# changelog

author: wangxiao <wangxiao65@huawei.com> - 6.9.10.67-19
changelog:
  - Fix CVE-2020-25676 CVE-2020-27757 CVE-2020-27758 CVE-2020-27771
    CVE-2020-27772 CVE-2020-27774 CVE-2020-27775 CVE-2020-27751


author: zhanghua <zhanghua40@huawei.com> - 2.2.0-18
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DESC:fix CVE-2017-9110 CVE-2017-9111 CVE-2017-9112 CVE-2017-9113
    CVE-2017-9114 CVE-2017-9115 CVE-2017-9116 CVE-2017-12596


author: wangyue <wangyue92@huawei.com> - 2.2.0-19
changelog:
  - fix CVE-2021-3474 CVE-2021-3477 CVE-2021-3476 CVE-2021-3475 CVE-2021-20296 CVE-2021-3479 CVE-2021-20296


author: yaoxin <yaoxin30@huawei.com> - 2.2.0-22
changelog:
  - fix CVE-2020-11758 CVE-2020-11759 CVE-2020-11760 CVE-2020-11761 CVE-2020-11762 CVE-2020-11763 CVE-2020-11764 CVE-2020-11765 CVE-2020-15305 CVE-2020-15306


author: openEuler Buildteam <buildteam@openeuler.org> - 0.16-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: change file from /etc/logrotate.d/aide/aide.logrotate to /etc/logrotate.d/aide


author: yaoxin <yaoxin30@huawei.com> - 2.5.5-2
changelog:
  - Fix CVE-2019-14904 CVE-2020-10684 CVE-2020-10729 CVE-2020-1735-to-CVE-2020-1740 CVE-2020-1753 CVE-2021-20191


author: wangkai <wangkai385@huawei.com> - 2.5.5-5
changelog:
  - Fix CVE-2019-3828 and hostname module support openEuler
  - and add defination of is_subpath and remove module_response_deepcopy


author: wangkai <wangkai385@huawei.com> - 0:4.3-23
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0:4.3-24
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: houyingchao <houyingchao@huawei.com> - 0:4.3-25
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: panxiaohe <panxiaohe@huawei.com> - 2.34-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix erroneous decoding of LEB128 values
         heap-buffer-overflow on readelf -Ww


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-10
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386


author: chixinze <xmdxcxz@gmail.com> - 1:12.2.8-13
changelog:
  - fix CVE-2020-27781
  - ceph-volume-client: allow atomic updates for RADOS objects
  - qa: make test_volume_client.py py3 compatible


author: Li Qiang <liqiang64@huawei.com> - 1:12.2.8-16
changelog:
  - Synchronize the performance optimization of the pick_a_shard
  - function in the upstream community.


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-CVE-2021-20208.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/1001-cifs.upcall-update-the-cap-bounding-set-only-when-CA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/1002-mount.cifs-update-the-cap-bounding-set-only-when-CAP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. check task list to avoid unnecessary cleanup.
         2. fix dead loop
         3. cleanup dangling shim by brand new context
         4. fix potential panic for task in unknown state


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-201
changelog:
  - Type:bugfix                                          
  - ID:NA                                                   
  - SUG:NA
  - DESC:reduce permissions for bundle dir to fix CVE-2021-41103


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-202
changelog:
  - Type:bugfix
  - ID:NA 
  - SUG:NA
  - DESC:Use fs.RootPath when mounting volumes for bundle dir to fix CVE-2022-23648


author: yanglongkang <yanglongkang@huawei.com> - 2.3.3-4
changelog:
  - add buildrequire gcc
    add make check
    backport upstream patches to solve several problems -epoch2


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-Check-segment-gaps-regardless-of-heap-space.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-Fix-posible-buffer-overflows-in-LUKS-conversion.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-Fix-a-memleak-in-blockwise-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-CVE-2021-4122.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: gaoxingwang<gaoxingwang@huawei.com> - 7.71.1-12
changelog:
  - Type:CVE
  - CVE:CVE-2021-22922 CVE-2021-22923
  - SUG:NA
  - DESC:disable metalink to fix CVE-2021-22922 and CVE-2021-22923


author: gaihuiying <eaglegai@163.com> - 7.71.1-13
changelog:
  - Type:cves
  - CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
  - SUG:NA
  - DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776


author: liyanan <liyanan32@huawei.com> - 2.1.27-13
changelog:
  - Split cyrus-sasl-ldap cyrus-sasl-gs2 cyrus-sasl-scram cyrus-sasl-gssapi
    cyrus-sasl-md5 cyrus-sasl-ntlm cyrus-sasl-plain sub-package


author: jingrui<jingrui@huawei.com> - 18.09.0-105
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix include
    1. fix image cleanup failed.
    2. cleanup load tmp files.
    3. kill residual container process.
    4. resume suspend dm device.
    5. dont kill containerd during dockerd starting.
    6. handle exit event for restore failed container.
    7. wait io with timeout when start failed.
    8. support hostname mirror registry.
    9. mask unused proc files.


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. fix execCommands leak in health-check.
         2. check containerd pid before kill it.


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-201
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix Access to remapped root allows privilege escalation to real root (CVE-2021-21284)


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-202
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent an invalid image from crashing docker daemon(CVE-2021-21285)


author: wuchangsheng <wuchangsheng2@huawei.com> - 19.11-15
changelog:
  - backport pathes from community
  - net/softnic fix memory leak as profile is freed
  - net/virtio fix interrupt handle leak
  - vhost fix crash on reconnect
  - net/virtio report maximum MTU in device info
  - bus/dpaa fix freeing in FMAN interface destructor
  - distributor fix 128 bit write alignment


author: wuguanghao<wuguanghao3@huawei.com> - 1.45.6-4
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-e2fsprogs-set-hugefile-from-4T-to-1T-in-hugefile-tes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-e2fsck-fix-off-by-one-check-when-validating-depth-of.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-mke2fs-fix-up-check-for-hardlinks-always-false-if-in.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-add-device-check-in-ismount-process.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-libss-add-newer-libreadline.so.8-to-dlopen-path.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-e2fsck-fix-indexed-dir-rehash-failure-with-metadata_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-libext2fs-retry-reading-superblock-on-open-when-chec.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-libext2fs-fix-potential-buffer-overrun-in-__get_dire.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-tune2fs-reset-MMP-state-on-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-e2fsck-use-size_t-instead-of-int-in-string_copy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0011-libext2fs-fix-incorrect-negative-error-return-in-uni.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0012-debugfs-fix-double-free-in-realloc-error-path-in-rea.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0013-tune2fs-fix-resource-leak-in-handle_quota_options.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0014-libext2fs-fix-UBSAN-warning-in-ext2fs_mmp_new_seq.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0015-libext2fs-fix-segault-when-setting-an-xattr-with-an-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0016-mke2fs-fix-a-importing-a-directory-with-an-ACL-and-i.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0017-mke2fs-fix-resource-leak-on-error-path-when-creating.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0018-libext2fs-fix-incorrect-error-code-return-in-ext2fs_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0019-debugfs-fix-memory-allocation-failures-when-parsing-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0020-debugfs-fix-logdump-on-file-systems-with-block-sizes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0021-libext2fs-fix-crash-when-ext2fs_mmp_stop-is-called-b.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0022-debugfs-fix-dump_metadata_block-for-block-sizes-8192.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0023-debugfs-fix-memory-leak-problem-in-read_list.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0024-debugfs-fix-rdump-and-ls-to-handle-uids-and-gids-655.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0025-e2image-fix-overflow-in-l2-table-processing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0026-e2fsck-fix-last-mount-write-time-when-e2fsck-is-forc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0027-profile_create_node-set-magic-before-strdup-name-to-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0028-tdb_transaction_recover-fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0029-zap_sector-fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0030-misc-fix-potential-segmentation-fault-problem-in-sca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0031-ext2ed-fix-potential-NULL-pointer-dereference-in-dup.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0032-ss_add_info_dir-fix-error-handling-when-memory-alloc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0033-ss_create_invocation-fix-error-handling-when-memory-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0034-ss_create_invocation-fix-potential-unititalized-refe.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0035-libext2fs-fix-unexpected-NULL-variable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0036-libsupport-fix-potental-NULL-pointer-dereferences-in.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0037-libext2fs-fix-coverity-nits-in-tdb.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0038-e2fsck-exit-journal-recovery-when-find-EIO-ENOMEM-er.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0039-e2fsck-exit-journal-recovery-when-jounral-superblock.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0040-e2fsck-add-env-param-E2FS_UNRELIABLE_IO-to-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0041-e2fsck-do-not-clean-up-file-acl-if-the-inode-is-trun.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0042-e2fsck-handle-level-is-overflow-in-ext2fs_extent_get.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0043-libext2fs-add-sanity-check-to-extent-manipulation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequire git


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 1.45.6-8
changelog:
  - DESC: fix three issues:
    - e2fsck: exit journal recovery when find EIO, ENOMEM errors
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4RZUT?from=project-issue
    - e2fsck: exit journal recovery when jounral superblock fails to update
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4S0SD?from=project-issue
    - e2fsck: add env param E2FS_UNRELIABLE_IO to fix unreliable io case
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4RZVX?from=project-issue


author: wangjie <wangjie375@huawei.com> - 2.2.9-4
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.2.9-6
changelog:
  - Type:CVE
  - ID:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: wangkai <wangkai385@huawei.com> - 1.0.6-20
changelog:
  - Rebuild for fix log4j1.x cves

   * Thu Mar 5 2020 wangzhishun <wangzhishun1@huawei.com> - 1.0.6-19
   - Package init


author: wangxiao <wangxiao65@huawei.com> - 79.0-4
changelog:
  - Fix CVE-2020-15664 CVE-2020-15665 CVE-2020-15666 CVE-2020-15667
    CVE-2020-15668 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678


author: wangxiao <wangxiao65@huawei.com> - 79.0-5
changelog:
  - Fix CVE-2020-15969 CVE-2020-15999 CVE-2020-16012 CVE-2020-26951
    CVE-2020-26953 CVE-2020-26956 CVE-2020-26957 CVE-2020-26958
    CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26963
    CVE-2020-26965 CVE-2020-25966 CVE-2020-26967


author: eastb233 <xiezhiheng@huawei.com> - 7.3.0-20210628.41
changelog:
  - fix-PR83666-punt-BLKmode-when-expand_debug_expr.patch: New patch for bugfix
  - fix-AArch64-128-bit-immediate-ICEs.patch: Likewise
  - gcc.spec: Add new patch


author: kkz <zhaoshuang@uniontech.com> - 7.3.0-48
changelog:
  - Add patch Remove-_GLIBCXX_USE_INT128-autoconf-macro.patch to resolve int128 related compile issue
  - refer to https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=ad0a3be4df5eecc79075d899fd79179d0f61270e
             https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff;h=29a9de9b40277af98515eabebb75be1f154e9505
             https://www.mail-archive.com/gcc-patches@gcc.gnu.org/msg259436.html


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.27.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolved the problem that a failure message is displayed when the git-daemon package is uninstalled


author: panxiaohe <panxiaohe@huawei.com> - 2.27.0-4
changelog:
  - Fix CVE-2021-29468
  - Add gcc and gettext to BuildRequires
    - necessary for building and msgfmt command


author: chenjiankun <chenjiankun1@huawei.com> - 1.15.7-5
changelog:
  - fix CVE-2021-33195,CVE-2021-33196,CVE-2021-33197,CVE-2021-33198,CVE-2021-34558,CVE-2021-29923,CVE-2021-38297,CVE-2021-36221


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport the patches that upstream community released on
         March 2, 2021


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport some patches from upstream community and fix incorrect
         author names in patches


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:delete the Symbolic Link of grubenv in grub2-efi-x64 and grub-efi-aa64 packages


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-8
changelog:
  - Type:cves
  - ID:CVE-2021-26690
  - SUG:NA
  - DESC:fix CVE-2021-26690
         modify version number in changelog


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-9
changelog:
  - Type:cves
  - ID:CVE-2021-34798 CVE-2021-36160 CVE-2021-40438
  - SUG:restart
  - DESC:fix CVE-2021-34798 CVE-2021-36160 CVE-2021-40438


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-10
changelog:
  - Type:cves
  - ID:CVE-2021-40438 CVE-2021-39275
  - SUG:restart
  - DESC:fix CVE-2021-40438 fully and correctly
         fix CVE-2021-39275


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix int overflow in ap_timeout_parameter_parse
         Improve fix to please a fuzzer int overflow


author: gaihuiying <eaglegai@163.com> - 2.4.43-14
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934


author: chenzhitao <chenzhitao8@huawei.com> - 2.4.43-16
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-28614 CVE-2022-26377 CVE-2022-30522 CVE-2022-28615  CVE-2022-31813


author: wangyue <wangyue92@huawei.com> - 2.9.8-6
changelog:
  - fix CVE-2020-36179 CVE-2020-36180 CVE-2020-36181
    CVE-2020-36182 CVE-2020-36188 CVE-2020-36189
    CVE-2020-36187 CVE-2020-36186 CVE-2020-36184 CVE-2020-36183


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.15.10-0
changelog:
  - modified 8231441-3-AArch64-Initial-SVE-backend-support.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: noah <hedongbo@huawei.com> - 1:18.0.0.37-0.0.ea.rolling
changelog:
  - Update to jdk-18.0.0.0+37
  - adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2111.5.0.0123
changelog:
  - rq-qos: fix missed wake-ups in rq_qos_throttle try two
  - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
  - drivers : remove drivers/mtd/hisilicon/sfc
  - drivers : remove drivers/soc/hisilicon/sysctl
  - drivers : remove drivers/soc/hisilicon/lbc
  - ipv4: fix uninitialized warnings in fnhe_remove_oldest()
  - crypto: public_key: fix overflow during implicit conversion
  - net: bridge: fix stale eth hdr pointer in br_dev_xmit
  - x86/entry: Make entry_64_compat.S objtool clean


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2111.6.0.0124
changelog:
  - drm/ioctl: Ditch DRM_UNLOCKED except for the legacy vblank ioctl
  - config: Enable some configs for test
  - share_pool: add mm address check when access the process's sp_group file


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2111.7.0.0125
changelog:
  - defconfig: update the defconfigs to support 9P
  - sched: Introduce handle priority reversion mechanism
  - sched: unthrottle qos cfs rq when free a task group
  - sched: Avoid sched entity null pointer panic
  - sched: Clear idle_stamp when unthrottle offline tasks
  - sched: Fix offline task can't be killed in a timely
  - sched: Optimizing qos scheduler performance
  - sched: Fix throttle offline task trigger panic
  - sched: Remove residual checkings for qos scheduler
  - sched: Change cgroup task scheduler policy
  - sched: Unthrottle the throttled cfs rq when offline rq
  - sched: Enable qos scheduler config
  - sched: Throttle qos cfs_rq when current cpu is running online task
  - sched: Introduce qos scheduler for co-location
  - io_uring: return back safer resurrect
  - cpufreq: Fix get_cpu_device() failed in add_cpu_dev_symlink()
  - ACPI: CPPC: Fix cppc_cpufreq_init failed in CPU Hotplug situation
  - lib/clear_user: ensure loop in __arch_clear_user cache-aligned v2


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2112.1.0.0126
changelog:
  - arm64: Fix conflict for capability when cpu hotplug
  - mm: memcontrol: fix cpuhotplug statistics flushing
  - mm, memcg: fix error return value of mem_cgroup_css_alloc()
  - mm/memcontrol: fix a data race in scan count
  - GPIO : support ascend_gpio_dwapb_enable switch
  - ext4: always panic when errors=panic is specified
  - config: disable CONFIG_NGBE by default in hulk_defconfig
  - x86/config: Enable netswift Giga NIC driver for x86
  - net: ngbe: Add Netswift Giga NIC driver
  - ras: report cpu logical index to userspace in arm event
  - arm64: Avoid premature usercopy failure
  - hugetlb: before freeing hugetlb page set dtor to appropriate value


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2112.3.0.0127
changelog:
  - ixgbe: fix large MTU request from VF
  - block, bfq: move bfqq to root_group if parent group is offlined
  - io_uring: use bottom half safe lock for fixed file data
  - io_uring: fix soft lockup when call __io_remove_buffers
  - block: Fix fsync always failed if once failed
  - blk-mq: use the new flag to quiesce/unquiesce queue in block layer
  - blk-mq: add a new queue flag to quiesce/unquiesce queue
  - blk-mq: factor out some helps to quiesce/unquiesce queue
  - blk: Fix lock inversion between ioc lock and bfqd lock
  - bfq: Remove merged request already in bfq_requests_merged()
  - md: fix a warning caused by a race between concurrent md_ioctl()s
  - net: hns3: update hns3 version to 21.12.2
  - net: hns3: fix race condition in debugfs
  - kabi: fix kabi broken in struct sock
  - tracing: Have all levels of checks prevent recursion
  - netfilter: Kconfig: use 'default y' instead of 'm' for bool config option
  - mm, slub: fix mismatch between reconstructed freelist depth and cnt
  - vfs: check fd has read access in kernel_read_file_from_fd()
  - dma-debug: fix sg checks in debug_dma_map_sg()
  - acpi/arm64: fix next_platform_timer() section mismatch error
  - x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
  - sched: Always inline is_percpu_thread()
  - perf/x86: Reset destroy callback on event init failure
  - net: prevent user from passing illegal stab size
  - netfilter: ip6_tables: zero-initialize fragment offset
  - rtnetlink: fix if_nlmsg_stats_size() under estimation
  - netlink: annotate data races around nlk->bound
  - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
  - net_sched: fix NULL deref in fifo_set_limit()
  - phy: mdio: fix memory leak
  - bpf, arm: Fix register clobbering in div/mod implementation
  - scsi: sd: Free scsi_disk device via put_device()
  - cred: allow get_cred() and put_cred() to be given NULL.
  - net: udp: annotate data race around udp_sk(sk)->corkflag
  - elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
  - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
  - cpufreq: schedutil: Use kobject release() method to free sugov_tunables
  - tty: Fix out-of-bound vmalloc access in imageblit
  - tcp: address problems caused by EDT misshaps
  - arm64: Mark __stack_chk_guard as __ro_after_init
  - md: fix a lock order reversal in md_alloc
  - irqchip/gic-v3-its: Fix potential VPE leak on error
  - scsi: iscsi: Adjust iface sysfs attr detection
  - serial: mvebu-uart: fix driver's tx_empty callback
  - cifs: fix incorrect check for null pointer in header_assemble


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2112.4.0.0128
changelog:
  - block, bfq: don't move oom_bfqq
  - blk-mq: fix abnormal free in single queue process
  - scsi: hisi_sas: Add support for sata disk I/O errors report to libsas
  - KVM: arm64: Allow vcpus running without HCR_EL2.FB
  - KVM: arm64: Set kvm_vcpu::pre_pcpu properly
  - KVM: arm64: Ensure I-cache isolation between vcpus of a same VM
  - arm64/tlbi: mark tlbi ipi as EXPERIMENTAL
  - arm64/tlb: restore no IPi code
  - arm64/configs: enable TLBI_IPI
  - arm64/tlbi: split disable_tlbflush_is to control flush
  - arm64/tlb: add CONFIG_ARM64_TLBI_IPI
  - arm64: tlb: Add boot parameter to disable TLB flush within the same inner shareable domain
  - arm64: mm: Restore mm_cpumask (revert commit 38d96287504a ("arm64: mm: kill mm_cpumask usage"))
  - audit: ensure userspace is penalized the same as the kernel when under pressure
  - audit: improve robustness of the audit queue handling
  - block/wbt: fix negative inflight counter when remove scsi device
  - nbd: Fix use-after-free in blk_mq_free_rqs
  - block, bfq: fix use after free in bfq_bfqq_expire
  - block, bfq: fix queue removal from weights tree
  - block, bfq: fix decrement of num_active_groups
  - block, bfq: fix asymmetric scenarios detection
  - block, bfq: improve asymmetric scenarios detection
  - fget: check that the fd still exists after getting a ref to it
  - config: Enable CONFIG_EXT4_PARALLEL_DIO_READ as default
  - ext4: update direct I/O read lock pattern for IOCB_NOWAIT
  - Revert "Revert "ext4: remove EXT4_STATE_DIOREAD_LOCK flag""
  - Revert "Revert "ext4: Allow parallel DIO reads""
  - net: hns3: update hns3 version to 21.12.3
  - net: hns3: fix the VLAN of a vf cannot be added problem
  - net: hns3: fix pfc packet number incorrect after querying pfc parameters
  - net: hns3: fix VF RSS failed problem after PF enable multi-TCs
  - usb: gadget: configfs: Fix use-after-free issue with udc_name
  - hugetlbfs: flush TLBs correctly after huge_pmd_unshare
  - mm: share_pool: adjust sp_alloc behavior when coredump
  - mm: share_pool: adjust sp_make_share_k2u behavior when coredump
  - Revert "timekeeping: Fix ktime_add overflow in tk_set_wall_to_mono"
  - Revert "timekeeping: Avoid undefined behaviour in 'ktime_get_with_offset()'"
  - Revert "posix-cpu-timers: Avoid undefined behaviour in timespec64_to_ns()"
  - time: Normalize timespec64 before timespec64_compare()
  - iommu/arm-smmu-v3: remove unnecessary mpam enable procedure
  - fix kabi effect by change in md_rdev
  - Revert "dm space maps: don't reset space map allocation cursor when committing"
  - nvme-fabrics: fix kabi broken by "reject I/O to offline device"
  - nvme: fix NULL derefence in nvme_ctrl_fast_io_fail_tmo_show/store
  - nvme: export fast_io_fail_tmo to sysfs
  - nvme-fabrics: reject I/O to offline device
  - nvme: add a Identify Namespace Identification Descriptor list quirk
  - nvme: fix identify error status silent ignore
  - nvme: fix possible hang when ns scanning fails during error recovery
  - nvme: refactor nvme_identify_ns_descs error handling
  - nvme: Namepace identification descriptor list is optional
  - nvmet: use new ana_log_size instead the old one
  - nvme-multipath: fix double initialization of ANA state
  - nvme-core: use list_add_tail_rcu instead of list_add_tail for nvme_init_ns_head
  - nvme: make nvme_report_ns_ids propagate error back
  - nvme-multipath: avoid crash on invalid subsystem cntlid enumeration
  - nvme-multipath: split bios with the ns_head bio_set before submitting
  - nvme: add proper discard setup for the multipath device
  - fix kabi change
  - md: Fix undefined behaviour in is_mddev_idle
  - xfs: fix up non-directory creation in SGID directories
  - xfs: remove the kuid/kgid conversion wrappers
  - xfs: remove the icdinode di_uid/di_gid members
  - xfs: ensure that the inode uid/gid match values match the icdinode ones
  - configfs: fix a use-after-free in __configfs_open_file
  - share_pool: don't trace the invalid spa address
  - share_pool: Remove the redundant warning message


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2112.5.0.0129
changelog:
  - config: enable CONFIG_RAMAXEL_SPRAID by default
  - scsi:spraid: support Ramaxel's spraid driver
  - USB: gadget: bRequestType is a bitfield, not a enum
  - phonet: refcount leak in pep_sock_accep
  - USB: gadget: detect too-big endpoint 0 requests


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2112.6.0.0130
changelog:
  - watchdog: Fix check_preemption_disabled() error
  - btrfs: unlock newly allocated extent buffer after error
  - net/hinic: Fix call trace when the rx_buff module parameter is grater than 2
  - dt-bindings: mpam: add document for arm64 mpam
  - arm64/mpam: add device tree support for mpam initialization
  - arm64/mpam: remove __init macro to support driver probe
  - arm64/mpam: rmid: refine allocation and release process
  - arm64/mpam: resctrl: add tips when rmid modification failed
  - arm64/mpam: Fix mpam corrupt when cpu online
  - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
  - kprobes: Fix optimize_kprobe()/unoptimize_kprobe() cancellation logic
  - kprobes: Set unoptimized flag after unoptimizing code


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2112.8.0.0131
changelog:
  - mm/page_alloc: Use cmdline to disable "place pages to tail"
  - bpf: Remove MTU check in __bpf_skb_max_len
  - sctp: account stream padding length for reconf chunk


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2201.1.0.0132
changelog:
  - mm: export collect_procs()
  - net: hns: update hns version to 21.12.1
  - net: hns: fix bug when two ports opened promisc mode both
  - net: hns3: update hns3 version to 21.12.4
  - net: hns3: fix the concurrency between functions reading debugfs
  - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
  - mwifiex: Fix skb_over_panic in mwifiex_usb_recv()
  - tee: handle lookup of shm with reference count 0
  - tee: don't assign shm id for private shms
  - tee: remove linked list of struct tee_shm
  - mm/page_alloc: Use cmdline to disable "place pages to tail"
  - mm/page_alloc: Use cmdline to disable "place pages to tail"
  - ext4: fix an use-after-free issue about data=journal writeback mode
  - ext4: Fix null-ptr-deref in '__ext4_journal_ensure_credits'
  - scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback
  - netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc
  - lib/strncpy_from_user.c: Mask out bytes after NUL terminator.
  - bpf: Add probe_read_{user, kernel} and probe_read_{user, kernel}_str helpers
  - bpf: Make use of probe_user_write in probe write helper
  - uaccess: Add strict non-pagefault kernel-space read function
  - bpf: fix script for generating man page on BPF helpers
  - bpf: Backport __BPF_FUNC_MAPPER and annotation from mainline
  - bpf: Fix up register-based shifts in interpreter to silence KUBSAN
  - xen/netback: don't queue unlimited number of packages
  - xen/netback: fix rx queue stall detection
  - xen/console: harden hvc_xen against event channel storms
  - xen/netfront: harden netfront against event channel storms
  - xen/blkfront: harden blkfront against event channel storms
  - xen/netfront: don't trust the backend response data blindly
  - xen/netfront: disentangle tx_skb_freelist
  - xen/netfront: don't read data from request on the ring page
  - xen/netfront: read response from backend only once
  - xen/blkfront: don't trust the backend response data blindly
  - xen/blkfront: don't take local copy of a request from the ring page
  - xen/blkfront: read response from backend only once
  - xen: sync include/xen/interface/io/ring.h with Xen's newest version
  - xen/netback: avoid race in xenvif_rx_ring_slots_available()
  - bpf: Remove MTU check in __bpf_skb_max_len
  - sctp: account stream padding length for reconf chunk
  - bpf: Remove MTU check in __bpf_skb_max_len
  - sctp: account stream padding length for reconf chunk
  - netfilter: fix regression in looped (broad|multi)cast's MAC handling
  - perf/core: Avoid put_page() when GUP fails
  - perf/core: Disable page faults when getting phys address
  - mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
  - ipc: WARN if trying to remove ipc object which is absent
  - tun: fix bonding active backup with arp monitoring
  - perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
  - perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
  - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
  - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
  - PCI/MSI: Deal with devices lying about their MSI mask capability
  - PCI/MSI: Destroy sysfs before freeing entries
  - ext4: fix lazy initialization next schedule time computation in more granular unit
  - x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
  - mm, oom: do not trigger out_of_memory from the #PF
  - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
  - llc: fix out-of-bound array index in llc_sk_dev_hash()
  - zram: off by one in read_block_state()
  - mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
  - dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
  - netfilter: nfnetlink_queue: fix OOB when mac header was cleared
  - NFS: Fix deadlocks in nfs_scan_commit_list()
  - apparmor: fix error check
  - serial: 8250_dw: Drop wrong use of ACPI_PTR()
  - crypto: pcrypt - Delay write to padata->info
  - tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
  - cgroup: Make rebind_subsystems() disable v2 controllers all at once
  - task_stack: Fix end_of_stack() for architectures with upwards-growing stack
  - gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
  - smackfs: Fix use-after-free in netlbl_catmap_walk()
  - signal: Remove the bogus sigkill_pending in ptrace_stop
  - bpf: Prevent increasing bpf_jit_limit above max
  - x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
  - tpm: Check for integer overflow in tpm2_map_response_body()
  - scsi: core: Put LLD module refcnt after SCSI device is released
  - net: Prevent infinite while loop in skb_tx_hash()


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2201.1.0.0132
changelog:
  - mm: export collect_procs()
  - net: hns: update hns version to 21.12.1
  - net: hns: fix bug when two ports opened promisc mode both
  - net: hns3: update hns3 version to 21.12.4
  - net: hns3: fix the concurrency between functions reading debugfs
  - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
  - mwifiex: Fix skb_over_panic in mwifiex_usb_recv()
  - tee: handle lookup of shm with reference count 0
  - tee: don't assign shm id for private shms
  - tee: remove linked list of struct tee_shm
  - ext4: fix an use-after-free issue about data=journal writeback mode
  - ext4: Fix null-ptr-deref in '__ext4_journal_ensure_credits'
  - scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback
  - netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc
  - lib/strncpy_from_user.c: Mask out bytes after NUL terminator.
  - bpf: Add probe_read_{user, kernel} and probe_read_{user, kernel}_str helpers
  - bpf: Make use of probe_user_write in probe write helper
  - uaccess: Add strict non-pagefault kernel-space read function
  - bpf: fix script for generating man page on BPF helpers
  - bpf: Backport __BPF_FUNC_MAPPER and annotation from mainline
  - bpf: Fix up register-based shifts in interpreter to silence KUBSAN
  - xen/netback: don't queue unlimited number of packages
  - xen/netback: fix rx queue stall detection
  - xen/console: harden hvc_xen against event channel storms
  - xen/netfront: harden netfront against event channel storms
  - xen/blkfront: harden blkfront against event channel storms
  - xen/netfront: don't trust the backend response data blindly
  - xen/netfront: disentangle tx_skb_freelist
  - xen/netfront: don't read data from request on the ring page
  - xen/netfront: read response from backend only once
  - xen/blkfront: don't trust the backend response data blindly
  - xen/blkfront: don't take local copy of a request from the ring page
  - xen/blkfront: read response from backend only once
  - xen: sync include/xen/interface/io/ring.h with Xen's newest version
  - xen/netback: avoid race in xenvif_rx_ring_slots_available()
  - netfilter: fix regression in looped (broad|multi)cast's MAC handling
  - perf/core: Avoid put_page() when GUP fails
  - perf/core: Disable page faults when getting phys address
  - mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
  - ipc: WARN if trying to remove ipc object which is absent
  - tun: fix bonding active backup with arp monitoring
  - perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
  - perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
  - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
  - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
  - PCI/MSI: Deal with devices lying about their MSI mask capability
  - PCI/MSI: Destroy sysfs before freeing entries
  - ext4: fix lazy initialization next schedule time computation in more granular unit
  - x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
  - mm, oom: do not trigger out_of_memory from the #PF
  - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
  - llc: fix out-of-bound array index in llc_sk_dev_hash()
  - zram: off by one in read_block_state()
  - mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
  - dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
  - netfilter: nfnetlink_queue: fix OOB when mac header was cleared
  - NFS: Fix deadlocks in nfs_scan_commit_list()
  - apparmor: fix error check
  - serial: 8250_dw: Drop wrong use of ACPI_PTR()
  - crypto: pcrypt - Delay write to padata->info
  - tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
  - cgroup: Make rebind_subsystems() disable v2 controllers all at once
  - task_stack: Fix end_of_stack() for architectures with upwards-growing stack
  - gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
  - smackfs: Fix use-after-free in netlbl_catmap_walk()
  - signal: Remove the bogus sigkill_pending in ptrace_stop
  - bpf: Prevent increasing bpf_jit_limit above max
  - x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
  - tpm: Check for integer overflow in tpm2_map_response_body()
  - scsi: core: Put LLD module refcnt after SCSI device is released
  - net: Prevent infinite while loop in skb_tx_hash()


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2201.2.0.0133
changelog:
  - arm64/mpam: fix mpam dts init arm_mpam_of_device_ids error
  - arm64/mpam: fix mpam probe error for wrong init order


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2201.3.0.0134
changelog:
  - ip_gre: validate csum_start only on pull
  - hugetlbfs: fix issue of preallocation of gigantic pages can't work
  - hugetlbfs: extend the definition of hugepages parameter to support node allocation
  - mm: remove sharepool sp_unshare_uva current->mm NULL check
  - share pool: use rwsem to protect sp group exit
  - Add new module parameters:time out
  - virtio-blk: validate num_queues during probe
  - virtio-blk: Use blk_validate_block_size() to validate block size
  - block: Add a helper to validate the block size
  - Revert "virtio-blk: Add validation for block size in config space"
  - scsi: virtio_scsi: Rescan the entire target on transport reset when LUN is 0
  - Revert "svm: Add support to get svm mpam configuration"
  - Revert "svm: Add support to set svm mpam configuration"
  - Revert "svm: Add svm_set_user_mpam_en to enable/disable mpam for smmu"
  - cgroup: Use open-time cgroup namespace for process migration perm checks
  - cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
  - cgroup: Use open-time credentials for process migraton perm checks
  - NFC: add necessary privilege flags in netlink layer
  - NFC: add NCI_UNREG flag to eliminate the race
  - NFC: reorder the logic in nfc_{un,}register_device
  - NFC: reorganize the functions in nci_request
  - ext4: Fix BUG_ON in ext4_bread when write quota data
  - PM: hibernate: use correct mode for swsusp_close()
  - Revert "watchdog: Fix check_preemption_disabled() error"


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2201.4.0.0135
changelog:
  - net: bridge: clear bridge's private skb space on xmit
  - audit: bugfix for infinite loop when flush the hold queue
  - blk-throttle: enable hierarchical throttle in cgroup v1
  - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2202.1.0.0136
changelog:
  - config: enable CONFIG_MEMCG_MEMFS_INFO by default
  - mm/memcg_memfs_info: show files that having pages charged in mem_cgroup
  - ext4: fix e2fsprogs checksum failure for mounted filesystem
  - drm/vmwgfx: Fix stale file descriptors on failed usercopy
  - perf vendor events amd: Fix broken L2 Cache Hits from L2 HWPF metric
  - perf vendor events amd: Add recommended events
  - perf vendor events amd: Add L2 Prefetch events for zen1
  - perf/amd/uncore: Fix sysfs type mismatch
  - perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest
  - tools/power turbostat: Support AMD Family 19h
  - perf/x86/amd/ibs: Support 27-bit extended Op/cycle counter
  - perf vendor events amd: Enable Family 19h users by matching Zen2 events
  - perf vendor events amd: Update Zen1 events to V2
  - perf vendor events amd: Add Zen2 events
  - perf vendor events amd: Restrict model detection for zen1 based processors
  - perf vendor events amd: Remove redundant '['
  - perf vendor events intel: Add Tremontx event file v1.02
  - perf vendor events intel: Add Icelake V1.00 event file
  - perf vendor events amd: Add L3 cache events for Family 17h
  - perf vendor events intel: Add uncore_upi JSON support
  - perf vendor events amd: perf PMU events for AMD Family 17h
  - perf/amd/uncore: Allow F19h user coreid, threadmask, and sliceid specification
  - perf/amd/uncore: Allow F17h user threadmask and slicemask specification
  - perf/amd/uncore: Prepare to scale for more attributes that vary per family
  - perf/x86/amd/ibs: Don't include randomized bits in get_ibs_op_count()
  - perf/amd/uncore: Set all slices and threads to restore perf stat -a behaviour
  - perf/x86/amd/ibs: Fix raw sample data accumulation
  - arch/x86/amd/ibs: Fix re-arming IBS Fetch
  - perf/amd/uncore: Add support for Family 19h L3 PMU
  - perf/amd/uncore: Make L3 thread mask code more readable
  - perf/amd/uncore: Prepare L3 thread mask code for Family 19h
  - EDAC/amd64: Handle three rank interleaving mode
  - EDAC/amd64: Add family ops for Family 19h Models 00h-0Fh
  - EDAC/amd64: Save max number of controllers to family type
  - EDAC/amd64: Gather hardware information early
  - EDAC/amd64: Make struct amd64_family_type global
  - EDAC/amd64: Set grain per DIMM
  - EDAC/amd64: Support asymmetric dual-rank DIMMs
  - EDAC/amd64: Cache secondary Chip Select registers
  - EDAC/amd64: Add PCI device IDs for family 17h, model 70h
  - EDAC/amd64: Find Chip Select memory size using Address Mask
  - EDAC/amd64: Adjust printed chip select sizes when interleaved
  - EDAC/amd64: Recognize x16 symbol size
  - EDAC/amd64: Set maximum channel layer size depending on family
  - EDAC/amd64: Support more than two Unified Memory Controllers
  - EDAC/amd64: Add Family 17h Model 30h PCI IDs
  - EDAC/amd64: Initialize DIMM info for systems with more than two channels
  - EDAC/amd64: Support more than two controllers for chip selects handling
  - EDAC/amd64: Use a macro for iterating over Unified Memory Controllers
  - x86/mce: Fix use of uninitialized MCE message string
  - x86/MCE/AMD, EDAC/mce_amd: Add new Load Store unit McaType
  - x86/MCE/AMD, EDAC/mce_amd: Add new error descriptions for some SMCA bank types
  - x86/MCE/AMD, EDAC/mce_amd: Add new McaTypes for CS, PSP, and SMU units
  - x86/MCE/AMD, EDAC/mce_amd: Add new MP5, NBIO, and PCIE SMCA bank types
  - EDAC/mce_amd: Always load on SMCA systems
  - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too
  - x86/amd_nb: Add Family 19h PCI IDs
  - x86/amd_nb: Add PCI device IDs for family 17h, model 70h
  - x86/amd_nb: Add PCI device IDs for family 17h, model 30h
  - hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs
  - EDAC/amd64: Drop some family checks for newer systems
  - x86/microcode/AMD: Increase microcode PATCH_MAX_SIZE
  - KVM: mmu: Fix SPTE encoding of MMIO generation upper half
  - build_bug.h: add wrapper for _Static_assert
  - KVM: x86: fix overlap between SPTE_MMIO_MASK and generation
  - KVM: x86: assign two bits to track SPTE kinds
  - KVM: Move the memslot update in-progress flag to bit 63
  - KVM: Remove the hack to trigger memslot generation wraparound
  - KVM: x86: clflushopt should be treated as a no-op by emulation
  - KVM: SVM: Clear the CR4 register on reset
  - KVM: SVM: Replace hard-coded value with #define
  - KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated
  - KVM: x86/mmu: Apply max PA check for MMIO sptes to 32-bit KVM
  - KVM: x86: only do L1TF workaround on affected processors
  - kvm: x86: Fix L1TF mitigation for shadow MMU
  - KVM: x86/mmu: Consolidate "is MMIO SPTE" code
  - KVM: SVM: Override default MMIO mask if memory encryption is enabled
  - KVM: x86/mmu: Add explicit access mask for MMIO SPTEs
  - kvm: x86: Fix reserved bits related calculation errors caused by MKTME
  - KVM: x86: Rename access permissions cache member in struct kvm_vcpu_arch
  - kvm: x86: Move kvm_set_mmio_spte_mask() from x86.c to mmu.c
  - kvm/svm: PKU not currently supported
  - kvm: x86: Expose RDPID in KVM_GET_SUPPORTED_CPUID
  - KVM: x86: Refactor the MMIO SPTE generation handling
  - KVM: Explicitly define the "memslot update in-progress" bit
  - KVM: x86: Use a u64 when passing the MMIO gen around
  - KVM: x86: expose MOVDIR64B CPU feature into VM.
  - KVM: x86: expose MOVDIRI CPU feature into VM.
  - KVM: x86: Add requisite includes to hyperv.h
  - KVM: x86: Add requisite includes to kvm_cache_regs.h
  - KVM: nVMX: Allocate and configure VM{READ,WRITE} bitmaps iff enable_shadow_vmcs
  - x86/cpufeatures: Enumerate MOVDIR64B instruction
  - x86/cpufeatures: Enumerate MOVDIRI instruction
  - x86/pkeys: Don't check if PKRU is zero before writing it
  - x86/fpu: Only write PKRU if it is different from current
  - x86/pkeys: Provide *pkru() helpers
  - sysctl: returns -EINVAL when a negative value is passed to proc_doulongvec_minmax
  - arm64: move jump_label_init() before parse_early_param()
  - tcp: fix memleak when tcp internal pacing is used
  - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
  - ovl: fix warning in ovl_create_real()
  - fuse: annotate lock in fuse_reverse_inval_entry()
  - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
  - sit: do not call ipip6_dev_free() from sit_init_net()
  - net/packet: rx_owner_map depends on pg_vec
  - x86/sme: Explicitly map new EFI memmap table as encrypted
  - dm btree remove: fix use after free in rebalance_children()
  - net: netlink: af_netlink: Prevent empty skb by adding a check on len.
  - irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
  - net, neigh: clear whole pneigh_entry at alloc time
  - aio: fix use-after-free due to missing POLLFREE handling
  - aio: keep poll requests on waitqueue until completed
  - signalfd: use wake_up_pollfree()
  - wait: add wake_up_pollfree()
  - tracefs: Have new files inherit the ownership of their parent
  - mm: bdi: initialize bdi_min_ratio when bdi is unregistered
  - udp: using datalen to cap max gso segments
  - bpf: Fix the off-by-two error in range markings
  - ipmi: msghandler: Make symbol 'remove_work_wq' static
  - serial: core: fix transmit-buffer reset and memleak
  - serial: pl011: Add ACPI SBSA UART match id
  - net: annotate data-races on txq->xmit_lock_owner
  - ipmi: Move remove_work to dedicated workqueue
  - vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
  - scsi: iscsi: Unblock session then wake up error handler
  - shm: extend forced shm destroy to support objects from several IPC nses
  - fuse: release pipe buf after last use
  - tracing: Check pid filtering when creating events
  - ipv6: fix typos in __ip6_finish_output()
  - proc/vmcore: fix clearing user buffer by properly using clear_user()
  - tracing: Fix pid filtering when triggers are attached
  - fuse: fix page stealing
  - ipmi_si: Phytium S2500 workaround for MMIO-based IPMI
  - etmem: Add a scan flag to support specified page swap-out
  - etmem: add swapcache reclaim to etmem
  - etmem: add original kernel swap enabled options


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2202.3.0.0137
changelog:
  - fs/filesystems.c: downgrade user-reachable WARN_ONCE() to pr_warn_once()
  - drm/i915: Flush TLBs before releasing backing store
  - moxart: fix potential use-after-free on remove path
  - memstick: rtsx_usb_ms: fix UAF
  - ext4: fix file system corrupted when rmdir non empty directory with IO error
  - bpf, doc: Remove references to warning message when using bpf_trace_printk()
  - bpf: Remove inline from bpf_do_trace_printk
  - bpf: Use dedicated bpf_trace_printk event instead of trace_printk()
  - net: cipso: fix warnings in netlbl_cipsov4_add_std
  - xsk: Use struct_size() helper
  - mm/page_alloc: fix counting of free pages after take off from buddy
  - mm,hwpoison: drop unneeded pcplist draining
  - mm,hwpoison: take free pages off the buddy freelists
  - mm,hwpoison: drain pcplists before bailing out for non-buddy zero-refcount page
  - mm,hwpoison: Try to narrow window race for free pages
  - mm,hwpoison: introduce MF_MSG_UNSPLIT_THP
  - mm,hwpoison: return 0 if the page is already poisoned in soft-offline
  - mm,hwpoison: refactor soft_offline_huge_page and __soft_offline_page
  - mm,hwpoison: rework soft offline for in-use pages
  - mm,hwpoison: rework soft offline for free pages
  - mm,hwpoison: unify THP handling for hard and soft offline
  - mm,hwpoison: kill put_hwpoison_page
  - mm,hwpoison: refactor madvise_inject_error
  - mm,hwpoison-inject: don't pin for hwpoison_filter
  - mm, hwpoison: remove recalculating hpage
  - mm,hwpoison: cleanup unused PageHuge() check
  - scsi: Revert "target: iscsi: Wait for all commands to finish before freeing a session"
  - uce: get_user scenario support kernel recovery
  - uce: copy_from_user scenario support kernel recovery
  - mm: Modify sharepool sp_mmap() page_offset
  - support multiple node for getting phys interface
  - share_pool: Accept device_id in k2u flags
  - share_pool: Clear the usage of node_id and device_id
  - share_pool: Make multi-device support extendable
  - share_pool: Fix flags conflict
  - config: enable MEMORY_RELIABLE by default
  - mm: add sysctl to clear free list pages
  - workqueue: Provide queue_work_node to queue work near a given NUMA node
  - mm:vmscan: add the missing check of page_cache_over_limit
  - sysctl: add proc interface to set page cache limit
  - mm/vmscan: dont do shrink_slab in reclaim page cache
  - mm/vmscan: dont reclaim anon page when shrink page cache
  - filemap: dont shrink_page_cache in add_to_page_cache
  - mm/vmscan: fix unexpected shrinking page cache with vm_cache_reclaim_enable disable
  - mm/vmscan: fix frequent call of shrink_page_cache_work
  - proc/meminfo: add "FileCache" item in /proc/meminfo
  - mm: add page cache fallback statistic
  - mm: add cmdline for the reliable memory usage of page cache
  - mm: make page cache use reliable memory by default
  - shmem: Show reliable shmem info
  - shmem: Introduce shmem reliable
  - mm: Introduce fallback mechanism for memory reliable
  - mm: Add reliable memory use limit for user tasks
  - mm: thp: Add memory reliable support for hugepaged collapse
  - proc: Count reliable memory usage of reliable tasks
  - mm: Add reliable_nr_page for accounting reliable memory
  - mm: Introduce reliable flag for user task
  - meminfo: Show reliable memory info
  - mm: Introduce memory reliable
  - efi: Find mirrored memory ranges for arm64
  - efi: Make efi_find_mirror() public
  - arm64: efi: Add fake memory support
  - efi: Make efi_print_memmap() public
  - mm/memory_hotplug: allow to specify a default online_type
  - mm/memory_hotplug: convert memhp_auto_online to store an online_type
  - hv_balloon: don't check for memhp_auto_online manually
  - drivers/base/memory: store mapping between MMOP_* and string in an array
  - drivers/base/memory: map MMOP_OFFLINE to 0
  - drivers/base/memory: rename MMOP_ONLINE_KEEP to MMOP_ONLINE
  - drivers/base/memory.c: Use DEVICE_ATTR_RO and friends
  - mm/memory_hotplug: drop "online" parameter from add_memory_resource()


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2202.4.0.0138
changelog:
  - tipc: improve size validations for received domain records
  - yam: fix a memory leak in yam_siocdevprivate()
  - ipmi_si: Phytium S2500 missing timeout counter reset in intf_mem_inw
  - mm,hwpoison: Fix use-after-free in memory_failure()
  - dm-mpath: fix UAF in multipath_message()
  - usb: gadget: clear related members when goto fail
  - usb: gadget: don't release an existing dev->buf
  - dm: make sure dm_table is binded before queue request
  - cgroup-v1: Require capabilities to set release_agent
  - NFSv4: nfs_atomic_open() can race when looking up a non-regular file
  - NFSv4: Handle case where the lookup of a directory fails
  - configfs: fix a race in configfs_{,un}register_subsystem()
  - fs/filesystems.c: downgrade user-reachable WARN_ONCE() to pr_warn_once()
  - drm/i915: Flush TLBs before releasing backing store
  - moxart: fix potential use-after-free on remove path
  - memstick: rtsx_usb_ms: fix UAF


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2203.1.0.0139
changelog:
  - usb: gadget: rndis: check size of RNDIS_MSG_SET command
  - USB: gadget: validate interface OS descriptor requests
  - mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
  - udf: Restore i_lenAlloc when inode expansion fails
  - udf: Fix NULL ptr deref when converting from inline format
  - ext4: fix underflow in ext4_max_bitmap_size()
  - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds()
  - livepatch/x86: Fix incorrect use of 'strncpy'
  - tipc: improve size validations for received domain records
  - yam: fix a memory leak in yam_siocdevprivate()
  - ipmi_si: Phytium S2500 missing timeout counter reset in intf_mem_inw
  - mm,hwpoison: Fix use-after-free in memory_failure()
  - dm-mpath: fix UAF in multipath_message()
  - usb: gadget: clear related members when goto fail
  - usb: gadget: don't release an existing dev->buf
  - dm: make sure dm_table is binded before queue request
  - cgroup-v1: Require capabilities to set release_agent
  - NFSv4: nfs_atomic_open() can race when looking up a non-regular file
  - NFSv4: Handle case where the lookup of a directory fails
  - configfs: fix a race in configfs_{,un}register_subsystem()


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2203.2.0.0140
changelog:
  - mm: Fix return val in khugepaged_scan_pmd()
  - mm: do some clean up of accounting ReliableTaskUsed
  - mm: fix statistic of ReliableTaskUsed
  - mm: fix missing reclaim of low-reliable page cache
  - mm: fix statistic of ReliableFileCache in /proc/meminfo
  - mm: Add more gfp flag check in prepare_before_alloc()
  - efi: Stub mirrored_kernelcore if CONFIG_HAVE_MEMBLOCK_NODE_MAP is not enabled
  - mm: Memory reliable features can only be disabled via proc interface
  - mm: Fix reliable_debug in proc not consistent with boot parameter problem
  - f2fs: fix to do sanity check on inode type during garbage collection
  - mm: Check page status in page_reliable()
  - mm: Show ReliableTaskUsed in /proc/meminfo
  - mm: Refactor code in reliable_report_meminfo()
  - mm: Show correct reliable_user_used if PAGE_SIZE is not 4K
  - proc: Fix reliable display err in /proc/pid/status
  - Revert "mm: add page cache fallback statistic"
  - mm: fix page cache use reliable memory when reliable_debug=P
  - mm: add support for limiting the usage of reliable memory in pagecache
  - mm: add "ReliableFileCache" item in /proc/meminfo
  - mm: Introduce shmem mirrored memory limit for memory reliable
  - mm: Introduce watermark check for memory reliable
  - mm: Count mirrored pages in buddy system
  - mm: Export mem_reliable_status() for checking memory reliable status
  - mm: Make MEMORY_RELIABLE depends on HAVE_MEMBLOCK_NODE_MAP
  - efi: Disable mirror feature if kernelcore is not spcified
  - mm: Introduce proc interface to control memory reliable features
  - mm: Demote warning message in vmemmap_verify() to debug level
  - mm: Ratelimited mirrored memory related warning messages


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2203.3.0.0141
changelog:
  - crypto: pcrypt - Fix user-after-free on module unload
  - lib/iov_iter: initialize "flags" in new pipe_buffer
  - mm: Count reliable shmem used based on NR_SHMEM
  - mm: fix zoneref mapping problem in memory reliable
  - mm: disable memory reliable when kdump is in progress
  - mm: introduce "clear_freelist" kernel parameter
  - mm: fix unable to use reliable memory in page cache
  - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
  - select: Fix indefinitely sleeping task in poll_schedule_timeout()
  - mtd: nand: bbt: Fix corner case in bad block table handling
  - netns: add schedule point in ops_exit_list()
  - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
  - crypto: stm32/crc32 - Fix kernel BUG triggered in probe()
  - ext4: don't use the orphan list when migrating an inode
  - ext4: set csum seed in tmp inode while migrating to extents
  - ext4: make sure quota gets properly shutdown on error
  - ext4: make sure to reset inode lockdep class when quota enabling fails
  - cputime, cpuacct: Include guest time in user time in cpuacct.stat
  - serial: Fix incorrect rs485 polarity on uart open
  - scsi: sr: Don't use GFP_DMA
  - dm space map common: add bounds check to sm_ll_lookup_bitmap()
  - dm btree: add a defensive bounds check to insert_at()
  - ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
  - ACPICA: Utilities: Avoid deleting the same object twice in a row
  - jffs2: GC deadlock reading a page that is used in jffs2_write_begin()
  - bpf: Do not WARN in bpf_warn_invalid_xdp_action()
  - net: bonding: debug: avoid printing debug logs when bond is not notifying peers
  - net-sysfs: update the queue counts in the unregistration path
  - dmaengine: pxa/mmp: stop referencing config->slave_id
  - scsi: ufs: Fix race conditions related to driver data
  - iommu/io-pgtable-arm: Fix table descriptor paddr formatting
  - ext4: avoid trim error on fs with small groups
  - net: mcs7830: handle usb read errors properly
  - tpm: add request_locality before write TPM_INT_ENABLE
  - netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
  - xfrm: state and policy should fail if XFRMA_IF_ID 0
  - xfrm: interface with if_id 0 should return error
  - crypto: stm32/cryp - fix double pm exit
  - xfrm: fix a small bug in xfrm_sa_len()
  - sched/rt: Try to restart rt period timer when rt runtime exceeded
  - serial: amba-pl011: do not request memory region twice
  - tty: serial: uartlite: allow 64 bit address
  - netfilter: bridge: add support for pppoe filtering
  - crypto: qce - fix uaf on qce_ahash_register_one
  - shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode
  - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet
  - ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate
  - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()
  - ipv6: Do cleanup if attribute validation fails in multipath route
  - ipv6: Continue processing multipath route even if gateway attribute is invalid
  - ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route
  - ipv6: Check attribute length for RTA_GATEWAY in multipath route
  - tracing: Tag trace_percpu_buffer as a percpu pointer
  - tracing: Fix check for trace_percpu_buffer validity in get_trace_buf()
  - net: fix use-after-free in tw_timer_handler
  - udp: using datalen to cap ipv6 udp max gso segments
  - selinux: initialize proto variable in selinux_ip_postroute_compat()
  - x86/pkey: Fix undefined behaviour with PKRU_WD_BIT
  - ipmi: fix initialization when workqueue allocation fails
  - ipmi: bail out if init_srcu_struct fails
  - bonding: fix ad_actor_system option setting to default
  - ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
  - net: skip virtio_net_hdr_set_proto if protocol already set
  - net: hns3: update hns3 version to 22.2.1
  - net: hns3: fix RMW issue for VLAN filter switch
  - net: hns3: fix pf vlan filter out of work after self test
  - arm64: acpi: fix UBSAN warning
  - sched: Fix sleeping in atomic context at cpu_qos_write()
  - io_uring: don't re-setup vecs/iter in io_resumit_prep() is already there
  - io_uring: don't double complete failed reissue request
  - io_uring: remove redundant initialization of variable ret
  - block: don't ignore REQ_NOWAIT for direct IO
  - io_uring: re-issue block requests that failed because of resources
  - dm multipath: fix missing blk_account_io_done() in error path
  - block: account inflight from blk_account_io_start() if 'precise_iostat' is set
  - block: add a switch for precise iostat accounting
  - blk-throttle: Set BIO_THROTTLED when bio has been throttled
  - bfq: fix use-after-free in bfq_dispatch_request
  - hugetlbfs: fix a truncation issue in hugepages parameter


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2203.4.0.0142
changelog:
  - kabi: fix kabi broken in struct fuse_in
  - fuse: fix pipe buffer lifetime for direct_io
  - blk-throtl: fix race in io dispatching
  - ext4: Fix symlink file size not match to file content
  - livepatch/core: Check klp_func before 'klp_init_object_loaded'
  - irqchip/gic-phytium-2500: Fix issue that interrupts are concentrated in one cpu
  - blk-mq: add exception handling when srcu->sda alloc failed
  - audit: improve audit queue handling when "audit=1" on cmdline
  - Revert "audit: bugfix for infinite loop when flush the hold queue"
  - veth: Do not record rx queue hint in veth_xmit


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2203.5.0.0143
changelog:
  - livepatch/arm64: Fix incorrect endian conversion when long jump
  - arm64/mpam: realign step entry when traversing rmid_transform
  - dt-bindings: mpam: refactor device tree node structure
  - arm64/mpam: refactor device tree structure to support multiple devices
  - arm64/mpam: fix __mpam_device_create() section mismatch error
  - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern
  - hugetlb: Add huge page alloced limit
  - swiotlb: rework "fix info leak with DMA_FROM_DEVICE"
  - swiotlb: fix info leak with DMA_FROM_DEVICE
  - esp: Fix possible buffer overflow in ESP transformation
  - sock: remove one redundant SKB_FRAG_PAGE_ORDER macro
  - io_uring: fix UAF in get_files_struct()
  - xfs: fix an undefined behaviour in _da3_path_shift
  - xfs: Fix possible null-pointer dereferences in xchk_da_btree_block_check_sibling()
  - xfs: fix use after free in buf log item unlock assert
  - ACPI/IORT: Do not blindly trust DMA masks from firmware


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2204.1.0.0144
changelog:
  - serial: 8250: Fix max baud limit in generic 8250 port
  - sched/fair: Add qos_throttle_list node in struct cfs_rq
  - Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""
  - Revert "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""
  - USB: gadget: validate endpoint index for xilinx udc
  - sr9700: sanity check for packet length
  - ima: Fix return value of ima_write_policy()
  - ima: Don't modify file descriptor mode on the fly
  - ima: Set file->f_mode instead of file->f_flags in ima_calc_file_hash()
  - ima: Remove __init annotation from ima_pcrread()
  - ima: Call ima_calc_boot_aggregate() in ima_eventdigest_init()
  - evm: Check size of security.evm before using it
  - ima: Don't ignore errors from crypto_shash_update()
  - mm: Fallback to non-mirrored region below low watermark
  - mm: Disable watermark check if reliable fallback is disabled
  - mm: Do limit checking after memory allocation for memory reliable


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2204.2.0.0145
changelog:
  - Revert "module, async: async_synchronize_full() on module init iff async is used"
  - tty: n_gsm: fix encoding of control signal octet bit DV
  - fget: clarify and improve __fget_files() implementation
  - memblock: use kfree() to release kmalloced memblock regions
  - tty: n_gsm: fix proper link termination after failed open
  - gso: do not skip outer ip header in case of ipip and net_failover
  - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends
  - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug
  - tracing: Fix tp_printk option related with tp_printk_stop_on_boot
  - dmaengine: sh: rcar-dmac: Check for error num after setting mask
  - net: sched: limit TC_ACT_REPEAT loops
  - mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe()
  - NFS: Do not report writeback errors in nfs_getattr()
  - NFS: LOOKUP_DIRECTORY is also ok with symlinks
  - bonding: fix data-races around agg_select_timer
  - drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
  - ping: fix the dif and sdif check in ping_lookup
  - taskstats: Cleanup the use of task->exit_code
  - xfrm: Don't accidentally set RTO_ONLINK in decode_session4()
  - nvme: fix a possible use-after-free in controller reset during load
  - quota: make dquot_quota_sync return errors from ->sync_fs
  - vfs: make freeze_super abort when sync_filesystem returns error
  - serial: parisc: GSC: fix build when IOSAPIC is not set
  - perf: Fix list corruption in perf_cgroup_switch()
  - seccomp: Invalidate seccomp mode to catch death failures
  - n_tty: wake up poll(POLLRDNORM) on receiving data
  - veth: fix races around rq->rx_notify_masked
  - net: fix a memleak when uncloning an skb dst and its metadata
  - net: do not keep the dst cache when uncloning an skb dst and its metadata
  - ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
  - bonding: pair enable_port with slave_arr_updates
  - bpf: Add kconfig knob for disabling unpriv bpf by default
  - scsi: target: iscsi: Make sure the np under each tpg is unique
  - NFSv4 expose nfs_parse_server_name function
  - NFSv4 remove zero number of fs_locations entries error check
  - NFSv4.1: Fix uninitialised variable in devicenotify
  - nfs: nfs4clinet: check the return value of kstrdup()
  - NFSv4 only print the label when its queried
  - NFS: Fix initialisation of nfs_client cl_flags field
  - ima: Allow template selection with ima_template[_fmt]= after ima_hash=
  - ima: Remove ima_policy file before directory
  - integrity: check the return value of audit_log_start()
  - ext4: fix error handling in ext4_restore_inline_data()
  - iommu/amd: Fix loop timeout issue in iommu_ga_log_enable()
  - iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()
  - block: bio-integrity: Advance seed correctly for larger interval sizes
  - af_packet: fix data-race in packet_setsockopt / packet_setsockopt
  - rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
  - ipv4: tcp: send zero IPID in SYNACK messages
  - ipv4: raw: lock the socket in raw_bind()
  - phylib: fix potential use-after-free
  - NFS: Ensure the server has an up to date ctime before renaming
  - NFS: Ensure the server has an up to date ctime before hardlinking
  - ipv6: annotate accesses to fn->fn_sernum
  - ipv4: avoid using shared IP generator for connected sockets
  - ping: fix the sk_bound_dev_if match in ping_lookup
  - ipv6_tunnel: Rate limit warning messages
  - tty: n_gsm: fix SW flow control encoding/handling
  - serial: stm32: fix software flow control transfer
  - serial: 8250: of: Fix mapped region size when using reg-offset property
  - netfilter: nft_payload: do not update layer 4 checksum when mangling fragments
  - PM: wakeup: simplify the output logic of pm_show_wakelocks()
  - tty: fix crash in release_tty if tty->port is not set
  - tty: don't crash in tty_init_dev when missing tty_port
  - printk: Convert a use of sprintf to snprintf in console_unlock


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2204.3.0.0146
changelog:
  - ext4: fix fs corruption when tring to remove a non-empty directory with IO error
  - Revert "ext4: fix file system corrupted when rmdir non empty directory with IO error"
  - sched: Fix yet more sched_fork() races
  - sched/fair: Fix wrong cpu selecting from isolated domain
  - netfilter: nf_tables: initialize registers in nft_do_chain()
  - nbd: fix possible overflow on 'first_minor' in nbd_dev_add()
  - net: sched: adapt Qdisc kabi
  - net_sched: fix a crash in tc_new_tfilter()
  - net: sched: use Qdisc rcu API instead of relying on rtnl lock
  - net: sched: add helper function to take reference to Qdisc
  - net: sched: extend Qdisc with rcu
  - net: core: netlink: add helper refcount dec and lock function
  - xen/netfront: react properly to failing gnttab_end_foreign_access_ref()
  - xen/gnttab: fix gnttab_end_foreign_access() without page specified
  - xen/pvcalls: use alloc/free_pages_exact()
  - xen/9p: use alloc/free_pages_exact()
  - xen: remove gnttab_query_foreign_access()
  - xen/gntalloc: don't use gnttab_query_foreign_access()
  - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status
  - xen/netfront: don't use gnttab_query_foreign_access() for mapped status
  - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status
  - xen/grant-table: add gnttab_try_end_foreign_access()
  - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case
  - xen/xenbus: Fix granting of vmalloc'd memory
  - binder: fix test regression due to sender_euid change
  - binder: use cred instead of task for selinux checks
  - binder: use euid from cred instead of using task
  - svm: Change svm to modules
  - svm: Delete unused svm_get_unmapped_area ops
  - ascend: mm: Add MAP_ALIGN flag to map aligned va
  - svm: Delete unused function sysrq_sched_debug_show_export
  - svm: Delete get meminfo interface in svm ioctl
  - svm: Export symbols for svm module
  - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
  - mm: Add space after ReliableFileCache
  - mm: Drop reliable_reserve_size
  - mm: page_counter: mitigate consequences of a page_counter underflow
  - drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
  - hamradio: remove needs_free_netdev to avoid UAF
  - hamradio: defer 6pack kfree after unregister_netdev
  - ovl: fix uninitialized pointer read in ovl_lookup_real_one()
  - ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
  - ovl: fix lseek overflow on 32bit
  - ovl: sync dirty data when remounting to ro mode


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2204.4.0.0147
changelog:
  - Revert "perf: Paper over the hw.target problems"
  - ax25: Fix NULL pointer dereferences in ax25 timers
  - ax25: fix NPD bug in ax25_disconnect
  - ax25: Fix NULL pointer dereference in ax25_kill_by_device
  - ax25: improve the incomplete fix to avoid UAF and NPD bugs
  - ax25: NPD bug when detaching AX25 device
  - objtool: Fix stack offset tracking for indirect CFAs
  - x86/entry/64: Fix unwind hints in kernel exit path
  - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register
  - arm64: Use the clearbhb instruction in mitigations
  - arm64: add ID_AA64ISAR2_EL1 sys register
  - KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated
  - arm64: Mitigate spectre style branch history side channels
  - KVM: arm64: Add templates for BHB mitigation sequences
  - arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2
  - arm64: Add percpu vectors for EL1
  - arm64: entry: Add macro for reading symbol addresses from the trampoline
  - arm64: entry: Add vectors that have the bhb mitigation sequences
  - arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations
  - arm64: entry: Allow the trampoline text to occupy multiple pages
  - arm64: entry: Make the kpti trampoline's kpti sequence optional
  - arm64: entry: Move trampoline macros out of ifdef'd section
  - arm64: entry: Don't assume tramp_vectors is the start of the vectors
  - arm64: entry: Allow tramp_alias to access symbols after the 4K boundary
  - arm64: entry: Move the trampoline data page before the text page
  - arm64: entry: Free up another register on kpti's tramp_exit path
  - arm64: entry: Make the trampoline cleanup optional
  - arm64: entry.S: Add ventry overflow sanity checks
  - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT
  - x86/speculation: Warn about Spectre v2 LFENCE mitigation
  - x86/speculation: Update link to AMD speculation whitepaper
  - x86/speculation: Use generic retpoline by default on AMD
  - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting
  - Documentation/hw-vuln: Update spectre doc
  - x86/speculation: Add eIBRS + Retpoline options
  - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE
  - x86,bugs: Unconditionally allow spectre_v2=retpoline,amd
  - x86/speculation: Merge one test in spectre_v2_user_select_mitigation()
  - mm/memory.c: fix clear_gigantic_page_chunk


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2205.1.0.0148
changelog:
  - hamradio: improve the incomplete fix to avoid NPD
  - hamradio: defer ax25 kfree after unregister_netdev
  - can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path
  - llc: only change llc->dev when bind() succeeds
  - netdevice: add the case if dev is NULL
  - llc: fix netdevice reference leaks in llc_ui_bind()
  - ARM: fix Thumb2 regression with Spectre BHB
  - ARM: Spectre-BHB: provide empty stub for non-config
  - ARM: fix build warning in proc-v7-bugs.c
  - ARM: Do not use NOCROSSREFS directive with ld.lld
  - ARM: fix co-processor register typo
  - ARM: fix build error when BPF_SYSCALL is disabled
  - ARM: include unprivileged BPF status in Spectre V2 reporting
  - ARM: Spectre-BHB workaround
  - ARM: use LOADADDR() to get load address of sections
  - ARM: early traps initialisation
  - ARM: report Spectre v2 status through sysfs
  - can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2205.3.0.0149
changelog:
  - ixgbevf: add disable link state
  - ixgbe: add improvement for MDD response functionality
  - ixgbe: add the ability for the PF to disable VF link state
  - io_uring: fix false WARN_ONCE
  - mm/sharepool: Fix sharepool node id invalid when using sp_alloc
  - sharepool: fix hisi oom deadlock
  - share_pool: Fix ABBA deadlock
  - net: ipv6: fix skb_over_panic in __ip6_append_data
  - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit()
  - net/packet: fix slab-out-of-bounds access in packet_recvmsg()
  - mm: fix dereference a null pointer in migrate[_huge]_page_move_mapping()
  - cpuset: Fix unsafe lock order between cpuset lock and cpuslock
  - tcp: make tcp_read_sock() more robust
  - xfrm: Fix xfrm migrate issues when address family changes
  - Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"
  - ext4: add check to prevent attempting to resize an fs with sparse_super2
  - net-sysfs: add check for netdevice being present to speed_show
  - memfd: fix F_SEAL_WRITE after shmem huge page allocated
  - PCI: pciehp: Fix infinite loop in IRQ handler upon power fault
  - netfilter: nf_queue: fix possible use-after-free
  - netfilter: nf_queue: don't assume sk is full socket
  - xfrm: enforce validity of offload input flags
  - xfrm: fix the if_id check in changelink
  - netfilter: fix use-after-free in __nf_register_net_hook()
  - xfrm: fix MTU regression
  - cifs: fix double free race when mount fails in cifs_get_root()
  - mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status
  - x86/asm: Move native_write_cr0/4() out of line
  - x86/asm: Pin sensitive CR0 bits
  - x86/asm: Pin sensitive CR4 bits
  - mm: Add more debug info if oom occurs
  - mm: Fix reliable task used problem shown in meminfo
  - mm: Show correct reliable pagecache size


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2205.4.0.0150
changelog:
  - scsi: hisi_sas: Change hisi_sas_control_phy() phyup timeout
  - scsi: hisi_sas: Fix SAS disk sense info print incorrectly sometimes
  - scsi: hisi_sas: Don't fail IT nexus reset for Open Reject timeout
  - mm/share_pool: Support read-only memory allocation
  - mm: clear_freelist_page: Provide timeout mechanism for worker runtime
  - io_uring: fix race between timeout flush and removal
  - ax25: fix UAF bug in ax25_send_control()
  - ax25: Fix refcount leaks caused by ax25_cb_del()
  - ax25: fix UAF bugs of net_device caused by rebinding operation
  - ax25: fix reference count leaks of ax25_dev
  - ax25: add refcount in ax25_dev to avoid UAF bugs
  - ext4: fix bug_on in start_this_handle during umount filesystem
  - ext4: unregister sysfs path before destroying jbd2 journal
  - ext4: fix use-after-free in ext4_search_dir
  - mm: Update reliable flag in memory allocaion for reliable task only in task context
  - mm: refactor the reclaim thread of page cache from per-cpu to per-node


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2205.5.0.0151
changelog:
  - sched/qos: Add qos_tg_{throttle,unthrottle}_{up,down}
  - sched: Throttle offline task at tracehook_notify_resume()
  - sched: enable CONFIG_QOS_SCHED on arm64
  - sched/qos: Remove dependency CONFIG_x86
  - net/sched: cls_u32: fix netns refcount changes in u32_change()
  - mm: hwpoison: enable memory error handling on 1GB hugepage optionaly
  - mm: fix gup_pud_range
  - nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs
  - ext4: fix warning when submitting superblock in ext4_commit_super()
  - ext4: fix bug_on in __es_tree_search
  - secure_seq: use the 64 bits of the siphash for port offset calculation
  - floppy: use a statically allocated error counter
  - mmc: block: fix read single on recovery logic
  - SUNRPC: Ensure that the gssproxy client can start in a connected state
  - Revert "SUNRPC: attempt AF_LOCAL connect on setup"
  - ax25: Fix UAF bugs in ax25 timers
  - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE
  - drm/vgem: Close use-after-free race in vgem_gem_create
  - mm/memory.c: update the first page in clear_gigantic_page_chunk


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2205.6.0.0152
changelog:
  - net: hns3: update hns3 version to 22.5.1
  - net: hns3: fix vf link setting failed when no vf driver loaded
  - arm64: Add memmap reserve range check to avoid conflict
  - ext4: fix bug_on in ext4_writepages
  - ext4: fix warning in ext4_handle_inode_extension
  - ext4: fix use-after-free in ext4_rename_dir_prepare
  - uce: coredump scenario support kernel recovery
  - NULL pointer dereference on rmmod iptable_mangle.


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2206.1.0.0153
changelog:
  - ping: fix address binding wrt vrf
  - tcp: resalt the secret every 10 seconds
  - netlink: do not reset transport header in netlink_recvmsg()
  - ipv4: drop dst in multicast routing path
  - net: Fix features skip in for_each_netdev_feature()
  - VFS: Fix memory leak caused by concurrently mounting fs with subtype
  - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic()
  - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user()
  - dm: interlock pending dm_io and dm_wait_for_bios_completion
  - dm: fix mempool NULL pointer race when completing IO
  - tcp: make sure treq->af_specific is initialized
  - net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()
  - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32
  - tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT
  - ip_gre: Make o_seqno start from 0 in native mode
  - tcp: md5: incorrect tcp_header_len for incoming connections
  - mtd: rawnand: Fix return value check of wait_for_completion_timeout
  - mtd: rawnand: fix ecc parameters for mt7622
  - hex2bin: fix access beyond string end
  - serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device
  - serial: 8250: Also set sticky MCR bits in console restoration
  - ext4: force overhead calculation if the s_overhead_cluster makes no sense
  - ext4: fix overhead calculation to account for the reserved gdt blocks
  - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
  - arm_pmu: Validate single/group leader events
  - netlink: reset network and mac headers in netlink_dump()
  - net/packet: fix packet_sock xmit return value checking
  - mm: page_alloc: fix building error on -Werror=array-compare
  - etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead
  - smp: Fix offline cpu check in flush_smp_call_function_queue()
  - ipv6: fix panic when forwarding a pkt with no in6 dev
  - mm: kmemleak: take a full lowmem check in kmemleak_*_phys()
  - mm, page_alloc: fix build_zonerefs_node()
  - cifs: potential buffer overflow in handling symlinks
  - veth: Ensure eth header is in skb's linear part
  - mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning
  - mm: don't skip swap entry even if zap_details specified
  - irqchip/gic-v3: Fix GICR_CTLR.RWP polling
  - mm/mempolicy: fix mpol_new leak in shared_policy_replace
  - mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
  - mm: fix race between MADV_FREE reclaim and blkdev direct IO read
  - NFS: swap-out must always use STABLE writes.
  - NFS: swap IO handling is slightly different for O_DIRECT IO
  - SUNRPC/call_alloc: async tasks mustn't block waiting for memory
  - NFSv4: Protect the state recovery thread against direct reclaim
  - macvtap: advertise link netns via netlink
  - dm ioctl: prevent potential spectre v1 gadget
  - ipv4: Invalidate neighbour for broadcast address upon address addition
  - mm/memcontrol: return 1 from cgroup.memory __setup() handler
  - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
  - ext4: don't BUG if someone dirty pages without asking ext4 first
  - PM: core: keep irq flags in device_pm_check_callbacks()
  - ACPI/APEI: Limit printable size of BERT table data
  - ACPICA: Avoid walking the ACPI Namespace if it is not there
  - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options
  - NFS: remove unneeded check in decode_devicenotify_args()
  - serial: 8250: Fix race condition in RTS-after-send handling
  - serial: 8250_mid: Balance reference count for PCI DMA device
  - tcp: ensure PMTU updates are processed during fastopen
  - af_netlink: Fix shift out of bounds in group mask calculation
  - mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init
  - mtd: onenand: Check for error irq
  - printk: fix return value of printk.devkmsg __setup handler
  - perf/core: Fix address filter parser for multiple filters
  - ACPI: APEI: fix return value of __setup handlers
  - crypto: authenc - Fix sleep in atomic context in decrypt_tail
  - PCI: pciehp: Clear cmd_busy bit in polling mode
  - ACPI: properties: Consistently return -ENOENT if there are no more references
  - mm,hwpoison: unmap poisoned page before invalidation
  - scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands
  - mempolicy: mbind_range() set_policy() after vma_merge()
  - mm: invalidate hwpoison page cache page in fault path
  - mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node
  - NFSD: prevent integer overflow on 32 bit systems
  - SUNRPC: avoid race between mod_timer() and del_timer_sync()
  - xfrm: fix tunnel model fragmentation behavior
  - sched/fair: Fix enqueue_task_fair() warning some more
  - sched/fair: Fix enqueue_task_fair warning
  - floppy: disable FDRAWCMD by default
  - perf: Fix sys_perf_event_open() race against self
  - KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2206.2.0.0154
changelog:
  - x86: Pin task-stack in __get_wchan()
  - x86: Fix __get_wchan() for !STACKTRACE
  - x86/unwind/orc: Fix premature unwind stoppage due to IRET frames
  - x86/unwind: Prevent false warnings for non-current tasks
  - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
  - ALSA: pcm: Fix races among concurrent prealloc proc writes
  - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
  - ALSA: pcm: Fix races among concurrent read/write and buffer changes
  - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls
  - NFC: netlink: fix sleep in atomic bug when firmware download timeout
  - nfc: replace improper check device_is_registered() in netlink related functions
  - ext4: fix super block checksum incorrect after mount
  - block: remove the bd_openers checks in blk_drop_partitions
  - block: fix busy device checking in blk_drop_partitions again
  - block: fix busy device checking in blk_drop_partitions
  - ext4: add reserved GDT blocks check


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2206.3.0.0155
changelog:
  - arm64: fix out-of-range error when adapting for ARM64_SPECTRE_BHB
  - xfs: replace -EIO with -EFSCORRUPTED for corrupt metadata
  - xfs: namecheck directory entry names before listing them
  - xfs: namecheck attribute names before listing them
  - xfs: check attribute leaf block structure
  - xfs: check attribute name validity
  - xfs: check directory name validity
  - xfs: scrub should flag dir/attr offsets that aren't mappable with xfs_dablk_t
  - xfs: abort xattr scrub if fatal signals are pending
  - tcp: increase source port perturb table to 2^16
  - tcp: change source port randomizarion at connect() time
  - arm64: fix extra cpucaps setup problem
  - Revert "sched: Fix sched_fork() access an invalid sched_task_group"
  - Revert "sched: Fix yet more sched_fork() races"
  - powerpc/32: Fix overread/overwrite of thread_struct via ptrace
  - sctp: use call_rcu to free endpoint
  - ext4: convert from atomic_t to refcount_t on ext4_io_end->count
  - ext4: correct the judgment of BUG in ext4_mb_normalize_request
  - ext4: fix bug_on ext4_mb_use_inode_pa
  - HID: holtek: fix mouse probing
  - HID: check for valid USB device for many HID drivers
  - HID: wacom: fix problems when device is not a valid USB device
  - HID: add USB_HID dependancy on some USB HID drivers
  - HID: add USB_HID dependancy to hid-chicony
  - HID: add USB_HID dependancy to hid-prodikeys
  - HID: add hid_is_usb() function to make it simpler for USB detection
  - netfilter: nf_tables: disallow non-stateful expression in sets earlier
  - NFSv4: fix open failure with O_ACCMODE flag
  - Revert "NFSv4: Handle the special Linux file open access mode"


author: xingxing <xingxing9@h-partners.com> - 0.7.14-6
changelog:
  - Type:cves
  - CVE:CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-20
  21-44576-CVE-2021-44577
  - SUG:NA
  - DESC:fix CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-C
  VE-2021-44576-CVE-2021-44577


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - util: Move virIsDevMapperDevice() to virdevmapper.c
  - virdevmapper: Don't use libdevmapper to obtain dependencies


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - libvirt: Add 'retry' support for error policy
  - qemu: Support 'retry' BLOCK_IO_ERROR event.
  - libvirt/conf: Set default values of retry fileds


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  - security: fix SELinux label generation logic


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - virDevMapperGetTargets: Don't ignore EBADF
  - virdevmapper: Don't cache device-mapper major
  - virdevmapper: Handle kernel without device-mapper support


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix memory leaks in XPointer string-range function
         fix null pointer deref in xmlXPtrRangeInsideFunction
         stop using maxParserDepth in xpath.c
         hardcode maximum XPath recursion depth
         fix XPath recursion limit


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix following issues:
         fix unsigned integer overflow in htmlParseTryOrFinish
         fix undefined behavior in UTF16LEToUTF8
         fix SEGV in xmlSAXParseFileWithData
         encoding: fix memleak in xmlRegisterCharEncodingHandler()
         fix null deref in xmlStringGetNodeList
         fix memory leak in xmlParseElementMixedContentDecl
         fix slow parsing of HTML with encoding errors


author: fuanan <fuanan3@h-partners.com> - 2.9.10-25
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: wulei <wulei80@huawei.com> - 5.7.21-4
changelog:
  - Fix innodb.innodb fail on aarch64
  - Fix grant_user_lock as root
  - Update fail tests list on glibc 2.33


author: bzhaoop <bzhaojyathousandy@gmail.com> - 5.7.34-1
changelog:
  - Bump from 5.7.21 to latest 5.7.34
  - Correct the test steps and options
  - Refactor part of the file structure according to the new packages


author: bzhaoop <bzhaojyathousandy@gmail.com> - 5.7.37-1
changelog:
  - Fix CVE issues for bump to the 5.7.37 version
  - CVE-2022-21245
  - CVE-2022-21270
  - CVE-2022-21303
  - CVE-2022-21304
  - CVE-2022-21344
  - CVE-2022-21367
  - CVE-2021-35624
  - CVE-2021-2356
  - CVE-2021-2011
  - CVE-2021-2010
  - CVE-2021-2007


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: liulong <liulong20@huawei.com> - 2.4.50-3
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230


author: wangye <wangye70@huawei.com> - 8.1.1-2
changelog:
  - Type:CVE
  - CVE:CVE-2021-27921 CVE-2021-27922 CVE-2021-27923
  - SUG:NA
  - DESC: fix CVE-2021-27921CVE-2021-27922CVE-2021-27923


author: hanhui <hanhui15@huawei.com> - 8.1.1-3
changelog:
  - Type:bugfix
  - CVE:CVE-2021-28675 CVE-2021-28676 CVE-2021-28677 CVE-2021-28678 CVE-2021-25287 CVE-2021-25288
  - SUG:NA
  - DESC: incorporate community patch


author: hanxinke<hanxinke@huawei.com> - 3.7.9-12
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:expose posix_spawn in os module
         fix leaks and errors in new os.posix_spawn
         improve error handing and fix a reference
         fix using of freed memory in old versions
         add signal.valid_signals
         make the sigset_t converter available
         add flag capabilities to posix_spawn
         pass os.environ in test_posix test_specify
         fix TestPosixSpawn.test_close_file
         change the file_actions parameter of os.posix_spawn
         subprocess uses os.posix_spawn in some case
         add os.posix_spawnp
         subprocess can use posix_spawn with pipes
         subprocess close pipes fds by using ExitStack
         guard definition of convert_sched_param with POSIX_SPAWN_SETSCHEDULER
         add setsid parameter to os.posix_spawn() and os.posix_spawnp()
         skip test_start_new_session() of posix_spawn
         fix function name in os.posix_spawnp() errors
         ensure os.posix_spawn() handles None
         rewrite setsid test for os.posix_spawn
         add user and group parameters to subproces
         fix buildbot failures
         posix_spawn doesn't support uid gid
         add umask support to subprocess
         use bin true in test_subprocess
         handle the case when there is no 'true' command
         fix test_subprocess if nobody user doesn't exist
         subprocess: Use vfork() instead of fork() on Linux when safe
         subprocess: Fix handling of pthread_sigmask() errors
         allow setsid() after vfork() on Linux
         fix memory leak in subprocess.Popen() in case of uid/gid overflow
         Unify cleanup in subprocess_fork_exec()


author: hehuazhen<hehuazhen@huawei.com> - 3.7.9-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Use gdbm_count for dbm_length if possible
         Don't override PYTHONPATH which is already set by the user


author: hehuazhen<hehuazhen@huawei.com> - 3.7.9-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix _PyEval_FiniThreads
         rewrite _PyObject_IsFreed unit tests
         get test_capi passing with address sanitize
         remove use after free reference in ctypes
         fix memory leak in _asynciomodule.c


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable profile guided optimizations for x86_64 and i686 architectures


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bpo-43124: Fix smtplib multiple CRLF injection
         bpo-12800: tarfile: Restore fix from 011525ee9
         bpo-41815: SQLite: segfault if backup called on closed database
         bpo-42183: Fix a stack overflow error for asyncio Task or Future repr()
         bpo-45001: Make email date parsing more robust against malformed input


author: yezengruan <yezengruan@huawei.com>
changelog:
  - hw/rdma: Fix possible mremap overflow in the pvrdma device (CVE-2021-3582)
  - pvrdma: Ensure correct input on ring init (CVE-2021-3607)
  - pvrdma: Fix the ring init error flow (CVE-2021-3608)


author: yezengruan <yezengruan@huawei.com>
changelog:
  - vhost-vsock: detach the virqueue element in case of error (CVE-2022-26354)
  - virtio-net: fix map leaking on error during receive (CVE-2022-26353)


author: yezengruan <yezengruan@huawei.com>
changelog:
  - hw/block/fdc: Extract blk_create_empty_drive()
  - hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196
  - tests/fdc-test: Add a regression test for CVE-2021-20196
  - display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207)
  - ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206)


author: yezengruan <yezengruan@huawei.com>
changelog:
  - hw/intc/arm_gicv3_dist: Rename 64-bit accessors with 'q' suffix
  - hw/intc/arm_gicv3: Replace mis-used MEMTX_* constants by booleans
  - hw/intc/arm_gicv3: Check for !MEMTX_OK instead of MEMTX_ERROR (CVE-2021-3750)
  - net/colo-compare.c: Check that colo-compare is active


author: sundongxu <sundongxu3@huawei.com>
changelog:
  - e1000: fail early for evil descriptor
  - e1000: fix tx re-entrancy problem
  - hw/sd/sdcard: Do not allow invalid SD card sizes
  - hw/sd/sdcard: Do not switch to ReceivingData if address is invalid
  - hw/sd/sdcard: Restrict Class 6 commands to SCSD cards
  - hw/sd/sdcard: Simplify realize() a bit
  - hw/sd/sdcard: Update coding style to make checkpatch.pl happy
  - scsi/qemu-pr-helper: Fix out-of-bounds access to trnptid_list[]
  - curses: Fixes curses compiling errors.
  - net/dump.c: Suppress spurious compiler warning
  - tests: Replace deprecated ASN1 code


author: liyangyang <liyangyang20@huawei.com> - 35.0-1
changelog:
  - DESC: Currently 28.1 is not commercially available and need to be modified to 35.0 with more complete features


author: tangchengchang <tangchengchang@huawei.com> - 35.0-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Rename the previous patch to facilitate subsequent management


author: wutao <wutao61@huawei.com> - 2.5.8-3
changelog:
  - fix CVE-2020-25613
  - WEBrick,a simple HTTP server bundled with Ruby,had not
  - checked the transfer-encoding header value rigorously.
  - An attacker may potentially exploit this issue to bypass
  - a reverse proxy,which may lead to an HTTP Request Smuggling
  - attack.


author: shixuantong <shixuantong@huawei.com> - 2.5.8-114
changelog:
  - Type:cves
  - ID:CVE-2021-31799 CVE-2021-31810 CVE-2021-32066
  - SUG:NA
  - DESC:fix CVE-2021-31799 CVE-2021-31810 CVE-2021-32066


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-4
changelog:
  - Type:cves
  - ID:CVE-2020-27840 CVE-2021-20277 CVE-2021-20254
  - SUG:NA
  - DESC:fix CVE-2020-27840 CVE-2021-20277 CVE-2021-20254


author: zengwefeng <zwfeng@huawei.com> - 4.11.12-5
changelog:
  - Type:cves
  - ID:CVE-2020-14318 CVE-2020-14323 CVE-2020-14383
  - SUG:NA
  - DESC:fix CVE-2020-14318 CVE-2020-14323 CVE-2020-14383


author: xihaochen <xihaochen@huawei.com> - 4.11.12-7
changelog:
  - Type:cves
  - ID:CVE-2020-25717,CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738
  - SUG:NA
  - DESC:fix CVE-2020-25717,CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-8
changelog:
  - Type:cves
  - ID:CVE-2021-43566
  - SUG:NA
  - DESC:backport patches to fix CVE-2021-43566:
         s3/lib: add parent_smb_fname function
         smbd: use parent_smb_fname in check_parent_access
         smbd: use parent_smb_fname in inherit_new_acl
         s3/VFS: Add SMB_VFS_MKDIRAT
         vfs_full_audit: pass conn to smb_fname_str_do_log
         s3/VFS: change connection_struct cwd_fname to cwd_fsp
         s3/smbd: Change mkdir_internal to call SMB_VFS_MKDIRAT
         smbd: use parent_smb_fname in mkdir_internal
         fix CVE-2021-43566


author: yuboyun <yuboyun@huawei.com> - 4.11.6-8
changelog:
  - Type:cves
  - ID:CVE-2020-10730 CVE-2020-10745 CVE-2020-14303 CVE-2020-10760
  - SUG:NA
  - DESC:fix CVE-2020-10730CVE-2020-10745CVE-2020-14303CVE-2020-10760


author: luhuaxin <1539327763@qq.com> - 3.14.2-72
changelog:
  - backport some upstream patches
    backport-Allow-systemd-logind-dbus-chat-with-fwupd.patch
    backport-Allow-auditd-manage-kerberos-host-rcache-files.patch
    backport-Add-dev_lock_all_blk_files-interface.patch
    backport-Define-named-file-transition-for-sshd-on-tmp-krb5_0..patch
    backport-Allow-nsswitch_domain-to-connect-to-systemd-machined.patch
    backport-Allow-unconfined_t-to-node_bind-icmp_sockets-in-node.patch
    backport-Create-macro-corenet_icmp_bind_generic_node.patch
    backport-Allow-traceroute_t-and-ping_t-to-bind-generic-nodes.patch
    backport-Allow-passwd-to-get-attributes-in-proc_t.patch
    backport-Allow-login_pgm-attribute-to-get-attributes-in-proc_.patch
    backport-Allow-syslogd_t-domain-to-read-write-tmpfs-systemd-b.patch
    backport-Allow-all-users-to-connect-to-systemd-userdbd-with-a.patch
    backport-Add-new-devices-and-filesystem-interfaces.patch
    backport-Add-lvm_dbus_send_msg-lvm_rw_var_run-interfaces.patch
    backport-Allow-domain-write-to-an-automount-unnamed-pipe.patch
    backport-Allow-dyntransition-from-sshd_t-to-unconfined_t.patch
    backport-Allow-initrc_t-create-run-chronyd-dhcp-directory-wit.patch
    backport-Update-systemd_resolved_read_pid-to-also-read-symlin.patch
    backport-Allow-systemd-resolved-manage-its-private-runtime-sy.patch
    backport-Allow-systemd-logind-manage-init-s-pid-files.patch
    backport-Add-systemd_resolved_write_pid_sock_files-interface.patch
    backport-Allow-nsswitch-domain-write-to-systemd-resolved-PID-.patch
    backport-sysnetwork.if-avoid-directly-referencing-systemd_res.patch
    backport-Allow-stub-resolv.conf-to-be-a-symlink.patch
    backport-Allow-domain-stat-proc-filesystem.patch
    backport-Allow-domain-write-to-systemd-resolved-PID-socket-fi.patch
    backport-Allow-systemd-machined-manage-systemd-userdbd-runtim.patch
    backport-Allow-domain-stat-the-sys-filesystem.patch
    backport-Allow-login_userdomain-write-inaccessible-nodes.patch
    backport-Allow-local_login_t-get-attributes-of-tmpfs-filesyst.patch
    backport-Allow-dhcpc_t-domain-transition-to-chronyc_t.patch
    backport-Allow-nsswitch_domain-read-cgroup-files.patch
    backport-Allow-IPsec-and-certmonger-to-use-opencryptoki-servi.patch
    backport-Create-chronyd_pid_filetrans-interface.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-2
changelog:
  - Type:cves
  - ID:CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450
  - SUG:restart
  - DESC:fix CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058 CVE-2020-15049 CVE-2020-15810 CVE-2020-15811 CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: yangmingtai <yangmingtai@huawei.com> - 243-52
changelog:
  - fix some issue: 1.fix set blkio.bfq.weight 
                    2.udevadm fix --tag-match
                    3.fix check of Listen* arguments


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: wangyue <wangyue92@huawei.com> - 1:9.0.10-18
changelog:
  - Type:cve
  - ID: CVE-2021-25122 CVE-2021-25329
  - SUG:restart
  - DESC: fix CVE-2021-25122 CVE-2021-25329


author: openEuler Buildteam <buildteam@openeuler.org> - 2.8.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revise the bogus date in changelog and delete the unnecessary subpackage "udisks2-iscsi"


author: yuanxin<yuanxin24@huawei.com> - 2:8.2-11
changelog:
  - Type:CVE
  - ID:CVE-2021-4166 CVE-2021-4192 CVE-2021-4193
  - SUG:NA
  - DESC:fix CVE-2021-4166 CVE-2021-4192 CVE-2021-4193


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-15
changelog:
  - Type:CVE
  - ID:CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413
  - SUG:NA
  - DESC:fix CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413


author: tianwei <tianwei12@h-partners.com> - 2:8.2-16
changelog:
  - Type:CVE
  - ID:CVE-2022-0443 CVE-2022-0392 CVE-2022-0417
  - SUG:NA
  - DESC:fix CVE-2022-0443 CVE-2022-0392 CVE-2022-0417


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-27
changelog:
  - Type:CVE
  - ID:CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619
  - SUG:NA
  - DESC:fix CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619


