  - mm: memcontrol: flush percpu vmstats before releasing memcg
  - mm/memcontrol: fix wrong statistics in memory.stat
  - mm: memcontrol: don't batch updates of local VM stats and events
  - mm: memcontrol: fix NUMA round-robin reclaim at intermediate level
  - mm: memcontrol: fix recursive statistics correctness & scalabilty
  - mm: memcontrol: move stat/event counting functions out-of-line
  - mm: memcontrol: make cgroup stats and events query API explicitly local
  - mm: memcontrol: quarantine the mem_cgroup_[node_]nr_lru_pages() API
  - mm, memcg: rename ambiguously named memory.stat counters and functions
  - mm/memcontrol.c: fix memory.stat item ordering
  - mm: memcontrol: expose THP events on a per-memcg basis
  - mm: memcontrol: track LRU counts in the vmstats array
  - mm: memcontrol: push down mem_cgroup_nr_lru_pages()
  - mm: memcontrol: push down mem_cgroup_node_nr_lru_pages()
  - mm: workingset: don't drop refault information prematurely
  - mm: memcontrol: replace zone summing with lruvec_page_state()
  - mm: memcontrol: replace node summing with memcg_page_state()
  - mm, oom: add oom victim's memcg to the oom context information
  - mm/oom_kill.c: fix uninitialized oc->constraint
  - mm, oom: reorganize the oom report in dump_header
  - memcg: update the child's qos_level synchronously in memcg_qos_write()
  - memcg: Add static key for memcg priority
  - memcg: fix kabi broken when enable CONFIG_MEMCG_QOS
  - memcg: enable CONFIG_MEMCG_QOS by default
  - memcg: support priority for oom
  - scsi: core: Fix failure handling of scsi_add_host_with_dma()
  - fuse: fix the ->direct_IO() treatment of iov_iter
  - bdev: Do not return EBUSY if bdev discard races with write
  - block: mark flush request as IDLE when it is really finished
  - blk-mq: mark flush request as IDLE in flush_end_io()
  - vhost_net: avoid tx queue stuck when sendmsg fails
  - iommu/vt-d: Add support for ACPI device use physical, node as pci device to establish identity mapping
  - io_uring: NULL files dereference by SQPOLL
  - vgacon: remove software scrollback support
  - block: dio: ensure the memory order between bi_private and bi_css
  - ext4: fix memory leak in ext4_fill_super
  - RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy
  - RDMA/ucma: Add missing locking around rdma_leave_multicast()
  - RDMA/ucma: Fix locking for ctx->events_reported
  - RDMA/ucma: Put a lock around every call to the rdma_cm layer
  - mm/memory-failure: make sure wait for page writeback in memory_failure
  - can: bcm: fix infoleak in struct bcm_msg_head
  - blk-wbt: make sure throttle is enabled properly
  - blk-wbt: introduce a new disable state to prevent false positive by rwb_enabled()
  - ext4: stop return ENOSPC from ext4_issue_zeroout
  - dm btree remove: assign new_root only when removal succeeds
  - block: call bdput() to avoid memleak
  - scsi: remove unused kobj map for sd devie to avoid memleak
  - tools build: Check if gettid() is available before providing helper
  - tools build feature: Check if eventfd() is available
  - tools build feature: Check if get_current_dir_name() is available
  - perf tools: Use - bpf: move new add member to the end of the struct bpf_prog_aux


author: Cheng Jian <cj.chengjian@huawei.com> - 4.19.90-2107.5.0.0098
changelog:
  - mm: vmalloc: prevent use after free in _vm_unmap_aliases
  - PCI/sysfs: Take reference on device to be removed
  - seq_file: disallow extremely large seq buffer allocations
  - ARM: footbridge: remove personal server platform
  - mm: slab: fix kmem_cache_create failed when sysfs node not destroyed
  - ARM: ensure the signal page contains defined contents
  - nvme-pci: use atomic bitops to mark a queue enabled
  - nvme: check the PRINFO bit before deciding the host buffer length
  - nvme: fix compat address handling in several ioctls
  - nvme-core: make implicit seed truncation explicit
  - nvme-core: don't use NVME_NSID_ALL for command effects and supported log
  - nvme-pci: fix NULL req in completion handler
  - nvme-pci: cancel nvme device request before disabling
  - nvme: copy MTFA field from identify controller
  - nvme-pci: Unblock reset_work on IO failure
  - nvme-pci: Don't disable on timeout in reset state
  - nvme-pci: Fix controller freeze wait disabling
  - block: error out if blk_get_queue() failed in blk_init_rl()


author: Cheng Jian <cj.chengjian@huawei.com> - 4.19.90-2108.1.0.0099
changelog:
  - bcache: always record start time of a sample
  - bcache: do not collect data insert info created by write_moving
  - tcp_comp: open configs for tcp compression
  - tcp_comp: implement recvmsg for tcp compression
  - tcp_comp: implement sendmsg for tcp compression
  - tcp_comp: add stub proto ops for tcp compression socket
  - tcp_comp: allow ignore local tcp connections
  - tcp_comp: only enable compression for give server ports
  - tcp_comp: add sysctl for enable/disable compression
  - tcp_comp: add init and cleanup hook for compression
  - tcp_comp: add tcp comp option to SYN and SYN-ACK
  - tcp_comp: add Kconfig for tcp payload compression
  - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop.
  - proc: Avoid mixing integer types in mem_rw()
  - net: sched: cls_api: Fix the the wrong parameter
  - sctp: update active_key for asoc when old key is being replaced
  - nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING
  - net/sched: act_skbmod: Skip non-Ethernet packets
  - net/tcp_fastopen: fix data races around tfo_active_disable_stamp
  - scsi: target: Fix protect handling in WRITE SAME(32)
  - scsi: iscsi: Fix iface sysfs attr detection
  - nvme-pci: do not call nvme_dev_remove_admin from nvme_remove
  - ipv6: fix 'disable_policy' for fwd packets
  - net: ip_tunnel: fix mtu calculation for ETHER tunnel devices
  - udp: annotate data races around unix_sk(sk)->gso_size
  - ipv6: tcp: drop silly ICMPv6 packet too big messages
  - tcp: annotate data races around tp->mtu_info
  - dma-buf/sync_file: Don't leak fences on merge failure
  - net: validate lwtstate->data before returning from skb_tunnel_info()
  - net: send SYNACK packet with accepted fwmark
  - net: bridge: sync fdb to new unicast-filtering ports
  - netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo
  - dm writecache: fix writing beyond end of underlying device when shrinking
  - dm writecache: return the exact table values that were set
  - dm multipath: use updated MPATHF_QUEUE_IO on mapping for bio-based mpath
  - dm writecache: fix data corruption when reloading the target
  - dm verity fec: fix hash block number in verity_fec_decode
  - sched/fair: Fix CFS bandwidth hrtimer expiry type
  - scsi: libfc: Fix array index out of bound exception
  - scsi: scsi_dh_alua: Fix signedness bug in alua_rtpg()
  - net: bridge: multicast: fix PIM hello router port marking race
  - NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times
  - virtio_net: move tx vq operation under tx queue lock
  - x86/fpu: Limit xstate copy size in xstateregs_set()
  - nfs: fix acl memory leak of posix_acl_create()
  - NFSv4: Initialise connection to the server in nfs4_alloc_client()
  - PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun
  - virtio_console: Assure used length from device is limited
  - virtio_net: Fix error handling in virtnet_restore()
  - virtio-blk: Fix memory leak among suspend/resume procedure
  - NFS: nfs_find_open_context() may only select open files
  - lib/decompress_unlz4.c: correctly handle zero-padding around initrds.
  - i2c: core: Disable client irq on reboot/shutdown
  - scsi: qedi: Fix null ref during abort handling
  - scsi: iscsi: Fix shost->max_id use
  - scsi: iscsi: Add iscsi_cls_conn refcount helpers
  - scsi: scsi_dh_alua: Check for negative result value
  - tracing: Do not reference char * as a string in histograms
  - scsi: core: Fix bad pointer dereference when ehandler kthread is invalid
  - seq_buf: Fix overflow in seq_buf_putmem_hex()
  - ipmi/watchdog: Stop watchdog timer when the current action is 'none'
  - net: ip: avoid OOM kills with large UDP sends over loopback
  - vsock: notify server to shutdown when client has pending signal
  - xfrm: Fix error reporting in xfrm_state_construct.
  - virtio_net: Remove BUG() to avoid machine dead
  - dm space maps: don't reset space map allocation cursor when committing
  - ipv6: use prandom_u32() for ID generation
  - mm/huge_memory.c: don't discard hugepage if other processes are mapping it
  - vfio/pci: Handle concurrent vma faults
  - vfio-pci: Use io_remap_pfn_range() for PCI IO memory
  - writeback: fix obtain a reference to a freeing memcg css
  - ipv6: fix out-of-bound access in ip6_parse_tlv()
  - bpf: Do not change gso_size during bpf_skb_change_proto()
  - ipv6: exthdrs: do not blindly use init_net
  - net/ipv4: swap flow ports when validating source
  - vxlan: add missing rcu_read_lock() in neigh_reduce()
  - pkt_sched: sch_qfq: fix qfq_change_class() error path
  - netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols
  - netfilter: nft_osf: check for TCP packet before further processing
  - netfilter: nft_exthdr: check for IPv6 packet before further processing
  - netlabel: Fix memory leak in netlbl_mgmt_add_common
  - ACPI: sysfs: Fix a buffer overrun problem with description_show()
  - evm: fix writing <securityfs>/evm overflow
  - lib: vsprintf: Fix handling of number field widths in vsscanf
  - ACPI: processor idle: Fix up C-state latency if not ordered
  - fuse: check connected before queueing on fpq->io
  - evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded
  - evm: Execute evm_inode_init_security() only when an HMAC key is loaded
  - seq_buf: Make trace_seq_putmem_hex() support data longer than 8
  - ext4: use ext4_grp_locked_error in mb_find_extent
  - ext4: fix avefreec in find_group_orlov
  - ext4: remove check for zero nr_to_scan in ext4_es_scan()
  - ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit
  - ext4: return error code when ext4_fill_flex_info() fails
  - ext4: fix kernel infoleak via ext4_extent_header
  - iov_iter_fault_in_readable() should do nothing in xarray case
  - scsi: core: Retry I/O for Notify (Enable Spinup) Required error
  - kthread: prevent deadlock when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync()
  - kthread_worker: split code for canceling the delayed work timer
  - scsi: sr: Return appropriate error code when disk is ejected
  - mm, futex: fix shared futex pgoff on shmem huge page
  - mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk()
  - mm/thp: fix page_vma_mapped_walk() if THP mapped by ptes
  - mm: page_vma_mapped_walk(): get vma_address_end() earlier
  - mm: page_vma_mapped_walk(): use goto instead of while (1)
  - mm: page_vma_mapped_walk(): add a level of indentation
  - mm: page_vma_mapped_walk(): crossing page table boundary
  - mm: page_vma_mapped_walk(): prettify PVMW_MIGRATION block
  - mm: page_vma_mapped_walk(): use pmde for *pvmw->pmd
  - mm: page_vma_mapped_walk(): settle PageHuge on entry
  - mm: page_vma_mapped_walk(): use page for pvmw->page
  - mm: thp: replace DEBUG_VM BUG with VM_WARN when unmap fails for split
  - mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page()
  - mm/thp: fix page_address_in_vma() on file THP tails
  - mm/thp: fix vma_address() if virtual address below file offset
  - mm/thp: try_to_unmap() use TTU_SYNC for safe splitting
  - mm/thp: make is_huge_zero_pmd() safe and quicker
  - mm/thp: fix __split_huge_pmd_locked() on shmem migration entry
  - mm/rmap: use page_not_mapped in try_to_unmap()
  - mm/rmap: remove unneeded semicolon in page_not_mapped()
  - mm: add VM_WARN_ON_ONCE_PAGE() macro
  - sctp: add param size validation for SCTP_PARAM_SET_PRIMARY
  - sctp: validate chunk size in __rcv_asconf_lookup
  - stop_machine: Avoid potential race behaviour
  - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow
  - can: raw: fix raw_rcv panic for sock UAF
  - mm/page_isolation: do not isolate the max order page
  - mm/zswap: fix passing zero to 'PTR_ERR' warning
  - mm/page_alloc: speed up the iteration of max_order
  - mm: hugetlb: fix type of delta parameter and related local variables in gather_surplus_pages()
  - mm/vmalloc.c:__vmalloc_area_node(): avoid 32-bit overflow
  - sctp: add size validation when walking chunks
  - sctp: validate from_addr_param return
  - jbd2: fix kabi broken in struct journal_s
  - ext4: inline jbd2_journal_[un]register_shrinker()
  - jbd2: export jbd2_journal_[un]register_shrinker()
  - fs: remove bdev_try_to_free_page callback
  - ext4: remove bdev_try_to_free_page() callback
  - jbd2: simplify journal_clean_one_cp_list()
  - jbd2,ext4: add a shrinker to release checkpointed buffers
  - jbd2: remove redundant buffer io error checks
  - jbd2: don't abort the journal when freeing buffers
  - jbd2: ensure abort the journal if detect IO error when writing original buffer back
  - jbd2: remove the out label in __jbd2_journal_remove_checkpoint()
  - mm: vmscan: use a new flag to indicate shrinker is registered
  - Revert "jbd2: remove the out label in __jbd2_journal_remove_checkpoint()"
  - Revert "jbd2: ensure abort the journal if detect IO error when writing original buffer back"
  - Revert "jbd2: fix kabi broken in struct journal_s"
  - Revert "jbd2: don't abort the journal when freeing buffers"
  - mm/vmscan: add drop_caches_loop_limit to break loop in drop_slab_node
  - mm/vmscan: fix infinite loop in drop_slab_node
  - userswap: add a kernel parameter to enable userswap
  - userfaultfd: fix BUG_ON() in userfaultfd_release()
  - kprobes: Warn if the kprobe is reregistered
  - Revert "kretprobe: check re-registration of the same kretprobe earlier"


author: Cheng Jian <cj.chengjian@huawei.com> - 4.19.90-2108.4.0.0100
changelog:
  - openeuler_defconfig: Enable ARCH_PHYTIUM and ARM_GIC_PHYTIUM_2500
  - config: Enable Phytium FT-2500 support configs for hulk_defconfig
  - irqchip: phytium-2500: Add interrupt controller driver
  - mm/vmscan: setup drop_caches_loop_limit in cmdline
  - mm/memcg: optimize memory.numa_stat like memory.stat
  - livepatch: Fix crash when access the global variable in hook
  - timer: Use hlist_unhashed_lockless() in timer_pending()
  - list: Add hlist_unhashed_lockless()
  - config: Enable CONFIG_GPIO_HISI by default
  - gpio: gpio-hisi: Add HiSilicon GPIO support
  - config: Enable CONFIG_I2C_HISI by default
  - i2c: add support for HiSilicon I2C controller
  - i2c: core: add api to provide frequency mode strings
  - i2c: core: add managed function for adding i2c adapters
  - blk: reuse lookup_sem to serialize partition operations
  - Revert "block: take bd_mutex around delete_partitions in del_gendisk"
  - Revert "block: avoid creating invalid symlink file for patitions"
  - Revert "block: call bdput() to avoid memleak"
  - sctp: fix return value check in __sctp_rcv_asconf_lookup
  - workqueue: fix UAF in pwq_unbound_release_workfn()
  - exit: Move preemption fixup up, move blocking operations down
  - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl
  - Input: joydev - prevent potential read overflow in ioctl
  - srcu: Take early exit on memory-allocation failure
  - Revert "modpost: add read_text_file() and get_line() helpers"
  - Revert "modpost: use read_text_file() and get_line() for reading text files"
  - Revert "modpost: remove use of non-standard strsep() in HOSTCC code"
  - Revert "modpost: explain why we can't use strsep"
  - cpuidle: fix return type err in haltpoll_switch_governor
  - mm/slab: add naive detection of double free
  - mm/mempool: fix a data race in mempool_free()
  - mm/list_lru: fix a data race in list_lru_count_one
  - mm/cma.c: fix NULL pointer dereference when cma could not be activated
  - iommu/amd: Prevent NULL pointer dereference


author: Cheng Jian <cj.chengjian@huawei.com> - 4.19.90-2108.5.0.0103
changelog:
  - iscsi: Fix KABI change for 'Fix conn use after free during resets'
  - iscsi: alloc iscsi_cls_session with iscsi_cls_session_warpper
  - iscsi: introduce iscsi_cls_session_warapper and helper
  - scsi: iscsi: Fix conn use after free during resets
  - scsi: sr: Return correct event when media event code is 3
  - net: xilinx_emaclite: Do not print real IOMEM pointer
  - sctp: move the active_key update after sh_keys is added
  - usb: max-3421: Prevent corruption of freed memory
  - net: ll_temac: Fix bug causing buffer descriptor overrun
  - tcp_comp: Avoiding the null pointer problem of ctx in comp_stream_read
  - nbd: add the check to prevent overflow in __nbd_ioctl()
  - ext4: fix potential uninitialized access to retval in kmmpd
  - blk-mq: fix kabi broken by "blk-mq: fix hang caused by freeze/unfreeze sequence"
  - blk-mq: fix hang caused by freeze/unfreeze sequence
  - config: Enable CONFIG_UCE_KERNEL_RECOVERY by default
  - EDAC/ghes: Remove intermediate buffer pvt->detail_location
  - USB: fix some clerical mistakes
  - uce: pagecache reading scenario support kernel recovery
  - uce: cow scenario support kernel recovery
  - selinux: fix NULL dereference in policydb_destroy()
  - livepatch/x86: Ignore return code of save_stack_trace_tsk_reliable()
  - mm,hwpoison: return -EHWPOISON to denote that the page has already been poisoned
  - mm/memory-failure: use a mutex to avoid memory_failure() races
  - arm64: mm: account for hotplug memory when randomizing the linear region


author: lutianxiong<lutianxiong@huawei.com> - 1.16.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix invalid read in ares_parse_soa_reply.c found during fuzzing


author: chixinze <xmdxcxz@gmail.com> - 1:12.2.8-13
changelog:
  - fix CVE-2020-27781
  - ceph-volume-client: allow atomic updates for RADOS objects
  - qa: make test_volume_client.py py3 compatible


author: gaihuiying <gaihuiying1@huawei.com> - 4.2.23-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix errors when use "yum module remove --all per:common" command
         fix test test_mode_tty failed


author: gaihuiying <gaihuiying1@huawei.com> - 4.2.23-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove recommends rpm-plugins-systemd-inhibit
         backport community patches and fix CVE-2021-3445
         delete duplicate python3-libdnf dependency


author: wangxiao <wangxiao65@huawei.com> - 79.0-4
changelog:
  - Fix CVE-2020-15664 CVE-2020-15665 CVE-2020-15666 CVE-2020-15667
    CVE-2020-15668 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678


author: wangxiao <wangxiao65@huawei.com> - 79.0-5
changelog:
  - Fix CVE-2020-15969 CVE-2020-15999 CVE-2020-16012 CVE-2020-26951
    CVE-2020-26953 CVE-2020-26956 CVE-2020-26957 CVE-2020-26958
    CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26963
    CVE-2020-26965 CVE-2020-25966 CVE-2020-26967


author: huzunhao<huzunhao2@huawei.com> - 2.58.1-3
changelog:
  - Type:cves
  - ID:CVE-2019-12450 CVE-2019-13012
  - SUG:restart
  - DESC:fix CVE-2019-12450 CVE-2019-13012


author: liqingqing <liqingqing3@huawei.com> - 2.28-29
changelog:
  - remove country selection from tzselect
  - fix some bugs https://sourceware.org/git/?p=glibc.git;a=commit;h=1df872fd74f730bcae3df201a229195445d2e18a
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=823624bdc47f1f80109c9c52dee7939b9386d708
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=bc10e22c90e42613bd5dafb77b80a9ea1759dd1b
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=6c29942cbf059aca47fd4bbd852ea42c9d46b71f
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=31effacee2fc1b327bedc9a5fcb4b83f227c6539
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=5b06f538c5aee0389ed034f60d90a8884d6d54de
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=57ada43c905eec7ba28fe60a08b93a52d88e26c1
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=e0e4c321c3145b6ac0e8f6e894f87790cf9437ce
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=182a3746b8cc28784718c8ea27346e97d1423945
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=02d8b5ab1c89bcef2627d2b621bfb35b573852c2
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=f59a54ab0c2dcaf9ee946df2bfee9d4be81f09b8
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=fefa21790b5081e5d04662a240e2efd18603ef86
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=2bd81b60d6ffdf7e0d22006d69f4b812b1c80513
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=a55541fd1c4774d483c2d2b4bd17bcb9faac62e7
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=b6d2c4475d5abc05dd009575b90556bdd3c78ad0
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=8a80ee5e2bab17a1f8e1e78fab5c33ac7efa8b29
                  https://sourceware.org/git/?p=glibc.git;a=commit;h=c0fd3244e71db39cef1e2d1d8ba12bb8b7375ce4
  - fix CVE-2016-10739 CVE-2019-19126 CVE-2019-6488
  - add pie compile option for debug/Makefile and remove -static for build-locale-archive


author: Wang Shuo<wangshuo47@huawei.com> - 2.28-40
changelog:
  - add filelist to improve the scalability
  - disable DEBUG for performence
  - disable parallel compilation for locale
  - backport many patch for bugfix:
  - User provided stack should not be released nor madvised at thread exit
  - removes the HP_TIMING_BITS usage for fast random bits
  - reset the state a-vector-registe fter outputting the second whcar_t characte(Bug 25734)
  - implement avx2 offset check condition for strncmp function[BZ #25933]
  - bugfix for __nptl_setxid and exiting detached thread(bug 25942)
  - use RDX_LP to compare against __x86_shared_non_temporal_threshold in assembly code[BZ #25966]
  - Since "vpxor %xmmN, %xmmN, %xmmN" clears the whole vector register
  - To improve the performance of memset


author: liqingqing_1229<liqingqing3@huawei.com> - 2.28-44
changelog:
  - fix bug 26100: correct locking and cancellation cleanup in syslog functions. 
  - origin bugzilla link is https://sourceware.org/bugzilla/show_bug.cgi?id=26100


author: zhaowei<zhaowei23@huawei.com> - 2.28-45
changelog:
  - fix bug 965941: fix build with libselinux >= 3.1 
  - origin bugzilla link is https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965941


author: Qingqing Li <liqingqing3@huawei.com> - 2.28-46
changelog:
  - fix handling of collating symbols in fnmatch.
    upstream link is: https://sourceware.org/bugzilla/show_bug.cgi?id=26620
  - fix SEM_STAT_ANY kernel argument pass.
    upstream link is: https://sourceware.org/bugzilla/show_bug.cgi?26637
  - fix i686 test-strftime3.c compile warning.


author: liusirui<liusirui@huawei.com> - 2.28-47
changelog:
  - Fix CVE-2020-27618, iconv accept redundant shift sequences in IBM1364 [BZ #26224]
    https://sourceware.org/bugzilla/show_bug.cgi?id=26224


author: Wang Shuo <wangshuo_1994@foxmail.com> - 2.28-48
changelog:
  - Fix CVE-2020-29573, Harden printf against non-normal long double values
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-29573
    https://sourceware.org/bugzilla/show_bug.cgi?id=26649


author: Wang Shuo<wangshuo_1994@foxmail.com> - 2.28-49
changelog:
  - Fix CVE-2020-29562, Fix incorrect UCS4 inner loop bounds (BZ#26923)
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29562
    https://sourceware.org/bugzilla/show_bug.cgi?id=26923


author: Wang Shuo<wangshuo_1994@foxmail.com> - 2.28-50
changelog:
  - Fix stack missing in _dl_tlsdesc_dynamic
    Fix buffer overrun in EUC-KR conversion module (bz #24973)
    Remove unbounded alloca usage from getmntent [BZ#27083]
    https://sourceware.org/pipermail/libc-alpha/2021-January/121272.html
    https://sourceware.org/pipermail/libc-alpha/2021-January/121330.html
    https://sourceware.org/bugzilla/show_bug.cgi?id=24973
    https://sourceware.org/bugzilla/show_bug.cgi?id=27083


author: Qingqing Li<liqingqing3@huawei.com> - 2.28-51
changelog:
  - Fix bug 26791: Use O_CLOEXEC in sysconf
    bugzilla link: https://sourceware.org/bugzilla/show_bug.cgi?id=26791
  - Fix bug 26853: aarch64: Add unwind information to _start
    bugzilla link: https://sourceware.org/bugzilla/show_bug.cgi?id=26853


author: shanzhikun <shanzhikun@huawei.com> - 2.28-54
changelog:
  - elf: Allow dlopen of filter object to work [BZ #16272]
    https://sourceware.org/bugzilla/show_bug.cgi?id=16272
  - elf: Fix pldd (BZ#18035)
    https://sourceware.org/bugzilla/show_bug.cgi?id=18035


author: Wang Shuo<wangshuo_1994@foxmail.com> - 2.28-55
changelog:
  - Fix CVE-2021-3326, Fix assertion failure in ISO-2022-JP-3 module (bug 27256)
    https://nvd.nist.gov/vuln/detail/CVE-2021-3326
    https://sourceware.org/bugzilla/show_bug.cgi?id=27256


author: Qingqing Li<liqingqing3@huawei.com> - 2.28-68
changelog:
  - fix CVE-2021-33574, fix use of __pthread_attr_copy in mq_notify (bug 27896)
    https://sourceware.org/bugzilla/show_bug.cgi?id=27896


author: Qingqing Li<liqingqing3@huawei.com> - 2.28-69
changelog:
  - aarch64: align stack in clone [BZ #27939]
    https://sourceware.org/bugzilla/show_bug.cgi?id=27939
    x86-64 Align child stack to 16 bytes [BZ #27902]
    https://sourceware.org/bugzilla/show_bug.cgi?id=27902


author: lvying<lvying6@huawei.com> - 2.28-71
changelog:
  - ldconfig: handle .dynstr located in separate segment (bug 25087)
    https://sourceware.org/git/?p=glibc.git;a=commit;h=58e8f5fd2ba47b6dc47fd4d0a35e4175c7c87aaa


author: Qingqing Li<liqingqing3@huawei.com> - 2.28-72
changelog:
  - wordexp: Use strtoul instead of atoi so that overflow can be detected. (bug 28011)
    https://sourceware.org/bugzilla/show_bug.cgi?id=28011


author: Qingqing Li<liqingqing3@huawei.com> - 2.28-73
changelog:
  - malloc: tcache shutdown sequence does not work if the thread never allocated anything. (bug 28028)
    https://sourceware.org/bugzilla/show_bug.cgi?id=28028


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.3-1
changelog:
  - Upgrade to 1.2.3
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install', 'check' and 'files'


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.4-1
changelog:
  - Upgrade to 1.2.4
  - Update Version, Release, Source0, BuildRequires
  - Delete sed operation which existed in this version
  - Add patch for fix CVE-2021-33516
  - Update stage 'prep', 'build', 'install', 'check', 'files'


author: openEuler Buildteam <buildteam@openeuler.org> - 2.34-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of one iso can't mount directly twice by default


author: openEuler Buildteam <buildteam@openeuler.org> - 2.34-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Add an entry for the HiSilicon aarch64 part tsv110 and
         use official name for HiSilicon tsv110


author: openEuler Buildteam <buildteam@openeuler.org> - 2.34-6
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:obsolete hardlink that has been merged into util-linux of 2.34


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.35.2-4
changelog:
  - Fix memleak in fdisk_script_read_file
    Fix heap-buffer-overflow in fdisk_partname
    Fix integer overflow in partno_from_devname


author: Xu Yandong <xuyandong2@huawei.com> - 6.2.0-4
changelog:
  - Fix virdaemon waiting for child processes return code error.
  - Fix virsh dump and migrate return code error.


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - rpc: gendispatch: handle empty flags
  - rpc: add support for filtering @acls by uint params
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses
  - qemu: agent: set ifname to NULL after freeing


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - util: Move virIsDevMapperDevice() to virdevmapper.c
  - virdevmapper: Don't use libdevmapper to obtain dependencies


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - libvirt: Add 'retry' support for error policy
  - qemu: Support 'retry' BLOCK_IO_ERROR event.
  - libvirt/conf: Set default values of retry fileds


author: liwu <liwu13@huawei.com> - 8.0.26-1
changelog:
  - Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356,CVE-2021-2339,CVE-2021-2354
    CVE-2021-2352,CVE-2021-2340


author: wangye <wangye70@huawei.com> - 8.1.1-2
changelog:
  - Type:CVE
  - CVE:CVE-2021-27921 CVE-2021-27922 CVE-2021-27923
  - SUG:NA
  - DESC: fix CVE-2021-27921CVE-2021-27922CVE-2021-27923


author: hanhui <hanhui15@huawei.com> - 8.1.1-3
changelog:
  - Type:bugfix
  - CVE:CVE-2021-25287、CVE-2021-25288、CVE-2021-28675、CVE-2021-28676、CVE-2021-28677、CVE-2021-28678
  - SUG:NA
  - DESC: incorporate community patch


author: yefei <yefei25@huawei.com> - 18.0-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:  add bash completion and repair python2 interpreter path


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - scsi-bus: Refactor the code that retries requests
  - scsi-disk: Add support for retry on errors
  - qapi/block-core: Add retry option for error action
  - block-backend: Introduce retry timer
  - block-backend: Add device specific retry callback
  - block-backend: Enable retry action on errors
  - block-backend: Add timeout support for retry
  - block: Add error retry param setting
  - virtio-blk: Refactor the code that processes queued requests
  - virtio-blk: On restart, process queued requests in the proper context
  - virtio_blk: Add support for retry on errors
  - block-backend: Stop retrying when draining
  - block: Add sanity check when setting retry parameters


author: imxcc <xingchaochao@huawei.com>
changelog:
  - hw/acpi: build smt processor structure to support smt topology
  - hw/acpi: Use max_cpus instead of cpus when build PPTT


author: Chuan Zheng <zhengchuan@huawei.com>
changelog:
  - migration/dirtyrate: add dirtyrate fearure for migration
  - migration/multifd-tls: add multifd for tls migration


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - hw/sd: sdhci: Don't transfer any data when command time out
  - hw/sd: sdhci: Don't write to SDHC_SYSAD register when transfer is in progress
  - hw/sd: sdhci: Correctly set the controller status for ADMA
  - hw/sd: sdhci: Limit block size only when SDHC_BLKSIZE register is writable
  - hw/sd: sdhci: Reset the data pointer of s->fifo_buffer[] when a different block size is programmed
  - net: introduce qemu_receive_packet()
  - e1000: switch to use qemu_receive_packet() for loopback
  - dp8393x: switch to use qemu_receive_packet() for loopback packet
  - sungem: switch to use qemu_receive_packet() for loopback
  - tx_pkt: switch to use qemu_receive_packet_iov() for loopback
  - rtl8139: switch to use qemu_receive_packet() for loopback
  - pcnet: switch to use qemu_receive_packet() for loopback
  - cadence_gem: switch to use qemu_receive_packet() for loopback
  - lan9118: switch to use qemu_receive_packet() for loopback


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - hw/pci-host: add pci-intack write method
  - pci-host: add pcie-msi read method
  - vfio: add quirk device write method
  - prep: add ppc-parity write method
  - nvram: add nrf51_soc flash read method
  - spapr_pci: add spapr msi read method
  - tz-ppc: add dummy read/write methods
  - imx7-ccm: add digprog mmio write method


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - vhost-user-gpu: fix resource leak in 'vg_resource_create_2d' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in vg_resource_attach_backing (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak while calling 'vg_resource_unref' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in 'virgl_cmd_resource_unref' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in 'virgl_resource_attach_backing' (CVE-2021-3544)
  - vhost-user-gpu: fix memory disclosure in virgl_cmd_get_capset_info (CVE-2021-3545)
  - vhost-user-gpu: fix OOB write in 'virgl_cmd_get_capset' (CVE-2021-3546)


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - ide: ahci: add check to avoid null dereference (CVE-2019-12067)
  - hw/intc/arm_gic: Fix interrupt ID in GICD_SGIR register
  - usb: limit combined packets to 1 MiB (CVE-2021-3527)


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - x86: Intel AVX512_BF16 feature enabling
  - i386: Add MSR feature bit for MDS-NO
  - i386: Add macro for stibp
  - i386: Add new CPU model Cooperlake
  - target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  - target/i386: Add missed security features to Cooperlake CPU model
  - target/i386: add PSCHANGE_NO bit for the ARCH_CAPABILITIES MSR
  - target/i386: Export TAA_NO bit to guests


author: openEuler Buildteam <buildteam@openeuler.org> - 2.5.1-104
changelog:
  - Type:cves
  - ID:CVE-2019-16163 CVE-2019-19204 CVE-2019-16255 CVE-2019-19246
  - SUG:N/A
  - DESC:fix CVE-2019-16163CVE-2019-19204CVE-2019-16255CVE-2019-19246


author: wutao <wutao61@huawei.com> - 2.5.8-3
changelog:
  - fix CVE-2020-25613
  - WEBrick,a simple HTTP server bundled with Ruby,had not
  - checked the transfer-encoding header value rigorously.
  - An attacker may potentially exploit this issue to bypass
  - a reverse proxy,which may lead to an HTTP Request Smuggling
  - attack.


author: Shinwell_Hu <huxinwei@huawei.com> - 2.5.8-113
changelog:
  - Upgrade bundled REXML gem to fix CVE-2021-28965, which is an XML
    round-trip vulnerability in REXML.


author: majun<majun65@huawei.com> - 4.2-3
changelog:
  - Type:cves
  - ID:CVE-2019-12525 CVE-2019-12527 CVE-2019-12529 CVE-2019-12854 CVE-2019-13345
  - SUG:restart
  - DESC:fix cves


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-2
changelog:
  - Type:cves
  - ID:CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450
  - SUG:restart
  - DESC:fix CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058 CVE-2020-15049 CVE-2020-15810 CVE-2020-15811 CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: openEuler Buildteam <buildteam@openeuler.org> - 243-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix capsh drop but ping success and udev ignore error caused by device disconnection


author: openEuler Buildteam <buildteam@openeuler.org> - 243-13
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:modify kvm authority 0660 and fix dbus daemon restart need 90s after killed


author: openEuler Buildteam <buildteam@openeuler.org> - 243-16
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add 0010-1603-udev-add-actions-while-rename-netif-failed.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 243-17
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:fix CVE-2020-1712 and close journal files that were deleted by journald
         before we've setup inotify watch and bump pim_max to 80%


author: openEuler Buildteam <buildteam@openeuler.org> - 243-22
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:solve the build failure caused by the upgrade of libseccomp


author: openEuler Buildteam <buildteam@openeuler.org> - 243-24
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:fix double free in macsec_receive_channel_free() and 
         fix crash in network L2TP


author: openEuler Buildteam <buildteam@openeuler.org> - 243-27
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add elevator= kernel command line parameter and don't enable bfq
         by default


author: shenyangyang <shenyangyang4@huawei.com> - 243-29
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:revert don't enable systemd-journald-audit.socket by default
         that may cause reboot problem if update systemd with out dracut -f
         from LTS-20.03


author: shenyangyang <shenyangyang4@huawei.com> - 243-34
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport from upstream to solve the problem when devices claim the same slot


author: shenyangyang <shenyangyang4@huawei.com> - 243-35
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change requires to openssl-libs as post scripts systemctl requires libssl.so.1.1


author: fangxiuning <fangxiuning@huawei.com> - 243-37
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: journald: enforce longer line length limit during "setup" phase of stream protocol


author: fangxiuning <fangxiuning@huawei.com> - 243-41
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:udevd: don't kill worker in manager_kill_worker when it's running


author: yangmingtai <yangmingtai@huawei.com> - 243-43
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:udevd: fix broken symbolic links when same link for different devices


author: huanghaitao <huanghaitao8@huawei.com> - 1:9.0.10-13
changelog:
  - Type:cves
  - ID: CVE-2019-17563 CVE-2019-12418 CVE-2020-1935 CVE-2020-1938 
  - SUG:restart
  - DESC: fix CVE-2019-17563 CVE-2019-12418CVE-2020-1935 CVE-2020-1938


author: wangxiao <wangxiao65@huawei.com> - 1:9.0.10-14
changelog:
  - Type:cves
  - ID: CVE-2020-9484 CVE-2020-11996 CVE-2020-13934 CVE-2020-13935
  - SUG:restart
  - DESC: fix CVE-2020-9484 CVE-2020-11996 CVE-2020-13934 CVE-2020-13935


author: wangyue <wangyue92@huawei.com> - 1:9.0.10-18
changelog:
  - Type:cve
  - ID: CVE-2021-25122 CVE-2021-25329
  - SUG:restart
  - DESC: fix CVE-2021-25122 CVE-2021-25329


author: yangcheng <yangcheng87@huawei.com> - 20170801-12
changelog:
  - Fix the problem that the mkfontscale command and mkfontdir command were not found during installation


