# changelog

author: gaoxingwang <gaoxingwang1@huawei.com> - 1.32.12-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix remove NetworkManager wrongly when yum remove NetworkManager-bluetooth subpackage that is not installed


author: Aichun Li <liaichun@huawei.com> - 1.32.12-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnm:fix warning when setting wrong ethtool ternary value
  core: reload config for active devices
  libnm: fix crash on failure of nm_vpn_plugin_info_new_from_file()
  libnm: fix crash in _nm_ip_route_validate_all for invalid-route


author: Chenxi Mao <chenxi.mao@suse.com> - 1:1.32.12-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Set NMTST_FORCE_REAL_ROOT to true to skip test which need root user permission


author: gaoxingwang<gaoxingwang1@huawei.com> - 1:1.32.12-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:merge ovs into main package

   Mon Jun 5 2023 gaoxingwang<gaoxingwang1@huawei.com> - 1:1.32.12-16
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml


author: sunhai <sunhai10@huawei.com> - 36.16.5-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pxe kickstart version with local pykickstart
         and with build save patch by source4


author: sunhai <sunhai10@huawei.com> - 36.16.5-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add logo with install
         the kickstart version change to patch


author: Qingqing Li <liqingqing3@huawei.com> - 36.16.5-11
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:cgroup files is a additional enhanced cgroup feature, which will
         limit cgroup opened files, add cgroup_disable=files to
         default cmdline to disable this feature to keep cgroup's default behavior.


author: sunhai <sunhai10@huawei.com> - 36.16.5-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport password tooltip text adapt language
          close disk encryption


author: shenyangyang<shenyangyang4@huawei.com> - 1.7.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
         to /usr/lib/xxxx


author: huangyu <huangyu106@huawei.com> - 32:9.16.23-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix catalog zone reconfiguration crash
  Improve the logging on failed TCP accept
  Separate the locked parts of dns_zone_catz_enable-di
  Check if key-metadata is modified before writing
  Fix CID-352776 Concurrent data access violations
  Require valid key for dst_key functions


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
  - SUG:NA
  - DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.1.0.76
changelog:
  - coresight: trbe: Enable ACPI/Platform automatic module loading
  - arm64/trbe: Add initial MADT/SPE probing
  - ACPI 6.5: MADT: add support for trace buffer extension in GICC
  - coresight: Return the pointer of @pdata when not "fwnode"
  - blk-mq: don't access request_wrapper if request is not allocated from block layer
  - blk-mq: fix kabi broken due to request_wrapper
  - ide-cd: don't clear rq_flags after blk_get_request
  - iommu: Fix error handling in probe_acpi_namespace_devices()
  - !322 [sync] PR-321: net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol and fix the incorrect way to obtain parameters.
  - !320 Some bugfix about rx packet,rx copybreak and phy link ksettings for the HNS3.
  - net: hns3: fix the HCLGE_OPC_WOL_CFG opcode id for wol
  - net: hns3: fix getting supported parameter from driver in hclge_set_wol
  - net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
  - net: hns3: fix return value check bug of rx copybreak
  - net: hns3: fix incorrect hw rss hash type of rx packet


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.3.0.77
changelog:
  - !326 vdpa: Add the vdpa device management mechanism and optimize the iotlb
  - Revert "ipvlan: Modify the value of ipvlan modes"
  - net/af_packet: make sure to pull mac header
  - KVM: arm64: Fix {fp_asimd,sve}_exit_stat manipulation
  - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
  - arm64: fix a concurrency issue in emulation_proc_handler()
  - vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
  - tools include UAPI: Sync linux/vhost.h with the kernel sources
  - tools include UAPI: Sync linux/vhost.h with the kernel sources
  - tools include UAPI: Sync linux/vhost.h with the kernel sources
  - vhost-vdpa: call vhost_vdpa_cleanup during the release
  - vhost: allow batching hint without size
  - vdpa_sim: set vringh notify callback
  - virtio_pci: struct virtio_pci_common_cfg add queue_reset
  - virtio_pci: struct virtio_pci_common_cfg add queue_notify_data
  - virtio: use virtio_reset_device() when possible
  - virtio: document virtio_reset_device
  - virtio: wrap config->reset calls
  - virtio_pci: introduce helper to get/set queue reset
  - virtio_pci: extract the logic of active vq for modern pci
  - vhost-vdpa: uAPI to suspend the device
  - vhost-vdpa: introduce SUSPEND backend feature bit
  - vdpa: Add suspend operation
  - vhost-vdpa: Call ida_simple_remove() when failed
  - vDPA: fix 'cast to restricted le16' warnings in vdpa.c
  - vDPA: !FEATURES_OK should not block querying device config space
  - vdpa: make get_vq_group and set_group_asid optional
  - vhost-vdpa: return -EFAULT on copy_to_user() failure
  - vdpa/vp_vdpa : add vdpa tool support in vp_vdpa
  - vhost-vdpa: support ASID based IOTLB API
  - vhost-vdpa: introduce uAPI to set group ASID
  - vhost-vdpa: uAPI to get virtqueue group id
  - vhost-vdpa: introduce uAPI to get the number of address spaces
  - vhost-vdpa: introduce uAPI to get the number of virtqueue groups
  - vhost-vdpa: introduce asid based IOTLB
  - vhost: support ASID in IOTLB API
  - vhost_iotlb: split out IOTLB initialization
  - vdpa: introduce config operations for associating ASID to a virtqueue group
  - vdpa: multiple address spaces support
  - vdpa: introduce virtqueue groups
  - vhost-vdpa: switch to use vhost-vdpa specific IOTLB
  - vhost-vdpa: passing iotlb to IOMMU mapping helpers
  - virtio-vdpa: don't set callback if virtio doesn't need it
  - vhost: move the backend feature bits to vhost_types.h
  - net/vdpa: Use readers/writers semaphore instead of cf_mutex
  - net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex
  - vdpa: Add support for querying vendor statistics
  - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
  - vhost: handle error while adding split ranges to iotlb
  - vdpa: change the type of nvqs to u32
  - vhost: fix hung thread due to erroneous iotlb entries
  - vdpa: factor out vdpa_set_features_unlocked for vdpa internal use
  - vdpa: Protect vdpa reset with cf_mutex
  - vdpa: Avoid taking cf_mutex lock on get status
  - vdpa: Use BIT_ULL for bit operations
  - vdpa: Support reporting max device capabilities
  - vdpa: Add support for returning device configuration information
  - vdpa: Allow to configure max data virtqueues
  - vdpa: Read device configuration only if FEATURES_OK
  - vdpa: Sync calls set/get config/status with cf_mutex
  - vdpa: Provide interface to read driver features
  - vdpa: Mark vdpa_config_ops.get_vq_notification as optional
  - vdpa: Avoid duplicate call to vp_vdpa get_status
  - docs: document sysfs ABI for vDPA bus
  - vhost-vdpa: clean irqs before reseting vdpa device
  - vdpa: Enable user to set mac and mtu of vdpa device
  - vdpa: Use kernel coding style for structure comments
  - vdpa: Introduce query of device config layout
  - vdpa: Introduce and use vdpa device get, set config helpers
  - vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE
  - virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min}
  - vdpa: min vq num of vdpa device cannot be greater than max vq num
  - vdpa: add new callback get_vq_num_min in vdpa_config_ops
  - vhost_vdpa: unset vq irq before freeing irq
  - vdpa: potential uninitialized return in vhost_vdpa_va_map()
  - vhost-iotlb: Add an opaque pointer for vhost IOTLB
  - vdpa: Support transferring virtual addressing during DMA mapping
  - vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap()
  - vdpa: Add an opaque pointer for vdpa_config_ops.dma_map()
  - vhost-vdpa: Handle the failure of vdpa_reset()
  - vdpa: Fix some coding style issues
  - vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro
  - vdpa: Add documentation for vdpa_alloc_device() macro
  - virtio/vdpa: clear the virtqueue state during probe
  - vp_vdpa: correct the return value when fail to map notification
  - virito_pci libray: hide vp_modern_map_capability()
  - vhost/vdpa: Remove the restriction that only supports virtio-net devices
  - virtio_pci_modern: hide vp_modern_get_queue_notify_off()
  - vdpa: Follow kdoc comment style
  - vdpa: Follow kdoc comment style
  - virtio_vdpa: don't warn when fail to disable vq
  - vdpa: Use simpler version of ida allocation
  - vhost_vdpa: switch to vmemdup_user()


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.4.0.78
changelog:
  - RDMA/hns: fix the error of RoCE VF based on RoCE Bonding PF
  - RDMA/hns: Fix AH attr queried by query_qp
  - RDMA/hns: Kernel notify usr space to stop ring db


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.8.0.80
changelog:
  - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
  - Bluetooth: L2CAP: Fix build errors in some archs
  - cpuidle: add cpuidle-haltpoll driver module parameter
  - clk: imx: Add check for kcalloc
  - x86/cpu/hygon: Set __max_die_per_package on Hygon
  - mm/dynamic_hugetlb: fix clear PagePool without lock protection
  - mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
  - mm/swapfile: use new way to fix broken kabi in swap_info_struct
  - block: always align request_wrapper to cacheline
  - block: fix crash on cmpxchg for request_wrapper
  - efi/libstub: Fix build error in efi-stub.c for riscv
  - mm: init: Fix build waring for ascend enable features
  - mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
  - ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
  - xen/netback: fix build warning
  - xen/netback: Ensure protocol headers don't fall in the non-linear area
  - block: only use cmpxchg64 in 64bit platform
  - proc: proc_skip_spaces() shouldn't think it is working on C strings
  - proc: avoid integer type confusion in get_proc_long
  - sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.10.0.82
changelog:
  - scsi: iscsi: remove .unbind_conn from iscsi_transport
  - Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.13.2.89
changelog:
  - media: mceusb: Use new usb_control_msg_*() routines
  - perf: hisi: Fix read sccl_id and ccl_id error in TSV200
  - mm: add cond_resched() in swapin_walk_pmd_entry()
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
  - livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
  - dm thin: Use last transaction's pmd->root when commit failed
  - zram: avoid race between zram_remove and disksize_store
  - zram: don't fail to remove zram during unloading module
  - blk-mq: fix kabi broken in struct bio
  - blk-mq: fix kabi broken in struct request
  - block, bfq: fix possible uaf for 'bfqq->bic'
  - block, bfq: fix null pointer dereference in bfq_bio_bfqg()
  - blk-mq: set default elevator as deadline in case of hctx shared tagset
  - ext2: replace bh_submit_read() helper with bh_read()
  - ufs: replace ll_rw_block()
  - udf: replace ll_rw_block()
  - reiserfs: replace ll_rw_block()
  - ocfs2: replace ll_rw_block()
  - ntfs3: replace ll_rw_block()
  - jbd2: replace ll_rw_block()
  - isofs: replace ll_rw_block()
  - gfs2: replace ll_rw_block()
  - fs/buffer: replace ll_rw_block()
  - fs/buffer: add some new buffer read helpers
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
  - xen/netback: don't call kfree_skb() with interrupts disabled
  - media: dvb-core: Fix UAF due to refcount races at releasing
  - wifi: wilc1000: validate pairwise and authentication suite offsets
  - wifi: wilc1000: validate number of channels
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
  - drm/amdkfd: Check for null pointer after calling kmemdup


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.14.2.90
changelog:
  - !341 Backport CVEs and fs bugfixes
  - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
  - bfq: fix null-ptr-deref in bfq_pd_offline
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access()
  - ksmbd: fix heap-based overflow in set_ntacl_dacl()
  - ksmbd: prevent out of bound read for SMB2_WRITE
  - ksmbd: validate length in smb2_write()
  - xfs: fix super block buf log item UAF during force shutdown
  - xfs: wait iclog complete before tearing down AIL
  - xfs: get rid of assert from xfs_btree_islastblock


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.15.0.91
changelog:
  - !347 Backport CVEs and fs bugfixes
  - io_uring: kill goto error handling in io_sqpoll_wait_sq()
  - ext4: fix bad checksum after online resize
  - xfs: fix use-after-free in xattr node block inactivation
  - USB: core: Fix RST error in hub.c
  - USB: core: Prevent nested device-reset calls


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.16.0.92
changelog:
  - !358 Backport CVEs, bugfixes and other
  - binder: fix UAF of alloc->vma in race with munmap()
  - io_uring: add missing item types for splice request
  - xfs: fix overfilling of reserve pool
  - xfs: always succeed at setting the reserve pool size
  - xfs: remove infinite loop when reserving free block pool
  - xfs: use current->journal_info for detecting transaction recursion
  - fix kabi broken due to may_pollfree
  - io_uring: disable polling pollfree files
  - ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
  - driver: char: delete svm.c
  - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
  - fs/ntfs3: Fix attr_punch_hole() null pointer derenference
  - tracing/osnoise: Do not unregister events twice
  - tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
  - !351 AMD: Fix cpu capabilities incorrect detection bug.
  - x86/cpufeatures: Fix cpu capabilities incorrect detection.


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.17.0.93
changelog:
  - !372 Backport 5.10.141 LTS
  - net: neigh: don't call kfree_skb() under spin_lock_irqsave()
  - net/af_packet: check len when min_header_len equals to 0
  - lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
  - netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
  - drm/amdgpu: Increase tlb flush timeout for sriov
  - drm/amd/display: Fix pixel clock programming
  - drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid
  - s390/hypfs: avoid error message under KVM
  - neigh: fix possible DoS due to net iface start/stop loop
  - drm/amd/display: clear optc underflow before turn off odm clock
  - drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
  - drm/amd/display: Avoid MPC infinite loop
  - mmc: mtk-sd: Clear interrupts when cqe off/disable
  - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
  - fbdev: fb_pm2fb: Avoid potential divide by zero error
  - net: fix refcount bug in sk_psock_get (2)
  - HID: hidraw: fix memory leak in hidraw_release()
  - udmabuf: Set the DMA mask for the udmabuf device (v2)
  - HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
  - Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
  - kbuild: Fix include path in scripts/Makefile.modpost
  - s390/mm: do not trigger write fault when vma does not allow VM_WRITE
  - crypto: lib - remove unneeded selection of XOR_BLOCKS
  - x86/nospec: Fix i386 RSB stuffing
  - x86/nospec: Unwreck the RSB stuffing
  - !368 Backport CVEs and bugfixes
  - mm/memory: return vm_fault_t result from migrate_to_ram() callback
  - net: sched: disallow noqueue for qdisc classes
  - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
  - xfs: Fix deadlock on xfs_inodegc_worker
  - net: sched: cbq: dont intepret cls results when asked to drop
  - net: sched: atm: dont intepret cls results when asked to drop
  - scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
  - of/fdt: Don't calculate initrd size from DT if start > end
  - lib/cmdline: avoid page fault in next_arg
  - rndis_wlan: Prevent buffer overflow in rndis_query_oid
  - mm/vmpressure: fix data-race with memcg->socket_pressure
  - !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
  - kasan: add kasan support for memcpy_mcs()
  - arm64: fix return value type of memcpy_mcs()
  - !363 AMD: Support svm guest when host CR4.LA57 is set.
  - KVM: x86: Allow CPU to force vendor-specific TDP level
  - !338 Fix virtio-gpu free issues
  - drm/virtio: free virtqueues on probe failure
  - drm/virtio: Fixes a potential NULL pointer dereference on probe failure


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.18.0.94
changelog:
  - !385 Backport CVEs and bugfixes
  - !384 Backport 5.10.142 LTS
  - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
  - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
  - cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
  - net: sched: fix race condition in qdisc_graft()
  - macvlan: enforce a consistent minimal mtu
  - net: switch to storing KCOV handle directly in sk_buff
  - kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
  - tcp/udp: Make early_demux back namespacified.
  - net: Use u64_stats_fetch_begin_irq() for stats fetch.
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
  - ext4: fix use-after-free in ext4_orphan_cleanup
  - ext4: fix null-ptr-deref in ext4_write_info
  - block: don't allow a disk link holder to itself
  - hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
  - scsi: fix iscsi rescan fails to create block
  - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
  - mm: memcontrol: fix potential oom_lock recursion deadlock
  - irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
  - xfs: fix potential log item leak
  - USB: serial: ch341: fix disabled rx timer on older devices
  - USB: serial: ch341: fix lost character on LCR updates
  - usb: dwc3: disable USB core PHY management
  - usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
  - usb: dwc3: fix PHY disable sequence
  - mmc: core: Fix UHS-I SD 1.8V workaround branch
  - btrfs: harden identification of a stale device
  - drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
  - ALSA: seq: Fix data-race at module auto-loading
  - ALSA: seq: oss: Fix data-race for max_midi_devs access
  - ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
  - net: mac802154: Fix a condition in the receive path
  - ip: fix triggering of 'icmp redirect'
  - wifi: mac80211: Fix UAF in ieee80211_scan_rx()
  - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
  - driver core: Don't probe devices after bus_type.match() probe deferral
  - usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
  - s390: fix nospec table alignments
  - s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
  - usb-storage: Add ignore-residue quirk for NXP PN7462AU
  - USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
  - usb: dwc2: fix wrong order of phy_power_on and phy_init
  - usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
  - USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
  - USB: serial: option: add Quectel EM060K modem
  - USB: serial: option: add support for OPPO R11 diag port
  - USB: serial: cp210x: add Decagon UCA device id
  - xhci: Add grace period after xHC start to prevent premature runtime suspend.
  - thunderbolt: Use the actual buffer in tb_async_error()
  - xen-blkfront: Advertise feature-persistent as user requested
  - xen-blkback: Advertise feature-persistent as user requested
  - mm: pagewalk: Fix race between unmap and page walker
  - xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
  - KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
  - gpio: pca953x: Add mutex_lock for regcache sync in PM
  - hwmon: (gpio-fan) Fix array out of bounds access
  - clk: bcm: rpi: Add missing newline
  - clk: bcm: rpi: Prevent out-of-bounds access
  - clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
  - clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
  - Input: rk805-pwrkey - fix module autoloading
  - clk: core: Fix runtime PM sequence in clk_core_unprepare()
  - Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
  - clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
  - drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
  - USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
  - misc: fastrpc: fix memory corruption on open
  - misc: fastrpc: fix memory corruption on probe
  - iio: adc: mcp3911: use correct formula for AD conversion
  - iio: ad7292: Prevent regulator double disable
  - Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
  - tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
  - vt: Clear selection before changing the font
  - powerpc: align syscall table for ppc32
  - serial: fsl_lpuart: RS485 RTS polariy is inverse
  - net/smc: Remove redundant refcount increase
  - Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
  - tcp: annotate data-race around challenge_timestamp
  - sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
  - kcm: fix strp_init() order and cleanup
  - ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
  - net/sched: fix netdevice reference leaks in attach_default_qdiscs()
  - net: sched: tbf: don't call qdisc_put() while holding tree lock
  - Revert "xhci: turn off port power in shutdown"
  - wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
  - ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
  - ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
  - ieee802154/adf7242: defer destroy_workqueue call
  - iio: adc: mcp3911: make use of the sign bit
  - platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
  - drm/msm/dsi: Fix number of regulators for SDM660
  - drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
  - drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
  - drm/msm/dsi: fix the inconsistent indenting


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.19.0.95
changelog:
  - !403 Backport 5.10.145 - 5.10.149 LTS
  - wifi: mac80211: don't parse mbssid in assoc response
  - mac80211: mlme: find auth challenge directly
  - Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
  - misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
  - misc: pci_endpoint_test: Aggregate params checking for xfer
  - Input: xpad - fix wireless 360 controller breaking after suspend
  - Input: xpad - add supported devices as contributed on github
  - wifi: cfg80211: update hidden BSSes to avoid WARN_ON
  - wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
  - wifi: cfg80211: ensure length byte is present before access
  - wifi: cfg80211/mac80211: reject bad MBSSID elements
  - random: use expired timer rather than wq for mixing fast pool
  - random: avoid reading two cache lines on irq randomness
  - USB: serial: qcserial: add new usb-id for Dell branded EM7455
  - efi: Correct Macmini DMI match in uefi cert quirk
  - ALSA: hda: Fix position reporting on Poulsbo
  - random: clamp credited irq bits to maximum mixed
  - random: restore O_NONBLOCK support
  - Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
  - rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
  - USB: serial: ftdi_sio: fix 300 bps rate for SIO
  - mmc: core: Terminate infinite loop in SD-UHS voltage switch
  - mmc: core: Replace with already defined values for readability
  - drm/amd/display: skip audio setup when audio stream is enabled
  - drm/amd/display: update gamut remap if plane has changed
  - net: atlantic: fix potential memory leak in aq_ndev_close()
  - arch: um: Mark the stack non-executable to fix a binutils warning
  - um: Cleanup compiler warning in arch/x86/um/tls_32.c
  - um: Cleanup syscall_handler_t cast in syscalls_32.h
  - ALSA: hda/hdmi: Fix the converter reuse for the silent stream
  - net/ieee802154: fix uninit value bug in dgram_sendmsg
  - scsi: qedf: Fix a UAF bug in __qedf_probe()
  - ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
  - dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
  - dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
  - dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
  - firmware: arm_scmi: Add SCMI PM driver remove routine
  - compiler_attributes.h: move __compiletime_{error|warning}
  - powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
  - mm: gup: fix the fast GUP race against THP collapse
  - xsk: Inherit need_wakeup flag for shared sockets
  - perf tools: Fixup get_current_dir_name() compilation
  - docs: update mediator information in CoC docs
  - Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
  - ceph: don't truncate file in atomic_open
  - nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
  - ALSA: hda/hdmi: fix warning about PCM count when used with SOF
  - x86/alternative: Fix race in try_get_desc()
  - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
  - clk: iproc: Do not rely on node name for correct PLL setup
  - clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
  - selftests: Fix the if conditions of in test_extra_filter()
  - net: stmmac: power up/down serdes in stmmac_open/release
  - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
  - nvme: add new line after variable declatation
  - cxgb4: fix missing unlock on ETHOFLD desc collect fail path
  - net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
  - usbnet: Fix memory leak in usbnet_disconnect()
  - Input: melfas_mip4 - fix return value check in mip4_probe()
  - Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
  - ASoC: tas2770: Reinit regcache on reset
  - soc: sunxi: sram: Fix debugfs info for A64 SRAM C
  - soc: sunxi: sram: Fix probe function ordering issues
  - soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
  - soc: sunxi: sram: Prevent the driver from being unbound
  - soc: sunxi: sram: Actually claim SRAM regions
  - reset: imx7: Fix the iMX8MP PCIe PHY PERST support
  - ARM: dts: am33xx: Fix MMCHS0 dma properties
  - swiotlb: max mapping size takes min align mask into account
  - media: rkvdec: Disable H.264 error detection
  - media: dvb_vb2: fix possible out of bound access
  - mm: fix madivse_pageout mishandling on non-LRU page
  - mm/migrate_device.c: flush TLB while holding PTL
  - mm: prevent page_frag_alloc() from corrupting the memory
  - mm/page_alloc: fix race condition between build_all_zonelists and page allocation
  - mmc: hsq: Fix data stomping during mmc recovery
  - mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
  - libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
  - net: mt7531: only do PLL once after the reset
  - ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
  - ARM: dts: integrator: Tag PCI host with device_type
  - clk: ingenic-tcu: Properly enable registers before accessing timers
  - Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
  - net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
  - thunderbolt: Explicitly reset plug events delay back to USB4 spec value
  - usb: typec: ucsi: Remove incorrect warning
  - uas: ignore UAS for Thinkplus chips
  - usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
  - uas: add no-uas quirk for Hiksemi usb_disk
  - btrfs: fix hang during unmount when stopping a space reclaim worker
  - ALSA: hda: Fix Nvidia dp infoframe
  - ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
  - ALSA: hda/tegra: Reset hardware
  - ALSA: hda/tegra: Use clk_bulk helpers
  - thunderbolt: Add support for Intel Maple Ridge single port controller
  - thunderbolt: Add support for Intel Maple Ridge
  - ext4: make directory inode spreading reflect flexbg size
  - ext4: limit the number of retries after discarding preallocations blocks
  - devdax: Fix soft-reservation memory description
  - i2c: mlxbf: Fix frequency calculation
  - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
  - i2c: mlxbf: incorrect base address passed during io write
  - i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
  - workqueue: don't skip lockdep work dependency in cancel_work_sync()
  - drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
  - drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
  - drm/amd/display: Limit user regamma to a valid value
  - drm/amdgpu: use dirty framebuffer helper
  - drm/gma500: Fix BUG: sleeping function called from invalid context errors
  - Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
  - cifs: always initialize struct msghdr smb_msg completely
  - cifs: use discard iterator to discard unneeded network data more efficiently
  - drm/amdgpu: Fix check for RAS support
  - vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
  - usb: xhci-mtk: fix issue of out-of-bounds array access
  - s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
  - serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
  - serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
  - serial: Create uart_xmit_advance()
  - drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
  - selftests: forwarding: add shebang for sch_red.sh
  - net: sched: fix possible refcount leak in tc_new_tfilter()
  - net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD
  - net/smc: Stop the CLC flow if no link to map buffers on
  - drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
  - perf kcore_copy: Do not check /proc/modules is unchanged
  - perf jit: Include program header in ELF files
  - can: gs_usb: gs_can_open(): fix race dev->can.state condition
  - netfilter: ebtables: fix memory leak when blob is malformed
  - netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
  - netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
  - net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
  - net/sched: taprio: avoid disabling offload when it was never enabled
  - net: socket: remove register_gifconf
  - net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
  - wireguard: netlink: avoid variable-sized memcpy on sockaddr
  - wireguard: ratelimiter: disable timings test by default
  - net: ipa: properly limit modem routing table use
  - net: ipa: kill IPA_TABLE_ENTRY_SIZE
  - net: ipa: DMA addresses are nicely aligned
  - net: ipa: avoid 64-bit modulus
  - net: ipa: fix table alignment requirement
  - net: ipa: fix assumptions about DMA address size
  - of: mdio: Add of_node_put() when breaking out of for_each_xx
  - drm/hisilicon: Add depends on MMU
  - drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
  - sfc: fix null pointer dereference in efx_hard_start_xmit
  - sfc: fix TX channel offset when using legacy interrupts
  - i40e: Fix set max_tx_rate when it is lower than 1 Mbps
  - i40e: Fix VF set max MTU size
  - iavf: Fix set max MTU size with port VLAN and jumbo frames
  - iavf: Fix bad page state
  - MIPS: Loongson32: Fix PHY-mode being left unspecified
  - MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
  - drm/panel: simple: Fix innolux_g121i1_l01 bus_format
  - net: team: Unsync device addresses on ndo_stop
  - net: bonding: Unsync device addresses on ndo_stop
  - net: bonding: Share lacpdu_mcast_addr definition
  - scsi: mpt3sas: Fix return value check of dma_get_required_mask()
  - scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
  - net: phy: aquantia: wait for the suspend/resume operations to finish
  - net: core: fix flow symmetric hash
  - net: let flow have same hash in two directions
  - iavf: Fix cached head and tail value for iavf_get_tx_pending
  - netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
  - arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
  - dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
  - arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
  - drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
  - arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
  - xfs: validate inode fork size against fork format
  - xfs: reorder iunlink remove operation in xfs_ifree
  - interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
  - mm/slub: fix to return errno if kmalloc() fails
  - can: flexcan: flexcan_mailbox_read() fix return value for drop = true
  - riscv: fix a nasty sigreturn bug...
  - gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
  - gpio: mockup: fix NULL pointer dereference when removing debugfs
  - wifi: mt76: fix reading current per-tid starting sequence number for aggregation
  - efi: libstub: check Shim mode using MokSBStateRT
  - efi: x86: Wipe setup_data on pure EFI boot
  - media: flexcop-usb: fix endpoint type check
  - iommu/vt-d: Check correct capability for sagaw determination
  - ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
  - ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
  - ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
  - ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
  - ALSA: hda/realtek: Re-arrange quirk table entries
  - ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
  - ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
  - ALSA: hda: add Intel 5 Series / 3400 PCI DID
  - ALSA: hda/tegra: set depop delay for tegra
  - USB: serial: option: add Quectel RM520N
  - USB: serial: option: add Quectel BG95 0x0203 composition
  - arm64/bti: Disable in kernel BTI when cross section thunks are broken
  - arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
  - Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
  - vfio/type1: Unpin zero pages
  - vfio/type1: Prepare for batched pinning with struct vfio_batch
  - vfio/type1: Change success value of vaddr_get_pfn()
  - Revert "usb: add quirks for Lenovo OneLink+ Dock"
  - usb: cdns3: fix issue with rearming ISO OUT endpoint
  - usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
  - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
  - usb: add quirks for Lenovo OneLink+ Dock
  - tty: serial: atmel: Preserve previous USART mode if RS485 disabled
  - serial: atmel: remove redundant assignment in rs485_config
  - mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
  - usb: xhci-mtk: relax TT periodic bandwidth allocation
  - usb: xhci-mtk: allow multiple Start-Split in a microframe
  - usb: xhci-mtk: add some schedule error number
  - usb: xhci-mtk: add a function to (un)load bandwidth info
  - usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
  - usb: xhci-mtk: add only one extra CS for FS/LS INTR
  - usb: xhci-mtk: get the microframe boundary for ESIT
  - usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
  - usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
  - usb: dwc3: gadget: Refactor pullup()
  - usb: dwc3: gadget: Prevent repeat pullup()
  - usb: dwc3: Issue core soft reset before enabling run/stop
  - usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
  - usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
  - usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
  - drm/amdgpu: make sure to init common IP before gmc
  - drm/amdgpu: Separate vf2pf work item init from virt data exchange
  - drm/amdgpu: indirect register access for nv12 sriov
  - drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
  - ALSA: hda/sigmatel: Fix unused variable warning for beep power change
  - mksysmap: Fix the mismatch of 'L0' symbols in System.map
  - MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
  - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
  - net: usb: qmi_wwan: add Quectel RM520N
  - ALSA: hda/tegra: Align BDL entry to 4KB boundary
  - ALSA: hda/sigmatel: Keep power up while beep is enabled
  - wifi: mac80211_hwsim: check length for virtio packets
  - rxrpc: Fix calc of resend age
  - rxrpc: Fix local destruction being repeated
  - regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
  - ASoC: nau8824: Fix semaphore unbalance at error paths
  - Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
  - tools/include/uapi: Fix <asm/errno.h> for parisc and xtensa
  - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
  - cifs: revalidate mapping when doing direct writes
  - of/device: Fix up of_dma_configure_id() stub
  - tracing: hold caller_addr to hardirq_{enable,disable}_ip
  - parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
  - drm/meson: Fix OSD1 RGB to YCbCr coefficient
  - drm/meson: Correct OSD1 global alpha value
  - gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
  - NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
  - pinctrl: sunxi: Fix name for A100 R_PIO
  - of: fdt: fix off-by-one error in unflatten_dt_nodes()
  - net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
  - platform/x86/intel: hid: add quirk to support Surface Go 3
  - usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
  - powerpc/pseries/mobility: ignore ibm, platform-facilities updates
  - powerpc/pseries/mobility: refactor node lookup during DT update
  - dmaengine: bestcomm: fix system boot lockups
  - parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
  - parisc: Optimize per-pagetable spinlocks
  - serial: 8250: Fix reporting real baudrate value in c_ospeed field
  - KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
  - KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
  - !399 Backport fs, block and net bugfixes
  - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
  - ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
  - ubifs: Re-statistic cleaned znode count if commit failed
  - ubifs: dirty_cow_znode: Fix memleak in error handling path
  - block, bfq: switch 'bfqg->ref' to use atomic refcount apis
  - cifs: sanitize multiple delimiters in prepath
  - bpf: Fix sockmap calling sleepable function in teardown path
  - bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues
  - !394 Backport 5.10.143 - 5.10.144 LTS
  - Input: goodix - add compatible string for GT1158
  - soc: fsl: select FSL_GUTS driver for DPIO
  - mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
  - usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS
  - platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
  - perf/arm_pmu_platform: fix tests for platform_get_irq() failure
  - drm/amd/amdgpu: skip ucode loading if ucode_size == 0
  - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
  - Input: iforce - add support for Boeder Force Feedback Wheel
  - ieee802154: cc2520: add rc code in cc2520_tx()
  - gpio: mockup: remove gpio debugfs when remove device
  - tg3: Disable tg3 device on system reboot to avoid triggering AER
  - hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
  - HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
  - drm/msm/rd: Fix FIFO-full deadlock
  - Input: goodix - add support for GT1158
  - tracefs: Only clobber mode/uid/gid on remount if asked
  - iommu/vt-d: Correctly calculate sagaw value of IOMMU
  - ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
  - ARM: dts: imx: align SPI NOR node name with dtschema
  - hwmon: (mr75203) enable polling for all VM channels
  - hwmon: (mr75203) fix multi-channel voltage reading
  - hwmon: (mr75203) fix voltage equation for negative source input
  - hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors
  - hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
  - iommu/amd: use full 64-bit value in build_completion_wait()
  - swiotlb: avoid potential left shift overflow
  - MIPS: loongson32: ls1c: Fix hang during startup
  - ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
  - ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
  - tcp: fix early ETIMEDOUT after spurious non-SACK RTO
  - nvme-tcp: fix regression that causes sporadic requests to time out
  - nvme-tcp: fix UAF when detecting digest errors
  - RDMA/mlx5: Set local port to one when accessing counters
  - IB/core: Fix a nested dead lock as part of ODP flow
  - ipv6: sr: fix out-of-bounds read when setting HMAC data.
  - RDMA/siw: Pass a pointer to virt_to_page()
  - xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
  - i40e: Fix kernel crash during module removal
  - ice: use bitmap_free instead of devm_kfree
  - tipc: fix shift wrapping bug in map_get()
  - afs: Use the operation issue time instead of the reply time for callbacks
  - rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
  - ALSA: usb-audio: Register card again for iface over delayed_register option
  - ALSA: usb-audio: Inform the delayed registration more properly
  - netfilter: nf_tables: clean up hook list when offload flags check fails
  - netfilter: br_netfilter: Drop dst references before setting.
  - ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
  - ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
  - ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
  - ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
  - RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift
  - soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
  - RDMA/cma: Fix arguments order in net device validation
  - tee: fix compiler warning in tee_shm_register()
  - regulator: core: Clean up on enable failure
  - ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
  - smb3: missing inode locks in punch hole
  - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
  - scsi: lpfc: Add missing destroy_workqueue() in error path
  - scsi: mpt3sas: Fix use-after-free warning
  - drm/i915: Implement WaEdpLinkRateDataReload
  - nvmet: fix a use-after-free
  - debugfs: add debugfs_lookup_and_remove()
  - kprobes: Prohibit probes in gate area
  - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
  - ALSA: aloop: Fix random zeros in capture data when using jiffies timer
  - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
  - drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
  - fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
  - net/core/skbuff: Check the return value of skb_copy_bits()
  - arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
  - parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
  - parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
  - drm/radeon: add a force flush to delay work when radeon
  - drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
  - drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
  - drm/gem: Fix GEM handle release errors
  - scsi: megaraid_sas: Fix double kfree()
  - scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
  - Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
  - wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
  - efi: libstub: Disable struct randomization
  - tty: n_gsm: avoid call of sleeping functions from atomic context
  - tty: n_gsm: initialize more members at gsm_alloc_mux()
  - xen-blkfront: Cache feature_persistent value before advertisement
  - NFSD: Fix verifier returned in stable WRITEs


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.20.0.96
changelog:
  - !409 Backport CVEs and bugfixes
  - x86/kasan: Populate shadow for shared chunk of the CPU entry area
  - x86/kasan: Add helpers to align shadow addresses up and down
  - x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
  - x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
  - x86/mm: Recompute physical address for every page of per-CPU CEA mapping
  - x86/kasan: Map shadow for percpu pages on demand
  - x86/mm: Randomize per-cpu entry area
  - Huawei BMA: Fix iBMA driver bug
  - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
  - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
  - vfio/iommu_type1: replace kvmalloc with kvzalloc and kfree with kvfree
  - vfio/iommu_type1: replace kfree with kvfree
  - ppp: associate skb with a device at tx
  - arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
  - bpf, sockmap: fix race in sock_map_free()
  - bpf: make sure skb->len != 0 when redirecting to a tunneling device
  - raw: fix KABI for backporting raw RCU conversion patches
  - ipv6: Fix crash when IPv6 is administratively disabled
  - raw: remove unused variables from raw6_icmp_error()
  - raw: fix a typo in raw_icmp_error()
  - raw: complete rcu conversion
  - raw: Use helpers for the hlist_nulls variant.
  - raw: Fix mixed declarations error in raw_icmp_error().
  - raw: convert raw sockets to RCU
  - raw: use more conventional iterators
  - cifs: Fix use-after-free in rdata->read_into_pages()
  - net: bridge: mcast: add and enforce query interval minimum
  - net: bridge: mcast: add and enforce startup query interval minimum
  - media: vivid: fix compose size exceed boundary
  - !346 anolis: bond: broadcast ARP or ND messages to all slaves
  - !404 kvm: arm64: fix some pvsched bugs
  - kvm: arm64: fix some pvsched bugs
  - anolis: bond: broadcast ARP or ND messages to all slaves


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.21.0.97
changelog:
  - !417 Backport CVEs and bugfixes
  - net: mpls: fix stale pointer if allocation fails during device rename
  - x86/bugs: Flush IBP in ib_prctl_set()
  - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
  - binder: Address corner cases in deferred copy and fixup
  - binder: fix pointer cast warning
  - binder: defer copies of pre-patched txn data
  - binder: read pre-translated fds from sender buffer
  - binder: avoid potential data leakage when copying txn
  - rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
  - net/sched: sch_taprio: do not schedule in taprio_reset()
  - net/sched: sch_taprio: fix possible use-after-free
  - nbd: fix assignment error for first_minor in nbd_dev_add
  - md/raid10: fix wrong setting of max_corr_read_errors
  - md/raid10: fix overflow in safe_delay_store
  - md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
  - arm64: topology: fix possible overflow in amu_fie_setup()
  - ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
  - io_uring: fix soft lockup in io_submit_sqes()
  - fix kabi broken due to import of 5.15-stable io_uring
  - io_uring: import 5.15-stable io_uring
  - task_work: add helper for more targeted task_work canceling
  - coredump: Limit what can interrupt coredumps
  - kernel: provide create_io_thread() helper
  - fs: provide locked helper variant of close_fd_get_file()
  - kernel: remove checking for TIF_NOTIFY_SIGNAL
  - entry: Add support for TIF_NOTIFY_SIGNAL
  - signal: Add task_sigpending() helper
  - arm: add support for TIF_NOTIFY_SIGNAL
  - arm64: add support for TIF_NOTIFY_SIGNAL
  - riscv: add support for TIF_NOTIFY_SIGNAL
  - powerpc: add support for TIF_NOTIFY_SIGNAL
  - x86: Wire up TIF_NOTIFY_SIGNAL
  - iov_iter: add helper to save iov_iter state
  - perf beauty: Update copy of linux/socket.h with the kernel sources
  - perf trace beauty: Update copy of linux/socket.h with the kernel sources
  - io_uring: correct pinned_vm accounting
  - file: Rename __close_fd_get_file close_fd_get_file
  - io_uring: don't hold uring_lock when calling io_run_task_work*
  - io_uring: don't take uring_lock during iowq cancel
  - fs: make do_renameat2() take struct filename
  - net: add accept helper not installing fd
  - net: provide __sys_shutdown_sock() that takes a socket
  - fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
  - Make sure nd->path.mnt and nd->path.dentry are always valid pointers
  - fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy*
  - fs: add support for LOOKUP_CACHED
  - Revert "io_uring: fix soft lockup when call __io_remove_buffers"
  - Revert "io_uring: deduplicate failing task_work_add"
  - Revert "io_uring: don't take uring_lock during iowq cancel"
  - Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
  - Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
  - Revert "[Huawei] io_uring: fix soft lockup in io_submit_sqes()"
  - Revert "[Huawei] io_uring:drop identity before creating a private one"


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.22.0.98
changelog:
  - !455 Backport CVEs and bugfixes
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
  - HID: check empty report_list in bigben_probe()
  - HID: check empty report_list in hid_validate_values()
  - neigh: make sure used and confirmed times are valid
  - Documentation/hw-vuln: Fix rST warning
  - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
  - KVM: x86: Mitigate the cross-thread return address predictions bug
  - x86/speculation: Identify processors vulnerable to SMT RSB predictions
  - radi10: fix leak of 'r10bio->remaining' for recovery
  - md: fix soft lockup in status_resync
  - md: don't update recovery_cp when curr_resync is ACTIVE
  - md: Ensure resync is reported after it starts
  - md: Use enum for overloaded magic numbers used by mddev->curr_resync
  - raid10: fix leak of io accounting
  - tcp: Fix listen() regression in 5.15.88.
  - net/ulp: Remove redundant ->clone() test in inet_clone_ulp().
  - net/ulp: use consistent error code when blocking ULP
  - net/ulp: prevent ULP without clone op from entering the LISTEN status
  - net/tls: tls_is_tx_ready() checked list_entry
  - usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
  - ntfs: fix out-of-bounds read in ntfs_attr_find()
  - splice: don't generate zero-len segement bvecs
  - rds: rds_rm_zerocopy_callback() use list_first_entry()
  - tap: tap_open(): correctly initialize socket uid
  - tun: tun_chr_open(): correctly initialize socket uid
  - net: add sock_init_data_uid()
  - ring-buffer: Handle race between rb_move_tail and rb_check_pages
  - blk-mq: use quiesced elevator switch when reinitializing queues
  - ovl: fix use inode directly in rcu-walk mode


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.23.0.99
changelog:
  - !484 Backport CVEs and bugfixes
  - scsi: cancel the inflight async device probe when remove scsi_target
  - ring-buffer: Fix race between reset page and reading page
  - raid1, raid10: switch to precise io accounting
  - block: add precise io accouting apis
  - md/raid10: fix memleak for 'conf->bio_split'
  - scsi: fix use-after-free problem in scsi_remove_target
  - sctp: fail if no bound addresses can be used for a given scope
  - ext4: fix WARNING in mb_find_extent
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
  - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
  - scsi: iscsi: Move pool freeing
  - xfs: aborting inodes on shutdown may need buffer lock
  - ext4: fix incorrect options show of original mount_opt and extend mount_opt2
  - !473 [sync] PR-332: [5.10]Make Multiple functions On Netswift PCIE NIC belong to different IOMMU group
  - openeuler: pci: workaround multiple functions can be assigned to only one VM
  - !452 intel: backport isst issue fix and other update to align with upstream 6.0
  - !457 Backport CVEs and bugfixes
  - !464 Revert "scsi: fix iscsi rescan fails to create block"
  - Revert "scsi: fix iscsi rescan fails to create block"
  - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
  - platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
  - platform/x86: ISST: use semi-colons instead of commas
  - platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword
  - platform/x86: ISST: Change PCI device macros
  - platform/x86: ISST: Allow configurable offset range
  - platform/x86: ISST: Check for unaligned mmio address
  - platform/x86: ISST: Fix optimization with use of numa
  - platform/x86: ISST: Use numa node id for cpu pci dev mapping
  - platform/x86: ISST: Optimize CPU to PCI device mapping


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.24.0.100
changelog:
  - !513 Backport CVEs and bugfixes
  - livepatch/core: Fix hungtask against cpu hotplug on x86
  - seccomp: Move copy_seccomp() to no failure path.
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
  - mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
  - mm: optimize do_wp_page() for exclusive pages in the swapcache
  - ftrace: Fix invalid address access in lookup_rec() when index is 0
  - tipc: add an extra conn_get in tipc_conn_alloc
  - tipc: set con sock in tipc_conn_alloc
  - ext4: fix another off-by-one fsmap error on 1k block filesystems
  - mm/vmalloc: huge vmalloc backing pages should be split rather than compound
  - HID: asus: use spinlock to safely schedule workers
  - HID: asus: use spinlock to protect concurrent accesses
  - HID: asus: Remove check for same LED brightness on set
  - jbd2: fix data missing when reusing bh which is ready to be checkpointed


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.25.0.101
changelog:
  - !530 Backport CVEs and bugfixes
  - block: fix use-after-free of q->q_usage_counter
  - block: move q_usage_counter release into blk_queue_release
  - Revert "block: fix null-deref in percpu_ref_put"
  - md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
  - xfs, iomap: limit individual ioend chain lengths in writeback
  - net/sched: tcindex: search key must be 16 bits
  - net/sched: tcindex: update imperfect hash filters respecting rcu
  - tty: fix out-of-bounds access in tty_driver_lookup_tty()
  - fs/ntfs3: Validate resident attribute name
  - Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
  - mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
  - coredump: fix kabi broken in struct coredump_params
  - coredump: Use the vma snapshot in fill_files_note
  - coredump/elf: Pass coredump_params into fill_note_info
  - coredump: Remove the WARN_ON in dump_vma_snapshot
  - coredump: Snapshot the vmas in do_coredump
  - mm/swapfile: add cond_resched() in get_swap_pages()
  - mm: slince possible data races about pgdat->kswapd
  - mm: fix null-ptr-deref in kswapd_is_running()
  - fs/ntfs3: Validate MFT flags before replaying logs
  - fs/ntfs3: Validate attribute name offset
  - bpf: Fixes possible race in update_prog_stats() for 32bit arches
  - bpf: Avoid races in __bpf_prog_run() for 32bit arches
  - ext4: make sure fs error flag setted before clear journal error
  - ext4: commit super block if fs record error when journal record without error
  - ima: Fix memory leakage in ima_store_template
  - af_unix: Get user_ns from in_skb in unix_diag_get_exact().
  - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  - arm64: errata: Remove AES hwcap for COMPAT tasks
  - ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
  - kernel: Initialize cpumask before parsing
  - softirq: Don't try waking ksoftirqd before it has been spawned
  - bpf: Prevent decl_tag from being referenced in func_proto arg
  - bpf: Skip task with pid=1 in send_signal_common()
  - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
  - !461 Backport CVEs and bugfixes
  - !518 [sync] PR-374: Enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64 by default
  - uprobe: enable CONFIG_UPROBES_SUPPORT_PC_ALTER in arm64
  - malidp: Fix NULL vs IS_ERR() checking


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.27.0.103
changelog:
  - !562 Backport CVEs and bugfixes
  - net: sched: Use struct_size() helper in kvmalloc()
  - net_sched: Use struct_size() and flex_array_size() helpers
  - ext4: dio take shared inode lock when overwriting preallocated blocks
  - ext4: fix race between writepages and remount
  - mm: mem_reliable: Initialize reliable_nr_page when mm_init()
  - clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
  - kvm: initialize all of the kvm_debugregs structure before sending it to userspace
  - nvme: use nvme_cid to generate command_id in trace event
  - xfs: don't report reserved bnobt space as available
  - xfs: don't include bnobt blocks when reserving free block pool
  - xfs: set aside allocation btree blocks from block reservation
  - xfs: introduce in-core global counter of allocbt blocks
  - act_mirred: use the backlog for nested calls to mirred ingress
  - net/sched: act_mirred: better wording on protection against excessive stack growth
  - net/sched: act_mirred: refactor the handle of xmit
  - scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
  - !557 net: hns3: modify reset delay time to avoid configuration timeout
  - net: hns3: modify reset delay time to avoid configuration timeout


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.28.0.104
changelog:
  - !573 Backport CVEs and bugfixes
  - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
  - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
  - ubi: ensure that VID header offset + VID header size <= alloc, size
  - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct()
  - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach
  - ring-buffer: Fix race while reader and writer are on the same page
  - loop: Add parm check in loop_control_ioctl
  - ext4: Fix i_disksize exceeding i_size problem in paritally written case
  - ext4: ext4_put_super: Remove redundant checking for 'sbi->s_journal_bdev'
  - ext4: Fix reusing stale buffer heads from last failed mounting
  - btrfs: fix race between quota disable and quota assign ioctls
  - dm crypt: add cond_resched() to dmcrypt_write()
  - driver core: Fix lockdep warning on wfs_lock
  - driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
  - xfs: don't leak memory when attr fork loading fails
  - xfs: delete unnecessary NULL checks
  - xfs: replace inode fork size macros with functions
  - xfs: replace XFS_IFORK_Q with a proper predicate function
  - xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
  - xfs: make inode attribute forks a permanent part of struct xfs_inode
  - xfs: convert XFS_IFORK_PTR to a static inline helper
  - xfs: don't reuse busy extents on extent trim
  - fs/xfs: convert comma to semicolon
  - xfs: xfs_ail_push_all_sync() stalls when racing with updates
  - xfs: check buffer pin state after locking in delwri_submit
  - xfs: log worker needs to start before intent/unlink recovery


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.29.0.105
changelog:
  - !589 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
  - !590 Backport CVEs and bugfixes
  - net/sched: Retire tcindex classifier
  - drm/vmwgfx: Validate the box size for the snooped cursor
  - netfilter: nf_tables: nft_parse_register can return a negative value
  - netfilter: nf_tables: validate registers coming from userspace.
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
  - KVM: nVMX: add missing consistency checks for CR0 and CR4
  - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
  - xfs: __percpu_counter_compare() inode count debug too expensive
  - xfs: fix memcpy fortify errors in EFI log format copying
  - xfs: fix memcpy fortify errors in RUI log format copying
  - xfs: fix memcpy fortify errors in CUI log format copying
  - xfs: fix memcpy fortify errors in BUI log format copying
  - xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
  - xfs: allow setting full range of panic tags
  - xfs: don't use BMBT btree split workers for IO completion
  - xfs: fix extent busy updating
  - xfs: get root inode correctly at bulkstat
  - xfs: invalidate xfs_bufs when allocating cow extents
  - xfs: attach dquots to inode before reading data/cow fork mappings
  - xfs: invalidate block device page cache during unmount
  - xfs: add selinux labels to whiteout inodes
  - xfs: convert buf_cancel_table allocation to kmalloc_array
  - xfs: don't leak xfs_buf_cancel structures when recovery fails
  - xfs: refactor buffer cancellation table allocation
  - xfs: fix type mismatches in the inode reclaim functions
  - xfs: don't allow log writes if the data device is readonly
  - x86/speculation: Allow enabling STIBP with legacy IBRS
  - !578  Backport 5.10.150 LTS
  - Revert "drm/amdgpu: make sure to init common IP before gmc"
  - gcov: support GCC 12.1 and newer compilers
  - f2fs: fix wrong condition to trigger background checkpoint correctly
  - thermal: intel_powerclamp: Use first online CPU as control_cpu
  - ext4: continue to expand file system when the target size doesn't reach
  - Revert "drm/amdgpu: use dirty framebuffer helper"
  - Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega"
  - net/ieee802154: don't warn zero-sized raw_sendmsg()
  - Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
  - net: ieee802154: return -EINVAL for unknown addr type
  - perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
  - clk: bcm2835: Make peripheral PLLC critical
  - usb: idmouse: fix an uninit-value in idmouse_open
  - nvmet-tcp: add bounds check on Transfer Tag
  - nvme: copy firmware_rev on each init
  - staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
  - Revert "usb: storage: Add quirk for Samsung Fit flash"
  - usb: musb: Fix musb_gadget.c rxstate overflow bug
  - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
  - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
  - soundwire: intel: fix error handling on dai registration issues
  - soundwire: cadence: Don't overwrite msg->buf during write commands
  - bcache: fix set_at_max_writeback_rate() for multiple attached devices
  - ata: libahci_platform: Sanity check the DT child nodes number
  - blk-throttle: prevent overflow while calculating wait time
  - staging: vt6655: fix potential memory leak
  - power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
  - nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
  - scsi: 3w-9xxx: Avoid disabling device if failing to enable it
  - usb: host: xhci-plat: suspend/resume clks for brcm
  - usb: host: xhci-plat: suspend and resume clocks
  - clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
  - media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
  - clk: zynqmp: Fix stack-out-of-bounds in strncpy`
  - btrfs: scrub: try to fix super block errors
  - arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply
  - kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
  - ARM: dts: imx6sx: add missing properties for sram
  - ARM: dts: imx6sll: add missing properties for sram
  - ARM: dts: imx6sl: add missing properties for sram
  - ARM: dts: imx6qp: add missing properties for sram
  - ARM: dts: imx6dl: add missing properties for sram
  - ARM: dts: imx6q: add missing properties for sram
  - ARM: dts: imx7d-sdb: config the max pressure for tsc2046
  - drm/amd/display: Remove interface for periodic interrupt 1
  - drm/dp: Don't rewrite link config when setting phy test pattern
  - mmc: sdhci-msm: add compatible string check for sdm670
  - drm/meson: explicitly remove aggregate driver at module unload time
  - drm/amdgpu: fix initial connector audio value
  - ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
  - platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
  - platform/chrome: cros_ec: Notify the PM of wake events during resume
  - drm: panel-orientation-quirks: Add quirk for Anbernic Win600
  - drm/vc4: vec: Fix timings for VEC modes
  - drm: bridge: dw_hdmi: only trigger hotplug event on link change
  - udmabuf: Set ubuf->sg = NULL if the creation of sg table fails
  - drm/amd/display: fix overflow on MIN_I64 definition
  - gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
  - drm: Prevent drm_copy_field() to attempt copying a NULL pointer
  - drm: Use size_t type for len variable in drm_copy_field()
  - drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
  - Bluetooth: L2CAP: Fix user-after-free
  - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
  - wifi: rt2x00: correctly set BBP register 86 for MT7620
  - wifi: rt2x00: set SoC wmac clock register
  - wifi: rt2x00: set VGC gain for both chains of MT7620
  - wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
  - wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
  - can: bcm: check the result of can_send() in bcm_can_tx()
  - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
  - Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
  - regulator: core: Prevent integer underflow
  - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
  - xfrm: Update ipcomp_scratches with NULL when freed
  - wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
  - tcp: annotate data-race around tcp_md5sig_pool_populated
  - openvswitch: Fix overreporting of drops in dropwatch
  - openvswitch: Fix double reporting of drops in dropwatch
  - bpftool: Clear errno after libcap's checks
  - wifi: brcmfmac: fix invalid address access when enabling SCAN log level
  - NFSD: fix use-after-free on source server when doing inter-server copy
  - NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data
  - x86/entry: Work around Clang __bdos() bug
  - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
  - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
  - MIPS: BCM47XX: Cast memcmp() of function to (void *)
  - ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
  - rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
  - rcu: Back off upon fill_page_cache_func() allocation failure
  - selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
  - f2fs: fix to account FS_CP_DATA_IO correctly
  - f2fs: fix to avoid REQ_TIME and CP_TIME collision
  - f2fs: fix race condition on setting FI_NO_EXTENT flag
  - ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
  - thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
  - crypto: cavium - prevent integer overflow loading firmware
  - crypto: marvell/octeontx - prevent integer overflows
  - kbuild: rpm-pkg: fix breakage when V=1 is used
  - kbuild: remove the target in signal traps when interrupted
  - tracing: kprobe: Make gen test module work in arm and riscv
  - tracing: kprobe: Fix kprobe event gen test module on exit
  - iommu/iova: Fix module config properly
  - crypto: qat - fix DMA transfer direction
  - crypto: qat - use pre-allocated buffers in datapath
  - crypto: qat - fix use of 'dma_map_single'
  - crypto: inside-secure - Change swab to swab32
  - crypto: ccp - Release dma channels before dmaengine unrgister
  - crypto: akcipher - default implementation for setting a private key
  - iommu/omap: Fix buffer overflow in debugfs
  - cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
  - hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear()
  - crypto: sahara - don't sleep when in softirq
  - powerpc: Fix SPE Power ISA properties for e500v1 platforms
  - powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
  - x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
  - powerpc/powernv: add missing of_node_put() in opal_export_attrs()
  - powerpc/pci_dn: Add missing of_node_put()
  - powerpc/sysdev/fsl_msi: Add missing of_node_put()
  - powerpc/math_emu/efp: Include module.h
  - mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
  - clk: ast2600: BCLK comes from EPLL
  - clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
  - clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
  - clk: baikal-t1: Add SATA internal ref clock buffer
  - clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
  - clk: baikal-t1: Fix invalid xGMAC PTP clock divider
  - clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
  - spmi: pmic-arb: correct duplicate APID to PPID mapping logic
  - dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
  - clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
  - mfd: sm501: Add check for platform_driver_register()
  - mfd: fsl-imx25: Fix check for platform_get_irq() errors
  - mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
  - mfd: lp8788: Fix an error handling path in lp8788_probe()
  - mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
  - mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
  - fsi: core: Check error number after calling ida_simple_get
  - clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
  - scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
  - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
  - serial: 8250: Fix restoring termios speed after suspend
  - firmware: google: Test spinlock on panic path to avoid lockups
  - staging: vt6655: fix some erroneous memory clean-up loops
  - phy: qualcomm: call clk_disable_unprepare in the error handling
  - tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
  - serial: 8250: Toggle IER bits on only after irq has been set up
  - serial: 8250: Add an empty line and remove some useless {}
  - drivers: serial: jsm: fix some leaks in probe
  - usb: gadget: function: fix dangling pnp_string in f_printer.c
  - xhci: Don't show warning for reinit on known broken suspend
  - IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
  - RDMA/cm: Use SLID in the work completion as the DLID in responder side
  - md/raid5: Ensure stripe_fill happens on non-read IO with journal
  - md: Replace snprintf with scnprintf
  - mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
  - ata: fix ata_id_has_dipm()
  - ata: fix ata_id_has_ncq_autosense()
  - ata: fix ata_id_has_devslp()
  - ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
  - RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
  - mtd: rawnand: fsl_elbc: Fix none ECC mode
  - mtd: devices: docg3: check the return value of devm_ioremap() in the probe
  - dyndbg: drop EXPORTed dynamic_debug_exec_queries
  - dyndbg: let query-modname override actual module name
  - dyndbg: fix module.dyndbg handling
  - dyndbg: fix static_branch manipulation
  - dmaengine: hisilicon: Add multi-thread support for a DMA channel
  - dmaengine: hisilicon: Fix CQ head update
  - dmaengine: hisilicon: Disable channels when unregister hisi_dma
  - fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
  - misc: ocxl: fix possible refcount leak in afu_ioctl()
  - RDMA/rxe: Fix the error caused by qp->sk
  - RDMA/rxe: Fix "kernel NULL pointer dereference" error
  - media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
  - media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start()
  - tty: xilinx_uartps: Fix the ignore_status
  - media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
  - HSI: omap_ssi_port: Fix dma_map_sg error check
  - HSI: omap_ssi: Fix refcount leak in ssi_probe
  - clk: tegra20: Fix refcount leak in tegra20_clock_init
  - clk: tegra: Fix refcount leak in tegra114_clock_init
  - clk: tegra: Fix refcount leak in tegra210_clock_init
  - clk: sprd: Hold reference returned by of_get_parent()
  - clk: berlin: Add of_node_put() for of_get_parent()
  - clk: qoriq: Hold reference returned by of_get_parent()
  - clk: oxnas: Hold reference returned by of_get_parent()
  - clk: meson: Hold reference returned by of_get_parent()
  - usb: common: debug: Check non-standard control requests
  - usb: common: move function's kerneldoc next to its definition
  - usb: common: add function to get interval expressed in us unit
  - usb: common: Parse for USB SSP genXxY
  - usb: ch9: Add USB 3.2 SSP attributes
  - iio: ABI: Fix wrong format of differential capacitance channel ABI.
  - iio: inkern: only release the device node when done with it
  - iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
  - iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
  - iio: adc: at91-sama5d2_adc: check return status for pressure and touch
  - iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
  - ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
  - ARM: Drop CMDLINE_* dependency on ATAGS
  - ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
  - soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
  - ia64: export memory_add_physaddr_to_nid to fix cxl build error
  - ARM: dts: kirkwood: lsxl: remove first ethernet port
  - ARM: dts: kirkwood: lsxl: fix serial line
  - ARM: dts: turris-omnia: Fix mpp26 pin name and comment
  - soc: qcom: smem_state: Add refcounting for the 'state->of_node'
  - soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
  - memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
  - memory: of: Fix refcount leak bug in of_get_ddr_timings()
  - memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
  - ALSA: hda/hdmi: Don't skip notification handling during PM operation
  - ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
  - ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
  - ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
  - ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
  - mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
  - ALSA: dmaengine: increment buffer pointer atomically
  - ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
  - drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
  - drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx
  - ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
  - mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
  - drm/omap: dss: Fix refcount leak bugs
  - ALSA: hda: beep: Simplify keep-power-at-enable behavior
  - ASoC: rsnd: Add check for rsnd_mod_power_on
  - drm/bridge: megachips: Fix a null pointer dereference bug
  - drm: fix drm_mipi_dbi build errors
  - platform/x86: msi-laptop: Fix resource cleanup
  - platform/x86: msi-laptop: Fix old-ec check for backlight registering
  - ASoC: tas2764: Fix mute/unmute
  - ASoC: tas2764: Drop conflicting set_bias_level power setting
  - ASoC: tas2764: Allow mono streams
  - platform/chrome: fix memory corruption in ioctl
  - platform/chrome: fix double-free in chromeos_laptop_prepare()
  - drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node()
  - drm/dp_mst: fix drm_dp_dpcd_read return value checks
  - drm/bridge: parade-ps8640: Fix regulator supply order
  - drm/mipi-dsi: Detach devices when removing the host
  - drm/bridge: Avoid uninitialized variable warning
  - drm: bridge: adv7511: fix CEC power down control register offset
  - once: add DO_ONCE_SLOW() for sleepable contexts
  - net/ieee802154: reject zero-sized raw_sendmsg()
  - net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
  - spi: Ensure that sg_table won't be used after being freed
  - tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
  - sctp: handle the error returned from sctp_auth_asoc_init_active_key
  - vhost/vsock: Use kvmalloc/kvfree for larger packets.
  - wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
  - spi: s3c64xx: Fix large transfers with DMA
  - netfilter: nft_fib: Fix for rpath check with VRF devices
  - Bluetooth: hci_core: Fix not handling link timeouts propertly
  - i2c: mlxbf: support lock mechanism
  - spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
  - spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
  - x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype
  - x86/microcode/AMD: Track patch allocation size explicitly
  - wifi: ath11k: fix number of VHT beamformee spatial streams
  - Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
  - bpf: Ensure correct locking around vulnerable function find_vpid()
  - net: fs_enet: Fix wrong check in do_pd_setup
  - wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
  - wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
  - bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
  - spi: meson-spicc: do not rely on busy flag in pow2 clk ops
  - wifi: rtl8xxxu: Fix skb misuse in TX queue selection
  - spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
  - spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
  - selftests/xsk: Avoid use-after-free on ctx
  - wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
  - Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
  - Bluetooth: btusb: fix excessive stack usage
  - Bluetooth: btusb: Fine-tune mt7663 mechanism.
  - x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register
  - spi: mt7621: Fix an error message in mt7621_spi_probe()
  - bpftool: Fix a wrong type cast in btf_dumper_int
  - wifi: mac80211: allow bw change during channel switch in mesh
  - leds: lm3601x: Don't use mutex after it was destroyed
  - wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
  - nfsd: Fix a memory leak in an error handling path
  - objtool: Preserve special st_shndx indexes in elf_update_symbol
  - ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
  - ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd()
  - MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
  - MIPS: SGI-IP27: Free some unused memory
  - sh: machvec: Use char[] for section boundaries
  - userfaultfd: open userfaultfds with O_RDONLY
  - selinux: use "grep -E" instead of "egrep"
  - smb3: must initialize two ACL struct fields to zero
  - drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
  - drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
  - drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
  - drm/nouveau/kms/nv140-: Disable interlacing
  - staging: greybus: audio_helper: remove unused and wrong debugfs usage
  - KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
  - KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
  - KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
  - media: cedrus: Set the platform driver data earlier
  - efi: libstub: drop pointless get_memory_map() call
  - thunderbolt: Explicitly enable lane adapter hotplug events at startup
  - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
  - ring-buffer: Add ring_buffer_wake_waiters()
  - ring-buffer: Check pending waiters when doing wake ups as well
  - ring-buffer: Have the shortest_full queue be the shortest not longest
  - ring-buffer: Allow splice to read previous partially read pages
  - ftrace: Properly unset FTRACE_HASH_FL_MOD
  - livepatch: fix race between fork and KLP transition
  - ext4: update 'state->fc_regions_size' after successful memory allocation
  - ext4: fix potential memory leak in ext4_fc_record_regions()
  - ext4: fix potential memory leak in ext4_fc_record_modified_inode()
  - ext4: fix miss release buffer head in ext4_fc_write_inode
  - ext4: place buffer head allocation before handle start
  - ext4: don't increase iversion counter for ea_inodes
  - ext4: make ext4_lazyinit_thread freezable
  - ext4: avoid crash when inline data creation follows DIO write
  - jbd2: add miss release buffer head in fc_do_one_pass()
  - jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
  - jbd2: fix potential buffer head reference count leak
  - jbd2: wake up journal waiters in FIFO order, not LIFO
  - hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
  - hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
  - hardening: Clarify Kconfig text for auto-var-init
  - f2fs: fix to do sanity check on summary info
  - f2fs: fix to do sanity check on destination blkaddr during recovery
  - f2fs: increase the limit for reserve_root
  - btrfs: fix race between quota enable and quota rescan ioctl
  - scsi: qedf: Populate sysfs attributes for vport
  - powerpc/boot: Explicitly disable usage of SPE instructions
  - powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
  - PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
  - mm/mmap: undo ->mmap() when arch_validate_flags() fails
  - drm/udl: Restore display mode on resume
  - drm/virtio: Check whether transferred 2D BO is shmem
  - nvme-pci: set min_align_mask before calculating max_hw_sectors
  - UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - riscv: Pass -mno-relax only on lld < 15.0.0
  - riscv: Make VM_WRITE imply VM_READ
  - riscv: Allow PROT_WRITE-only mmap()
  - parisc: fbdev/stifb: Align graphics memory size to 4MB
  - RISC-V: Make port I/O string accessors actually work
  - regulator: qcom_rpm: Fix circular deferral regression
  - hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
  - ASoC: wcd934x: fix order of Slimbus unprepare/disable
  - ASoC: wcd9335: fix order of Slimbus unprepare/disable
  - platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
  - HID: multitouch: Add memory barriers
  - fs: dlm: handle -EBUSY first in lock arg validation
  - fs: dlm: fix race between test_bit() and queue_work()
  - mmc: sdhci-sprd: Fix minimum clock limit
  - can: kvaser_usb_leaf: Fix CAN state after restart
  - can: kvaser_usb_leaf: Fix TX queue out of sync after restart
  - can: kvaser_usb_leaf: Fix overread with an invalid command
  - can: kvaser_usb: Fix use of uninitialized completion
  - usb: add quirks for Lenovo OneLink+ Dock
  - iio: pressure: dps310: Reset chip after timeout
  - iio: pressure: dps310: Refactor startup procedure
  - iio: adc: ad7923: fix channel readings for some variants
  - iio: ltc2497: Fix reading conversion results
  - iio: dac: ad5593r: Fix i2c read protocol requirements
  - cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
  - cifs: destage dirty pages before re-reading them for cache=none
  - mtd: rawnand: atmel: Unmap streaming DMA mappings
  - ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
  - ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
  - ALSA: hda/realtek: Correct pin configs for ASUS G533Z
  - ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
  - ALSA: usb-audio: Fix NULL dererence at error path
  - ALSA: usb-audio: Fix potential memory leaks
  - ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
  - ALSA: oss: Fix potential deadlock at unregistration


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.30.0.106
changelog:
  - !631 Backport CVEs and bugfixes
  - bonding: Fix memory leak when changing bond type to Ethernet
  - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
  - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
  - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
  - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
  - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
  - mm: mem_reliable: Fix blank space issue in reliable_report_usage()
  - timers/nohz: Last resort update jiffies on nohz_full IRQ entry
  - xfs: don't leak btree cursor when insrec fails after a split
  - xfs: avoid unnecessary runtime sibling pointer endian conversions
  - xfs: detect self referencing btree sibling pointers
  - xfs: introduce xfs_buf_daddr()
  - xfs: move kernel-specific superblock validation out of libxfs
  - xfs: bound maximum wait time for inodegc work
  - xfs: introduce xfs_inodegc_push()
  - xfs: flush inodegc workqueue tasks before cancel
  - xfs: drop async cache flushes from CIL commits.
  - xfs: limit iclog tail updates
  - xfs: need to see iclog flags in tracing
  - io_uring: ensure that io_init_req() passes in the right issue_flags
  - io_uring: add missing lock in io_get_file_fixed


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.31.0.107
changelog:
  - !721 Backport CVEs and bugfixes
  - !694 [sync] PR-625: AMD: Fix build warning.
  - USB: gadgetfs: Fix race between mounting and unmounting
  - prlimit: do_prlimit needs to have a speculation check
  - ext4: check iomap type only if ext4_iomap_begin() does not fail
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern
  - net: qcom/emac: Fix use after free bug in emac_remove due to race condition
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
  - ext4: only update i_reserved_data_blocks on successful block allocation
  - can: af_can: fix NULL pointer dereference in can_rcv_filter
  - RDMA/core: Refactor rdma_bind_addr
  - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
  - scsi: dpt_i2o: Remove obsolete driver
  - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
  - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
  - bpf, sockmap: Fix double bpf_prog_put on error case in map_link
  - bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
  - bpf, sockmap: Attach map progs to psock early for feature probes
  - bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
  - bpf, sockmap: Fix race in ingress receive verdict with redirect to self
  - kabi: Fix kabi breakage without build warning.
  - Revert "kabi: Fix kabi breakage caused by commit d5616bac7ada."


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.32.0.108
changelog:
  - !774 Backport CVEs and bugfixes
  - filemap: Correct the conditions for marking a folio as accessed
  - Revert "filemap: Correct the conditions for marking a folio as accessed"
  - netrom: Fix use-after-free caused by accept on already connected socket
  - bluetooth: Perform careful capability checks in hci_sock_ioctl()
  - fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
  - fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
  - fs/ntfs3: Validate data run offset
  - xfs: buffer pins need to hold a buffer reference
  - ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
  - fix kabi broken due to import new inode operation get_inode_acl
  - ovl: enable RCU'd ->get_acl()
  - vfs: add rcu argument to ->get_acl() callback
  - bpf: add missing header file include
  - uaccess: Add speculation barrier to copy_from_user()
  - !685 [sync] PR-675: driver/hifc&hinic: Fix compile error in allyesconfigs
  - scsi/hifc: Fix compile error in allyesconfigs
  - net/hinic: Fix compile error in allyesconfigs


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.33.0.109
changelog:
  - !801 Backport CVEs
  - netfilter: nf_tables: deactivate anonymous set from preparation phase
  - xfs: verify buffer contents when we skip log replay
  - !779 [sync] PR-768: Backport 5.10.151 LTS
  - kbuild: Add skip_encoding_btf_enum64 option to pahole
  - kbuild: Unify options for BTF generation for vmlinux and modules
  - kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21
  - kbuild: Quote OBJCOPY var to avoid a pahole call break the build
  - bpf: Generate BTF_KIND_FLOAT when linking vmlinux


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.34.0.110
changelog:
  - !861 Backport CVEs and bugfixes
  - drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
  - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
  - drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
  - cgroup: Stop task iteration when rebinding subsystem
  - sched/topology: Fix exceptional memory access in sd_llc_free_all()
  - block: Fix the partition start may overflow in add_partition()
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
  - iomap: don't invalidate folios after writeback errors
  - iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
  - iomap: Don't create iomap_page objects for inline files
  - iomap: Permit pages without an iop to enter writeback
  - md: fix kabi broken in struct mddev
  - md: use interruptible apis in idle/frozen_sync_thread
  - md: wake up 'resync_wait' at last in md_reap_sync_thread()
  - md: refactor idle/frozen_sync_thread()
  - md: add a mutex to synchronize idle and frozen in action_store()
  - md: refactor action_store() for 'idle' and 'frozen'
  - Revert "md: unlock mddev before reap sync_thread in action_store"
  - md: unlock mddev before reap sync_thread in action_store
  - block: fix wrong mode for blkdev_put() from disk_scan_partitions()
  - block: fix scan partition for exclusively open device again
  - block: merge disk_scan_partitions and blkdev_reread_part


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.35.0.111
changelog:
  - !905 [sync] PR-903: backport block bugfix
  - !963 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
  - !960 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
  - !956 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
  - tcp: restrict net.ipv4.tcp_app_win
  - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
  - config: Disable CONFIG_EULER_FS by default
  - !934 [sync] PR-922:  jbd2: fix checkpoint inconsistent
  - jbd2: remove t_checkpoint_io_list
  - jbd2: recheck chechpointing non-dirty buffer
  - !913 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
  - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
  - md/raid10: fix incorrect done of recovery
  - md/raid10: fix null-ptr-deref in raid10_sync_request
  - block/badblocks: fix badblocks loss when badblocks combine
  - block/badblocks: fix the bug of reverse order
  - md: fix unexpected changes of return value in rdev_set_badblocks
  - md/raid10: fix io hung in md_wait_for_blocked_rdev()
  - block: Only set bb->changed when badblocks changes
  - md/raid10: fix incorrect counting of rdev->nr_pending
  - md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
  - md/raid10: fix uaf if replacement replaces rdev
  - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
  - md/raid10: fix io loss while replacement replace rdev
  - md/raid10: prioritize adding disk to 'removed' mirror
  - md: fix io loss when remove rdev fail
  - md/raid10: fix a race between removing rdev and access conf->mirrors[i].rdev
  - md/raid10: fix taks hung in raid10d
  - md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
  - md/raid10: fix softlockup in raid10_unplug
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed
  - md: fix sysfs duplicate file while adding rdev
  - md: replace invalid function flush_rdev_wq() with flush_workqueue()
  - md: Flush workqueue md_rdev_misc_wq in md_alloc()
  - block: don't allow the same type rq_qos add more than once
  - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
  - blk-iocost: don't allow to configure bio based device
  - !870 [sync] PR-866:  arm64: kdump: Avoid reserving low memory repeatedly
  - arm64: kdump: Avoid reserving low memory repeatedly


author: yanglu <yanglu72@h-partners.com> - 1.18.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:delete a static library file
         add BuildRequires make to fix build problem


author: hehuazhen <hehuazhen@huawei.com> - 1.18.1-6
changelog:
  - Type:CVE
  - CVE:CVE-2023-32067 CVE-2023-31130
  - SUG:restart
  - DESC:fix CVE-2023-32067 CVE-2023-31130


author: songyanting<songyanting@huawei.com> - 1.2.0-300
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix, include
         1. add check in spec
         2. kill container init process if runc start returns error
         3. fix containerd-shim residual when kill containerd durin
         4. fix deadlock on commit error
         5. backport upstream & ttrpc patches
         6. fix exec event missing due to pid reuse
         7. fix dm left when pause container and kill shim
         8. add CGO security build options
         9. fix start container failed with id exists
        10. drop opt package
        11. fix race access for mobySubscribed
        12. improve log for debugging
        13. reduce permission for bundle dir
        14. fix publish command wait block forever


author: Vanient<xiadanni1@huawei.com> - 1.2.0-301
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Use fs.RootPath when mounting volumes for bundle dir to fix CVE-2022-23648


author: fuanan <fuanan3@huawei.com> - 2.13-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add 'autoconf automake' to BuildRequires to use autoreconf command


author: benniaobufeijiushiji <linda7@huawei.com> - 10.3.1-20
changelog:
  - Type:Sync
  - ID:NA
  - SUG:NA
  - DESC:Sync patch from openeuler/gcc
         Bugfix for loop-distribution, semi-relayout and mull64.


author: Xiong Zhou <xiongzhou4@huawei.com> - 10.3.1-22
changelog:
  - Type:Sync
  - ID:NA
  - SUG:NA
  - DESC:Sync patch from openeuler/gcc
         Fix typo in tree-ssa-reassoc.c.


author: Zhao Shujian <zhaoshujian@huawei.com> - 10.3.1-23
changelog:
  - Type:Spec
  - ID:NA
  - SUG:NA
  - DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.


author: xinghe <xinghe2@h-partners.com> - 4.17.2-5
changelog:
  - Type:cves
  - ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
  - SUG:NA
  - DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967


author: xinghe <xinghe2@h-partners.com> - 4.17.5-3
changelog:
  - Type:cves
  - ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
  - SUG:NA
  - DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922


author: gaihuiying <eaglegai@163.com> - 7.79.1-5
changelog:
  - Type:cves
  - CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
  - SUG:NA
  - DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776


author: gaihuiying <eaglegai@163.com> - 7.79.1-7
changelog:
  - Type:cves
  - CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
  - SUG:NA
  - DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208


author: gaihuiying <eaglegai@163.com> - 7.79.1-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix build error when add --disable-http-auth configure option


author: yanglu <yanglu72@h-partners.com> - 7.79.1-12
changelog:
  - Type:cves
  - CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
  - SUG:NA
  - DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916


author: xinghe <xinghe2@h-partners.com> - 7.79.1-14
changelog:
  - Type:cves
  - CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
  - SUG:NA
  - DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916


author: xingwei <xingwei14@h-partners.com> - 7.79.1-15
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: chenhaixing <chenhaixing@huawei.com> 4.14.0-12
changelog:
  - CVE:NA
  - SUG:NA
  - DESC:dnf:fix undo error when include rollback of group upgrade
             fix can't download package when url have characters encoded


author: zhongjiawei<zhongjiawei1@huawei.com> - 18.09.0-323
changelog:
  - Type:CVE
  - CVE:CVE-2023-28840,CVE-2023-28841,CVE-2023-28842
  - SUG:NA
  - DESC:fix CVE-2023-28840,CVE-2023-28841,CVE-2023-28842


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libcontainer: skip chown of /dev/null caused by fd redirection


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix rootless /sys/fs/cgroup mounts bug and Prohibit /proc and /sys to be symlinks


author: chenjiji <chenjiji09@163.com> - 21.11-33
changelog:
  refactor Rc/Tx function of hns3 PMD
   And patchs are as follows:
    - net/hns3: fix burst mode query with dummy function
    - net/hns3: add debug info for Rx/Tx dummy function
    - net/hns3: remove debug condition for Tx prepare
    - net/hns3: separate Tx prepare from getting Tx function
    - net/hns3: make getting Tx function static
    - net/hns3: extract common functions to set Rx/Tx


author: chenjiji <chenjiji09@163.com> - 21.11-34
changelog:
  Support flow rule keeping capability for hns3 PMD and
   testpmd. Patchs are as follow:
    - net/hns3: declare flow rule keeping capability
    - app/testpmd: add --disable-flow-flush option


author: chenjiji <chenjiji09@163.com> - 21.11-35
changelog:
  Fix some RSS bugs and reimplement hash flow function for hns3:
    - fix some RSS bugs and optimize RSS codes for hns3
    - reimplement hash flow function for hns3 to satisfy the
      mainstream usage of rte flow hash in the community


author: chenjiji <chenjiji09@163.com> - 21.11-36
changelog:
  Fix a m_buf pool was not freed bugs for test and support
   CPPC cpufreq for l3fwd-power. Patchs are as follow:
    - test/mbuf: fix mbuf reset test
    - examples/l3fwd-power: support CPPC cpufreq


author: chenjiji <chenjiji09@163.com> - 21.11-39
changelog:
  Sync some patchs from upstreaming branch and modifies
   are as follow:
   1. Add private dump for bonding, virtio and vhost.
   2. Support LACP info dump for bonding.
   3. Display RSS hash key of flow rule in testpmd.


author: chenjiji <chenjiji09@163.com> - 21.11-41
changelog:
  - Telemetry: support display as hexadecimal
   Sync some patchs from upstreaming for telemetry and modifies
   are as follow:
   1. Support dispaly integer as hexadecimal.
   2. Fix data truncation for some u64 accept as int.
   3. Add JSON pretty print.


author: chenjiji <chenjiji09@163.com> - 21.11-42
changelog:
  - fix empty devargs parsing
   Sync some patchs from upstreaming and modifies are as
   follow:
   1. The rte_kvargs_process() was used to parse KV pairs, it
   also supports to parse 'only keys' type. And the callback
   function parameter 'value' is NULL when parsed 'only keys'.
   This patch fixes segment fault when parse input args with
   'only keys'.
   2. The MAP_FAILED should be used to determine whether the
   mapping is successful but not NULL. This patch fix it.


author: chenjiji <chenjiji09@163.com> - 21.11-43
changelog:
  Sync some patchs from upstreaming for hns3 pmd and modifies
   are as follow:
   1. support flow control autoneg for fiber port
   2. support simplify hardware checksum offloading
   3. support dump media type
   4. add Tx Rx descriptor logs
   5. fix Rx multiple firmware reset interrupts
   6. ethdev: fix one address occupies two entries in MAC addrs


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: yangcheng <yangcheng87@huawei.com> - 1:27.2-3
changelog:
  - DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged


author: wuchangsheng <wuchangsheng2@huawei.com> - 1.0.1-40
changelog:
  - add dfx rcv_nxt info
    mbuf private cache line align
    send pkts index bug fix
    free recv pkts in main loop


author: jiangheng12 <jiangheng14@huawei.com> - 1.0.1-56
changelog:
  - fix build err with dpdk-21.11
  - fix config flow rule race
  - update lstack.Makefile
  - add socket check before write it
  - optimize do_close
  - set kni_switch valid only in primary process
  - fix build err on select_path
  - optimite select_path and pbuf_take
  - check primary process idx and secondary lstack num
  - revert select_thread_path and optimize app thread when sendmsg
  - do not transfer broadcast arp pkts to other process


author: kircher <majun65@huawei.com> - 1.0.1-57
changelog:
  - add udp multicast support in gazelle
  - clean code
  - add bond4 suport
  - dfx: security function failed, return error directly
  - dfx: set g_unix_fd to -1 after abnormal close fd to avoid double close
  - fix bond_ports parse error fix socket_mem parse error when the value exceeds 65536 exit if create_rxtx_pktmbuf failed build.sh build failed return 1 clean code
  - add parentheses to fix build error
  - fix rpc msg alloc failed fix process_numa args error coredump fix sock->conn not free when fd is kernel mode
  - kni down not stop nic
  - fix client connect number unbalance on lstack
  - fix gazellectl -x error when multiplt user nic config


author: fuanan <fuanan3@h-partners.com> - 2.33.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch


author: fuanan <fuanan3@h-partners.com> - 2.33.0-10
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.33.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: panxiaohe <panxiaohe@huawei.com> - 2.30.0-4
changelog:
  - Fix CVE-2021-29468
  - Add gcc and gettext to BuildRequires
    - necessary for building and msgfmt command


author: yanan <yanan@huawei.com> - 2.68.1-12
changelog:
  - Type:bugfix
  - DESC:fix issues found by svace static code analyzer
         fix segfault,memory leak,EOF,arguments leak


author: shixuantong <shixuantong1@huawei.com> - 2.34-102
changelog:
  - elf: Do not completely clear reused namespace in dlmopen (bug 29600)
  - elf: Remove allocate use on _dl_debug_printf
  - elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
  - Fix OOB read in stdlib thousand grouping parsing [BZ#29727]


author: wanghongliang <wanghongliang@loongson.cn> - 2.34-105
changelog:
  - LoongArch Port
  - Add login-Add-back-libutil-as-an-empty-library.patch from upstream
    to fix libutil build error.
  - Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
    to fix memory bug
  - After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
  - Left some test fails in testsuite_whitelist.


author: Xue Liu <liuxue@loongson.cn> - 2.34-106
changelog:
  - LoongArch: Optimize some string functions including memcpy, memmove,
    memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.


author: Yang Yanchao <yangyanchao6@huawei.com> - 2.34-109
changelog:
  - Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
    versions, this symbol is required to keep the previous items compatible.


author: Lv Ying <lvying6@huawei.com> - 2.34-112
changelog:
  - elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
    - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
      specified segment, just try to use hugepage to mmap specified segment
      instead of all the segments in the shared object
    - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage


author: chenyanpanHW <chenyanpan@huawei.com> - 7.6-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: lihaoxiang <lihaoxiang9@huawei.com> - 10.0-7
changelog:
  - fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: hanchao <hanchao47@huawei.com> - 1.17.3-5
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
  	CVE-2022-30635,CVE-2022-30630,CVE-2022-30632,CVE-2022-28131,
  	CVE-2022-30631,CVE-2022-30629,CVE-2022-30634


author: hanchao<hanchao47@huawei.com> - 1.17.3-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: golang: modify the golang.spec to remove unnecessary files
  	from golang-help package


author: hanchao <hanchao47@huawei.com> - 1.17.3-10
changelog:
  - Type:CVE
  - CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
  - SUG:NA
  - DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879


author: hanchao <hanchao47@huawei.com> - 1.17.3-12
changelog:
  - Type:CVE
  - CVE:CVE-2022-41716
  - SUG:NA
  - DESC: remove hard code and strong dependency of git, subversion and mercurial


author: hanchao <hanchao47@huawei.com> - 1.17.3-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
  - SUG:NA
  - DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717


author: hanchao <hanchao47@huawei.com> - 1.17.3-15
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
  - SUG:NA
  - DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725


author: hanchao <hanchao47@huawei.com> - 1.17.3-16
changelog:
  - Type:CVE
  - CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
  - SUG:NA
  - DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: hanchao <hanchao63@huawei.com> - 1.17.3-18
changelog:
  - Type:CVE
  - CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
  - SUG:NA
  - DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540


author: wanglu <wanglu210@huawei.com> - 1:2.06-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tests: Disable blkid cache usage
         disk/efi/efidisk: Pass buffers with higher alignment


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
         in grub2-tools to 644


author: mengyingkun <mengyingkun@loongson.cn> - 1:2.06-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:loongarch modify the location where initrd is loaded into memory


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disk/diskfilter: Check calloc() result for NULL
         kern/buffer: Handle NULL input pointer in grub_buffer_free()
         disk/diskfilter: Don't make a RAID array with more than 1024 disks
         loader/multiboot_elfxx: Fix memory leak
         loader/linux: Ensure the newc pathname is NULL-terminated
         term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
         normal/cmdline: Fix two related integer underflows
         fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
         fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
         fs/xfs: Fix memory leaks in XFS module
         kern/file: Fix error handling in grub_file_open()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
         net/bootp: Fix unchecked return value
         fs/iso9660: Avoid reading past the entry boundary
         fs/iso9660: Incorrect check for entry boundary
         fs/iso9660: Prevent skipping CE or ST at start of continuation area
         fs/iso9660: Prevent read past the end of system use area
         fs/iso9660: Add check to prevent infinite loop
         gentpl.py: Remove .interp section from .img files
         kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
         font: Reject fonts with negative max_char_width or max_char_height
         font: Assign null_font to unknown_glyph
         font: Check return value of grub_malloc() in ascii_glyph_lookup()


author: gaihuiying <eaglegai@163.com> - 2.4.51-4
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-8
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556


author: liweiganga <liweiganga@uniontech.com> - 2.4.51-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:change default value of HeartbeatMaxServers
         fix setting and comparison of IPs fileds
         avoid voerflow in case of indecently large session
         make ap_escape_quotes() work correctly
         fix lua_request with cast first
         Handle children killed pathologically
         mod_md do not interfere with requests if challenge type http-01


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:reduce the dependency of httpd on system-logos installation


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-13
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-15
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: yangjiaqi <yangjiaqi16@huawei.com> - 2.0.17-10
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: remove chmod 751 permission for dirs by engine when user-remap enabled


author: chenyanpanHW <chenyanpan@huawei.com> - 10.06-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaoxingwang <gaoxingwang1@huawei.com> - 10.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1.2-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:after executing hook scripts, remove their executable permission
         of non root users


author: sunsuwan<sunsuwan3@huawei.com> - 5.15.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lnstat: fix buffer overflow in header output 
         libnetlink: fix socket leak in rtnl_open_byptoyo
         lnstat: fix strdup leak in w argument parsing
         q_cake: allow fix buffer overflow on large labels
         tc flower: fix buffer overflow on large labels
         tc_tuil: fix parsing action control with space and sl
         tipc: fix keylen check
         fix devlink health dump command without arg
         tc: em_u32: fix offset parsing
         l2tp fix typo in AF_INET6 checksum JSON print
         ip: Fix size_columns() for very large values
         ip: Fix size_columns() invocation that passes a 32-bit quantity


author: jiangheng<jiangheng14@huawei.com> - 5.15.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bridge: fix memory leak when doing fdb get
         mptcp: fix memory leak when doing 'endpoint show'
         mptcp: fix memory leak when getting limits
         ip neigh: fix memory leak when doing 'get'
         ip address: fix memory leak when specifying device
         fix marco expansion in changelog


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add epoch version in changelog to fix check_spec_file ci failure


author: eaglegai <eaglegai@163.com> - 20210722-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport to fix no reply when ping6 from Subnet-Router anycast address


author: zengweifeng <zwfeng@huawei.com> - 20210722-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix ping2 bingding to VRF and address
          Avoid binding to non-VRF
          Fix ARP protocol field for AX.25 and NETROM


author: crash888 <wangmengqi13@huawei.com> - 1:1.8.0.372-b07.0
changelog:
  - deleted Add-ability-to-configure-third-port-for-remote-JMX.patch
  - deleted 8287109-Distrust-failed-with-CertificateExpired.patch
  - deleted Huawei-fix-windows-build-Dynamic-CDS-failure.patch
  - deleted 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
  - deleted 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
  - deleted fix-CVE-2023-21930.patch
  - deleted fix-CVE-2023-21954.patch
  - deleted fix-CVE-2023-21967.patch
  - modified 8202951-Support-default-jsa.patch
  - modified 8204595-add-more-thread-related-system-settings-info.patch
  - modified 8257695-linux-Add-process-memory-information-to-hs-e.patch
  - modified add-appcds-test-case.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch
  - modified Test8167409.sh-fails-to-run-with-32bit-jdk-on-64bit-.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch
  - add fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - add 8074354-Make-CreateMinidumpOnCrash-a-new-name-and-av.patch    
  - add jcmd-mnt-add-start-time-and-end-time.patch                    
  - add Fix-localtime_r-not-defined-on-windows.patch                  
  - add 8057743-process-Synchronize-exiting-of-threads-and-p.patch    
  - add 8305541-C2-Div-Mod-nodes-without-zero-check-could-be.patch
  - upgrade to jdk8u372-b07


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.16.8-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
  - modified fast-serializer-jdk11.patch
  - modified dfx-enhancement-of-FastSerializer.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
  - modified add-missing-inline.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix_X509TrustManagerImpl_symantec_distrust.patch
  - add fix_Internal_and_external_code_inconsistency.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.6-0
changelog:
  - update to 11.0.17+5
  - modified NUMA-Aware-Implementation-humongous-region.patch
  - modified Add-KAE-implementation.patch
  - modified fast-serializer-jdk11.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.8-0
changelog:
  - update to 11.0.17+8(GA)
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.18.10-0
changelog:
  - update to 11.0.18+10(GA)
  - modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
  - delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch


author: wanghao <wanghao564@huawei.com> - 1:11.0.19.7-0
changelog:
  - update to 11.0.19+7(GA)
  - deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
  - modified Add-KAE-implementation.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified delete_expired_certificates.patch
  - modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch
  - deleted fix-CVE-2023-21930.patch


author: fuanan <fuanan3@huawei.com> - 563-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: Eibz-Chan <chenbingzhao@huawei.com> - 590-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
  	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
  	Fix-crash-when-enter-invaid-pattern-in-command.patch


author: zhangmingyi<zhangmingyi5@huawei.com> - 2:0.8.1-3
changelog:
  -- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                  backport-libbpf-Fix-the-name-of-a-reused-map.patch
                  backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - capsh better error handling for integer parsing
  - setcap clean up error handling of the ns rootid argument


author: zengweifeng <zwfeng@huawei.com> - 0.9.6-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: xinghe <xinghe2@h-partners.com> - 0.9.6-4
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:options: Parse hostname by last '@'
         torture_options: Add test for '@' in login name
         session: Initialize pointers
         tests: Ensure the mode of the created file is what we set


author: seuzw <930zhaowei@163.com> - 0.9.6-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport some upstream patches:
         Avoid false positive report from Coveritt CID 1470006
         kdf: Avoid endianess issues
         misc: Fix format truncation in ssh_path_expand_escape()
         misc: Fix expanding port numbers
         misc: rename gettimeofday symbol
         session: Initialize the port with the standard port (22)
         session->socket_callbacks.data will be set to ssh_packet_socket_callback
         socket: Add error message if execv fails
         tests: Add test for expanding port numbers


author: renmingshuai <renmingshuai@huawei.com> - 0.9.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:config: Escape brackets in ProxyCommand build
         packet: do not enqueue outgoing packets


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-23
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: yezengruan <yezengruan@huawei.com> - 0.7.3-7
changelog:
  - tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
  - tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
  - tpm2: Restore original value if unmarsalled value was illegal
  - fix CVE-2021-3623


author: fuanan <fuanan3@h-partners.com> - 2.9.12-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: fuanan <fuanan3@h-partners.com> - 2.9.12-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: fuanan <fuanan3@h-partners.com> - 2.9.14-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation


author: weishengjing <weishengjing1@huawei.com> - 8.0.22-1
changelog:
  - New version 8.0.22 fix CVES:   CVE-2020-14852 CVE-2020-14794 CVE-2020-14775
     CVE-2020-14893 CVE-2020-14829 CVE-2020-14828 CVE-2020-14888 CVE-2020-14891
     CVE-2020-14812 CVE-2020-14870 CVE-2020-14769 CVE-2020-14878 CVE-2020-14789
     CVE-2020-14821 CVE-2020-14844 CVE-2020-14836 CVE-2020-14830 CVE-2020-14827
     CVE-2020-14773 CVE-2020-14765 CVE-2020-14869 CVE-2020-14776 CVE-2020-14861
     CVE-2020-14866 CVE-2020-14672 CVE-2020-14837 CVE-2020-14771 CVE-2020-14785
     CVE-2020-14838 CVE-2020-14848 CVE-2020-14791 CVE-2020-14793 CVE-2020-14804
     CVE-2020-14777 CVE-2020-14800 CVE-2020-14786 CVE-2020-14845 CVE-2020-14839
     CVE-2020-14846 CVE-2020-14867 CVE-2020-14868 CVE-2020-14873 CVE-2020-14860
     CVE-2020-14814 CVE-2020-14790 CVE-2020-14809


author: wangxiao <wangxiao65@huawei.com> - 8.0.23-1
changelog:
  - Upgrade mysql to 8.0.23, fix CVES: CVE-2021-1998 CVE-2021-2002
    CVE-2021-2010 CVE-2021-2011 CVE-2021-2016 CVE-2021-2021 CVE-2021-2022
    CVE-2021-2024 CVE-2021-2031 CVE-2021-2032 CVE-2021-2036 CVE-2021-2038
    CVE-2021-2046 CVE-2021-2048 CVE-2021-2056 CVE-2021-2058 CVE-2021-2060
    CVE-2021-2061 CVE-2021-2065 CVE-2021-2070 CVE-2021-2072 CVE-2021-2076
    CVE-2021-2081 CVE-2021-2087 CVE-2021-2088 CVE-2021-2122


author: wutao <wutao61@huawei.com> - 8.0.24-1
changelog:
  - Upgrade mysql to 8.0.24, fix CVES: CVE-2021-2166 CVE-2021-2146
    CVE-2021-2162 CVE-2021-2212 CVE-2021-2299 CVE-2021-2293 CVE-2021-2215
    CVE-2021-2278 CVE-2021-2164 CVE-2021-2208 CVE-2021-2217 CVE-2021-2203
    CVE-2021-2226 CVE-2021-2298 CVE-2021-2230 CVE-2021-2300 CVE-2021-2304
    CVE-2021-2172 CVE-2021-2194 CVE-2021-2170 CVE-2021-2196 CVE-2021-2201
    CVE-2021-2180 CVE-2021-2307 CVE-2021-2169 CVE-2021-2171 CVE-2021-2305
    CVE-2021-2179 CVE-2021-2174 CVE-2021-2193 CVE-2021-2232 CVE-2021-2301
    CVE-2021-2308


author: liwu <liwu13@huawei.com> - 8.0.26-1
changelog:
  - Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
    CVE-2021-2352 CVE-2021-2340


author: yaoxin <yaoxin30@huawei.com> - 8.0.27-1
changelog:
  - Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
    CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
    CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
    CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
    CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
    CVE-2021-35644-to-CVE-2021-35648


author: jintang song<jintang.song@epro.com.cn> - 8.0.29-1
changelog:
  - Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
    CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
    CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
    CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
    CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
    CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
    CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490


author: gaihuiying <gaihuiying1@huawei.com> - 5.8-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix undefined behavior in asn_build_int()
         libsnmp: Rework parse_imports()
         libsnmp: Increase MAX_IMPORTS
         libsnmp: Allocate the module import list on the heap
         libsnmp: Fix a memory leak in a MIB parser error path
         libsnmp: Fix the getoid() error path


author: gaihuiying <eaglegai@163.com> - 1:5.9.1-3
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: xingwei <xingwei14@h-partners.com> - 1:5.9.1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
          IF-MIB: pass the network interface index to net
          IF-MIB: fix a memory leak
          IF-MIB: fix a recently introduced use after free
          IF-MIB: add a trailing newline to an error message


author: chenyanpanHW <chenyanpan@huawei.com> - 4.29.0-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/nspr-gcc-atomics.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-10
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-4
changelog:
  - Add requirements for system and bugfix
  - Upgrade oec-hardware-server
  - Update readme and design doc
  - Fix nvme error
  - Update network fibre check and log 
  - Update description for perf test
  - Add automatic configuration network card IP


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-5
changelog:
  - fix the bug that the test board information is not added to the configuration file
  - Add kabi for hardware critical test
  - Optimize disk/raid/fc/ethernet/infiniband test suite
  - Fix the bug of reading nvme data failed
  - Add file size check when uploading file to server


author: zhangyale <zhangyale3@h-partners.com> - 1.1.3-0
changelog:
  - Add support for openEuler 22.03 LTS SP1
  - Add AMD GPU testcase
  - Add automatic configuration network card IP
  - Add generate compatibility information


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: liqiang <liqiang332@h-partner.com> - 1.1.3-3
changelog:
  - Fix libswsds.so not stripped
  - Fix the value of kernel.src obtained by the kabi test case is incorrect
  - Add board infomation and fix memory bug
  - Fix the block size fails to be obtained during the NVME test
  - Judge whether to support kabi testing by architecture
  - Update readme and dev_design


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-0
changelog:
  - Add board information in the test report
  - Add spdk test case
  - Add dpdk test case
  - Update pci.ids file


author: wujie <wujie@nj.iscas.ac.cn> - 5.6.0-10
changelog:
  - add support for riscv64 from http://fedora.riscv.rocks/koji/buildinfo?buildID=31200
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: panxiaohe <panxh.life@foxmail.com> - 8.0.0-8
changelog:
  - use lmdb instead of Berkeley DB for package dba
  - update %configure for riscv
  - delete unused rcver


author: chenyanpanHW <chenyanpan@huawei.com> - 0.67.0-8
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/poppler-gcc11.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-CVE-2022-27337.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaihuiying <eaglegai@163.com> - 2.4.9-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: Chenxi Mao <chenxi.mao@suse.com> - 3.9.9-23
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC: Enable link time optimizaitons (LTO) for better performance.


author: gaihuiying <eaglegai@163.com> - 1.13.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove buildin key
         add macros to control if key files permissons is 600 or 644
         remove useless BuildRequires:unbound-libs


author: yanglu <yanglu72@h-partners.com> - 1.13.2-5
changelog:
  - Type:cves
  - CVE:CVE-2022-30698 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30698 and CVE-2022-30699


author: gaihuiying <eaglegai@163.com> - 1.13.2-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"


author: chenhaixing <chenhaixing@huawei.com> - 1.26.8-2
changelog:
  - delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.26.12-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix socket timeout value when HTTPConnect is reused
         remove Exclamation mark character from the unreserved characters
         fix _idna_encode handling of x80


author: yezengruan <yezengruan@huawei.com> - 10:6.2.0-65
changelog:
  - linux-user: Add strace output for timer_settime64() syscall
  - fix qemu-core when vhost-user-net config with server mode


author: <xufei30@huawei.com> - 10:6.2.0-67
changelog:
  - hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
  - net/eth: Don't consider ESP to be an IPv6 option header mainline
  - net: Fix uninitialized data usage mainline
  - block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
  - i386: add notify VM exit support
  - kvm: expose struct KVMState
  - kvm: allow target-specific accelerator properties
  - i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
  - linux-headers: include missing changes from 6.0
  - dsoundaudio: fix crackling audio recordings mainline
  - hw/audio/intel-hda: fix stream reset mainline
  - hw/pvrdma: Protect against buggy or malicious guest driver
  - qemu support for loongarch
  - hw/pci: Trace IRQ routing on PCI topology
  - hw/pci: Fix a typo
  - hw/riscv: virt: Simplify virt_{get,set}_aclint()
  - curl: Fix error path in curl_open()
  - tests: add (riscv virt) machine mapping to testenv from v7.0.0
  - tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
  - hw/core/machine:Fix the missing consideration of cluster-id
  - arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
  - arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
  - hw/acpi: Support acpi-ged to report CPU's OST info
  - hw/acpi: Add ospm_status hook implementation for acpi-ged
  - fix qmp command migrate-set-parameters


author: <xufei30@huawei.com> - 10:6.2.0-71
changelog:
  - vhost-user-blk: fix the resize crash
  - plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
  - linux-user: fix strace build w/out munlockall
  - ui: fix crash on serial reset, during init
  - qga/win/vss: requester_freeze changes
  - migration: fix populate_vfio_info
  - block/rbd: workaround for ceph issue #53784
  - target/i386: add FZRM, FSRS, FSRC
  - i386: Add new CPU model SapphireRapids
  - core/cpu-common: Fix the wrong '#ifdef __aarch64__'


author: <xufei30@huawei.com> - 10:6.2.0-72
changelog:
  - migration/xbzrle: fix out-of-bounds write with axv512
  - migration/xbzrle: use ctz64 to avoid undefined result
  - Update bench-code for addressing CI problem
  - AVX512 support for xbzrle_encode_buffer
  - configure, meson: move AVX tests to meson
  - target/i386: KVM: allow fast string operations if host supports them
  - target/i386: add FSRM to TCG
  - hw/nvme: fix memory leak in nvme_dsm
  - aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
  - target/i386: Add SGX aex-notify and EDECCSSA support
  - hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
  - target/i386: Set maximum APIC ID to KVM prior to vCPU creation
  - target/i386: Fix sanity check on max APIC ID / X2APIC enablement


author: jinlun <jinlun@huawei.com> - 15.4-5
changelog:
  - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
    CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
    CVE-2021-23841 CVE-2022-0778 CVE-2021-3712


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.0.0-6
changelog:
  - docs: fix some statement
  - machine_manager: add autodeflate for balloon
  - migration: add dev_id into VirtioPciState when save and restore device state
  - machine: fix more than one pcie-root-ports with same id
  - migration: move function "transport_reset" to save state stage for vhost vsock device
  - vfio: adding ram device region to vfio bar region
  - machine_manager: move argument "serial" from -drive to -device virtio-blk-pci/device
  - machine_manager: add multifunction for devices
  - machine: add init_multifunction function to init multifunction
  - machine: add realization for multifunction


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-1
changelog:
  - Add support for PCIe native hotplugging.
  - Reduce memory consumption of reading edk2 firmware files on aarch64.
  - Add support for booting from disk image directly.
  - Add support for VM reboot and VM shutdown.
  - Add support for guest memory preallocation.
  - Add more test cases.
  - Add and fix documentation.
  - Replace lazy_static crate with once_cell.
  - Performance enhancement for virtio-blk and virtio-net devices.
  - Add ftrace support.


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-2
changelog:
  - Fix VFIO hotplugging failure caused by missing seccomp rules.
  - Fix booting failure from disk image on x86_64.
  - Update some documents.


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-3
changelog:
  - Fix memory snapshot failure with hotplugged devices.
  - Fix address translation for virtio devices.
  - Add some test cases for microvm.
  - Update some documents.


author: yangmingtai <yangmingtai@huawei.com> -249-42
changelog:
  - 1.change /etc/systemd/journald.conf ForwardToWall to no
    2.change DefaultLimitMEMLOCK to 64M
    3.replace openEuler to vendor
    4.delete useless file udev-61-openeuler-persistent-storage.rules


author: xingwei <xingwei14@h-partners.com> - 14:4.99.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Set SA_RESTART on non-lethal signals (REQ_INFO, FLUSH_PCAP) to avoid corrupting binary pcap output


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-4
changelog:
  - Type:CVE
  - ID:CVE-2022-3491 CVE-2022-3520 CVE-2022-3591
  - SUG:NA
  - DESC:fix CVE-2022-3491 CVE-2022-3520 CVE-2022-3591


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-7
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: ouyangminxiang<ouyangminxiang@kylinsec.com.cn> - 1.20.11-7
changelog:
  - Fix the crash in shadowUpdatePacked because of memcpy acts randomly with overlapping areas.
  - Fix the problem of black screen after entering the login interface


author: wanglin <wangl29@chinatelecom.cn> - 1.20.11-14
changelog:
  - Fix openEuler hard code problem
  - use -git instead of .git as the filename, to avoid .git ignore
  - Fix changelog date


