# changelog

author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.65.0.90
changelog:
  - atm: idt77252: fix use-after-free bugs caused by tst_timer
  - fs: fix UAF/GPF bug in nilfs_mdt_destroy
  - wifi: Fix potential buffer overflow in 'brcmf_fweh_event_worker'
  - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()
  - mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page
  - usb: mon: make mmapped memory read only
  - scsi: sd: Revert "scsi: sd: Remove a local variable"
  - devlink: Fix use-after-free after a failed reload
  - nouveau: fix migrate_to_ram() for faulting page
  - mm/memory.c: fix race when faulting a device private page
  - vsock: Fix memory leak in vsock_connect()
  - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode
  - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode
  - ext4: add helper to check quota inums
  - ext4: fix bug_on in __es_tree_search caused by bad quota inode
  - netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
  - mtd: rawnand: cafe: fix drivers probe/remove methods
  - nilfs2: fix leak of nilfs_root in case of writer thread creation failure
  - net: mvpp2: fix mvpp2 debugfs leak
  - x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry
  - kprobes: don't call disarm_kprobe() for disabled kprobes
  - block: fix inaccurate io_ticks by set 'precise_iostat'
  - arm64: fix rodata=full
  - block: fix kabi broken in request_queue
  - blk-mq: fix kabi broken in blk_mq_tags
  - blk-mq: fix kabi broken in blk_mq_tag_set
  - blk-mq: Fix blk_mq_tagset_busy_iter() for shared tags
  - blk-mq-sched: Don't reference queue tagset in blk_mq_sched_tags_teardown()
  - blk-mq: Optimise blk_mq_queue_tag_busy_iter() for shared tags
  - blk-mq: Stop using pointers for blk_mq_tags bitmap tags
  - blk-mq: Use shared tags for shared sbitmap support
  - blk-mq: Always use blk_mq_is_sbitmap_shared
  - blk-mq: Refactor and rename blk_mq_free_map_and_{requests->rqs}()
  - blk-mq: Add blk_mq_alloc_map_and_rqs()
  - blk-mq: Add blk_mq_tag_update_sched_shared_sbitmap()
  - blk-mq: Don't clear driver tags own mapping
  - blk-mq: Pass driver tags to blk_mq_clear_rq_mapping()
  - blk-mq-sched: Rename blk_mq_sched_free_{requests -> rqs}()
  - blk-mq-sched: Rename blk_mq_sched_alloc_{tags -> map_and_rqs}()
  - blk-mq: Invert check in blk_mq_update_nr_requests()
  - blk-mq: Relocate shared sbitmap resize in blk_mq_update_nr_requests()
  - blk-mq: Change rqs check in blk_mq_free_rqs()
  - Revert "blk-mq: fix kabi broken by "blk-mq: Use request queue-wide tags for tagset-wide sbitmap""
  - block: fix null-deref in percpu_ref_put
  - x86: Use -mindirect-branch-cs-prefix for RETPOLINE builds
  - x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit
  - objtool: Fix objtool regression on x32 systems
  - objtool: Fix symbol creation
  - objtool: Fix type of reloc::addend
  - objtool: Fix code relocs vs weak symbols
  - x86/alternative: Add debug prints to apply_retpolines()
  - x86/alternative: Try inline spectre_v2=retpoline,amd
  - x86/alternative: Handle Jcc __x86_indirect_thunk_
  eg
  - x86/insn-eval: Handle return values from the decoder
  - x86/pat: Fix x86_has_pat_wp()
  - serial: 8250: Fix PM usage_count for console handover
  - serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle
  - serial: stm32: Clear prev values before setting RTS delays
  - serial: 8250: fix return error code in serial8250_request_std_resource()
  - vt: fix memory overlapping when deleting chars in the buffer
  - tty: serial: samsung_tty: set dma burst_size to 1
  - usb: dwc3: gadget: Fix event pending check
  - usb: typec: add missing uevent when partner support PD
  - USB: serial: ftdi_sio: add Belimo device ids
  - signal handling: don't use BUG_ON() for debugging
  - nvme-pci: phison e16 has bogus namespace ids
  - Revert "can: xilinx_can: Limit CANFD brp to 2"
  - ARM: dts: stm32: use the correct clock source for CEC on stm32mp151
  - soc: ixp4xx/npe: Fix unused match warning
  - irqchip: or1k-pic: Undefine mask_ack for level triggered hardware
  - ASoC: madera: Fix event generation for rate controls
  - ASoC: madera: Fix event generation for OUT1 demux
  - ASoC: cs47l15: Fix event generation for low power mux control
  - ASoC: dapm: Initialise kcontrol data for mux/demux controls
  - ASoC: wm5110: Fix DRE control
  - ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow
  - pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux()
  - ASoC: ops: Fix off by one in range control validation
  - net: sfp: fix memory leak in sfp_probe()
  - nvme-tcp: always fail a request when sending it failed
  - NFC: nxp-nci: don't print header length mismatch on i2c error
  - net: tipc: fix possible refcount leak in tipc_sk_create()
  - platform/x86: hp-wmi: Ignore Sanitization Mode event
  - cpufreq: pmac32-cpufreq: Fix refcount leak bug
  - scsi: hisi_sas: Limit max hw sectors for v3 HW
  - netfilter: br_netfilter: do not skip all hooks with 0 priority
  - virtio_mmio: Restore guest page size on resume
  - virtio_mmio: Add missing PM calls to freeze/restore
  - mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE
  - net/tls: Check for errors in tls_device_init
  - KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
  - net: atlantic: remove aq_nic_deinit() when resume
  - net: atlantic: remove deep parameter on suspend/resume functions
  - sfc: fix kernel panic when creating VF
  - seg6: bpf: fix skb checksum in bpf_push_seg6_encap()
  - seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors
  - seg6: fix skb checksum evaluation in SRH encapsulation/insertion
  - sfc: fix use after free when disabling sriov
  - ima: Fix potential memory leak in ima_init_crypto()
  - ima: force signature verification when CONFIG_KEXEC_SIG is configured
  - net: ftgmac100: Hold reference returned by of_get_child_by_name()
  - nexthop: Fix data-races around nexthop_compat_mode.
  - ipv4: Fix data-races around sysctl_ip_dynaddr.
  - raw: Fix a data-race around sysctl_raw_l3mdev_accept.
  - icmp: Fix a data-race around sysctl_icmp_ratemask.
  - icmp: Fix a data-race around sysctl_icmp_ratelimit.
  - sysctl: Fix data-races in proc_dointvec_ms_jiffies().
  - drm/i915/gt: Serialize TLB invalidates with GT resets
  - drm/i915/selftests: fix a couple IS_ERR() vs NULL tests
  - ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero
  - ARM: dts: at91: sama5d2: Fix typo in i2s1 node
  - ipv4: Fix a data-race around sysctl_fib_sync_mem.
  - icmp: Fix data-races around sysctl.
  - cipso: Fix data-races around sysctl.
  - net: Fix data-races around sysctl_mem.
  - inetpeer: Fix data-races around sysctl.
  - tcp: Fix a data-race around sysctl_tcp_max_orphans.
  - sysctl: Fix data races in proc_dointvec_jiffies().
  - sysctl: Fix data races in proc_doulongvec_minmax().
  - sysctl: Fix data races in proc_douintvec_minmax().
  - sysctl: Fix data races in proc_dointvec_minmax().
  - sysctl: Fix data races in proc_douintvec().
  - sysctl: Fix data races in proc_dointvec().
  - net: stmmac: dwc-qos: Disable split header for Tegra194
  - ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array
  - ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks()
  - ASoC: tas2764: Fix amp gain register offset & default
  - ASoC: tas2764: Correct playback volume range
  - ASoC: tas2764: Fix and extend FSYNC polarity handling
  - ASoC: tas2764: Add post reset delays
  - ASoC: sgtl5000: Fix noise on shutdown/remove
  - ima: Fix a potential integer overflow in ima_appraise_measurement
  - drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector()
  - net/mlx5e: Fix capability check for updating vnic env counters
  - net/mlx5e: kTLS, Fix build time constant test in RX
  - net/mlx5e: kTLS, Fix build time constant test in TX
  - ARM: 9210/1: Mark the FDT_FIXED sections as shareable
  - ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle
  - spi: amd: Limit max transfer and message size
  - ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count
  - ext4: fix race condition between ext4_write and ext4_convert_inline_data
  - Revert "evm: Fix memleak in init_desc"
  - sh: convert nommu io{re,un}map() to static inline functions
  - nilfs2: fix incorrect masking of permission flags for symlinks
  - fs/remap: constrain dedupe of EOF blocks
  - drm/panfrost: Fix shrinker list corruption by madvise IOCTL
  - drm/panfrost: Put mapping instead of shmem obj on panfrost_mmu_map_fault_addr() error
  - btrfs: return -EAGAIN for NOWAIT dio reads/writes on compressed and inline extents
  - wifi: mac80211: fix queue selection for mesh/OCB interfaces
  - ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction
  - ARM: 9213/1: Print message about disabled Spectre workarounds only once
  - ip: fix dflt addr selection for connected nexthop
  - net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer
  - tracing/histograms: Fix memory leak problem
  - mm: split huge PUD on wp_huge_pud fallback
  - fix race between exit_itimers() and /proc/pid/timers
  - xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue
  - ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop
  - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221
  - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671
  - ALSA: hda/realtek: Fix headset mic for Acer SF313-51
  - ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model
  - ALSA: hda - Add fixup for Dell Latitidue E5430
  - Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting"
  - dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate
  - dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate
  - dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly
  - dmaengine: pl330: Fix lockdep warning about non-static key
  - ida: don't use BUG_ON() for debugging
  - dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo
  - misc: rtsx_usb: set return value in rsp_buf alloc err path
  - misc: rtsx_usb: use separate command and response buffers
  - misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer
  - dmaengine: imx-sdma: Allow imx8m for imx7 FW revs
  - i2c: cadence: Unregister the clk notifier in error path
  - r8169: fix accessing unset transport header
  - selftests: forwarding: fix error message in learning_test
  - selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT
  - selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT
  - ibmvnic: Properly dispose of all skbs during a failover.
  - i40e: Fix dropped jumbo frames statistics
  - xsk: Clear page contiguity bit when unmapping pool
  - ARM: dts: at91: sama5d2_icp: fix eeprom compatibles
  - ARM: dts: at91: sam9x60ek: fix eeprom compatible and size
  - ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt
  - ARM: at91: pm: use proper compatible for sama5d2's rtc
  - arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo
  - pinctrl: sunxi: sunxi_pconf_set: use correct offset
  - arm64: dts: imx8mp-evk: correct I2C3 pad settings
  - arm64: dts: imx8mp-evk: correct gpio-led pad settings
  - arm64: dts: imx8mp-evk: correct the uart2 pinctl value
  - arm64: dts: imx8mp-evk: correct mmc pad settings
  - arm64: dts: qcom: msm8994: Fix CPU6/7 reg values
  - pinctrl: sunxi: a83t: Fix NAND function name for some pins
  - ARM: meson: Fix refcount leak in meson_smp_prepare_cpus
  - xfs: remove incorrect ASSERT in xfs_rename
  - can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits
  - can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression
  - can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info
  - powerpc/powernv: delay rng platform device creation until later in boot
  - video: of_display_timing.h: include errno.h
  - memregion: Fix memregion_free() fallback definition
  - PM: runtime: Redefine pm_runtime_release_supplier()
  - fbdev: fbmem: Fix logo center image dx issue
  - iommu/vt-d: Fix PCI bus rescan device hot add
  - netfilter: nft_set_pipapo: release elements in clone from abort path
  - net: rose: fix UAF bug caused by rose_t0timer_expiry
  - usbnet: fix memory leak in error case
  - bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals
  - bpf: Fix incorrect verifier simulation around jmp32's jeq/jne
  - can: gs_usb: gs_usb_open/close(): fix memory leak
  - can: grcan: grcan_probe(): remove extra of_node_get()
  - can: bcm: use call_rcu() instead of costly synchronize_rcu()
  - ALSA: hda/realtek: Add quirk for Clevo L140PU
  - clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup()
  - net: usb: qmi_wwan: add Telit 0x1070 composition
  - net: usb: qmi_wwan: add Telit 0x1060 composition
  - selftests/rseq: Change type of rseq_offset to ptrdiff_t
  - selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area
  - selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area
  - selftests/rseq: Fix: work-around asm goto compiler bugs
  - selftests/rseq: Remove arm/mips asm goto compiler work-around
  - selftests/rseq: Fix warnings about #if checks of undefined tokens
  - selftests/rseq: Fix ppc32 offsets by using long rather than off_t
  - selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store
  - selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian
  - selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35
  - selftests/rseq: Introduce thread pointer getters
  - selftests/rseq: Introduce rseq_get_abi() helper
  - selftests/rseq: Remove volatile from __rseq_abi
  - selftests/rseq: Remove useless assignment to cpu variable
  - selftests/rseq: introduce own copy of rseq uapi header
  - selftests/rseq: remove ARRAY_SIZE define from individual tests
  - hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails
  - ipv6/sit: fix ipip6_tunnel_get_prl return value
  - sit: use min
  - drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c
  - xen/gntdev: Avoid blocking in unmap_grant_pages()
  - tcp: add a missing nf_reset_ct() in 3WHS handling
  - xfs: fix xfs_trans slab cache name
  - xfs: ensure xfs_errortag_random_default matches XFS_ERRTAG_MAX
  - net: tun: avoid disabling NAPI twice
  - tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()
  - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio
  - epic100: fix use after free on rmmod
  - tipc: move bc link creation back to tipc_node_create
  - NFC: nxp-nci: Don't issue a zero length i2c_master_read()
  - nfc: nfcmrvl: Fix irq_of_parse_and_map() return value
  - net: bonding: fix use-after-free after 802.3ad slave unbind
  - net: bonding: fix possible NULL deref in rlb code
  - net/sched: act_api: Notify user space if any actions were flushed before error
  - netfilter: nft_dynset: restore set element counter when failing to update
  - s390: remove unneeded 'select BUILD_BIN2C'
  - PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events
  - caif_virtio: fix race between virtio_device_ready() and ndo_open()
  - NFSD: restore EINVAL error translation in nfsd_commit()
  - net: ipv6: unexport __init-annotated seg6_hmac_net_init()
  - usbnet: fix memory allocation in helpers
  - linux/dim: Fix divide by 0 in RDMA DIM
  - RDMA/cm: Fix memory leak in ib_cm_insert_listen
  - RDMA/qedr: Fix reporting QP timeout attribute
  - net: dp83822: disable rx error interrupt
  - net: dp83822: disable false carrier interrupt
  - net: tun: stop NAPI when detaching queues
  - net: tun: unlink NAPI from device on destruction
  - net: dsa: bcm_sf2: force pause link settings
  - selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test
  - virtio-net: fix race between ndo_open() and virtio_device_ready()
  - net: usb: ax88179_178a: Fix packet receiving
  - SUNRPC: Fix READ_PLUS crasher
  - s390/archrandom: simplify back to earlier design and initialize earlier
  - dm raid: fix KASAN warning in raid5_add_disks
  - dm raid: fix accesses beyond end of raid member array
  - powerpc/bpf: Fix use of user_pt_regs in uapi
  - powerpc/book3e: Fix PUD allocation size in map_kernel_page()
  - powerpc/prom_init: Fix kernel config grep
  - nvdimm: Fix badblocks clear off-by-one error
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G)
  - ipv6: take care of disable_policy when restoring routes
  - drm/amdgpu: To flush tlb for MMHUB of RAVEN series
  - net: mscc: ocelot: allow unregistered IP multicast flooding
  - powerpc/ftrace: Remove ftrace init tramp once kernel init is complete
  - tick/nohz: unexport __init-annotated tick_nohz_full_setup()
  - drm: remove drm_fb_helper_modinit
  - MAINTAINERS: add Amir as xfs maintainer for 5.10.y


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.66.0.91
changelog:
  - bnx2x: fix potential memory leak in bnx2x_tpa_stop()
  - scsi: stex: Properly zero out the passthrough command structure
  - libbpf: Fix null-pointer dereference in find_prog_by_sec_insn()
  - blktrace: remove unnessary stop block trace in 'blk_trace_shutdown'
  - blktrace: fix possible memleak in '__blk_trace_remove'
  - blktrace: introduce 'blk_trace_{start,stop}' helper
  - ext4: record error information when insert extent failed in 'ext4_split_extent_at'
  - pgp: Check result of crypto_alloc_shash properly
  - net: tun: fix bugs for oversize packet when napi frags enabled
  - irqdomain: Fix driver re-inserting failures when IRQs not being freed
  - nbd: refactor size updates
  - nbd: move the task_recv check into nbd_size_update
  - nbd: remove the call to set_blocksize
  - Revert "cifs: fix double free race when mount fails in cifs_get_root()"
  - scsi: libsas: Resume SAS host for phy reset or enable via sysfs
  - !207 [5.10] [bugfix] : merge net-swift  txgbe out_of_tree module v1.2.3 to openEuler/txgbe for some known bugs
  - openeuler: net: txgbe: Fix some known bugs, merge net-swift txgbe-1.2.3 out-of-tree
  - openeuler: configs: delete txgbe/Kconfig, add txgbe_config to netswift/Kconfig


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.67.0.92
changelog:
  - btrfs: raid56: don't trust any cached sector in __raid56_parity_recover()
  - btrfs: only write the sectors in the vertical stripe which has data stripes
  - sched/fair: Fix fault in reweight_entity
  - net_sched: cls_route: disallow handle of 0
  - net/9p: Initialize the iounit field during fid creation
  - tee: add overflow check in register_shm_helper()
  - kvm: x86/pmu: Fix the compare function used by the pmu event filter
  - mtd: rawnand: arasan: Prevent an unsupported configuration
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression
  - Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP"
  - drm/vc4: change vc4_dma_range_matches from a global to static
  - drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function
  - Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv"
  - tcp: fix over estimation in sk_forced_mem_schedule()
  - mac80211: fix a memory leak where sta_info is not freed
  - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()
  - KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq
  - KVM: Add infrastructure and macro to mark VM as bugged
  - dm raid: fix address sanitizer warning in raid_status
  - dm raid: fix address sanitizer warning in raid_resume
  - ext4: fix extent status tree race in writeback error recovery path
  - ext4: update s_overhead_clusters in the superblock during an on-line resize
  - ext4: fix warning in ext4_iomap_begin as race between bmap and write
  - tracing: Use a struct alignof to determine trace event field alignment
  - tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH
  - KEYS: asymmetric: enforce SM2 signature use pkey algo
  - xen-blkfront: Apply 'feature_persistent' parameter when connect
  - xen-blkback: Apply 'feature_persistent' parameter when connect
  - xen-blkback: fix persistent grants negotiation
  - KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl
  - KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU
  - KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter
  - KVM: x86/pmu: Use different raw event masks for AMD and Intel
  - KVM: x86/pmu: Use binary search to check filtered events
  - KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4
  - KVM: x86: Move vendor CR4 validity check to dedicated kvm_x86_ops hook
  - KVM: SVM: Drop VMXE check from svm_set_cr4()
  - KVM: VMX: Drop explicit 'nested' check from vmx_set_cr4()
  - KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4()
  - ACPI: CPPC: Do not prevent CPPC from working in the future
  - btrfs: reset block group chunk force if we have to wait
  - btrfs: reject log replay if there is unsupported RO compat flag
  - um: Allow PM with suspend-to-idle
  - timekeeping: contribute wall clock to rng on time change
  - kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification
  - dm writecache: set a default MAX_WRITEBACK_JOBS
  - serial: 8250: Fold EndRun device support into OxSemi Tornado code
  - serial: 8250_pci: Replace dev_*() by pci_*() macros
  - serial: 8250_pci: Refactor the loop in pci_ite887x_init()
  - serial: 8250: Correct the clock for OxSemi PCIe devices
  - serial: 8250: Dissociate 4MHz Titan ports from Oxford ports
  - PCI/AER: Iterate over error counters instead of error strings
  - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)
  - KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS)
  - KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors
  - intel_th: pci: Add Raptor Lake-S CPU support
  - intel_th: pci: Add Raptor Lake-S PCH support
  - intel_th: pci: Add Meteor Lake-P support
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails
  - usbnet: smsc95xx: Avoid link settings race on interrupt reception
  - usbnet: smsc95xx: Don't clear read-only PHY interrupt
  - mtd: rawnand: arasan: Fix clock rate in NV-DDR
  - mtd: rawnand: arasan: Support NV-DDR interface
  - mtd: rawnand: arasan: Fix a macro parameter
  - mtd: rawnand: Add NV-DDR timings
  - mtd: rawnand: arasan: Check the proposed data interface is supported
  - mtd: rawnand: Add a helper to clarify the interface configuration
  - drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component
  - HID: hid-input: add Surface Go battery quirk
  - HID: Ignore battery for Elan touchscreen on HP Spectre X360 15-df0xxx
  - drm/mediatek: Keep dsi as LP00 before dcs cmds transfer
  - drm/mediatek: Allow commands to be sent during video mode
  - drm/i915/dg1: Update DMC_DEBUG3 register
  - spmi: trace: fix stack-out-of-bound access in SPMI tracing functions
  - __follow_mount_rcu(): verify that mount_lock remains unchanged
  - Input: gscps2 - check return value of ioremap() in gscps2_probe()
  - x86/olpc: fix 'logical not is only applied to the left hand side'
  - ftrace/x86: Add back ftrace_expected assignment
  - x86/bugs: Enable STIBP for IBPB mitigated RETBleed
  - scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests
  - scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os
  - scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection
  - scsi: qla2xxx: Turn off multi-queue for 8G adapters
  - scsi: qla2xxx: Fix discovery issues in FC-AL topology
  - scsi: zfcp: Fix missing auto port scan and thus missing target ports
  - video: fbdev: s3fb: Check the size of screen before memset_io()
  - video: fbdev: arkfb: Check the size of screen before memset_io()
  - video: fbdev: vt8623fb: Check the size of screen before memset_io()
  - x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y
  - sched: Fix the check of nr_running at queue wakelist
  - tools/thermal: Fix possible path truncations
  - video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock()
  - x86/numa: Use cpumask_available instead of hardcoded NULL check
  - sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed
  - sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy()
  - scripts/faddr2line: Fix vmlinux detection on arm64
  - genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO
  - powerpc/pci: Fix PHB numbering when using opal-phbid
  - kprobes: Forbid probing on trampoline and BPF code areas
  - perf symbol: Fail to read phdr workaround
  - powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address
  - powerpc/xive: Fix refcount leak in xive_get_max_prio
  - powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader
  - f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time
  - f2fs: write checkpoint during FG_GC
  - f2fs: don't set GC_FAILURE_PIN for background GC
  - powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias
  - powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32
  - ASoC: mchp-spdifrx: disable end of block interrupt on failures
  - video: fbdev: sis: fix typos in SiS_GetModeID()
  - video: fbdev: amba-clcd: Fix refcount leak bugs
  - watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe()
  - ASoC: audio-graph-card: Add of_node_put() in fail path
  - fuse: Remove the control interface for virtio-fs
  - ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp()
  - ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format
  - s390/zcore: fix race when reading from hardware system area
  - s390/dump: fix old lowcore virtual vs physical address confusion
  - perf tools: Fix dso_id inode generation comparison
  - iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop
  - mfd: max77620: Fix refcount leak in max77620_initialise_fps
  - mfd: t7l66xb: Drop platform disable callback
  - remoteproc: sysmon: Wait for SSCTL service to come up
  - lib/smp_processor_id: fix imbalanced instrumentation_end() call
  - kfifo: fix kfifo_to_user() return type
  - rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge
  - iommu/exynos: Handle failed IOMMU device registration properly
  - tty: n_gsm: fix missing corner cases in gsmld_poll()
  - tty: n_gsm: fix DM command
  - tty: n_gsm: fix wrong T1 retry count handling
  - vfio/ccw: Do not change FSM state in subchannel event
  - vfio/mdev: Make to_mdev_device() into a static inline
  - vfio: Split creation of a vfio_device into init and register ops
  - vfio: Simplify the lifetime logic for vfio_device
  - vfio: Remove extra put/gets around vfio_device->group
  - remoteproc: qcom: wcnss: Fix handling of IRQs
  - ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe()
  - tty: n_gsm: fix race condition in gsmld_write()
  - tty: n_gsm: fix packet re-transmission without open control channel
  - tty: n_gsm: fix non flow control frames during mux flow off
  - tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output()
  - tty: n_gsm: fix user open not possible at responder until initiator open
  - tty: n_gsm: Delete gsmtty open SABM frame when config requester
  - ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables
  - powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable
  - ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header
  - profiling: fix shift too large makes kernel panic
  - selftests/livepatch: better synchronize test_klp_callbacks_busy
  - remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init
  - rpmsg: mtk_rpmsg: Fix circular locking dependency
  - ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV
  - ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV
  - serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty()
  - serial: 8250: Export ICR access helpers for internal use
  - ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe
  - ASoC: codecs: da7210: add check for i2c_add_driver
  - ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe
  - ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe
  - ASoC: samsung: Fix error handling in aries_audio_probe
  - ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe
  - opp: Fix error check in dev_pm_opp_attach_genpd()
  - usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable()
  - nvme: use command_id instead of req->tag in trace_nvme_complete_rq()
  - null_blk: fix ida error handling in null_add_dev()
  - RDMA/rxe: Fix error unwind in rxe_create_qp()
  - RDMA/mlx5: Add missing check for return value in get namespace flow
  - selftests: kvm: set rax before vmcall
  - mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region
  - RDMA/srpt: Fix a use-after-free
  - RDMA/srpt: Introduce a reference count in struct srpt_device
  - RDMA/srpt: Duplicate port name members
  - platform/olpc: Fix uninitialized data in debugfs write
  - usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable()
  - USB: serial: fix tty-port initialized comments
  - PCI: tegra194: Fix link up retry sequence
  - PCI: tegra194: Fix Root Port interrupt handling
  - HID: alps: Declare U1_UNICORN_LEGACY support
  - mmc: cavium-thunderx: Add of_node_put() when breaking out of loop
  - mmc: cavium-octeon: Add of_node_put() when breaking out of loop
  - HID: mcp2221: prevent a buffer overflow in mcp_smbus_write()
  - gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data()
  - RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
  - RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event
  - RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr()
  - RDMA/qedr: Improve error logs for rdma_alloc_tid error return
  - RDMA/rtrs-srv: Fix modinfo output for stringify
  - RDMA/rtrs: Avoid Wtautological-constant-out-of-range-compare
  - RDMA/rtrs: Define MIN_CHUNK_SIZE
  - um: random: Don't initialise hwrng struct with zero
  - interconnect: imx: fix max_node_id
  - eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write()
  - usb: dwc3: qcom: fix missing optional irq warnings
  - usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup
  - usb: dwc3: core: Deprecate GCTL.CORESOFTRESET
  - usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc()
  - usb: gadget: udc: amd5536 depends on HAS_DMA
  - xtensa: iss: fix handling error cases in iss_net_configure()
  - xtensa: iss/network: provide release() callback
  - scsi: smartpqi: Fix DMA direction for RAID requests
  - PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks
  - PCI/portdrv: Don't disable AER reporting in get_port_device_capability()
  - KVM: s390: pv: leak the topmost page table when destroy fails
  - mmc: block: Add single read for 4k sector cards
  - mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R
  - memstick/ms_block: Fix a memory leak
  - memstick/ms_block: Fix some incorrect memory allocation
  - mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch
  - staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback
  - intel_th: msu: Fix vmalloced buffers
  - intel_th: msu-sink: Potential dereference of null pointer
  - intel_th: Fix a resource leak in an error handling path
  - PCI: endpoint: Don't stop controller when unbinding endpoint function
  - dmaengine: sf-pdma: Add multithread support for a DMA channel
  - dmaengine: sf-pdma: apply proper spinlock flags in sf_pdma_prep_dma_memcpy()
  - KVM: arm64: Don't return from void function
  - soundwire: bus_type: fix remove and shutdown support
  - PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists
  - PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors
  - PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu()
  - clk: qcom: camcc-sdm845: Fix topology around titan_top power domain
  - clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks
  - clk: qcom: ipq8074: fix NSS port frequency tables
  - clk: qcom: ipq8074: SW workaround for UBI32 PLL lock
  - clk: qcom: ipq8074: fix NSS core PLL-s
  - usb: host: xhci: use snprintf() in xhci_decode_trb()
  - clk: qcom: clk-krait: unlock spin after mux completion
  - misc: rtsx: Fix an error handling path in rtsx_pci_probe()
  - dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics
  - mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv
  - mwifiex: Ignore BTCOEX events from the 88W8897 firmware
  - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE
  - clk: mediatek: reset: Fix written reset bit offset
  - iio: accel: bma400: Reordering of header files
  - platform/chrome: cros_ec: Always expose last resume result
  - iio: accel: bma400: Fix the scale min and max macro values
  - netfilter: xtables: Bring SPDX identifier back
  - usb: xhci: tegra: Fix error check
  - usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()
  - usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe
  - usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe
  - fpga: altera-pr-ip: fix unsigned comparison with less than zero
  - mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path
  - mtd: partitions: Fix refcount leak in parse_redboot_of
  - mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release
  - HID: cp2112: prevent a buffer overflow in cp2112_xfer()
  - PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep()
  - mtd: rawnand: meson: Fix a potential double free issue
  - mtd: maps: Fix refcount leak in ap_flash_init
  - mtd: maps: Fix refcount leak in of_flash_probe_versatile
  - clk: renesas: r9a06g032: Fix UART clkgrp bitsel
  - wireguard: allowedips: don't corrupt stack when detecting overflow
  - wireguard: ratelimiter: use hrtimer in selftest
  - dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock
  - net: ionic: fix error check for vlan flags in ionic_set_nic_features()
  - net: rose: fix netdev reference changes
  - netdevsim: Avoid allocation warnings triggered from user space
  - iavf: Fix max_rate limiting
  - net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set
  - tcp: Fix data-races around sysctl_tcp_l3mdev_accept.
  - ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH()
  - tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if()
  - inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH()
  - crypto: hisilicon/sec - fix auth key size error
  - crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of
  - crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq
  - net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS
  - net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version
  - media: cedrus: hevc: Add check for invalid timestamp
  - wifi: libertas: Fix possible refcount leak in if_usb_probe()
  - wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue
  - wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`
  - i2c: mux-gpmux: Add of_node_put() when breaking out of loop
  - i2c: cadence: Support PEC for SMBus block read
  - Bluetooth: hci_intel: Add check for platform_driver_register
  - can: pch_can: pch_can_error(): initialize errc before using it
  - can: error: specify the values of data[5..7] of CAN error frames
  - can: usb_8dev: do not report txerr and rxerr during bus-off
  - can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off
  - can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off
  - can: sun4i_can: do not report txerr and rxerr during bus-off
  - can: hi311x: do not report txerr and rxerr during bus-off
  - can: sja1000: do not report txerr and rxerr during bus-off
  - can: rcar_can: do not report txerr and rxerr during bus-off
  - can: pch_can: do not report txerr and rxerr during bus-off
  - selftests/bpf: fix a test for snprintf() overflow
  - wifi: p54: add missing parentheses in p54_flush()
  - wifi: p54: Fix an error handling path in p54spi_probe()
  - wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
  - fs: check FMODE_LSEEK to control internal pipe splicing
  - bpf: Fix subprog names in stack traces.
  - selftests: timers: clocksource-switch: fix passing errors from child
  - selftests: timers: valid-adjtimex: build fix for newer toolchains
  - libbpf: Fix the name of a reused map
  - tcp: make retransmitted SKB fit into the send window
  - drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed.
  - mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init()
  - mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg
  - media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment
  - crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq
  - drm/msm/mdp5: Fix global state lock backoff
  - lib: bitmap: provide devm_bitmap_alloc() and devm_bitmap_zalloc()
  - lib: bitmap: order includes alphabetically
  - drm: bridge: sii8620: fix possible off-by-one
  - drm/mediatek: dpi: Only enable dpi after the bridge is enabled
  - drm/mediatek: dpi: Remove output format of YUV
  - drm/rockchip: Fix an error handling path rockchip_dp_probe()
  - drm/rockchip: vop: Don't crash for invalid duplicate_state()
  - selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0
  - crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE
  - drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes
  - drm/vc4: hdmi: Fix timings for interlaced modes
  - drm/vc4: hdmi: Limit the BCM2711 to the max without scrambling
  - drm/vc4: hdmi: Don't access the connector state in reset if kmalloc fails
  - drm/vc4: hdmi: Avoid full hdmi audio fifo writes
  - drm/vc4: hdmi: Remove firmware logic for MAI threshold setting
  - drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration
  - drm/vc4: dsi: Fix dsi0 interrupt support
  - drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type
  - drm/vc4: dsi: Introduce a variant structure
  - drm/vc4: dsi: Use snprintf for the PHY clocks instead of an array
  - drm/vc4: drv: Remove the DSI pointer in vc4_drv
  - drm/vc4: dsi: Correct pixel order for DSI0
  - drm/vc4: dsi: Correct DSI divider calculations
  - drm/vc4: plane: Fix margin calculations for the right/bottom edges
  - drm/vc4: plane: Remove subpixel positioning check
  - media: tw686x: Fix memory leak in tw686x_video_init
  - media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set
  - media: hdpvr: fix error value returns in hdpvr_read
  - drm/mcde: Fix refcount leak in mcde_dsi_bind
  - drm: bridge: adv7511: Add check for mipi_dsi_driver_register
  - crypto: ccp - During shutdown, check SEV data pointer before using
  - test_bpf: fix incorrect netdev features
  - drm/radeon: fix incorrrect SPDX-License-Identifiers
  - wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd()
  - media: tw686x: Register the irq at the end of probe
  - crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs()
  - i2c: Fix a potential use after free
  - crypto: sun8i-ss - fix error codes in allocate_flows()
  - crypto: sun8i-ss - do not allocate memory when handling hash requests
  - drm: adv7511: override i2c address of cec before accessing it
  - virtio-gpu: fix a missing check to avoid NULL dereference
  - i2c: npcm: Correct slave role behavior
  - i2c: npcm: Remove own slave addresses 2:10
  - drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function
  - drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs
  - drm/mediatek: Modify dsi funcs to atomic operations
  - drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()
  - ath11k: Fix incorrect debug_mask mappings
  - drm/mipi-dbi: align max_chunk to 2 in spi_transfer
  - ath11k: fix netdev open race
  - wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c()
  - drm/st7735r: Fix module autoloading for Okaya RH128128T
  - ath10k: do not enforce interrupt trigger type
  - drm/bridge: tc358767: Make sure Refclk clock are enabled
  - drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function
  - pwm: lpc18xx-sct: Convert to devm_platform_ioremap_resource()
  - pwm: sifive: Shut down hardware only after pwmchip_remove() completed
  - pwm: sifive: Ensure the clk is enabled exactly once per running PWM
  - pwm: sifive: Simplify offset calculation for PWMCMP registers
  - pwm: sifive: Don't check the return code of pwmchip_remove()
  - dm: return early from dm_pr_call() if DM device is suspended
  - thermal/tools/tmon: Include pthread and time headers in tmon.h
  - selftests/seccomp: Fix compile warning when CC=clang
  - nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt()
  - drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX
  - arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment
  - soc: qcom: Make QCOM_RPMPD depend on PM
  - regulator: of: Fix refcount leak bug in of_get_regulation_constraints()
  - blktrace: Trace remapped requests correctly
  - block: remove the request_queue to argument request based tracepoints
  - hwmon: (drivetemp) Add module alias
  - blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created
  - erofs: avoid consecutive detection for Highmem memory
  - arm64: tegra: Fix SDMMC1 CD on P2888
  - arm64: dts: mt7622: fix BPI-R64 WPS button
  - bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe()
  - ARM: dts: qcom: pm8841: add required thermal-sensor-cells
  - soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register
  - soc: qcom: ocmem: Fix refcount leak in of_get_ocmem
  - ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
  - regulator: qcom_smd: Fix pm8916_pldo range
  - cpufreq: zynq: Fix refcount leak in zynq_get_revision
  - ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init
  - ARM: OMAP2+: Fix refcount leak in omapdss_init_of
  - ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg
  - block: fix infinite loop for invalid zone append
  - soc: fsl: guts: machine variable might be unset
  - locking/lockdep: Fix lockdep_init_map_*() confusion
  - arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1
  - hexagon: select ARCH_WANT_LD_ORPHAN_WARN
  - ARM: dts: ast2600-evb: fix board compatible
  - ARM: dts: ast2500-evb: fix board compatible
  - x86/pmem: Fix platform-device leak in error path
  - arm64: dts: renesas: Fix thermal-sensors on single-zone sensors
  - soc: amlogic: Fix refcount leak in meson-secure-pwrc.c
  - soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values
  - Input: atmel_mxt_ts - fix up inverted RESET handler
  - ARM: dts: imx7d-colibri-emmc: add cpu1 supply
  - ACPI: processor/idle: Annotate more functions to live in cpuidle section
  - ARM: bcm: Fix refcount leak in bcm_kona_smc_init
  - arm64: dts: renesas: beacon: Fix regulator node names
  - meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init
  - ARM: findbit: fix overflowing offset
  - spi: spi-rspi: Fix PIO fallback on RZ platforms
  - powerpc/64s: Disable stack variable initialisation for prom_init
  - selinux: Add boundary check in put_entry()
  - PM: hibernate: defer device probing when resuming from hibernation
  - firmware: tegra: Fix error check return value of debugfs_create_file()
  - ARM: shmobile: rcar-gen2: Increase refcount for new reference
  - arm64: dts: allwinner: a64: orangepi-win: Fix LED node name
  - arm64: dts: qcom: ipq8074: fix NAND node name
  - ACPI: LPSS: Fix missing check in register_device_clock()
  - ACPI: PM: save NVS memory for Lenovo G40-45
  - ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk
  - ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks
  - ARM: OMAP2+: display: Fix refcount leak bug
  - spi: synquacer: Add missing clk_disable_unprepare()
  - ARM: dts: BCM5301X: Add DT for Meraki MR26
  - ARM: dts: imx6ul: fix qspi node compatible
  - ARM: dts: imx6ul: fix lcdif node compatible
  - ARM: dts: imx6ul: fix csi node compatible
  - ARM: dts: imx6ul: fix keypad compatible
  - ARM: dts: imx6ul: change operating-points to uint32-matrix
  - ARM: dts: imx6ul: add missing properties for sram
  - wait: Fix __wait_event_hrtimeout for RT/DL tasks
  - irqchip/mips-gic: Check the return value of ioremap() in gic_of_init()
  - genirq: GENERIC_IRQ_IPI depends on SMP
  - irqchip/mips-gic: Only register IPI domain when SMP is enabled
  - genirq: Don't return error on missing optional irq_request_resources()
  - ext2: Add more validity checks for inode counts
  - arm64: Do not forget syscall when starting a new thread.
  - x86: Handle idle=nomwait cmdline properly for x86_idle
  - epoll: autoremove wakers even more aggressively
  - netfilter: nf_tables: fix null deref due to zeroed list head
  - lockdep: Allow tuning tracing capacity constants.
  - usb: dwc3: gadget: fix high speed multiplier setting
  - usb: dwc3: gadget: refactor dwc3_repare_one_trb
  - arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC
  - ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC
  - USB: HCD: Fix URB giveback issue in tasklet function
  - usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion
  - coresight: Clear the connection field properly
  - MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - powerpc/powernv: Avoid crashing if rng is NULL
  - powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E
  - powerpc/fsl-pci: Fix Class Code of PCIe Root Port
  - PCI: Add defines for normal and subtractive PCI bridges
  - ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr()
  - media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator
  - md-raid10: fix KASAN warning
  - md-raid: destroy the bitmap after destroying the thread
  - serial: mvebu-uart: uart2 error bits clearing
  - fuse: limit nsec
  - scsi: qla2xxx: Zero undefined mailbox IN registers
  - scsi: qla2xxx: Fix incorrect display of max frame size
  - scsi: sg: Allow waiting for commands to complete on removed device
  - iio: light: isl29028: Fix the warning in isl29028_remove()
  - mtd: rawnand: arasan: Update NAND bus clock instead of system clock
  - drm/amdgpu: Check BO's requested pinning domains against its preferred_domains
  - drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime
  - drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend()
  - drm/nouveau: fix another off-by-one in nvbios_addr
  - drm/vc4: hdmi: Disable audio if dmas property is present but empty
  - drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error
  - parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode
  - parisc: Check the return value of ioremap() in lba_driver_probe()
  - parisc: Fix device names in /proc/iomem
  - ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh()
  - usbnet: Fix linkwatch use-after-free on disconnect
  - fbcon: Fix accelerated fbdev scrolling while logo is still shown
  - fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters
  - thermal: sysfs: Fix cooling_device_stats_setup() error code path
  - fs: Add missing umask strip in vfs_tmpfile
  - vfs: Check the truncate maximum size in inode_newsize_ok()
  - tty: vt: initialize unicode screen buffer
  - ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED
  - ALSA: hda/realtek: Add quirk for another Asus K42JZ model
  - ALSA: hda/cirrus - support for iMac 12,1 model
  - ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model
  - riscv: set default pm_power_off to NULL
  - KVM: x86: Tag kvm_mmu_x86_module_init() with __init
  - KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP
  - KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
  - KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value
  - KVM: s390: pv: don't present the ecall interrupt twice
  - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
  - KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case
  - KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case
  - HID: wacom: Don't register pad_input for touch switch
  - HID: wacom: Only report rotation for art pen
  - add barriers to buffer_uptodate and set_buffer_uptodate
  - wifi: mac80211_hwsim: use 32-bit skb cookie
  - wifi: mac80211_hwsim: add back erroneously removed cast
  - wifi: mac80211_hwsim: fix race condition in pending packet
  - ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx
  - ALSA: hda/realtek: Add quirk for Clevo NV45PZ
  - ALSA: bcd2000: Fix a UAF bug on the error path of probing
  - scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover"
  - Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING"
  - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments
  - Makefile: link with -z noexecstack --no-warn-rwx-segments
  - !253 [5.10] [bugfix] : fix arm32 compiler error ERROR and warning
  - openeuler: net: txgbe: fix arm32 compile error because 64bit div and warnning
  - macintosh/adb: fix oob read in do_adb_query() function
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3586
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3587
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0CB8:0xC558
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04C5:0x1675
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04CA:0x4007
  - Bluetooth: btusb: Add support of IMC Networks PID 0x3568
  - Bluetooth: hci_bcm: Add DT compatible for CYW55572
  - Bluetooth: hci_bcm: Add BCM4349B1 variant
  - selftests: KVM: Handle compiler optimizations in ucall
  - tools/kvm_stat: fix display of error when multiple processes are found
  - ACPI: APEI: Better fix to avoid spamming the console with old error logs
  - ACPI: video: Shortening quirk list by identifying Clevo by board_name only
  - ACPI: video: Force backlight native for some TongFang devices
  - selftests/bpf: Check dst_port only on the client socket
  - selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads
  - ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
  - ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep()
  - x86/speculation: Make all RETbleed mitigations 64-bit only
  - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available
  - xfs: prevent UAF in xfs_log_item_in_current_chkpt
  - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed
  - EDAC/ghes: Set the DIMM label unconditionally
  - ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow
  - mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle.
  - page_alloc: fix invalid watermark check on a negative value
  - ARM: crypto: comment out gcc warning that breaks clang builds
  - sctp: leave the err path free in sctp_stream_init to sctp_stream_free
  - sfc: disable softirqs for ptp TX
  - perf symbol: Correct address for bss symbols
  - virtio-net: fix the race between refill work and close
  - sctp: fix sleep in atomic context bug in timer handlers
  - i40e: Fix interface init with MSI interrupts (no MSI-X)
  - tcp: Fix data-races around sysctl_tcp_reflect_tos.
  - tcp: Fix a data-race around sysctl_tcp_comp_sack_nr.
  - tcp: Fix a data-race around sysctl_tcp_comp_sack_slack_ns.
  - tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns.
  - net: macsec: fix potential resource leak in macsec_add_rxsa() and macsec_add_txsa()
  - macsec: always read MACSEC_SA_ATTR_PN as a u64
  - macsec: limit replay window size with XPN
  - macsec: fix error message in macsec_add_rxsa and _txsa
  - macsec: fix NULL deref in macsec_add_rxsa
  - Documentation: fix sctp_wmem in ip-sysctl.rst
  - tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit.
  - tcp: Fix a data-race around sysctl_tcp_autocorking.
  - tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen.
  - tcp: Fix a data-race around sysctl_tcp_min_tso_segs.
  - net: sungem_phy: Add of_node_put() for reference returned by of_get_parent()
  - igmp: Fix data-races around sysctl_igmp_qrv.
  - net/tls: Remove the context from the list in tls_device_down
  - net: ping6: Fix memleak in ipv6_renew_options().
  - tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit.
  - tcp: Fix a data-race around sysctl_tcp_limit_output_bytes.
  - tcp: Fix data-races around sysctl_tcp_moderate_rcvbuf.
  - Revert "tcp: change pingpong threshold to 3"
  - scsi: ufs: host: Hold reference returned by of_parse_phandle()
  - ice: do not setup vlan for loopback VSI
  - ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS)
  - tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save.
  - tcp: Fix a data-race around sysctl_tcp_nometrics_save.
  - tcp: Fix a data-race around sysctl_tcp_frto.
  - tcp: Fix a data-race around sysctl_tcp_adv_win_scale.
  - tcp: Fix a data-race around sysctl_tcp_app_win.
  - tcp: Fix data-races around sysctl_tcp_dsack.
  - watch_queue: Fix missing locking in add_watch_to_object()
  - watch_queue: Fix missing rcu annotation
  - nouveau/svm: Fix to migrate all requested pages
  - s390/archrandom: prevent CPACF trng invocations in interrupt context
  - ntfs: fix use-after-free in ntfs_ucsncmp()
  - Revert "ocfs2: mount shared volume without ha stack"
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put
  - net: usb: ax88179_178a needs FLAG_SEND_ZLP
  - x86/alternative: Report missing return thunk details
  - x86/amd: Use IBPB for firmware calls
  - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks
  - Bluetooth: SCO: Fix sco_send_frame returning skb->len
  - Bluetooth: Fix passing NULL to PTR_ERR
  - Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg
  - Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg
  - Bluetooth: Add bt_skb_sendmmsg helper
  - Bluetooth: Add bt_skb_sendmsg helper
  - ALSA: memalloc: Align buffer allocations in page size
  - bitfield.h: Fix "type of reg too small for mask" test
  - drm/imx/dcss: fix unused but set variable warnings
  - dlm: fix pending remove if msg allocation fails
  - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts
  - sched/deadline: Fix BUG_ON condition for deboosted tasks
  - bpf: Make sure mac_header was set before using it
  - mm/mempolicy: fix uninit-value in mpol_rebind_policy()
  - KVM: Don't null dereference ops->destroy
  - spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers
  - tcp: Fix data-races around sysctl_tcp_max_reordering.
  - tcp: Fix a data-race around sysctl_tcp_rfc1337.
  - tcp: Fix a data-race around sysctl_tcp_stdurg.
  - tcp: Fix a data-race around sysctl_tcp_retrans_collapse.
  - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.
  - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.
  - tcp: Fix data-races around sysctl_tcp_recovery.
  - tcp: Fix a data-race around sysctl_tcp_early_retrans.
  - tcp: Fix data-races around sysctl knobs related to SYN option.
  - udp: Fix a data-race around sysctl_udp_l3mdev_accept.
  - ip: Fix data-races around sysctl_ip_prot_sock.
  - ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh.
  - drm/imx/dcss: Add missing of_node_put() in fail path
  - be2net: Fix buffer overflow in be_get_module_eeprom
  - gpio: pca953x: use the correct register address when regcache sync during init
  - gpio: pca953x: use the correct range when do regmap sync
  - gpio: pca953x: only use single read/write for No AI mode
  - ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero
  - i40e: Fix erroneous adapter reinitialization during recovery process
  - iavf: Fix handling of dummy receive descriptors
  - tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout.
  - tcp: Fix data-races around sysctl_tcp_fastopen.
  - tcp: Fix data-races around sysctl_max_syn_backlog.
  - tcp: Fix a data-race around sysctl_tcp_tw_reuse.
  - tcp: Fix a data-race around sysctl_tcp_notsent_lowat.
  - tcp: Fix data-races around some timeout sysctl knobs.
  - tcp: Fix data-races around sysctl_tcp_reordering.
  - tcp: Fix data-races around sysctl_tcp_syncookies.
  - tcp: Fix data-races around keepalive sysctl knobs.
  - igmp: Fix data-races around sysctl_igmp_max_msf.
  - igmp: Fix a data-race around sysctl_igmp_max_memberships.
  - igmp: Fix data-races around sysctl_igmp_llm_reports.
  - net/tls: Fix race in TLS device down flow
  - net: stmmac: fix dma queue left shift overflow issue
  - i2c: cadence: Change large transfer count reset logic to be unconditional
  - net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow
  - tcp: Fix a data-race around sysctl_tcp_probe_interval.
  - tcp: Fix a data-race around sysctl_tcp_probe_threshold.
  - tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor.
  - tcp: Fix data-races around sysctl_tcp_min_snd_mss.
  - tcp: Fix data-races around sysctl_tcp_base_mss.
  - tcp: Fix data-races around sysctl_tcp_mtu_probing.
  - tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.
  - ip: Fix a data-race around sysctl_fwmark_reflect.
  - ip: Fix a data-race around sysctl_ip_autobind_reuse.
  - ip: Fix data-races around sysctl_ip_nonlocal_bind.
  - ip: Fix data-races around sysctl_ip_fwd_update_priority.
  - ip: Fix data-races around sysctl_ip_fwd_use_pmtu.
  - ip: Fix data-races around sysctl_ip_no_pmtu_disc.
  - igc: Reinstate IGC_REMOVED logic and implement it properly
  - drm/amdgpu/display: add quirk handling for stutter mode
  - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close()
  - pinctrl: ralink: Check for null return of devm_kcalloc
  - power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe
  - serial: mvebu-uart: correctly report configured baudrate value
  - PCI: hv: Fix interrupt mapping for multi-MSI
  - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg()
  - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI
  - PCI: hv: Fix multi-MSI to allow more than one MSI vector
  - Revert "m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch"
  - net: inline rollback_registered_many()
  - net: move rollback_registered_many()
  - net: inline rollback_registered()
  - net: move net_set_todo inside rollback_registered()
  - docs: net: explain struct net_device lifetime
  - xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE
  - mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication
  - riscv: add as-options for modules with assembly compontents
  - pinctrl: stm32: fix optional IRQ support to gpios
  - !196 openEuler-22.03-LTS: kernel: add OPENEULER_VERSION_CODE to version.h
  - !176 bugfix: Limit "Dummy wait" workaround to old Intel systems in acpi idle driver
  - ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems
  - kernel: add OPENEULER_VERSION_CODE to version.h


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.68.0.93
changelog:
  - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM
  - Bluetooth: L2CAP: Fix attempting to access uninitialized memory
  - !225 Synchronize the coresight code of the Linux mainline to support HiSilicon tracing
  - !257 [5.10] [Feature] ：add net-swift ngbe NIC support
  - !263 svm: Delete unused ioctl command
  - svm: Delete unused ioctl command
  - openeuler: net: ngbe: add ngbe module source code
  - openeuler: net: ngbe add build support
  - openeuler: config: add NGBE MODODULE CONFIG
  - openeuler_defconfig: Enable TRBE and TMC
  - drivers/ETM: fix error in invalid cs_id
  - coresight: etm4x: Expose trcdevarch via sysfs
  - perf cs-etm: Update ARM's CoreSight hardware tracing OpenCSD library to v1.0.0
  - coresight: etm4x: Add support for PE OS lock
  - coresight: etm4x: Convert all register accesses
  - coresight: etm4x: avoid build failure with unrolled loops
  - coresight: trbe: Make sure we have enough space
  - coresight: trbe: Allow driver to choose a different alignment
  - coresight: trbe: Decouple buffer base from the hardware base
  - coresight: trbe: Add a helper to pad a given buffer area
  - coresight: trbe: Add a helper to calculate the trace generated
  - coresight: trbe: Defer the probe on offline CPUs
  - coresight: trbe: Fix incorrect access of the sink specific data
  - coresight: trbe: Prohibit trace before disabling TRBE
  - coresight: trbe: End the AUX handle on truncation
  - coresight: trbe: Do not truncate buffer on IRQ
  - coresight: trbe: Fix handling of spurious interrupts
  - coresight: trbe: irq handler: Do not disable TRBE if no action is needed
  - coresight: trbe: Unify the enabling sequence
  - coresight: trbe: Drop duplicate TRUNCATE flags
  - coresight: trbe: Ensure the format flag is always set
  - coresight: etm-pmu: Ensure the AUX handle is valid
  - coresight: etm4x: Use Trace Filtering controls dynamically
  - coresight: etm4x: Save restore TRFCR_EL1
  - coresight: etm4x: Move ETM to prohibited region for disable
  - coresight: Don't immediately close events that are run on invalid CPU/sink combos
  - coresight: tmc-etr: Speed up for bounce buffer in flat mode
  - KVM: arm64: Handle access to TRFCR_EL1
  - coresight: sink: Add TRBE driver
  - perf: aux: Add flags for the buffer format
  - perf: aux: Add CoreSight PMU buffer formats
  - arm64: Add support for trace synchronization barrier
  - coresight: core: Add support for dedicated percpu sinks
  - coresight: etm-perf: Handle stale output handles
  - coresight: ete: Add support for ETE tracing
  - coresight: ete: Add support for ETE sysreg access
  - coresight: Add support for v8.4 SelfHosted tracing
  - arm64: Add TRBE definitions
  - arm64: Add TRFCR_ELx definitions
  - coresight: etm4x: Add support for sysreg only devices
  - coresight: etm4x: Refactor probing routine
  - coresight: etm4x: Use TRCDEVARCH for component discovery
  - coresight: etm4x: Add necessary synchronization for sysreg access
  - coresight: etm4x: Detect system instructions support
  - coresight: etm4x: Detect access early on the target CPU
  - coresight: etm4x: Handle ETM architecture version
  - coresight: etm4x: Check for Software Lock
  - coresight: etm4x: Define DEVARCH register fields
  - coresight: etm4x: Hide sysfs attributes for unavailable registers
  - coresight: etm4x: Add sysreg access helpers
  - coresight: etm4x: Make offset available for sysfs attributes
  - coresight: etm4x: Always read the registers on the host CPU
  - coresight: Convert claim/disclaim operations to use access wrappers
  - coresight: Convert coresight_timeout to use access abstraction
  - coresight: Introduce device access abstraction


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.70.0.94
changelog:
  - staging: rtl8712: fix use after free bugs
  - drivers/perf: fixed the issue that the kabi value changed
  - drm/i915: fix TLB invalidation for Gen12 video and compute engines
  - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
  - l2tp: Serialize access to sk_user_data with sk_callback_lock
  - Bluetooth: L2CAP: Fix u8 overflow
  - dm: Fix UAF in run_timer_softirq()
  - dm-thin: Resume failed in FAIL mode
  - mm: hugetlb: fix UAF in hugetlb_handle_userfault
  - ARM: 9160/1: NOMMU: Reload __secondary_data after PROCINFO_INITFUNC
  - ARM: 9059/1: cache-v7: get rid of mini-stack
  - ARM: 9058/1: cache-v7: refactor v7_invalidate_l1 to avoid clobbering r5/r6
  - block: check flags of claimed slave bdev to fix uaf for bd_holder_dir
  - mpi: Fix length check in mpi_key_length()
  - dm btree spine: show warning if node_check failed in node_prep_for_write()
  - dm btree spine: remove paranoid node_check call in node_prep_for_write()
  - signal: fix deadlock caused by calling printk() under sighand->siglock
  - mm: fix missing handler for __GFP_NOWARN
  - Fix kabi change caused by reverting patches
  - Revert "iommu: Introduce attach/detach_pasid_table API"
  - Revert "iommu: Introduce bind/unbind_guest_msi"
  - Revert "iommu/smmuv3: Allow s1 and s2 configs to coexist"
  - Revert "iommu/smmuv3: Get prepared for nested stage support"
  - Revert "iommu/smmuv3: Implement attach/detach_pasid_table"
  - Revert "iommu/smmuv3: Allow stage 1 invalidation with unmanaged ASIDs"
  - Revert "iommu/smmuv3: Implement cache_invalidate"
  - Revert "dma-iommu: Implement NESTED_MSI cookie"
  - Revert "iommu/smmuv3: Nested mode single MSI doorbell per domain enforcement"
  - Revert "iommu/smmuv3: Enforce incompatibility between nested mode and HW MSI regions"
  - Revert "iommu/smmuv3: Implement bind/unbind_guest_msi"
  - Revert "iommu/smmuv3: report additional recoverable faults"
  - Revert "vfio: VFIO_IOMMU_SET_PASID_TABLE"
  - Revert "vfio: VFIO_IOMMU_CACHE_INVALIDATE"
  - Revert "vfio: VFIO_IOMMU_SET_MSI_BINDING"
  - Revert "vfio/pci: Add VFIO_REGION_TYPE_NESTED region type"
  - Revert "vfio/pci: Register an iommu fault handler"
  - Revert "vfio/pci: Allow to mmap the fault queue"
  - Revert "vfio: Use capability chains to handle device specific irq"
  - Revert "vfio/pci: Add framework for custom interrupt indices"
  - Revert "vfio: Add new IRQ for DMA fault reporting"
  - Revert "vfio/pci: Register and allow DMA FAULT IRQ signaling"
  - Revert "vfio: Document nested stage control"
  - Revert "vfio/pci: Register a DMA fault response region"
  - Revert "vfio/pci: Inject page response upon response region fill"
  - Revert "iommu/arm-smmu-v3: Using HTTU with SMMU STE and stage 2 TTD"
  - Revert "iommu/io-pgtable-arm: Make data access permissions of stage1/2 compatible"
  - Revert "iommu/io-pgtable-arm: Remove the limitation on the page table format of sync/clear_dirty_log()"
  - Revert "iommu/arm-smmu-v3: Change the TLBI CMD in arm_smmu_cache_invalidate()"
  - Revert "iommu/arm-smmu-v3: Align invalid range with leaf page size upwards when support RIL"
  - Revert "iommu/arm-smmu-v3: Standardize granule size when support RIL"
  - Revert "iommu/arm-smmu-v3: Remove the redundant shift operation of 'size'"
  - Revert "iommu: fix build error when CONFIG_IOMMU_API is off"
  - Revert "vfio/pci: Fix wrong return value when get iommu attribute DOMAIN_ATTR_NESTING"
  - Revert "iommu/smmuv3: Remove the S1 mapping restriction of dirty log"
  - perf/core: Fix reentry problem in perf_output_read_group()
  - tty: serial: uartlite: Disable clocks in case of errors
  - cgroup: Fix race condition at rebind_subsystems()
  - xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init()
  - xfs: fix memory leak in xfs_errortag_init
  - xfs: fix sb write verify for lazysbcount
  - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP*
  - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list()
  - xfs: prevent a UAF when log IO errors race with unmount
  - xfs: purge dquots after inode walk fails during quotacheck
  - xfs: revert "xfs: actually bump warning counts when we send warnings"
  - xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks
  - xfs: async CIL flushes need pending pushes to be made stable
  - xfs: don't generate selinux audit messages for capability testing
  - xfs: only bother with sync_filesystem during readonly remount
  - xfs: remove xfs_inew_wait
  - xfs: mark a data structure sick if there are cross-referencing errors
  - xfs: restore speculative_cow_prealloc_lifetime sysctl
  - xfs: make xfs_file_aio_write_checks IOCB_NOWAIT-aware
  - xfs: scrub should mark a directory corrupt if any entries cannot be iget'd
  - xfs: factor out a xfs_ilock_iocb helper
  - xfs: fix parent pointer scrubber bailing out on unallocated inodes
  - xfs: fix uaf when leaf dir bestcount not match with dir data blocks
  - xfs: Fix dax inode extent calculation when direct write is performed on an unwritten extent
  - xfs: Check for extent overflow when swapping extents
  - xfs: Check for extent overflow when remapping an extent
  - xfs: Check for extent overflow when moving extent from cow to data fork
  - xfs: Check for extent overflow when writing to unwritten extent
  - xfs: Check for extent overflow when adding/removing xattrs
  - xfs: Check for extent overflow when renaming dir entries
  - xfs: Check for extent overflow when removing dir entries
  - xfs: Check for extent overflow when adding dir entries
  - xfs: Check for extent overflow when punching a hole
  - xfs: Check for extent overflow when trivally adding a new extent
  - xfs: Add helper for checking per-inode extent count overflow
  - xfs: flush inode gc workqueue before clearing agi bucket
  - xfs: check sb_meta_uuid for dabuf buffer recovery
  - xfs: Fix the free logic of state in xfs_attr_node_hasname
  - xfs: reduce kvmalloc overhead for CIL shadow buffers
  - xfs: only run COW extent recovery when there are no live extents
  - xfs: remove all COW fork extents when remounting readonly
  - xfs: don't catch dax+reflink inodes as corruption in verifier
  - xfs: fix soft lockup via spinning in filestream ag selection loop
  - xfs: return errors in xfs_fs_sync_fs
  - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()
  - PCI: Do not enable AtomicOps on VFs
  - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0
  - config: enable CONFIG_EFI_VARS_PSTORE_DEFAULT_DISABLE by default
  - scsi: hisi_sas: Prevent parallel FLR and controller reset
  - scsi: hisi_sas: Prevent parallel controller reset and control phy command
  - xfs: fix incorrect i_nlink caused by inode racing
  - block: Fix kabi broken in blk-merge.h and blk-cgroup.h
  - block: don't merge across cgroup boundaries if blkcg is enabled
  - ima: Handle -ESTALE returned by ima_filter_rule_match()
  - ima: Simplify ima_lsm_copy_rule
  - selftests: bpf: Don't run sk_lookup in verifier tests
  - bpf: Add PROG_TEST_RUN support for sk_lookup programs
  - bpf: Consolidate shared test timing code
  - arm64/mm: Drop THP conditionality from FORCE_MAX_ZONEORDER
  - blk-mq: fix io hang for scsi drivers that depends on timeout handling during scan
  - blk-mq: fix null pointer dereference in blk_mq_queue_tag_busy_ite
  - KVM: arm64: Only probe Hisi ncsnp feature on Hisi CPUs
  - dm ioctl: print error when HC and MD do not match
  - block: fix use after free for bd_holder_dir
  - Revert "block: Fix UAF in bd_link_disk_holder()"
  - block: Fix UAF in bd_link_disk_holder()
  - ftrace: Fix use-after-free for dynamic ftrace_ops
  - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping()
  - scsi: hisi_sas: Revert "scsi: hisi_sas: Limit max hw sectors for v3 HW"
  - bfq: Make sure bfqg for which we are queueing requests is online
  - bfq: Get rid of __bio_blkcg() usage
  - bfq: Track whether bfq_group is still online
  - Revert "block, bfq: move bfqq to root_group if parent group is offlined"
  - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init()
  - blk-wbt: call rq_qos_add() after wb_normal is initialized
  - block: wbt: Remove unnecessary invoking of wbt_update_limits in wbt_init
  - blk-mq: fix missing blk_account_io_done() in error path
  - stack: Declare {randomize_,}kstack_offset to fix Sparse warnings
  - stack: Introduce CONFIG_RANDOMIZE_KSTACK_OFFSET
  - stack: Replace "o" output with "r" input constraint
  - lkdtm: Add REPORT_STACK for checking stack offsets
  - arm64: entry: Enable random_kstack_offset support
  - x86/entry: Enable random_kstack_offset support
  - stack: Optionally randomize kernel stack offset each syscall
  - jump_label: Provide CONFIG-driven build state defaults
  - ext4: fix super block checksum incorrect after mount
  - Revert "block/wbt: fix negative inflight counter when remove scsi device"
  - !313 openEuler: add openEuler/MAINTAINERS for Maintainers & Committers
  - openEuler: add openEuler/MAINTAINERS for Maintainers & Committers
  - !301 txgbe : fix arm32 compiler error warning in txgbe_main.c
  - !287 defconfig: add helper script for update openeuler_defconfig
  - configs: update arch/x86/configs/openeuler_defconfig
  - configs: update arch/arm64/configs/openeuler_defconfig
  - kconfig: Add script to update openeuler_defconfig
  - !264 Add LoongArch support
  - !297 tc-testing: fix a bug in gitignore of tc-testing
  - openeuler: net: txgbe: fix arm 32bit arch compile warning.
  - tc-testing: gitignore, delete plugins directory
  - !277 net: ngbe: fix ngbe checkpatch warnnings
  - LoongArch: defconfig: Set CONFIG_TXGBE=m by default
  - LS7A2000 : Add quirk for OHCI device rev 0x02
  - stmmac: pci: Add dwmac support for Loongson
  - LoongArch: hugepage table replace tlb
  - LoongArch: change global registers to local registers
  - LoongArch: Old BPI compatibility
  - LoongArch: add kernel setvirtmap for runtime
  - LoongArch: enable some netfilter related configs
  - LoongArch: defconfig: use make defconfig to save a clean defconfig
  - tools perf: Fix compilation error with new binutils
  - tools include: add dis-asm-compat.h to handle version differences
  - tools build: Don't display disassembler-four-args feature test
  - tools build: Add feature test for init_disassemble_info API changes
  - LoongArch: Support R_LARCH_GOT_PC_{LO12,HI20} in modules
  - LoongArch: Support PC-relative relocations in modules
  - LoongArch: Define ELF relocation types added in v2.00 ABI
  - LoongArch: Adjust symbol addressing for AS_HAS_EXPLICIT_RELOCS
  - LoongArch: Add Kconfig option AS_HAS_EXPLICIT_RELOCS
  - irqchip/loongson-liointc: Fix an error handling path in liointc_init()
  - irqchip/loongarch: Fix irq_domain_alloc_fwnode() abuse
  - irqchip/loongson-eiointc: Fix a build warning
  - irqchip/loongson-eiointc: Fix irq affinity setting
  - irqchip: Adjust Kconfig for Loongson
  - PCI: Add quirk for LS7A to avoid reboot failure
  - PCI: loongson: Improve the MRRS quirk for LS7A
  - PCI: loongson: Work around LS7A incorrect Interrupt Pin registers
  - PCI: loongson: Don't access non-existent devices
  - PCI: loongson: Add ACPI init support
  - PCI: loongson: Use generic 8/16/32-bit config ops on LS2K/LS7A
  - irqchip / ACPI: Introduce ACPI_IRQ_MODEL_LPIC for LoongArch
  - ACPI: irq: Allow acpi_gsi_to_irq() to have an arch-specific fallback
  - APCI: irq: Add support for multiple GSI domains
  - drm/radeon: Workaround radeon driver bug for Loongson
  - LoongArch: Add writecombine support for drm
  - Input: i8042 - Add PNP checking hook for Loongson
  - LoongArch: Add qspinlock support
  - LoongArch: Add perf events support
  - LoongArch: Add SysRq-x (TLB Dump) support
  - LoongArch: Use TLB for ioremap()
  - LoongArch: Enable ARCH_WANT_HUGETLB_PAGE_OPTIMIZE_VMEMMAP
  - LoongArch: Add sparse memory vmemmap support
  - MIPS&LoongArch&NIOS2: Adjust prototypes of p?d_init()
  - irqchip/loongson-pch-lpc: Add suspend/resume support
  - irqchip/loongson-pch-pic: Add suspend/resume support
  - irqchip/loongson-eiointc: Add suspend/resume support
  - irqchip/loongson-htvec: Add suspend/resume support
  - irqchip/loongson-htvec: Add ACPI init support
  - ACPI / table: Print CORE_PIC information when MADT is parsed
  - ACPICA: Events: Support fixed pcie wake event
  - ACPICA: MADT: Add LoongArch APICs support
  - ACPI: Add LoongArch support for ACPI_PROCESSOR/ACPI_NUMA
  - Revert "LoongArch: Provisionally add ACPICA data structures"
  - loongarch: efi: enable generic EFI compressed boot
  - efi/libstub: implement generic EFI zboot
  - efi/libstub: use EFI provided memcpy/memset routines
  - efi/libstub: add some missing EFI prototypes
  - efi/loongarch: Add efistub booting support
  - irqchip: Select downstream irqchip drivers for LoongArch CPU
  - LoongArch: Add subword xchg/cmpxchg emulation
  - LoongArch: Cleanup headers to avoid circular dependency
  - LoongArch: Cleanup reset routines with new API
  - LoongArch: Fix build warnings in VDSO
  - LoongArch: Select PCI_QUIRKS to avoid build error
  - LoongArch: Update Loongson-3 default config file
  - LoongArch: Add USER_STACKTRACE support
  - LoongArch: Add STACKTRACE support
  - LoongArch: Add prologue unwinder support
  - LoongArch: Add guess unwinder support
  - LoongArch: Add vDSO syscall __vdso_getcpu()
  - LoongArch: Add PCI controller support
  - LoongArch: Parse MADT to get multi-processor information
  - LoongArch: Jump to the link address before enable PG
  - LoongArch: Requires __force attributes for any casts
  - LoongArch: Fix unsigned comparison with less than zero
  - LoongArch: Adjust arch/loongarch/Kconfig
  - LoongArch: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - irqchip/loongson-pch-pic: Move find_pch_pic() into CONFIG_ACPI
  - LoongArch: Fix wrong "ROM Size" of boardinfo
  - LoongArch: Fix missing fcsr in ptrace's fpr_set
  - LoongArch: Fix shared cache size calculation
  - LoongArch: Disable executable stack by default
  - LoongArch: Remove unused variables
  - LoongArch: Remove clock setting during cpu hotplug stage
  - LoongArch: Remove useless header compiler.h
  - LoongArch: Remove several syntactic sugar macros for branches
  - LoongArch: Re-tab the assembly files
  - LoongArch: Simplify "BGT foo, zero" with BGTZ
  - LoongArch: Simplify "BLT foo, zero" with BLTZ
  - LoongArch: Simplify "BEQ/BNE foo, zero" with BEQZ/BNEZ
  - LoongArch: Use the "move" pseudo-instruction where applicable
  - LoongArch: Use the "jr" pseudo-instruction where applicable
  - LoongArch: Use ABI names of registers where appropriate
  - irqchip: Add LoongArch CPU interrupt controller support
  - LoongArch: fix kabi change due to enum chuph_state
  - irqchip: Add Loongson Extended I/O interrupt controller support
  - irqchip/loongson-liointc: Add ACPI init support
  - irqchip/loongson-pch-msi: Add ACPI init support
  - irqchip/loongson-pch-pic: Add ACPI init support
  - irqchip: Add Loongson PCH LPC controller support
  - LoongArch: Prepare to support multiple pch-pic and pch-msi irqdomain
  - LoongArch: Use ACPI_GENERIC_GSI for gsi handling
  - LoongArch: Provisionally add ACPICA data structures
  - loongarch: drop definition of PGD_ORDER
  - loongarch: drop definition of PUD_ORDER
  - loongarch: drop definition of PMD_ORDER
  - loongarch: drop definition of PTE_ORDER
  - LoongArch: Fix section mismatch warning
  - LoongArch: Fix build errors for tinyconfig
  - LoongArch: Remove obsolete mentions of vcsr
  - LoongArch: Drop these obsolete selects in Kconfig
  - efi: Simplify arch_efi_call_virt() macro
  - LoongArch: Make compute_return_era() return void
  - LoongArch: Fix wrong fpu version
  - LoongArch: Fix EENTRY/MERRENTRY setting in setup_tlb_handler()
  - LoongArch: Fix sleeping in atomic context in setup_tlb_handler()
  - LoongArch: Fix the _stext symbol address
  - LoongArch: Fix the !THP build
  - LoongArch: vmlinux.lds.S: Add missing ELF_DETAILS
  - LoongArch: Remove MIPS comment about cycle counter
  - LoongArch: Fix the !CONFIG_SMP build
  - LoongArch: Add Loongson-3 default config file
  - LoongArch: Add Non-Uniform Memory Access (NUMA) support
  - LoongArch: Add multi-processor (SMP) support
  - LoongArch: Add VDSO and VSYSCALL support
  - LoongArch: Add some library functions
  - LoongArch: Add misc common routines
  - LoongArch: Add ELF and module support
  - LoongArch: Add signal handling support
  - LoongArch: Add system call support
  - LoongArch: Add memory management
  - LoongArch: Add process management
  - LoongArch: Add exception/interrupt handling
  - LoongArch: Add boot and setup routines
  - LoongArch: Add other common headers
  - LoongArch: Add atomic/locking headers
  - LoongArch: Add CPU definition headers
  - LoongArch: Add ELF-related definitions
  - LoongArch: Add build infrastructure
  - fbdev: Prevent probing generic drivers if a FB is already registered
  - serial: 8250_pnp: Support configurable clock frequency
  - genirq/generic_chip: Export irq_unmap_generic_chip
  - mm/swapops: make is_pmd_migration_entry more strict
  - initramfs: Provide a common initrd reserve function
  - initrd: Add the preprocessor guard in initrd.h
  - PCI/ERR: Retain status from error notification
  - tee: fix memory leak in tee_shm_register()
  - qrtr: Convert qrtr_ports from IDR to XArray
  - can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once()
  - tracing/probes: Have kprobes and uprobes use $COMM too
  - netfilter: nf_tables: fix audit memory leak in nf_tables_commit
  - netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect()
  - MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0
  - video: fbdev: i740fb: Check the argument of i740_calc_vclk()
  - powerpc/64: Init jump labels before parse_early_param()
  - smb3: check xattr value length earlier
  - f2fs: fix to do sanity check on segment type in build_sit_entries()
  - f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page()
  - ALSA: control: Use deferred fasync helper
  - ALSA: timer: Use deferred fasync helper
  - ALSA: core: Add async signal helpers
  - powerpc/32: Don't always pass -mcpu=powerpc to the compiler
  - watchdog: export lockup_detector_reconfigure
  - RISC-V: Add fast call path of crash_kexec()
  - riscv: mmap with PROT_WRITE but no PROT_READ is invalid
  - modules: Ensure natural alignment for .altinstructions and __bug_table sections
  - mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start
  - vfio: Clear the caps->buf to NULL after free
  - tty: serial: Fix refcount leak bug in ucc_uart.c
  - lib/list_debug.c: Detect uninitialized lists
  - ext4: avoid resizing to a partial cluster size
  - ext4: avoid remove directory when directory is corrupted
  - drivers:md:fix a potential use-after-free bug
  - nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown
  - md: Notify sysfs sync_completed in md_reap_sync_thread()
  - dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed
  - selftests/kprobe: Do not test for GRP/ without event failures
  - csky/kprobe: reclaim insn_slot on kprobe unregistration
  - RDMA/rxe: Limit the number of calls to each tasklet
  - um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups
  - PCI/ACPI: Guard ARM64-specific mcfg_quirks
  - cxl: Fix a memory leak in an error handling path
  - pinctrl: intel: Check against matching data instead of ACPI companion
  - gadgetfs: ep_io - wait until IRQ finishes
  - scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input
  - clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description
  - zram: do not lookup algorithm in backends table
  - uacce: Handle parent device removal or parent driver module rmmod
  - clk: qcom: ipq8074: dont disable gcc_sleep_clk_src
  - vboxguest: Do not use devm for irq
  - usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch
  - usb: renesas: Fix refcount leak bug
  - usb: host: ohci-ppc-of: Fix refcount leak bug
  - clk: ti: Stop using legacy clkctrl names for omap4 and 5
  - drm/meson: Fix overflow implicit truncation warnings
  - irqchip/tegra: Fix overflow implicit truncation warnings
  - usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info
  - usb: cdns3 fix use-after-free at workaround 2
  - platform/chrome: cros_ec_proto: don't show MKBP version if unsupported
  - PCI: Add ACS quirk for Broadcom BCM5750x NICs
  - drm/sun4i: dsi: Prevent underflow when computing packet sizes
  - netfilter: add helper function to set up the nfnetlink header and use it
  - netfilter: nftables: add helper function to set the base sequence number
  - audit: log nftables configuration change events once per table
  - drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors()
  - ASoC: SOF: intel: move sof_intel_dsp_desc() forward
  - gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file
  - kbuild: fix the modules order between drivers and libs
  - igb: Add lock to avoid data race
  - stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove()
  - fec: Fix timer capture timing in `fec_ptp_enable_pps()`
  - i40e: Fix to stop tx_timeout recovery if GLOBR fails
  - regulator: pca9450: Remove restrictions for regulator-name
  - i2c: imx: Make sure to unregister adapter on remove()
  - ice: Ignore EEXIST when setting promisc mode
  - net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions()
  - net: genl: fix error path memory leak in policy dumping
  - net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters
  - net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry
  - net: moxa: pass pdev instead of ndev to DMA functions
  - net: dsa: mv88e6060: prevent crash on an unused port
  - spi: meson-spicc: add local pow2 clock ops to preserve rate between messages
  - powerpc/pci: Fix get_phb_number() locking
  - netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified
  - netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag
  - netfilter: nf_tables: really skip inactive sets when allocating name
  - ASoC: tas2770: Fix handling of mute/unmute
  - ASoC: tas2770: Drop conflicting set_bias_level power setting
  - ASoC: tas2770: Allow mono streams
  - ASoC: tas2770: Set correct FSYNC polarity
  - iavf: Fix adminq error handling
  - nios2: add force_successful_syscall_return()
  - nios2: restarts apply only to the first sigframe we build...
  - nios2: fix syscall restart checks
  - nios2: traced syscall does need to check the syscall number
  - nios2: don't leave NULLs in sys_call_table[]
  - nios2: page fault et.al. are *not* restartable syscalls...
  - dpaa2-eth: trace the allocated address instead of page struct
  - perf probe: Fix an error handling path in 'parse_perf_probe_command()'
  - geneve: fix TOS inheriting for ipv4
  - xen/xenbus: fix return type in xenbus_file_read()
  - nfp: ethtool: fix the display error of `ethtool -m DEVNAME`
  - NTB: ntb_tool: uninitialized heap data in tool_fn_write()
  - tools build: Switch to new openssl API for test-libcrypto
  - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc
  - ceph: don't leak snap_rwsem in handle_cap_grant
  - tools/vm/slabinfo: use alphabetic order when two values are equal
  - ceph: use correct index when encoding client supported features
  - dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources
  - dt-bindings: arm: qcom: fix MSM8916 MTP compatibles
  - vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout()
  - plip: avoid rcu debug splat
  - ipv6: do not use RT_TOS for IPv6 flowlabel
  - geneve: do not use RT_TOS for IPv6 flowlabel
  - ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool
  - pinctrl: qcom: sm8250: Fix PDC map
  - pinctrl: sunxi: Add I/O bias setting for H6 R-PIO
  - pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed
  - pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map
  - net: bgmac: Fix a BUG triggered by wrong bytes_compl
  - virtio_net: fix memory leak inside XPD_TX with mergeable
  - SUNRPC: Reinitialise the backchannel request buffers before reuse
  - sunrpc: fix expiry of auth creds
  - net: atlantic: fix aq_vec index out of range error
  - can: mcp251x: Fix race condition on receive interrupt
  - bpf: Check the validity of max_rdwr_access for sock local storage map iterator
  - bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator
  - bpf: Acquire map uref in .init_seq_private for sock local storage map iterator
  - bpf: Acquire map uref in .init_seq_private for hash map iterator
  - bpf: Acquire map uref in .init_seq_private for array map iterator
  - NFSv4/pnfs: Fix a use-after-free bug in open
  - NFSv4.1: RECLAIM_COMPLETE must handle EACCES
  - NFSv4: Fix races in the legacy idmapper upcall
  - NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly
  - NFSv4.1: Don't decrease the value of seq_nr_highest_sent
  - Documentation: ACPI: EINJ: Fix obsolete example
  - apparmor: Fix memleak in aa_simple_write_to_buffer()
  - apparmor: fix reference count leak in aa_pivotroot()
  - apparmor: fix overlapping attachment computation
  - apparmor: fix setting unconfined mode on a loaded profile
  - apparmor: fix aa_label_asxprint return check
  - apparmor: Fix failed mount permission check error message
  - apparmor: fix absroot causing audited secids to begin with =
  - apparmor: fix quiet_denied for file rules
  - can: ems_usb: fix clang's -Wunaligned-access warning
  - ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II
  - tracing: Have filter accept "common_cpu" to be consistent
  - btrfs: fix lost error handling when looking up extended ref on log replay
  - mmc: meson-gx: Fix an error handling path in meson_mmc_probe()
  - mmc: pxamci: Fix an error handling path in pxamci_probe()
  - mmc: pxamci: Fix another error handling path in pxamci_probe()
  - ata: libata-eh: Add missing command name
  - rds: add missing barrier to release_refill
  - x86/mm: Use proper mask when setting PUD mapping
  - ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU
  - ALSA: info: Fix llseek return value when using callback
  - !280 ksmbd-introduce-new-SMB3-kernel-server
  - ksmbd: add reserved room in ipc request/response
  - ksmbd: limits exceeding the maximum allowable outstanding requests
  - ksmbd: move credit charge deduction under processing request
  - ksmbd: add support for smb2 max credit parameter
  - ksmbd: set unique value to volume serial field in FS_VOLUME_INFORMATION
  - cifsd: add Kconfig and Makefile
  - ksmbd: Fix wrong return value and message length check in smb2_ioctl()
  - ksmbd: set NTLMSSP_NEGOTIATE_SEAL flag to challenge blob
  - ksmbd: fix encryption failure issue for session logoff response
  - ksmbd: fix endless loop when encryption for response fails
  - ksmbd: return STATUS_BAD_NETWORK_NAME error status if share is not configured
  - ksmbd: prevent out of bound read for SMB2_TREE_CONNNECT
  - ksmbd: Fix user namespace mapping
  - ksmbd: fix use-after-free bug in smb2_tree_disconect
  - ksmbd: fix memory leak in smb2_handle_negotiate
  - ksmbd: fix racy issue while destroying session on multichannel
  - ksmbd: use vfs_llseek instead of dereferencing NULL
  - ksmbd: remove unused ksmbd_share_configs_cleanup function
  - ksmbd: fix kernel oops from idr_remove()
  - ksmbd: replace sessions list in connection with xarray
  - ksmbd: use wait_event instead of schedule_timeout()
  - ksmbd: fix incorrect handling of iterate_dir
  - ksmbd: handle smb2 query dir request for OutputBufferLength that is too small
  - ksmbd: add channel rwlock
  - ksmbd: smbd: fix connection dropped issue
  - ksmbd: fix reference count leak in smb_check_perm_dacl()
  - ksmbd: reduce smb direct max read/write size
  - ksmbd: don't align last entry offset in smb2 query directory
  - ksmbd: fix same UniqueId for dot and dotdot entries
  - ksmbd: smbd: validate buffer descriptor structures
  - ksmbd: fix SMB 3.11 posix extension mount failure
  - ksmbd: fix guest connection failure with nautilus
  - ksmbd: uninitialized variable in create_socket()
  - ksmbd: smbd: fix missing client's memory region invalidation
  - ksmbd: add smb-direct shutdown
  - ksmbd: smbd: change the default maximum read/write, receive size
  - ksmbd: smbd: create MR pool
  - ksmbd: smbd: call rdma_accept() under CM handler
  - ksmbd: set 445 port to smbdirect port by default
  - ksmbd: register ksmbd ib client with ib_register_client()
  - ksmbd: Fix smb2_get_name() kernel-doc comment
  - ksmbd: Fix smb2_set_info_file() kernel-doc comment
  - ksmbd: Fix buffer_check_err() kernel-doc comment
  - ksmbd: fix multi session connection failure
  - ksmbd: set both ipv4 and ipv6 in FSCTL_QUERY_NETWORK_INTERFACE_INFO
  - ksmbd: set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO
  - ksmbd: Remove unused fields from ksmbd_file struct definition
  - ksmbd: Remove unused parameter from smb2_get_name()
  - ksmbd: disable SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1
  - ksmbd: fix uninitialized symbol 'pntsd_size'
  - ksmbd: remove select FS_POSIX_ACL in Kconfig
  - ksmbd: fix memleak in get_file_stream_info()
  - ksmbd: contain default data stream even if xattr is empty
  - ksmbd: downgrade addition info error msg to debug in smb2_get_info_sec()
  - ksmbd: Fix an error handling path in 'smb2_sess_setup()'
  - ksmbd: change LeaseKey data type to u8 array
  - ksmbd: remove smb2_buf_length in smb2_transform_hdr
  - ksmbd: remove smb2_buf_length in smb2_hdr
  - ksmbd: don't need 8byte alignment for request length in ksmbd_check_message
  - ksmbd: Fix buffer length check in fsctl_validate_negotiate_info()
  - ksmbd: Remove redundant 'flush_workqueue()' calls
  - ksmdb: use cmd helper variable in smb2_get_ksmbd_tcon()
  - ksmbd: use ksmbd_req_buf_next() in ksmbd_smb2_check_message()
  - ksmbd: use ksmbd_req_buf_next() in ksmbd_verify_smb_message()
  - ksmbd: add buffer validation in session setup
  - ksmbd: throttle session setup failures to avoid dictionary attacks
  - ksmbd: validate OutputBufferLength of QUERY_DIR, QUERY_INFO, IOCTL requests
  - ksmbd: validate credit charge after validating SMB2 PDU body size
  - ksmbd: add buffer validation for smb direct
  - ksmbd: limit read/write/trans buffer size not to exceed 8MB
  - ksmbd: validate compound response buffer
  - ksmbd: fix potencial 32bit overflow from data area check in smb2_write
  - ksmbd: improve credits management
  - ksmbd: add validation in smb2_ioctl
  - ksmbd: fix oops from fuse driver
  - ksmbd: fix version mismatch with out of tree
  - ksmbd: use buf_data_size instead of recalculation in smb3_decrypt_req()
  - ksmbd: remove the leftover of smb2.0 dialect support
  - ksmbd: check strictly data area in ksmbd_smb2_check_message()
  - ksmbd: add the check to vaildate if stream protocol length exceeds maximum value
  - ksmbd: missing check for NULL in convert_to_nt_pathname()
  - ksmbd: fix transform header validation
  - ksmbd: add buffer validation for SMB2_CREATE_CONTEXT
  - ksmbd: add validation in smb2 negotiate
  - ksmbd: add request buffer validation in smb2_set_info
  - ksmbd: use correct basic info level in set_file_basic_info()
  - ksmbd: remove NTLMv1 authentication
  - ksmbd: fix documentation for 2 functions
  - ksmbd: fix invalid request buffer access in compound
  - ksmbd: remove RFC1002 check in smb2 request
  - ksmbd: use LOOKUP_BENEATH to prevent the out of share access
  - ksmbd: remove follow symlinks support
  - ksmbd: check protocol id in ksmbd_verify_smb_message()
  - ksmbd: add default data stream name in FILE_STREAM_INFORMATION
  - ksmbd: log that server is experimental at module load
  - ksmbd: add validation for FILE_FULL_EA_INFORMATION of smb2_get_info
  - ksmbd: prevent out of share access
  - ksmbd: transport_rdma: Don't include rwlock.h directly
  - ksmbd: fix read of uninitialized variable ret in set_file_basic_info
  - ksmbd: remove unused ksmbd_file_table_flush function
  - ksmbd: smbd: fix dma mapping error in smb_direct_post_send_data
  - ksmbd: Reduce error log 'speed is unknown' to debug
  - ksmbd: remove setattr preparations in set_file_basic_info()
  - ksmbd: ensure error is surfaced in set_file_basic_info()
  - ksmbd: fix __write_overflow warning in ndr_read_string
  - ksmbd: fix permission check issue on chown and chmod
  - ksmbd: don't set FILE DELETE and FILE_DELETE_CHILD in access mask by default
  - ksmbd: smbd: fix kernel oops during server shutdown
  - ksmbd: use proper errno instead of -1 in smb2_get_ksmbd_tcon()
  - ksmbd: update the comment for smb2_get_ksmbd_tcon()
  - ksmbd: change int data type to boolean
  - ksmbd: Fix multi-protocol negotiation
  - ksmbd: fix an oops in error handling in smb2_open()
  - ksmbd: add ipv6_addr_v4mapped check to know if connection from client is ipv4
  - ksmbd: fix missing error code in smb2_lock
  - ksmbd: use channel signingkey for binding SMB2 session setup
  - ksmbd: don't set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO
  - ksmbd: Return STATUS_OBJECT_PATH_NOT_FOUND if smb2_creat() returns ENOENT
  - ksmbd: fix -Wstringop-truncation warnings
  - ksmbd: Fix potential memory leak in tcp_destroy_socket()
  - ksmbd: add support for negotiating signing algorithm
  - ksmbd: add negotiate context verification
  - ksmbd: fix typo of MS-SMBD
  - ksmbd: move credit charge verification over smb2 request size verification
  - ksmbd: set STATUS_INVALID_PARAMETER error status if credit charge is invalid
  - ksmbd: fix wrong error status return on session setup
  - ksmbd: fix wrong compression context size
  - ksmbd: fix typo in comment
  - ksmbd: fix an error message in ksmbd_conn_trasnport_init
  - ksmbd: set RDMA capability for FSCTL_QUERY_NETWORK_INTERFACE_INFO
  - ksmbd: fix unused err value in smb2_lock
  - ksmbd: fix memory leak in ksmbd_vfs_get_sd_xattr()
  - ksmbd: remove unneeded check_context_err
  - ksmbd: handle error cases first in smb2_create_sd_buffers
  - ksmbd: make smb2_find_context_vals return NULL if not found
  - ksmbd: uninterruptible wait for a file being unlocked
  - ksmbd: free ksmbd_lock when file is closed
  - ksmbd: fix the running request count decrement
  - ksmbd: use kasprintf() in ksmbd_vfs_xattr_stream_name()
  - ksmbd: delete some stray tabs
  - ksmbd: change data type of volatile/persistent id to u64
  - ksmbd: fix memory leak in smb_inherit_dacl()
  - ksmbd: fix memory leak smb2_populate_readdir_entry()
  - ksmbd: fix read on the uninitialized send_ctx
  - ksmbd: remove unneeded NULL check in for_each_netdev
  - ksmbd: Fix read on the uninitialized pointer sess
  - ksmbd: fix kernel oops in ksmbd_rpc_ioctl/rap()
  - ksmbd: adapt vfs api to 5.10
  - ksmbd: replace struct dentry with struct path in some function's arguments
  - ksmbd: reorder and document on-disk and netlink structures in headers
  - ksmbd: change server config string index to enumeration
  - ksmbd: change server state type macro to enumeration
  - ksmbd: change sid types to enumeration
  - ksmbd: change ACE types to enumeration
  - ksmbd: remove SMB1 oplock level macros
  - ksmbd: opencode to remove ATTR_FP macro
  - ksmbd: use ksmbd_vfs_lock_parent to get stable parent dentry
  - ksmbd: opencode to remove FP_INODE macro
  - ksmbd: fix dentry racy with rename()
  - ksmbd: Relax credit_charge check in smb2_validate_credit_charge()
  - ksmbd: allow PROTECTED_DACL_SECINFO and UNPROTECTED_DACL_SECINFO addition information in smb2 set info security
  - ksmbd: replace request and respone buffer macro with inline functions
  - ksmbd: replace SMB_DIRECT_TRANS macro with inline function
  - ksmbd: remove and replace macros with inline functions in smb_common.h
  - ksmbd: remove getting worker state macros
  - ksmbd: replace PAYLOAD_HEAD with inline function
  - ksmbd: replace KSMBD_ALIGN with kernel ALIGN macro
  - ksmbd: replace BUFFER_NR_PAGES with inline function
  - ksmbd: remove macros in transport_ipc.c
  - ksmbd: set MAY_* flags together with open flags
  - ksmbd: factor out a ksmbd_vfs_lock_parent helper
  - ksmbd: move fs/cifsd to fs/ksmbd
  - cifsd: add index.rst in cifs documentation
  - cifsd: fix WARNING: document isn't included in any toctree
  - cifsd: add ksmbd/nfsd interoperability to feature table
  - doc: cifsd: change the reference to configuration.txt
  - cifsd: fix build warnings from cifsd.rst
  - cifsd: update cifsd.rst document
  - cifsd: fix WARNING: Title overline too short
  - ksmbd: use f_bsize in FS_SECTOR_SIZE_INFORMATION
  - ksmbd: remove unneeded NULL check in the list iterator
  - ksmbd: use f_bsize instead of q->limits.logical_block_size
  - ksmbd: change stream type macro to enumeration
  - ksmbd: opencode posix acl functions instead of wrappers
  - ksmbd: factor out a ksmbd_validate_entry_in_use helper from __ksmbd_vfs_rename
  - ksmbd: opencode to avoid trivial wrappers
  - ksmbd: remove ksmbd_err/info
  - ksmbd: replace KSMBD_SHARE_CONFIG_PATH with inline function
  - ksmbd: remove ____ksmbd_align in ksmbd_server.h
  - ksmbd: remove unneeded FIXME comment
  - ksmbd: fix overly long line
  - ksmbd: use goto instead of duplicating the resoure cleanup in ksmbd_open_fd
  - ksmbd: use list_for_each_entry instead of list_for_each
  - ksmbd: remove ksmbd_vfs_copy_file_range
  - ksmbd: initialize variables on the declaration
  - ksmbd: remove cache read/trans buffer support
  - ksmbd: add support for SMB3 multichannel
  - ksmbd: fix kfree of uninitialized pointer oid
  - cifsd: append ksmbd prefix into names for asn1 decoder
  - cifsd: remove duplicated argument
  - cifsd: set epoch in smb2_lease_break response
  - cifsd: fix list_add double add BUG_ON trap in setup_async_work()
  - cifsd: fix additional warnings from checkpatch.pl --strict
  - cifsd: fix potential read overflow in ksmbd_vfs_stream_read()
  - cifsd: check return value of ksmbd_vfs_getcasexattr() correctly
  - cifsd: fix memleak in ksmbd_vfs_stream_read()
  - cifsd: fix memleak in ksmbd_vfs_stream_write()
  - cifsd: make alignment match open parenthesis
  - cifsd: enclose macro variables in parenthesis
  - cifsd: fix Control flow issues in ksmbd_build_ntlmssp_challenge_blob()
  - cifsd: lookup a file with LOOKUP_FOLLOW only if 'follow symlinks = yes'
  - cifsd: Prefer kernel type 'u16' over 'uint16_t'
  - cifsd: remove unnecessary parentheses around
  - cifsd: Alignment should match open parenthesis
  - cifsd: Blank lines aren't necessary after an open brace '{'
  - cifsd: No space is necessary after a cast
  - cifsd: don't use multiple blank lines
  - cifsd: spaces preferred around that '/'
  - cifsd: braces {} should be used on all arms of this statement
  - cifsd: add the check to prevent potential overflow with smb_strtoUTF16() and UNICODE_LEN()
  - cifsd: alignment match open parenthesis
  - cifsd: return -ENOMEM about error from ksmbd_crypto_ctx_find_xxx calls
  - cifsd: simplify error handling in ksmbd_gen_preauth_integrity_hash()
  - cifsd: call kzalloc() directly instead of wrapper
  - cifsd: add default case in switch statment in alloc_shash_desc()
  - cifsd: change success handling to failure handling
  - cifsd: fix wrong return value in ksmbd_crypt_message()
  - cifsd: remove unneeded initialization of rc variable in ksmbd_crypt_message()
  - cifsd: len can never be negative in ksmbd_init_sg()
  - cifsd: add the check if nvec is zero
  - cifsd: never return 1 on failure
  - cifsd: return zero in always success case
  - cifsd: set error return value for memcmp() difference
  - cifsd: remove unneeded type casting
  - cifsd: simplify error handling in ksmbd_auth_ntlm()
  - cifsd: move ret check before the out label
  - cifsd: just return smbhash() instead of using rc return value
  - cifsd: move fips_enabled check before the str_to_key()
  - cifsd: add goto fail in neg_token_init_mech_type()
  - cifsd: use memcmp instead of for loop check in oid_eq()
  - cifsd: add goto fail in asn1_oid_decode()
  - cifsd: add support for FSCTL_DUPLICATE_EXTENTS_TO_FILE
  - cifsd: Do not use 0 or 0xFFFFFFFF for TreeID
  - cifsd: fix xfstests generic/504 test failure
  - cifsd: fix boolreturn.cocci warnings
  - cifsd: fix WARNING: Too many leading tabs
  - cifsd: fix WARNING: Possible unnecessary 'out of memory' message
  - cifsd: decoding gss token using lib/asn1_decoder.c
  - cifsd: fix invalid memory access in smb2_write()
  - cifsd: add support for AES256 encryption
  - cifsd: Fix potential null-ptr-deref in destroy_previous_session()
  - cifsd: Update out_buf_len in smb2_populate_readdir_entry()
  - cifsd: Handle ksmbd_session_rpc_open() failure in create_smb2_pipe()
  - cifsd: Call smb2_set_err_rsp() in smb2_read/smb2_write error path
  - cifsd: Fix regression in smb2_get_info
  - cifsd: Remove is_attributes_write_allowed() wrapper
  - cifsd: Update access check in set_file_allocation_info/set_end_of_file_info
  - cifsd: remove the dead code of unimplemented durable handle
  - cifsd: use d_inode()
  - cifsd: Fix potential null-ptr-deref in smb2_open()
  - cifsd: move nt time functions to misc.c
  - cifsd: remove unused nterr.c file
  - cifsd: remove unused smberr.h
  - cifsd: Remove smb2_put_name()
  - cifsd: fix reference count decrement of unclaimed file in __ksmbd_lookup_fd
  - cifsd: re-implement ksmbd_vfs_kern_path
  - cifsd: get parent dentry from child in ksmbd_vfs_remove_file()
  - cifsd: add the check if parent is stable by unexpected rename
  - cifsd: declare ida statically
  - cifsd: remove unused including <linux/version.h>
  - cifsd: prevent a integer overflow in wm_alloc()
  - cifsd: remove wrappers of kvmalloc/kvfree
  - cifsd: fix memdup.cocci warnings
  - cifsd: use kfree to free memory allocated by kmalloc or kzalloc
  - cifsd: fix memory leak when loop ends
  - cifsd: remove stale prototype and variables
  - cifsd: use xarray instead of linked list for tree connect list
  - cifsd: remove useless error handling in ksmbd_vfs_read
  - cifsd: use file_inode() instead of d_inode()
  - cifsd: handle unhashed dentry in ksmbd_vfs_mkdir
  - cifsd: remove calling d_path in error paths
  - cifsd: remove smack inherit leftovers
  - cifsd: fix wrong prototype in comment
  - cifsd: merge time_wrappers.h into smb_common.h
  - cifsd: clean-up codes using chechpatch.pl --strict
  - cifsd: fix error return code in ksmbd_vfs_remove_file()
  - cifsd: add the check to work file lock and rename behaviors like Windows unless POSIX extensions are negotiated
  - cifsd: use kmalloc() for small allocations
  - cifsd: fix wrong use of rw semaphore in __session_create()
  - cifsd: remove unneeded macros
  - cifsd: remove redundant assignment to variable err
  - cifsd: fix error handling in ksmbd_server_init()
  - cifsd: Fix an error code in smb2_read()
  - cifsd: Pass string length parameter to match_pattern()
  - cifsd: fix warning: variable 'total_ace_size' and 'posix_ccontext' set but not used
  - cifsd: fix incorrect comments
  - cifsd: remove unneeded FIXME comments
  - cifsd: fix static checker warning from smb_check_perm_dacl()
  - cifsd: fix static checker warning from smb_direct_post_send_data()
  - cifsd: Fix a use after free on error path
  - cifsd: fix a IS_ERR() vs NULL bug
  - cifsd: fix a precedence bug in parse_dacl()
  - cifsd: Fix a handful of spelling mistakes
  - cifsd: uniquify extract_sharename()
  - cifsd: add file operations
  - cifsd: add server-side procedures for SMB3
  - cifsd: add server handler for central processing and tranport layers
  - openeuler: net: ngbe: fix ngbe checkpatch warnnings


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.71.0.95
changelog:
  - blk-mq: don't access request_wrapper if request is not allocated from block layer
  - blk-mq: fix kabi broken due to request_wrapper
  - ide-cd: don't clear rq_flags after blk_get_request
  - iommu: Fix error handling in probe_acpi_namespace_devices()


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.72.0.96
changelog:
  - block: fix regression for dm
  - dm: switch to rq-based after queue is initialized
  - net/af_packet: make sure to pull mac header
  - net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO
  - sched: Fix null-ptr-deref in free_fair_sched_group
  - arm64: fix a concurrency issue in emulation_proc_handler()
  - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
  - Revert "ipvlan: Modify the value of ipvlan modes"
  - workqueue: fix state-dump console deadlock
  - preempt/dynamic: Fix typo in macro conditional statement
  - jump_label: Fix usage in module __init
  - arm64/mpam: update last_cmd_status in parse_cache() and parse_bw()
  - arm64/mpam: remove kernfs_get() calls() and add kernfs_put() calls to prevent refcount leak
  - arm64/mpam: make mbw_max/min not less than min_bw
  - arm64/mpam: Fix indent format error in resctrl_parse_param()
  - arm64/mpam: decrease dom_num when domain goes offline
  - arm64/mpam: correct mbw_max/min if remainder is too large
  - Revert "add barriers to buffer_uptodate and set_buffer_uptodate"
  - pinctrl: core: Set ret to 0 when group is skipped
  - pinctrl: core: Handling pinmux and pinconf separately
  - ACPI: APD: Check for NULL pointer after calling devm_ioremap()
  - Revert "ACPICA: Interpreter: fix memory leak by using existing buffer"
  - mm/dynamic_hugetlb: fix compound_nr incorrect
  - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq
  - scsi: ufs: core: Enable link lost interrupt
  - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU
  - perf python: Fix build when PYTHON_CONFIG is user supplied
  - Documentation/ABI: Mention retbleed vulnerability info file for sysfs
  - arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76
  - md: call __md_stop_writes in md_stop
  - Revert "md-raid: destroy the bitmap after destroying the thread"
  - mm/hugetlb: fix hugetlb not supporting softdirty tracking
  - xen/privcmd: fix error exit of privcmd_ioctl_dm_op()
  - ACPI: processor: Remove freq Qos request for all CPUs
  - s390: fix double free of GS and RI CBs on fork() failure
  - asm-generic: sections: refactor memory_intersects
  - loop: Check for overflow while configuring loop
  - x86/bugs: Add "unknown" reporting for MMIO Stale Data
  - perf/x86/lbr: Enable the branch type for the Arch LBR by default
  - btrfs: check if root is readonly while setting security xattr
  - btrfs: add info when mount fails due to stale replace target
  - btrfs: replace: drop assert for suspended replace
  - btrfs: fix silent failure when deleting root reference
  - ionic: fix up issues with handling EAGAIN on FW cmds
  - rxrpc: Fix locking in rxrpc's sendmsg
  - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter
  - net: Fix a data-race around sysctl_somaxconn.
  - net: Fix data-races around sysctl_devconf_inherit_init_net.
  - net: Fix data-races around sysctl_fb_tunnels_only_for_init_net.
  - net: Fix a data-race around netdev_budget_usecs.
  - net: Fix a data-race around netdev_budget.
  - net: Fix a data-race around sysctl_net_busy_read.
  - net: Fix a data-race around sysctl_net_busy_poll.
  - net: Fix a data-race around sysctl_tstamp_allow_data.
  - net: Fix data-races around sysctl_optmem_max.
  - bpf: Folding omem_charge() into sk_storage_charge()
  - ratelimit: Fix data-races in ___ratelimit().
  - net: Fix data-races around netdev_tstamp_prequeue.
  - net: Fix data-races around netdev_max_backlog.
  - net: Fix data-races around weight_p and dev_weight_[rt]x_bias.
  - net: Fix data-races around sysctl_[rw]mem_(max|default).
  - net: Fix data-races around sysctl_[rw]mem(_offset)?.
  - tcp: tweak len/truesize ratio for coalesce candidates
  - netfilter: nf_tables: disallow jump to implicit chain from set element
  - netfilter: nf_tables: upfront validation of data via nft_data_init()
  - netfilter: bitwise: improve error goto labels
  - netfilter: nft_cmp: optimize comparison for 16-bytes
  - netfilter: nf_tables: consolidate rule verdict trace call
  - netfilter: nftables: remove redundant assignment of variable err
  - netfilter: nft_tunnel: restrict it to netdev family
  - netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families
  - netfilter: nf_tables: do not leave chain stats enabled on error
  - netfilter: nft_payload: do not truncate csum_offset and csum_type
  - netfilter: nft_payload: report ERANGE for too long offset and length
  - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips
  - netfilter: ebtables: reject blobs that don't provide all entry points
  - net: ipvtap - add __init/__exit annotations to module init/exit funcs
  - bonding: 802.3ad: fix no transmission of LACPDUs
  - net: moxa: get rid of asymmetry in DMA mapping/unmapping
  - net: ipa: don't assume SMEM is page-aligned
  - net/mlx5e: Properly disable vlan strip on non-UL reps
  - ice: xsk: prohibit usage of non-balanced queue id
  - ice: xsk: Force rings to be sized to power of 2
  - nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout
  - rose: check NULL rose_loopback_neigh->loopback
  - mm/smaps: don't access young/dirty bit if pte unpresent
  - mm/huge_memory.c: use helper function migration_entry_to_page()
  - SUNRPC: RPC level errors should set task->tk_rpc_status
  - NFSv4.2 fix problems with __nfs42_ssc_open
  - NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open()
  - xfrm: clone missing x->lastused in xfrm_do_migrate
  - xfrm: fix refcount leak in __xfrm_policy_check()
  - kernel/sched: Remove dl_boosted flag comment
  - vfs: make sync_filesystem return errors from ->sync_fs
  - fs: remove __sync_filesystem
  - pinctrl: amd: Don't save/restore interrupt status and wake status bits
  - kernel/sys_ni: add compat entry for fadvise64_64
  - parisc: Fix exception handler for fldw and fstw instructions
  - audit: fix potential double free on error path from fsnotify_add_inode_mark
  - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.73.0.97
changelog:
  - proc: proc_skip_spaces() shouldn't think it is working on C strings
  - proc: avoid integer type confusion in get_proc_long
  - xen/netback: fix build warning
  - xen/netback: Ensure protocol headers don't fall in the non-linear area
  - livepatch/ppc64: Fix preemption check when enabling
  - block: only use cmpxchg64 in 64bit platform
  - efi/libstub: Fix build error in efi-stub.c for riscv


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.74.0.98
changelog:
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
  - xen/netback: don't call kfree_skb() with interrupts disabled
  - media: dvb-core: Fix UAF due to refcount races at releasing
  - wifi: wilc1000: validate pairwise and authentication suite offsets
  - wifi: wilc1000: validate number of channels
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
  - drm/amdkfd: Check for null pointer after calling kmemdup


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.75.0.99
changelog:
  - ext2: replace bh_submit_read() helper with bh_read()
  - ufs: replace ll_rw_block()
  - udf: replace ll_rw_block()
  - reiserfs: replace ll_rw_block()
  - ocfs2: replace ll_rw_block()
  - ntfs3: replace ll_rw_block()
  - jbd2: replace ll_rw_block()
  - isofs: replace ll_rw_block()
  - gfs2: replace ll_rw_block()
  - fs/buffer: replace ll_rw_block()
  - fs/buffer: add some new buffer read helpers
  - sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos
  - mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
  - blk-mq: set default elevator as deadline in case of hctx shared tagset
  - dm thin: Use last transaction's pmd->root when commit failed
  - media: mceusb: Use new usb_control_msg_*() routines
  - block, bfq: fix possible uaf for 'bfqq->bic'
  - block, bfq: fix null pointer dereference in bfq_bio_bfqg()
  - scsi: iscsi: remove .unbind_conn from iscsi_transport
  - Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"
  - blk-mq: fix kabi broken in struct bio
  - blk-mq: fix kabi broken in struct request
  - mm/dynamic_hugetlb: fix clear PagePool without lock protection
  - mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
  - x86/cpu/hygon: Set __max_die_per_package on Hygon
  - block: always align request_wrapper to cacheline
  - block: fix crash on cmpxchg for request_wrapper
  - clk: imx: Add check for kcalloc
  - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
  - Bluetooth: L2CAP: Fix build errors in some archs


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.76.0.100
changelog:
  - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
  - bfq: fix null-ptr-deref in bfq_pd_offline
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access()
  - ksmbd: fix heap-based overflow in set_ntacl_dacl()
  - ksmbd: prevent out of bound read for SMB2_WRITE
  - ksmbd: validate length in smb2_write()
  - xfs: fix super block buf log item UAF during force shutdown
  - xfs: wait iclog complete before tearing down AIL
  - xfs: get rid of assert from xfs_btree_islastblock


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.77.0.101
changelog:
  - !348 Backport CVEs and fs bugfixes
  - io_uring: kill goto error handling in io_sqpoll_wait_sq()
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
  - ext4: fix bad checksum after online resize
  - xfs: fix use-after-free in xattr node block inactivation
  - USB: core: Fix RST error in hub.c
  - USB: core: Prevent nested device-reset calls


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.78.0.102
changelog:
  - !357 Backport CVEs, bugfixes, performance and other
  - binder: fix UAF of alloc->vma in race with munmap()
  - io_uring: add missing item types for splice request
  - xfs: fix overfilling of reserve pool
  - xfs: always succeed at setting the reserve pool size
  - xfs: remove infinite loop when reserving free block pool
  - xfs: use current->journal_info for detecting transaction recursion
  - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
  - fix kabi broken due to may_pollfree
  - io_uring: disable polling pollfree files
  - sched: disable sched_autogroup by default
  - driver: char: delete svm.c
  - ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
  - fs/ntfs3: Fix attr_punch_hole() null pointer derenference
  - tracing/osnoise: Do not unregister events twice
  - tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
  - mm/filemap.c: remove bogus VM_BUG_ON
  - mm: oom_kill: fix KABI broken by "oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup"
  - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup
  - fork: Allocate a new task_struct_resvd object for fork task
  - tmpfs: fix regressions from wider use of ZERO_PAGE
  - tmpfs: do not allocate pages on read


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.79.0.103
changelog:
  - !369 Backport CVEs and bugfixes
  - mm/vmpressure: fix data-race with memcg->socket_pressure
  - of/fdt: Don't calculate initrd size from DT if start > end
  - lib/cmdline: avoid page fault in next_arg
  - mm/memory: return vm_fault_t result from migrate_to_ram() callback
  - net: sched: disallow noqueue for qdisc classes
  - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
  - xfs: Fix deadlock on xfs_inodegc_worker
  - net: sched: cbq: dont intepret cls results when asked to drop
  - net: sched: atm: dont intepret cls results when asked to drop
  - scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
  - rndis_wlan: Prevent buffer overflow in rndis_query_oid


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.80.0.104
changelog:
  - !386 Backport CVEs and bugfixes
  - net: sched: fix race condition in qdisc_graft()
  - macvlan: enforce a consistent minimal mtu
  - net: switch to storing KCOV handle directly in sk_buff
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
  - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
  - mm: memcontrol: fix potential oom_lock recursion deadlock
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
  - ext4: fix use-after-free in ext4_orphan_cleanup
  - ext4: fix null-ptr-deref in ext4_write_info
  - xfs: fix potential log item leak


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.81.0.105
changelog:
  - !400 Backport fs and block bugfixes
  - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
  - ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap
  - ubifs: Re-statistic cleaned znode count if commit failed
  - ubifs: dirty_cow_znode: Fix memleak in error handling path
  - block, bfq: switch 'bfqg->ref' to use atomic refcount apis
  - cifs: sanitize multiple delimiters in prepath
  - !392 OpenEuler-22.03-LTS Fixes Some Bugs in Accelerator Disk Storage Encryption and Decryption Scenarios
  - crypto: hisilicon/sec - delete the flag CRYPTO_ALG_ALLOCATES_MEMORY
  - crypto: hisilicon/qm - prevent soft lockup in qm_poll_req_cb()'s loop
  - crypto: hisilicon/qm - modify event irq processing
  - crypto: hisilicon/qm - move alloc qm->wq to qm.c
  - crypto: hisilicon/qm - add functions for releasing resources


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.82.0.106
changelog:
  - !410 Backport CVEs and bugfixes
  - x86/kasan: Populate shadow for shared chunk of the CPU entry area
  - x86/kasan: Add helpers to align shadow addresses up and down
  - x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names
  - x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
  - x86/mm: Recompute physical address for every page of per-CPU CEA mapping
  - x86/kasan: Map shadow for percpu pages on demand
  - x86/mm: Randomize per-cpu entry area
  - Huawei BMA: Fix iBMA driver bug
  - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
  - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
  - ppp: associate skb with a device at tx
  - arm32: kaslr: Avoid using the -fpic and fno-pic parameters together
  - bpf, sockmap: fix race in sock_map_free()
  - bpf: make sure skb->len != 0 when redirecting to a tunneling device
  - cifs: Fix use-after-free in rdata->read_into_pages()
  - net: bridge: mcast: add and enforce query interval minimum
  - net: bridge: mcast: add and enforce startup query interval minimum
  - media: vivid: fix compose size exceed boundary
  - !405 kvm: arm64: fix some pvsched bugs
  - kvm: arm64: fix some pvsched bugs


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.83.0.107
changelog:
  - !419 Backport CVEs and bugfixes
  - net: mpls: fix stale pointer if allocation fails during device rename
  - x86/bugs: Flush IBP in ib_prctl_set()
  - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
  - binder: Address corner cases in deferred copy and fixup
  - binder: fix pointer cast warning
  - binder: defer copies of pre-patched txn data
  - binder: read pre-translated fds from sender buffer
  - binder: avoid potential data leakage when copying txn
  - ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
  - rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
  - net/sched: sch_taprio: do not schedule in taprio_reset()
  - net/sched: sch_taprio: fix possible use-after-free
  - nbd: fix assignment error for first_minor in nbd_dev_add
  - md/raid10: fix wrong setting of max_corr_read_errors
  - md/raid10: fix overflow in safe_delay_store
  - md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter
  - fix kabi broken due to import of 5.15-stable io_uring
  - io_uring: import 5.15-stable io_uring
  - task_work: add helper for more targeted task_work canceling
  - coredump: Limit what can interrupt coredumps
  - kernel: provide create_io_thread() helper
  - fs: provide locked helper variant of close_fd_get_file()
  - kernel: remove checking for TIF_NOTIFY_SIGNAL
  - entry: Add support for TIF_NOTIFY_SIGNAL
  - signal: Add task_sigpending() helper
  - arm: add support for TIF_NOTIFY_SIGNAL
  - arm64: add support for TIF_NOTIFY_SIGNAL
  - riscv: add support for TIF_NOTIFY_SIGNAL
  - powerpc: add support for TIF_NOTIFY_SIGNAL
  - x86: Wire up TIF_NOTIFY_SIGNAL
  - iov_iter: add helper to save iov_iter state
  - perf beauty: Update copy of linux/socket.h with the kernel sources
  - perf trace beauty: Update copy of linux/socket.h with the kernel sources
  - io_uring: correct pinned_vm accounting
  - file: Rename __close_fd_get_file close_fd_get_file
  - io_uring: don't hold uring_lock when calling io_run_task_work*
  - io_uring: don't take uring_lock during iowq cancel
  - fs: make do_renameat2() take struct filename
  - net: add accept helper not installing fd
  - net: provide __sys_shutdown_sock() that takes a socket
  - fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
  - Make sure nd->path.mnt and nd->path.dentry are always valid pointers
  - fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy*
  - fs: add support for LOOKUP_CACHED
  - Revert "io_uring: fix soft lockup when call __io_remove_buffers"
  - Revert "io_uring: deduplicate failing task_work_add"
  - Revert "io_uring: don't take uring_lock during iowq cancel"
  - Revert "[Backport] io_uring: don't keep looping for more events if we can't flush overflow"
  - Revert "[Huawei] io-wq: Switch io_wqe_worker's fs before releasing request"
  - Revert "[Huawei] io_uring:drop identity before creating a private one"


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-60.84.0.108
changelog:
  - !454 Backport CVEs and bugfixes
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
  - neigh: make sure used and confirmed times are valid
  - HID: check empty report_list in bigben_probe()
  - HID: check empty report_list in hid_validate_values()
  - Documentation/hw-vuln: Fix rST warning
  - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
  - KVM: x86: Mitigate the cross-thread return address predictions bug
  - x86/speculation: Identify processors vulnerable to SMT RSB predictions
  - radi10: fix leak of 'r10bio->remaining' for recovery
  - md: fix soft lockup in status_resync
  - md: don't update recovery_cp when curr_resync is ACTIVE
  - md: Ensure resync is reported after it starts
  - md: Use enum for overloaded magic numbers used by mddev->curr_resync
  - raid10: fix leak of io accounting
  - tcp: Fix listen() regression in 5.15.88.
  - net/ulp: Remove redundant ->clone() test in inet_clone_ulp().
  - net/ulp: use consistent error code when blocking ULP
  - net/ulp: prevent ULP without clone op from entering the LISTEN status
  - net/tls: tls_is_tx_ready() checked list_entry
  - usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core
  - ntfs: fix out-of-bounds read in ntfs_attr_find()
  - splice: don't generate zero-len segement bvecs
  - rds: rds_rm_zerocopy_callback() use list_first_entry()
  - tap: tap_open(): correctly initialize socket uid
  - tun: tun_chr_open(): correctly initialize socket uid
  - net: add sock_init_data_uid()
  - ring-buffer: Handle race between rb_move_tail and rb_check_pages
  - blk-mq: use quiesced elevator switch when reinitializing queues
  - ovl: fix use inode directly in rcu-walk mode


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.85.0.109
changelog:
  - !485 Backport CVEs and bugfixes
  - !491 [sync] PR-477: tools: fix compile error introduced by LoongArch commit
  - fix compile error introduced by LoongArch commit
  - scsi: cancel the inflight async device probe when remove scsi_target
  - scsi: fix use-after-free problem in scsi_remove_target
  - ring-buffer: Fix race between reset page and reading page
  - raid1, raid10: switch to precise io accounting
  - block: add precise io accouting apis
  - md/raid10: fix memleak for 'conf->bio_split'
  - sctp: fail if no bound addresses can be used for a given scope
  - ext4: fix WARNING in mb_find_extent
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
  - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
  - scsi: iscsi: Move pool freeing
  - xfs: aborting inodes on shutdown may need buffer lock
  - ext4: fix incorrect options show of original mount_opt and extend mount_opt2
  - !439 openeuler: pci: workaround multiple functions can be assigned to only one VM
  - !474 [sync] PR-447: add perf loongarch support
  - tools/perf: Add basic support for LoongArch
  - perf machine: Use path__join() to compose a path instead of snprintf(dir, '/', filename)
  - !467 LoongArch: add kvm support
  - LoongArch: kvm: KVM support for 5.10
  - !472 [sync] PR-466: LoongArch: fix compile error when using make allmodconfig
  - LoongArch: fix compile error when using make allmodconfig
  - LoongArch: Export symbol for function smp_send_reschedule()
  - LoongArch: kvm: add initial kvm support
  - !453 Backport CVEs and bugfixes
  - !463 [sync] PR-444: LoongArch: some LS7a device drivers support and LoongArch bug fix
  - LoongArch: remove __ARCH_WANT_NEW_STAT
  - LoongArch: modify defconfig according to other architectures
  - LoongArch: Change definition of cpu_relax() for Loongson-3
  - drm/loongson: add kernel modesetting driver support for ls7a1000/ls7a2000
  - LoongArch: Use alternative to optimize libraries
  - LoongArch: Add alternative runtime patching mechanism
  - LoongArch: Remove the .fixup section usage
  - LoongArch: extable: Add a dedicated uaccess handler
  - LoongArch: extable: Add `type` and `data` fields
  - LoongArch: Switch to relative exception tables
  - LoongArch: Consolidate __ex_table construction
  - LoongArch: fix SECCOMP test error
  - LoongArch: fix vmlinux ld error
  - LoongArch: enable hugetlbfs support
  - LoongArch: save one instruction for arch_local_irq_{enable,disable}
  - LoongArch: optimize for syscall return
  - LoongArch: refresh usage of sync
  - LoongArch: use 40 bits address space for user
  - LoongArch: Support loader and kernel interface V40
  - LoongArch: Enhance booting and resume compatibility
  - LoongArch: Remove redudant csr save/restore
  - LoongArch: Support Power Manager
  - irqchip/loongson-liointc: Set different isr for differnt core
  - platform: Support loongson laptop generic driver
  - LoongArch: Adapted SECTION_SIZE_BITS with page size
  - ACPI: Support ACPI_MACHINE_WIDTH for 64
  - spi: loongson: Add LS7A spi driver support
  - i2c: loongson: Add LS7A i2c driver support
  - LoongArch: Call irq_find_matching_fwnode get irq domain
  - irqchip/ACPI: Introduce ACPI_IRQ_MODEL_LPIC for LoongArch
  - gpio: loongson: Add 3A/3B/3C/7A gpio dirver support
  - rtc: ls2x: Add support for the Loongson-2K/LS7A RTC
  - LoongArch: convert p v s cache to l1 l2 l3 format
  - cpufreq: Add cpufreq driver for LoongArch
  - LoongArch: Fix section mismatch due to acpi_os_ioremap()
  - LoongArch: Add vector extensions support
  - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
  - openeuler: pci: workaround multiple functions can be assigned to only one VM


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.86.0.110
changelog:
  - !512 Backport CVEs and bugfixes
  - livepatch/core: Fix hungtask against cpu hotplug on x86
  - livepatch: Narrow the scope of the 'text_mutex' lock
  - livepatch: Cleanup klp_mem_prepare()
  - seccomp: Move copy_seccomp() to no failure path.
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
  - ftrace: Fix invalid address access in lookup_rec() when index is 0
  - mm: optimize do_wp_page() for fresh pages in local LRU pagevecs
  - mm: optimize do_wp_page() for exclusive pages in the swapcache
  - tipc: add an extra conn_get in tipc_conn_alloc
  - tipc: set con sock in tipc_conn_alloc
  - ext4: fix another off-by-one fsmap error on 1k block filesystems
  - mm/vmalloc: huge vmalloc backing pages should be split rather than compound
  - HID: asus: use spinlock to safely schedule workers
  - HID: asus: use spinlock to protect concurrent accesses
  - HID: asus: Remove check for same LED brightness on set
  - jbd2: fix data missing when reusing bh which is ready to be checkpointed
  - !502 [sync] PR-476: LoongArch: fix failed to boot
  - !498 [sync] PR-479: LoongArch: update network related default config
  - !496 [sync] PR-448: LoongArch: fix some pci problems
  - LoongArch: Initialize screen_info variable
  - LoongArch: Fixed EIOINTC structure members
  - LoongArch: Fix virtual machine startup error
  - loongarch/kvm: ls7a add iocsrw emulation
  - LoongArch: fix signal handler name changed
  - LoongArch: defconfig: update network configurations
  - LoongArch: pci root bridige set acpi companion only when not acpi_disabled.
  - pci: fix X server auto probe fail when both ast and etnaviv drm present
  - LS7A2000: PCIE: Fixup GPU card error
  - pci/quirks: ls7a2000: fix pm transition of devices under pcie port
  - LoongArch: Fixed some pcie card not scanning properly
  - pci: fix kabi error caused by pm_suspend_target_state
  - PCI: PM: Fix pcie mrrs restoring
  - PCI: Check if the pci controller can use both CFG0 and CFG1 mode to access configuration space
  - PCI: Check if entry->offset already exist for mem resource


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.87.0.111
changelog:
  - !529 Backport CVEs and bugfixes
  - block: fix use-after-free of q->q_usage_counter
  - block: move q_usage_counter release into blk_queue_release
  - Revert "block: fix null-deref in percpu_ref_put"
  - mm: compaction: avoid possible NULL pointer dereference in kcompactd_cpu_online
  - md/raid6: Fix the problem of repeatedly applying for memory in raid5_read_one_chunk
  - xfs, iomap: limit individual ioend chain lengths in writeback
  - net/sched: tcindex: search key must be 16 bits
  - net/sched: tcindex: update imperfect hash filters respecting rcu
  - tty: fix out-of-bounds access in tty_driver_lookup_tty()
  - fs/ntfs3: Validate resident attribute name
  - ima: Fix memory leakage in ima_store_template
  - Revert "mm/vmalloc: huge vmalloc backing pages should be split rather than compound"
  - coredump: fix kabi broken in struct coredump_params
  - coredump: Use the vma snapshot in fill_files_note
  - coredump/elf: Pass coredump_params into fill_note_info
  - coredump: Remove the WARN_ON in dump_vma_snapshot
  - coredump: Snapshot the vmas in do_coredump
  - mm/swapfile: add cond_resched() in get_swap_pages()
  - mm: slince possible data races about pgdat->kswapd
  - mm: fix null-ptr-deref in kswapd_is_running()
  - fs/ntfs3: Validate MFT flags before replaying logs
  - fs/ntfs3: Validate attribute name offset
  - bpf: Fixes possible race in update_prog_stats() for 32bit arches
  - bpf: Avoid races in __bpf_prog_run() for 32bit arches
  - ext4: make sure fs error flag setted before clear journal error
  - ext4: commit super block if fs record error when journal record without error
  - af_unix: Get user_ns from in_skb in unix_diag_get_exact().
  - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  - arm64: errata: Remove AES hwcap for COMPAT tasks
  - ARM: 9206/1: A9: Add ARM ERRATA 764319 workaround (Updated)
  - kernel: Initialize cpumask before parsing
  - softirq: Don't try waking ksoftirqd before it has been spawned
  - bpf: Prevent decl_tag from being referenced in func_proto arg
  - bpf: Skip task with pid=1 in send_signal_common()
  - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()
  - !460 Backport CVEs and bugfixes
  - !517 [sync] PR-510: LoongArch: fix dual-bridge machine can not work
  - !516 [sync] PR-509: Loongson: fix 7a2000 gpu driver can not work
  - irqchip/loongson: Fix syscore ops registration
  - irqchip/loongarch: Fix some issues of irq controllers
  - drm/loongson: using hdmi hot plug status register
  - malidp: Fix NULL vs IS_ERR() checking


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.89.0.113
changelog:
  - !550 anolis: bond: broadcast ARP or ND messages to all slaves
  - !561 Backport CVEs and bugfixes
  - !560 [sync] PR-539: LoongArch: fix compile warnning of drm/loongson driver
  - net: sched: Use struct_size() helper in kvmalloc()
  - net_sched: Use struct_size() and flex_array_size() helpers
  - ext4: dio take shared inode lock when overwriting preallocated blocks
  - ext4: fix race between writepages and remount
  - clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
  - kvm: initialize all of the kvm_debugregs structure before sending it to userspace
  - nvme: use nvme_cid to generate command_id in trace event
  - xfs: don't report reserved bnobt space as available
  - xfs: don't include bnobt blocks when reserving free block pool
  - xfs: set aside allocation btree blocks from block reservation
  - xfs: introduce in-core global counter of allocbt blocks
  - act_mirred: use the backlog for nested calls to mirred ingress
  - net/sched: act_mirred: better wording on protection against excessive stack growth
  - net/sched: act_mirred: refactor the handle of xmit
  - scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
  - anolis: bond: broadcast ARP or ND messages to all slaves
  - !558 net: hns3: modify reset delay time to avoid configuration timeout
  - drm/loongson: fix compile warnning
  - net: hns3: modify reset delay time to avoid configuration timeout


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.90.0.114
changelog:
  - !574 Backport CVEs and bugfixes
  - driver core: Fix lockdep warning on wfs_lock
  - driver core: platform: Add extra error check in devm_platform_get_irqs_affinity()
  - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
  - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
  - ubi: ensure that VID header offset + VID header size <= alloc, size
  - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct()
  - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach
  - ring-buffer: Fix race while reader and writer are on the same page
  - loop: Add parm check in loop_control_ioctl
  - ext4: Fix i_disksize exceeding i_size problem in paritally written case
  - ext4: ext4_put_super: Remove redundant checking for 'sbi->s_journal_bdev'
  - ext4: Fix reusing stale buffer heads from last failed mounting
  - btrfs: fix race between quota disable and quota assign ioctls
  - dm crypt: add cond_resched() to dmcrypt_write()
  - xfs: don't leak memory when attr fork loading fails
  - xfs: delete unnecessary NULL checks
  - xfs: replace inode fork size macros with functions
  - xfs: replace XFS_IFORK_Q with a proper predicate function
  - xfs: use XFS_IFORK_Q to determine the presence of an xattr fork
  - xfs: make inode attribute forks a permanent part of struct xfs_inode
  - xfs: convert XFS_IFORK_PTR to a static inline helper
  - xfs: don't reuse busy extents on extent trim
  - fs/xfs: convert comma to semicolon
  - xfs: xfs_ail_push_all_sync() stalls when racing with updates
  - xfs: check buffer pin state after locking in delwri_submit
  - xfs: log worker needs to start before intent/unlink recovery


author: xiechengliang <xiechengliang1@huawei.com> - 1:1.33.1-12
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386


author: BruceGW <gyl93216@163.com> - 1.18.1-5
changelog:
  - Type:CVE
  - CVE:CVE-2023-32067 CVE-2023-31130
  - SUG:restart
  - DESC:fix CVE-2023-32067 CVE-2023-31130


author: chengyechun <chengyechun1@huawei.com> - 4.1-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:client:check for stdout errors
         ntp:fix initial poll to follow non-LAN minimum


author: chenyanpanHW <chenyanpan@huawei.com> - 6.12-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 21.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add Requires cloud-init-hotplugd.socket in cloud-init-hotplugd.service file


author: Lv Ying <lvying6@huawei.com> - 21.4-14
changelog:
  - backport upstream patches:
  https://github.com/canonical/cloud-init/commit/fa53c7f4086f5937bc9bd328dba9f91ca73b6614
  https://github.com/canonical/cloud-init/commit/9c7502a801763520639c66125eb373123d1e4f44
  https://github.com/canonical/cloud-init/commit/2e17a0d626d41147b7d0822013e80179b3a81ee4
  https://github.com/canonical/cloud-init/commit/9f0efc474ea430c75cd0abec3e2da719d4934346
  https://github.com/canonical/cloud-init/commit/bb414c7866c4728b2105e84f7b426ab81cc4bf4d
  https://github.com/canonical/cloud-init/commit/9cbd94dd57112083856ead0e0ff724e9d1c1f714
  https://github.com/canonical/cloud-init/commit/6d817e94beb404d3917bf973bcb728aa6cc22ffe
  https://github.com/canonical/cloud-init/commit/0450a1faff9e5095e6da0865916501772b3972e9


author: shixuantong <shixuantong1@huawei.com> - 21.4-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Do not generate dsa and ed25519 key types when crypto FIPS mode is enabled
         Don't fail if IB and Ethernet devices 'collide'
         Fix default route rendering on v2 ipv6
         Fix IPv6 netmask format for sysconfig
         Fix KeyError when rendering sysconfig IPv6 routes
         Fix network v2 metric rendering
         Ignore duplicate macs from mscc_felix and fsl_enetc
         macs: ignore duplicate MAC for devs with driver driver qmi_wwan
         net/dhcp: catch dhclient failures and raise NoDHCPLeaseError
         net: skip duplicate mac check for netvsc nic and its VF
         Set ownership for new folders in Write Files Module
         cc_ubuntu_advantage: Redact token from logs
         Do not silently ignore integer uid
         Ensure network ready before cloud-init service runs
         Fix exception when no activator found
         Fix KeyError in iproute pformat
         Handle non existent ca-cert-config situation


author: shixuantong <shixuantong1@huawei.com> - 21.4-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:cc_mounts: Fix swapfile not working on btrfs
         cc_mounts: Use fallocate to create swapfile on btrfs
         collect-logs fix memory usage


author: yangyanchao <yangyanchao6@huawei.com> 1.2.0-106
changelog:
  - Type:requirement
  - ID:NA
  - CVE:NA
  - SUG:restart
  - DESC:containerd:vendor:add some symbol to support riscv


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-107
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix, include
         1. check task list to avoid unnecessary cleanup.
         2. fix dead loop
         3. cleanup dangling shim by brand new context
         4. fix potential panic for task in unknown state


author: songyanting<songyanting@huawei.com> - 1.2.0-300
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix, include
         1. add check in spec
         2. kill container init process if runc start returns error
         3. fix containerd-shim residual when kill containerd durin
         4. fix deadlock on commit error
         5. backport upstream & ttrpc patches
         6. fix exec event missing due to pid reuse
         7. fix dm left when pause container and kill shim
         8. add CGO security build options
         9. fix start container failed with id exists
        10. drop opt package
        11. fix race access for mobySubscribed
        12. improve log for debugging
        13. reduce permission for bundle dir
        14. fix publish command wait block forever


author: Vanient<xiadanni1@huawei.com> - 1.2.0-301
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Use fs.RootPath when mounting volumes for bundle dir to fix CVE-2022-23648


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-314
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker


author: lijian<lijian2@kylinos.cn> - 1:1.5.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: liukuo<liukuo@kylinos.cn> - 1:1.5.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang cvefix: CVE-2022-32190,CVE-2022-41723,CVE-2022-32148,CVE-2023-29406,CVE-2023-39326


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 8.32-6
changelog:
  - Add Buildrequires tcl to prevent "the /usr/bin/env: 'tclsh': No such file or direcory" error during compilation.


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-10
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches


author: fuanan <fuanan3@huawei.com> - 2.13-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add 'autoconf automake' to BuildRequires to use autoreconf command


author: lixing <lixing@loongson.cn> - 10.3.1-13
changelog:
  - Type:Sync
  - ID:NA
  - SUG:NA
  - DESC:Fixup pr59063-2 link error, fixup libstdc++ pthread_join weak error


author: Peng Fan <fanpeng@loongson.cn> - 10.3.1-20
changelog:
  - Type:Sync bugfix
  - ID:NA
  - SUG:NA
  - DESC: Add SX and ASX builtin functions. Add -m[no]-relax options.


author: Peng Fan <fanpeng@loongson.cn> - 10.3.1-21
changelog:
  - Type:Sync bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix segfault with -static and change PTHREAD_ABI_BASE
  - from 2.34 to 2.36 in LoongArch.


author: wangbin <wangbin224@huawei.com> - 7.3.0-5
changelog:
  - Handle task_struct cpu member changes for kernels >= 5.16-rc1
    and delete use_system_readline_v3.patch


author: gaihuiying <eaglegai@163.com> - 4.15.3-3
changelog:
  - Type:cves
  - ID:CVE-2022-0336 CVE-2021-44142
  - SUG:NA
  - DESC:backport to fix CVE-2022-0336 CVE-2021-44142


author: xinghe <xinghe2@h-partners.com> - 4.15.3-7
changelog:
  - Type:cves
  - ID:CVE-2022-32746 CVE-2022-2031 CVE-2022-32744 CVE-2022-32742 CVE-2022-32745
  - SUG:NA
  - DESC:fix CVE-2022-32746 CVE-2022-2031 CVE-2022-32744 CVE-2022-32742 CVE-2022-32745


author: xinghe <xinghe2@h-partners.com> - 4.15.3-18
changelog:
  - Type:cves
  - ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
  - SUG:NA
  - DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967


author: xinghe <xinghe2@h-partners.com> - 4.15.3-22
changelog:
  - Type:cves
  - ID:CVE-2022-2127 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: xinghe <xinghe2@h-partners.com> - 4.15.3-23
changelog:
  - Type:cves
  - ID:CVE-2023-4154 CVE-2023-42669 CVE-2023-4091
  - SUG:NA
  - DESC:fix CVE-2023-4154 CVE-2023-42669 CVE-2023-4091


author: gaihuiying <gaihuiying1@huawei.com> - 4.12.5-5
changelog:
  - Type:cves
  - ID:CVE-2020-27840 CVE-2021-20277 CVE-2021-20254
  - SUG:NA
  - DESC:fix CVE-2020-27840 CVE-2021-20277 CVE-2021-20254


author: gaihuiying <eaglegai@163.com> - 7.79.1-4
changelog:
  - Type:cves
  - CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
  - SUG:NA
  - DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776


author: gaoxingwang <gaoxingwang1@huawei.com> - 7.79.1-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix dict and neg telnet server start fail in upstream testcase


author: gaihuiying <eaglegai@163.com> - 7.79.1-7
changelog:
  - Type:cves
  - CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
  - SUG:NA
  - DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208


author: gaihuiying <eaglegai@163.com> - 7.79.1-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix build error when add --disable-http-auth configure option


author: yanglu <yanglu72@h-partners.com> - 7.79.1-12
changelog:
  - Type:cves
  - CVE:CVE-2022-32221 CVE-2022-42915 CVE-2022-42916
  - SUG:NA
  - DESC:fix CVE-2022-32221 CVE-2022-42915 CVE-2022-42916


author: xinghe <xinghe2@h-partners.com> - 7.79.1-14
changelog:
  - Type:cves
  - CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
  - SUG:NA
  - DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916


author: xingwei <xingwei14@h-partners.com> - 7.79.1-15
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-26
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tool_progress: avoid division by zero in parallel progress
         digest: pass over leading spaces in qop values
         Curl_close: call Curl_resolver_cancel to avoid memory-leak
         easy: fix the altsvc init for curl_easy_duphandle
         libssh: if sftp_init fails, don't get the sftp error code
         url: move back the IDN conversion of proxy names
         ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
         http: fix the ::1 comparison for IPv6 localhost for cookies
         multi: free up more data earleier in DONE
         curl_path: bring back support for SFTP path ending in /~
         transfer: refuse POSTFIELDS + RESUME_FROM combo
         tool_operate: refuse (--data or --form) and --continue-at
         http: free the url before storing a new copy
         url: fix null dispname for --connect-to option
         vtls: avoid memory leak if sha256 call fails
         urlapi: make sure zoneid is also duplicated in curl_url_dup


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:transfer: also stop the sending on closed connection
         openssl: avoid BN_num_bits() NULL pointer derefs


author: yanglu <yanglu72@huawei.com> - 7.77.0-3
changelog:
  - Type:CVE
  - CVE:CVE-2021-22945 CVE-2021-22946 CVE-2021-22947
  - SUG:NA
  - DESC:fix CVE-2021-22945 CVE-2021-22946CVE-2021-22947


author: licunlong<licunlong1@huawei.com> - 29-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:don't enable/disable dbus.socket when install/uninstall dbus-broker.


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: zhoushuiqing <zhoushuiqing2@huawei.com> - 3.6.3-2
changelog:
  - Type:CVE
  - CVE:CVE-2005-1849,CVE-2016-9840,CVE-2016-9841,CVE-2016-9843,CVE-2018-25032,CVE-2022-37434
  - SUG:NA
  - DESC:backport patchs fix zlib cves: CVE-2005-1849 CVE-2016-9840
         CVE-2016-9841 CVE-2016-9843 CVE-2018-25032 CVE-2022-37434
         backport-fix-CVE-2005-1849.patch
         backport-fix-CVE-2016-9840.patch
         backport-fix-CVE-2016-9841.patch
         backport-fix-CVE-2016-9843.patch
         backport-fix-CVE-2018-25032.patch
         backport-fix-CVE-2022-37434-1.patch
         backport-fix-CVE-2022-37434-2.patch


author: renmingshuai <renmingshuai@huawei.com> - 4.4.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:remove build require bind-export-devel and add buildin bind


author: renmingshuai <renmingshuai@huawei.com> - 4.4.2-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add a test case for PXE to support ipv6
         support lease time config for ipv6


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-14
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC:Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-15
changelog:
  - Type:cves
  - ID:CVE-2022-2928,CVE-2022-2929
  - SUG:restart
  - DESC:Fix CVE-2022-2928 and CVE-2022-2929


author: gaihuiying <gaihuiying1@huawei.com> - 4.2.23-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix errors when use "yum module remove --all per:common" command
         fix test test_mode_tty failed


author: gaihuiying <gaihuiying1@huawei.com> - 4.2.23-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove recommends rpm-plugins-systemd-inhibit
         backport community patches and fix CVE-2021-3445
         delete duplicate python3-libdnf dependency


author: sunhai <sunhai10@huawei.com> - 4.0.24-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:download: skip downloading weak deps when install_weak_deps=False


author: liulong <liulong20@huawei.com> - 2.82-3
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2020-25681 CVE-2020-25682 CVE-2020-25683 CVE-2020-25684 CVE-2020-25685 CVE-2020-25686 CVE-2020-25687


author: zengwefeng <zwfeng@huawei.com> - 2.82-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add missing check for NULL return from allocate_rfd
         Fix DNS reply when asking for DNSSEC


author: gaihuiying <gaihuiying1@huawei.com> - 2.82-7
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: Handle caching with EDNS options better
          Fix to 75e2f0aec33e58ef5b8d4d107d821c215a52827c
          Fix for 12af2b171de0d678d98583e2190789e544440e02
          Fix problem with DNS retries in 2.83 2.84 version
          Simplify preceding fix
          Update to new struct frec fields in conntrack code
          Use the values of min port and max port in TCP connection
          Correct occasional bind dynamic synchronization
          Move fd into frec_src fixes 15b60ddf935a531269bb8c68
          fix CVE-2021-3448


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-114
changelog:
  - Type:bugfix
  - CVE:CVE-2021-21284,CVE-2021-21285
  - SUG:NA
  - DESC:sync bugfix, include:
         1.fix execCommands leak in health-check
         2.check containerd pid before kill it
         3.fix CVE-2021-21284
         4.fix CVE-2021-21285


author: chenjiankun<chenjiankun1@huawei.com> - 18.09.0-308
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Add an ExitPid field for State struct to record exit process id


author: chenjiankun<chenjiankun1@huawei.com> - 18.09.0-312
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change runc original install location (/usr/local/bin --> /usr/bin) to fix compile problem


author: zhongjiawei<zhongjiawei1@huawei.com> - 18.09.0-323
changelog:
  - Type:CVE
  - CVE:CVE-2023-28840,CVE-2023-28841,CVE-2023-28842
  - SUG:NA
  - DESC:fix CVE-2023-28840,CVE-2023-28841,CVE-2023-28842


author: chenjiankun<chenjiankun1@huawei.com> - 18.09.0-327
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:repalce unix.Rmdir with os.RemoveAll when remove mount point dir


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-312
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ignore error when force deleting a non-existing container and delete invaild logs


author: Huisong Li <lihuisong@huawei.com> - 21.11-19
changelog:
  Sync some patches for hns3 PMD, telemetry and testpmd. And main
    modifications are as follows:
     - backport some bugfixes for hns3
     - revert Tx performance optimization for hns3
     - add Rx/Tx descriptor dump feature for hns3
     - refactor some RSS commands for testpmd
     - add ethdev telemetry private dump
     - add dmadev telemetry
     - sync telemetry lib


author: jiangheng <jiangheng14@huawei.com> - 21.11-20
changelog:
  - gro: trim tail padding bytes
  - gro: check payload length after trim
  - gro: fix chain index for more than 2 packets


author: chenjiji <chenjiji09@163.com> - 21.11-21
changelog:
  Sync some patches for bonding PMD and testpmd. And patchs 
    are as follows:
     - net/bonding: fix Tx hash for TCP
     - net/bonding: add link speeds configuration
     - net/bonding: call Tx prepare before Tx burst
     - net/bonding: fix MTU set for slaves
     - app/testpmd: remove jumbo offload related code


author: chenjiji <chenjiji09@163.com> - 21.11-25
changelog:
  Sync some patches for bonding PMD and testpmd. And patchs  
    are as follows:
     - app/testpmd: revert MAC update in checksum forwarding
     - net/bonding: fix bond4 drop valid MAC packets
     - net/bonding: fix slave device Rx/Tx offload configuration
     - app/testpmd: fix MAC header in csum forward engine
     - app/testpmd: update bond port configurations when add slave
     - app/testpmd: fix GENEVE parsing in checksum mode
     - net: add UDP/TCP checksum in mbuf segments
     - app/testpmd: add SW L4 checksum in multi-segments
     - app/testpmd: fix L4 checksum in multi-segments
     - net/bonding: fix mbuf fast free handling


author: chenjiji <chenjiji09@163.com> - 21.11-26
changelog:
  proc-info adds dumping the following features:
     - dpdk version
     - firmware version
     - RSS RETA
     - module eeprom information
     - Rx/Tx burst mode 
     - Rx/Tx descriptor


author: chenjiji <chenjiji09@163.com> - 21.11-33
changelog:
  refactor Rc/Tx function of hns3 PMD
   And patchs are as follows:
    - net/hns3: fix burst mode query with dummy function
    - net/hns3: add debug info for Rx/Tx dummy function
    - net/hns3: remove debug condition for Tx prepare
    - net/hns3: separate Tx prepare from getting Tx function
    - net/hns3: make getting Tx function static
    - net/hns3: extract common functions to set Rx/Tx


author: chenjiji <chenjiji09@163.com> - 21.11-34
changelog:
  Support flow rule keeping capability for hns3 PMD and
   testpmd. Patchs are as follow:
    - net/hns3: declare flow rule keeping capability
    - app/testpmd: add --disable-flow-flush option


author: chenjiji <chenjiji09@163.com> - 21.11-35
changelog:
  Fix some RSS bugs and reimplement hash flow function for hns3:
    - fix some RSS bugs and optimize RSS codes for hns3
    - reimplement hash flow function for hns3 to satisfy the
      mainstream usage of rte flow hash in the community


author: chenjiji <chenjiji09@163.com> - 21.11-36
changelog:
  Fix a m_buf pool was not freed bugs for test and support
   CPPC cpufreq for l3fwd-power. Patchs are as follow:
    - test/mbuf: fix mbuf reset test
    - examples/l3fwd-power: support CPPC cpufreq


author: chenjiji <chenjiji09@163.com> - 21.11-39
changelog:
  Sync some patchs from upstreaming branch and modifies
   are as follow:
   1. Add private dump for bonding, virtio and vhost.
   2. Support LACP info dump for bonding.
   3. Display RSS hash key of flow rule in testpmd.


author: chenjiji <chenjiji09@163.com> - 21.11-41
changelog:
  - Telemetry: support display as hexadecimal
   Sync some patchs from upstreaming for telemetry and modifies
   are as follow:
   1. Support dispaly integer as hexadecimal.
   2. Fix data truncation for some u64 accept as int.
   3. Add JSON pretty print.


author: chenjiji <chenjiji09@163.com> - 21.11-42
changelog:
  - fix empty devargs parsing
   Sync some patchs from upstreaming and modifies are as
   follow:
   1. The rte_kvargs_process() was used to parse KV pairs, it
   also supports to parse 'only keys' type. And the callback
   function parameter 'value' is NULL when parsed 'only keys'.
   This patch fixes segment fault when parse input args with
   'only keys'.
   2. The MAP_FAILED should be used to determine whether the
   mapping is successful but not NULL. This patch fix it.


author: chenjiji <chenjiji09@163.com> - 21.11-43
changelog:
  Sync some patchs from upstreaming for hns3 pmd and modifies
   are as follow:
   1. support flow control autoneg for fiber port
   2. support simplify hardware checksum offloading
   3. support dump media type
   4. add Tx Rx descriptor logs
   5. fix Rx multiple firmware reset interrupts
   6. ethdev: fix one address occupies two entries in MAC addrs


author: chenjiji <chenjiji09@163.com> - 21.11-55
changelog:
  Sync some patchs from upstreaming about add FDIR VLAN match
   mode runtime config and fix doc format for hns3 pmd. Patchs
   are as follow:
   - doc: unify sections of networking drivers guide
   - net/hns3: delete duplicate macro definition
   - net/hns3: add FDIR VLAN match mode runtime config
   - doc: fix kernel patch link in hns3 guide
   - doc: fix syntax in hns3 guide
   - doc: fix number of leading spaces in hns3 guide


author: huangdengdui <huangdengui@huawei.com> - 21.11-58
changelog:
  Sync some patchs from upstreaming and modifies are as follow:
   - maintainers: update for hns3 driver
   - app/testpmd: add command to flush multicast MAC addresses
   - app/testpmd: fix help string
   - app/testpmd: fix multicast address pool leak
   - net/hns3: optimize SVE Rx performance
   - net/hns3: optimize rearm mbuf for SVE Rx
   - net/hns3: optimize free mbuf for SVE Tx
   - net/hns3: fix order in NEON Rx
   - net/hns3: fix traffic management dump text alignment
   - net/hns3: fix traffic management thread safety
   - net/hns3: fix flushing multicast MAC address
   - net/hns3: fix error code for multicast resource
   - net/hns3: fix VF default MAC modified when set failed
   - net/hns3: fix index to look up table in NEON Rx
   - net/hns3: fix non-zero weight for disabled TC
   - config/arm: add HiSilicon HIP10


author: huangdengdui <huangdengui@huawei.com> - 21.11-59
changelog:
  Sync some patchs from upstreaming and modifies are as follow:
   - net/hns3: fix mailbox sync
   - net/hns3: report maximum buffer size
   - ethdev: add maximum Rx buffer size
   - app/procinfo: show RSS hash algorithm
   - ethdev: get RSS algorithm names
   - app/procinfo: adjust format of RSS info
   - app/procinfo: fix RSS info
   - net/hns3: support setting and querying RSS hash function
   - net/hns3: report RSS hash algorithms capability
   - ethdev: set and query RSS hash algorithm
   - ethdev: clarify RSS related fields usage
   - net/hns3: fix uninitialized hash algo value
   - net/hns3: keep set/get algo key functions local
   - net/hns3: fix some error logs
   - net/hns3: fix some return values
   - net/hns3: fix LRO offload to report
   - net/hns3: fix setting DCB capability
   - app/testpmd: ease configuring all offloads
   - net/hns3: refactor interrupt state query
   - net/hns3: fix IMP or global reset
   - net/hns3: fix multiple reset detected log
   - net/hns3: remove reset log in secondary
   - net/hns3: fix double stats for IMP and global reset
   - net/hns3: fix crash for NEON and SVE
   - net/hns3: fix unchecked Rx free threshold
   - net/hns3: fix typo in function name
   - net/hns3: fix build warning
   - telemetry: fix repeat display when callback don't init dict


author: huangdengdui <huangdengui@huawei.com> - 21.11-60
changelog:
  Sync some bugfix from upstreaming about hns3 reset and modifies
   are as follow:
   - net/hns3: fix VF reset handler interruption
   - net/hns3: fix reset event status
   - net/hns3: fix ignored reset event


author: huangdengdui <huangdengui@huawei.com> - 21.11-61
changelog:
  Sync some bugfix from upstreaming about testpmd and doc, modifies
   are as follow:
   - support set RSS hash algorithm
   - ethdev: add new API to get RSS hash algorithm by name
   - doc: fix description of RSS features
   - doc: fix RSS flow description in hns3 guide
   - doc: update features in hns3 guide
   - doc: fix hns3 build option about max queue number
   - app/testpmd: check port and queue Rx/Tx offloads
   - app/testpmd: fix Tx offload command
   - app/testpmd: allow offload config for all ports
   - app/testpmd: fix tunnel TSO configuration
   - app/testpmd: add explicit check for tunnel TSO
   - app/testpmd: fix tunnel TSO capability check
   - app/testpmd: remove useless check in TSO command


author: huangdengdui <huangdengui@huawei.com> - 21.11-62
changelog:
  Sync some patches for hns3 about refactor mailbox and bugfix, modifies
   are as follow:
   - net/hns3: fix reset level comparison
   - net/hns3: fix disable command with firmware
   - net/hns3: fix VF multiple count on one reset
   - net/hns3: refactor handle mailbox function
   - net/hns3: refactor send mailbox function
   - net/hns3: refactor PF mailbox message struct
   - net/hns3: refactor VF mailbox message struct


author: huyubiao<huyubiao@huawei.com> - 055-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add backport-fix-fs-lib-remove-quoting-form-the-first-argument-of.patch
         backport-fix-dracut.sh-exit-if-resolving-executable-dependenc.patch
         backport-fix-dracut-install-protect-against-broken-links-poin.patch


author: panxiaohe <panxiaohe@huawei.com> - 050-4
changelog:
  - [add] backport patches from upstream
    backport-fix-always-use-mkdir-p.patch
    backport-fix-dracut.sh-omission-is-an-addition-to-other-omiss.patch


author: gaihuiying <eaglegai@163.com> - 2.0.11-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-config file access permisson
         fix ebt_print_error for prints null


author: xinghe <xinghe2@h-partners.com> - 2.0.11-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: yexiao<yexiao7@huawei.com> - 202011-14
changelog:
  - fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727


author: yexiao<yexiao7@huawei.com> - 202011-16
changelog:
  - fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: Jinhua Cao <caojinhua1@huawei.com> - 202002-11
changelog:
  - BaseTools: fix ucs-2 lookup on python3.9
  - BaseTools: Work around array.array.tostring() removal in python3.9


author: chenyanpanHW <chenyanpan@huawei.com> - 4-4
changelog:
  - DESC: delete -S git from 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "efi-rpm-macros-4 base"
  , and delete BuildRequires git


author: gaihuiying <gaihuiying1@huawei.com> - 4-5
changelog:
  - DESC:revert "delete -S git from 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "efi-rpm-macros-4 base"
  , and delete BuildRequires git"


author: zoulin <zoulin13@h-partners.com> - 0.185-4
changelog:
  - remove rpath and runpath of exec files and libraries
  - change the permission of eu-* to 750
  - add elfutils-extra and move eu-nm from elfutils to elfutils-extra


author: panxiaohe <panxh.life@foxmail.com> - 0.185-10
changelog:
  - Get instance correctly for eu-ar -N option
  - Use make macros
  - Use upstream patch for no stdin flag


author: fuanan <fuanan3@h-partners.com> - 0.185-11
changelog:
  - Fix "/usr/lib64/libdebuginfod.so.1" not found when uninstall elfutils-debuginfod-client-devel
  - Fix Obsoletes in spec


author: hubin <hubin73@huawei.com> - 0.185-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change permission to 750 and move debug tools into extra package


author: yangcheng <yangcheng87@huawei.com> - 1:27.2-3
changelog:
  - DESC: Fix the upgrade error caused by the info file in the emacs-help software package being repackaged


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29464 CVE-2021-29463 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29464,CVE-2021-29463,CVE-2021-29473


author: wangjie <wangjie375@huawei.com> - 2.4.1-2
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.4.1-4
changelog:
  - Type:CVE
  - ID:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: wangkai <13474090681@163.com> - 102.13.0-1
changelog:
  - Update to 102.13.0
  - Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
  - Remove unused patch


author: wangkai <13474090681@163.com> - 102.14.0-1
changelog:
  - Update to 102.14.0
  - Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056


author: lvfei <lvfei@kylinos.cn> - 102.15.0-1
changelog:
  - Update to 102.15.0
  - Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584


author: wangxiao <wangxiao65@huawei.com> - 79.0-4
changelog:
  - Fix CVE-2020-15664 CVE-2020-15665 CVE-2020-15666 CVE-2020-15667
    CVE-2020-15668 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678


author: wangxiao <wangxiao65@huawei.com> - 79.0-5
changelog:
  - Fix CVE-2020-15969 CVE-2020-15999 CVE-2020-16012 CVE-2020-26951
    CVE-2020-26953 CVE-2020-26956 CVE-2020-26957 CVE-2020-26958
    CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26963
    CVE-2020-26965 CVE-2020-25966 CVE-2020-26967


author: baizhonggui <baizhonggui@huawei.com> - 3.0.21-7
changelog:
  - Fix building error: configure: error: no acceptable C compiler found in $PATH
  - Add gcc in BuildRequires


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: jiangheng <jiangheng14@huawei.com> - 1.0.1-10
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:update readme
         fix some bugs
         refactor pkt read send to improve performance
         refactoe kernle event to improve performanc


author: wuchangsheng <wuchangsheng2@huawei.com> - 1.0.1-40
changelog:
  - add dfx rcv_nxt info
    mbuf private cache line align
    send pkts index bug fix
    free recv pkts in main loop


author: jiangheng12 <jiangheng14@huawei.com> - 1.0.1-56
changelog:
  - fix build err with dpdk-21.11
  - fix config flow rule race
  - update lstack.Makefile
  - add socket check before write it
  - optimize do_close
  - set kni_switch valid only in primary process
  - fix build err on select_path
  - optimite select_path and pbuf_take
  - check primary process idx and secondary lstack num
  - revert select_thread_path and optimize app thread when sendmsg
  - do not transfer broadcast arp pkts to other process


author: jiangheng12 <jiangheng14@huawei.com> - 1.0.1-68
changelog:
  - check return value of hugepage_init to avoid coredump when hugepage memory is insufficient
  - fix core dump when slave mac failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-17
changelog:
  - support vlan offload
  - add vlan_id in netif
  - dfx: add tcp exception and kernel event statistics
  - stack: fix coredump caused by gazelleclt in rtc mode when stack num defined is greater than the hijacked thread num
  - add tcp faste timer cnt
  - dfx: support bond get dpdk xstats
  - update src/ltran/ltran_param.c. 规范679行的报错日志信息，将“,”之后的“Please”修正为“please”
  - ltran support vlan
  - cfg: rm ipv6_enable
  - wrap: fix connect wrong port after addr bind two ports
  - add gazelle log
  - PRE_LOG: modify log info while there are repeated items in conf file
  - add gazelle log


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-18
changelog:
  - Fixed an issue where no packet is sent or received when UDP traffic is sent
  - support show nic offload and features
  - log: optimize lstack log
  - gazellectl add connect para
  - dfx: fix 'gazellectl lstack show ip' failed
  - The call stack is not printed in the proactive exit scenario.
  - dfx: gazellectl -c support ipv6
  - 1.solve the problem of 1w connection not being able to ping 2.add debug info : rpc_mempool availd size
  - wrap: support shutdown
  - add struct gz_addr_t
  - fix coredump because of addr null in lwip_fill_sendring
  - fix compilation error
  - fix coredump because sock closed before send data fully
  - gazellectl: fix gazellectl lstack show 1 -r error


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-19
changelog:
  - fix EPOLLIN event error
  - optimize gazelle exit process 1. close all fds 2. lstack thread exits, then gazelle process exits
  - mod unix time stamp to local time
  - fix close can't exit
  - add keep-alive info
  - dfx: fix kernel_events stat


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-22
changelog:
  - fix rte_ring_create/free time consuming
  - use default nonblock mode
  - fix func separate_str_to_array overflow problem
  - CFG:fix check func strdup return value is NULL
  - fix gazellectl -c msg error
  - sigaction: fix deprecated signal flags
  - fix alloc not free
  - optimize shutdown exit process


author: fuanan <fuanan3@h-partners.com> - 2.33.0-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch


author: fuanan <fuanan3@h-partners.com> - 2.33.0-9
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.33.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.33.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.33.0-12
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: yang_zhuang_zhuang <yangzhuangzhuang1@huawei.com> - 2.27.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolved the problem that a failure message is displayed when the git-daemon package is uninstalled


author: panxiaohe <panxiaohe@huawei.com> - 2.30.0-4
changelog:
  - Fix CVE-2021-29468
  - Add gcc and gettext to BuildRequires
    - necessary for building and msgfmt command


author: weijin deng <weijin.deng@turbolinux.com.cn> - 2.68.1-10
changelog:
  - Type:bugfix
  - DESC:solve glib2 enable "glib2_debug" option causes gnome-calendar reopen
         coredumped in gtk3's _gtk_widget_get_toplevel()


author: yanan <yanan@huawei.com> - 2.68.1-12
changelog:
  - Type:bugfix
  - DESC:fix issues found by svace static code analyzer
         fix segfault,memory leak,EOF,arguments leak


author: shixuantong <shixuantong1@huawei.com> - 2.34-102
changelog:
  - elf: Do not completely clear reused namespace in dlmopen (bug 29600)
  - elf: Remove allocate use on _dl_debug_printf
  - elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
  - Fix OOB read in stdlib thousand grouping parsing [BZ#29727]


author: wanghongliang <wanghongliang@loongson.cn> - 2.34-105
changelog:
  - LoongArch Port
  - Add login-Add-back-libutil-as-an-empty-library.patch from upstream
    to fix libutil build error.
  - Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
    to fix memory bug
  - After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
  - Left some test fails in testsuite_whitelist.


author: Xue Liu <liuxue@loongson.cn> - 2.34-106
changelog:
  - LoongArch: Optimize some string functions including memcpy, memmove,
    memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.


author: Yang Yanchao <yangyanchao6@huawei.com> - 2.34-109
changelog:
  - Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
    versions, this symbol is required to keep the previous items compatible.


author: Lv Ying <lvying6@huawei.com> - 2.34-112
changelog:
  - elf/ld.so: ld.so mmap shared object use hugepage new feature and bugfix:
    - feature: support HUGEPAGE_PROBE + hugepageedit mark shared object
      specified segment, just try to use hugepage to mmap specified segment
      instead of all the segments in the shared object
    - bugfix: remove _mmap_hole when ld.so mmap PT_LOAD segment try to use hugepage


author: Qingqing Li <liqingqing3@huawei.com> - 2.34-145
changelog:
  - elf: Add a way to check if tunable is set (BZ 27069)
  - malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2


author: chengyechun <chengyechun1@huawei.com> - 2.34-148
changelog:
  - Type:CVE
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: chengyechun <chengyechun1@huaiwe.com> - 2.34-149
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:nscd: Use errval, not errno to guide cache update
         nsce :Skip unusable entries in first pass in prune_cache


author: Yang Yanchao<yangyanchao6@huawei.com> - 2.34-70
changelog:
  - malloc: Add madvise support for Transparent Huge Pages
  - malloc: Add THP/madvise support for sbrk
  - malloc: Move mmap logic to its own function
  - malloc: Add Huge Page support for mmap
  - malloc: Add Huge Page support to arenas
  - malloc: Move MORECORE fallback mmap to sysmalloc_mmap_fallback
  - malloc: Enable huge page support on main arena


author: Qingqing Li <liqingqing3@huawei.com> - 2.34-74
changelog:
  - libio: Ensure output buffer for wchars bug 28828
  - libio: libio Flush onlu _IO_str_overflow must not return EOF bug 28949
  - linux: Fix _closefrom_fallback iterates until max int bug 28993


author: chenyanpanHW <chenyanpan@huawei.com> - 7.6-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-SC2081-can-t-match-globs-Use-or-grep.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-fuse-Resolve-asan-bug-in-during-receive-event-notifi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: lihaoxiang <lihaoxiang9@huawei.com> - 10.0-7
changelog:
  - fix upgrade error that /usr/share/man/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: hanchao <hanchao47@huawei.com> - 1.17.3-2
changelog:
  - Type:CVE
  - CVE:CVE-2022-28327,CVE-2022-24675
  - SUG:NA
  - DESC:fix CVE-2022-28327,CVE-2022-24675
  - fix CVE-2022-28327 CVE-2022-24675


author: hanchao <hanchao47@huawei.com> - 1.17.3-5
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC: fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
  	CVE-2022-30635,CVE-2022-30630,CVE-2022-30632,CVE-2022-28131,
  	CVE-2022-30631,CVE-2022-30629,CVE-2022-30634


author: hanchao<hanchao47@huawei.com> - 1.17.3-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: golang: modify the golang.spec to remove unnecessary files
  	from golang-help package


author: hanchao <hanchao47@huawei.com> - 1.17.3-10
changelog:
  - Type:CVE
  - CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
  - SUG:NA
  - DESC: fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879


author: hanchao <hanchao47@huawei.com> - 1.17.3-12
changelog:
  - Type:CVE
  - CVE:CVE-2022-41716
  - SUG:NA
  - DESC: remove hard code and strong dependency of git, subversion and mercurial


author: hanchao <hanchao47@huawei.com> - 1.17.3-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
  - SUG:NA
  - DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717


author: hanchao <hanchao47@huawei.com> - 1.17.3-15
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
  - SUG:NA
  - DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725


author: hanchao <hanchao47@huawei.com> - 1.17.3-16
changelog:
  - Type:CVE
  - CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
  - SUG:NA
  - DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: hanchao <hanchao63@huawei.com> - 1.17.3-18
changelog:
  - Type:CVE
  - CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
  - SUG:NA
  - DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540


author: hanchao <hanchao63@huawei.com> - 1.17.3-19
changelog:
  - Type:CVE
  - CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
  - SUG:NA
  - DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405


author: luoyujie <luoyujie5@huawei.com> - 1.17.3-23
changelog:
  - Type:CVE
  - CVE:CVE-2023-39318,CVE-2023-39319
  - SUG:NA
  - DESC:fix CVE-2023-39318 and CVE-2023-39319


author: hanchao <hanchao63@huawei.com> - 1.17.3-28
changelog:
  - Type:CVE
  - CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
  - SUG:NA
  - DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289


author: wangshuo <wangshuo@kylinos.cn> - 1.17.3-31
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 2.06-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify the file permissions of grub-boot-indeterminate.service and
         10-grub2-logind-service.conf to 644


author: sunhai <sunhai10@huawei.com> - 1:2.06-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix PXE boot in IPv6 network when paring ICMP6_ROUTE_ADVERTISE messages


author: sunhai <sunhai10@huawei.com> - 1:2.06-9
changelog:
  - Type:CVE
  - CVE:CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696
  - SUG:NA
  - DESC:adapts to the open source code for log printing
         libgcrypt: Avoid -Wsign-compare in rijndael do_setkey()
         disk/ldm: Fix resource leak
         io/gzio: Fix possible use of uninitialized variable in huft_build()
         fs/zfs/zfs: Fix possible insecure use of chunk size in zap_leaf_array_get()
         util/grub-mkfont: Fix memory leak in write_font_pf2()
         util/grub-fstest: Fix resource leaks in cmd_cmp()
         util/grub-mkrescue: Fix memory leak in write_part()
         util/grub-install-common: Fix memory leak in copy_all()
         osdep/linux: Fix md array device enumeration
         double grub x86_64-efi mm pool
         net: fix null pointer dereference when parsing ICMP6_ROUTER_ADVERTISE messages
         efinet:Correct closing of SNP protocol
         configure:Fix misspelled variable BUILD_LDFAGS -> BUILD_LDFLAGS
         fix partmap_test failure
         UEFI mode uses /boot/efi/EFI/euleros/user.cfg as password
         util/resolve: Do not read past the end of the array in read_dep_list()
         fs/affs: Fix resource leaks
         Revert iee1275/datetime: Fix off-by-1 error
         commands/search: Fix bug stopping iteration when --no-floppy is used
         mm: Temporarily disable grub_mm_debug while calling grub_vprintf() in grub_printf()
         net: Check against nb->tail in grub_netbuff_pull()
         kern/rescue_parser: Ensure that parser allocated memory is not leaked
         net/net: Fix uninitialized scalar variable
         net/arp: Fix uninitialized scalar variable
         loader/i386/pc/linux: Fix uninitialized scalar variable
         net/bootp: Fix uninitialized scalar variable
         fix CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696


author: wanglu <wanglu210@huawei.com> - 1:2.06-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tests: Disable blkid cache usage
         disk/efi/efidisk: Pass buffers with higher alignment


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
         in grub2-tools to 644


author: mengyingkun <mengyingkun@loongson.cn> - 1:2.06-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:loongarch modify the location where initrd is loaded into memory


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disk/diskfilter: Check calloc() result for NULL
         kern/buffer: Handle NULL input pointer in grub_buffer_free()
         disk/diskfilter: Don't make a RAID array with more than 1024 disks
         loader/multiboot_elfxx: Fix memory leak
         loader/linux: Ensure the newc pathname is NULL-terminated
         term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
         normal/cmdline: Fix two related integer underflows
         fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
         fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
         fs/xfs: Fix memory leaks in XFS module
         kern/file: Fix error handling in grub_file_open()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
         net/bootp: Fix unchecked return value
         fs/iso9660: Avoid reading past the entry boundary
         fs/iso9660: Incorrect check for entry boundary
         fs/iso9660: Prevent skipping CE or ST at start of continuation area
         fs/iso9660: Prevent read past the end of system use area
         fs/iso9660: Add check to prevent infinite loop
         gentpl.py: Remove .interp section from .img files
         kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
         font: Reject fonts with negative max_char_width or max_char_height
         font: Assign null_font to unknown_glyph
         font: Check return value of grub_malloc() in ascii_glyph_lookup()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-35
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:kern: Check for NULL when closing devices and disks
         kern/efi/mm: Fix use-after-free in finish boot services
         util/grub-install-common: Fix the key of the --core-compress option
         net/dns: Fix lookup error when no IPv6 is returned
         net/dns: Simplify error handling of recv_hook() function
         net/dns: Fix removal of DNS server


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-37
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fs/udf: Fix out of bounds access
         lib/relocator: Fix OOB write when initializing lo->freebytes[]
         util/grub-mount: Fix memory leak in fuse_getattr()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-38
changelog:
  - Type:CVE
  - CVE:CVE-2023-4692 CVE-2023-4693
  - SUG:NA
  - DESC:fs/ntfs: Make code more readable
         fs/ntfs: Fix an OOB read when parsing a volume label
         fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
         fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
         fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
         fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-40
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add TPCM support with ipmi channel
         change the name of module tpcm to tpcm_kunpeng
         skip verification when not loading grub.cfg


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-41
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity


author: fengtao <fengtao40@huawei.com> - 2.04-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix arm64 kernel image not aligned on 64k boundary
         fix grub.patches file format to unix


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-26
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify some file permissions
  strip kernel.exec and lnboot.image


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 2.06-1
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:update to version 2.06
         disable partial grub_func_test cases because they are not supported


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.14-17
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/guile-multilib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/guile-i18ntest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/guile-threadstest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/guile-2.0.14-gc_pkgconfig_private.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaihuiying <eaglegai@163.com> - 2.4.51-4
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-8
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-31813,CVE-2022-28614,CVE-2022-29404,CVE-2022-26377,CVE-2022-30522,CVE-2022-30556


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:change default value of HeartbeatMaxServers
         fix setting and comparison of IPs fileds
         avoid voerflow in case of indecently large session
         make ap_escape_quotes() work correctly
         fix lua_request with cast first
         Handle children killed pathologically
         mod_md do not interfere with requests if challenge type http-01


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-12
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-15
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-16
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Report an error if the AJP backend sends an invalid number of headers
         handled a negative value when parsing the config
         avoid delimiting the query with a backreference
         fix missing APLOGNO


author: zhanghao <zhanghao383@huawei.com> - 2.4.51-17
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Fix double encoding of the uri-path of the request
         Do not match the extention against possible query string
         Do not double encode slashes
         Check before forwarding that a nocanon path has not been rewriteen


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.51-21
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.48-2
changelog:
  - Type:cves
  - ID:CVE-2021-34798 CVE-2021-36160 CVE-2021-40438
  - SUG:restart
  - DESC:fix CVE-2021-34798 CVE-2021-36160 CVE-2021-40438


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.48-3
changelog:
  - Type:cves
  - ID:CVE-2021-40438 CVE-2021-39275
  - SUG:restart
  - DESC:fix CVE-2021-40438 fully and correctly
         fix CVE-2021-39275


author: zhangxiaoyu <zhangxiaoyu58@huawei.com> - 2.0.14-6
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: fix different type convert and add check to arguments


author: zhangxiaoyu <zhangxiaoyu58@huawei.com> - 2.0.14-7
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: fix type convert, add null pointer check, remove unuse macro


author: zhangxiaoyu <zhangxiaoyu58@huawei.com> - 2.0.16-4
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: invalid free default-runtime and cri-runtime after free json-confs


author: yangjiaqi <yangjiaqi16@huawei.com> - 2.0.17-10
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: remove chmod 751 permission for dirs by engine when user-remap enabled


author: yangjiaqi <yangjiaqi16@huawei.com> - 2.0.18-15
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: keep the service status unchanged after iSulad service upgrade


author: chenyanpanHW <chenyanpan@huawei.com> - 10.06-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaoxingwang <gaoxingwang1@huawei.com> - 10.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1.2-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:after executing hook scripts, remove their executable permission
         of non root users


author: sunsuwan<sunsuwan3@huawei.com> - 5.15.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lnstat: fix buffer overflow in header output 
         libnetlink: fix socket leak in rtnl_open_byptoyo
         lnstat: fix strdup leak in w argument parsing
         q_cake: allow fix buffer overflow on large labels
         tc flower: fix buffer overflow on large labels
         tc_tuil: fix parsing action control with space and sl
         tipc: fix keylen check
         fix devlink health dump command without arg
         tc: em_u32: fix offset parsing
         l2tp fix typo in AF_INET6 checksum JSON print
         ip: Fix size_columns() for very large values
         ip: Fix size_columns() invocation that passes a 32-bit quantity


author: jiangheng<jiangheng14@huawei.com> - 5.15.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bridge: fix memory leak when doing fdb get
         mptcp: fix memory leak when doing 'endpoint show'
         mptcp: fix memory leak when getting limits
         ip neigh: fix memory leak when doing 'get'
         ip address: fix memory leak when specifying device
         fix marco expansion in changelog


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add epoch version in changelog to fix check_spec_file ci failure


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 1:5.15.0-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:cancel some failed tests due to host configure for loongarch64


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ipnetns: fix fd leak with 'ip netns set'
         iproute2: optimize code and fix some mem-leak risk
         iproute_lwtunnel: fix array boundary check
         iproute_lwtunnel: fix possible use of NULL when malloc()
         m_action: fix warning of overwrite of const string
         netem: fix NULL deref on allocation failure
         nstat: fix potential NULL deref
         rdma/utils: fix some analyzer warnings
         rt_names: check for malloc() failure
         tc/prio: handle possible truncated kernel response
         tc_exec: don't dereference NULL on calloc failure
         iptunnel: detect protocol mismatch on tunnel change
         tc_util fix unitialized warning
         ipmaddr: fix dereference of NULL on malloc() failure


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
         tc: ct: Fix invalid pointer dereference
         tc_util: Change datatype for maj to avoid overflow issue
         tc_util: Fix no error return when large parent id used
         xfrm: prepare state offload logic to set mode


author: chenyanpanHW <chenyanpan@huawei.com> - 1.8.7-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/bugfix-add-check-fw-in-entry.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/tests-extensions-add-some-testcases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: duyiwei <duyiwei@kylinos.cn> - 1.8.7-5
changelog:
  - change 
  Requires(post): systemd 
  Requires(preun): systemd 
  Requires(postun): systemd 
   to 
  Requires(post): systemd 
  Requires(preun): systemd 
  Requires(postun): systemd


author: eaglegai <eaglegai@163.com> - 20210722-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport to fix no reply when ping6 from Subnet-Router anycast address


author: zengweifeng <zwfeng@huawei.com> - 20210722-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix ping2 bingding to VRF and address
          Avoid binding to non-VRF
          Fix ARP protocol field for AX.25 and NETROM


author: hanhui <hanhui15@h-partners.com> - 2.0.3-6
changelog:
  - DESC: delete gamin and openjpeg
          add rsyslog-gnutls and edk2-ovmf packages
          rename hisi_rde to hisi_trng_v2,libkae to uadk_engine


author: lujingxiao <lujingxiao@huawei.com> - 0.9.6-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:registries.toml could not be empty;hosts, resolv.conf, .dockerignore file could be empty


author: daisicheng <daisicheng@huawei.com> - 0.9.6-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:modify the Makefile and README document;add the constraints and limitations of the doc;fix the possible file leakage problem in util/cipher


author: daisicheng <daisicheng@huawei.com> - 0.9.6-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:fix the problem that the /var/lib/isula-build/storage/overlay is still existed when killing daemon


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.332-b09.0
changelog:
  - deleted Support-Git-commit-ID-in-the-SOURCE-field-of-the-release.patch
  - deleted 8167014-jdeps-failed-with-Missing-message-warn-skippen-entry.patch
  - deleted fix-wrong-commitID-in-release-file.patch
  - deleted recreate-.java_pid-file-when-deleted-for-attach-mechanism.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8194154.patch
  - modified add-missing-test-case.patch
  - add fix-make-bugs-when-git-and-hg-not-exist.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.342-b07.0
changelog:
  - del 8168926.patch
  - del 8194154.patch
  - del 8202142-jfr-event-io-TestInstrumentation-is-unstable.patch
  - del 8266187_Memory_leak_in_appendBootClassPath.patch
  - del debuginfo.diz-should-not-contain-the-path-after-unzip.patch
  - del fix-make-bugs-when-git-and-hg-not-exist.patch
  - modified 7092821-java.security.Provider.getService-is-synchro.patch
  - modified 8268819-SA-Remove-libthread_db-dependency-on-Linux.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch


author: DXwangg<wangjiawei80@huawei.com> - 1:1.8.0.352-b07.0
changelog:
  - upgrade to jdk8u352-b07
  - deleted Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
  - deleted 8173361-various-crashes-in-JvmtiExport-post_compiled.patch
  - modified Fix-compile-and-runtime-failures-for-minimal1-versio.patch
  - deleted 8173339-AArch64-Fix-minimum-stack-size-computations.patch
  - modified add-appcds-file-lock.patch
  - modified add-DumpSharedSpace-guarantee-when-create-anonymous-classes.patch
  - modified fix-appcds-s-option-AppCDSLockFile.patch
  - modified fix-windows-compile-fail.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.372-b07.2
changelog:
  - 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
  - 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
  - 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
  - 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
  - 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
  - 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
  - 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
  - 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
  - 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
  - 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
  - 0012-8301187-Memory-leaks-in-OopMapCache.patch
  - 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
  - 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
  - 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
  - 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
  - 0017-8054889-Compiler-team-s-implementation-task.patch
  - 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
  - 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
  - 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
  - 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
  - 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
  - 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
  - 0025-8220166-Performance-regression-in-deserialization.patch
  - 0026-8072070-Improve-interpreter-stack-banging.patch
  - 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
  - 0028-Display-more-information-about-the-codedump-file-pat.patch
  - 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
  - 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
  - 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
  - 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
  - 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
  - 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
  - 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
  - 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
  - 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
  - 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
  - 0040-Print-the-Exception-event-in-more-detail.patch
  - 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
  - 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
  - 0043-Cache-dom-in-xml-transform.patch
  - 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
  - 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
  - 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
  - 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
  - 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
  - 0049-Modify-G1GC-log-information.patch
  - 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
  - 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
  - 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
  - 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
  - 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
  - 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch


author: wanghao_hw <wanghao564@huawei.com> - 1:1.8.0.382-b05.0
changelog:
  - add Huawei-Print-more-information-when-AbortVMOnException.patch
  - deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
  - deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch
  - modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
  - add fixing-a-bug-in-the-processing-of-default-attributes.patch
  - add enhance-java-heap-oom-err-log.patch
  - add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
  - del --with-zlib=system
  - upgrade to jdk8u382-b05


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.382-b05.9
changelog:
  - add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
  - add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
  - add Record-the-number-of-processes-to-errlog-file.patch.patch
  - add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
  - add The-OverWriteOldestGCLog-option-is-added-to-control.patch
  - add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
  - add add-make-Appcds-jsa-rw-region-deterministic.patch
  - add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - add add-8198423-Improve-metaspace-chunk-allocation.patch
  - add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
  - add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - add add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - add add-8226530-test-case-fixed.patch
  - add add-8147940-Modify-testcase-this-test-does-not-assum.patch
  - add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
  - add add-Do-not-collect_class-when-DynamicCDS-dump.patch
  - add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
  - add add-Adapting-IOException-of-Zip-to-ZipException.patch
  - add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
  - add add-fix-windows-build-Dynamic-CDS-failure.patch
  - add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.392-b08.0
changelog:
  - add 8308682-Enhance-AES-performance.patch
  - add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
  - add Add-metaspace-memory-allocation-failure-validation.patch
  - add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
  - del 8202952.patch
  - del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
  - modified Dynamic-CDS-Archive.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase1.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - upgrade to jdk8u392-b08


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.2
changelog:
  - remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - remove add-8226530-test-case-fixed.patch
  - remove add-Adapting-IOException-of-Zip-to-ZipException.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.402-b06.0
changelog:
  - modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified g1gc-numa-aware-Implementation.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8203699.patch
  - add Add-CaptchaTest-and-fix-KAE-Testcases.patch
  - add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
  - add Add-compiling-option-GS-when-building-windows-JDK.patch
  - add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
  - add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
  - add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
  - add 8057967-CallSite-dependency-tracking-scales-devastat.patch
  - add 8079205-CallSite-dependency-tracking-is-broken-after.patch
  - Add Fix-an-error-caused-by-anonymous-when-AppCDS-generat.patch
  - Add Add-Problemlist.patch


author: Benshuai5D <benshuai5d@163.com> - 1:1.8.0.402-b06.4
changelog:
  - add 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - add 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
  - add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
  - add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
  - add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
  - add GCC-12-reports-some-compiler-warnings.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.412-b08.0
changelog:
  - del 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - del 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase2.patch
  - modified support-numactl-for-hadoop-yarn.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.412-b08.3
changelog:
  - add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
  - add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.412-b08.4
changelog:
  - fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
  - fix loongson vendor error


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.15.10-0
changelog:
  - modified 8231441-3-AArch64-Initial-SVE-backend-support.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.16.8-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
  - modified fast-serializer-jdk11.patch
  - modified dfx-enhancement-of-FastSerializer.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
  - modified add-missing-inline.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix_X509TrustManagerImpl_symantec_distrust.patch
  - add fix_Internal_and_external_code_inconsistency.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.6-0
changelog:
  - update to 11.0.17+5
  - modified NUMA-Aware-Implementation-humongous-region.patch
  - modified Add-KAE-implementation.patch
  - modified fast-serializer-jdk11.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.8-0
changelog:
  - update to 11.0.17+8(GA)
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.18.10-0
changelog:
  - update to 11.0.18+10(GA)
  - modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
  - delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.21.9-0
changelog:
  - update to 11.0.21+9(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified 8214527-AArch64-ZGC-for-Aarch64.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.22.7-0
changelog:
  - update to 11.0.22+7(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: huangjie <huangjie150@huawei.com> - 1:11.0.23.9-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified delete_expired_certificates.patch


author: noah <hedongbo@huawei.com> - 1:18.0.0.37-0.0.ea.rolling
changelog:
  - Update to jdk-18.0.0.0+37
  - adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch


author: DXwangg <wangjiawei80@huawei.com> -1:19.0.0.36-0.0.ea.rolling
changelog:
  - Update to jdk-19.0.0.0+36
  - Remove references to sample directory removed by JDK-8284999
  - Need to include the '.S' suffix in debuginfo checks after JDK-8284661


author: kuenking111 <wangkun49@huawei.com> - 1:21.0.0.35-0-rolling
changelog:
  * Mon Aug 07 2023 misaka00251 <liuxin@iscas.ac.cn> - 1:20.0.2.9-1-rolling
  - Add riscv64 to jit_arches


author: yaoxin <yao_xin001@hoperun.com> - 1.5.4-1
changelog:
  - Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
    CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436


author: fengtao <fengtao40@huawei.com> - 0.15-5
changelog:
  - we got upgrade error when upgrade json-c from very low version,
    for example json-c-0.11-5. because old version has a softlink:
    /usr/include/json-c  --> /usr/include/json
    and now, softlink has been removed. so, we fix this in pretrans


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.0.20-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:support more than one crash kernel regions.
         Fix bugs of unuseable quick kexec on arm64, becaues of arm64-kexec-allocate-memory-space-avoiding-reserved-regions
         excluding QUICK_KEXEC memory region.


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.0.20-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix bug: Filed to generate the vmcore file in the ARM architecture
         Fix bug: Filed to generate the vmcore-dmesg.txt file in the ARM architecture


author: chenyanpanHW <chenyanpan@huawei.com> - 0.8.5-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-change-order-of-multipath.rules.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-RH-add-mpathconf.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-RH-Remove-the-property-blacklist-exception-builtin.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-fix-syntax-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-fix-multipathd-resize-when-not-all-paths-size-are-eq.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-avoid-handling-paths-repeatedly-in-coalesce-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-fix-lun-expansion-failure-when-there-is-offline-path.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-fix-bugs-backported-from-next-branch.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-fix-change-reservation-key-to-uint8-for-memcmp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-bugfix-flush-and-sync-before-reboot.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0011-change-log-level-to-info-if-alua-is-not-support-by-s.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0012-device-mapper-multipath-fix-find-multipath-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0013-kpartx-change-kpartx-file-and-default-bindir.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0014-remove-local-disk-from-pathvec.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0015-clear-mpp-path-reference-when-path-is-freed-otherwis.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0016-multipath-return-failure-on-an-invalid-remove-cmd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0017-multipath-fix-exit-status-of-multipath-T.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0018-multipath-tools-use-run-instead-of-dev-shm.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:kpatch: update sympos for duplicate symbols in vmlinux
         create-diff-object: fix segment fault when sec2->rela is NULL


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.5-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix "ERROR: util.o: find_local_syms: 185: found duplicate matches for util.c"


author: chengzeruizhi <chengzeruizhi@huawei.com> - 2.0.6-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: add new fields in config v2 and inspect to support modifications on iSulad


author: chengzeruizhi<chengzeruizhi@huawei.com> - 2.0.8-3
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: add HAVE_ISULAD definition and fix cpu quota out of range


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.8-7
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: modify depends package lxc version to 4.0.3-20221024XX


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.8-9
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:add macro to adapt musl libc and add add-gids option for exec


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.9-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix update cpu-rt period failed and fix layer size type as int64


author: jikai<jikai11@huawei.com> - 2.0.9-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix potential log error, empty pointer reference and overflow


author: fuanan <fuanan3@huawei.com> - 563-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: Eibz-Chan <chenbingzhao@huawei.com> - 590-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
  	Fix-memory-leak-when-using-corrupt-lesshst-file.patch
  	Fix-crash-when-enter-invaid-pattern-in-command.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.3-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-Add-getentropy-emulation-through-syscall.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-libfdisk-Fix-randomly-generated-GPT-UUID-s.patch
         backport-write-correctly-handle-wide-characters.patch
         backport-wall-convert-homebrew-buffering-to-open_memstream.patch
         backport-wall-use-fputs_careful.patch
         backport-hexdump-parse-handle-truncated-format-pattern.patch
         backport-libblkid-copy-BLKID_PARTS_FORCE_GPT-to-whole-disk-pr.patch
         backport-lscpu-fix-p-output-all-caches-delimiter.patch
         backport-add-return-in-supam_conv-function.patch
         backport-wrap-return-in-else-directive-to-avoid-dead-code.patch
         backport-sulogin-ignore-none-existing-console-devices.patch
         backport-sulogin-fix-KDGKBMODE-ifdef.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-lib-caputils-fix-integer-handling-issues-coverity-sc.patch
         backport-unshare-Move-implementation-of-keep-caps-option-to-l.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-libblkid-jfs-avoid-undefined-shift.patch
         backport-cfdisk-add-hint-about-labels-for-bootable-flag.patch
         backport-logger-initialize-socket-credentials-contol-union.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-22
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-column-fix-buffer-overflow-when-l-specified.patch
         backport-column-fix-greedy-mode-on-l.patch
         backport-column-fix-memory-leak.patch
         backport-column-fix-l.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-23
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-scriptreplay-support-ctrl-s-and-ctrl-g.patch
         backport-login-use-correct-terminal-fd-during-setup.patch
         backport-login-prevent-undefined-ioctl-and-tcsetattr-calls.patch
         backport-libblkid-avoid-memory-leak-of-cachefile-path.patch
         backport-more-avoid-out-of-bound-access.patch
         backport-lslogins-fix-realloc-loop-allocation-size.patch
         backport-ldattach-don-t-call-exit-from-signal-handler.patch
         backport-libblkid-ntfs-validate-that-sector_size-is-a-power-o.patch
         backport-blkid-fix-call-to-err_exclusive_options.patch
         backport-libblkid-reset-errno-before-calling-probefuncs.patch
         backport-lib-path-fix-possible-out-of-boundary-access.patch
         backport-libmount-improve-mnt_table_next_child_fs.patch
         backport-libmount-fix-possible-NULL-dereference-coverity-scan.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
  	[add]backport-libsmartcols-drop-spourious-newline-in-between-strea.patch
  	backport-libsmartcols-flush-correct-stream.patch
  	backport-libsmartcols-only-recognize-closed-object-as-final-e.patch
  	backport-cal-avoid-out-of-bound-write.patch
  	backport-libfdisk-sun-properly-initialize-partition-data.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:solve the issue of ext4 is incorrectly probed as drbd
          [add]backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
          backport-libblkid-probe-read-data-in-chunks.patch
          backport-libblkid-avoid-aligning-out-of-probing-area.patch
          backport-libblkid-drbd-validate-zero-padding.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-26
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-receive.patch
         backport-libblkid-hfsplus-reduce-false-positive.patch
         backport-wall-fix-calloc-cal-Werror-calloc-transposed-args.patch
         backport-libblkid-drbd-reduce-false-positive.patch
         backport-lib-cpuset-exit-early-from-cpulist_parse.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-sys-utils-lscpu-Unblock-SIGSEGV-before-vmware_bdoor.patch
         backport-libblkid-Check-offset-in-LUKS2-header.patch
         backport-more-fix-poll-use.patch


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - capsh better error handling for integer parsing
  - setcap clean up error handling of the ns rootid argument


author: chenhaixing <chenhaixing@huawei.com> - 0.65.0-6
changelog:
  - CVE:NA
  - SUG:NA
  - DESC:libdnf:backport patch to fix undo error and add check after malloc allocation


author: xu_ping <xuping33@huawei.com> - 1:1.40.2-16
changelog:
  - Use actual function Pervasives.compare to instead of default compare and omit the labels on positional arguments.


author: chenyanpanHW <chenyanpan@huawei.com> - 1.16.4-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-evdev-strip-the-device-name-of-format-directives.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git-core


author: haowenchao <haowenchao@huawei.com> - 1.19.0-4
changelog:
  - Split rpm package to avoid main rpm package CUnit dependency
    Previous implement place executable files in main package which leading
    to dependency of CUnit. This change add a package utils and move
    these executable files to utils package to avoid main package's CUnit
    dependency, making main package weak depend on libiscsi-utils


author: chenyanpanHW <chenyanpan@huawei.com> - 1.19.0-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-iscsi-ls-Fix-iser-url-scheme-parsing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-test-tool-Compare-Write-skip-InvalidDataOutSize-unle.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-test-tool-Compare-Write-override-driver-queue_pdu-ca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-test-tool-iSCSICmdSnTooLow-override-driver-queue_pdu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-test-tool-iSCSICmdSnTooHigh-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-test-tool-iSCSIDataSnInvalid-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-test-tool-BlockEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-test-tool-BlockEraseReserved-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-test-tool-CryptoEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-test-tool-CryptoEraseReserved-override-driver-queue_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0011-test-tool-OverwriteReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0012-test-tool-OverwriteReserved-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0013-test-tool-remove-unused-iscsi_queue_pdu-symbol-overl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0014-iser-remove-__packed-from-struct-iser_cm_hdr-declaration.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0015-test-tools-use-extern-init-in-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0016-iscsi-inq-handle-setting-of-debug_level-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0017-Updata-iscsi-dd.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0018-iscsi-swp-handle-setting-of-debug_level-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0019-fix-iscsi-ls-parameter-parse.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0020-Check-return-value-of-scsi_malloc-in-order-to.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0021-Fix-segmentation-fault-problem.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Ruijun Ge <geruijun@huawei.com> - 1.19.0-8
changelog:
  - DESC: backport patches to solve command parameter parse problem
          and dereference null pointer problem


author: yanglu<yanglu72@h-partners.com> - 8.17.1-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix newaliases command error and postfix service start execption after sendmail install


author: xingwei <xingwei14@h-partners.com> - 1.46.0-4
changelog:
  - Type:CVE
  - ID:CVE-2023-44487
  - SUG:NA
  - DESC:fix CVE-2023-44487 and build error

  Sat Jul 15 2023 wangye <wangye91@h-partners.com> - 1.46.0-3
  - Type:cve
  - ID:CVE-2023-35945
  - SUG:NA
  - DESC:fix CVE-2023-35945


author: ZhengZhenyu <zhengzhenyu@openeuler.sh> - 13.12-1
changelog:
  - aupgrade libpq to 13.12,fix CVE-2023-2455, CVE-2023-2454, CVE-2023-39417, CVE-2023-39418, CVE-2020-21469


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: zhangjun<zhangjun@kylinos.cn> - 0.7.20-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak when using testsolv to execute cases 
         Fix segfault on conflict resolution when using bindings


author: xihaochen <xihaochen@huawei.com> - 0.9.5-1
changelog:
  - Type:requirements                                                                                                                                            
  - Id:NA
  - SUG:NA
  - DESC:update libssh to 0.9.5


author: zengweifeng <zwfeng@huawei.com> - 0.9.6-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: xinghe <xinghe2@h-partners.com> - 0.9.6-4
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:options: Parse hostname by last '@'
         torture_options: Add test for '@' in login name
         session: Initialize pointers
         tests: Ensure the mode of the created file is what we set


author: gaihuiying <eaglegai@163.com> - 0.9.6-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport some upstream patches:
         Avoid false positive report from Coveritt CID 1470006
         kdf: Avoid endianess issues
         misc: Fix format truncation in ssh_path_expand_escape()
         misc: Fix expanding port numbers
         misc: rename gettimeofday symbol
         session: Initialize the port with the standard port (22)
         session->socket_callbacks.data will be set to ssh_packet_socket_callback
         socket: Add error message if execv fails
         tests: Add test for expanding port numbers


author: renmingshuai <renmingshuai@huawei.com> - 0.9.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:config: Escape brackets in ProxyCommand build from ProxyJump
         packet: do not enqueue outgoing packets after sending


author: renmingshuai <renmingshuai@huawei.com> - 0.9.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:config: Escape brackets in ProxyCommand build
         packet: do not enqueue outgoing packets


author: renmingshuai <renmingshuai@huawei.com> - 0.9.6-8
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-6918,CVE-2023-48795
  - SUG:NA
  - DESC:fix CVE-2023-6004, CVE-2023-6918 and CVE-2023-48795


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-23
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: yezengruan <yezengruan@huawei.com> - 0.7.3-7
changelog:
  - tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
  - tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
  - tpm2: Restore original value if unmarsalled value was illegal
  - fix CVE-2021-3623


author: imxcc <xingchaochao@huawei.com> - 6.2.0-32
changelog:
  - virQEMUBuildCommandLineJSON: Allow skipping certain keys
  - virQEMUBuildCommandLineJSON: Add possibility for using 'on/off' instead of 'yes/no'
  - util: virqemu: Introduce virQEMUBuildNetdevCommandlineFromJSON
  - util: json: Introduce virJSONValueObjectAppendStringPrintf
  - qemuBuildChannelsCommandLine: Use typecasted switch for channel type
  - qemuBuildChannelsCommandLine: Extract common formatting of 'chardev'
  - qemuBuildChannelChrDeviceStr: Remove formatting of properties for -netdev
  - qemuMonitorJSON(Add|Remove)Netdev: Refactor cleanup
  - qemuBuildHostNetStr: Stop using 'ipv6-net' convenience argument
  - qemu: command: Generate -netdev command line via JSON->cmdline conversion
  - qemuBuildChannelGuestfwdNetdevProps: Convert to generating JSON props
  - qemuMonitorAddNetdev: Convert to the native JSON props object
  - virCommand: Introduce virCommandGetArgList
  - testutilsqemuschema: Introduce testQEMUSchemaValidateCommand
  - testCompareXMLToArgv: Split out preparation and command formatting
  - virQEMUBuildNetdevCommandlineFromJSON: Prepare for quirky 'guestfwd'
  - qemu: Prepare for testing of 'netdev_add' props via qemuxml2argvtest
  - qemuxml2argvtest: Add QAPI/QMP schema validation for -blockdev and -netdev


author: yezengruan <yezengruan@huawei.com> - 6.2.0-33
changelog:
  - qemu: Probe for a few params supported by migrate-set-parameters
  - qemu: Avoid deprecated migrate_set_speed QMP command
  - qemu: Avoid deprecated migrate_set_downtime QMP command
  - qemu: Avoid deprecated query-migrate-cache-size QMP command
  - qemu: Avoid deprecated migrate-set-cache-size QMP command
  - qemu: Track numa-mem-supported machine attribute
  - qemuBuildNumaArgStr: Switch order of if() and for()
  - qemuBuildNumaArgStr: Use modern -numa memdev= if old -numa mem= is unsupported


author: yezengruan <yezengruan@huawei.com> - 6.2.0-34
changelog:
  - Revert libvirt: support aarch64 vtpm with parameter tpm-tis-device
  - qemu: Fix swtpm device with aarch64
  - qemu: Fix libvirt hang due to early TPM device stop
  - qemu_tpm: Move logfile path generation into a separate function
  - qemu_tpm: Generate log file path among with storage path
  - virtpm: Fix @path handling in virTPMEmulatorInit()


author: yezengruan <yezengruan@huawei.com> - 6.2.0-35
changelog:
  - qemuMonitorJSONSetMigrationParams: Take double pointer for @params
  - qemuMonitorJSONAddObject: Take double pointer for @props
  - :qemuMonitorJSONMakeCommandInternal: Clear @arguments when stolen
  - qemuMonitorAddObject: Fix semantics of @alias
  - qemuMonitorAddObject: Refactor cleanup
  - util: json: Replace virJSONValueObjectSteal by virJSONValueObjectRemoveKey
  - qemu: command: Generate commandline of 'masterKey0' secret via JSON
  - qemu: command: Generate commandline of 'sev0' sev-guest object via JSON
  - qemu: command: Generate commandline of iothread objects JSON
  - qemu: capabilities: Introduce QEMU_CAPS_OBJECT_QAPIFIED
  - qemu: monitor: Make wrapping of 'props' of 'object-add' optional
  - qemuMonitorCreateObjectPropsWrap: Open-code in qemuBuildMemoryBackendProps
  - qemu: monitor: Don't add 'props' wrapper if qemu has QEMU_CAPS_OBJECT_QAPIFIED
  - qemu: command: Use JSON for QAPIfied -object directly
  - tests: qemuxml2argv: Validate generation of JSON props for object-add
  - qemu: capabilities: Enable detection of QEMU_CAPS_OBJECT_QAPIFIED


author: yezengruan <yezengruan@huawei.com> - 6.2.0-47
changelog:
  - sync some bugfix patches from upstream
  - support vhostuser disk
  - libvirt: support dirtyrate (calc-dirty-rate, dirtyrate-param.mode)


author: XuFei <xufei30@huawei.com> - 6.2.0-56
changelog:
  - nodedev: ignore EINVAL from libudev in udevEventHandleThread
  - qemu: tpm: Pass --logfile to swtpm_setup for incoming migration


author: zhangxinhao <zhangxinhao1@huawei.com> - 6.2.0-57
changelog:
  - cpu_topo: support for cpu_topo "clusters” in conf
  - cpu_topo: support for specifying "clusters" in qemu comand
  - cpu_topo: support for reporting cluster_id in NUMA topology
  - cpu_topo: fix detection of vCPU pids when multiple clusters are present


author: Jiabo Feng <fengjiabo1@huawei.com> - 6.2.0-58
changelog:
  - virnetsshsession: Adapt to change libssh2 API
  - selinux: Reflect context_str() type change
  - Revert "selinux: adapt to libselinux"
  - selinux: adapt to libselinux
  - fix error in printf format string


author: Jiabo Feng <fengjiabo1@huawei.com> - 6.2.0-61
changelog:
  - lxc: fix lxcContainerMountAllFS() DEREF_BEFORE_CHECK
  - qemu: Return perf status that affect next boot  for shutoff domains While we set up perf events for a shutoff domain and check the settings, All of perf events are reported as 'disabled', unless we add --config, This is redundant for a shutoff domain.
  - tests: upstream Fixing compiler warning in cputest
  - qemu_migration_cookie: Rename ret in qemuDomainExtractTLSSubject
  - virrandom: Fix printf format string in virRandomGenerateWWN()
  - fix the issue of errors when saving after 'virsh edit'
  - Use (un)signed printf specifiers correctly
  - admin: fix leak of typed parameters on error
  - esx: call freeaddrinfo earlier in esxUtil_ResolveHostname Call freeaddrinfo() as soon as @result is not needed anymore, i.e. right after getnameinfo(); this avoids calling freeaddrinfo() in two branches.
  - qemu: Fix incorrect command name in error messages


author: caozhongwang <caozhongwang1@huawei.com>
changelog:
  - interface: fix udev_device_get_sysattr_value return value check (CVE-2024-2496)
  - remote: check for negative array lengths before allocation (CVE-2024-2494)
  - vish:Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)


author: jiangjiacheng <jiangjiacheng@huawei.com> - 6.2.0-64
changelog:
  - util: keep track of full GSource object not source ID number
  - rpc: mark source returned by virEventGLibAddSocketWatch as unused
  - rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)


author: panxiaohe <panxiaohe@huawei.com> - 2.9.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add backport bug fixes.
         work around lxml API abuse
         fix regression in xmlNodeDumpOutputInternal
         fix whitespace when serializing empty HTML documents
         forbid epsilon-reduction of final states
         fix buffering in xmlOutputBufferWrite


author: fuanan <fuanan3@h-partners.com> - 2.9.12-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: fuanan <fuanan3@h-partners.com> - 2.9.12-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix heap-use-after-free in xmlXIncludeIncludeNode
         fix stack overflow in xmlDocDumpMemory
         fix stack overflow in htmlDocContentDumpOutput


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix memory leaks in XPointer string-range function
         fix null pointer deref in xmlXPtrRangeInsideFunction
         stop using maxParserDepth in xpath.c
         hardcode maximum XPath recursion depth
         fix XPath recursion limit


author: huangduirong <huangduirong@huawei.com> - 2.9.10-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues, fix null-deref in xmlSchemaGetComponentTargetNs


author: wangfengtu<wangfengtu@huawei.com> - 4.0.3-2022052301
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: do not operate playload and attach cgroup if no controller found


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.15-2
changelog:
  - Fix the systemd service issue about the env variable.
  - Apply the patches from old branch.
  - Adaption the cmake version and integrate into the spec file.


author: bzhaoop<bzhaojyathousandy@gmail.com> -4:10.5.15-1
changelog:
  - Bump to 10.5.15
  - For resolving CVEs:
  - CVE-2022-24048
  - CVE-2022-24052
  - CVE-2022-24050
  - CVE-2022-24051
  - CVE-2021-46668
  - CVE-2021-46658


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.16-1
changelog:
  - Bump to 10.5.16 for resolving CVEs below
  - CVE-2022-27385
  - CVE-2022-27382
  - CVE-2022-27451
  - CVE-2022-27457
  - CVE-2022-27446
  - CVE-2022-27455
  - CVE-2022-27444
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387
  - And we fit the latest packages for the new mariadb release, such as errmsg package.


author: liwu <liwu13@huawei.com> - 8.0.26-1
changelog:
  - Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
    CVE-2021-2352 CVE-2021-2340


author: yaoxin <yaoxin30@huawei.com> - 8.0.27-1
changelog:
  - Upgrade mysql to 8.0.27,fix CVES:CVE-2021-2471 CVE-2021-2478 CVE-2021-2479
    CVE-2021-2481  CVE-2021-35546 CVE-2021-35575 CVE-2021-35577 CVE-2021-35591
    CVE-2021-35596 CVE-2021-35597 CVE-2021-35602 CVE-2021-35604 CVE-2021-35607
    CVE-2021-35608 CVE-2021-35610 CVE-2021-35612 CVE-2021-35618
    CVE-2021-35621-to-CVE-2021-35636 CVE-2021-35638-to-CVE-2021-35642
    CVE-2021-35644-to-CVE-2021-35648


author: jintang song<jintang.song@epro.com.cn> - 8.0.29-1
changelog:
  - Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
    CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
    CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
    CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
    CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
    CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
    CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490


author: wangkai <13474090681@163.com> - 8.0.37-1
changelog:
  - Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
    CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
    CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
    CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
    CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
    CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
    CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
    CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
    CVE-2024-21057,CVE-2023-6129)


author: bzhaoop <bzhaojyathousandy@gmail.com> - 5.7.34-1
changelog:
  - Bump from 5.7.21 to latest 5.7.34
  - Correct the test steps and options
  - Refactor part of the file structure according to the new packages


author: bzhaoop <bzhaojyathousandy@gmail.com> - 5.7.37-1
changelog:
  - Fix CVE issues for bump to the 5.7.37 version
  - CVE-2022-21245
  - CVE-2022-21270
  - CVE-2022-21303
  - CVE-2022-21304
  - CVE-2022-21344
  - CVE-2022-21367
  - CVE-2021-35624
  - CVE-2021-2356
  - CVE-2021-2011
  - CVE-2021-2010
  - CVE-2021-2007


author: gaihuiying <gaihuiying1@huawei.com> - 5.8-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix undefined behavior in asn_build_int()
         libsnmp: Rework parse_imports()
         libsnmp: Increase MAX_IMPORTS
         libsnmp: Allocate the module import list on the heap
         libsnmp: Fix a memory leak in a MIB parser error path
         libsnmp: Fix the getoid() error path


author: gaihuiying <eaglegai@163.com> - 1:5.9.1-3
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: xingwei <xingwei14@h-partners.com> - 1:5.9.1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: IF-MIB, IP-FORWARD-MIB: Improve robustness
          IF-MIB: pass the network interface index to net
          IF-MIB: fix a memory leak
          IF-MIB: fix a recently introduced use after free
          IF-MIB: add a trailing newline to an error message


author: eaglegai <eaglegai@163.com> - 2.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ifconfig display error when the length of interface name is 15


author: wangkai <wangkai385@huawei.com> - 4.1.13-17
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: xu_ping <xuping33@huawei.com> - 1:12.18.4-8
changelog:
  - openEuler 22.03 changed the page table to 4k so remove the 0003-Modify-openEuler-aarch64-v8_os_page_size-to-64.patch


author: wangkai <13474090681@163.com> - 1:12.22.11-6
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-6
changelog:
  - Type:CVE
  - ID:CVE-2023-26551
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-9
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: Cui XuCui <cuixucui1@huawei.com> - 1.0.0-8
changelog:
  * Thu Jul 15 2021 zhangzikang <zhangzikang@kylinos.cn> - 1.0.0-7
  - Fix cdrom and cpufreq test failed


author: meitingli <bubble_mt@outlook.com> - 1.1.0-0
changelog:
  - 1. Add support os version: openEuler 22.03LTS
  - 2. Add FC/RAID/keycard/GPU/infiniband testcases
  - 3. Bugfix


author: cuixucui <cuixucui1@h-partners.com> - 1.1.1-0
changelog:
  -1. Reconstruct the log module and rectify the log printing
  -2. Add kabi testcase
  -3. Add driver, driver version, chip and module display to the console
  -4. Add configuration file for testsuite to improve automation rate
  -5. Add oech and oech-server version display
  -6. Add driver information display in hardware test logs


author: cuixucui <cuixucui1@h-partners> - 1.1.1-3
changelog:
  - Fix the problem that the client fails to send messages after the server port is modified
  - Fix the problem that the system test item failed to check the integrity of the software package


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-4
changelog:
  - Add requirements for system and bugfix
  - Upgrade oec-hardware-server
  - Update readme and design doc
  - Fix nvme error
  - Update network fibre check and log 
  - Update description for perf test
  - Add automatic configuration network card IP


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-5
changelog:
  - fix the bug that the test board information is not added to the configuration file
  - Add kabi for hardware critical test
  - Optimize disk/raid/fc/ethernet/infiniband test suite
  - Fix the bug of reading nvme data failed
  - Add file size check when uploading file to server


author: zhangyale <zhangyale3@h-partners.com> - 1.1.3-0
changelog:
  - Add support for openEuler 22.03 LTS SP1
  - Add AMD GPU testcase
  - Add automatic configuration network card IP
  - Add generate compatibility information


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: liqiang <liqiang332@h-partner.com> - 1.1.3-3
changelog:
  - Fix libswsds.so not stripped
  - Fix the value of kernel.src obtained by the kabi test case is incorrect
  - Add board infomation and fix memory bug
  - Fix the block size fails to be obtained during the NVME test
  - Judge whether to support kabi testing by architecture
  - Update readme and dev_design


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-0
changelog:
  - Add board information in the test report
  - Add spdk test case
  - Add dpdk test case
  - Update pci.ids file


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-1
changelog:
  - Add igc dpdk
  - Secure_filename to improve input robustness and security
  - Correcting bug, self.changed_ Logpath is a string
  - Increase the number of network card up detection times
  - Resolve the issue of IP configuration failure


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-0
changelog:
  - Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
  - Add modifications to Kylinsec with oec-hardware
  - Add support for Loongson and SW architectures
  - Bugfix


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
  - Add fio test cases:read,write,randread,randwrite
  - Solve the nvme line break issue in the command line interface
  - Fix compilation errors in the make command
  - Add Vulkan testcase for nvida GPU
  - Resolve the issue of oech server startup failure on version 24.03


author: Noah <hedongbo@huawei.com> - 8u330.1
changelog:
  - change upstream to openeuler
  - rm 0004-Fix-Compilation-Flags.patch
  - rm 0005-fxpackager-extract-jre-accept-symlink.patch
  - rm 0003-fix-cast-between-incompatible-function-types.patch


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: liulong <liulong20@huawei.com> - 2.4.50-5
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.0-26
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-multicast-set.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-notify-systemd-of-start-up.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-null-pointer-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-openssl-1.1-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-cve-2016-7567.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/openslp-2.0.0-cve-2017-17833.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/CVE-2012-4428-fix-handling-of-string-list-in-slp_common-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/Fix-slp_iface-c-comma-expression-so-it-works-as-designed.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/Daemon-sends-wrong-service-reply-when-security-is-enabled.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/Fix-DAAddresses-hostname-resolution-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/Change-default-slpreg-connection-from-UDP-to-TCP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/Fix-interface-parsing-code-to-look-for-null-ifc-addrs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/Fix-broadcast-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/Properly-initialize-xcastsocks-for-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/Fix-xrealloc-to-properly-free-original-pointer-on-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/CVE-2019-5544.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xingwei <xingwei14@h-partners.com> - 2.0.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to solve package upgrade failure problem


author: renmingshuai<renmingshuai@huawei.com> - 8.8p1-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:PubkeyAcceptedKeyTypes has been renamed to PubkeyAcceptedAlgorithms in openssh-8.5p1


author: renmingshuai <renmingshuai@huawei.com> - 8.8p1-23
changelog:
  - Type:CVE
  - CVE:CVE-2023-48795,CVE-2023-51385
  - SUG:NA
  - DESC:fix CVE-2023-48795 and CVE-2023-51385


author: Kai Liu <kai.liu@suse.com> - 8.8p1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix incorrect sftp-server binary path in /etc/ssh/sshd_config


author: wujie <wujie@nj.iscas.ac.cn> - 5.6.0-10
changelog:
  - add support for riscv64 from http://fedora.riscv.rocks/koji/buildinfo?buildID=31200
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: wangqiang <wangqiang1@kylinos.cn> - 0.10.8-3
changelog:
  - Type:Feature
  - ID:NA
  - SUG:NA
  - DESC:delete "-S git" from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-Resolve-the-failure-of-field-matching-in-test-cases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-FIX-CVE-2022-1049.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: wangqiang <wangqiang1@kylinos.cn> - 0.10.8-3
changelog:
  - Type:Feature
  - ID:NA
  - SUG:NA
  - DESC:delete "-S git" from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-Resolve-the-failure-of-field-matching-in-test-cases.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-FIX-CVE-2022-1049.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-CVE-2022-2735.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: panxiaohe <panxh.life@foxmail.com> - 8.0.0-8
changelog:
  - use lmdb instead of Berkeley DB for package dba
  - update %configure for riscv
  - delete unused rcver


author: wangye <wangye70@huawei.com> - 0.67.0-7
changelog:
  - Type:cves
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2018-16646 CVE-2018-18897 CVE-2018-19060 CVE-2018-20481 CVE-2019-14494 CVE-2019-7310


author: chenyanpanHW <chenyanpan@huawei.com> - 0.67.0-8
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-gcc11.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 0.67.0-8
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-0.30.0-rotated-words-selection.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-0.73.0-PSOutputDev-buffer-read.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-0.84.0-MacroPushRequiredVars.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-0.90.0-position-independent-code.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/poppler-gcc11.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-CVE-2022-38784.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-CVE-2022-27337.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-6
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: bzhaoop <bzhaojyathousandy@gmail.com> - 13.3-6
changelog:
  - Porting "Fix subtransaction test failed" from master branch
  - Fri May 6 2022 caodongxia <caodongxia@h-partners.com> - 13.3-4
  - sync the same line with master


author: gaihuiying <eaglegai@163.com> - 2.4.9-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: liningjie <liningjie@xfusion.com> - 3.3.1-6
changelog:
  - Type:CVE
  - CVE:CVE-2023-49083
  - SUG:NA
  - DESC:Fixed crash when loading a PKCS#7 bundle with no certificates


author: liningjie <liningjie@xfusion.com> - 3.3.1-7
changelog:
  - Type:CVE
  - CVE:CVE-2023-49083
  - SUG:NA
  - DESC:raise an exception instead of returning an empty list for pkcs7 cert loading


author: xihaochen <xihaochen@huawei.com> - 3.3.1-1
changelog:
  - Type:requirements                                                                                            
  - Id:NA
  - SUG:NA
  - DESC:update python-ldap to 3.3.1


author: yangcheng <yangcheng1203@163.com> - 8.1.2-4
changelog:
  - Type:CVE
  - CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
  - SUG:NA
  - DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817


author: dongyuzhen <dongyuzhen@h-partners.com> - 9.0.1-2
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: shixuantong <shixuantong@h-partners.com> - 3.9.9-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable profile guided optimizations for x86_64 and i686 architectures


author: shixuantong <shixuantong@h-partners.com> - 3.9.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:concurrent.futures.wait() now deduplicates futures given as arg.


author: Chenxi Mao <chenxi.mao@suse.com> - 3.9.9-23
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC: Enable link time optimizaitons (LTO) for better performance.


author: zhaoyu <zhaoyu64@huawei.com>- 3.9.9-25
changelog:
  - Type:CVE
  - CVE:CVE-2007-4559
  - SUG:NA
  - DESC:Add a filter parameter to tarfile.extractall will allow users to avoid CVE-2007-4559 by changing their code/settings.


author: Kou Wenqi<kouwenqi@kylinos.cn> - 4.17.0-13
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:requires zstd >= 1.4.0, requires zstd-devel >= 1.3.8 in build


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.2-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-BUG-fix-a-minor-refcounting-issue-in-Py_FindObjects.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/backport-BUG-fix-small-refcount-issue-in-ndimage._ctest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaihuiying <eaglegai@163.com> - 1.13.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove buildin key
         add macros to control if key files permissons is 600 or 644
         remove useless BuildRequires:unbound-libs


author: yanglu <yanglu72@h-partners.com> - 1.13.2-5
changelog:
  - Type:cves
  - CVE:CVE-2022-30698 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30698 and CVE-2022-30699


author: gaihuiying <eaglegai@163.com> - 1.13.2-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"


author: chenhaixing <chenhaixing@huawei.com> - 1.26.7-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix socket timeout value when HTTPConnect is reused
         remove Exclamation mark character from the unreserved characters
         fix _idna_encode handling of x80


author: Funda Wang <fundawang@yeah.net> - 1.26.7-7
changelog:
  - Type:CVE
  - CVE:CVE-2023-43804
  - SUG:NA
  - DESC:fix CVE-2023-43804 added the Cookie to the list of headers


author: chengyechun <chengyehcun1@huawei.com> - 1.26.7-8
changelog:
  - Type:CVE
  - CVE:CVE-2023-45803
  - SUG:NA
  - DESC:fix CVE-2023-45803 Made body stripped from HTTP requests


author: yezengruan <yezengruan@huawei.com> - 6.2.0-30
changelog:
  - scsi-bus: fix incorrect call for blk_error_retry_reset_timeout()
  - Revert "monitor: limit io error qmp event to at most once per 60s"


author: yezengruan <yezengruan@huawei.com> - 6.2.0-31
changelog:
  - vhost-vsock: detach the virqueue element in case of error (CVE-2022-26354)
  - virtio-net: fix map leaking on error during receive (CVE-2022-26353)


author: yezengruan <yezengruan@huawei.com> - 2:6.2.0-34
changelog:
  - display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207)
  - ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206)


author: yezengruan <yezengruan@huawei.com> - 2:6.2.0-35
changelog:
  - hw/intc/arm_gicv3: Check for !MEMTX_OK instead of MEMTX_ERROR (CVE-2021-3750)
  - softmmu/physmem: Simplify flatview_write and address_space_access_valid
  - softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR


author: yezengruan <yezengruan@huawei.com> - 2:6.2.0-38
changelog:
  - acpi: fix QEMU crash when started with SLIC table
  - tests: acpi: whitelist expected blobs before changing them
  - tests: acpi: add SLIC table test
  - tests: acpi: SLIC: update expected blobs
  - hw/block/fdc: Prevent end-of-track overrun (CVE-2021-3507)
  - tests/qtest/fdc-test: Add a regression test for CVE-2021-3507


author: yezengruan <yezengruan@huawei.com> - 2:6.2.0-39
changelog:
  - hw/scsi/megasas: Use uint32_t for reply queue head/tail values
  - dma: Let dma_memory_valid() take MemTxAttrs argument
  - dma: Let dma_memory_set() take MemTxAttrs argument
  - dma: Let dma_memory_rw_relaxed() take MemTxAttrs argument
  - dma: Let dma_memory_rw() take MemTxAttrs argument
  - dma: Let dma_memory_read/write() take MemTxAttrs argument
  - dma: Let dma_memory_map() take MemTxAttrs argument
  - dma: Have dma_buf_rw() take a void pointer
  - dma: Have dma_buf_read() / dma_buf_write() take a void pointer
  - pci: Let pci_dma_rw() take MemTxAttrs argument
  - dma: Let dma_buf_rw() take MemTxAttrs argument
  - dma: Let dma_buf_write() take MemTxAttrs argument
  - dma: Let dma_buf_read() take MemTxAttrs argument
  - dma: Let dma_buf_rw() propagate MemTxResult
  - dma: Let st*_dma() take MemTxAttrs argument
  - dma: Let ld*_dma() take MemTxAttrs argument
  - dma: Let st*_dma() propagate MemTxResult
  - dma: Let ld*_dma() propagate MemTxResult
  - pci: Let st*_pci_dma() take MemTxAttrs argument
  - pci: Let ld*_pci_dma() take MemTxAttrs argument
  - pci: Let st*_pci_dma() propagate MemTxResult
  - pci: Let ld*_pci_dma() propagate MemTxResult
  - hw/audio/intel-hda: Do not ignore DMA overrun errors
  - hw/audio/intel-hda: Restrict DMA engine to memories (not MMIO devices)
  - tests/qtest/intel-hda-test: Add reproducer for issue #542


author: liuxiangdong <liuxiangdong5@huawei.com> - 2:6.2.0-42
changelog:
  - acpi: validate hotplug selector on access
  - virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358)


author: yezengruan <yezengruan@huawei.com> - 2:6.2.0-45
changelog:
  - numa: Enable numa for SGX EPC sections
  - target/ppc: enhance error handling in kvmppc_read_int*
  - fix pointer double free in func qemu_savevm_state_complete_precopy_non_iterable


author: yezengruan <yezengruan@huawei.com> - 10:6.2.0-46
changelog:
  - vhost-user: remove VirtQ notifier restore
  - vhost-user: fix VirtQ notifier cleanup
  - enable vDPA build params
  - Provides qemu-kvm for upgrade


author: yezengruan <yezengruan@huawei.com> - 10:6.2.0-48
changelog:
  - hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued
  - tests/qtest: Add fuzz-lsi53c895a-test
  - scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216)
  - scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216)


author: zhangxinhao <zhangxinhao1@huawei.com> - 10:6.2.0-51
changelog:
  - exec/memory: Extract address_space_set() from dma_memory_set()
  - hw/elf_ops: clear uninitialized segment space
  - vhost: also check queue state in the vhost_dev_set_log
  - vhost-net: fix improper cleanup in vhost_net_start
  - virtio-net: setup vhost_dev and notifiers for cvq only


author: wanbo <wanbo13@huawei.com> - 10:6.2.0-52
changelog:
  - job.c: add missing notifier initialization
  - uas: add missing return
  - qom: assert integer does not overflow
  - pci: expose TYPE_XI03130_DOWNSTREAM name
  - acpi: pcihp: pcie: set power on cap on parent slot
  - hw/display/ati_2d: Fix buffer overflow in ati_2d_blt


author: yezengruan <yezengruan@huawei.com> - 10:6.2.0-57
changelog:
  - arm/virt: Fix vcpu hotplug idx_from_topo_ids
  - Revert patches related to the vSVA
  - sync some bugfix patches from upstream
  - fix the virtio features negotiation flaw
  - fix CVE-2022-4144


author: yezengruan <yezengruan@huawei.com> - 10:6.2.0-59
changelog:
  - target/arm: Fix kvm prove of ID_AA64ZFR0
  - migration: report migration/multiFd related thread pid to libvirt
  - vhost_net: keep acked_feature only for NET_CLIENT_DRIVER_VHOST_USER


author: yezengruan <yezengruan@huawei.com> - 10:6.2.0-60
changelog:
  - linux-user: Add strace output for timer_settime64() syscall
  - fix qemu-core when vhost-user-net config with server mode


author: <xufei30@huawei.com> - 10:6.2.0-65
changelog:
  - vhost-user-blk: fix the resize crash
  - plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
  - linux-user: fix strace build w/out munlockall
  - ui: fix crash on serial reset, during init
  - qga/win/vss: requester_freeze changes
  - migration: fix populate_vfio_info
  - block/rbd: workaround for ceph issue #53784
  - target/i386: add FZRM, FSRS, FSRC
  - i386: Add new CPU model SapphireRapids
  - core/cpu-common: Fix the wrong '#ifdef __aarch64__'


author: <xufei30@huawei.com> - 10:6.2.0-67
changelog:
  - migration/xbzrle: fix out-of-bounds write with axv512
  - migration/xbzrle: use ctz64 to avoid undefined result
  - Update bench-code for addressing CI problem
  - AVX512 support for xbzrle_encode_buffer
  - configure, meson: move AVX tests to meson
  - target/i386: KVM: allow fast string operations if host supports them
  - target/i386: add FSRM to TCG
  - hw/nvme: fix memory leak in nvme_dsm
  - aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
  - target/i386: Add SGX aex-notify and EDECCSSA support
  - hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
  - target/i386: Set maximum APIC ID to KVM prior to vCPU creation
  - target/i386: Fix sanity check on max APIC ID / X2APIC enablement


author: <fengjiabo1@huawei.com> - 10:6.2.0-70
changelog:
  - Add lbt support for kvm.
  - Fix smp.cores value and Fix divide 0 error
  - hw/nvme: Change alignment in dma functions for nvme_blk_*
  - virtio: fix reachable assertion due to stale value of cached region size
  - hw/nvme: fix missing DNR on compare failure


author: <fengjiabo1@huawei.com> - 10:6.2.0-72
changelog:
  - qga/win32: Use rundll for VSS installation
  - qga/win32: Remove change action from MSI installer
  - ide: Increment BB in-flight counter for TRIM BH
  - hw/pci-bridge/pxb: Fix missing swizzle
  - host-vdpa: make notifiers _init()/_uninit() symmetric
  - hw/virtio: vdpa: Fix leak of host-notifier memory-region
  - accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
  - Allow setting up to 8 bytes with the generic loader
  - hw/net/virtio-net: make some VirtIONet const
  - accel/tcg: Optimize jump cache flush during tlb range flush
  - 9pfs: prevent opening special files (CVE-2023-2861)
  - tcg: Reduce tcg_assert_listed_vecop() scope
  - gitlab: Disable plugins for cross-i386-tci
  - vfio/pci: Fix a segfault in vfio_realize
  - block/iscsi: fix double-free on BUSY or similar statuses
  - tests/tcg: fix unused variable in linux-test
  - hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
  - qga/vss-win32: fix warning for clang++-15
  - vnc: avoid underflow when accessing user-provided address
  - block/monitor: Fix crash when executing HMP commit
  - virtio-gpu: add a FIXME for virtio_gpu_load()
  - hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
  - migration: report compress thread pid to libvirt


author: <fengjiabo1@huawei.com> - 10:6.2.0-74
changelog:
  - sw_64: Added sw64 architecture related updates
  - virtio-crypto: verify src&dst buffer length for sym request
  - vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
  - qga: Fix suspend on Linux guests without systemd
  - tests: vhost-user-test: release mutex on protocol violation
  - qapi: support updating expected test output via make
  - block: Fix misleading hexadecimal format
  - block/rbd: fix write zeroes with growing images
  - block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
  - block/nfs: Fix 32-bit Windows build
  - qapi/qdev: Tidy up device_add documentation
  - hw/xen/xen_pt: fix uninitialized variable
  - migration/ram: Fix error handling in ram_write_tracking_start()
  - docs/about/build-platforms: Refine the distro support policy
  - xen-block: Avoid leaks on new error path
  - QGA VSS: Add wrapper to send log to debugger and stderr
  - chardev/char-socket: set s->listener = NULL in char_socket_finalize
  - qapi/block: Tidy up block-latency-histogram-set documentation
  - disas/riscv Fix ctzw disassemble
  - vfio: Fix vfio_get_dev_region() trace event
  - migration/ram: Fix populate_read_range()
  - Check and report for incomplete 'global' option  format


author: <fengjiabo1@huawei.com> - 10:6.2.0-76
changelog:
  - test: Fix test-crypto-secret when compiling without keyring support
  - aio-posix: fix build failure io_uring 2.2


author: <fengjiabo1@huawei.com> - 10:6.2.0-77
changelog:
  - io: remove io watch if TLS channel is closed during handshake
  - hw/ssi: Fix Linux driver init issue with xilinx_spi
  - chardev: report the handshake error
  - vhost: Drop unused eventfd_add|del hooks
  - virtio-iommu: use-after-free fix
  - hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
  - hw/rx: rx-gdbsim DTB load address aligned of 16byte
  - vhost-user: Use correct macro name TARGET_PPC64
  - accel/kvm: Make kvm_dirty_ring_reaper_init() void
  - accel/kvm: Free as when an error occurred


author: <fengjiabo1@huawei.com> - 10:6.2.0-78
changelog:
  - hw/nvme: Avoid dynamic stack allocation
  - ppc/vof: Fix missed fields in VOF cleanup
  - ui: fix crash when there are no active_console
  - tests/qtest/pflash: Clean up local variable shadowing
  - target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
  - tulip: Assign default MAC address if not specified
  - hw/char: fix qcode array bounds check in ESCC impl


author: <fengjiabo1@huawei.com> - 10:6.2.0-79
changelog:
  - thread-pool: optimize scheduling of completion bottom half
  - migration/rdma: zore out head.repeat to make the error more clear
  - vhost-user-fs: Back up vqs before cleaning up vhost_dev
  - hw/vfio/pci-quirks: Sanitize capability pointer
  - hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
  - replay: fix event queue flush for qemu shutdown
  - hw/net: Fix read of uninitialized memory in ftgmac100
  - target/ppc: Fix tlbie
  - target/i386: fix INVD vmexit
  - qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
  - aio-posix: zero out io_uring sqe user_data


author: <fengjiabo1@huawei.com> - 10:6.2.0-80
changelog:
  - hw/virtio/virtio-pmem: Replace impossible check by assertion
  - tests: Fix printf format string in acpi-utils.c
  - softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
  - disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
  - qga: Fix memory leak when output stream is unused
  - ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  - target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  - target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  - target/i386: Allow MCDT_NO if host supports
  - target/i386: Add support for MCDT_NO in CPUID enumeration
  - target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  - target/i386: add support for FB_CLEAR feature
  - target/i386: add support for FLUSH_L1D feature
  - crypto: remove shadowed 'ret' variable
  - hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
  - hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number


author: <fengjiabo1@huawei.com> - 10:6.2.0-83
changelog:
  - hw/arm/fsl-imx: Do not ignore Error argument
  - hw/net/cadence_gem.c: spelling fixes: Octects
  - tests/qtest: check the return value
  - libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
  - io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
  - libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
  - qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
  - net: Fix a misleading error message
  - target/i386: Adjust feature level according to FEAT_7_1_EDX
  - target/i386: Add new CPU model GraniteRapids
  - target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  - target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  - target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  - target/i386: Add support for AVX-IFMA in CPUID enumeration
  - target/i386: Add support for AMX-FP16 in CPUID enumeration
  - target/i386: Add support for CMPCCXADD in CPUID enumeration
  - tracetool: avoid invalid escape in Python string
  - hw/pvrdma: Protect against buggy or malicious guest driver
  - vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
  - qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
  - artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
  - virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
  - e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
  - pci: Fix the update of interrupt disable bit in PCI_COMMAND register
  - hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
  - tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
  - pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
  - hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
  - qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
  - semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
  - semihosting: fix memleak at semihosting_arg_fallback
  - target/i386: Export GDS_NO bit to guests


author: <fengjiabo1@huawei.com> - 10:6.2.0-84
changelog:
  - ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
  - hw/usb: dev-mtp: Use g_mkdir()
  - target/ppc/cpu-models: Remove the "default" CPU alias
  - hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
  - Fixed a QEMU hang when guest poweroff in COLO mode
  - migration/colo: More accurate update checkpoint time
  - scripts/entitlement.sh: Use backward-compatible cp flags
  - block/nvme: fix infinite loop in nvme_free_req_queue_cb()
  - hw/net: npcm7xx_emc fix missing queue_flush
  - Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
  - hw/arm: ast2600: Fix address mapping of second SPI controller
  - vhost-user-blk: reconnect on any error during realize
  - vhost-user-blk: propagate error return from generic vhost
  - hw/riscv: boot: Reduce FDT address alignment constraints
  - Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
  - Fix STM32F2XX USART data register readout
  - block: use 'unsigned' for in_flight field on driver state
  - sphinx: change default language to 'en'
  - tests/qtest: Fix two format strings
  - trivial typos: namesapce
  - hw/ide/atapi.c: Correct typos (CD-CDROM -> CD-ROM)
  - hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
  - hw/display/next-fb: Fix comment typo
  - xen/pass-through: merge emulated bits correctly
  - tests/qtest/migration-test.c: spelling fix: bandwith
  - target/i386/cpu: Improve error message for property "vendor"
  - balloon: Fix a misleading error message
  - target/arm: Don't set syndrome ISS for loads and  stores with writeback
  - disas/hppa: Show hexcode of instruction along with disassembly
  - tcg/loongarch64: Fix tcg_out_mov() Aborted
  - ui/qmp-cmds: Improve two error messages
  - qga: Improve guest-exec-status error message
  - hmp: Improve sync-profile error message
  - spapr/pci: Correct "does not support hotplugging error messages
  - xen/pass-through: don't create needless register  group


author: <fengjiabo1@huawei.com> - 10:6.2.0-85
changelog:
  - ui/vnc.c: Fixed a deadlock bug.
  - hw/i386: Fix comment style in topology.h
  - migration/multifd: Remove unnecessary usage of local Error
  - linux-user: fix sockaddr_in6 endianness
  - vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
  - iotests: fix 194: filter out racy postcopy-active event
  - tests/avocado: fix waiting for vm shutdown in replay_linux
  - ui/vnc: fix debug output for invalid audio message
  - revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
  - migration: Set downtime_start even for postcopy
  - gdb-xml: fix duplicate register in arm-neon.xml
  - iotests: fix default machine type detection
  - migration: fix RAMBlock add NULL check
  - s390x: Fix spelling errors
  - ppc: spelling fixes
  - hw/scsi/vhost-scsi: don't double close vhostfd on error
  - virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
  - hw/scsi/vhost-scsi: don't leak vqs on error
  - hw/i386/pc: Add missing property descriptions
  - pcie_aer: Don't trigger a LSI if none are defined
  - pci: Export the pci_intx() function
  - hw/qdev: Cosmetic around documentation
  - tests/unit: fix a -Wformat-truncation warning
  - tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
  - i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
  - ui/vnc-clipboard: fix inflate_buffer
  - hw/usb/hcd-xhci.c: spelling: tranfer


author: <fengjiabo1@huawei.com> - 10:6.2.0-86
changelog:
  - qga-win: Fix guest-get-fsinfo multi-disks collection
  - hw/timer: fix systick trace message
  - virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
  - ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
  - esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
  - hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
  - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  - net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
  - net: Provide MemReentrancyGuard * to qemu_new_nic()


author: <fengjiabo1@huawei.com> - 10:6.2.0-87
changelog:
  - i386/cpuid: Move leaf 7 to correct group
  - i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
  - i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
  - i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
  - target/i386: Change wrong XFRM value in SGX CPUID leaf
  - target/i386: Enable support for XSAVES based features
  - target/i386: Add kvm_get_one_msr helper
  - hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
  - linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
  - ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
  - tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
  - qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
  - target/ppc: Modify the uncorrect value irq to n_IRQ
  - block-migration: Ensure we don't crash during migration cleanup
  - target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
  - hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
  - configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
  - vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
  - hw/ide/core: set ERR_STAT in unsupported command completion
  - linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
  - load_elf: fix iterator's type for elf file processing
  - hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
  - hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
  - hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
  - chardev/char.c: fix "abstract device type" error message
  - block/rbd: fix handling of holes in .bdrv_co_block_status
  - qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
  - usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
  - hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
  - block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
  - vl: Improve error message for conflicting -incoming and -loadvm
  - hw/smbios: Fix OEM strings table option validation


author: <fengjiabo1@huawei.com> - 10:6.2.0-88
changelog:
  - hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/virtio: Introduce virtio_bh_new_guarded() helper
  - hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
  - checkpatch: add qemu_bh_new/aio_bh_new checks
  - async: avoid use-after-free on re-entrancy guard
  - async: Add an optional reentrancy guard to the BH API
  - hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
  - rtl8139: Remove unused variable
  - tulip: Remove unused variable
  - virtio-mem: Fix the bitmap index of the section offset
  - virtio-mem: Fix the iterator variable in a vmem->rdl_list loop
  - system/memory: use ldn_he_p/stn_he_p
  - block: Fix crash when loading snapshot on inactive node
  - smmu: Clear SMMUPciBus pointer cache when system reset
  - block/mirror: Fix NULL s->job in active writes
  - amd_iommu: Fix APIC address check
  - virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
  - libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
  - ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
  - ivshmem.c: change endianness to LITTLE_ENDIAN
  - hw/ppc/mac.h: Remove MAX_CPUS macro
  - configure: remove dead variables
  - virtio-gpu: do not byteswap padding
  - hw/intc: clean-up error reporting for failed ITS cmd
  - qemu-iotests: Discard stderr when probing devices
  - linux-user: un-parent OBJECT(cpu) when closing thread
  - hw/net/rocker: Avoid undefined shifts with more than 31 ports
  - contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
  - scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE


author: xihaochen <xihaochen@huawei.com> - 2.19-1
changelog:
  - Type:requirements                                                                                                                               
  - Id:NA
  - SUG:NA
  - DESC:update radvd to 2.19


author: chenziyang <chenziyang4@huawei.com> - 8.1-3
changelog:
  - Add shell command to switch bracketed-paste mode from on to off to keep consistent with realine-8.0


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change the uid and gid of directories newly created when run with --change-files


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix failure when recompiling noarch rpm and remove the require to rpm-build


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2110.0-15
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:omprog bugfix: invalid status handling at called program
         core bugfix: template system may generate invalid json


author: linzhuorong <linzhuorong@huawei.com> - 8.2110.0-16
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: OpenSSL: fix depreacted API issues for OpenSSL 3.x
          MMDBLOOKUP::FIXED:: Don't crash Rsyslog on mmdb
          support sha256 for StreamDriverAuthMode="x509/fingerprint"
          imjournal: add second fallback to _COMM
          bugfix: prevent pot. segfault when switchung to
          core/bugfix: using $uuid msg prop can deadlock rsyslog on shutdown
          GNUTls Driver: Fix memory leaks in gtlsInitCred


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2110.0-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tcp net subsystem: handle data race gracefully
         fix startup issue on modern systemd systems
         tcpflood bugfix: plain tcp send error not properly reported
         tcpflood bugfix: TCP sending was not implemented properly
         lookup tables: fix static analyzer issue
         lookup tables bugfix: reload on HUP did not work when backgrounded
         openssl: Replaced depreceated method SSLv23_method with TLS_method
         testbench: make waiting for HUP processing more reliable
         bugfix: cosmetic data races
         mmnormalize bugfix: if msg cannot be parsed, parser chain is stopped
         core bugfix: potential segfault on busy systems
         imfile: fix ext directory's fd leak in case of inotify on symlink
         imfile tests: ext directory's fd leak in case of inotify on symlink
         testbench: fix imfile-statefile-delete.sh (INOTIFY trigger)
         imfile bugfix: message loss/duplication when monitored file is rotated
         testbench: add testcase for frequent imfile input file change
         Use runConf instead of loadConf in ratelimiting during runtime


author: jinlun<jinlun@huawei.com> - 35.5-16
changelog:
  - backport patch Allow virt_domain read device sysctls
                   Allow icecast rename its log files


author: jinlun <jinlun@huawei.com> - 15.4-5
changelog:
  - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
    CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
    CVE-2021-23841 CVE-2022-0778 CVE-2021-3712


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.0.0-6
changelog:
  - docs: fix some statement
  - machine_manager: add autodeflate for balloon
  - migration: add dev_id into VirtioPciState when save and restore device state
  - machine: fix more than one pcie-root-ports with same id
  - migration: move function "transport_reset" to save state stage for vhost vsock device
  - vfio: adding ram device region to vfio bar region
  - machine_manager: move argument "serial" from -drive to -device virtio-blk-pci/device
  - machine_manager: add multifunction for devices
  - machine: add init_multifunction function to init multifunction
  - machine: add realization for multifunction


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-1
changelog:
  - Add support for PCIe native hotplugging.
  - Reduce memory consumption of reading edk2 firmware files on aarch64.
  - Add support for booting from disk image directly.
  - Add support for VM reboot and VM shutdown.
  - Add support for guest memory preallocation.
  - Add more test cases.
  - Add and fix documentation.
  - Replace lazy_static crate with once_cell.
  - Performance enhancement for virtio-blk and virtio-net devices.
  - Add ftrace support.


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-2
changelog:
  - Fix VFIO hotplugging failure caused by missing seccomp rules.
  - Fix booting failure from disk image on x86_64.
  - Update some documents.


author: Jie Yang <yangjieyj.yang@huawei.com> - 2.1.0-3
changelog:
  - Fix memory snapshot failure with hotplugged devices.
  - Fix address translation for virtio devices.
  - Add some test cases for microvm.
  - Update some documents.


author: wangyuhang<wangyuhang27@huawei.com> -249-29
changelog:
  - fix build fail on meson-0.6
    1. delete invalid meson build option
    2. meson.build: change operator combining bools from + to and


author: yangmingtai <yangmingtai@huawei.com> -249-42
changelog:
  - 1.change /etc/systemd/journald.conf ForwardToWall to no
    2.change DefaultLimitMEMLOCK to 64M
    3.replace openEuler to vendor
    4.delete useless file udev-61-openeuler-persistent-storage.rules


author: shixin <shixin21@huawei.com> - 249-55
changelog:
  - sysuesrs_dir, sysctl_dir, binfmt_dir, modules_load_dir reference directories in /usr/lib for embedded
  - modify dns server address to avoid security risk for embedded
  - add support to relabel systemd process for embedded
  - add noexec mount option to strenthen tmp partition for embedded
  - use yocto configs for embedded


author: huyubiao <huyubiao@huawei.com> - 249-61
changelog:
  - backport: sync patches from systemd community
    add backport-core-path-do-not-enqueue-new-job-in-.trigger_notify-.patch
        backport-socket-fix-use-of-ERRNO_IS_DISCONNECT.patch
        backport-sd-bus-fix-use-of-ERRNO_IS_DISCONNECT.patch
        backport-resolved-fix-use-of-ERRNO_IS_DISCONNECT.patch
        backport-bus-add-some-minimal-bounds-check-on-signatures.patch
        backport-udev-builtin-net_id-fix-potential-buffer-overflow.patch
        backport-hostname-Make-sure-we-pass-error-to-bus_verify_polki.patch
        backport-Limit-rlim_max-in-rlimit_nofile_safe-to-nr_open.patch
        backport-udev-raise-RLIMIT_NOFILE-as-high-as-we-can.patch


author: hongjinghao <hongjinghao@huawei.com> - 249-62
changelog:
  - add: backport-json-use-unsigned-for-refernce-counter.patch
        backport-macro-check-over-flow-in-reference-counter.patch
        backport-sd-bus-fix-reference-counter-to-be-incremented.patch
        backport-sd-bus-introduce-ref-unref-function-for-track_item.patch
        backport-sd-bus-do-not-read-unused-value.patch
        backport-sd-bus-do-not-return-negative-errno-when-unknown-nam.patch
        backport-sd-bus-use-hashmap_contains-and-drop-unnecessary-cas.patch
        backport-test-shorten-code-a-bit.patch
        backport-test-add-several-tests-for-track-item.patch
        backport-Use-dummy-allocator-to-make-accesses-defined-as-per-standard.patch
        backport-sd-bus-switch-to-a-manual-overflow-check-in.patch


author: wangyuhang <wangyuhang27@huawei.com> - 249-69
changelog:
  - backport: sync patches from systemd community
              add backport-journal-recalculate-line_max-when-stdout-stream-stat.patch
              backport-pid1-terminate-cylon-string.patch
              backport-pid1-move-draw_cylong-to-pretty-print.-ch.patch
              backport-test-add-test-for-draw_cylon.patch
              backport-locale-util-do-not-call-setlocale-when-multi-threade.patch
              backport-resolve-fix-wrong-error-cause-assignment-to-log_debu.patch
              backport-resolve-do-not-trigger-assertion-on-exit.patch
              backport-network-neighbor-add-missing-OOM-check.patch
              backport-dissect-tool-right-align-the-partition-number.patch
              backport-dissect-image-fix-fd-leak-in-dissected_image_acquire.patch
              backport-udev-even-if-a-device-is-a-zac-device-scsi-ID_SERIAL.patch
              backport-core-log-message-when-reloading-finishes.patch


author: huyubiao <huyubiao@huawei.com> - 249-70
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add backport-basic-fix-overflow-detection-in-sigbus_pop.patch
         backport-busctl-avoid-asserting-on-NULL-message.patch
         backport-resolve-don-t-add-sockets-to-the-graveyard-on-shutdo.patch
         backport-sd-journal-check-sd-event-state-before-setting-up-po.patch


author: huyubiao <huyubiao@huawei.com> - 249-71
changelog:
  - move the architecture patches after Patch9800 (excluding Patch9800)
    delete the duplicate systemd-coredump.socket


author: huyubiao <huyubiao@huawei.com> - 249-73
changelog:
  - DESC:add backport-core-exec-do-not-crash-with-UtmpMode-user-without-Us.patch
         backport-resolved-limit-the-number-of-signature-validations-i.patch
         backport-resolved-reduce-the-maximum-nsec3-iterations-to-100.patch


author: yangzhuangzhuang <yangzhuangzhaung1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: xingwei <xingwei14@h-partners.com> - 14:4.99.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Set SA_RESTART on non-lethal signals (REQ_INFO, FLUSH_PCAP) to avoid corrupting binary pcap output


author: wangyue <wangyue92@huawei.com> - 1:9.0.10-18
changelog:
  - Type:cve
  - ID: CVE-2021-25122 CVE-2021-25329
  - SUG:restart
  - DESC: fix CVE-2021-25122 CVE-2021-25329


author: jinlun <jinlun@huawei.com> - 2.4.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify the version of policycoreutils required by tpm2-abrmd-selinux


author: chenyanpanHW <chenyanpan@huawei.com> - 2.10.0-10
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/bugfix-tuned-2.8.0-restart-after-kill-dbus.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/tuned-2.18.0-rhel-8-profiles.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/tuned-2.18.0-sd-load-balance.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/change-the-default-percentage-when-dirty-data-starts.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: qinyu<qinyu32@huawei.com> - 2022a-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Greenland change should affect only America/Nuuk; The northern edge of Chihuahua changes to US rules


author: langfei<langfei@huawei.com> - 2022a-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: liuchao <liuchao173@huawei.com> - 2022a-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Vostok switches to +05; Sync Casey data from timeanddata.com; Kazakhstan unifies on UTC+5


author: liuchao<liuchao173@huawei.com> - 2022a-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remake rearguard version of main.zi to fix check_zishrink_posix fail


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-34
changelog:
  - Type:CVE
  - ID:CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619
  - SUG:NA
  - DESC:fix CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-50
changelog:
  - Type:CVE
  - ID:CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345
  - SUG:NA
  - DESC:fix CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-51
changelog:
  - Type:CVE
  - ID:CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287
  - SUG:NA
  - DESC:fix CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:8.2-55
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the error of backport-cannot-list-options-one-per-line.patch


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-4
changelog:
  - Type:CVE
  - ID:CVE-2022-3491 CVE-2022-3520 CVE-2022-3591
  - SUG:NA
  - DESC:fix CVE-2022-3491 CVE-2022-3520 CVE-2022-3591


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-7
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-17
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-22
changelog:
  - Type:CVE
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
  - SUG:NA
  - DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237


author: ouyangminxiang<ouyangminxiang@kylinsec.com.cn> - 1.20.11-7
changelog:
  - Fix the crash in shadowUpdatePacked because of memcpy acts randomly with overlapping areas.
  - Fix the problem of black screen after entering the login interface


author: wanglin <wangl29@chinatelecom.cn> - 1.20.11-14
changelog:
  - Fix openEuler hard code problem
  - use -git instead of .git as the filename, to avoid .git ignore
  - Fix changelog date


author: yangcheng<yangcheng87@huawei.com> - 1.20.11-2
changelog:
  - Type:CVE
  - Id:CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011
  - SUG:NA
  - DESC:fix CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011


author: xingwei <xingwei14@h-partners.com> - 4.2.3-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add haveged requires and optimize random number function replacement patch


