# changelog

author: sunhai <sunhai10@huawei.com> - 36.16.5-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pxe kickstart version with local pykickstart
         and with build save patch by source4


author: sunhai <sunhai10@huawei.com> - 36.16.5-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add logo with install
         the kickstart version change to patch


author: Qingqing Li <liqingqing3@huawei.com> - 36.16.5-11
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:cgroup files is a additional enhanced cgroup feature, which will
         limit cgroup opened files, add cgroup_disable=files to
         default cmdline to disable this feature to keep cgroup's default behavior.


author: shenyangyang<shenyangyang4@huawei.com> - 1.7.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
         to /usr/lib/xxxx


author: huangyu <huangyu106@huawei.com> - 32:9.16.23-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix catalog zone reconfiguration crash
  Improve the logging on failed TCP accept
  Separate the locked parts of dns_zone_catz_enable-di
  Check if key-metadata is modified before writing
  Fix CID-352776 Concurrent data access violations
  Require valid key for dst_key functions


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
  - SUG:NA
  - DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: gaihuiying <eaglegai@163.com> - 7.79.1-5
changelog:
  - Type:cves
  - CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
  - SUG:NA
  - DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776


author: gaihuiying <eaglegai@163.com> - 7.79.1-7
changelog:
  - Type:cves
  - CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
  - SUG:NA
  - DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208


author: gaihuiying <eaglegai@163.com> - 7.79.1-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix build error when add --disable-http-auth configure option


author: yanglu <yanglu72@h-partners.com> - 7.79.1-12
changelog:
  - Type:cves
  - CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
  - SUG:NA
  - DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916


author: xinghe <xinghe2@h-partners.com> - 7.79.1-14
changelog:
  - Type:cves
  - CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
  - SUG:NA
  - DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916


author: wuchangsheng <wuchangsheng2@huawei.com> - 1.0.1-40
changelog:
  - add dfx rcv_nxt info
    mbuf private cache line align
    send pkts index bug fix
    free recv pkts in main loop


author: benniaobufeijiushiji <linda7@huawei.com> - 10.3.1-20
changelog:
  - Type:Sync
  - ID:NA
  - SUG:NA
  - DESC:Sync patch from openeuler/gcc
         Bugfix for loop-distribution, semi-relayout and mull64.


author: panxiaohe <panxiaohe@huawei.com> - 2.30.0-4
changelog:
  - Fix CVE-2021-29468
  - Add gcc and gettext to BuildRequires
    - necessary for building and msgfmt command


author: fuanan <fuanan3@h-partners.com> - 2.33.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch


author: shixuantong <shixuantong1@huawei.com> - 2.34-102
changelog:
  - elf: Do not completely clear reused namespace in dlmopen (bug 29600)
  - elf: Remove allocate use on _dl_debug_printf
  - elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
  - Fix OOB read in stdlib thousand grouping parsing [BZ#29727]


author: wanghongliang <wanghongliang@loongson.cn> - 2.34-105
changelog:
  - LoongArch Port
  - Add login-Add-back-libutil-as-an-empty-library.patch from upstream
    to fix libutil build error.
  - Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
    to fix memory bug
  - After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
  - Left some test fails in testsuite_whitelist.


author: Xue Liu <liuxue@loongson.cn> - 2.34-106
changelog:
  - LoongArch: Optimize some string functions including memcpy, memmove,
    memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.


author: Yang Yanchao <yangyanchao6@huawei.com> - 2.34-109
changelog:
  - Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
    versions, this symbol is required to keep the previous items compatible.


author: hanchao <hanchao47@huawei.com> - 1.17.3-5
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
  	CVE-2022-30635,CVE-2022-30630,CVE-2022-30632,CVE-2022-28131,
  	CVE-2022-30631,CVE-2022-30629,CVE-2022-30634


author: hanchao<hanchao47@huawei.com> - 1.17.3-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: golang: modify the golang.spec to remove unnecessary files
  	from golang-help package


author: hanchao <hanchao47@huawei.com> - 1.17.3-10
changelog:
  - Type:CVE
  - CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
  - SUG:NA
  - DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879


author: hanchao <hanchao47@huawei.com> - 1.17.3-12
changelog:
  - Type:CVE
  - CVE:CVE-2022-41716
  - SUG:NA
  - DESC: remove hard code and strong dependency of git, subversion and mercurial


author: hanchao <hanchao47@huawei.com> - 1.17.3-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
  - SUG:NA
  - DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717


author: wanglu <wanglu210@huawei.com> - 1:2.06-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tests: Disable blkid cache usage
         disk/efi/efidisk: Pass buffers with higher alignment


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
         in grub2-tools to 644


author: mengyingkun <mengyingkun@loongson.cn> - 1:2.06-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:loongarch modify the location where initrd is loaded into memory


author: gaihuiying <eaglegai@163.com> - 2.4.51-4
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-8
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556


author: liweiganga <liweiganga@uniontech.com> - 2.4.51-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:change default value of HeartbeatMaxServers
         fix setting and comparison of IPs fileds
         avoid voerflow in case of indecently large session
         make ap_escape_quotes() work correctly
         fix lua_request with cast first
         Handle children killed pathologically
         mod_md do not interfere with requests if challenge type http-01


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:reduce the dependency of httpd on system-logos installation


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-13
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: yangjiaqi <yangjiaqi16@huawei.com> - 2.0.17-10
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: remove chmod 751 permission for dirs by engine when user-remap enabled


author: chenyanpanHW <chenyanpan@huawei.com> - 10.06-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaoxingwang <gaoxingwang1@huawei.com> - 10.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1.2-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:after executing hook scripts, remove their executable permission
         of non root users


author: sunsuwan<sunsuwan3@huawei.com> - 5.15.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lnstat: fix buffer overflow in header output 
         libnetlink: fix socket leak in rtnl_open_byptoyo
         lnstat: fix strdup leak in w argument parsing
         q_cake: allow fix buffer overflow on large labels
         tc flower: fix buffer overflow on large labels
         tc_tuil: fix parsing action control with space and sl
         tipc: fix keylen check
         fix devlink health dump command without arg
         tc: em_u32: fix offset parsing
         l2tp fix typo in AF_INET6 checksum JSON print
         ip: Fix size_columns() for very large values
         ip: Fix size_columns() invocation that passes a 32-bit quantity


author: jiangheng<jiangheng14@huawei.com> - 5.15.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bridge: fix memory leak when doing fdb get
         mptcp: fix memory leak when doing 'endpoint show'
         mptcp: fix memory leak when getting limits
         ip neigh: fix memory leak when doing 'get'
         ip address: fix memory leak when specifying device
         fix marco expansion in changelog


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add epoch version in changelog to fix check_spec_file ci failure


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.1.0.76
changelog:
  - coresight: trbe: Enable ACPI/Platform automatic module loading
  - arm64/trbe: Add initial MADT/SPE probing
  - ACPI 6.5: MADT: add support for trace buffer extension in GICC
  - coresight: Return the pointer of @pdata when not "fwnode"
  - blk-mq: don't access request_wrapper if request is not allocated from block layer
  - blk-mq: fix kabi broken due to request_wrapper
  - ide-cd: don't clear rq_flags after blk_get_request
  - iommu: Fix error handling in probe_acpi_namespace_devices()
  - !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
  - !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
  - net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
  - net: hns3: fix getting supported parameter from driver in hclge_set_wol
  - net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
  - net: hns3: fix return value check bug of rx copybreak
  - net: hns3: fix incorrect hw rss hash type of rx packet


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.3.0.77
changelog:
  - !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
  - Revert "ipvlan: Modify the value of ipvlan modes"
  - net/af_packet: make sure to pull mac header
  - KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
  - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
  - arm64: fix a concurrency issue in emulation_proc_handler()
  - vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
  - tools include UAPI: Sync linux/vhost.h with the kernel sources
  - tools include UAPI: Sync linux/vhost.h with the kernel sources
  - tools include UAPI: Sync linux/vhost.h with the kernel sources
  - vhost-vdpa: call vhost_vdpa_cleanup during the release
  - vhost: allow batching hint without size
  - vdpa_sim: set vringh notify callback
  - virtio_pci: struct virtio_pci_common_cfg add queue_reset
  - virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
  - virtio: use virtio_reset_device() when possible
  - virtio: document virtio_reset_device
  - virtio: wrap config->reset calls
  - virtio_pci: introduce helper to get/set queue reset
  - virtio_pci: extract the logic of active vq for modern pci
  - vhost-vdpa: uAPI to suspend the device
  - vhost-vdpa: introduce SUSPEND backend feature bit
  - vdpa: Add suspend operation
  - vhost-vdpa: Call ida_simple_remove() when failed
  - vDPA: fix 'cast to restricted le16' warnings in vdpa.c
  - vDPA: !FEATURES_OK should not block querying device config space
  - vdpa: make get_vq_group and set_group_asid optional
  - vhost-vdpa: return -EFAULT on copy_to_user() failure
  - vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
  - vhost-vdpa: support ASID based IOTLB API
  - vhost-vdpa: introduce uAPI to set group ASID
  - vhost-vdpa: uAPI to get virtqueue group id
  - vhost-vdpa: introduce uAPI to get the number of address spaces
  - vhost-vdpa: introduce uAPI to get the number of virtqueue groups
  - vhost-vdpa: introduce asid based IOTLB
  - vhost: support ASID in IOTLB API
  - vhost_iotlb: split out IOTLB initialization
  - vdpa: introduce config operations for associating ASID to a virtqueue group
  - vdpa: multiple address spaces support
  - vdpa: introduce virtqueue groups
  - vhost-vdpa: switch to use vhost-vdpa specific IOTLB
  - vhost-vdpa: passing iotlb to IOMMU mapping helpers
  - virtio-vdpa: don't set callback if virtio doesn't need it
  - vhost: move the backend feature bits to vhost_types.h
  - net/vdpa: Use readers/writers semaphore instead of cf_mutex
  - net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
  - vdpa: Add support for querying vendor statistics
  - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
  - vhost: handle error while adding split ranges to iotlb
  - vdpa: change the type of nvqs to u32
  - vhost: fix hung thread due to erroneous iotlb entries
  - vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
  - vdpa: Protect vdpa reset with cf_mutex
  - vdpa: Avoid taking cf_mutex lock on get status
  - vdpa: Use BIT_ULL for bit operations
  - vdpa: Support reporting max device capabilities
  - vdpa: Add support for returning device configuration information
  - vdpa: Allow to configure max data virtqueues
  - vdpa: Read device configuration only if FEATURES_OK
  - vdpa: Sync calls set/get config/status with cf_mutex
  - vdpa: Provide interface to read driver features
  - vdpa: Mark vdpa_config_ops.get_vq_notification as optional
  - vdpa: Avoid duplicate call to vp_vdpa get_status
  - docs: document sysfs ABI for vDPA bus
  - vhost-vdpa: clean irqs before reseting vdpa device
  - vdpa: Enable user to set mac and mtu of vdpa device
  - vdpa: Use kernel coding style for structure comments
  - vdpa: Introduce query of device config layout
  - vdpa: Introduce and use vdpa device get, set config helpers
  - vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
  - virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
  - vdpa: min vq num of vdpa device cannot be greater than max vq num
  - vdpa: add new callback get_vq_num_min in vdpa_config_ops
  - vhost_vdpa: unset vq irq before freeing irq
  - vdpa: potential uninitialized return in vhost_vdpa_va_map()
  - vhost-iotlb: Add an opaque pointer for vhost IOTLB
  - vdpa: Support transferring virtual addressing during DMA mapping
  - vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
  - vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
  - vhost-vdpa: Handle the failure of vdpa_reset()
  - vdpa: Fix some coding style issues
  - vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
  - vdpa: Add documentation for vdpa_alloc_device() macro
  - virtio/vdpa: clear the virtqueue state during probe
  - vp_vdpa: correct the return value when fail to map notification
  - virito_pci libray: hide vp_modern_map_capability()
  - vhost/vdpa: Remove the restriction that only supports virtio-net devices
  - virtio_pci_modern: hide vp_modern_get_queue_notify_off()
  - vdpa: Follow kdoc comment style
  - vdpa: Follow kdoc comment style
  - virtio_vdpa: don't warn when fail to disable vq
  - vdpa: Use simpler version of ida allocation
  - vhost_vdpa: switch to vmemdup_user()


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.4.0.78
changelog:
  - RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
  - RDMA/hns: Fix AH attr queried by query_qp
  - RDMA/hns: Kernel notify usr space to stop ring db


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.8.0.80
changelog:
  - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
  - Bluetooth: L2CAP: Fix build errors in some archs
  - cpuidle: add cpuidle-haltpoll driver module parameter
  - clk: imx: Add check for kcalloc
  - x86/cpu/hygon: Set __max_die_per_package on Hygon
  - mm/dynamic_hugetlb: fix clear PagePool without lock protection
  - mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
  - mm/swapfile: use new way to fix broken kabi in swap_info_struct
  - block: always align request_wrapper to cacheline
  - block: fix crash on cmpxchg for request_wrapper
  - efi/libstub: Fix build error in efi-stub.c for riscv
  - mm: init: Fix build waring for ascend enable features
  - mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
  - ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
  - xen/netback: fix build warning
  - xen/netback: Ensure protocol headers don't fall in the non-linear area
  - block: only use cmpxchg64 in 64bit platform
  - proc: proc_skip_spaces() shouldn't think it is working on C strings
  - proc: avoid integer type confusion in get_proc_long
  - sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.10.0.82
changelog:
  - scsi: iscsi: remove .unbind_conn from iscsi_transport
  - Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.13.2.89
changelog:
  - media: mceusb: Use new usb_control_msg_*() routines
  - perf: hisi: Fix read sccl_id and ccl_id error in TSV200
  - mm: add cond_resched() in swapin_walk_pmd_entry()
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
  - livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
  - dm thin: Use last transaction's pmd->root when commit failed
  - zram: avoid race between zram_remove and disksize_store
  - zram: don't fail to remove zram during unloading module
  - blk-mq: fix kabi broken in struct bio
  - blk-mq: fix kabi broken in struct request
  - block, bfq: fix possible uaf for 'bfqq->bic'
  - block, bfq: fix null pointer dereference in bfq_bio_bfqg()
  - blk-mq: set default elevator as deadline in case of hctx shared tagset
  - ext2: replace bh_submit_read() helper with bh_read()
  - ufs: replace ll_rw_block()
  - udf: replace ll_rw_block()
  - reiserfs: replace ll_rw_block()
  - ocfs2: replace ll_rw_block()
  - ntfs3: replace ll_rw_block()
  - jbd2: replace ll_rw_block()
  - isofs: replace ll_rw_block()
  - gfs2: replace ll_rw_block()
  - fs/buffer: replace ll_rw_block()
  - fs/buffer: add some new buffer read helpers
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
  - xen/netback: don't call kfree_skb() with interrupts disabled
  - media: dvb-core: Fix UAF due to refcount races at releasing
  - wifi: wilc1000: validate pairwise and authentication suite offsets
  - wifi: wilc1000: validate number of channels
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
  - drm/amdkfd: Check for null pointer after calling kmemdup


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.14.2.90
changelog:
  - !341 Backport CVEs and fs bugfixes
  - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
  - bfq: fix null-ptr-deref in bfq_pd_offline
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access()
  - ksmbd: fix heap-based overflow in set_ntacl_dacl()
  - ksmbd: prevent out of bound read for SMB2_WRITE
  - ksmbd: validate length in smb2_write()
  - xfs: fix super block buf log item UAF during force shutdown
  - xfs: wait iclog complete before tearing down AIL
  - xfs: get rid of assert from xfs_btree_islastblock


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.15.0.91
changelog:
  - !347 Backport CVEs and fs bugfixes
  - io_uring: kill goto error handling in io_sqpoll_wait_sq()
  - ext4: fix bad checksum after online resize
  - xfs: fix use-after-free in xattr node block inactivation
  - USB: core: Fix RST error in hub.c
  - USB: core: Prevent nested device-reset calls


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.16.0.92
changelog:
  - !358 Backport CVEs, bugfixes and other
  - binder: fix UAF of alloc->vma in race with munmap()
  - io_uring: add missing item types for splice request
  - xfs: fix overfilling of reserve pool
  - xfs: always succeed at setting the reserve pool size
  - xfs: remove infinite loop when reserving free block pool
  - xfs: use current->journal_info for detecting transaction recursion
  - fix kabi broken due to may_pollfree
  - io_uring: disable polling pollfree files
  - ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
  - driver: char: delete svm.c
  - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
  - fs/ntfs3: Fix attr_punch_hole() null pointer derenference
  - tracing/osnoise: Do not unregister events twice
  - tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
  - !351 AMD: Fix cpu capabilities incorrect detection bug.
  - x86/cpufeatures: Fix cpu capabilities incorrect detection.


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.17.0.93
changelog:
  - !372 Backport 5.10.141 LTS
  - net: neigh: don't call kfree_skb() under spin_lock_irqsave()
  - net/af_packet: check len when min_header_len equals to 0
  - lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
  - netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
  - drm/amdgpu: Increase tlb flush timeout for sriov
  - drm/amd/display: Fix pixel clock programming
  - drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid
  - s390/hypfs: avoid error message under KVM
  - neigh: fix possible DoS due to net iface start/stop loop
  - drm/amd/display: clear optc underflow before turn off odm clock
  - drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
  - drm/amd/display: Avoid MPC infinite loop
  - mmc: mtk-sd: Clear interrupts when cqe off/disable
  - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
  - fbdev: fb_pm2fb: Avoid potential divide by zero error
  - net: fix refcount bug in sk_psock_get (2)
  - HID: hidraw: fix memory leak in hidraw_release()
  - udmabuf: Set the DMA mask for the udmabuf device (v2)
  - HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
  - Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
  - kbuild: Fix include path in scripts/Makefile.modpost
  - s390/mm: do not trigger write fault when vma does not allow VM_WRITE
  - crypto: lib - remove unneeded selection of XOR_BLOCKS
  - x86/nospec: Fix i386 RSB stuffing
  - x86/nospec: Unwreck the RSB stuffing
  - !368 Backport CVEs and bugfixes
  - mm/memory: return vm_fault_t result from migrate_to_ram() callback
  - net: sched: disallow noqueue for qdisc classes
  - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
  - xfs: Fix deadlock on xfs_inodegc_worker
  - net: sched: cbq: dont intepret cls results when asked to drop
  - net: sched: atm: dont intepret cls results when asked to drop
  - scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
  - of/fdt: Don't calculate initrd size from DT if start > end
  - lib/cmdline: avoid page fault in next_arg
  - rndis_wlan: Prevent buffer overflow in rndis_query_oid
  - mm/vmpressure: fix data-race with memcg->socket_pressure
  - !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
  - kasan: add kasan support for memcpy_mcs()
  - arm64: fix return value type of memcpy_mcs()
  - !363 AMD: Support svm guest when host CR4.LA57 is set.
  - KVM: x86: Allow CPU to force vendor-specific TDP level
  - !338 Fix virtio-gpu free issues
  - drm/virtio: free virtqueues on probe failure
  - drm/virtio: Fixes a potential NULL pointer dereference on probe failure


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.18.0.94
changelog:
  - !385 Backport CVEs and bugfixes
  - !384 Backport 5.10.142 LTS
  - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
  - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
  - cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
  - net: sched: fix race condition in qdisc_graft()
  - macvlan: enforce a consistent minimal mtu
  - net: switch to storing KCOV handle directly in sk_buff
  - kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
  - tcp/udp: Make early_demux back namespacified.
  - net: Use u64_stats_fetch_begin_irq() for stats fetch.
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
  - ext4: fix use-after-free in ext4_orphan_cleanup
  - ext4: fix null-ptr-deref in ext4_write_info
  - block: don't allow a disk link holder to itself
  - hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
  - scsi: fix iscsi rescan fails to create block
  - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
  - mm: memcontrol: fix potential oom_lock recursion deadlock
  - irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
  - xfs: fix potential log item leak
  - USB: serial: ch341: fix disabled rx timer on older devices
  - USB: serial: ch341: fix lost character on LCR updates
  - usb: dwc3: disable USB core PHY management
  - usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
  - usb: dwc3: fix PHY disable sequence
  - mmc: core: Fix UHS-I SD 1.8V workaround branch
  - btrfs: harden identification of a stale device
  - drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
  - ALSA: seq: Fix data-race at module auto-loading
  - ALSA: seq: oss: Fix data-race for max_midi_devs access
  - ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
  - net: mac802154: Fix a condition in the receive path
  - ip: fix triggering of 'icmp redirect'
  - wifi: mac80211: Fix UAF in ieee80211_scan_rx()
  - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
  - driver core: Don't probe devices after bus_type.match() probe deferral
  - usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
  - s390: fix nospec table alignments
  - s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
  - usb-storage: Add ignore-residue quirk for NXP PN7462AU
  - USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
  - usb: dwc2: fix wrong order of phy_power_on and phy_init
  - usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
  - USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
  - USB: serial: option: add Quectel EM060K modem
  - USB: serial: option: add support for OPPO R11 diag port
  - USB: serial: cp210x: add Decagon UCA device id
  - xhci: Add grace period after xHC start to prevent premature runtime suspend.
  - thunderbolt: Use the actual buffer in tb_async_error()
  - xen-blkfront: Advertise feature-persistent as user requested
  - xen-blkback: Advertise feature-persistent as user requested
  - mm: pagewalk: Fix race between unmap and page walker
  - xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
  - KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
  - gpio: pca953x: Add mutex_lock for regcache sync in PM
  - hwmon: (gpio-fan) Fix array out of bounds access
  - clk: bcm: rpi: Add missing newline
  - clk: bcm: rpi: Prevent out-of-bounds access
  - clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
  - clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
  - Input: rk805-pwrkey - fix module autoloading
  - clk: core: Fix runtime PM sequence in clk_core_unprepare()
  - Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
  - clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
  - drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
  - USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
  - misc: fastrpc: fix memory corruption on open
  - misc: fastrpc: fix memory corruption on probe
  - iio: adc: mcp3911: use correct formula for AD conversion
  - iio: ad7292: Prevent regulator double disable
  - Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
  - tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
  - vt: Clear selection before changing the font
  - powerpc: align syscall table for ppc32
  - serial: fsl_lpuart: RS485 RTS polariy is inverse
  - net/smc: Remove redundant refcount increase
  - Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
  - tcp: annotate data-race around challenge_timestamp
  - sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
  - kcm: fix strp_init() order and cleanup
  - ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
  - net/sched: fix netdevice reference leaks in attach_default_qdiscs()
  - net: sched: tbf: don't call qdisc_put() while holding tree lock
  - Revert "xhci: turn off port power in shutdown"
  - wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
  - ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
  - ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
  - ieee802154/adf7242: defer destroy_workqueue call
  - iio: adc: mcp3911: make use of the sign bit
  - platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
  - drm/msm/dsi: Fix number of regulators for SDM660
  - drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
  - drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
  - drm/msm/dsi: fix the inconsistent indenting


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.19.0.95
changelog:
  - !403 Backport 5.10.145 - 5.10.149 LTS
  - wifi: mac80211: don't parse mbssid in assoc response
  - mac80211: mlme: find auth challenge directly
  - Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
  - misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
  - misc: pci_endpoint_test: Aggregate params checking for xfer
  - Input: xpad - fix wireless 360 controller breaking after suspend
  - Input: xpad - add supported devices as contributed on github
  - wifi: cfg80211: update hidden BSSes to avoid WARN_ON
  - wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
  - wifi: cfg80211: ensure length byte is present before access
  - wifi: cfg80211/mac80211: reject bad MBSSID elements
  - random: use expired timer rather than wq for mixing fast pool
  - random: avoid reading two cache lines on irq randomness
  - USB: serial: qcserial: add new usb-id for Dell branded EM7455
  - efi: Correct Macmini DMI match in uefi cert quirk
  - ALSA: hda: Fix position reporting on Poulsbo
  - random: clamp credited irq bits to maximum mixed
  - random: restore O_NONBLOCK support
  - Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
  - rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
  - USB: serial: ftdi_sio: fix 300 bps rate for SIO
  - mmc: core: Terminate infinite loop in SD-UHS voltage switch
  - mmc: core: Replace with already defined values for readability
  - drm/amd/display: skip audio setup when audio stream is enabled
  - drm/amd/display: update gamut remap if plane has changed
  - net: atlantic: fix potential memory leak in aq_ndev_close()
  - arch: um: Mark the stack non-executable to fix a binutils warning
  - um: Cleanup compiler warning in arch/x86/um/tls_32.c
  - um: Cleanup syscall_handler_t cast in syscalls_32.h
  - ALSA: hda/hdmi: Fix the converter reuse for the silent stream
  - net/ieee802154: fix uninit value bug in dgram_sendmsg
  - scsi: qedf: Fix a UAF bug in __qedf_probe()
  - ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
  - dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
  - dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
  - dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
  - firmware: arm_scmi: Add SCMI PM driver remove routine
  - compiler_attributes.h: move __compiletime_{error|warning}
  - powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
  - mm: gup: fix the fast GUP race against THP collapse
  - xsk: Inherit need_wakeup flag for shared sockets
  - perf tools: Fixup get_current_dir_name() compilation
  - docs: update mediator information in CoC docs
  - Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
  - ceph: don't truncate file in atomic_open
  - nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
  - ALSA: hda/hdmi: fix warning about PCM count when used with SOF
  - x86/alternative: Fix race in try_get_desc()
  - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
  - clk: iproc: Do not rely on node name for correct PLL setup
  - clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
  - selftests: Fix the if conditions of in test_extra_filter()
  - net: stmmac: power up/down serdes in stmmac_open/release
  - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
  - nvme: add new line after variable declatation
  - cxgb4: fix missing unlock on ETHOFLD desc collect fail path
  - net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
  - usbnet: Fix memory leak in usbnet_disconnect()
  - Input: melfas_mip4 - fix return value check in mip4_probe()
  - Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
  - ASoC: tas2770: Reinit regcache on reset
  - soc: sunxi: sram: Fix debugfs info for A64 SRAM C
  - soc: sunxi: sram: Fix probe function ordering issues
  - soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
  - soc: sunxi: sram: Prevent the driver from being unbound
  - soc: sunxi: sram: Actually claim SRAM regions
  - reset: imx7: Fix the iMX8MP PCIe PHY PERST support
  - ARM: dts: am33xx: Fix MMCHS0 dma properties
  - swiotlb: max mapping size takes min align mask into account
  - media: rkvdec: Disable H.264 error detection
  - media: dvb_vb2: fix possible out of bound access
  - mm: fix madivse_pageout mishandling on non-LRU page
  - mm/migrate_device.c: flush TLB while holding PTL
  - mm: prevent page_frag_alloc() from corrupting the memory
  - mm/page_alloc: fix race condition between build_all_zonelists and page allocation
  - mmc: hsq: Fix data stomping during mmc recovery
  - mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
  - libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
  - net: mt7531: only do PLL once after the reset
  - ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
  - ARM: dts: integrator: Tag PCI host with device_type
  - clk: ingenic-tcu: Properly enable registers before accessing timers
  - Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
  - net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
  - thunderbolt: Explicitly reset plug events delay back to USB4 spec value
  - usb: typec: ucsi: Remove incorrect warning
  - uas: ignore UAS for Thinkplus chips
  - usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
  - uas: add no-uas quirk for Hiksemi usb_disk
  - btrfs: fix hang during unmount when stopping a space reclaim worker
  - ALSA: hda: Fix Nvidia dp infoframe
  - ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
  - ALSA: hda/tegra: Reset hardware
  - ALSA: hda/tegra: Use clk_bulk helpers
  - thunderbolt: Add support for Intel Maple Ridge single port controller
  - thunderbolt: Add support for Intel Maple Ridge
  - ext4: make directory inode spreading reflect flexbg size
  - ext4: limit the number of retries after discarding preallocations blocks
  - devdax: Fix soft-reservation memory description
  - i2c: mlxbf: Fix frequency calculation
  - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
  - i2c: mlxbf: incorrect base address passed during io write
  - i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
  - workqueue: don't skip lockdep work dependency in cancel_work_sync()
  - drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
  - drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
  - drm/amd/display: Limit user regamma to a valid value
  - drm/amdgpu: use dirty framebuffer helper
  - drm/gma500: Fix BUG: sleeping function called from invalid context errors
  - Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
  - cifs: always initialize struct msghdr smb_msg completely
  - cifs: use discard iterator to discard unneeded network data more efficiently
  - drm/amdgpu: Fix check for RAS support
  - vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
  - usb: xhci-mtk: fix issue of out-of-bounds array access
  - s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
  - serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
  - serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
  - serial: Create uart_xmit_advance()
  - drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
  - selftests: forwarding: add shebang for sch_red.sh
  - net: sched: fix possible refcount leak in tc_new_tfilter()
  - net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD
  - net/smc: Stop the CLC flow if no link to map buffers on
  - drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
  - perf kcore_copy: Do not check /proc/modules is unchanged
  - perf jit: Include program header in ELF files
  - can: gs_usb: gs_can_open(): fix race dev->can.state condition
  - netfilter: ebtables: fix memory leak when blob is malformed
  - netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
  - netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
  - net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
  - net/sched: taprio: avoid disabling offload when it was never enabled
  - net: socket: remove register_gifconf
  - net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
  - wireguard: netlink: avoid variable-sized memcpy on sockaddr
  - wireguard: ratelimiter: disable timings test by default
  - net: ipa: properly limit modem routing table use
  - net: ipa: kill IPA_TABLE_ENTRY_SIZE
  - net: ipa: DMA addresses are nicely aligned
  - net: ipa: avoid 64-bit modulus
  - net: ipa: fix table alignment requirement
  - net: ipa: fix assumptions about DMA address size
  - of: mdio: Add of_node_put() when breaking out of for_each_xx
  - drm/hisilicon: Add depends on MMU
  - drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
  - sfc: fix null pointer dereference in efx_hard_start_xmit
  - sfc: fix TX channel offset when using legacy interrupts
  - i40e: Fix set max_tx_rate when it is lower than 1 Mbps
  - i40e: Fix VF set max MTU size
  - iavf: Fix set max MTU size with port VLAN and jumbo frames
  - iavf: Fix bad page state
  - MIPS: Loongson32: Fix PHY-mode being left unspecified
  - MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
  - drm/panel: simple: Fix innolux_g121i1_l01 bus_format
  - net: team: Unsync device addresses on ndo_stop
  - net: bonding: Unsync device addresses on ndo_stop
  - net: bonding: Share lacpdu_mcast_addr definition
  - scsi: mpt3sas: Fix return value check of dma_get_required_mask()
  - scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
  - net: phy: aquantia: wait for the suspend/resume operations to finish
  - net: core: fix flow symmetric hash
  - net: let flow have same hash in two directions
  - iavf: Fix cached head and tail value for iavf_get_tx_pending
  - netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
  - arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
  - dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
  - arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
  - drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
  - arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
  - xfs: validate inode fork size against fork format
  - xfs: reorder iunlink remove operation in xfs_ifree
  - interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
  - mm/slub: fix to return errno if kmalloc() fails
  - can: flexcan: flexcan_mailbox_read() fix return value for drop = true
  - riscv: fix a nasty sigreturn bug...
  - gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
  - gpio: mockup: fix NULL pointer dereference when removing debugfs
  - wifi: mt76: fix reading current per-tid starting sequence number for aggregation
  - efi: libstub: check Shim mode using MokSBStateRT
  - efi: x86: Wipe setup_data on pure EFI boot
  - media: flexcop-usb: fix endpoint type check
  - iommu/vt-d: Check correct capability for sagaw determination
  - ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
  - ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
  - ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
  - ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
  - ALSA: hda/realtek: Re-arrange quirk table entries
  - ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
  - ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
  - ALSA: hda: add Intel 5 Series / 3400 PCI DID
  - ALSA: hda/tegra: set depop delay for tegra
  - USB: serial: option: add Quectel RM520N
  - USB: serial: option: add Quectel BG95 0x0203 composition
  - arm64/bti: Disable in kernel BTI when cross section thunks are broken
  - arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
  - Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
  - vfio/type1: Unpin zero pages
  - vfio/type1: Prepare for batched pinning with struct vfio_batch
  - vfio/type1: Change success value of vaddr_get_pfn()
  - Revert "usb: add quirks for Lenovo OneLink+ Dock"
  - usb: cdns3: fix issue with rearming ISO OUT endpoint
  - usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
  - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
  - usb: add quirks for Lenovo OneLink+ Dock
  - tty: serial: atmel: Preserve previous USART mode if RS485 disabled
  - serial: atmel: remove redundant assignment in rs485_config
  - mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
  - usb: xhci-mtk: relax TT periodic bandwidth allocation
  - usb: xhci-mtk: allow multiple Start-Split in a microframe
  - usb: xhci-mtk: add some schedule error number
  - usb: xhci-mtk: add a function to (un)load bandwidth info
  - usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
  - usb: xhci-mtk: add only one extra CS for FS/LS INTR
  - usb: xhci-mtk: get the microframe boundary for ESIT
  - usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
  - usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
  - usb: dwc3: gadget: Refactor pullup()
  - usb: dwc3: gadget: Prevent repeat pullup()
  - usb: dwc3: Issue core soft reset before enabling run/stop
  - usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
  - usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
  - usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
  - drm/amdgpu: make sure to init common IP before gmc
  - drm/amdgpu: Separate vf2pf work item init from virt data exchange
  - drm/amdgpu: indirect register access for nv12 sriov
  - drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
  - ALSA: hda/sigmatel: Fix unused variable warning for beep power change
  - mksysmap: Fix the mismatch of 'L0' symbols in System.map
  - MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
  - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
  - net: usb: qmi_wwan: add Quectel RM520N
  - ALSA: hda/tegra: Align BDL entry to 4KB boundary
  - ALSA: hda/sigmatel: Keep power up while beep is enabled
  - wifi: mac80211_hwsim: check length for virtio packets
  - rxrpc: Fix calc of resend age
  - rxrpc: Fix local destruction being repeated
  - regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
  - ASoC: nau8824: Fix semaphore unbalance at error paths
  - Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
  - tools/include/uapi: Fix <asm/errno.h> for parisc and xtensa
  - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
  - cifs: revalidate mapping when doing direct writes
  - of/device: Fix up of_dma_configure_id() stub
  - tracing: hold caller_addr to hardirq_{enable,disable}_ip
  - parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
  - drm/meson: Fix OSD1 RGB to YCbCr coefficient
  - drm/meson: Correct OSD1 global alpha value
  - gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
  - NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
  - pinctrl: sunxi: Fix name for A100 R_PIO
  - of: fdt: fix off-by-one error in unflatten_dt_nodes()
  - net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
  - platform/x86/intel: hid: add quirk to support Surface Go 3
  - usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
  - powerpc/pseries/mobility: ignore ibm, platform-facilities updates
  - powerpc/pseries/mobility: refactor node lookup during DT update
  - dmaengine: bestcomm: fix system boot lockups
  - parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
  - parisc: Optimize per-pagetable spinlocks
  - serial: 8250: Fix reporting real baudrate value in c_ospeed field
  - KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
  - KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
  - !399 Backport fs, block and net bugfixes
  - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
  - ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
  - ubifs: Re-statistic cleaned znode count if commit failed
  - ubifs: dirty_cow_znode: Fix memleak in error handling path
  - block, bfq: switch 'bfqg->ref' to use atomic refcount apis
  - cifs: sanitize multiple delimiters in prepath
  - bpf: Fix sockmap calling sleepable function in teardown path
  - bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues
  - !394 Backport 5.10.143 - 5.10.144 LTS
  - Input: goodix - add compatible string for GT1158
  - soc: fsl: select FSL_GUTS driver for DPIO
  - mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
  - usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS
  - platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
  - perf/arm_pmu_platform: fix tests for platform_get_irq() failure
  - drm/amd/amdgpu: skip ucode loading if ucode_size == 0
  - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
  - Input: iforce - add support for Boeder Force Feedback Wheel
  - ieee802154: cc2520: add rc code in cc2520_tx()
  - gpio: mockup: remove gpio debugfs when remove device
  - tg3: Disable tg3 device on system reboot to avoid triggering AER
  - hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
  - HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
  - drm/msm/rd: Fix FIFO-full deadlock
  - Input: goodix - add support for GT1158
  - tracefs: Only clobber mode/uid/gid on remount if asked
  - iommu/vt-d: Correctly calculate sagaw value of IOMMU
  - ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
  - ARM: dts: imx: align SPI NOR node name with dtschema
  - hwmon: (mr75203) enable polling for all VM channels
  - hwmon: (mr75203) fix multi-channel voltage reading
  - hwmon: (mr75203) fix voltage equation for negative source input
  - hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors
  - hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
  - iommu/amd: use full 64-bit value in build_completion_wait()
  - swiotlb: avoid potential left shift overflow
  - MIPS: loongson32: ls1c: Fix hang during startup
  - ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
  - ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
  - tcp: fix early ETIMEDOUT after spurious non-SACK RTO
  - nvme-tcp: fix regression that causes sporadic requests to time out
  - nvme-tcp: fix UAF when detecting digest errors
  - RDMA/mlx5: Set local port to one when accessing counters
  - IB/core: Fix a nested dead lock as part of ODP flow
  - ipv6: sr: fix out-of-bounds read when setting HMAC data.
  - RDMA/siw: Pass a pointer to virt_to_page()
  - xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
  - i40e: Fix kernel crash during module removal
  - ice: use bitmap_free instead of devm_kfree
  - tipc: fix shift wrapping bug in map_get()
  - afs: Use the operation issue time instead of the reply time for callbacks
  - rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
  - ALSA: usb-audio: Register card again for iface over delayed_register option
  - ALSA: usb-audio: Inform the delayed registration more properly
  - netfilter: nf_tables: clean up hook list when offload flags check fails
  - netfilter: br_netfilter: Drop dst references before setting.
  - ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
  - ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
  - ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
  - ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
  - RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift
  - soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
  - RDMA/cma: Fix arguments order in net device validation
  - tee: fix compiler warning in tee_shm_register()
  - regulator: core: Clean up on enable failure
  - ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
  - smb3: missing inode locks in punch hole
  - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
  - scsi: lpfc: Add missing destroy_workqueue() in error path
  - scsi: mpt3sas: Fix use-after-free warning
  - drm/i915: Implement WaEdpLinkRateDataReload
  - nvmet: fix a use-after-free
  - debugfs: add debugfs_lookup_and_remove()
  - kprobes: Prohibit probes in gate area
  - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
  - ALSA: aloop: Fix random zeros in capture data when using jiffies timer
  - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
  - drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
  - fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
  - net/core/skbuff: Check the return value of skb_copy_bits()
  - arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
  - parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
  - parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
  - drm/radeon: add a force flush to delay work when radeon
  - drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
  - drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
  - drm/gem: Fix GEM handle release errors
  - scsi: megaraid_sas: Fix double kfree()
  - scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
  - Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
  - wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
  - efi: libstub: Disable struct randomization
  - tty: n_gsm: avoid call of sleeping functions from atomic context
  - tty: n_gsm: initialize more members at gsm_alloc_mux()
  - xen-blkfront: Cache feature_persistent value before advertisement
  - NFSD: Fix verifier returned in stable WRITEs


author: fuanan <fuanan3@huawei.com> - 563-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: Eibz-Chan <chenbingzhao@huawei.com> - 590-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
  	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
  	Fix-crash-when-enter-invaid-pattern-in-command.patch


author: zhangmingyi<zhangmingyi5@huawei.com> - 2:0.8.1-3
changelog:
  -- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                  backport-libbpf-Fix-the-name-of-a-reused-map.patch
                  backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-23
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: weishengjing <weishengjing1@huawei.com> - 8.0.22-1
changelog:
  - New version 8.0.22 fix CVES:   CVE-2020-14852 CVE-2020-14794 CVE-2020-14775
     CVE-2020-14893 CVE-2020-14829 CVE-2020-14828 CVE-2020-14888 CVE-2020-14891
     CVE-2020-14812 CVE-2020-14870 CVE-2020-14769 CVE-2020-14878 CVE-2020-14789
     CVE-2020-14821 CVE-2020-14844 CVE-2020-14836 CVE-2020-14830 CVE-2020-14827
     CVE-2020-14773 CVE-2020-14765 CVE-2020-14869 CVE-2020-14776 CVE-2020-14861
     CVE-2020-14866 CVE-2020-14672 CVE-2020-14837 CVE-2020-14771 CVE-2020-14785
     CVE-2020-14838 CVE-2020-14848 CVE-2020-14791 CVE-2020-14793 CVE-2020-14804
     CVE-2020-14777 CVE-2020-14800 CVE-2020-14786 CVE-2020-14845 CVE-2020-14839
     CVE-2020-14846 CVE-2020-14867 CVE-2020-14868 CVE-2020-14873 CVE-2020-14860
     CVE-2020-14814 CVE-2020-14790 CVE-2020-14809


author: wangxiao <wangxiao65@huawei.com> - 8.0.23-1
changelog:
  - Upgrade mysql to 8.0.23, fix CVES: CVE-2021-1998 CVE-2021-2002
    CVE-2021-2010 CVE-2021-2011 CVE-2021-2016 CVE-2021-2021 CVE-2021-2022
    CVE-2021-2024 CVE-2021-2031 CVE-2021-2032 CVE-2021-2036 CVE-2021-2038
    CVE-2021-2046 CVE-2021-2048 CVE-2021-2056 CVE-2021-2058 CVE-2021-2060
    CVE-2021-2061 CVE-2021-2065 CVE-2021-2070 CVE-2021-2072 CVE-2021-2076
    CVE-2021-2081 CVE-2021-2087 CVE-2021-2088 CVE-2021-2122


author: wutao <wutao61@huawei.com> - 8.0.24-1
changelog:
  - Upgrade mysql to 8.0.24, fix CVES: CVE-2021-2166 CVE-2021-2146
    CVE-2021-2162 CVE-2021-2212 CVE-2021-2299 CVE-2021-2293 CVE-2021-2215
    CVE-2021-2278 CVE-2021-2164 CVE-2021-2208 CVE-2021-2217 CVE-2021-2203
    CVE-2021-2226 CVE-2021-2298 CVE-2021-2230 CVE-2021-2300 CVE-2021-2304
    CVE-2021-2172 CVE-2021-2194 CVE-2021-2170 CVE-2021-2196 CVE-2021-2201
    CVE-2021-2180 CVE-2021-2307 CVE-2021-2169 CVE-2021-2171 CVE-2021-2305
    CVE-2021-2179 CVE-2021-2174 CVE-2021-2193 CVE-2021-2232 CVE-2021-2301
    CVE-2021-2308


author: liwu <liwu13@huawei.com> - 8.0.26-1
changelog:
  - Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
    CVE-2021-2352 CVE-2021-2340


author: yaoxin <yaoxin30@huawei.com> - 8.0.27-1
changelog:
  - Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
    CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
    CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
    CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
    CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
    CVE-2021-35644-to-CVE-2021-35648


author: jintang song<jintang.song@epro.com.cn> - 8.0.29-1
changelog:
  - Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
    CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
    CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
    CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
    CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
    CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
    CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490


author: gaihuiying <gaihuiying1@huawei.com> - 5.8-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix undefined behavior in asn_build_int()
         libsnmp: Rework parse_imports()
         libsnmp: Increase MAX_IMPORTS
         libsnmp: Allocate the module import list on the heap
         libsnmp: Fix a memory leak in a MIB parser error path
         libsnmp: Fix the getoid() error path


author: gaihuiying <eaglegai@163.com> - 1:5.9.1-3
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: xingwei <xingwei14@h-partners.com> - 1:5.9.1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
          IF-MIB: pass the network interface index to net
          IF-MIB: fix a memory leak
          IF-MIB: fix a recently introduced use after free
          IF-MIB: add a trailing newline to an error message


author: gaihuiying <eaglegai@163.com> - 2.4.9-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: xinghe <xinghe2@h-partners.com> - 4.17.2-5
changelog:
  - Type:cves
  - ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
  - SUG:NA
  - DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967


author: jinlun <jinlun@huawei.com> - 15.4-5
changelog:
  - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
    CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
    CVE-2021-23841 CVE-2022-0778 CVE-2021-3712


author: yangmingtai <yangmingtai@huawei.com> -249-42
changelog:
  - 1.change /etc/systemd/journald.conf ForwardToWall to no
    2.change DefaultLimitMEMLOCK to 64M
    3.replace openEuler to vendor
    4.delete useless file udev-61-openeuler-persistent-storage.rules


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-4
changelog:
  - Type:CVE
  - ID:CVE-2022-3491 CVE-2022-3520 CVE-2022-3591
  - SUG:NA
  - DESC:fix CVE-2022-3491 CVE-2022-3520 CVE-2022-3591


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-7
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: ouyangminxiang<ouyangminxiang@kylinsec.com.cn> - 1.20.11-7
changelog:
  - Fix the crash in shadowUpdatePacked because of memcpy acts randomly with overlapping areas.
  - Fix the problem of black screen after entering the login interface


author: wanglin <wangl29@chinatelecom.cn> - 1.20.11-14
changelog:
  - Fix openEuler hard code problem
  - use -git instead of .git as the filename, to avoid .git ignore
  - Fix changelog date


