# changelog

author: sunhai <sunhai10@huawei.com> - 36.16.5-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pxe kickstart version with local pykickstart
         and with build save patch by source4


author: sunhai <sunhai10@huawei.com> - 36.16.5-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add logo with install
         the kickstart version change to patch


author: Qingqing Li <liqingqing3@huawei.com> - 36.16.5-11
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:cgroup files is a additional enhanced cgroup feature, which will
         limit cgroup opened files, add cgroup_disable=files to
         default cmdline to disable this feature to keep cgroup's default behavior.


author: sunhai <sunhai10@huawei.com> - 36.16.5-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport password tooltip text adapt language
          close disk encryption


author: shenyangyang<shenyangyang4@huawei.com> - 1.7.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
         to /usr/lib/xxxx


author: huangyu <huangyu106@huawei.com> - 32:9.16.23-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix catalog zone reconfiguration crash
  Improve the logging on failed TCP accept
  Separate the locked parts of dns_zone_catz_enable-di
  Check if key-metadata is modified before writing
  Fix CID-352776 Concurrent data access violations
  Require valid key for dst_key functions


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
  - SUG:NA
  - DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: yanglu <yanglu72@h-partners.com> - 1.18.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:delete a static library file
         add BuildRequires make to fix build problem


author: songyanting<songyanting@huawei.com> - 1.2.0-300
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix, include
         1. add check in spec
         2. kill container init process if runc start returns error
         3. fix containerd-shim residual when kill containerd durin
         4. fix deadlock on commit error
         5. backport upstream & ttrpc patches
         6. fix exec event missing due to pid reuse
         7. fix dm left when pause container and kill shim
         8. add CGO security build options
         9. fix start container failed with id exists
        10. drop opt package
        11. fix race access for mobySubscribed
        12. improve log for debugging
        13. reduce permission for bundle dir
        14. fix publish command wait block forever


author: Vanient<xiadanni1@huawei.com> - 1.2.0-301
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Use fs.RootPath when mounting volumes for bundle dir to fix CVE-2022-23648


author: gaihuiying <eaglegai@163.com> - 7.79.1-5
changelog:
  - Type:cves
  - CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
  - SUG:NA
  - DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776


author: gaihuiying <eaglegai@163.com> - 7.79.1-7
changelog:
  - Type:cves
  - CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
  - SUG:NA
  - DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208


author: gaihuiying <eaglegai@163.com> - 7.79.1-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix build error when add --disable-http-auth configure option


author: yanglu <yanglu72@h-partners.com> - 7.79.1-12
changelog:
  - Type:cves
  - CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
  - SUG:NA
  - DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916


author: xinghe <xinghe2@h-partners.com> - 7.79.1-14
changelog:
  - Type:cves
  - CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
  - SUG:NA
  - DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916


author: yangcheng <yangcheng87@huawei.com> - 1:27.2-3
changelog:
  - DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged


author: wuchangsheng <wuchangsheng2@huawei.com> - 1.0.1-40
changelog:
  - add dfx rcv_nxt info
    mbuf private cache line align
    send pkts index bug fix
    free recv pkts in main loop


author: benniaobufeijiushiji <linda7@huawei.com> - 10.3.1-20
changelog:
  - Type:Sync
  - ID:NA
  - SUG:NA
  - DESC:Sync patch from openeuler/gcc
         Bugfix for loop-distribution, semi-relayout and mull64.


author: panxiaohe <panxiaohe@huawei.com> - 2.30.0-4
changelog:
  - Fix CVE-2021-29468
  - Add gcc and gettext to BuildRequires
    - necessary for building and msgfmt command


author: fuanan <fuanan3@h-partners.com> - 2.33.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch


author: yanan <yanan@huawei.com> - 2.68.1-12
changelog:
  - Type:bugfix
  - DESC:fix issues found by svace static code analyzer
         fix segfault,memory leak,EOF,arguments leak


author: shixuantong <shixuantong1@huawei.com> - 2.34-102
changelog:
  - elf: Do not completely clear reused namespace in dlmopen (bug 29600)
  - elf: Remove allocate use on _dl_debug_printf
  - elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
  - Fix OOB read in stdlib thousand grouping parsing [BZ#29727]


author: wanghongliang <wanghongliang@loongson.cn> - 2.34-105
changelog:
  - LoongArch Port
  - Add login-Add-back-libutil-as-an-empty-library.patch from upstream
    to fix libutil build error.
  - Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
    to fix memory bug
  - After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
  - Left some test fails in testsuite_whitelist.


author: Xue Liu <liuxue@loongson.cn> - 2.34-106
changelog:
  - LoongArch: Optimize some string functions including memcpy, memmove,
    memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.


author: Yang Yanchao <yangyanchao6@huawei.com> - 2.34-109
changelog:
  - Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
    versions, this symbol is required to keep the previous items compatible.


author: Lv Ying <lvying6@huawei.com> - 2.34-112
changelog:
  - elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
    - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
      specified segment, just try to use hugepage to mmap specified segment
      instead of all the segments in the shared object
    - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage


author: hanchao <hanchao47@huawei.com> - 1.17.3-5
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
  	CVE-2022-30635,CVE-2022-30630,CVE-2022-30632,CVE-2022-28131,
  	CVE-2022-30631,CVE-2022-30629,CVE-2022-30634


author: hanchao<hanchao47@huawei.com> - 1.17.3-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: golang: modify the golang.spec to remove unnecessary files
  	from golang-help package


author: hanchao <hanchao47@huawei.com> - 1.17.3-10
changelog:
  - Type:CVE
  - CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
  - SUG:NA
  - DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879


author: hanchao <hanchao47@huawei.com> - 1.17.3-12
changelog:
  - Type:CVE
  - CVE:CVE-2022-41716
  - SUG:NA
  - DESC: remove hard code and strong dependency of git, subversion and mercurial


author: hanchao <hanchao47@huawei.com> - 1.17.3-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
  - SUG:NA
  - DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717


author: wanglu <wanglu210@huawei.com> - 1:2.06-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tests: Disable blkid cache usage
         disk/efi/efidisk: Pass buffers with higher alignment


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
         in grub2-tools to 644


author: mengyingkun <mengyingkun@loongson.cn> - 1:2.06-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:loongarch modify the location where initrd is loaded into memory


author: gaihuiying <eaglegai@163.com> - 2.4.51-4
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-8
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556


author: liweiganga <liweiganga@uniontech.com> - 2.4.51-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:change default value of HeartbeatMaxServers
         fix setting and comparison of IPs fileds
         avoid voerflow in case of indecently large session
         make ap_escape_quotes() work correctly
         fix lua_request with cast first
         Handle children killed pathologically
         mod_md do not interfere with requests if challenge type http-01


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:reduce the dependency of httpd on system-logos installation


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-13
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: yangjiaqi <yangjiaqi16@huawei.com> - 2.0.17-10
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: remove chmod 751 permission for dirs by engine when user-remap enabled


author: chenyanpanHW <chenyanpan@huawei.com> - 10.06-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaoxingwang <gaoxingwang1@huawei.com> - 10.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1.2-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:after executing hook scripts, remove their executable permission
         of non root users


author: sunsuwan<sunsuwan3@huawei.com> - 5.15.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lnstat: fix buffer overflow in header output 
         libnetlink: fix socket leak in rtnl_open_byptoyo
         lnstat: fix strdup leak in w argument parsing
         q_cake: allow fix buffer overflow on large labels
         tc flower: fix buffer overflow on large labels
         tc_tuil: fix parsing action control with space and sl
         tipc: fix keylen check
         fix devlink health dump command without arg
         tc: em_u32: fix offset parsing
         l2tp fix typo in AF_INET6 checksum JSON print
         ip: Fix size_columns() for very large values
         ip: Fix size_columns() invocation that passes a 32-bit quantity


author: jiangheng<jiangheng14@huawei.com> - 5.15.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bridge: fix memory leak when doing fdb get
         mptcp: fix memory leak when doing 'endpoint show'
         mptcp: fix memory leak when getting limits
         ip neigh: fix memory leak when doing 'get'
         ip address: fix memory leak when specifying device
         fix marco expansion in changelog


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add epoch version in changelog to fix check_spec_file ci failure


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.1.0.76
changelog:
  - coresight: trbe: Enable ACPI/Platform automatic module loading
  - arm64/trbe: Add initial MADT/SPE probing
  - ACPI 6.5: MADT: add support for trace buffer extension in GICC
  - coresight: Return the pointer of @pdata when not "fwnode"
  - blk-mq: don't access request_wrapper if request is not allocated from block layer
  - blk-mq: fix kabi broken due to request_wrapper
  - ide-cd: don't clear rq_flags after blk_get_request
  - iommu: Fix error handling in probe_acpi_namespace_devices()
  - !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
  - !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
  - net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
  - net: hns3: fix getting supported parameter from driver in hclge_set_wol
  - net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
  - net: hns3: fix return value check bug of rx copybreak
  - net: hns3: fix incorrect hw rss hash type of rx packet


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.3.0.77
changelog:
  - !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
  - Revert "ipvlan: Modify the value of ipvlan modes"
  - net/af_packet: make sure to pull mac header
  - KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
  - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
  - arm64: fix a concurrency issue in emulation_proc_handler()
  - vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
  - tools include UAPI: Sync linux/vhost.h with the kernel sources
  - tools include UAPI: Sync linux/vhost.h with the kernel sources
  - tools include UAPI: Sync linux/vhost.h with the kernel sources
  - vhost-vdpa: call vhost_vdpa_cleanup during the release
  - vhost: allow batching hint without size
  - vdpa_sim: set vringh notify callback
  - virtio_pci: struct virtio_pci_common_cfg add queue_reset
  - virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
  - virtio: use virtio_reset_device() when possible
  - virtio: document virtio_reset_device
  - virtio: wrap config->reset calls
  - virtio_pci: introduce helper to get/set queue reset
  - virtio_pci: extract the logic of active vq for modern pci
  - vhost-vdpa: uAPI to suspend the device
  - vhost-vdpa: introduce SUSPEND backend feature bit
  - vdpa: Add suspend operation
  - vhost-vdpa: Call ida_simple_remove() when failed
  - vDPA: fix 'cast to restricted le16' warnings in vdpa.c
  - vDPA: !FEATURES_OK should not block querying device config space
  - vdpa: make get_vq_group and set_group_asid optional
  - vhost-vdpa: return -EFAULT on copy_to_user() failure
  - vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
  - vhost-vdpa: support ASID based IOTLB API
  - vhost-vdpa: introduce uAPI to set group ASID
  - vhost-vdpa: uAPI to get virtqueue group id
  - vhost-vdpa: introduce uAPI to get the number of address spaces
  - vhost-vdpa: introduce uAPI to get the number of virtqueue groups
  - vhost-vdpa: introduce asid based IOTLB
  - vhost: support ASID in IOTLB API
  - vhost_iotlb: split out IOTLB initialization
  - vdpa: introduce config operations for associating ASID to a virtqueue group
  - vdpa: multiple address spaces support
  - vdpa: introduce virtqueue groups
  - vhost-vdpa: switch to use vhost-vdpa specific IOTLB
  - vhost-vdpa: passing iotlb to IOMMU mapping helpers
  - virtio-vdpa: don't set callback if virtio doesn't need it
  - vhost: move the backend feature bits to vhost_types.h
  - net/vdpa: Use readers/writers semaphore instead of cf_mutex
  - net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
  - vdpa: Add support for querying vendor statistics
  - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
  - vhost: handle error while adding split ranges to iotlb
  - vdpa: change the type of nvqs to u32
  - vhost: fix hung thread due to erroneous iotlb entries
  - vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
  - vdpa: Protect vdpa reset with cf_mutex
  - vdpa: Avoid taking cf_mutex lock on get status
  - vdpa: Use BIT_ULL for bit operations
  - vdpa: Support reporting max device capabilities
  - vdpa: Add support for returning device configuration information
  - vdpa: Allow to configure max data virtqueues
  - vdpa: Read device configuration only if FEATURES_OK
  - vdpa: Sync calls set/get config/status with cf_mutex
  - vdpa: Provide interface to read driver features
  - vdpa: Mark vdpa_config_ops.get_vq_notification as optional
  - vdpa: Avoid duplicate call to vp_vdpa get_status
  - docs: document sysfs ABI for vDPA bus
  - vhost-vdpa: clean irqs before reseting vdpa device
  - vdpa: Enable user to set mac and mtu of vdpa device
  - vdpa: Use kernel coding style for structure comments
  - vdpa: Introduce query of device config layout
  - vdpa: Introduce and use vdpa device get, set config helpers
  - vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
  - virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
  - vdpa: min vq num of vdpa device cannot be greater than max vq num
  - vdpa: add new callback get_vq_num_min in vdpa_config_ops
  - vhost_vdpa: unset vq irq before freeing irq
  - vdpa: potential uninitialized return in vhost_vdpa_va_map()
  - vhost-iotlb: Add an opaque pointer for vhost IOTLB
  - vdpa: Support transferring virtual addressing during DMA mapping
  - vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
  - vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
  - vhost-vdpa: Handle the failure of vdpa_reset()
  - vdpa: Fix some coding style issues
  - vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
  - vdpa: Add documentation for vdpa_alloc_device() macro
  - virtio/vdpa: clear the virtqueue state during probe
  - vp_vdpa: correct the return value when fail to map notification
  - virito_pci libray: hide vp_modern_map_capability()
  - vhost/vdpa: Remove the restriction that only supports virtio-net devices
  - virtio_pci_modern: hide vp_modern_get_queue_notify_off()
  - vdpa: Follow kdoc comment style
  - vdpa: Follow kdoc comment style
  - virtio_vdpa: don't warn when fail to disable vq
  - vdpa: Use simpler version of ida allocation
  - vhost_vdpa: switch to vmemdup_user()


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.4.0.78
changelog:
  - RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
  - RDMA/hns: Fix AH attr queried by query_qp
  - RDMA/hns: Kernel notify usr space to stop ring db


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.8.0.80
changelog:
  - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
  - Bluetooth: L2CAP: Fix build errors in some archs
  - cpuidle: add cpuidle-haltpoll driver module parameter
  - clk: imx: Add check for kcalloc
  - x86/cpu/hygon: Set __max_die_per_package on Hygon
  - mm/dynamic_hugetlb: fix clear PagePool without lock protection
  - mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
  - mm/swapfile: use new way to fix broken kabi in swap_info_struct
  - block: always align request_wrapper to cacheline
  - block: fix crash on cmpxchg for request_wrapper
  - efi/libstub: Fix build error in efi-stub.c for riscv
  - mm: init: Fix build waring for ascend enable features
  - mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
  - ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
  - xen/netback: fix build warning
  - xen/netback: Ensure protocol headers don't fall in the non-linear area
  - block: only use cmpxchg64 in 64bit platform
  - proc: proc_skip_spaces() shouldn't think it is working on C strings
  - proc: avoid integer type confusion in get_proc_long
  - sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.10.0.82
changelog:
  - scsi: iscsi: remove .unbind_conn from iscsi_transport
  - Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.13.2.89
changelog:
  - media: mceusb: Use new usb_control_msg_*() routines
  - perf: hisi: Fix read sccl_id and ccl_id error in TSV200
  - mm: add cond_resched() in swapin_walk_pmd_entry()
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
  - livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
  - dm thin: Use last transaction's pmd->root when commit failed
  - zram: avoid race between zram_remove and disksize_store
  - zram: don't fail to remove zram during unloading module
  - blk-mq: fix kabi broken in struct bio
  - blk-mq: fix kabi broken in struct request
  - block, bfq: fix possible uaf for 'bfqq->bic'
  - block, bfq: fix null pointer dereference in bfq_bio_bfqg()
  - blk-mq: set default elevator as deadline in case of hctx shared tagset
  - ext2: replace bh_submit_read() helper with bh_read()
  - ufs: replace ll_rw_block()
  - udf: replace ll_rw_block()
  - reiserfs: replace ll_rw_block()
  - ocfs2: replace ll_rw_block()
  - ntfs3: replace ll_rw_block()
  - jbd2: replace ll_rw_block()
  - isofs: replace ll_rw_block()
  - gfs2: replace ll_rw_block()
  - fs/buffer: replace ll_rw_block()
  - fs/buffer: add some new buffer read helpers
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
  - xen/netback: don't call kfree_skb() with interrupts disabled
  - media: dvb-core: Fix UAF due to refcount races at releasing
  - wifi: wilc1000: validate pairwise and authentication suite offsets
  - wifi: wilc1000: validate number of channels
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
  - drm/amdkfd: Check for null pointer after calling kmemdup


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.14.2.90
changelog:
  - !341 Backport CVEs and fs bugfixes
  - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
  - bfq: fix null-ptr-deref in bfq_pd_offline
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access()
  - ksmbd: fix heap-based overflow in set_ntacl_dacl()
  - ksmbd: prevent out of bound read for SMB2_WRITE
  - ksmbd: validate length in smb2_write()
  - xfs: fix super block buf log item UAF during force shutdown
  - xfs: wait iclog complete before tearing down AIL
  - xfs: get rid of assert from xfs_btree_islastblock


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.15.0.91
changelog:
  - !347 Backport CVEs and fs bugfixes
  - io_uring: kill goto error handling in io_sqpoll_wait_sq()
  - ext4: fix bad checksum after online resize
  - xfs: fix use-after-free in xattr node block inactivation
  - USB: core: Fix RST error in hub.c
  - USB: core: Prevent nested device-reset calls


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.16.0.92
changelog:
  - !358 Backport CVEs, bugfixes and other
  - binder: fix UAF of alloc->vma in race with munmap()
  - io_uring: add missing item types for splice request
  - xfs: fix overfilling of reserve pool
  - xfs: always succeed at setting the reserve pool size
  - xfs: remove infinite loop when reserving free block pool
  - xfs: use current->journal_info for detecting transaction recursion
  - fix kabi broken due to may_pollfree
  - io_uring: disable polling pollfree files
  - ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
  - driver: char: delete svm.c
  - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
  - fs/ntfs3: Fix attr_punch_hole() null pointer derenference
  - tracing/osnoise: Do not unregister events twice
  - tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
  - !351 AMD: Fix cpu capabilities incorrect detection bug.
  - x86/cpufeatures: Fix cpu capabilities incorrect detection.


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.17.0.93
changelog:
  - !372 Backport 5.10.141 LTS
  - net: neigh: don't call kfree_skb() under spin_lock_irqsave()
  - net/af_packet: check len when min_header_len equals to 0
  - lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
  - netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
  - drm/amdgpu: Increase tlb flush timeout for sriov
  - drm/amd/display: Fix pixel clock programming
  - drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid
  - s390/hypfs: avoid error message under KVM
  - neigh: fix possible DoS due to net iface start/stop loop
  - drm/amd/display: clear optc underflow before turn off odm clock
  - drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
  - drm/amd/display: Avoid MPC infinite loop
  - mmc: mtk-sd: Clear interrupts when cqe off/disable
  - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
  - fbdev: fb_pm2fb: Avoid potential divide by zero error
  - net: fix refcount bug in sk_psock_get (2)
  - HID: hidraw: fix memory leak in hidraw_release()
  - udmabuf: Set the DMA mask for the udmabuf device (v2)
  - HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
  - Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
  - kbuild: Fix include path in scripts/Makefile.modpost
  - s390/mm: do not trigger write fault when vma does not allow VM_WRITE
  - crypto: lib - remove unneeded selection of XOR_BLOCKS
  - x86/nospec: Fix i386 RSB stuffing
  - x86/nospec: Unwreck the RSB stuffing
  - !368 Backport CVEs and bugfixes
  - mm/memory: return vm_fault_t result from migrate_to_ram() callback
  - net: sched: disallow noqueue for qdisc classes
  - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
  - xfs: Fix deadlock on xfs_inodegc_worker
  - net: sched: cbq: dont intepret cls results when asked to drop
  - net: sched: atm: dont intepret cls results when asked to drop
  - scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
  - of/fdt: Don't calculate initrd size from DT if start > end
  - lib/cmdline: avoid page fault in next_arg
  - rndis_wlan: Prevent buffer overflow in rndis_query_oid
  - mm/vmpressure: fix data-race with memcg->socket_pressure
  - !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
  - kasan: add kasan support for memcpy_mcs()
  - arm64: fix return value type of memcpy_mcs()
  - !363 AMD: Support svm guest when host CR4.LA57 is set.
  - KVM: x86: Allow CPU to force vendor-specific TDP level
  - !338 Fix virtio-gpu free issues
  - drm/virtio: free virtqueues on probe failure
  - drm/virtio: Fixes a potential NULL pointer dereference on probe failure


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.18.0.94
changelog:
  - !385 Backport CVEs and bugfixes
  - !384 Backport 5.10.142 LTS
  - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
  - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
  - cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
  - net: sched: fix race condition in qdisc_graft()
  - macvlan: enforce a consistent minimal mtu
  - net: switch to storing KCOV handle directly in sk_buff
  - kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
  - tcp/udp: Make early_demux back namespacified.
  - net: Use u64_stats_fetch_begin_irq() for stats fetch.
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
  - ext4: fix use-after-free in ext4_orphan_cleanup
  - ext4: fix null-ptr-deref in ext4_write_info
  - block: don't allow a disk link holder to itself
  - hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
  - scsi: fix iscsi rescan fails to create block
  - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
  - mm: memcontrol: fix potential oom_lock recursion deadlock
  - irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
  - xfs: fix potential log item leak
  - USB: serial: ch341: fix disabled rx timer on older devices
  - USB: serial: ch341: fix lost character on LCR updates
  - usb: dwc3: disable USB core PHY management
  - usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
  - usb: dwc3: fix PHY disable sequence
  - mmc: core: Fix UHS-I SD 1.8V workaround branch
  - btrfs: harden identification of a stale device
  - drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
  - ALSA: seq: Fix data-race at module auto-loading
  - ALSA: seq: oss: Fix data-race for max_midi_devs access
  - ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
  - net: mac802154: Fix a condition in the receive path
  - ip: fix triggering of 'icmp redirect'
  - wifi: mac80211: Fix UAF in ieee80211_scan_rx()
  - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
  - driver core: Don't probe devices after bus_type.match() probe deferral
  - usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
  - s390: fix nospec table alignments
  - s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
  - usb-storage: Add ignore-residue quirk for NXP PN7462AU
  - USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
  - usb: dwc2: fix wrong order of phy_power_on and phy_init
  - usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
  - USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
  - USB: serial: option: add Quectel EM060K modem
  - USB: serial: option: add support for OPPO R11 diag port
  - USB: serial: cp210x: add Decagon UCA device id
  - xhci: Add grace period after xHC start to prevent premature runtime suspend.
  - thunderbolt: Use the actual buffer in tb_async_error()
  - xen-blkfront: Advertise feature-persistent as user requested
  - xen-blkback: Advertise feature-persistent as user requested
  - mm: pagewalk: Fix race between unmap and page walker
  - xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
  - KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
  - gpio: pca953x: Add mutex_lock for regcache sync in PM
  - hwmon: (gpio-fan) Fix array out of bounds access
  - clk: bcm: rpi: Add missing newline
  - clk: bcm: rpi: Prevent out-of-bounds access
  - clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
  - clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
  - Input: rk805-pwrkey - fix module autoloading
  - clk: core: Fix runtime PM sequence in clk_core_unprepare()
  - Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
  - clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
  - drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
  - USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
  - misc: fastrpc: fix memory corruption on open
  - misc: fastrpc: fix memory corruption on probe
  - iio: adc: mcp3911: use correct formula for AD conversion
  - iio: ad7292: Prevent regulator double disable
  - Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
  - tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
  - vt: Clear selection before changing the font
  - powerpc: align syscall table for ppc32
  - serial: fsl_lpuart: RS485 RTS polariy is inverse
  - net/smc: Remove redundant refcount increase
  - Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
  - tcp: annotate data-race around challenge_timestamp
  - sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
  - kcm: fix strp_init() order and cleanup
  - ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
  - net/sched: fix netdevice reference leaks in attach_default_qdiscs()
  - net: sched: tbf: don't call qdisc_put() while holding tree lock
  - Revert "xhci: turn off port power in shutdown"
  - wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
  - ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
  - ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
  - ieee802154/adf7242: defer destroy_workqueue call
  - iio: adc: mcp3911: make use of the sign bit
  - platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
  - drm/msm/dsi: Fix number of regulators for SDM660
  - drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
  - drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
  - drm/msm/dsi: fix the inconsistent indenting


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.19.0.95
changelog:
  - !403 Backport 5.10.145 - 5.10.149 LTS
  - wifi: mac80211: don't parse mbssid in assoc response
  - mac80211: mlme: find auth challenge directly
  - Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
  - misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
  - misc: pci_endpoint_test: Aggregate params checking for xfer
  - Input: xpad - fix wireless 360 controller breaking after suspend
  - Input: xpad - add supported devices as contributed on github
  - wifi: cfg80211: update hidden BSSes to avoid WARN_ON
  - wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
  - wifi: cfg80211: ensure length byte is present before access
  - wifi: cfg80211/mac80211: reject bad MBSSID elements
  - random: use expired timer rather than wq for mixing fast pool
  - random: avoid reading two cache lines on irq randomness
  - USB: serial: qcserial: add new usb-id for Dell branded EM7455
  - efi: Correct Macmini DMI match in uefi cert quirk
  - ALSA: hda: Fix position reporting on Poulsbo
  - random: clamp credited irq bits to maximum mixed
  - random: restore O_NONBLOCK support
  - Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
  - rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
  - USB: serial: ftdi_sio: fix 300 bps rate for SIO
  - mmc: core: Terminate infinite loop in SD-UHS voltage switch
  - mmc: core: Replace with already defined values for readability
  - drm/amd/display: skip audio setup when audio stream is enabled
  - drm/amd/display: update gamut remap if plane has changed
  - net: atlantic: fix potential memory leak in aq_ndev_close()
  - arch: um: Mark the stack non-executable to fix a binutils warning
  - um: Cleanup compiler warning in arch/x86/um/tls_32.c
  - um: Cleanup syscall_handler_t cast in syscalls_32.h
  - ALSA: hda/hdmi: Fix the converter reuse for the silent stream
  - net/ieee802154: fix uninit value bug in dgram_sendmsg
  - scsi: qedf: Fix a UAF bug in __qedf_probe()
  - ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
  - dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
  - dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
  - dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
  - firmware: arm_scmi: Add SCMI PM driver remove routine
  - compiler_attributes.h: move __compiletime_{error|warning}
  - powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
  - mm: gup: fix the fast GUP race against THP collapse
  - xsk: Inherit need_wakeup flag for shared sockets
  - perf tools: Fixup get_current_dir_name() compilation
  - docs: update mediator information in CoC docs
  - Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
  - ceph: don't truncate file in atomic_open
  - nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
  - ALSA: hda/hdmi: fix warning about PCM count when used with SOF
  - x86/alternative: Fix race in try_get_desc()
  - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
  - clk: iproc: Do not rely on node name for correct PLL setup
  - clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
  - selftests: Fix the if conditions of in test_extra_filter()
  - net: stmmac: power up/down serdes in stmmac_open/release
  - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
  - nvme: add new line after variable declatation
  - cxgb4: fix missing unlock on ETHOFLD desc collect fail path
  - net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
  - usbnet: Fix memory leak in usbnet_disconnect()
  - Input: melfas_mip4 - fix return value check in mip4_probe()
  - Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
  - ASoC: tas2770: Reinit regcache on reset
  - soc: sunxi: sram: Fix debugfs info for A64 SRAM C
  - soc: sunxi: sram: Fix probe function ordering issues
  - soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
  - soc: sunxi: sram: Prevent the driver from being unbound
  - soc: sunxi: sram: Actually claim SRAM regions
  - reset: imx7: Fix the iMX8MP PCIe PHY PERST support
  - ARM: dts: am33xx: Fix MMCHS0 dma properties
  - swiotlb: max mapping size takes min align mask into account
  - media: rkvdec: Disable H.264 error detection
  - media: dvb_vb2: fix possible out of bound access
  - mm: fix madivse_pageout mishandling on non-LRU page
  - mm/migrate_device.c: flush TLB while holding PTL
  - mm: prevent page_frag_alloc() from corrupting the memory
  - mm/page_alloc: fix race condition between build_all_zonelists and page allocation
  - mmc: hsq: Fix data stomping during mmc recovery
  - mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
  - libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
  - net: mt7531: only do PLL once after the reset
  - ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
  - ARM: dts: integrator: Tag PCI host with device_type
  - clk: ingenic-tcu: Properly enable registers before accessing timers
  - Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
  - net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
  - thunderbolt: Explicitly reset plug events delay back to USB4 spec value
  - usb: typec: ucsi: Remove incorrect warning
  - uas: ignore UAS for Thinkplus chips
  - usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
  - uas: add no-uas quirk for Hiksemi usb_disk
  - btrfs: fix hang during unmount when stopping a space reclaim worker
  - ALSA: hda: Fix Nvidia dp infoframe
  - ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
  - ALSA: hda/tegra: Reset hardware
  - ALSA: hda/tegra: Use clk_bulk helpers
  - thunderbolt: Add support for Intel Maple Ridge single port controller
  - thunderbolt: Add support for Intel Maple Ridge
  - ext4: make directory inode spreading reflect flexbg size
  - ext4: limit the number of retries after discarding preallocations blocks
  - devdax: Fix soft-reservation memory description
  - i2c: mlxbf: Fix frequency calculation
  - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
  - i2c: mlxbf: incorrect base address passed during io write
  - i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
  - workqueue: don't skip lockdep work dependency in cancel_work_sync()
  - drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
  - drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
  - drm/amd/display: Limit user regamma to a valid value
  - drm/amdgpu: use dirty framebuffer helper
  - drm/gma500: Fix BUG: sleeping function called from invalid context errors
  - Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
  - cifs: always initialize struct msghdr smb_msg completely
  - cifs: use discard iterator to discard unneeded network data more efficiently
  - drm/amdgpu: Fix check for RAS support
  - vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
  - usb: xhci-mtk: fix issue of out-of-bounds array access
  - s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
  - serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
  - serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
  - serial: Create uart_xmit_advance()
  - drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
  - selftests: forwarding: add shebang for sch_red.sh
  - net: sched: fix possible refcount leak in tc_new_tfilter()
  - net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD
  - net/smc: Stop the CLC flow if no link to map buffers on
  - drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
  - perf kcore_copy: Do not check /proc/modules is unchanged
  - perf jit: Include program header in ELF files
  - can: gs_usb: gs_can_open(): fix race dev->can.state condition
  - netfilter: ebtables: fix memory leak when blob is malformed
  - netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
  - netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
  - net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
  - net/sched: taprio: avoid disabling offload when it was never enabled
  - net: socket: remove register_gifconf
  - net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
  - wireguard: netlink: avoid variable-sized memcpy on sockaddr
  - wireguard: ratelimiter: disable timings test by default
  - net: ipa: properly limit modem routing table use
  - net: ipa: kill IPA_TABLE_ENTRY_SIZE
  - net: ipa: DMA addresses are nicely aligned
  - net: ipa: avoid 64-bit modulus
  - net: ipa: fix table alignment requirement
  - net: ipa: fix assumptions about DMA address size
  - of: mdio: Add of_node_put() when breaking out of for_each_xx
  - drm/hisilicon: Add depends on MMU
  - drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
  - sfc: fix null pointer dereference in efx_hard_start_xmit
  - sfc: fix TX channel offset when using legacy interrupts
  - i40e: Fix set max_tx_rate when it is lower than 1 Mbps
  - i40e: Fix VF set max MTU size
  - iavf: Fix set max MTU size with port VLAN and jumbo frames
  - iavf: Fix bad page state
  - MIPS: Loongson32: Fix PHY-mode being left unspecified
  - MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
  - drm/panel: simple: Fix innolux_g121i1_l01 bus_format
  - net: team: Unsync device addresses on ndo_stop
  - net: bonding: Unsync device addresses on ndo_stop
  - net: bonding: Share lacpdu_mcast_addr definition
  - scsi: mpt3sas: Fix return value check of dma_get_required_mask()
  - scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
  - net: phy: aquantia: wait for the suspend/resume operations to finish
  - net: core: fix flow symmetric hash
  - net: let flow have same hash in two directions
  - iavf: Fix cached head and tail value for iavf_get_tx_pending
  - netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
  - arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
  - dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
  - arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
  - drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
  - arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
  - xfs: validate inode fork size against fork format
  - xfs: reorder iunlink remove operation in xfs_ifree
  - interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
  - mm/slub: fix to return errno if kmalloc() fails
  - can: flexcan: flexcan_mailbox_read() fix return value for drop = true
  - riscv: fix a nasty sigreturn bug...
  - gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
  - gpio: mockup: fix NULL pointer dereference when removing debugfs
  - wifi: mt76: fix reading current per-tid starting sequence number for aggregation
  - efi: libstub: check Shim mode using MokSBStateRT
  - efi: x86: Wipe setup_data on pure EFI boot
  - media: flexcop-usb: fix endpoint type check
  - iommu/vt-d: Check correct capability for sagaw determination
  - ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
  - ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
  - ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
  - ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
  - ALSA: hda/realtek: Re-arrange quirk table entries
  - ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
  - ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
  - ALSA: hda: add Intel 5 Series / 3400 PCI DID
  - ALSA: hda/tegra: set depop delay for tegra
  - USB: serial: option: add Quectel RM520N
  - USB: serial: option: add Quectel BG95 0x0203 composition
  - arm64/bti: Disable in kernel BTI when cross section thunks are broken
  - arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
  - Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
  - vfio/type1: Unpin zero pages
  - vfio/type1: Prepare for batched pinning with struct vfio_batch
  - vfio/type1: Change success value of vaddr_get_pfn()
  - Revert "usb: add quirks for Lenovo OneLink+ Dock"
  - usb: cdns3: fix issue with rearming ISO OUT endpoint
  - usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
  - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
  - usb: add quirks for Lenovo OneLink+ Dock
  - tty: serial: atmel: Preserve previous USART mode if RS485 disabled
  - serial: atmel: remove redundant assignment in rs485_config
  - mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
  - usb: xhci-mtk: relax TT periodic bandwidth allocation
  - usb: xhci-mtk: allow multiple Start-Split in a microframe
  - usb: xhci-mtk: add some schedule error number
  - usb: xhci-mtk: add a function to (un)load bandwidth info
  - usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
  - usb: xhci-mtk: add only one extra CS for FS/LS INTR
  - usb: xhci-mtk: get the microframe boundary for ESIT
  - usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
  - usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
  - usb: dwc3: gadget: Refactor pullup()
  - usb: dwc3: gadget: Prevent repeat pullup()
  - usb: dwc3: Issue core soft reset before enabling run/stop
  - usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
  - usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
  - usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
  - drm/amdgpu: make sure to init common IP before gmc
  - drm/amdgpu: Separate vf2pf work item init from virt data exchange
  - drm/amdgpu: indirect register access for nv12 sriov
  - drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
  - ALSA: hda/sigmatel: Fix unused variable warning for beep power change
  - mksysmap: Fix the mismatch of 'L0' symbols in System.map
  - MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
  - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
  - net: usb: qmi_wwan: add Quectel RM520N
  - ALSA: hda/tegra: Align BDL entry to 4KB boundary
  - ALSA: hda/sigmatel: Keep power up while beep is enabled
  - wifi: mac80211_hwsim: check length for virtio packets
  - rxrpc: Fix calc of resend age
  - rxrpc: Fix local destruction being repeated
  - regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
  - ASoC: nau8824: Fix semaphore unbalance at error paths
  - Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
  - tools/include/uapi: Fix <asm/errno.h> for parisc and xtensa
  - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
  - cifs: revalidate mapping when doing direct writes
  - of/device: Fix up of_dma_configure_id() stub
  - tracing: hold caller_addr to hardirq_{enable,disable}_ip
  - parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
  - drm/meson: Fix OSD1 RGB to YCbCr coefficient
  - drm/meson: Correct OSD1 global alpha value
  - gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
  - NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
  - pinctrl: sunxi: Fix name for A100 R_PIO
  - of: fdt: fix off-by-one error in unflatten_dt_nodes()
  - net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
  - platform/x86/intel: hid: add quirk to support Surface Go 3
  - usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
  - powerpc/pseries/mobility: ignore ibm, platform-facilities updates
  - powerpc/pseries/mobility: refactor node lookup during DT update
  - dmaengine: bestcomm: fix system boot lockups
  - parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
  - parisc: Optimize per-pagetable spinlocks
  - serial: 8250: Fix reporting real baudrate value in c_ospeed field
  - KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
  - KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
  - !399 Backport fs, block and net bugfixes
  - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
  - ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
  - ubifs: Re-statistic cleaned znode count if commit failed
  - ubifs: dirty_cow_znode: Fix memleak in error handling path
  - block, bfq: switch 'bfqg->ref' to use atomic refcount apis
  - cifs: sanitize multiple delimiters in prepath
  - bpf: Fix sockmap calling sleepable function in teardown path
  - bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues
  - !394 Backport 5.10.143 - 5.10.144 LTS
  - Input: goodix - add compatible string for GT1158
  - soc: fsl: select FSL_GUTS driver for DPIO
  - mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
  - usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS
  - platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
  - perf/arm_pmu_platform: fix tests for platform_get_irq() failure
  - drm/amd/amdgpu: skip ucode loading if ucode_size == 0
  - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
  - Input: iforce - add support for Boeder Force Feedback Wheel
  - ieee802154: cc2520: add rc code in cc2520_tx()
  - gpio: mockup: remove gpio debugfs when remove device
  - tg3: Disable tg3 device on system reboot to avoid triggering AER
  - hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
  - HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
  - drm/msm/rd: Fix FIFO-full deadlock
  - Input: goodix - add support for GT1158
  - tracefs: Only clobber mode/uid/gid on remount if asked
  - iommu/vt-d: Correctly calculate sagaw value of IOMMU
  - ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
  - ARM: dts: imx: align SPI NOR node name with dtschema
  - hwmon: (mr75203) enable polling for all VM channels
  - hwmon: (mr75203) fix multi-channel voltage reading
  - hwmon: (mr75203) fix voltage equation for negative source input
  - hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors
  - hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
  - iommu/amd: use full 64-bit value in build_completion_wait()
  - swiotlb: avoid potential left shift overflow
  - MIPS: loongson32: ls1c: Fix hang during startup
  - ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
  - ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
  - tcp: fix early ETIMEDOUT after spurious non-SACK RTO
  - nvme-tcp: fix regression that causes sporadic requests to time out
  - nvme-tcp: fix UAF when detecting digest errors
  - RDMA/mlx5: Set local port to one when accessing counters
  - IB/core: Fix a nested dead lock as part of ODP flow
  - ipv6: sr: fix out-of-bounds read when setting HMAC data.
  - RDMA/siw: Pass a pointer to virt_to_page()
  - xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
  - i40e: Fix kernel crash during module removal
  - ice: use bitmap_free instead of devm_kfree
  - tipc: fix shift wrapping bug in map_get()
  - afs: Use the operation issue time instead of the reply time for callbacks
  - rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
  - ALSA: usb-audio: Register card again for iface over delayed_register option
  - ALSA: usb-audio: Inform the delayed registration more properly
  - netfilter: nf_tables: clean up hook list when offload flags check fails
  - netfilter: br_netfilter: Drop dst references before setting.
  - ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
  - ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
  - ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
  - ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
  - RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift
  - soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
  - RDMA/cma: Fix arguments order in net device validation
  - tee: fix compiler warning in tee_shm_register()
  - regulator: core: Clean up on enable failure
  - ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
  - smb3: missing inode locks in punch hole
  - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
  - scsi: lpfc: Add missing destroy_workqueue() in error path
  - scsi: mpt3sas: Fix use-after-free warning
  - drm/i915: Implement WaEdpLinkRateDataReload
  - nvmet: fix a use-after-free
  - debugfs: add debugfs_lookup_and_remove()
  - kprobes: Prohibit probes in gate area
  - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
  - ALSA: aloop: Fix random zeros in capture data when using jiffies timer
  - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
  - drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
  - fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
  - net/core/skbuff: Check the return value of skb_copy_bits()
  - arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
  - parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
  - parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
  - drm/radeon: add a force flush to delay work when radeon
  - drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
  - drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
  - drm/gem: Fix GEM handle release errors
  - scsi: megaraid_sas: Fix double kfree()
  - scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
  - Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
  - wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
  - efi: libstub: Disable struct randomization
  - tty: n_gsm: avoid call of sleeping functions from atomic context
  - tty: n_gsm: initialize more members at gsm_alloc_mux()
  - xen-blkfront: Cache feature_persistent value before advertisement
  - NFSD: Fix verifier returned in stable WRITEs


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.20.0.96
changelog:
  - !409 Backport CVEs and bugfixes
  - x86/kasan: Populate shadow for shared chunk of the CPU entry area
  - x86/kasan: Add helpers to align shadow addresses up and down
  - x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
  - x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
  - x86/mm: Recompute physical address for every page of per-CPU CEA mapping
  - x86/kasan: Map shadow for percpu pages on demand
  - x86/mm: Randomize per-cpu entry area
  - Huawei BMA: Fix iBMA driver bug
  - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
  - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
  - vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
  - vfio/iommu_type1: replace kfree with kvfree
  - ppp: associate skb with a device at tx
  - arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
  - bpf, sockmap: fix race in sock_map_free()
  - bpf: make sure skb->len != 0 when redirecting to a tunneling device
  - raw: fix KABI for backporting raw RCU conversion patches
  - ipv6: Fix crash when IPv6 is administratively disabled
  - raw: remove unused variables from raw6_icmp_error()
  - raw: fix a typo in raw_icmp_error()
  - raw: complete rcu conversion
  - raw: Use helpers for the hlist_nulls variant.
  - raw: Fix mixed declarations error in raw_icmp_error().
  - raw: convert raw sockets to RCU
  - raw: use more conventional iterators
  - cifs: Fix use-after-free in rdata->read_into_pages()
  - net: bridge: mcast: add and enforce query interval minimum
  - net: bridge: mcast: add and enforce startup query interval minimum
  - media: vivid: fix compose size exceed boundary
  - !346 anolis: bond: broadcast ARP or ND messages to all slaves
  - !404 kvm: arm64: fix some pvsched bugs
  - kvm: arm64: fix some pvsched bugs
  - anolis: bond: broadcast ARP or ND messages to all slaves


author: fuanan <fuanan3@huawei.com> - 563-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: Eibz-Chan <chenbingzhao@huawei.com> - 590-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
  	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
  	Fix-crash-when-enter-invaid-pattern-in-command.patch


author: zhangmingyi<zhangmingyi5@huawei.com> - 2:0.8.1-3
changelog:
  -- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                  backport-libbpf-Fix-the-name-of-a-reused-map.patch
                  backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-23
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: weishengjing <weishengjing1@huawei.com> - 8.0.22-1
changelog:
  - New version 8.0.22 fix CVES:   CVE-2020-14852 CVE-2020-14794 CVE-2020-14775
     CVE-2020-14893 CVE-2020-14829 CVE-2020-14828 CVE-2020-14888 CVE-2020-14891
     CVE-2020-14812 CVE-2020-14870 CVE-2020-14769 CVE-2020-14878 CVE-2020-14789
     CVE-2020-14821 CVE-2020-14844 CVE-2020-14836 CVE-2020-14830 CVE-2020-14827
     CVE-2020-14773 CVE-2020-14765 CVE-2020-14869 CVE-2020-14776 CVE-2020-14861
     CVE-2020-14866 CVE-2020-14672 CVE-2020-14837 CVE-2020-14771 CVE-2020-14785
     CVE-2020-14838 CVE-2020-14848 CVE-2020-14791 CVE-2020-14793 CVE-2020-14804
     CVE-2020-14777 CVE-2020-14800 CVE-2020-14786 CVE-2020-14845 CVE-2020-14839
     CVE-2020-14846 CVE-2020-14867 CVE-2020-14868 CVE-2020-14873 CVE-2020-14860
     CVE-2020-14814 CVE-2020-14790 CVE-2020-14809


author: wangxiao <wangxiao65@huawei.com> - 8.0.23-1
changelog:
  - Upgrade mysql to 8.0.23, fix CVES: CVE-2021-1998 CVE-2021-2002
    CVE-2021-2010 CVE-2021-2011 CVE-2021-2016 CVE-2021-2021 CVE-2021-2022
    CVE-2021-2024 CVE-2021-2031 CVE-2021-2032 CVE-2021-2036 CVE-2021-2038
    CVE-2021-2046 CVE-2021-2048 CVE-2021-2056 CVE-2021-2058 CVE-2021-2060
    CVE-2021-2061 CVE-2021-2065 CVE-2021-2070 CVE-2021-2072 CVE-2021-2076
    CVE-2021-2081 CVE-2021-2087 CVE-2021-2088 CVE-2021-2122


author: wutao <wutao61@huawei.com> - 8.0.24-1
changelog:
  - Upgrade mysql to 8.0.24, fix CVES: CVE-2021-2166 CVE-2021-2146
    CVE-2021-2162 CVE-2021-2212 CVE-2021-2299 CVE-2021-2293 CVE-2021-2215
    CVE-2021-2278 CVE-2021-2164 CVE-2021-2208 CVE-2021-2217 CVE-2021-2203
    CVE-2021-2226 CVE-2021-2298 CVE-2021-2230 CVE-2021-2300 CVE-2021-2304
    CVE-2021-2172 CVE-2021-2194 CVE-2021-2170 CVE-2021-2196 CVE-2021-2201
    CVE-2021-2180 CVE-2021-2307 CVE-2021-2169 CVE-2021-2171 CVE-2021-2305
    CVE-2021-2179 CVE-2021-2174 CVE-2021-2193 CVE-2021-2232 CVE-2021-2301
    CVE-2021-2308


author: liwu <liwu13@huawei.com> - 8.0.26-1
changelog:
  - Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
    CVE-2021-2352 CVE-2021-2340


author: yaoxin <yaoxin30@huawei.com> - 8.0.27-1
changelog:
  - Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
    CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
    CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
    CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
    CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
    CVE-2021-35644-to-CVE-2021-35648


author: jintang song<jintang.song@epro.com.cn> - 8.0.29-1
changelog:
  - Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
    CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
    CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
    CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
    CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
    CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
    CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490


author: gaihuiying <gaihuiying1@huawei.com> - 5.8-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix undefined behavior in asn_build_int()
         libsnmp: Rework parse_imports()
         libsnmp: Increase MAX_IMPORTS
         libsnmp: Allocate the module import list on the heap
         libsnmp: Fix a memory leak in a MIB parser error path
         libsnmp: Fix the getoid() error path


author: gaihuiying <eaglegai@163.com> - 1:5.9.1-3
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: xingwei <xingwei14@h-partners.com> - 1:5.9.1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
          IF-MIB: pass the network interface index to net
          IF-MIB: fix a memory leak
          IF-MIB: fix a recently introduced use after free
          IF-MIB: add a trailing newline to an error message


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-4
changelog:
  - Add requirements for system and bugfix
  - Upgrade oec-hardware-server
  - Update readme and design doc
  - Fix nvme error
  - Update network fibre check and log 
  - Update description for perf test
  - Add automatic configuration network card IP


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-5
changelog:
  - fix the bug that the test board information is not added to the configuration file
  - Add kabi for hardware critical test
  - Optimize disk/raid/fc/ethernet/infiniband test suite
  - Fix the bug of reading nvme data failed
  - Add file size check when uploading file to server


author: zhangyale <zhangyale3@h-partners.com> - 1.1.3-0
changelog:
  - Add support for openEuler 22.03 LTS SP1
  - Add AMD GPU testcase
  - Add automatic configuration network card IP
  - Add generate compatibility information


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: liqiang <liqiang332@h-partner.com> - 1.1.3-3
changelog:
  - Fix libswsds.so not stripped
  - Fix the value of kernel.src obtained by the kabi test case is incorrect
  - Add board infomation and fix memory bug
  - Fix the block size fails to be obtained during the NVME test
  - Judge whether to support kabi testing by architecture
  - Update readme and dev_design


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-0
changelog:
  - Add board information in the test report
  - Add spdk test case
  - Add dpdk test case
  - Update pci.ids file


author: gaihuiying <eaglegai@163.com> - 2.4.9-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: chenhaixing <chenhaixing@huawei.com> - 1.26.8-2
changelog:
  - delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change


author: xinghe <xinghe2@h-partners.com> - 4.17.2-5
changelog:
  - Type:cves
  - ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
  - SUG:NA
  - DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967


author: jinlun <jinlun@huawei.com> - 15.4-5
changelog:
  - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
    CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
    CVE-2021-23841 CVE-2022-0778 CVE-2021-3712


author: yangmingtai <yangmingtai@huawei.com> -249-42
changelog:
  - 1.change /etc/systemd/journald.conf ForwardToWall to no
    2.change DefaultLimitMEMLOCK to 64M
    3.replace openEuler to vendor
    4.delete useless file udev-61-openeuler-persistent-storage.rules


author: gaihuiying <eaglegai@163.com> - 1.13.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove buildin key
         add macros to control if key files permissons is 600 or 644
         remove useless BuildRequires:unbound-libs


author: yanglu <yanglu72@h-partners.com> - 1.13.2-5
changelog:
  - Type:cves
  - CVE:CVE-2022-30698 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30698 and CVE-2022-30699


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-4
changelog:
  - Type:CVE
  - ID:CVE-2022-3491 CVE-2022-3520 CVE-2022-3591
  - SUG:NA
  - DESC:fix CVE-2022-3491 CVE-2022-3520 CVE-2022-3591


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-7
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: ouyangminxiang<ouyangminxiang@kylinsec.com.cn> - 1.20.11-7
changelog:
  - Fix the crash in shadowUpdatePacked because of memcpy acts randomly with overlapping areas.
  - Fix the problem of black screen after entering the login interface


author: wanglin <wangl29@chinatelecom.cn> - 1.20.11-14
changelog:
  - Fix openEuler hard code problem
  - use -git instead of .git as the filename, to avoid .git ignore
  - Fix changelog date


