# changelog

author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.71.0.95
changelog:
  - blk-mq: don't access request_wrapper if request is not allocated from block layer
  - blk-mq: fix kabi broken due to request_wrapper
  - ide-cd: don't clear rq_flags after blk_get_request
  - iommu: Fix error handling in probe_acpi_namespace_devices()


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.72.0.96
changelog:
  - block: fix regression for dm
  - dm: switch to rq-based after queue is initialized
  - net/af_packet: make sure to pull mac header
  - net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO
  - sched: Fix null-ptr-deref in free_fair_sched_group
  - arm64: fix a concurrency issue in emulation_proc_handler()
  - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
  - Revert "ipvlan: Modify the value of ipvlan modes"
  - workqueue: fix state-dump console deadlock
  - preempt/dynamic: Fix typo in macro conditional statement
  - jump_label: Fix usage in module __init
  - arm64/mpam: update last_cmd_status in parse_cache() and parse_bw()
  - arm64/mpam: remove kernfs_get() calls() and add kernfs_put() calls to prevent refcount leak
  - arm64/mpam: make mbw_max/min not less than min_bw
  - arm64/mpam: Fix indent format error in resctrl_parse_param()
  - arm64/mpam: decrease dom_num when domain goes offline
  - arm64/mpam: correct mbw_max/min if remainder is too large
  - Revert "add barriers to buffer_uptodate and set_buffer_uptodate"
  - pinctrl: core: Set ret to 0 when group is skipped
  - pinctrl: core: Handling pinmux and pinconf separately
  - ACPI: APD: Check for NULL pointer after calling devm_ioremap()
  - Revert "ACPICA: Interpreter: fix memory leak by using existing buffer"
  - mm/dynamic_hugetlb: fix compound_nr incorrect
  - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq
  - scsi: ufs: core: Enable link lost interrupt
  - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU
  - perf python: Fix build when PYTHON_CONFIG is user supplied
  - Documentation/ABI: Mention retbleed vulnerability info file for sysfs
  - arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76
  - md: call __md_stop_writes in md_stop
  - Revert "md-raid: destroy the bitmap after destroying the thread"
  - mm/hugetlb: fix hugetlb not supporting softdirty tracking
  - xen/privcmd: fix error exit of privcmd_ioctl_dm_op()
  - ACPI: processor: Remove freq Qos request for all CPUs
  - s390: fix double free of GS and RI CBs on fork() failure
  - asm-generic: sections: refactor memory_intersects
  - loop: Check for overflow while configuring loop
  - x86/bugs: Add "unknown" reporting for MMIO Stale Data
  - perf/x86/lbr: Enable the branch type for the Arch LBR by default
  - btrfs: check if root is readonly while setting security xattr
  - btrfs: add info when mount fails due to stale replace target
  - btrfs: replace: drop assert for suspended replace
  - btrfs: fix silent failure when deleting root reference
  - ionic: fix up issues with handling EAGAIN on FW cmds
  - rxrpc: Fix locking in rxrpc's sendmsg
  - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter
  - net: Fix a data-race around sysctl_somaxconn.
  - net: Fix data-races around sysctl_devconf_inherit_init_net.
  - net: Fix data-races around sysctl_fb_tunnels_only_for_init_net.
  - net: Fix a data-race around netdev_budget_usecs.
  - net: Fix a data-race around netdev_budget.
  - net: Fix a data-race around sysctl_net_busy_read.
  - net: Fix a data-race around sysctl_net_busy_poll.
  - net: Fix a data-race around sysctl_tstamp_allow_data.
  - net: Fix data-races around sysctl_optmem_max.
  - bpf: Folding omem_charge() into sk_storage_charge()
  - ratelimit: Fix data-races in ___ratelimit().
  - net: Fix data-races around netdev_tstamp_prequeue.
  - net: Fix data-races around netdev_max_backlog.
  - net: Fix data-races around weight_p and dev_weight_[rt]x_bias.
  - net: Fix data-races around sysctl_[rw]mem_(max|default).
  - net: Fix data-races around sysctl_[rw]mem(_offset)?.
  - tcp: tweak len/truesize ratio for coalesce candidates
  - netfilter: nf_tables: disallow jump to implicit chain from set element
  - netfilter: nf_tables: upfront validation of data via nft_data_init()
  - netfilter: bitwise: improve error goto labels
  - netfilter: nft_cmp: optimize comparison for 16-bytes
  - netfilter: nf_tables: consolidate rule verdict trace call
  - netfilter: nftables: remove redundant assignment of variable err
  - netfilter: nft_tunnel: restrict it to netdev family
  - netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families
  - netfilter: nf_tables: do not leave chain stats enabled on error
  - netfilter: nft_payload: do not truncate csum_offset and csum_type
  - netfilter: nft_payload: report ERANGE for too long offset and length
  - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips
  - netfilter: ebtables: reject blobs that don't provide all entry points
  - net: ipvtap - add __init/__exit annotations to module init/exit funcs
  - bonding: 802.3ad: fix no transmission of LACPDUs
  - net: moxa: get rid of asymmetry in DMA mapping/unmapping
  - net: ipa: don't assume SMEM is page-aligned
  - net/mlx5e: Properly disable vlan strip on non-UL reps
  - ice: xsk: prohibit usage of non-balanced queue id
  - ice: xsk: Force rings to be sized to power of 2
  - nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout
  - rose: check NULL rose_loopback_neigh->loopback
  - mm/smaps: don't access young/dirty bit if pte unpresent
  - mm/huge_memory.c: use helper function migration_entry_to_page()
  - SUNRPC: RPC level errors should set task->tk_rpc_status
  - NFSv4.2 fix problems with __nfs42_ssc_open
  - NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open()
  - xfrm: clone missing x->lastused in xfrm_do_migrate
  - xfrm: fix refcount leak in __xfrm_policy_check()
  - kernel/sched: Remove dl_boosted flag comment
  - vfs: make sync_filesystem return errors from ->sync_fs
  - fs: remove __sync_filesystem
  - pinctrl: amd: Don't save/restore interrupt status and wake status bits
  - kernel/sys_ni: add compat entry for fadvise64_64
  - parisc: Fix exception handler for fldw and fstw instructions
  - audit: fix potential double free on error path from fsnotify_add_inode_mark
  - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.73.0.97
changelog:
  - proc: proc_skip_spaces() shouldn't think it is working on C strings
  - proc: avoid integer type confusion in get_proc_long
  - xen/netback: fix build warning
  - xen/netback: Ensure protocol headers don't fall in the non-linear area
  - livepatch/ppc64: Fix preemption check when enabling
  - block: only use cmpxchg64 in 64bit platform
  - efi/libstub: Fix build error in efi-stub.c for riscv


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.74.0.98
changelog:
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
  - xen/netback: don't call kfree_skb() with interrupts disabled
  - media: dvb-core: Fix UAF due to refcount races at releasing
  - wifi: wilc1000: validate pairwise and authentication suite offsets
  - wifi: wilc1000: validate number of channels
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
  - drm/amdkfd: Check for null pointer after calling kmemdup


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.75.0.99
changelog:
  - ext2: replace bh_submit_read() helper with bh_read()
  - ufs: replace ll_rw_block()
  - udf: replace ll_rw_block()
  - reiserfs: replace ll_rw_block()
  - ocfs2: replace ll_rw_block()
  - ntfs3: replace ll_rw_block()
  - jbd2: replace ll_rw_block()
  - isofs: replace ll_rw_block()
  - gfs2: replace ll_rw_block()
  - fs/buffer: replace ll_rw_block()
  - fs/buffer: add some new buffer read helpers
  - sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos
  - mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
  - blk-mq: set default elevator as deadline in case of hctx shared tagset
  - dm thin: Use last transaction's pmd->root when commit failed
  - media: mceusb: Use new usb_control_msg_*() routines
  - block, bfq: fix possible uaf for 'bfqq->bic'
  - block, bfq: fix null pointer dereference in bfq_bio_bfqg()
  - scsi: iscsi: remove .unbind_conn from iscsi_transport
  - Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"
  - blk-mq: fix kabi broken in struct bio
  - blk-mq: fix kabi broken in struct request
  - mm/dynamic_hugetlb: fix clear PagePool without lock protection
  - mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
  - x86/cpu/hygon: Set __max_die_per_package on Hygon
  - block: always align request_wrapper to cacheline
  - block: fix crash on cmpxchg for request_wrapper
  - clk: imx: Add check for kcalloc
  - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
  - Bluetooth: L2CAP: Fix build errors in some archs


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.76.0.100
changelog:
  - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
  - bfq: fix null-ptr-deref in bfq_pd_offline
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access()
  - ksmbd: fix heap-based overflow in set_ntacl_dacl()
  - ksmbd: prevent out of bound read for SMB2_WRITE
  - ksmbd: validate length in smb2_write()
  - xfs: fix super block buf log item UAF during force shutdown
  - xfs: wait iclog complete before tearing down AIL
  - xfs: get rid of assert from xfs_btree_islastblock


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.77.0.101
changelog:
  - !348 Backport CVEs and fs bugfixes
  - io_uring: kill goto error handling in io_sqpoll_wait_sq()
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
  - ext4: fix bad checksum after online resize
  - xfs: fix use-after-free in xattr node block inactivation
  - USB: core: Fix RST error in hub.c
  - USB: core: Prevent nested device-reset calls


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.78.0.102
changelog:
  - !357 Backport CVEs, bugfixes, performance and other
  - binder: fix UAF of alloc->vma in race with munmap()
  - io_uring: add missing item types for splice request
  - xfs: fix overfilling of reserve pool
  - xfs: always succeed at setting the reserve pool size
  - xfs: remove infinite loop when reserving free block pool
  - xfs: use current->journal_info for detecting transaction recursion
  - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
  - fix kabi broken due to may_pollfree
  - io_uring: disable polling pollfree files
  - sched: disable sched_autogroup by default
  - driver: char: delete svm.c
  - ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
  - fs/ntfs3: Fix attr_punch_hole() null pointer derenference
  - tracing/osnoise: Do not unregister events twice
  - tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
  - mm/filemap.c: remove bogus VM_BUG_ON
  - mm: oom_kill: fix KABI broken by "oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup"
  - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup
  - fork: Allocate a new task_struct_resvd object for fork task
  - tmpfs: fix regressions from wider use of ZERO_PAGE
  - tmpfs: do not allocate pages on read


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.79.0.103
changelog:
  - !369 Backport CVEs and bugfixes
  - mm/vmpressure: fix data-race with memcg->socket_pressure
  - of/fdt: Don't calculate initrd size from DT if start > end
  - lib/cmdline: avoid page fault in next_arg
  - mm/memory: return vm_fault_t result from migrate_to_ram() callback
  - net: sched: disallow noqueue for qdisc classes
  - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
  - xfs: Fix deadlock on xfs_inodegc_worker
  - net: sched: cbq: dont intepret cls results when asked to drop
  - net: sched: atm: dont intepret cls results when asked to drop
  - scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
  - rndis_wlan: Prevent buffer overflow in rndis_query_oid


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.80.0.104
changelog:
  - !386 Backport CVEs and bugfixes
  - net: sched: fix race condition in qdisc_graft()
  - macvlan: enforce a consistent minimal mtu
  - net: switch to storing KCOV handle directly in sk_buff
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
  - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
  - mm: memcontrol: fix potential oom_lock recursion deadlock
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
  - ext4: fix use-after-free in ext4_orphan_cleanup
  - ext4: fix null-ptr-deref in ext4_write_info
  - xfs: fix potential log item leak


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.81.0.105
changelog:
  - !400 Backport fs and block bugfixes
  - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
  - ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
  - ubifs: Re-statistic cleaned znode count if commit failed
  - ubifs: dirty_cow_znode: Fix memleak in error handling path
  - block, bfq: switch 'bfqg->ref' to use atomic refcount apis
  - cifs: sanitize multiple delimiters in prepath
  - !392 OpenEuler-22.03-LTS Fixes Some Bugs in Accelerator Disk Storage Encryption and Decryption Scenarios
  - crypto: hisilicon/sec - delete the flag CRYPTO_ALG_ALLOCATES_MEMORY
  - crypto: hisilicon/qm - prevent soft lockup in qm_poll_req_cb()'s loop
  - crypto: hisilicon/qm - modify event irq processing
  - crypto: hisilicon/qm - move alloc qm->wq to qm.c
  - crypto: hisilicon/qm - add functions for releasing resources


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.82.0.106
changelog:
  - !410 Backport CVEs and bugfixes
  - x86/kasan: Populate shadow for shared chunk of the CPU entry area
  - x86/kasan: Add helpers to align shadow addresses up and down
  - x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
  - x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
  - x86/mm: Recompute physical address for every page of per-CPU CEA mapping
  - x86/kasan: Map shadow for percpu pages on demand
  - x86/mm: Randomize per-cpu entry area
  - Huawei BMA: Fix iBMA driver bug
  - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
  - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
  - ppp: associate skb with a device at tx
  - arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
  - bpf, sockmap: fix race in sock_map_free()
  - bpf: make sure skb->len != 0 when redirecting to a tunneling device
  - cifs: Fix use-after-free in rdata->read_into_pages()
  - net: bridge: mcast: add and enforce query interval minimum
  - net: bridge: mcast: add and enforce startup query interval minimum
  - media: vivid: fix compose size exceed boundary
  - !405 kvm: arm64: fix some pvsched bugs
  - kvm: arm64: fix some pvsched bugs


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.83.0.107
changelog:
  - !419 Backport CVEs and bugfixes
  - net: mpls: fix stale pointer if allocation fails during device rename
  - x86/bugs: Flush IBP in ib_prctl_set()
  - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
  - binder: Address corner cases in deferred copy and fixup
  - binder: fix pointer cast warning
  - binder: defer copies of pre-patched txn data
  - binder: read pre-translated fds from sender buffer
  - binder: avoid potential data leakage when copying txn
  - ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
  - rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
  - net/sched: sch_taprio: do not schedule in taprio_reset()
  - net/sched: sch_taprio: fix possible use-after-free
  - nbd: fix assignment error for first_minor in nbd_dev_add
  - md/raid10: fix wrong setting of max_corr_read_errors
  - md/raid10: fix overflow in safe_delay_store
  - md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
  - fix kabi broken due to import of 5.15-stable io_uring
  - io_uring: import 5.15-stable io_uring
  - task_work: add helper for more targeted task_work canceling
  - coredump: Limit what can interrupt coredumps
  - kernel: provide create_io_thread() helper
  - fs: provide locked helper variant of close_fd_get_file()
  - kernel: remove checking for TIF_NOTIFY_SIGNAL
  - entry: Add support for TIF_NOTIFY_SIGNAL
  - signal: Add task_sigpending() helper
  - arm: add support for TIF_NOTIFY_SIGNAL
  - arm64: add support for TIF_NOTIFY_SIGNAL
  - riscv: add support for TIF_NOTIFY_SIGNAL
  - powerpc: add support for TIF_NOTIFY_SIGNAL
  - x86: Wire up TIF_NOTIFY_SIGNAL
  - iov_iter: add helper to save iov_iter state
  - perf beauty: Update copy of linux/socket.h with the kernel sources
  - perf trace beauty: Update copy of linux/socket.h with the kernel sources
  - io_uring: correct pinned_vm accounting
  - file: Rename __close_fd_get_file close_fd_get_file
  - io_uring: don't hold uring_lock when calling io_run_task_work*
  - io_uring: don't take uring_lock during iowq cancel
  - fs: make do_renameat2() take struct filename
  - net: add accept helper not installing fd
  - net: provide __sys_shutdown_sock() that takes a socket
  - fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
  - Make sure nd->path.mnt and nd->path.dentry are always valid pointers
  - fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy*
  - fs: add support for LOOKUP_CACHED
  - Revert "io_uring: fix soft lockup when call __io_remove_buffers"
  - Revert "io_uring: deduplicate failing task_work_add"
  - Revert "io_uring: don't take uring_lock during iowq cancel"
  - Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
  - Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
  - Revert "[Huawei] io_uring:drop identity before creating a private one"


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.84.0.108
changelog:
  - !454 Backport CVEs and bugfixes
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
  - neigh: make sure used and confirmed times are valid
  - HID: check empty report_list in bigben_probe()
  - HID: check empty report_list in hid_validate_values()
  - Documentation/hw-vuln: Fix rST warning
  - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
  - KVM: x86: Mitigate the cross-thread return address predictions bug
  - x86/speculation: Identify processors vulnerable to SMT RSB predictions
  - radi10: fix leak of 'r10bio->remaining' for recovery
  - md: fix soft lockup in status_resync
  - md: don't update recovery_cp when curr_resync is ACTIVE
  - md: Ensure resync is reported after it starts
  - md: Use enum for overloaded magic numbers used by mddev->curr_resync
  - raid10: fix leak of io accounting
  - tcp: Fix listen() regression in 5.15.88.
  - net/ulp: Remove redundant ->clone() test in inet_clone_ulp().
  - net/ulp: use consistent error code when blocking ULP
  - net/ulp: prevent ULP without clone op from entering the LISTEN status
  - net/tls: tls_is_tx_ready() checked list_entry
  - usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
  - ntfs: fix out-of-bounds read in ntfs_attr_find()
  - splice: don't generate zero-len segement bvecs
  - rds: rds_rm_zerocopy_callback() use list_first_entry()
  - tap: tap_open(): correctly initialize socket uid
  - tun: tun_chr_open(): correctly initialize socket uid
  - net: add sock_init_data_uid()
  - ring-buffer: Handle race between rb_move_tail and rb_check_pages
  - blk-mq: use quiesced elevator switch when reinitializing queues
  - ovl: fix use inode directly in rcu-walk mode


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.85.0.109
changelog:
  - !485 Backport CVEs and bugfixes
  - !491 [sync] PR-477: tools: fix compile error introduced by LoongArch commit
  - fix compile error introduced by LoongArch commit
  - scsi: cancel the inflight async device probe when remove scsi_target
  - scsi: fix use-after-free problem in scsi_remove_target
  - ring-buffer: Fix race between reset page and reading page
  - raid1, raid10: switch to precise io accounting
  - block: add precise io accouting apis
  - md/raid10: fix memleak for 'conf->bio_split'
  - sctp: fail if no bound addresses can be used for a given scope
  - ext4: fix WARNING in mb_find_extent
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
  - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
  - scsi: iscsi: Move pool freeing
  - xfs: aborting inodes on shutdown may need buffer lock
  - ext4: fix incorrect options show of original mount_opt and extend mount_opt2
  - !439 openeuler: pci: workaround multiple functions can be assigned to only one VM
  - !474 [sync] PR-447: add perf loongarch support
  - tools/perf: Add basic support for LoongArch
  - perf machine: Use path__join() to compose a path instead of snprintf(dir, '/', filename)
  - !467 LoongArch: add kvm support
  - LoongArch: kvm: KVM support for 5.10
  - !472 [sync] PR-466: LoongArch: fix compile error when using make allmodconfig
  - LoongArch: fix compile error when using make allmodconfig
  - LoongArch: Export symbol for function smp_send_reschedule()
  - LoongArch: kvm: add initial kvm support
  - !453 Backport CVEs and bugfixes
  - !463 [sync] PR-444: LoongArch: some LS7a device drivers support and LoongArch bug fix
  - LoongArch: remove __ARCH_WANT_NEW_STAT
  - LoongArch: modify defconfig according to other architectures
  - LoongArch: Change definition of cpu_relax() for Loongson-3
  - drm/loongson: add kernel modesetting driver support for ls7a1000/ls7a2000
  - LoongArch: Use alternative to optimize libraries
  - LoongArch: Add alternative runtime patching mechanism
  - LoongArch: Remove the .fixup section usage
  - LoongArch: extable: Add a dedicated uaccess handler
  - LoongArch: extable: Add `type` and `data` fields
  - LoongArch: Switch to relative exception tables
  - LoongArch: Consolidate __ex_table construction
  - LoongArch: fix SECCOMP test error
  - LoongArch: fix vmlinux ld error
  - LoongArch: enable hugetlbfs support
  - LoongArch: save one instruction for arch_local_irq_{enable,disable}
  - LoongArch: optimize for syscall return
  - LoongArch: refresh usage of sync
  - LoongArch: use 40 bits address space for user
  - LoongArch: Support loader and kernel interface V40
  - LoongArch: Enhance booting and resume compatibility
  - LoongArch: Remove redudant csr save/restore
  - LoongArch: Support Power Manager
  - irqchip/loongson-liointc: Set different isr for differnt core
  - platform: Support loongson laptop generic driver
  - LoongArch: Adapted SECTION_SIZE_BITS with page size
  - ACPI: Support ACPI_MACHINE_WIDTH for 64
  - spi: loongson: Add LS7A spi driver support
  - i2c: loongson: Add LS7A i2c driver support
  - LoongArch: Call irq_find_matching_fwnode get irq domain
  - irqchip/ACPI: Introduce ACPI_IRQ_MODEL_LPIC for LoongArch
  - gpio: loongson: Add 3A/3B/3C/7A gpio dirver support
  - rtc: ls2x: Add support for the Loongson-2K/LS7A RTC
  - LoongArch: convert p v s cache to l1 l2 l3 format
  - cpufreq: Add cpufreq driver for LoongArch
  - LoongArch: Fix section mismatch due to acpi_os_ioremap()
  - LoongArch: Add vector extensions support
  - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
  - openeuler: pci: workaround multiple functions can be assigned to only one VM


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.86.0.110
changelog:
  - !512 Backport CVEs and bugfixes
  - livepatch/core: Fix hungtask against cpu hotplug on x86
  - livepatch: Narrow the scope of the 'text_mutex' lock
  - livepatch: Cleanup klp_mem_prepare()
  - seccomp: Move copy_seccomp() to no failure path.
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
  - ftrace: Fix invalid address access in lookup_rec() when index is 0
  - mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
  - mm: optimize do_wp_page() for exclusive pages in the swapcache
  - tipc: add an extra conn_get in tipc_conn_alloc
  - tipc: set con sock in tipc_conn_alloc
  - ext4: fix another off-by-one fsmap error on 1k block filesystems
  - mm/vmalloc: huge vmalloc backing pages should be split rather than compound
  - HID: asus: use spinlock to safely schedule workers
  - HID: asus: use spinlock to protect concurrent accesses
  - HID: asus: Remove check for same LED brightness on set
  - jbd2: fix data missing when reusing bh which is ready to be checkpointed
  - !502 [sync] PR-476: LoongArch: fix failed to boot
  - !498 [sync] PR-479: LoongArch: update network related default config
  - !496 [sync] PR-448: LoongArch: fix some pci problems
  - LoongArch: Initialize screen_info variable
  - LoongArch: Fixed EIOINTC structure members
  - LoongArch: Fix virtual machine startup error
  - loongarch/kvm: ls7a add iocsrw emulation
  - LoongArch: fix signal handler name changed
  - LoongArch: defconfig: update network configurations
  - LoongArch: pci root bridige set acpi companion only when not acpi_disabled.
  - pci: fix X server auto probe fail when both ast and etnaviv drm present
  - LS7A2000: PCIE: Fixup GPU card error
  - pci/quirks: ls7a2000: fix pm transition of devices under pcie port
  - LoongArch: Fixed some pcie card not scanning properly
  - pci: fix kabi error caused by pm_suspend_target_state
  - PCI: PM: Fix pcie mrrs restoring
  - PCI: Check if the pci controller can use both CFG0 and CFG1 mode to access configuration space
  - PCI: Check if entry->offset already exist for mem resource


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.87.0.111
changelog:
  - !529 Backport CVEs and bugfixes
  - block: fix use-after-free of q->q_usage_counter
  - block: move q_usage_counter release into blk_queue_release
  - Revert "block: fix null-deref in percpu_ref_put"
  - mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
  - md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
  - xfs, iomap: limit individual ioend chain lengths in writeback
  - net/sched: tcindex: search key must be 16 bits
  - net/sched: tcindex: update imperfect hash filters respecting rcu
  - tty: fix out-of-bounds access in tty_driver_lookup_tty()
  - fs/ntfs3: Validate resident attribute name
  - ima: Fix memory leakage in ima_store_template
  - Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
  - coredump: fix kabi broken in struct coredump_params
  - coredump: Use the vma snapshot in fill_files_note
  - coredump/elf: Pass coredump_params into fill_note_info
  - coredump: Remove the WARN_ON in dump_vma_snapshot
  - coredump: Snapshot the vmas in do_coredump
  - mm/swapfile: add cond_resched() in get_swap_pages()
  - mm: slince possible data races about pgdat->kswapd
  - mm: fix null-ptr-deref in kswapd_is_running()
  - fs/ntfs3: Validate MFT flags before replaying logs
  - fs/ntfs3: Validate attribute name offset
  - bpf: Fixes possible race in update_prog_stats() for 32bit arches
  - bpf: Avoid races in __bpf_prog_run() for 32bit arches
  - ext4: make sure fs error flag setted before clear journal error
  - ext4: commit super block if fs record error when journal record without error
  - af_unix: Get user_ns from in_skb in unix_diag_get_exact().
  - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  - arm64: errata: Remove AES hwcap for COMPAT tasks
  - ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
  - kernel: Initialize cpumask before parsing
  - softirq: Don't try waking ksoftirqd before it has been spawned
  - bpf: Prevent decl_tag from being referenced in func_proto arg
  - bpf: Skip task with pid=1 in send_signal_common()
  - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
  - !460 Backport CVEs and bugfixes
  - !517 [sync] PR-510: LoongArch: fix dual-bridge machine can not work
  - !516 [sync] PR-509: Loongson: fix 7a2000 gpu driver can not work
  - irqchip/loongson: Fix syscore ops registration
  - irqchip/loongarch: Fix some issues of irq controllers
  - drm/loongson: using hdmi hot plug status register
  - malidp: Fix NULL vs IS_ERR() checking


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.89.0.113
changelog:
  - !550 anolis: bond: broadcast ARP or ND messages to all slaves
  - !561 Backport CVEs and bugfixes
  - !560 [sync] PR-539: LoongArch: fix compile warnning of drm/loongson driver
  - net: sched: Use struct_size() helper in kvmalloc()
  - net_sched: Use struct_size() and flex_array_size() helpers
  - ext4: dio take shared inode lock when overwriting preallocated blocks
  - ext4: fix race between writepages and remount
  - clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
  - kvm: initialize all of the kvm_debugregs structure before sending it to userspace
  - nvme: use nvme_cid to generate command_id in trace event
  - xfs: don't report reserved bnobt space as available
  - xfs: don't include bnobt blocks when reserving free block pool
  - xfs: set aside allocation btree blocks from block reservation
  - xfs: introduce in-core global counter of allocbt blocks
  - act_mirred: use the backlog for nested calls to mirred ingress
  - net/sched: act_mirred: better wording on protection against excessive stack growth
  - net/sched: act_mirred: refactor the handle of xmit
  - scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
  - anolis: bond: broadcast ARP or ND messages to all slaves
  - !558 net: hns3: modify reset delay time to avoid configuration timeout
  - drm/loongson: fix compile warnning
  - net: hns3: modify reset delay time to avoid configuration timeout


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.90.0.114
changelog:
  - !574 Backport CVEs and bugfixes
  - driver core: Fix lockdep warning on wfs_lock
  - driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
  - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
  - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
  - ubi: ensure that VID header offset + VID header size <= alloc, size
  - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct()
  - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach
  - ring-buffer: Fix race while reader and writer are on the same page
  - loop: Add parm check in loop_control_ioctl
  - ext4: Fix i_disksize exceeding i_size problem in paritally written case
  - ext4: ext4_put_super: Remove redundant checking for 'sbi->s_journal_bdev'
  - ext4: Fix reusing stale buffer heads from last failed mounting
  - btrfs: fix race between quota disable and quota assign ioctls
  - dm crypt: add cond_resched() to dmcrypt_write()
  - xfs: don't leak memory when attr fork loading fails
  - xfs: delete unnecessary NULL checks
  - xfs: replace inode fork size macros with functions
  - xfs: replace XFS_IFORK_Q with a proper predicate function
  - xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
  - xfs: make inode attribute forks a permanent part of struct xfs_inode
  - xfs: convert XFS_IFORK_PTR to a static inline helper
  - xfs: don't reuse busy extents on extent trim
  - fs/xfs: convert comma to semicolon
  - xfs: xfs_ail_push_all_sync() stalls when racing with updates
  - xfs: check buffer pin state after locking in delwri_submit
  - xfs: log worker needs to start before intent/unlink recovery


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.91.0.115
changelog:
  - !588 [sync] PR-585:  x86/speculation: Allow enabling STIBP with legacy IBRS
  - !591 Backport CVEs and bugfixes
  - net/sched: Retire tcindex classifier
  - drm/vmwgfx: Validate the box size for the snooped cursor
  - netfilter: nf_tables: nft_parse_register can return a negative value
  - netfilter: nf_tables: validate registers coming from userspace.
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
  - KVM: nVMX: add missing consistency checks for CR0 and CR4
  - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
  - xfs: __percpu_counter_compare() inode count debug too expensive
  - xfs: fix memcpy fortify errors in EFI log format copying
  - xfs: fix memcpy fortify errors in RUI log format copying
  - xfs: fix memcpy fortify errors in CUI log format copying
  - xfs: fix memcpy fortify errors in BUI log format copying
  - xfs: Use struct xfs_bmdr_block instead of struct xfs_btree_block to calculate root node size
  - xfs: allow setting full range of panic tags
  - xfs: don't use BMBT btree split workers for IO completion
  - xfs: fix extent busy updating
  - xfs: get root inode correctly at bulkstat
  - xfs: invalidate xfs_bufs when allocating cow extents
  - xfs: attach dquots to inode before reading data/cow fork mappings
  - xfs: invalidate block device page cache during unmount
  - xfs: add selinux labels to whiteout inodes
  - xfs: convert buf_cancel_table allocation to kmalloc_array
  - xfs: don't leak xfs_buf_cancel structures when recovery fails
  - xfs: refactor buffer cancellation table allocation
  - xfs: fix type mismatches in the inode reclaim functions
  - xfs: don't allow log writes if the data device is readonly
  - x86/speculation: Allow enabling STIBP with legacy IBRS


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.92.0.116
changelog:
  - !632 Backport CVEs and bugfixes
  - bonding: Fix memory leak when changing bond type to Ethernet
  - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
  - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
  - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
  - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
  - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
  - timers/nohz: Last resort update jiffies on nohz_full IRQ entry
  - xfs: don't leak btree cursor when insrec fails after a split
  - xfs: avoid unnecessary runtime sibling pointer endian conversions
  - xfs: detect self referencing btree sibling pointers
  - xfs: introduce xfs_buf_daddr()
  - xfs: move kernel-specific superblock validation out of libxfs
  - xfs: bound maximum wait time for inodegc work
  - xfs: introduce xfs_inodegc_push()
  - xfs: flush inodegc workqueue tasks before cancel
  - xfs: drop async cache flushes from CIL commits.
  - xfs: limit iclog tail updates
  - xfs: need to see iclog flags in tracing
  - io_uring: ensure that io_init_req() passes in the right issue_flags
  - io_uring: add missing lock in io_get_file_fixed


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.93.0.117
changelog:
  - !723 Backport CVEs and bugfixes
  - USB: gadgetfs: Fix race between mounting and unmounting
  - prlimit: do_prlimit needs to have a speculation check
  - ext4: check iomap type only if ext4_iomap_begin() does not fail
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern
  - net: qcom/emac: Fix use after free bug in emac_remove due to race condition
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
  - ext4: only update i_reserved_data_blocks on successful block allocation
  - can: af_can: fix NULL pointer dereference in can_rcv_filter
  - RDMA/core: Refactor rdma_bind_addr
  - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
  - scsi: dpt_i2o: Remove obsolete driver
  - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
  - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
  - bpf, sockmap: Fix double bpf_prog_put on error case in map_link
  - bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
  - bpf, sockmap: Attach map progs to psock early for feature probes
  - bpf, sockmap: Fix return codes from tcp_bpf_recvmsg_parser()
  - bpf, sockmap: Fix race in ingress receive verdict with redirect to self


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.94.0.118
changelog:
  - !775 Backport CVEs and bugfixes
  - filemap: Correct the conditions for marking a folio as accessed
  - Revert "filemap: Correct the conditions for marking a folio as accessed"
  - netrom: Fix use-after-free caused by accept on already connected socket
  - bluetooth: Perform careful capability checks in hci_sock_ioctl()
  - fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
  - fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
  - fs/ntfs3: Validate data run offset
  - xfs: buffer pins need to hold a buffer reference
  - ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
  - fix kabi broken due to import new inode operation get_inode_acl
  - ovl: enable RCU'd ->get_acl()
  - vfs: add rcu argument to ->get_acl() callback
  - bpf: add missing header file include
  - uaccess: Add speculation barrier to copy_from_user()
  - !684 [sync] PR-675: driver/hifc&hinic: Fix compile error in allyesconfigs
  - scsi/hifc: Fix compile error in allyesconfigs
  - net/hinic: Fix compile error in allyesconfigs


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.95.0.119
changelog:
  - !800 Backport CVEs
  - netfilter: nf_tables: deactivate anonymous set from preparation phase
  - xfs: verify buffer contents when we skip log replay


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.96.0.120
changelog:
  - !862 Backport CVEs and bugfixes
  - cgroup: Stop task iteration when rebinding subsystem
  - drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
  - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
  - drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
  - sched/topology: Fix exceptional memory access in sd_llc_free_all()
  - block: Fix the partition start may overflow in add_partition()
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
  - iomap: don't invalidate folios after writeback errors
  - iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor
  - iomap: Don't create iomap_page objects for inline files
  - iomap: Permit pages without an iop to enter writeback
  - md: fix kabi broken in struct mddev
  - md: use interruptible apis in idle/frozen_sync_thread
  - md: wake up 'resync_wait' at last in md_reap_sync_thread()
  - md: refactor idle/frozen_sync_thread()
  - md: add a mutex to synchronize idle and frozen in action_store()
  - md: refactor action_store() for 'idle' and 'frozen'
  - Revert "md: unlock mddev before reap sync_thread in action_store"
  - md: unlock mddev before reap sync_thread in action_store
  - block: fix wrong mode for blkdev_put() from disk_scan_partitions()
  - block: fix scan partition for exclusively open device again
  - block: merge disk_scan_partitions and blkdev_reread_part
  - !812 [sync] PR-761: net: stmmac: fix potential double free of dma descriptor resources
  - net: stmmac: fix potential double free of dma descriptor resources
  - !806 [sync] PR-760: LoongArch: kvm: fix bug of kvm's hugepage
  - !669 [sync] PR-564: usb: disable soft retry for EJ188 controller
  - !796 [sync] PR-765: LoongArch: fix some stability issues
  - !784 [sync] PR-766: LoongArch: add kexec&kdump support
  - LoongArch: kvm: fix bug of kvm's hugepage
  - LoongArch: defconfig: enable CONFIG_CACHEFILES
  - i2c: loongson: fix irq not freed when remove module
  - LoongArch: Set _PAGE_DIRTY only if _PAGE_MODIFIED is set in {pmd,pte}_mkwrite()
  - LoongArch: Set _PAGE_DIRTY only if _PAGE_WRITE is set in {pmd,pte}_mkdirty()
  - LoongArch: Clear FPU/SIMD thread info flags for kernel thread
  - LoongArch: Remove generic irq migration
  - LoongArch: Fix secondary bridge routing errors
  - LoongArch: Fix kdump failure on v40 interface specification
  - LoongArch: configs: Enable kexec/kdump
  - LoongArch: kdump: Add crashkernel=YM handling
  - LoongArch: kdump: Add single kernel image implementation
  - LoongArch: Add support for kernel address space layout randomization (KASLR)
  - LoongArch: Add support for kernel relocation
  - LoongArch: Add la_abs macro implementation
  - LoongArch: Add JUMP_VIRT_ADDR macro implementation to avoid using la.abs
  - LoongArch: Use la.pcrel instead of la.abs when it's trivially possible
  - LoongArch: efistub: Modify the address where efistub jumps to the main kernel
  - LoongArch: kdump: Add memory reservation for old kernel
  - LoongArch: Integrate initrd operation
  - LoongArch: kexec: Add compatibility with old interfaces
  - LoongArch: Flush TLB earlier at initialization
  - LoongArch: Add kdump support
  - LoongArch: Add kexec support
  - usb: xhci: add XHCI_NO_SOFT_RETRY quirk for EJ188


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.97.0.121
changelog:
  - !904 [sync] PR-903: backport block bugfix
  - !962 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
  - !959 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
  - !955 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
  - tcp: restrict net.ipv4.tcp_app_win
  - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
  - config: Disable CONFIG_EULER_FS by default
  - !930  xfs: missing lts patchs
  - !935 [sync] PR-922:  jbd2: fix checkpoint inconsistent
  - !917 [sync] PR-880: LoongArch: kdump: Add high memory reservation
  - !916 [sync] PR-868: LoongArch: fix compile error caused by __ffs not defined
  - !915 [sync] PR-792: LoongArch: add ls2k500 bmc support
  - jbd2: remove t_checkpoint_io_list
  - jbd2: recheck chechpointing non-dirty buffer
  - xfs: validate inode fork size against fork format
  - xfs: reorder iunlink remove operation in xfs_ifree
  - !912 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
  - LoongArch: kdump: Add high memory reservation
  - LoongArch: fix __ffs not defined compile error
  - LoongArch: fix ls2k500 bmc not work when installing iso
  - LoongArch: defconfig: enable CONFIG_FB_LS2K500=m.
  - ipmi: add ls2k500 bmc ipmi support.
  - fbdev: add ls2k500sfb driver for ls2k500 bmc.
  - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
  - md/raid10: fix incorrect done of recovery
  - md/raid10: fix null-ptr-deref in raid10_sync_request
  - block/badblocks: fix badblocks loss when badblocks combine
  - block/badblocks: fix the bug of reverse order
  - md: fix unexpected changes of return value in rdev_set_badblocks
  - md/raid10: fix io hung in md_wait_for_blocked_rdev()
  - block: Only set bb->changed when badblocks changes
  - md/raid10: fix incorrect counting of rdev->nr_pending
  - md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
  - md/raid10: fix uaf if replacement replaces rdev
  - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
  - md/raid10: fix io loss while replacement replace rdev
  - md/raid10: prioritize adding disk to 'removed' mirror
  - md: fix io loss when remove rdev fail
  - md/raid10: fix a race between removing rdev and access conf->mirrors[i].rdev
  - md/raid10: fix taks hung in raid10d
  - md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
  - md/raid10: fix softlockup in raid10_unplug
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed
  - md: fix sysfs duplicate file while adding rdev
  - md: replace invalid function flush_rdev_wq() with flush_workqueue()
  - md: Flush workqueue md_rdev_misc_wq in md_alloc()
  - block: don't allow the same type rq_qos add more than once
  - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
  - blk-iocost: don't allow to configure bio based device
  - !867  arm64: kdump: Avoid reserving low memory repeatedly
  - !854 [sync] PR-793: LoongArch: kvm: add pv ipi support
  - !853 [sync] PR-809: LoongArch: defconfig: enable memory and pci hotplug related configs for LoongArch
  - arm64: kdump: Avoid reserving low memory repeatedly
  - LoongArch: LSVZ: Support PV IPI to reduce VM exit
  - LoongArch: defconfig: Add PCI hotplug support
  - LoongArch: defconfig: Add memory hotplug support


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.98.0.122
changelog:
  - !1103 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
  - !1108 [sync] PR-1090:  fs/ntfs3: Check fields while reading
  - !1117 [sync] PR-1084: LoongArch: fix wrong 7a1000 int_clear register write
  - !1116 [sync] PR-1083: LoongArch: fix system hang caused by 2k500 bmc driver
  - irqchip/loongson-pch-pic: 7a1000 int_clear reg must use 64bit write.
  - ipmi_si: ls2k500 kcs driver add wait bmc reboot done and rebind support.
  - fs/ntfs3: Check fields while reading
  - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
  - !1008 [sync] PR-941: LoongArch: fix 2k500 sfb driver not work during reboot
  - !1031  nbd: get config_lock before sock_shutdown
  - !1060  Support dynamic_hugetlb on arm64 and fix some bug
  - !1057 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
  - mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
  - mm/dynamic_hugetlb: set PagePool to bad page
  - mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
  - mm/dynamic_hugetlb: isolate hugepage without dissolve
  - mm/dynamic_hugetlb: support dynamic hugetlb on arm64
  - mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
  - !1034  io_uring: fix the problem of
  - fs: hfsplus: fix UAF issue in hfsplus_put_super
  - !1050 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
  - scripts: Fix issue of module signing with openssl 3.x
  - !994 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
  - !999 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
  - !1010 [sync] PR-924:  dm: add disk before alloc dax
  - !1013 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
  - kernel: don't call do_exit() for PF_IO_WORKER threads
  - x86/process: setup io_threads more like normal user space threads
  - arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
  - arch: setup PF_IO_WORKER threads like PF_KTHREAD
  - !950 [sync] PR-929:  xfs: rework feature flags
  - nbd: get config_lock before sock_shutdown
  - !971 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
  - !986 [sync] PR-954:  block: iocost bugfix
  - !983 [sync] PR-946:  icost bugfix
  - dm thin: Fix ABBA deadlock by resetting dm_bufio_client
  - dm: add disk before alloc dax
  - PCI/portdrv: Prevent LS7A Bus Master clearing on shutdown
  - Revert "PCI: Add quirk for LS7A to avoid reboot failure"
  - hikey9xx: Fixed incorrect use of kfree to free sreg
  - ubi: Fix deadlock caused by recursively holding work_sem
  - mtd: ubi: wl: Fix a couple of kernel-doc issues
  - !975 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
  - !936 [sync] PR-897: LoongArch: improve dma ops and interrupt process
  - !939 [sync] PR-869: LoongArch: defconfig: Enable a large number of configurations
  - block: fix order error in blk_release_queue
  - block: fix null-pointer dereference in ioc_pd_init
  - blk-iocost: dispatch all throttled bio in ioc_pd_offline
  - blk-iocost: don't throttle bio if iocg is offlined
  - blk-iocost: track whether iocg is still online
  - blk-iocost: fix UAF in ioc_pd_free
  - x86/unwind: Fix check_paravirt() calls orc_find() before declaration
  - x86/unwind: Fix orc entry for paravirt {save,restore}_fl
  - kobject: Fix slab-out-of-bounds in fill_kobj_path()
  - xfs: kill xfs_sb_version_has_v3inode()
  - xfs: introduce xfs_sb_is_v5 helper
  - xfs: remove unused xfs_sb_version_has wrappers
  - xfs: convert xfs_sb_version_has checks to use mount features
  - xfs: convert scrub to use mount-based feature checks
  - xfs: open code sb verifier feature checks
  - xfs: convert xfs_fs_geometry to use mount feature checks
  - xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
  - xfs: convert remaining mount flags to state flags
  - xfs: convert mount flags to features
  - xfs: consolidate mount option features in m_features
  - xfs: replace xfs_sb_version checks with feature flag checks
  - xfs: reflect sb features in xfs_mount
  - xfs: rework attr2 feature and mount options
  - xfs: rename xfs_has_attr()
  - xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
  - xfs: log items should have a xlog pointer, not a mount
  - xfs: fix incorrect error-out in xfs_remove
  - LoongArch: defconfig: Enable a large number of configurations
  - LoongArch: Add swiotlb backups buffer
  - LoongArch: Add ARCH_HAS_SETUP_DMA_OPS and DMA_OPS
  - pci: irq: Add early_param pci_irq_limit to limit pci irq numbers


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.0.20-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:support more than one crash kernel regions.
         Fix bugs of unuseable quick kexec on arm64, becaues of arm64-kexec-allocate-memory-space-avoiding-reserved-regions
         excluding QUICK_KEXEC memory region.


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.0.20-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix bug: Filed to generate the vmcore file in the ARM architecture
         Fix bug: Filed to generate the vmcore-dmesg.txt file in the ARM architecture


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:kpatch: update sympos for duplicate symbols in vmlinux
         create-diff-object: fix segment fault when sec2->rela is NULL


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.5-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix "ERROR: util.o: find_local_syms: 185: found duplicate matches for util.c"


author: chengzeruizhi <chengzeruizhi@huawei.com> - 2.0.6-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: add new fields in config v2 and inspect to support modifications on iSulad


author: chengzeruizhi<chengzeruizhi@huawei.com> - 2.0.8-3
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: add HAVE_ISULAD definition and fix cpu quota out of range


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.8-7
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: modify depends package lxc version to 4.0.3-20221024XX


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.8-9
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:add macro to adapt musl libc and add add-gids option for exec


author: fuanan <fuanan3@huawei.com> - 563-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: Eibz-Chan <chenbingzhao@huawei.com> - 590-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
  	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
  	Fix-crash-when-enter-invaid-pattern-in-command.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.3-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-Add-getentropy-emulation-through-syscall.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - capsh better error handling for integer parsing
  - setcap clean up error handling of the ns rootid argument


author: chenhaixing <chenhaixing@huawei.com> - 0.65.0-6
changelog:
  - CVE:NA
  - SUG:NA
  - DESC:libdnf:backport patch to fix undo error and add check after malloc allocation


author: xu_ping <xuping33@huawei.com> - 1:1.40.2-16
changelog:
  - Use actual function Pervasives.compare to instead of default compare and omit the labels on positional arguments.


author: chenyanpanHW <chenyanpan@huawei.com> - 1.16.4-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-evdev-strip-the-device-name-of-format-directives.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git-core


author: haowenchao <haowenchao@huawei.com> - 1.19.0-4
changelog:
  - Split rpm package to avoid main rpm package CUnit dependency
    Previous implement place executable files in main package which leading
    to dependency of CUnit. This change add a package utils and move
    these executable files to utils package to avoid main package's CUnit
    dependency, making main package weak depend on libiscsi-utils


author: chenyanpanHW <chenyanpan@huawei.com> - 1.19.0-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-iscsi-ls-Fix-iser-url-scheme-parsing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-test-tool-Compare-Write-skip-InvalidDataOutSize-unle.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-test-tool-Compare-Write-override-driver-queue_pdu-ca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-test-tool-iSCSICmdSnTooLow-override-driver-queue_pdu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-test-tool-iSCSICmdSnTooHigh-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-test-tool-iSCSIDataSnInvalid-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-test-tool-BlockEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-test-tool-BlockEraseReserved-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-test-tool-CryptoEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-test-tool-CryptoEraseReserved-override-driver-queue_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0011-test-tool-OverwriteReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0012-test-tool-OverwriteReserved-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0013-test-tool-remove-unused-iscsi_queue_pdu-symbol-overl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0014-iser-remove-__packed-from-struct-iser_cm_hdr-declaration.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0015-test-tools-use-extern-init-in-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0016-iscsi-inq-handle-setting-of-debug_level-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0017-Updata-iscsi-dd.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0018-iscsi-swp-handle-setting-of-debug_level-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0019-fix-iscsi-ls-parameter-parse.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0020-Check-return-value-of-scsi_malloc-in-order-to.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0021-Fix-segmentation-fault-problem.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Ruijun Ge <geruijun@huawei.com> - 1.19.0-8
changelog:
  - DESC: backport patches to solve command parameter parse problem
          and dereference null pointer problem


author: xihaochen <xihaochen@huawei.com> - 0.9.5-1
changelog:
  - Type:requirements                                                                                                                                            
  - Id:NA
  - SUG:NA
  - DESC:update libssh to 0.9.5


author: zengweifeng <zwfeng@huawei.com> - 0.9.6-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: xinghe <xinghe2@h-partners.com> - 0.9.6-4
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:options: Parse hostname by last '@'
         torture_options: Add test for '@' in login name
         session: Initialize pointers
         tests: Ensure the mode of the created file is what we set


author: gaihuiying <eaglegai@163.com> - 0.9.6-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport some upstream patches:
         Avoid false positive report from Coveritt CID 1470006
         kdf: Avoid endianess issues
         misc: Fix format truncation in ssh_path_expand_escape()
         misc: Fix expanding port numbers
         misc: rename gettimeofday symbol
         session: Initialize the port with the standard port (22)
         session->socket_callbacks.data will be set to ssh_packet_socket_callback
         socket: Add error message if execv fails
         tests: Add test for expanding port numbers


author: renmingshuai <renmingshuai@huawei.com> - 0.9.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:config: Escape brackets in ProxyCommand build from ProxyJump
         packet: do not enqueue outgoing packets after sending


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-23
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: yezengruan <yezengruan@huawei.com> - 0.7.3-7
changelog:
  - tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
  - tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
  - tpm2: Restore original value if unmarsalled value was illegal
  - fix CVE-2021-3623


author: imxcc <xingchaochao@huawei.com> - 6.2.0-32
changelog:
  - virQEMUBuildCommandLineJSON: Allow skipping certain keys
  - virQEMUBuildCommandLineJSON: Add possibility for using 'on/off' instead of 'yes/no'
  - util: virqemu: Introduce virQEMUBuildNetdevCommandlineFromJSON
  - util: json: Introduce virJSONValueObjectAppendStringPrintf
  - qemuBuildChannelsCommandLine: Use typecasted switch for channel type
  - qemuBuildChannelsCommandLine: Extract common formatting of 'chardev'
  - qemuBuildChannelChrDeviceStr: Remove formatting of properties for -netdev
  - qemuMonitorJSON(Add|Remove)Netdev: Refactor cleanup
  - qemuBuildHostNetStr: Stop using 'ipv6-net' convenience argument
  - qemu: command: Generate -netdev command line via JSON->cmdline conversion
  - qemuBuildChannelGuestfwdNetdevProps: Convert to generating JSON props
  - qemuMonitorAddNetdev: Convert to the native JSON props object
  - virCommand: Introduce virCommandGetArgList
  - testutilsqemuschema: Introduce testQEMUSchemaValidateCommand
  - testCompareXMLToArgv: Split out preparation and command formatting
  - virQEMUBuildNetdevCommandlineFromJSON: Prepare for quirky 'guestfwd'
  - qemu: Prepare for testing of 'netdev_add' props via qemuxml2argvtest
  - qemuxml2argvtest: Add QAPI/QMP schema validation for -blockdev and -netdev


author: yezengruan <yezengruan@huawei.com> - 6.2.0-33
changelog:
  - qemu: Probe for a few params supported by migrate-set-parameters
  - qemu: Avoid deprecated migrate_set_speed QMP command
  - qemu: Avoid deprecated migrate_set_downtime QMP command
  - qemu: Avoid deprecated query-migrate-cache-size QMP command
  - qemu: Avoid deprecated migrate-set-cache-size QMP command
  - qemu: Track numa-mem-supported machine attribute
  - qemuBuildNumaArgStr: Switch order of if() and for()
  - qemuBuildNumaArgStr: Use modern -numa memdev= if old -numa mem= is unsupported


author: yezengruan <yezengruan@huawei.com> - 6.2.0-34
changelog:
  - Revert libvirt: support aarch64 vtpm with parameter tpm-tis-device
  - qemu: Fix swtpm device with aarch64
  - qemu: Fix libvirt hang due to early TPM device stop
  - qemu_tpm: Move logfile path generation into a separate function
  - qemu_tpm: Generate log file path among with storage path
  - virtpm: Fix @path handling in virTPMEmulatorInit()


author: yezengruan <yezengruan@huawei.com> - 6.2.0-35
changelog:
  - qemuMonitorJSONSetMigrationParams: Take double pointer for @params
  - qemuMonitorJSONAddObject: Take double pointer for @props
  - :qemuMonitorJSONMakeCommandInternal: Clear @arguments when stolen
  - qemuMonitorAddObject: Fix semantics of @alias
  - qemuMonitorAddObject: Refactor cleanup
  - util: json: Replace virJSONValueObjectSteal by virJSONValueObjectRemoveKey
  - qemu: command: Generate commandline of 'masterKey0' secret via JSON
  - qemu: command: Generate commandline of 'sev0' sev-guest object via JSON
  - qemu: command: Generate commandline of iothread objects JSON
  - qemu: capabilities: Introduce QEMU_CAPS_OBJECT_QAPIFIED
  - qemu: monitor: Make wrapping of 'props' of 'object-add' optional
  - qemuMonitorCreateObjectPropsWrap: Open-code in qemuBuildMemoryBackendProps
  - qemu: monitor: Don't add 'props' wrapper if qemu has QEMU_CAPS_OBJECT_QAPIFIED
  - qemu: command: Use JSON for QAPIfied -object directly
  - tests: qemuxml2argv: Validate generation of JSON props for object-add
  - qemu: capabilities: Enable detection of QEMU_CAPS_OBJECT_QAPIFIED


author: yezengruan <yezengruan@huawei.com> - 6.2.0-47
changelog:
  - sync some bugfix patches from upstream
  - support vhostuser disk
  - libvirt: support dirtyrate (calc-dirty-rate, dirtyrate-param.mode)


author: panxiaohe <panxiaohe@huawei.com> - 2.9.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add backport bug fixes.
         work around lxml API abuse
         fix regression in xmlNodeDumpOutputInternal
         fix whitespace when serializing empty HTML documents
         forbid epsilon-reduction of final states
         fix buffering in xmlOutputBufferWrite


author: fuanan <fuanan3@h-partners.com> - 2.9.12-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: fuanan <fuanan3@h-partners.com> - 2.9.12-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix heap-use-after-free in xmlXIncludeIncludeNode
         fix stack overflow in xmlDocDumpMemory
         fix stack overflow in htmlDocContentDumpOutput


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix memory leaks in XPointer string-range function
         fix null pointer deref in xmlXPtrRangeInsideFunction
         stop using maxParserDepth in xpath.c
         hardcode maximum XPath recursion depth
         fix XPath recursion limit


author: huangduirong <huangduirong@huawei.com> - 2.9.10-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues, fix null-deref in xmlSchemaGetComponentTargetNs


author: houmingyong<houmingyong@huawei.com> - 2.11.6
changelog:
  - 5.10 kernel backport 5.11 kernel sgx driver patch, disables sgx feature flag for non-FLC platforms
  - use cpuid instead of boot_cpu_has to check cpu features


author: wangfengtu<wangfengtu@huawei.com> - 4.0.3-2022052301
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: do not operate playload and attach cgroup if no controller found


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.15-2
changelog:
  - Fix the systemd service issue about the env variable.
  - Apply the patches from old branch.
  - Adaption the cmake version and integrate into the spec file.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.8.5-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-change-order-of-multipath.rules.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-RH-add-mpathconf.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-RH-Remove-the-property-blacklist-exception-builtin.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-fix-syntax-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-fix-multipathd-resize-when-not-all-paths-size-are-eq.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-avoid-handling-paths-repeatedly-in-coalesce-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-fix-lun-expansion-failure-when-there-is-offline-path.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-fix-bugs-backported-from-next-branch.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-fix-change-reservation-key-to-uint8-for-memcmp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-bugfix-flush-and-sync-before-reboot.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0011-change-log-level-to-info-if-alua-is-not-support-by-s.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0012-device-mapper-multipath-fix-find-multipath-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0013-kpartx-change-kpartx-file-and-default-bindir.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0014-remove-local-disk-from-pathvec.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0015-clear-mpp-path-reference-when-path-is-freed-otherwis.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0016-multipath-return-failure-on-an-invalid-remove-cmd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0017-multipath-fix-exit-status-of-multipath-T.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0018-multipath-tools-use-run-instead-of-dev-shm.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: liwu <liwu13@huawei.com> - 8.0.26-1
changelog:
  - Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
    CVE-2021-2352 CVE-2021-2340


author: yaoxin <yaoxin30@huawei.com> - 8.0.27-1
changelog:
  - Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
    CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
    CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
    CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
    CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
    CVE-2021-35644-to-CVE-2021-35648


author: jintang song<jintang.song@epro.com.cn> - 8.0.29-1
changelog:
  - Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
    CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
    CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
    CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
    CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
    CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
    CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490


author: bzhaoop <bzhaojyathousandy@gmail.com> - 5.7.34-1
changelog:
  - Bump from 5.7.21 to latest 5.7.34
  - Correct the test steps and options
  - Refactor part of the file structure according to the new packages


author: bzhaoop <bzhaojyathousandy@gmail.com> - 5.7.37-1
changelog:
  - Fix CVE issues for bump to the 5.7.37 version
  - CVE-2022-21245
  - CVE-2022-21270
  - CVE-2022-21303
  - CVE-2022-21304
  - CVE-2022-21344
  - CVE-2022-21367
  - CVE-2021-35624
  - CVE-2021-2356
  - CVE-2021-2011
  - CVE-2021-2010
  - CVE-2021-2007


author: gaihuiying <gaihuiying1@huawei.com> - 5.8-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix undefined behavior in asn_build_int()
         libsnmp: Rework parse_imports()
         libsnmp: Increase MAX_IMPORTS
         libsnmp: Allocate the module import list on the heap
         libsnmp: Fix a memory leak in a MIB parser error path
         libsnmp: Fix the getoid() error path


author: gaihuiying <eaglegai@163.com> - 1:5.9.1-3
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: xingwei <xingwei14@h-partners.com> - 1:5.9.1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
          IF-MIB: pass the network interface index to net
          IF-MIB: fix a memory leak
          IF-MIB: fix a recently introduced use after free
          IF-MIB: add a trailing newline to an error message


author: eaglegai <eaglegai@163.com> - 2.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ifconfig display error when the length of interface name is 15


author: xu_ping <xuping33@huawei.com> - 1:12.18.4-8
changelog:
  - openEuler 22.03 changed the page table to 4k so remove the 0003-Modify-openEuler-aarch64-v8_os_page_size-to-64.patch


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-6
changelog:
  - Type:CVE
  - ID:CVE-2023-26551
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-9
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: Cui XuCui <cuixucui1@huawei.com> - 1.0.0-8
changelog:
  * Thu Jul 15 2021 zhangzikang <zhangzikang@kylinos.cn> - 1.0.0-7
  - Fix cdrom and cpufreq test failed


author: meitingli <bubble_mt@outlook.com> - 1.1.0-0
changelog:
  - 1. Add support os version: openEuler 22.03LTS
  - 2. Add FC/RAID/keycard/GPU/infiniband testcases
  - 3. Bugfix


author: cuixucui <cuixucui1@h-partners.com> - 1.1.1-0
changelog:
  -1. Reconstruct the log module and rectify the log printing
  -2. Add kabi testcase
  -3. Add driver, driver version, chip and module display to the console
  -4. Add configuration file for testsuite to improve automation rate
  -5. Add oech and oech-server version display
  -6. Add driver information display in hardware test logs


author: cuixucui <cuixucui1@h-partners> - 1.1.1-3
changelog:
  - Fix the problem that the client fails to send messages after the server port is modified
  - Fix the problem that the system test item failed to check the integrity of the software package


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-4
changelog:
  - Add requirements for system and bugfix
  - Upgrade oec-hardware-server
  - Update readme and design doc
  - Fix nvme error
  - Update network fibre check and log 
  - Update description for perf test
  - Add automatic configuration network card IP


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-5
changelog:
  - fix the bug that the test board information is not added to the configuration file
  - Add kabi for hardware critical test
  - Optimize disk/raid/fc/ethernet/infiniband test suite
  - Fix the bug of reading nvme data failed
  - Add file size check when uploading file to server


author: zhangyale <zhangyale3@h-partners.com> - 1.1.3-0
changelog:
  - Add support for openEuler 22.03 LTS SP1
  - Add AMD GPU testcase
  - Add automatic configuration network card IP
  - Add generate compatibility information


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: liqiang <liqiang332@h-partner.com> - 1.1.3-3
changelog:
  - Fix libswsds.so not stripped
  - Fix the value of kernel.src obtained by the kabi test case is incorrect
  - Add board infomation and fix memory bug
  - Fix the block size fails to be obtained during the NVME test
  - Judge whether to support kabi testing by architecture
  - Update readme and dev_design


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-0
changelog:
  - Add board information in the test report
  - Add spdk test case
  - Add dpdk test case
  - Update pci.ids file


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-1
changelog:
  - Add igc dpdk
  - Secure_filename to improve input robustness and security
  - Correcting bug, self.changed_ Logpath is a string
  - Increase the number of network card up detection times
  - Resolve the issue of IP configuration failure


author: hanhui <hanhui15@h-partners.com> - 2.0.3-6
changelog:
  - DESC: delete gamin and openjpeg
          add rsyslog-gnutls and edk2-ovmf packages
          rename hisi_rde to hisi_trng_v2,libkae to uadk_engine


author: Noah <hedongbo@huawei.com> - 8u330.1
changelog:
  - change upstream to openeuler
  - rm 0004-Fix-Compilation-Flags.patch
  - rm 0005-fxpackager-extract-jre-accept-symlink.patch
  - rm 0003-fix-cast-between-incompatible-function-types.patch


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: liulong <liulong20@huawei.com> - 2.4.50-5
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.0-26
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-multicast-set.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-notify-systemd-of-start-up.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-null-pointer-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-openssl-1.1-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-cve-2016-7567.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-cve-2017-17833.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/CVE-2012-4428-fix-handling-of-string-list-in-slp_common-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/Fix-slp_iface-c-comma-expression-so-it-works-as-designed.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/Daemon-sends-wrong-service-reply-when-security-is-enabled.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/Fix-DAAddresses-hostname-resolution-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/Change-default-slpreg-connection-from-UDP-to-TCP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/Fix-interface-parsing-code-to-look-for-null-ifc-addrs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/Fix-broadcast-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/Properly-initialize-xcastsocks-for-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/Fix-xrealloc-to-properly-free-original-pointer-on-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/CVE-2019-5544.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xingwei <xingwei14@h-partners.com> - 2.0.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to solve package upgrade failure problem


author: renmingshuai<renmingshuai@huawei.com> - 8.8p1-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:PubkeyAcceptedKeyTypes has been renamed to PubkeyAcceptedAlgorithms in openssh-8.5p1


author: Kai Liu <kai.liu@suse.com> - 8.8p1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix incorrect sftp-server binary path in /etc/ssh/sshd_config


author: wangqiang <wangqiang1@kylinos.cn> - 0.10.8-3
changelog:
  - Type:Feature
  - ID:NA
  - SUG:NA
  - DESC:delete "-S git" from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-Resolve-the-failure-of-field-matching-in-test-cases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-FIX-CVE-2022-1049.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: wangqiang <wangqiang1@kylinos.cn> - 0.10.8-3
changelog:
  - Type:Feature
  - ID:NA
  - SUG:NA
  - DESC:delete "-S git" from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-Resolve-the-failure-of-field-matching-in-test-cases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-FIX-CVE-2022-1049.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-CVE-2022-2735.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: panxiaohe <panxh.life@foxmail.com> - 8.0.0-8
changelog:
  - use lmdb instead of Berkeley DB for package dba
  - update %configure for riscv
  - delete unused rcver


author: wangye <wangye70@huawei.com> - 0.67.0-7
changelog:
  - Type:cves
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2018-16646 CVE-2018-18897 CVE-2018-19060 CVE-2018-20481 CVE-2019-14494 CVE-2019-7310


author: chenyanpanHW <chenyanpan@huawei.com> - 0.67.0-8
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-gcc11.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 0.67.0-8
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-gcc11.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-CVE-2022-27337.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: bzhaoop <bzhaojyathousandy@gmail.com> - 13.3-6
changelog:
  - Porting "Fix subtransaction test failed" from master branch
  - Fri May 6 2022 caodongxia <caodongxia@h-partners.com> - 13.3-4
  - sync the same line with master


author: gaihuiying <eaglegai@163.com> - 2.4.9-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: xihaochen <xihaochen@huawei.com> - 3.3.1-1
changelog:
  - Type:requirements                                                                                            
  - Id:NA
  - SUG:NA
  - DESC:update python-ldap to 3.3.1


author: yangcheng <yangcheng1203@163.com> - 8.1.2-4
changelog:
  - Type:CVE
  - CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
  - SUG:NA
  - DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817


author: dongyuzhen <dongyuzhen@h-partners.com> - 9.0.1-2
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: chenhaixing <chenhaixing@huawei.com> - 1.26.7-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix socket timeout value when HTTPConnect is reused
         remove Exclamation mark character from the unreserved characters
         fix _idna_encode handling of x80


author: shixuantong <shixuantong@h-partners.com> - 3.9.9-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable profile guided optimizations for x86_64 and i686 architectures


author: shixuantong <shixuantong@h-partners.com> - 3.9.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:concurrent.futures.wait() now deduplicates futures given as arg.


author: Chenxi Mao <chenxi.mao@suse.com> - 3.9.9-23
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC: Enable link time optimizaitons (LTO) for better performance.


author: yezengruan <yezengruan@huawei.com> - 6.2.0-30
changelog:
  - scsi-bus: fix incorrect call for blk_error_retry_reset_timeout()
  - Revert "monitor: limit io error qmp event to at most once per 60s"


author: yezengruan <yezengruan@huawei.com> - 6.2.0-31
changelog:
  - vhost-vsock: detach the virqueue element in case of error (CVE-2022-26354)
  - virtio-net: fix map leaking on error during receive (CVE-2022-26353)


author: yezengruan <yezengruan@huawei.com> - 2:6.2.0-34
changelog:
  - display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207)
  - ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206)


author: yezengruan <yezengruan@huawei.com> - 2:6.2.0-35
changelog:
  - hw/intc/arm_gicv3: Check for !MEMTX_OK instead of MEMTX_ERROR (CVE-2021-3750)
  - softmmu/physmem: Simplify flatview_write and address_space_access_valid
  - softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR


author: yezengruan <yezengruan@huawei.com> - 2:6.2.0-38
changelog:
  - acpi: fix QEMU crash when started with SLIC table
  - tests: acpi: whitelist expected blobs before changing them
  - tests: acpi: add SLIC table test
  - tests: acpi: SLIC: update expected blobs
  - hw/block/fdc: Prevent end-of-track overrun (CVE-2021-3507)
  - tests/qtest/fdc-test: Add a regression test for CVE-2021-3507


author: yezengruan <yezengruan@huawei.com> - 2:6.2.0-39
changelog:
  - hw/scsi/megasas: Use uint32_t for reply queue head/tail values
  - dma: Let dma_memory_valid() take MemTxAttrs argument
  - dma: Let dma_memory_set() take MemTxAttrs argument
  - dma: Let dma_memory_rw_relaxed() take MemTxAttrs argument
  - dma: Let dma_memory_rw() take MemTxAttrs argument
  - dma: Let dma_memory_read/write() take MemTxAttrs argument
  - dma: Let dma_memory_map() take MemTxAttrs argument
  - dma: Have dma_buf_rw() take a void pointer
  - dma: Have dma_buf_read() / dma_buf_write() take a void pointer
  - pci: Let pci_dma_rw() take MemTxAttrs argument
  - dma: Let dma_buf_rw() take MemTxAttrs argument
  - dma: Let dma_buf_write() take MemTxAttrs argument
  - dma: Let dma_buf_read() take MemTxAttrs argument
  - dma: Let dma_buf_rw() propagate MemTxResult
  - dma: Let st*_dma() take MemTxAttrs argument
  - dma: Let ld*_dma() take MemTxAttrs argument
  - dma: Let st*_dma() propagate MemTxResult
  - dma: Let ld*_dma() propagate MemTxResult
  - pci: Let st*_pci_dma() take MemTxAttrs argument
  - pci: Let ld*_pci_dma() take MemTxAttrs argument
  - pci: Let st*_pci_dma() propagate MemTxResult
  - pci: Let ld*_pci_dma() propagate MemTxResult
  - hw/audio/intel-hda: Do not ignore DMA overrun errors
  - hw/audio/intel-hda: Restrict DMA engine to memories (not MMIO devices)
  - tests/qtest/intel-hda-test: Add reproducer for issue #542


author: liuxiangdong <liuxiangdong5@huawei.com> - 2:6.2.0-42
changelog:
  - acpi: validate hotplug selector on access
  - virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358)


author: yezengruan <yezengruan@huawei.com> - 2:6.2.0-45
changelog:
  - numa: Enable numa for SGX EPC sections
  - target/ppc: enhance error handling in kvmppc_read_int*
  - fix pointer double free in func qemu_savevm_state_complete_precopy_non_iterable


author: yezengruan <yezengruan@huawei.com> - 10:6.2.0-46
changelog:
  - vhost-user: remove VirtQ notifier restore
  - vhost-user: fix VirtQ notifier cleanup
  - enable vDPA build params
  - Provides qemu-kvm for upgrade


author: yezengruan <yezengruan@huawei.com> - 10:6.2.0-48
changelog:
  - hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued
  - tests/qtest: Add fuzz-lsi53c895a-test
  - scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216)
  - scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216)


author: zhangxinhao <zhangxinhao1@huawei.com> - 10:6.2.0-51
changelog:
  - exec/memory: Extract address_space_set() from dma_memory_set()
  - hw/elf_ops: clear uninitialized segment space
  - vhost: also check queue state in the vhost_dev_set_log
  - vhost-net: fix improper cleanup in vhost_net_start
  - virtio-net: setup vhost_dev and notifiers for cvq only


author: wanbo <wanbo13@huawei.com> - 10:6.2.0-52
changelog:
  - job.c: add missing notifier initialization
  - uas: add missing return
  - qom: assert integer does not overflow
  - pci: expose TYPE_XI03130_DOWNSTREAM name
  - acpi: pcihp: pcie: set power on cap on parent slot
  - hw/display/ati_2d: Fix buffer overflow in ati_2d_blt


author: yezengruan <yezengruan@huawei.com> - 10:6.2.0-57
changelog:
  - arm/virt: Fix vcpu hotplug idx_from_topo_ids
  - Revert patches related to the vSVA
  - sync some bugfix patches from upstream
  - fix the virtio features negotiation flaw
  - fix CVE-2022-4144


author: yezengruan <yezengruan@huawei.com> - 10:6.2.0-59
changelog:
  - target/arm: Fix kvm prove of ID_AA64ZFR0
  - migration: report migration/multiFd related thread pid to libvirt
  - vhost_net: keep acked_feature only for NET_CLIENT_DRIVER_VHOST_USER


author: yezengruan <yezengruan@huawei.com> - 10:6.2.0-60
changelog:
  - linux-user: Add strace output for timer_settime64() syscall
  - fix qemu-core when vhost-user-net config with server mode


author: xihaochen <xihaochen@huawei.com> - 2.19-1
changelog:
  - Type:requirements                                                                                                                               
  - Id:NA
  - SUG:NA
  - DESC:update radvd to 2.19


author: Kou Wenqi<kouwenqi@kylinos.cn> - 4.17.0-13
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:requires zstd >= 1.4.0, requires zstd-devel >= 1.3.8 in build


author: gaihuiying <eaglegai@163.com> - 4.15.3-3
changelog:
  - Type:cves
  - ID:CVE-2022-0336 CVE-2021-44142
  - SUG:NA
  - DESC:backport to fix CVE-2022-0336 CVE-2021-44142


author: xinghe <xinghe2@h-partners.com> - 4.15.3-7
changelog:
  - Type:cves
  - ID:CVE-2022-32746 CVE-2022-2031 CVE-2022-32744 CVE-2022-32742 CVE-2022-32745
  - SUG:NA
  - DESC:fix CVE-2022-32746 CVE-2022-2031 CVE-2022-32744 CVE-2022-32742 CVE-2022-32745


author: xinghe <xinghe2@h-partners.com> - 4.15.3-18
changelog:
  - Type:cves
  - ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
  - SUG:NA
  - DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967


author: gaihuiying <gaihuiying1@huawei.com> - 4.12.5-5
changelog:
  - Type:cves
  - ID:CVE-2020-27840 CVE-2021-20277 CVE-2021-20254
  - SUG:NA
  - DESC:fix CVE-2020-27840 CVE-2021-20277 CVE-2021-20254


author: jinlun <jinlun@huawei.com> - 15.4-5
changelog:
  - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
    CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
    CVE-2021-23841 CVE-2022-0778 CVE-2021-3712


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.0.0-6
changelog:
  - docs: fix some statement
  - machine_manager: add autodeflate for balloon
  - migration: add dev_id into VirtioPciState when save and restore device state
  - machine: fix more than one pcie-root-ports with same id
  - migration: move function "transport_reset" to save state stage for vhost vsock device
  - vfio: adding ram device region to vfio bar region
  - machine_manager: move argument "serial" from -drive to -device virtio-blk-pci/device
  - machine_manager: add multifunction for devices
  - machine: add init_multifunction function to init multifunction
  - machine: add realization for multifunction


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-1
changelog:
  - Add support for PCIe native hotplugging.
  - Reduce memory consumption of reading edk2 firmware files on aarch64.
  - Add support for booting from disk image directly.
  - Add support for VM reboot and VM shutdown.
  - Add support for guest memory preallocation.
  - Add more test cases.
  - Add and fix documentation.
  - Replace lazy_static crate with once_cell.
  - Performance enhancement for virtio-blk and virtio-net devices.
  - Add ftrace support.


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-2
changelog:
  - Fix VFIO hotplugging failure caused by missing seccomp rules.
  - Fix booting failure from disk image on x86_64.
  - Update some documents.


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-3
changelog:
  - Fix memory snapshot failure with hotplugged devices.
  - Fix address translation for virtio devices.
  - Add some test cases for microvm.
  - Update some documents.


author: wangyuhang<wangyuhang27@huawei.com> -249-29
changelog:
  - fix build fail on meson-0.6
    1. delete invalid meson build option
    2. meson.build: change operator combining bools from + to and


author: yangmingtai <yangmingtai@huawei.com> -249-42
changelog:
  - 1.change /etc/systemd/journald.conf ForwardToWall to no
    2.change DefaultLimitMEMLOCK to 64M
    3.replace openEuler to vendor
    4.delete useless file udev-61-openeuler-persistent-storage.rules


author: yangzhuangzhuang <yangzhuangzhaung1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: xingwei <xingwei14@h-partners.com> - 14:4.99.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Set SA_RESTART on non-lethal signals (REQ_INFO, FLUSH_PCAP) to avoid corrupting binary pcap output


author: wangyue <wangyue92@huawei.com> - 1:9.0.10-18
changelog:
  - Type:cve
  - ID: CVE-2021-25122 CVE-2021-25329
  - SUG:restart
  - DESC: fix CVE-2021-25122 CVE-2021-25329


author: liuchao<liuchao173@huawei.com> - 2022a-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remake rearguard version of main.zi to fix check_zishrink_posix fail


author: gaihuiying <eaglegai@163.com> - 1.13.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove buildin key
         add macros to control if key files permissons is 600 or 644
         remove useless BuildRequires:unbound-libs


author: yanglu <yanglu72@h-partners.com> - 1.13.2-5
changelog:
  - Type:cves
  - CVE:CVE-2022-30698 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30698 and CVE-2022-30699


author: gaihuiying <eaglegai@163.com> - 1.13.2-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-34
changelog:
  - Type:CVE
  - ID:CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619
  - SUG:NA
  - DESC:fix CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-50
changelog:
  - Type:CVE
  - ID:CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345
  - SUG:NA
  - DESC:fix CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-51
changelog:
  - Type:CVE
  - ID:CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287
  - SUG:NA
  - DESC:fix CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:8.2-55
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the error of backport-cannot-list-options-one-per-line.patch


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-4
changelog:
  - Type:CVE
  - ID:CVE-2022-3491 CVE-2022-3520 CVE-2022-3591
  - SUG:NA
  - DESC:fix CVE-2022-3491 CVE-2022-3520 CVE-2022-3591


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-7
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: ouyangminxiang<ouyangminxiang@kylinsec.com.cn> - 1.20.11-7
changelog:
  - Fix the crash in shadowUpdatePacked because of memcpy acts randomly with overlapping areas.
  - Fix the problem of black screen after entering the login interface


author: wanglin <wangl29@chinatelecom.cn> - 1.20.11-14
changelog:
  - Fix openEuler hard code problem
  - use -git instead of .git as the filename, to avoid .git ignore
  - Fix changelog date


author: yangcheng<yangcheng87@huawei.com> - 1.20.11-2
changelog:
  - Type:CVE
  - Id:CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011
  - SUG:NA
  - DESC:fix CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011


