# changelog

author: wangxiao <wangxiao65@huawei.com> - 6.9.10.67-19
changelog:
  - Fix CVE-2020-25676 CVE-2020-27757 CVE-2020-27758 CVE-2020-27771
    CVE-2020-27772 CVE-2020-27774 CVE-2020-27775 CVE-2020-27751


author: zhanghua <zhanghua40@huawei.com> - 2.2.0-18
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DESC:fix CVE-2017-9110 CVE-2017-9111 CVE-2017-9112 CVE-2017-9113
    CVE-2017-9114 CVE-2017-9115 CVE-2017-9116 CVE-2017-12596


author: wangyue <wangyue92@huawei.com> - 2.2.0-19
changelog:
  - fix CVE-2021-3474 CVE-2021-3477 CVE-2021-3476 CVE-2021-3475 CVE-2021-20296 CVE-2021-3479 CVE-2021-20296


author: yaoxin <yaoxin30@huawei.com> - 2.2.0-22
changelog:
  - fix CVE-2020-11758 CVE-2020-11759 CVE-2020-11760 CVE-2020-11761 CVE-2020-11762 CVE-2020-11763 CVE-2020-11764 CVE-2020-11765 CVE-2020-15305 CVE-2020-15306


author: openEuler Buildteam <buildteam@openeuler.org> - 0.16-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: change file from /etc/logrotate.d/aide/aide.logrotate to /etc/logrotate.d/aide


author: yaoxin <yaoxin30@huawei.com> - 2.5.5-2
changelog:
  - Fix CVE-2019-14904 CVE-2020-10684 CVE-2020-10729 CVE-2020-1735-to-CVE-2020-1740 CVE-2020-1753 CVE-2021-20191


author: wangkai <wangkai385@huawei.com> - 2.5.5-5
changelog:
  - Fix CVE-2019-3828 and hostname module support openEuler
  - and add defination of is_subpath and remove module_response_deepcopy


author: wangkai <wangkai385@huawei.com> - 0:4.3-23
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0:4.3-24
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: houyingchao <houyingchao@huawei.com> - 0:4.3-25
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: panxiaohe <panxiaohe@huawei.com> - 2.34-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix erroneous decoding of LEB128 values
         heap-buffer-overflow on readelf -Ww


author: chixinze <xmdxcxz@gmail.com> - 1:12.2.8-13
changelog:
  - fix CVE-2020-27781
  - ceph-volume-client: allow atomic updates for RADOS objects
  - qa: make test_volume_client.py py3 compatible


author: Li Qiang <liqiang64@huawei.com> - 1:12.2.8-16
changelog:
  - Synchronize the performance optimization of the pick_a_shard
  - function in the upstream community.


author: yanglongkang <yanglongkang@huawei.com> - 2.3.3-4
changelog:
  - add buildrequire gcc
    add make check
    backport upstream patches to solve several problems -epoch2


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-Check-segment-gaps-regardless-of-heap-space.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-Fix-posible-buffer-overflows-in-LUKS-conversion.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-Fix-a-memleak-in-blockwise-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-CVE-2021-4122.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: gaoxingwang<gaoxingwang@huawei.com> - 7.71.1-12
changelog:
  - Type:CVE
  - CVE:CVE-2021-22922 CVE-2021-22923
  - SUG:NA
  - DESC:disable metalink to fix CVE-2021-22922 and CVE-2021-22923


author: liyanan <liyanan32@huawei.com> - 2.1.27-13
changelog:
  - Split cyrus-sasl-ldap cyrus-sasl-gs2 cyrus-sasl-scram cyrus-sasl-gssapi
    cyrus-sasl-md5 cyrus-sasl-ntlm cyrus-sasl-plain sub-package


author: wangjie <wangjie375@huawei.com> - 2.2.9-4
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.2.9-6
changelog:
  - Type:CVE
  - ID:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: wangkai <wangkai385@huawei.com> - 1.0.6-20
changelog:
  - Rebuild for fix log4j1.x cves

   * Thu Mar 5 2020 wangzhishun <wangzhishun1@huawei.com> - 1.0.6-19
   - Package init


author: chenjiankun <chenjiankun1@huawei.com> - 1.15.7-5
changelog:
  - fix CVE-2021-33195,CVE-2021-33196,CVE-2021-33197,CVE-2021-33198,CVE-2021-34558,CVE-2021-29923,CVE-2021-38297,CVE-2021-36221


author: wangyue <wangyue92@huawei.com> - 2.9.8-6
changelog:
  - fix CVE-2020-36179 CVE-2020-36180 CVE-2020-36181
    CVE-2020-36182 CVE-2020-36188 CVE-2020-36189
    CVE-2020-36187 CVE-2020-36186 CVE-2020-36184 CVE-2020-36183


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2111.5.0.0123
changelog:
  - rq-qos: fix missed wake-ups in rq_qos_throttle try two
  - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
  - drivers : remove drivers/mtd/hisilicon/sfc
  - drivers : remove drivers/soc/hisilicon/sysctl
  - drivers : remove drivers/soc/hisilicon/lbc
  - ipv4: fix uninitialized warnings in fnhe_remove_oldest()
  - crypto: public_key: fix overflow during implicit conversion
  - net: bridge: fix stale eth hdr pointer in br_dev_xmit
  - x86/entry: Make entry_64_compat.S objtool clean


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2111.6.0.0124
changelog:
  - drm/ioctl: Ditch DRM_UNLOCKED except for the legacy vblank ioctl
  - config: Enable some configs for test
  - share_pool: add mm address check when access the process's sp_group file


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2111.7.0.0125
changelog:
  - defconfig: update the defconfigs to support 9P
  - sched: Introduce handle priority reversion mechanism
  - sched: unthrottle qos cfs rq when free a task group
  - sched: Avoid sched entity null pointer panic
  - sched: Clear idle_stamp when unthrottle offline tasks
  - sched: Fix offline task can't be killed in a timely
  - sched: Optimizing qos scheduler performance
  - sched: Fix throttle offline task trigger panic
  - sched: Remove residual checkings for qos scheduler
  - sched: Change cgroup task scheduler policy
  - sched: Unthrottle the throttled cfs rq when offline rq
  - sched: Enable qos scheduler config
  - sched: Throttle qos cfs_rq when current cpu is running online task
  - sched: Introduce qos scheduler for co-location
  - io_uring: return back safer resurrect
  - cpufreq: Fix get_cpu_device() failed in add_cpu_dev_symlink()
  - ACPI: CPPC: Fix cppc_cpufreq_init failed in CPU Hotplug situation
  - lib/clear_user: ensure loop in __arch_clear_user cache-aligned v2


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2112.1.0.0126
changelog:
  - arm64: Fix conflict for capability when cpu hotplug
  - mm: memcontrol: fix cpuhotplug statistics flushing
  - mm, memcg: fix error return value of mem_cgroup_css_alloc()
  - mm/memcontrol: fix a data race in scan count
  - GPIO : support ascend_gpio_dwapb_enable switch
  - ext4: always panic when errors=panic is specified
  - config: disable CONFIG_NGBE by default in hulk_defconfig
  - x86/config: Enable netswift Giga NIC driver for x86
  - net: ngbe: Add Netswift Giga NIC driver
  - ras: report cpu logical index to userspace in arm event
  - arm64: Avoid premature usercopy failure
  - hugetlb: before freeing hugetlb page set dtor to appropriate value


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2112.3.0.0127
changelog:
  - ixgbe: fix large MTU request from VF
  - block, bfq: move bfqq to root_group if parent group is offlined
  - io_uring: use bottom half safe lock for fixed file data
  - io_uring: fix soft lockup when call __io_remove_buffers
  - block: Fix fsync always failed if once failed
  - blk-mq: use the new flag to quiesce/unquiesce queue in block layer
  - blk-mq: add a new queue flag to quiesce/unquiesce queue
  - blk-mq: factor out some helps to quiesce/unquiesce queue
  - blk: Fix lock inversion between ioc lock and bfqd lock
  - bfq: Remove merged request already in bfq_requests_merged()
  - md: fix a warning caused by a race between concurrent md_ioctl()s
  - net: hns3: update hns3 version to 21.12.2
  - net: hns3: fix race condition in debugfs
  - kabi: fix kabi broken in struct sock
  - tracing: Have all levels of checks prevent recursion
  - netfilter: Kconfig: use 'default y' instead of 'm' for bool config option
  - mm, slub: fix mismatch between reconstructed freelist depth and cnt
  - vfs: check fd has read access in kernel_read_file_from_fd()
  - dma-debug: fix sg checks in debug_dma_map_sg()
  - acpi/arm64: fix next_platform_timer() section mismatch error
  - x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
  - sched: Always inline is_percpu_thread()
  - perf/x86: Reset destroy callback on event init failure
  - net: prevent user from passing illegal stab size
  - netfilter: ip6_tables: zero-initialize fragment offset
  - rtnetlink: fix if_nlmsg_stats_size() under estimation
  - netlink: annotate data races around nlk->bound
  - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
  - net_sched: fix NULL deref in fifo_set_limit()
  - phy: mdio: fix memory leak
  - bpf, arm: Fix register clobbering in div/mod implementation
  - scsi: sd: Free scsi_disk device via put_device()
  - cred: allow get_cred() and put_cred() to be given NULL.
  - net: udp: annotate data race around udp_sk(sk)->corkflag
  - elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
  - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
  - cpufreq: schedutil: Use kobject release() method to free sugov_tunables
  - tty: Fix out-of-bound vmalloc access in imageblit
  - tcp: address problems caused by EDT misshaps
  - arm64: Mark __stack_chk_guard as __ro_after_init
  - md: fix a lock order reversal in md_alloc
  - irqchip/gic-v3-its: Fix potential VPE leak on error
  - scsi: iscsi: Adjust iface sysfs attr detection
  - serial: mvebu-uart: fix driver's tx_empty callback
  - cifs: fix incorrect check for null pointer in header_assemble


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2112.4.0.0128
changelog:
  - block, bfq: don't move oom_bfqq
  - blk-mq: fix abnormal free in single queue process
  - scsi: hisi_sas: Add support for sata disk I/O errors report to libsas
  - KVM: arm64: Allow vcpus running without HCR_EL2.FB
  - KVM: arm64: Set kvm_vcpu::pre_pcpu properly
  - KVM: arm64: Ensure I-cache isolation between vcpus of a same VM
  - arm64/tlbi: mark tlbi ipi as EXPERIMENTAL
  - arm64/tlb: restore no IPi code
  - arm64/configs: enable TLBI_IPI
  - arm64/tlbi: split disable_tlbflush_is to control flush
  - arm64/tlb: add CONFIG_ARM64_TLBI_IPI
  - arm64: tlb: Add boot parameter to disable TLB flush within the same inner shareable domain
  - arm64: mm: Restore mm_cpumask (revert commit 38d96287504a ("arm64: mm: kill mm_cpumask usage"))
  - audit: ensure userspace is penalized the same as the kernel when under pressure
  - audit: improve robustness of the audit queue handling
  - block/wbt: fix negative inflight counter when remove scsi device
  - nbd: Fix use-after-free in blk_mq_free_rqs
  - block, bfq: fix use after free in bfq_bfqq_expire
  - block, bfq: fix queue removal from weights tree
  - block, bfq: fix decrement of num_active_groups
  - block, bfq: fix asymmetric scenarios detection
  - block, bfq: improve asymmetric scenarios detection
  - fget: check that the fd still exists after getting a ref to it
  - config: Enable CONFIG_EXT4_PARALLEL_DIO_READ as default
  - ext4: update direct I/O read lock pattern for IOCB_NOWAIT
  - Revert "Revert "ext4: remove EXT4_STATE_DIOREAD_LOCK flag""
  - Revert "Revert "ext4: Allow parallel DIO reads""
  - net: hns3: update hns3 version to 21.12.3
  - net: hns3: fix the VLAN of a vf cannot be added problem
  - net: hns3: fix pfc packet number incorrect after querying pfc parameters
  - net: hns3: fix VF RSS failed problem after PF enable multi-TCs
  - usb: gadget: configfs: Fix use-after-free issue with udc_name
  - hugetlbfs: flush TLBs correctly after huge_pmd_unshare
  - mm: share_pool: adjust sp_alloc behavior when coredump
  - mm: share_pool: adjust sp_make_share_k2u behavior when coredump
  - Revert "timekeeping: Fix ktime_add overflow in tk_set_wall_to_mono"
  - Revert "timekeeping: Avoid undefined behaviour in 'ktime_get_with_offset()'"
  - Revert "posix-cpu-timers: Avoid undefined behaviour in timespec64_to_ns()"
  - time: Normalize timespec64 before timespec64_compare()
  - iommu/arm-smmu-v3: remove unnecessary mpam enable procedure
  - fix kabi effect by change in md_rdev
  - Revert "dm space maps: don't reset space map allocation cursor when committing"
  - nvme-fabrics: fix kabi broken by "reject I/O to offline device"
  - nvme: fix NULL derefence in nvme_ctrl_fast_io_fail_tmo_show/store
  - nvme: export fast_io_fail_tmo to sysfs
  - nvme-fabrics: reject I/O to offline device
  - nvme: add a Identify Namespace Identification Descriptor list quirk
  - nvme: fix identify error status silent ignore
  - nvme: fix possible hang when ns scanning fails during error recovery
  - nvme: refactor nvme_identify_ns_descs error handling
  - nvme: Namepace identification descriptor list is optional
  - nvmet: use new ana_log_size instead the old one
  - nvme-multipath: fix double initialization of ANA state
  - nvme-core: use list_add_tail_rcu instead of list_add_tail for nvme_init_ns_head
  - nvme: make nvme_report_ns_ids propagate error back
  - nvme-multipath: avoid crash on invalid subsystem cntlid enumeration
  - nvme-multipath: split bios with the ns_head bio_set before submitting
  - nvme: add proper discard setup for the multipath device
  - fix kabi change
  - md: Fix undefined behaviour in is_mddev_idle
  - xfs: fix up non-directory creation in SGID directories
  - xfs: remove the kuid/kgid conversion wrappers
  - xfs: remove the icdinode di_uid/di_gid members
  - xfs: ensure that the inode uid/gid match values match the icdinode ones
  - configfs: fix a use-after-free in __configfs_open_file
  - share_pool: don't trace the invalid spa address
  - share_pool: Remove the redundant warning message


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2112.5.0.0129
changelog:
  - config: enable CONFIG_RAMAXEL_SPRAID by default
  - scsi:spraid: support Ramaxel's spraid driver
  - USB: gadget: bRequestType is a bitfield, not a enum
  - phonet: refcount leak in pep_sock_accep
  - USB: gadget: detect too-big endpoint 0 requests


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2112.6.0.0130
changelog:
  - watchdog: Fix check_preemption_disabled() error
  - btrfs: unlock newly allocated extent buffer after error
  - net/hinic: Fix call trace when the rx_buff module parameter is grater than 2
  - dt-bindings: mpam: add document for arm64 mpam
  - arm64/mpam: add device tree support for mpam initialization
  - arm64/mpam: remove __init macro to support driver probe
  - arm64/mpam: rmid: refine allocation and release process
  - arm64/mpam: resctrl: add tips when rmid modification failed
  - arm64/mpam: Fix mpam corrupt when cpu online
  - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
  - kprobes: Fix optimize_kprobe()/unoptimize_kprobe() cancellation logic
  - kprobes: Set unoptimized flag after unoptimizing code


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2112.8.0.0131
changelog:
  - mm/page_alloc: Use cmdline to disable "place pages to tail"
  - bpf: Remove MTU check in __bpf_skb_max_len
  - sctp: account stream padding length for reconf chunk


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2201.1.0.0132
changelog:
  - mm: export collect_procs()
  - net: hns: update hns version to 21.12.1
  - net: hns: fix bug when two ports opened promisc mode both
  - net: hns3: update hns3 version to 21.12.4
  - net: hns3: fix the concurrency between functions reading debugfs
  - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
  - mwifiex: Fix skb_over_panic in mwifiex_usb_recv()
  - tee: handle lookup of shm with reference count 0
  - tee: don't assign shm id for private shms
  - tee: remove linked list of struct tee_shm
  - mm/page_alloc: Use cmdline to disable "place pages to tail"
  - mm/page_alloc: Use cmdline to disable "place pages to tail"
  - ext4: fix an use-after-free issue about data=journal writeback mode
  - ext4: Fix null-ptr-deref in '__ext4_journal_ensure_credits'
  - scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback
  - netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc
  - lib/strncpy_from_user.c: Mask out bytes after NUL terminator.
  - bpf: Add probe_read_{user, kernel} and probe_read_{user, kernel}_str helpers
  - bpf: Make use of probe_user_write in probe write helper
  - uaccess: Add strict non-pagefault kernel-space read function
  - bpf: fix script for generating man page on BPF helpers
  - bpf: Backport __BPF_FUNC_MAPPER and annotation from mainline
  - bpf: Fix up register-based shifts in interpreter to silence KUBSAN
  - xen/netback: don't queue unlimited number of packages
  - xen/netback: fix rx queue stall detection
  - xen/console: harden hvc_xen against event channel storms
  - xen/netfront: harden netfront against event channel storms
  - xen/blkfront: harden blkfront against event channel storms
  - xen/netfront: don't trust the backend response data blindly
  - xen/netfront: disentangle tx_skb_freelist
  - xen/netfront: don't read data from request on the ring page
  - xen/netfront: read response from backend only once
  - xen/blkfront: don't trust the backend response data blindly
  - xen/blkfront: don't take local copy of a request from the ring page
  - xen/blkfront: read response from backend only once
  - xen: sync include/xen/interface/io/ring.h with Xen's newest version
  - xen/netback: avoid race in xenvif_rx_ring_slots_available()
  - bpf: Remove MTU check in __bpf_skb_max_len
  - sctp: account stream padding length for reconf chunk
  - bpf: Remove MTU check in __bpf_skb_max_len
  - sctp: account stream padding length for reconf chunk
  - netfilter: fix regression in looped (broad|multi)cast's MAC handling
  - perf/core: Avoid put_page() when GUP fails
  - perf/core: Disable page faults when getting phys address
  - mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
  - ipc: WARN if trying to remove ipc object which is absent
  - tun: fix bonding active backup with arp monitoring
  - perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
  - perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
  - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
  - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
  - PCI/MSI: Deal with devices lying about their MSI mask capability
  - PCI/MSI: Destroy sysfs before freeing entries
  - ext4: fix lazy initialization next schedule time computation in more granular unit
  - x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
  - mm, oom: do not trigger out_of_memory from the #PF
  - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
  - llc: fix out-of-bound array index in llc_sk_dev_hash()
  - zram: off by one in read_block_state()
  - mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
  - dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
  - netfilter: nfnetlink_queue: fix OOB when mac header was cleared
  - NFS: Fix deadlocks in nfs_scan_commit_list()
  - apparmor: fix error check
  - serial: 8250_dw: Drop wrong use of ACPI_PTR()
  - crypto: pcrypt - Delay write to padata->info
  - tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
  - cgroup: Make rebind_subsystems() disable v2 controllers all at once
  - task_stack: Fix end_of_stack() for architectures with upwards-growing stack
  - gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
  - smackfs: Fix use-after-free in netlbl_catmap_walk()
  - signal: Remove the bogus sigkill_pending in ptrace_stop
  - bpf: Prevent increasing bpf_jit_limit above max
  - x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
  - tpm: Check for integer overflow in tpm2_map_response_body()
  - scsi: core: Put LLD module refcnt after SCSI device is released
  - net: Prevent infinite while loop in skb_tx_hash()


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2201.1.0.0132
changelog:
  - mm: export collect_procs()
  - net: hns: update hns version to 21.12.1
  - net: hns: fix bug when two ports opened promisc mode both
  - net: hns3: update hns3 version to 21.12.4
  - net: hns3: fix the concurrency between functions reading debugfs
  - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
  - mwifiex: Fix skb_over_panic in mwifiex_usb_recv()
  - tee: handle lookup of shm with reference count 0
  - tee: don't assign shm id for private shms
  - tee: remove linked list of struct tee_shm
  - ext4: fix an use-after-free issue about data=journal writeback mode
  - ext4: Fix null-ptr-deref in '__ext4_journal_ensure_credits'
  - scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback
  - netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc
  - lib/strncpy_from_user.c: Mask out bytes after NUL terminator.
  - bpf: Add probe_read_{user, kernel} and probe_read_{user, kernel}_str helpers
  - bpf: Make use of probe_user_write in probe write helper
  - uaccess: Add strict non-pagefault kernel-space read function
  - bpf: fix script for generating man page on BPF helpers
  - bpf: Backport __BPF_FUNC_MAPPER and annotation from mainline
  - bpf: Fix up register-based shifts in interpreter to silence KUBSAN
  - xen/netback: don't queue unlimited number of packages
  - xen/netback: fix rx queue stall detection
  - xen/console: harden hvc_xen against event channel storms
  - xen/netfront: harden netfront against event channel storms
  - xen/blkfront: harden blkfront against event channel storms
  - xen/netfront: don't trust the backend response data blindly
  - xen/netfront: disentangle tx_skb_freelist
  - xen/netfront: don't read data from request on the ring page
  - xen/netfront: read response from backend only once
  - xen/blkfront: don't trust the backend response data blindly
  - xen/blkfront: don't take local copy of a request from the ring page
  - xen/blkfront: read response from backend only once
  - xen: sync include/xen/interface/io/ring.h with Xen's newest version
  - xen/netback: avoid race in xenvif_rx_ring_slots_available()
  - netfilter: fix regression in looped (broad|multi)cast's MAC handling
  - perf/core: Avoid put_page() when GUP fails
  - perf/core: Disable page faults when getting phys address
  - mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
  - ipc: WARN if trying to remove ipc object which is absent
  - tun: fix bonding active backup with arp monitoring
  - perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
  - perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
  - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
  - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
  - PCI/MSI: Deal with devices lying about their MSI mask capability
  - PCI/MSI: Destroy sysfs before freeing entries
  - ext4: fix lazy initialization next schedule time computation in more granular unit
  - x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
  - mm, oom: do not trigger out_of_memory from the #PF
  - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
  - llc: fix out-of-bound array index in llc_sk_dev_hash()
  - zram: off by one in read_block_state()
  - mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
  - dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
  - netfilter: nfnetlink_queue: fix OOB when mac header was cleared
  - NFS: Fix deadlocks in nfs_scan_commit_list()
  - apparmor: fix error check
  - serial: 8250_dw: Drop wrong use of ACPI_PTR()
  - crypto: pcrypt - Delay write to padata->info
  - tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
  - cgroup: Make rebind_subsystems() disable v2 controllers all at once
  - task_stack: Fix end_of_stack() for architectures with upwards-growing stack
  - gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
  - smackfs: Fix use-after-free in netlbl_catmap_walk()
  - signal: Remove the bogus sigkill_pending in ptrace_stop
  - bpf: Prevent increasing bpf_jit_limit above max
  - x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
  - tpm: Check for integer overflow in tpm2_map_response_body()
  - scsi: core: Put LLD module refcnt after SCSI device is released
  - net: Prevent infinite while loop in skb_tx_hash()


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2201.2.0.0133
changelog:
  - arm64/mpam: fix mpam dts init arm_mpam_of_device_ids error
  - arm64/mpam: fix mpam probe error for wrong init order


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2201.3.0.0134
changelog:
  - ip_gre: validate csum_start only on pull
  - hugetlbfs: fix issue of preallocation of gigantic pages can't work
  - hugetlbfs: extend the definition of hugepages parameter to support node allocation
  - mm: remove sharepool sp_unshare_uva current->mm NULL check
  - share pool: use rwsem to protect sp group exit
  - Add new module parameters:time out
  - virtio-blk: validate num_queues during probe
  - virtio-blk: Use blk_validate_block_size() to validate block size
  - block: Add a helper to validate the block size
  - Revert "virtio-blk: Add validation for block size in config space"
  - scsi: virtio_scsi: Rescan the entire target on transport reset when LUN is 0
  - Revert "svm: Add support to get svm mpam configuration"
  - Revert "svm: Add support to set svm mpam configuration"
  - Revert "svm: Add svm_set_user_mpam_en to enable/disable mpam for smmu"
  - cgroup: Use open-time cgroup namespace for process migration perm checks
  - cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
  - cgroup: Use open-time credentials for process migraton perm checks
  - NFC: add necessary privilege flags in netlink layer
  - NFC: add NCI_UNREG flag to eliminate the race
  - NFC: reorder the logic in nfc_{un,}register_device
  - NFC: reorganize the functions in nci_request
  - ext4: Fix BUG_ON in ext4_bread when write quota data
  - PM: hibernate: use correct mode for swsusp_close()
  - Revert "watchdog: Fix check_preemption_disabled() error"


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2201.4.0.0135
changelog:
  - net: bridge: clear bridge's private skb space on xmit
  - audit: bugfix for infinite loop when flush the hold queue
  - blk-throttle: enable hierarchical throttle in cgroup v1
  - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2202.1.0.0136
changelog:
  - config: enable CONFIG_MEMCG_MEMFS_INFO by default
  - mm/memcg_memfs_info: show files that having pages charged in mem_cgroup
  - ext4: fix e2fsprogs checksum failure for mounted filesystem
  - drm/vmwgfx: Fix stale file descriptors on failed usercopy
  - perf vendor events amd: Fix broken L2 Cache Hits from L2 HWPF metric
  - perf vendor events amd: Add recommended events
  - perf vendor events amd: Add L2 Prefetch events for zen1
  - perf/amd/uncore: Fix sysfs type mismatch
  - perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest
  - tools/power turbostat: Support AMD Family 19h
  - perf/x86/amd/ibs: Support 27-bit extended Op/cycle counter
  - perf vendor events amd: Enable Family 19h users by matching Zen2 events
  - perf vendor events amd: Update Zen1 events to V2
  - perf vendor events amd: Add Zen2 events
  - perf vendor events amd: Restrict model detection for zen1 based processors
  - perf vendor events amd: Remove redundant '['
  - perf vendor events intel: Add Tremontx event file v1.02
  - perf vendor events intel: Add Icelake V1.00 event file
  - perf vendor events amd: Add L3 cache events for Family 17h
  - perf vendor events intel: Add uncore_upi JSON support
  - perf vendor events amd: perf PMU events for AMD Family 17h
  - perf/amd/uncore: Allow F19h user coreid, threadmask, and sliceid specification
  - perf/amd/uncore: Allow F17h user threadmask and slicemask specification
  - perf/amd/uncore: Prepare to scale for more attributes that vary per family
  - perf/x86/amd/ibs: Don't include randomized bits in get_ibs_op_count()
  - perf/amd/uncore: Set all slices and threads to restore perf stat -a behaviour
  - perf/x86/amd/ibs: Fix raw sample data accumulation
  - arch/x86/amd/ibs: Fix re-arming IBS Fetch
  - perf/amd/uncore: Add support for Family 19h L3 PMU
  - perf/amd/uncore: Make L3 thread mask code more readable
  - perf/amd/uncore: Prepare L3 thread mask code for Family 19h
  - EDAC/amd64: Handle three rank interleaving mode
  - EDAC/amd64: Add family ops for Family 19h Models 00h-0Fh
  - EDAC/amd64: Save max number of controllers to family type
  - EDAC/amd64: Gather hardware information early
  - EDAC/amd64: Make struct amd64_family_type global
  - EDAC/amd64: Set grain per DIMM
  - EDAC/amd64: Support asymmetric dual-rank DIMMs
  - EDAC/amd64: Cache secondary Chip Select registers
  - EDAC/amd64: Add PCI device IDs for family 17h, model 70h
  - EDAC/amd64: Find Chip Select memory size using Address Mask
  - EDAC/amd64: Adjust printed chip select sizes when interleaved
  - EDAC/amd64: Recognize x16 symbol size
  - EDAC/amd64: Set maximum channel layer size depending on family
  - EDAC/amd64: Support more than two Unified Memory Controllers
  - EDAC/amd64: Add Family 17h Model 30h PCI IDs
  - EDAC/amd64: Initialize DIMM info for systems with more than two channels
  - EDAC/amd64: Support more than two controllers for chip selects handling
  - EDAC/amd64: Use a macro for iterating over Unified Memory Controllers
  - x86/mce: Fix use of uninitialized MCE message string
  - x86/MCE/AMD, EDAC/mce_amd: Add new Load Store unit McaType
  - x86/MCE/AMD, EDAC/mce_amd: Add new error descriptions for some SMCA bank types
  - x86/MCE/AMD, EDAC/mce_amd: Add new McaTypes for CS, PSP, and SMU units
  - x86/MCE/AMD, EDAC/mce_amd: Add new MP5, NBIO, and PCIE SMCA bank types
  - EDAC/mce_amd: Always load on SMCA systems
  - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too
  - x86/amd_nb: Add Family 19h PCI IDs
  - x86/amd_nb: Add PCI device IDs for family 17h, model 70h
  - x86/amd_nb: Add PCI device IDs for family 17h, model 30h
  - hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs
  - EDAC/amd64: Drop some family checks for newer systems
  - x86/microcode/AMD: Increase microcode PATCH_MAX_SIZE
  - KVM: mmu: Fix SPTE encoding of MMIO generation upper half
  - build_bug.h: add wrapper for _Static_assert
  - KVM: x86: fix overlap between SPTE_MMIO_MASK and generation
  - KVM: x86: assign two bits to track SPTE kinds
  - KVM: Move the memslot update in-progress flag to bit 63
  - KVM: Remove the hack to trigger memslot generation wraparound
  - KVM: x86: clflushopt should be treated as a no-op by emulation
  - KVM: SVM: Clear the CR4 register on reset
  - KVM: SVM: Replace hard-coded value with #define
  - KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated
  - KVM: x86/mmu: Apply max PA check for MMIO sptes to 32-bit KVM
  - KVM: x86: only do L1TF workaround on affected processors
  - kvm: x86: Fix L1TF mitigation for shadow MMU
  - KVM: x86/mmu: Consolidate "is MMIO SPTE" code
  - KVM: SVM: Override default MMIO mask if memory encryption is enabled
  - KVM: x86/mmu: Add explicit access mask for MMIO SPTEs
  - kvm: x86: Fix reserved bits related calculation errors caused by MKTME
  - KVM: x86: Rename access permissions cache member in struct kvm_vcpu_arch
  - kvm: x86: Move kvm_set_mmio_spte_mask() from x86.c to mmu.c
  - kvm/svm: PKU not currently supported
  - kvm: x86: Expose RDPID in KVM_GET_SUPPORTED_CPUID
  - KVM: x86: Refactor the MMIO SPTE generation handling
  - KVM: Explicitly define the "memslot update in-progress" bit
  - KVM: x86: Use a u64 when passing the MMIO gen around
  - KVM: x86: expose MOVDIR64B CPU feature into VM.
  - KVM: x86: expose MOVDIRI CPU feature into VM.
  - KVM: x86: Add requisite includes to hyperv.h
  - KVM: x86: Add requisite includes to kvm_cache_regs.h
  - KVM: nVMX: Allocate and configure VM{READ,WRITE} bitmaps iff enable_shadow_vmcs
  - x86/cpufeatures: Enumerate MOVDIR64B instruction
  - x86/cpufeatures: Enumerate MOVDIRI instruction
  - x86/pkeys: Don't check if PKRU is zero before writing it
  - x86/fpu: Only write PKRU if it is different from current
  - x86/pkeys: Provide *pkru() helpers
  - sysctl: returns -EINVAL when a negative value is passed to proc_doulongvec_minmax
  - arm64: move jump_label_init() before parse_early_param()
  - tcp: fix memleak when tcp internal pacing is used
  - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
  - ovl: fix warning in ovl_create_real()
  - fuse: annotate lock in fuse_reverse_inval_entry()
  - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
  - sit: do not call ipip6_dev_free() from sit_init_net()
  - net/packet: rx_owner_map depends on pg_vec
  - x86/sme: Explicitly map new EFI memmap table as encrypted
  - dm btree remove: fix use after free in rebalance_children()
  - net: netlink: af_netlink: Prevent empty skb by adding a check on len.
  - irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
  - net, neigh: clear whole pneigh_entry at alloc time
  - aio: fix use-after-free due to missing POLLFREE handling
  - aio: keep poll requests on waitqueue until completed
  - signalfd: use wake_up_pollfree()
  - wait: add wake_up_pollfree()
  - tracefs: Have new files inherit the ownership of their parent
  - mm: bdi: initialize bdi_min_ratio when bdi is unregistered
  - udp: using datalen to cap max gso segments
  - bpf: Fix the off-by-two error in range markings
  - ipmi: msghandler: Make symbol 'remove_work_wq' static
  - serial: core: fix transmit-buffer reset and memleak
  - serial: pl011: Add ACPI SBSA UART match id
  - net: annotate data-races on txq->xmit_lock_owner
  - ipmi: Move remove_work to dedicated workqueue
  - vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
  - scsi: iscsi: Unblock session then wake up error handler
  - shm: extend forced shm destroy to support objects from several IPC nses
  - fuse: release pipe buf after last use
  - tracing: Check pid filtering when creating events
  - ipv6: fix typos in __ip6_finish_output()
  - proc/vmcore: fix clearing user buffer by properly using clear_user()
  - tracing: Fix pid filtering when triggers are attached
  - fuse: fix page stealing
  - ipmi_si: Phytium S2500 workaround for MMIO-based IPMI
  - etmem: Add a scan flag to support specified page swap-out
  - etmem: add swapcache reclaim to etmem
  - etmem: add original kernel swap enabled options


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2202.3.0.0137
changelog:
  - fs/filesystems.c: downgrade user-reachable WARN_ONCE() to pr_warn_once()
  - drm/i915: Flush TLBs before releasing backing store
  - moxart: fix potential use-after-free on remove path
  - memstick: rtsx_usb_ms: fix UAF
  - ext4: fix file system corrupted when rmdir non empty directory with IO error
  - bpf, doc: Remove references to warning message when using bpf_trace_printk()
  - bpf: Remove inline from bpf_do_trace_printk
  - bpf: Use dedicated bpf_trace_printk event instead of trace_printk()
  - net: cipso: fix warnings in netlbl_cipsov4_add_std
  - xsk: Use struct_size() helper
  - mm/page_alloc: fix counting of free pages after take off from buddy
  - mm,hwpoison: drop unneeded pcplist draining
  - mm,hwpoison: take free pages off the buddy freelists
  - mm,hwpoison: drain pcplists before bailing out for non-buddy zero-refcount page
  - mm,hwpoison: Try to narrow window race for free pages
  - mm,hwpoison: introduce MF_MSG_UNSPLIT_THP
  - mm,hwpoison: return 0 if the page is already poisoned in soft-offline
  - mm,hwpoison: refactor soft_offline_huge_page and __soft_offline_page
  - mm,hwpoison: rework soft offline for in-use pages
  - mm,hwpoison: rework soft offline for free pages
  - mm,hwpoison: unify THP handling for hard and soft offline
  - mm,hwpoison: kill put_hwpoison_page
  - mm,hwpoison: refactor madvise_inject_error
  - mm,hwpoison-inject: don't pin for hwpoison_filter
  - mm, hwpoison: remove recalculating hpage
  - mm,hwpoison: cleanup unused PageHuge() check
  - scsi: Revert "target: iscsi: Wait for all commands to finish before freeing a session"
  - uce: get_user scenario support kernel recovery
  - uce: copy_from_user scenario support kernel recovery
  - mm: Modify sharepool sp_mmap() page_offset
  - support multiple node for getting phys interface
  - share_pool: Accept device_id in k2u flags
  - share_pool: Clear the usage of node_id and device_id
  - share_pool: Make multi-device support extendable
  - share_pool: Fix flags conflict
  - config: enable MEMORY_RELIABLE by default
  - mm: add sysctl to clear free list pages
  - workqueue: Provide queue_work_node to queue work near a given NUMA node
  - mm:vmscan: add the missing check of page_cache_over_limit
  - sysctl: add proc interface to set page cache limit
  - mm/vmscan: dont do shrink_slab in reclaim page cache
  - mm/vmscan: dont reclaim anon page when shrink page cache
  - filemap: dont shrink_page_cache in add_to_page_cache
  - mm/vmscan: fix unexpected shrinking page cache with vm_cache_reclaim_enable disable
  - mm/vmscan: fix frequent call of shrink_page_cache_work
  - proc/meminfo: add "FileCache" item in /proc/meminfo
  - mm: add page cache fallback statistic
  - mm: add cmdline for the reliable memory usage of page cache
  - mm: make page cache use reliable memory by default
  - shmem: Show reliable shmem info
  - shmem: Introduce shmem reliable
  - mm: Introduce fallback mechanism for memory reliable
  - mm: Add reliable memory use limit for user tasks
  - mm: thp: Add memory reliable support for hugepaged collapse
  - proc: Count reliable memory usage of reliable tasks
  - mm: Add reliable_nr_page for accounting reliable memory
  - mm: Introduce reliable flag for user task
  - meminfo: Show reliable memory info
  - mm: Introduce memory reliable
  - efi: Find mirrored memory ranges for arm64
  - efi: Make efi_find_mirror() public
  - arm64: efi: Add fake memory support
  - efi: Make efi_print_memmap() public
  - mm/memory_hotplug: allow to specify a default online_type
  - mm/memory_hotplug: convert memhp_auto_online to store an online_type
  - hv_balloon: don't check for memhp_auto_online manually
  - drivers/base/memory: store mapping between MMOP_* and string in an array
  - drivers/base/memory: map MMOP_OFFLINE to 0
  - drivers/base/memory: rename MMOP_ONLINE_KEEP to MMOP_ONLINE
  - drivers/base/memory.c: Use DEVICE_ATTR_RO and friends
  - mm/memory_hotplug: drop "online" parameter from add_memory_resource()


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2202.4.0.0138
changelog:
  - tipc: improve size validations for received domain records
  - yam: fix a memory leak in yam_siocdevprivate()
  - ipmi_si: Phytium S2500 missing timeout counter reset in intf_mem_inw
  - mm,hwpoison: Fix use-after-free in memory_failure()
  - dm-mpath: fix UAF in multipath_message()
  - usb: gadget: clear related members when goto fail
  - usb: gadget: don't release an existing dev->buf
  - dm: make sure dm_table is binded before queue request
  - cgroup-v1: Require capabilities to set release_agent
  - NFSv4: nfs_atomic_open() can race when looking up a non-regular file
  - NFSv4: Handle case where the lookup of a directory fails
  - configfs: fix a race in configfs_{,un}register_subsystem()
  - fs/filesystems.c: downgrade user-reachable WARN_ONCE() to pr_warn_once()
  - drm/i915: Flush TLBs before releasing backing store
  - moxart: fix potential use-after-free on remove path
  - memstick: rtsx_usb_ms: fix UAF


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2203.1.0.0139
changelog:
  - usb: gadget: rndis: check size of RNDIS_MSG_SET command
  - USB: gadget: validate interface OS descriptor requests
  - mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
  - udf: Restore i_lenAlloc when inode expansion fails
  - udf: Fix NULL ptr deref when converting from inline format
  - ext4: fix underflow in ext4_max_bitmap_size()
  - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds()
  - livepatch/x86: Fix incorrect use of 'strncpy'
  - tipc: improve size validations for received domain records
  - yam: fix a memory leak in yam_siocdevprivate()
  - ipmi_si: Phytium S2500 missing timeout counter reset in intf_mem_inw
  - mm,hwpoison: Fix use-after-free in memory_failure()
  - dm-mpath: fix UAF in multipath_message()
  - usb: gadget: clear related members when goto fail
  - usb: gadget: don't release an existing dev->buf
  - dm: make sure dm_table is binded before queue request
  - cgroup-v1: Require capabilities to set release_agent
  - NFSv4: nfs_atomic_open() can race when looking up a non-regular file
  - NFSv4: Handle case where the lookup of a directory fails
  - configfs: fix a race in configfs_{,un}register_subsystem()


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2203.2.0.0140
changelog:
  - mm: Fix return val in khugepaged_scan_pmd()
  - mm: do some clean up of accounting ReliableTaskUsed
  - mm: fix statistic of ReliableTaskUsed
  - mm: fix missing reclaim of low-reliable page cache
  - mm: fix statistic of ReliableFileCache in /proc/meminfo
  - mm: Add more gfp flag check in prepare_before_alloc()
  - efi: Stub mirrored_kernelcore if CONFIG_HAVE_MEMBLOCK_NODE_MAP is not enabled
  - mm: Memory reliable features can only be disabled via proc interface
  - mm: Fix reliable_debug in proc not consistent with boot parameter problem
  - f2fs: fix to do sanity check on inode type during garbage collection
  - mm: Check page status in page_reliable()
  - mm: Show ReliableTaskUsed in /proc/meminfo
  - mm: Refactor code in reliable_report_meminfo()
  - mm: Show correct reliable_user_used if PAGE_SIZE is not 4K
  - proc: Fix reliable display err in /proc/pid/status
  - Revert "mm: add page cache fallback statistic"
  - mm: fix page cache use reliable memory when reliable_debug=P
  - mm: add support for limiting the usage of reliable memory in pagecache
  - mm: add "ReliableFileCache" item in /proc/meminfo
  - mm: Introduce shmem mirrored memory limit for memory reliable
  - mm: Introduce watermark check for memory reliable
  - mm: Count mirrored pages in buddy system
  - mm: Export mem_reliable_status() for checking memory reliable status
  - mm: Make MEMORY_RELIABLE depends on HAVE_MEMBLOCK_NODE_MAP
  - efi: Disable mirror feature if kernelcore is not spcified
  - mm: Introduce proc interface to control memory reliable features
  - mm: Demote warning message in vmemmap_verify() to debug level
  - mm: Ratelimited mirrored memory related warning messages


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2203.3.0.0141
changelog:
  - crypto: pcrypt - Fix user-after-free on module unload
  - lib/iov_iter: initialize "flags" in new pipe_buffer
  - mm: Count reliable shmem used based on NR_SHMEM
  - mm: fix zoneref mapping problem in memory reliable
  - mm: disable memory reliable when kdump is in progress
  - mm: introduce "clear_freelist" kernel parameter
  - mm: fix unable to use reliable memory in page cache
  - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
  - select: Fix indefinitely sleeping task in poll_schedule_timeout()
  - mtd: nand: bbt: Fix corner case in bad block table handling
  - netns: add schedule point in ops_exit_list()
  - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
  - crypto: stm32/crc32 - Fix kernel BUG triggered in probe()
  - ext4: don't use the orphan list when migrating an inode
  - ext4: set csum seed in tmp inode while migrating to extents
  - ext4: make sure quota gets properly shutdown on error
  - ext4: make sure to reset inode lockdep class when quota enabling fails
  - cputime, cpuacct: Include guest time in user time in cpuacct.stat
  - serial: Fix incorrect rs485 polarity on uart open
  - scsi: sr: Don't use GFP_DMA
  - dm space map common: add bounds check to sm_ll_lookup_bitmap()
  - dm btree: add a defensive bounds check to insert_at()
  - ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
  - ACPICA: Utilities: Avoid deleting the same object twice in a row
  - jffs2: GC deadlock reading a page that is used in jffs2_write_begin()
  - bpf: Do not WARN in bpf_warn_invalid_xdp_action()
  - net: bonding: debug: avoid printing debug logs when bond is not notifying peers
  - net-sysfs: update the queue counts in the unregistration path
  - dmaengine: pxa/mmp: stop referencing config->slave_id
  - scsi: ufs: Fix race conditions related to driver data
  - iommu/io-pgtable-arm: Fix table descriptor paddr formatting
  - ext4: avoid trim error on fs with small groups
  - net: mcs7830: handle usb read errors properly
  - tpm: add request_locality before write TPM_INT_ENABLE
  - netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
  - xfrm: state and policy should fail if XFRMA_IF_ID 0
  - xfrm: interface with if_id 0 should return error
  - crypto: stm32/cryp - fix double pm exit
  - xfrm: fix a small bug in xfrm_sa_len()
  - sched/rt: Try to restart rt period timer when rt runtime exceeded
  - serial: amba-pl011: do not request memory region twice
  - tty: serial: uartlite: allow 64 bit address
  - netfilter: bridge: add support for pppoe filtering
  - crypto: qce - fix uaf on qce_ahash_register_one
  - shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode
  - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet
  - ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate
  - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()
  - ipv6: Do cleanup if attribute validation fails in multipath route
  - ipv6: Continue processing multipath route even if gateway attribute is invalid
  - ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route
  - ipv6: Check attribute length for RTA_GATEWAY in multipath route
  - tracing: Tag trace_percpu_buffer as a percpu pointer
  - tracing: Fix check for trace_percpu_buffer validity in get_trace_buf()
  - net: fix use-after-free in tw_timer_handler
  - udp: using datalen to cap ipv6 udp max gso segments
  - selinux: initialize proto variable in selinux_ip_postroute_compat()
  - x86/pkey: Fix undefined behaviour with PKRU_WD_BIT
  - ipmi: fix initialization when workqueue allocation fails
  - ipmi: bail out if init_srcu_struct fails
  - bonding: fix ad_actor_system option setting to default
  - ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
  - net: skip virtio_net_hdr_set_proto if protocol already set
  - net: hns3: update hns3 version to 22.2.1
  - net: hns3: fix RMW issue for VLAN filter switch
  - net: hns3: fix pf vlan filter out of work after self test
  - arm64: acpi: fix UBSAN warning
  - sched: Fix sleeping in atomic context at cpu_qos_write()
  - io_uring: don't re-setup vecs/iter in io_resumit_prep() is already there
  - io_uring: don't double complete failed reissue request
  - io_uring: remove redundant initialization of variable ret
  - block: don't ignore REQ_NOWAIT for direct IO
  - io_uring: re-issue block requests that failed because of resources
  - dm multipath: fix missing blk_account_io_done() in error path
  - block: account inflight from blk_account_io_start() if 'precise_iostat' is set
  - block: add a switch for precise iostat accounting
  - blk-throttle: Set BIO_THROTTLED when bio has been throttled
  - bfq: fix use-after-free in bfq_dispatch_request
  - hugetlbfs: fix a truncation issue in hugepages parameter


author: xingxing <xingxing9@h-partners.com> - 0.7.14-6
changelog:
  - Type:cves
  - CVE:CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-20
  21-44576-CVE-2021-44577
  - SUG:NA
  - DESC:fix CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-C
  VE-2021-44576-CVE-2021-44577


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix memory leaks in XPointer string-range function
         fix null pointer deref in xmlXPtrRangeInsideFunction
         stop using maxParserDepth in xpath.c
         hardcode maximum XPath recursion depth
         fix XPath recursion limit


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix following issues:
         fix unsigned integer overflow in htmlParseTryOrFinish
         fix undefined behavior in UTF16LEToUTF8
         fix SEGV in xmlSAXParseFileWithData
         encoding: fix memleak in xmlRegisterCharEncodingHandler()
         fix null deref in xmlStringGetNodeList
         fix memory leak in xmlParseElementMixedContentDecl
         fix slow parsing of HTML with encoding errors


author: fuanan <fuanan3@h-partners.com> - 2.9.10-25
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: wulei <wulei80@huawei.com> - 5.7.21-4
changelog:
  - Fix innodb.innodb fail on aarch64
  - Fix grant_user_lock as root
  - Update fail tests list on glibc 2.33


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: wangye <wangye70@huawei.com> - 8.1.1-2
changelog:
  - Type:CVE
  - CVE:CVE-2021-27921 CVE-2021-27922 CVE-2021-27923
  - SUG:NA
  - DESC: fix CVE-2021-27921CVE-2021-27922CVE-2021-27923


author: hanhui <hanhui15@huawei.com> - 8.1.1-3
changelog:
  - Type:bugfix
  - CVE:CVE-2021-28675 CVE-2021-28676 CVE-2021-28677 CVE-2021-28678 CVE-2021-25287 CVE-2021-25288
  - SUG:NA
  - DESC: incorporate community patch


author: hanxinke<hanxinke@huawei.com> - 3.7.9-12
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:expose posix_spawn in os module
         fix leaks and errors in new os.posix_spawn
         improve error handing and fix a reference
         fix using of freed memory in old versions
         add signal.valid_signals
         make the sigset_t converter available
         add flag capabilities to posix_spawn
         pass os.environ in test_posix test_specify
         fix TestPosixSpawn.test_close_file
         change the file_actions parameter of os.posix_spawn
         subprocess uses os.posix_spawn in some case
         add os.posix_spawnp
         subprocess can use posix_spawn with pipes
         subprocess close pipes fds by using ExitStack
         guard definition of convert_sched_param with POSIX_SPAWN_SETSCHEDULER
         add setsid parameter to os.posix_spawn() and os.posix_spawnp()
         skip test_start_new_session() of posix_spawn
         fix function name in os.posix_spawnp() errors
         ensure os.posix_spawn() handles None
         rewrite setsid test for os.posix_spawn
         add user and group parameters to subproces
         fix buildbot failures
         posix_spawn doesn't support uid gid
         add umask support to subprocess
         use bin true in test_subprocess
         handle the case when there is no 'true' command
         fix test_subprocess if nobody user doesn't exist
         subprocess: Use vfork() instead of fork() on Linux when safe
         subprocess: Fix handling of pthread_sigmask() errors
         allow setsid() after vfork() on Linux
         fix memory leak in subprocess.Popen() in case of uid/gid overflow
         Unify cleanup in subprocess_fork_exec()


author: hehuazhen<hehuazhen@huawei.com> - 3.7.9-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Use gdbm_count for dbm_length if possible
         Don't override PYTHONPATH which is already set by the user


author: hehuazhen<hehuazhen@huawei.com> - 3.7.9-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix _PyEval_FiniThreads
         rewrite _PyObject_IsFreed unit tests
         get test_capi passing with address sanitize
         remove use after free reference in ctypes
         fix memory leak in _asynciomodule.c


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable profile guided optimizations for x86_64 and i686 architectures


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bpo-43124: Fix smtplib multiple CRLF injection
         bpo-12800: tarfile: Restore fix from 011525ee9
         bpo-41815: SQLite: segfault if backup called on closed database
         bpo-42183: Fix a stack overflow error for asyncio Task or Future repr()
         bpo-45001: Make email date parsing more robust against malformed input


author: liyangyang <liyangyang20@huawei.com> - 35.0-1
changelog:
  - DESC: Currently 28.1 is not commercially available and need to be modified to 35.0 with more complete features


author: tangchengchang <tangchengchang@huawei.com> - 35.0-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Rename the previous patch to facilitate subsequent management


author: wutao <wutao61@huawei.com> - 2.5.8-3
changelog:
  - fix CVE-2020-25613
  - WEBrick,a simple HTTP server bundled with Ruby,had not
  - checked the transfer-encoding header value rigorously.
  - An attacker may potentially exploit this issue to bypass
  - a reverse proxy,which may lead to an HTTP Request Smuggling
  - attack.


author: shixuantong <shixuantong@huawei.com> - 2.5.8-114
changelog:
  - Type:cves
  - ID:CVE-2021-31799 CVE-2021-31810 CVE-2021-32066
  - SUG:NA
  - DESC:fix CVE-2021-31799 CVE-2021-31810 CVE-2021-32066


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-4
changelog:
  - Type:cves
  - ID:CVE-2020-27840 CVE-2021-20277 CVE-2021-20254
  - SUG:NA
  - DESC:fix CVE-2020-27840 CVE-2021-20277 CVE-2021-20254


author: zengwefeng <zwfeng@huawei.com> - 4.11.12-5
changelog:
  - Type:cves
  - ID:CVE-2020-14318 CVE-2020-14323 CVE-2020-14383
  - SUG:NA
  - DESC:fix CVE-2020-14318 CVE-2020-14323 CVE-2020-14383


author: xihaochen <xihaochen@huawei.com> - 4.11.12-7
changelog:
  - Type:cves
  - ID:CVE-2020-25717,CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738
  - SUG:NA
  - DESC:fix CVE-2020-25717,CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-8
changelog:
  - Type:cves
  - ID:CVE-2021-43566
  - SUG:NA
  - DESC:backport patches to fix CVE-2021-43566:
         s3/lib: add parent_smb_fname function
         smbd: use parent_smb_fname in check_parent_access
         smbd: use parent_smb_fname in inherit_new_acl
         s3/VFS: Add SMB_VFS_MKDIRAT
         vfs_full_audit: pass conn to smb_fname_str_do_log
         s3/VFS: change connection_struct cwd_fname to cwd_fsp
         s3/smbd: Change mkdir_internal to call SMB_VFS_MKDIRAT
         smbd: use parent_smb_fname in mkdir_internal
         fix CVE-2021-43566


author: yuboyun <yuboyun@huawei.com> - 4.11.6-8
changelog:
  - Type:cves
  - ID:CVE-2020-10730 CVE-2020-10745 CVE-2020-14303 CVE-2020-10760
  - SUG:NA
  - DESC:fix CVE-2020-10730CVE-2020-10745CVE-2020-14303CVE-2020-10760


author: yangmingtai <yangmingtai@huawei.com> - 243-52
changelog:
  - fix some issue: 1.fix set blkio.bfq.weight 
                    2.udevadm fix --tag-match
                    3.fix check of Listen* arguments


author: wangyue <wangyue92@huawei.com> - 1:9.0.10-18
changelog:
  - Type:cve
  - ID: CVE-2021-25122 CVE-2021-25329
  - SUG:restart
  - DESC: fix CVE-2021-25122 CVE-2021-25329


author: openEuler Buildteam <buildteam@openeuler.org> - 2.8.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revise the bogus date in changelog and delete the unnecessary subpackage "udisks2-iscsi"


author: yuanxin<yuanxin24@huawei.com> - 2:8.2-11
changelog:
  - Type:CVE
  - ID:CVE-2021-4166 CVE-2021-4192 CVE-2021-4193
  - SUG:NA
  - DESC:fix CVE-2021-4166 CVE-2021-4192 CVE-2021-4193


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-15
changelog:
  - Type:CVE
  - ID:CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413
  - SUG:NA
  - DESC:fix CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413


author: tianwei <tianwei12@h-partners.com> - 2:8.2-16
changelog:
  - Type:CVE
  - ID:CVE-2022-0443 CVE-2022-0392 CVE-2022-0417
  - SUG:NA
  - DESC:fix CVE-2022-0443 CVE-2022-0392 CVE-2022-0417


