# changelog

author: maminjie <maminjie1@huawei.com> - 1.3.30-8
changelog:
  - fix some CVEs: CVE-2018-18544 CVE-2019-7397 CVE-2019-11005 CVE-2019-11006
    CVE-2019-11010 CVE-2019-12921 CVE-2020-10938 CVE-2020-12672


author: yaoxin <yaoxin30@huawei.com> 2.4.3-5
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-44228 is fixed, the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> 2.4.3-6
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-45105 is fixed, the version needs to be rebuild.


author: houyingchao <houyingchao@huawei.com> 2.4.3-7
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: wangxiao <wangxiao65@huawei.com> - 6.9.10.67-19
changelog:
  - Fix CVE-2020-25676 CVE-2020-27757 CVE-2020-27758 CVE-2020-27771
    CVE-2020-27772 CVE-2020-27774 CVE-2020-27775 CVE-2020-27751


author: yuboyun <yuboyun@huawei.com> - 1.26.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macro firewalld_zone to fix firewalld error about nm-shared.xml


author: jiazhenyuan <jiazhenyuan@uniontech.com> - 1.26.2-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix dbus-daemon error when systemd-resolved service was not enabled


author: gaoxingwang <gaoxingwang@huawei.com> - 1.26.2-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync from upstream, fix wrongly considering ipv6.may-fail for ipv4


author: zengwefeng <zwfeng@huawei.com> - 1.26.2-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix crash in nm_wildcard_match_check
         fix leak of NMOvsdbPrivate db_uuid


author: gaoxingwang <gaoxingwang@huawei.com> - 1.26.2-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnm: fix leak and return failures from nm_client_load_connections()


author: seuzw <930zhaowei@163.com> - 1.26.2-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the issue that NetworkManager service does not self-heal when the dbus service is abnormal


author: zhanghua <zhanghua40@huawei.com> - 2.2.0-18
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DESC:fix CVE-2017-9110 CVE-2017-9111 CVE-2017-9112 CVE-2017-9113
    CVE-2017-9114 CVE-2017-9115 CVE-2017-9116 CVE-2017-12596


author: wangyue <wangyue92@huawei.com> - 2.2.0-19
changelog:
  - fix CVE-2021-3474 CVE-2021-3477 CVE-2021-3476 CVE-2021-3475 CVE-2021-20296 CVE-2021-3479 CVE-2021-20296


author: yaoxin <yaoxin30@huawei.com> - 2.2.0-22
changelog:
  - fix CVE-2020-11758 CVE-2020-11759 CVE-2020-11760 CVE-2020-11761 CVE-2020-11762 CVE-2020-11763 CVE-2020-11764 CVE-2020-11765 CVE-2020-15305 CVE-2020-15306


author: openEuler Buildteam <buildteam@openeuler.org> - 0.16-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: change file from /etc/logrotate.d/aide/aide.logrotate to /etc/logrotate.d/aide


author: yixiangzhike <yixiangzhike007@163.com> - 0.16.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport upstream patches to strengthen malloc,calloc,realloc,strdup


author: konglidong <konglidong@uniontech.com> - 33.19-33.up2
changelog:
  - DESC:add quiet cmdline args(PMS89541)
  - add requires metacity and delete if_arch condition for usermode to fix empty link in OS(PMS113054)


author: herengui <herengui@uniontech.com> - 33.19-33.up3
changelog:
  - DESC:fix text mode display chinese chars in english env(PMS114103)
  - DESC:fix default selection lang isn't zh_CN(PMS133991)


author: wangce <wangce@uniontech.com> - 33.19-33.up6
changelog:
  - DESC:Revert text_mode language default English patch modification
  - DESC:delete 0004-delete-version-and-default-language.patch patch(PMS123833)
  - DESC:modify the logo position(PMS123833)
  - fix: delete disable-disk-encryption.patch file(bugid:141427)


author: songmingliang <songmingliang@uniontech.com> - 33.19-33.up7
changelog:
  - fix: waiting for THREAD_PAYLOAD to get source
  - fix: support pxe to configure kernel source on tui(bugid:151435)
  - fix: support pxe to configure kernel source(bugid:151435)
  - fix: reload kernel when load all source(bugid:140049)
  - fix: add username check(bugid:142199)


author: wanglu <wanglu210@huawei.com> - 33.19-33
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert "Set default entry to the BLS id instead of the entry index"


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-34
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Solve the problem that sometimes the circular loading progress bar does not rotate


author: sunhai <sunhai10@huawei.com> - 33.19-36
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:dracut handle compressed kernel modules
         network use separate main conext for NM-client in threads


author: wangqia <wangqia@uniontech.com> - 33.19-36.up7
changelog:
  - fix: waiting for THREAD_PAYLOAD to get source
  - fix: support pxe to configure kernel source on tui(bugid:151435)
  - fix: support pxe to configure kernel source(bugid:151435)
  - fix: reload kernel when load all source(bugid:140049)
  - fix: add username check(bugid:142199)
  - fix: add quiet cmdline args(PMS89541)
  - fix: add requires metacity and delete if_arch condition for usermode to fix empty link in OS(PMS113054)
  - fix: fix text mode display chinese chars in english env(PMS114103)
  - fix: fix default selection lang isn't zh_CN(PMS133991)
  - feat: add kernel selection
  - fix: solve the display problem of kernel selection interface
  - DESC: Revert text_mode language default English patch modification
  - fix: delete 0004-delete-version-and-default-language.patch patch(PMS123833)
  - fix: modify the logo position(PMS123833)
  - fix: delete disable-disk-encryption.patch file(bugid:141427)


author: Shijie Luo<luoshijie1@huawei.com> - 2.4.48-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix error condition of while loop 
         in 0001-bypass-wrong-output-when-enabled-selinux.patch.


author: heyitao <heyitao@uniontech.com> - 1.0.0-6.up1
changelog:
  - add conflicts rules for tuned
  - add runtime dependencies
  - add_ftp enhance scene
  - add tuned featuresand
  - update list interface


author: yixiangzhike <yixiangzhike007@163.com> - 3.0-4
changelog:
  - backport some patches
     Add missing call to free_interpretation_list
     fix 2 more issues found by fuzzing
     Fix an auparse memory leak caused in recent glibc
     Fix double free with corrupted logs
     Turn libaucommon into a libtool convenience library
     Fix the closing timing of audit_fd
     Fix some string length issues
     Move the free_config to success path
     Check for fuzzer induced invalid value
     error out if log is mangled
     Dont run off the end with corrupt logs
     Another hardening measure for corrupted logs
     Fix busy loop in normalizer when logs are corrupt
     Better fix for busy loop in normalizer when logs are corrupt
     flush uid gid caches when user group added deleted modified
     In auditd check if log_file is valid before closing handle
     Check ctime return code
     When interpreting if val is NULL return an empty string
     auditd.service Restart on failure ignoring some exit
     In auditd close the logging file descriptor when logging is suspended


author: zhangguangzhi <zhangguangzhi3@huawei.com> - 1:3.0-6
changelog:
  - backport some patches
    In auditd release the async flush lock on stop
    auditd cleanup krb5 memory leaks on error paths
    audisp remote cleanup krb5 memory leaks on error paths
    Final kerberos leak fixups
    time_t is not an int anymore
    krb5_cc_store_cred takes custody of my_creds so we do not need to keep it around


author: wangkai <wangkai385@huawei.com> - 0:4.3-23
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0:4.3-24
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: shenyangyang<shenyangyang4@huawei.com> - 5.0-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Rebuild for openEuler-rpm-config moving /usr/lib/rpm/openEuler/xxxx
         to /usr/lib/xxxx


author: licihua<licihua@huawei.com> - 5.0-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix quoted null string removal when using shell word expansion pattern operators


author: wangyuhang<wangyuhang27@huawei.com> - 5.0-19
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:sync patches from bash community
         add backport-Bash-5.1-patch-12-fix-race-condition-with-child-proc.patch
         add backport-Bash-5.1-patch-16-fix-interpretation-of-multiple-ins.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.17-1
changelog:
  - Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730


author: yuanxin <yuanxin21@huawei.com> - 9.11.21-2
changelog:
  - Type:CVE
  - ID:CVE-2020-8622.patch  CVE-2020-8623.patch  CVE-2020-8624.patch
  - SUG:NA
  - DESC:fix CVE-2020-8622.patch  CVE-2020-8623.patch  CVE-2020-8624.patch


author: hanzhijun <hanzhijun1@huawei.com> - 9.11.21-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix the difference at the macro definition using clock gettime instead of gettimeofda


author: huangyu <huangyu106@huawei.com> - 32:9.11.21-14
changelog:
  - Type:CVE
  - ID:CVE-2022-2906 CVE-2022-38177 CVE-2022-38178 CVE-2022-2795 CVE-2022-2881
  - SUG:NA
  - DESC:FIX CVE-2022-2906CVE-2022-38177CVE-2022-38178CVE-2022-2795CVE-2022-2881


author: zhanghao <zhanghao383@huawei.com> - 32:9.11.21-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: panxiaohe <panxiaohe@huawei.com> - 2.34-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix erroneous decoding of LEB128 values
         heap-buffer-overflow on readelf -Ww


author: haomimi <haomimi@uniontech.com> - 2.34-25.up1
changelog:
  - spec: build libiberty.a with -fPIC
  - build: There was an error compiling latrace libiberty.a can not be used when making a shared object


author: panxiaohe <panxiaohe@huawei.com> - 3.6.4-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:use make macros to run check in parallel;
         fix a concurrent build issue in examples


author: liuxin <liuxin264@huawei.com> - 3.2.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix allocate_partitions threw an exception while adding /boot to RAID disk


author: yanan <yanan@huawei.com> - 3.2.2-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Convert LVM filter lists to sets
         Remove action device from LVM reject list


author: yanan <yanan@huawei.com> - 3.2.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the failure of not a valid name for this device while the hostname is setted as 63 maxlen


author: wanglu <wanglu210@huawei.com> - 1:3.2.2-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ignore devices marked as hidden in sysfs and fix reading hidden sysfs attribute


author: zhangyiru <zhangyiru3@huawei.com> - 1.73.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:increase used_block_count when use put_mem_block
    Disallow repeating a case-change group


author: zhangyiru <zhangyiru3@huawei.com> - 1.73.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Correct stack unwinding inside recursions when seeing (*SKIP).


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2201.4.0.0135
changelog:
  - net: bridge: clear bridge's private skb space on xmit
  - audit: bugfix for infinite loop when flush the hold queue
  - blk-throttle: enable hierarchical throttle in cgroup v1
  - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2202.1.0.0136
changelog:
  - config: enable CONFIG_MEMCG_MEMFS_INFO by default
  - mm/memcg_memfs_info: show files that having pages charged in mem_cgroup
  - ext4: fix e2fsprogs checksum failure for mounted filesystem
  - drm/vmwgfx: Fix stale file descriptors on failed usercopy
  - perf vendor events amd: Fix broken L2 Cache Hits from L2 HWPF metric
  - perf vendor events amd: Add recommended events
  - perf vendor events amd: Add L2 Prefetch events for zen1
  - perf/amd/uncore: Fix sysfs type mismatch
  - perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest
  - tools/power turbostat: Support AMD Family 19h
  - perf/x86/amd/ibs: Support 27-bit extended Op/cycle counter
  - perf vendor events amd: Enable Family 19h users by matching Zen2 events
  - perf vendor events amd: Update Zen1 events to V2
  - perf vendor events amd: Add Zen2 events
  - perf vendor events amd: Restrict model detection for zen1 based processors
  - perf vendor events amd: Remove redundant '['
  - perf vendor events intel: Add Tremontx event file v1.02
  - perf vendor events intel: Add Icelake V1.00 event file
  - perf vendor events amd: Add L3 cache events for Family 17h
  - perf vendor events intel: Add uncore_upi JSON support
  - perf vendor events amd: perf PMU events for AMD Family 17h
  - perf/amd/uncore: Allow F19h user coreid, threadmask, and sliceid specification
  - perf/amd/uncore: Allow F17h user threadmask and slicemask specification
  - perf/amd/uncore: Prepare to scale for more attributes that vary per family
  - perf/x86/amd/ibs: Don't include randomized bits in get_ibs_op_count()
  - perf/amd/uncore: Set all slices and threads to restore perf stat -a behaviour
  - perf/x86/amd/ibs: Fix raw sample data accumulation
  - arch/x86/amd/ibs: Fix re-arming IBS Fetch
  - perf/amd/uncore: Add support for Family 19h L3 PMU
  - perf/amd/uncore: Make L3 thread mask code more readable
  - perf/amd/uncore: Prepare L3 thread mask code for Family 19h
  - EDAC/amd64: Handle three rank interleaving mode
  - EDAC/amd64: Add family ops for Family 19h Models 00h-0Fh
  - EDAC/amd64: Save max number of controllers to family type
  - EDAC/amd64: Gather hardware information early
  - EDAC/amd64: Make struct amd64_family_type global
  - EDAC/amd64: Set grain per DIMM
  - EDAC/amd64: Support asymmetric dual-rank DIMMs
  - EDAC/amd64: Cache secondary Chip Select registers
  - EDAC/amd64: Add PCI device IDs for family 17h, model 70h
  - EDAC/amd64: Find Chip Select memory size using Address Mask
  - EDAC/amd64: Adjust printed chip select sizes when interleaved
  - EDAC/amd64: Recognize x16 symbol size
  - EDAC/amd64: Set maximum channel layer size depending on family
  - EDAC/amd64: Support more than two Unified Memory Controllers
  - EDAC/amd64: Add Family 17h Model 30h PCI IDs
  - EDAC/amd64: Initialize DIMM info for systems with more than two channels
  - EDAC/amd64: Support more than two controllers for chip selects handling
  - EDAC/amd64: Use a macro for iterating over Unified Memory Controllers
  - x86/mce: Fix use of uninitialized MCE message string
  - x86/MCE/AMD, EDAC/mce_amd: Add new Load Store unit McaType
  - x86/MCE/AMD, EDAC/mce_amd: Add new error descriptions for some SMCA bank types
  - x86/MCE/AMD, EDAC/mce_amd: Add new McaTypes for CS, PSP, and SMU units
  - x86/MCE/AMD, EDAC/mce_amd: Add new MP5, NBIO, and PCIE SMCA bank types
  - EDAC/mce_amd: Always load on SMCA systems
  - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too
  - x86/amd_nb: Add Family 19h PCI IDs
  - x86/amd_nb: Add PCI device IDs for family 17h, model 70h
  - x86/amd_nb: Add PCI device IDs for family 17h, model 30h
  - hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs
  - EDAC/amd64: Drop some family checks for newer systems
  - x86/microcode/AMD: Increase microcode PATCH_MAX_SIZE
  - KVM: mmu: Fix SPTE encoding of MMIO generation upper half
  - build_bug.h: add wrapper for _Static_assert
  - KVM: x86: fix overlap between SPTE_MMIO_MASK and generation
  - KVM: x86: assign two bits to track SPTE kinds
  - KVM: Move the memslot update in-progress flag to bit 63
  - KVM: Remove the hack to trigger memslot generation wraparound
  - KVM: x86: clflushopt should be treated as a no-op by emulation
  - KVM: SVM: Clear the CR4 register on reset
  - KVM: SVM: Replace hard-coded value with #define
  - KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated
  - KVM: x86/mmu: Apply max PA check for MMIO sptes to 32-bit KVM
  - KVM: x86: only do L1TF workaround on affected processors
  - kvm: x86: Fix L1TF mitigation for shadow MMU
  - KVM: x86/mmu: Consolidate "is MMIO SPTE" code
  - KVM: SVM: Override default MMIO mask if memory encryption is enabled
  - KVM: x86/mmu: Add explicit access mask for MMIO SPTEs
  - kvm: x86: Fix reserved bits related calculation errors caused by MKTME
  - KVM: x86: Rename access permissions cache member in struct kvm_vcpu_arch
  - kvm: x86: Move kvm_set_mmio_spte_mask() from x86.c to mmu.c
  - kvm/svm: PKU not currently supported
  - kvm: x86: Expose RDPID in KVM_GET_SUPPORTED_CPUID
  - KVM: x86: Refactor the MMIO SPTE generation handling
  - KVM: Explicitly define the "memslot update in-progress" bit
  - KVM: x86: Use a u64 when passing the MMIO gen around
  - KVM: x86: expose MOVDIR64B CPU feature into VM.
  - KVM: x86: expose MOVDIRI CPU feature into VM.
  - KVM: x86: Add requisite includes to hyperv.h
  - KVM: x86: Add requisite includes to kvm_cache_regs.h
  - KVM: nVMX: Allocate and configure VM{READ,WRITE} bitmaps iff enable_shadow_vmcs
  - x86/cpufeatures: Enumerate MOVDIR64B instruction
  - x86/cpufeatures: Enumerate MOVDIRI instruction
  - x86/pkeys: Don't check if PKRU is zero before writing it
  - x86/fpu: Only write PKRU if it is different from current
  - x86/pkeys: Provide *pkru() helpers
  - sysctl: returns -EINVAL when a negative value is passed to proc_doulongvec_minmax
  - arm64: move jump_label_init() before parse_early_param()
  - tcp: fix memleak when tcp internal pacing is used
  - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
  - ovl: fix warning in ovl_create_real()
  - fuse: annotate lock in fuse_reverse_inval_entry()
  - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
  - sit: do not call ipip6_dev_free() from sit_init_net()
  - net/packet: rx_owner_map depends on pg_vec
  - x86/sme: Explicitly map new EFI memmap table as encrypted
  - dm btree remove: fix use after free in rebalance_children()
  - net: netlink: af_netlink: Prevent empty skb by adding a check on len.
  - irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
  - net, neigh: clear whole pneigh_entry at alloc time
  - aio: fix use-after-free due to missing POLLFREE handling
  - aio: keep poll requests on waitqueue until completed
  - signalfd: use wake_up_pollfree()
  - wait: add wake_up_pollfree()
  - tracefs: Have new files inherit the ownership of their parent
  - mm: bdi: initialize bdi_min_ratio when bdi is unregistered
  - udp: using datalen to cap max gso segments
  - bpf: Fix the off-by-two error in range markings
  - ipmi: msghandler: Make symbol 'remove_work_wq' static
  - serial: core: fix transmit-buffer reset and memleak
  - serial: pl011: Add ACPI SBSA UART match id
  - net: annotate data-races on txq->xmit_lock_owner
  - ipmi: Move remove_work to dedicated workqueue
  - vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
  - scsi: iscsi: Unblock session then wake up error handler
  - shm: extend forced shm destroy to support objects from several IPC nses
  - fuse: release pipe buf after last use
  - tracing: Check pid filtering when creating events
  - ipv6: fix typos in __ip6_finish_output()
  - proc/vmcore: fix clearing user buffer by properly using clear_user()
  - tracing: Fix pid filtering when triggers are attached
  - fuse: fix page stealing
  - ipmi_si: Phytium S2500 workaround for MMIO-based IPMI
  - etmem: Add a scan flag to support specified page swap-out
  - etmem: add swapcache reclaim to etmem
  - etmem: add original kernel swap enabled options


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2202.3.0.0137
changelog:
  - fs/filesystems.c: downgrade user-reachable WARN_ONCE() to pr_warn_once()
  - drm/i915: Flush TLBs before releasing backing store
  - moxart: fix potential use-after-free on remove path
  - memstick: rtsx_usb_ms: fix UAF
  - ext4: fix file system corrupted when rmdir non empty directory with IO error
  - bpf, doc: Remove references to warning message when using bpf_trace_printk()
  - bpf: Remove inline from bpf_do_trace_printk
  - bpf: Use dedicated bpf_trace_printk event instead of trace_printk()
  - net: cipso: fix warnings in netlbl_cipsov4_add_std
  - xsk: Use struct_size() helper
  - mm/page_alloc: fix counting of free pages after take off from buddy
  - mm,hwpoison: drop unneeded pcplist draining
  - mm,hwpoison: take free pages off the buddy freelists
  - mm,hwpoison: drain pcplists before bailing out for non-buddy zero-refcount page
  - mm,hwpoison: Try to narrow window race for free pages
  - mm,hwpoison: introduce MF_MSG_UNSPLIT_THP
  - mm,hwpoison: return 0 if the page is already poisoned in soft-offline
  - mm,hwpoison: refactor soft_offline_huge_page and __soft_offline_page
  - mm,hwpoison: rework soft offline for in-use pages
  - mm,hwpoison: rework soft offline for free pages
  - mm,hwpoison: unify THP handling for hard and soft offline
  - mm,hwpoison: kill put_hwpoison_page
  - mm,hwpoison: refactor madvise_inject_error
  - mm,hwpoison-inject: don't pin for hwpoison_filter
  - mm, hwpoison: remove recalculating hpage
  - mm,hwpoison: cleanup unused PageHuge() check
  - scsi: Revert "target: iscsi: Wait for all commands to finish before freeing a session"
  - uce: get_user scenario support kernel recovery
  - uce: copy_from_user scenario support kernel recovery
  - mm: Modify sharepool sp_mmap() page_offset
  - support multiple node for getting phys interface
  - share_pool: Accept device_id in k2u flags
  - share_pool: Clear the usage of node_id and device_id
  - share_pool: Make multi-device support extendable
  - share_pool: Fix flags conflict
  - config: enable MEMORY_RELIABLE by default
  - mm: add sysctl to clear free list pages
  - workqueue: Provide queue_work_node to queue work near a given NUMA node
  - mm:vmscan: add the missing check of page_cache_over_limit
  - sysctl: add proc interface to set page cache limit
  - mm/vmscan: dont do shrink_slab in reclaim page cache
  - mm/vmscan: dont reclaim anon page when shrink page cache
  - filemap: dont shrink_page_cache in add_to_page_cache
  - mm/vmscan: fix unexpected shrinking page cache with vm_cache_reclaim_enable disable
  - mm/vmscan: fix frequent call of shrink_page_cache_work
  - proc/meminfo: add "FileCache" item in /proc/meminfo
  - mm: add page cache fallback statistic
  - mm: add cmdline for the reliable memory usage of page cache
  - mm: make page cache use reliable memory by default
  - shmem: Show reliable shmem info
  - shmem: Introduce shmem reliable
  - mm: Introduce fallback mechanism for memory reliable
  - mm: Add reliable memory use limit for user tasks
  - mm: thp: Add memory reliable support for hugepaged collapse
  - proc: Count reliable memory usage of reliable tasks
  - mm: Add reliable_nr_page for accounting reliable memory
  - mm: Introduce reliable flag for user task
  - meminfo: Show reliable memory info
  - mm: Introduce memory reliable
  - efi: Find mirrored memory ranges for arm64
  - efi: Make efi_find_mirror() public
  - arm64: efi: Add fake memory support
  - efi: Make efi_print_memmap() public
  - mm/memory_hotplug: allow to specify a default online_type
  - mm/memory_hotplug: convert memhp_auto_online to store an online_type
  - hv_balloon: don't check for memhp_auto_online manually
  - drivers/base/memory: store mapping between MMOP_* and string in an array
  - drivers/base/memory: map MMOP_OFFLINE to 0
  - drivers/base/memory: rename MMOP_ONLINE_KEEP to MMOP_ONLINE
  - drivers/base/memory.c: Use DEVICE_ATTR_RO and friends
  - mm/memory_hotplug: drop "online" parameter from add_memory_resource()


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2202.4.0.0138
changelog:
  - tipc: improve size validations for received domain records
  - yam: fix a memory leak in yam_siocdevprivate()
  - ipmi_si: Phytium S2500 missing timeout counter reset in intf_mem_inw
  - mm,hwpoison: Fix use-after-free in memory_failure()
  - dm-mpath: fix UAF in multipath_message()
  - usb: gadget: clear related members when goto fail
  - usb: gadget: don't release an existing dev->buf
  - dm: make sure dm_table is binded before queue request
  - cgroup-v1: Require capabilities to set release_agent
  - NFSv4: nfs_atomic_open() can race when looking up a non-regular file
  - NFSv4: Handle case where the lookup of a directory fails
  - configfs: fix a race in configfs_{,un}register_subsystem()
  - fs/filesystems.c: downgrade user-reachable WARN_ONCE() to pr_warn_once()
  - drm/i915: Flush TLBs before releasing backing store
  - moxart: fix potential use-after-free on remove path
  - memstick: rtsx_usb_ms: fix UAF


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2203.1.0.0139
changelog:
  - usb: gadget: rndis: check size of RNDIS_MSG_SET command
  - USB: gadget: validate interface OS descriptor requests
  - mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
  - udf: Restore i_lenAlloc when inode expansion fails
  - udf: Fix NULL ptr deref when converting from inline format
  - ext4: fix underflow in ext4_max_bitmap_size()
  - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds()
  - livepatch/x86: Fix incorrect use of 'strncpy'
  - tipc: improve size validations for received domain records
  - yam: fix a memory leak in yam_siocdevprivate()
  - ipmi_si: Phytium S2500 missing timeout counter reset in intf_mem_inw
  - mm,hwpoison: Fix use-after-free in memory_failure()
  - dm-mpath: fix UAF in multipath_message()
  - usb: gadget: clear related members when goto fail
  - usb: gadget: don't release an existing dev->buf
  - dm: make sure dm_table is binded before queue request
  - cgroup-v1: Require capabilities to set release_agent
  - NFSv4: nfs_atomic_open() can race when looking up a non-regular file
  - NFSv4: Handle case where the lookup of a directory fails
  - configfs: fix a race in configfs_{,un}register_subsystem()


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2203.2.0.0140
changelog:
  - mm: Fix return val in khugepaged_scan_pmd()
  - mm: do some clean up of accounting ReliableTaskUsed
  - mm: fix statistic of ReliableTaskUsed
  - mm: fix missing reclaim of low-reliable page cache
  - mm: fix statistic of ReliableFileCache in /proc/meminfo
  - mm: Add more gfp flag check in prepare_before_alloc()
  - efi: Stub mirrored_kernelcore if CONFIG_HAVE_MEMBLOCK_NODE_MAP is not enabled
  - mm: Memory reliable features can only be disabled via proc interface
  - mm: Fix reliable_debug in proc not consistent with boot parameter problem
  - f2fs: fix to do sanity check on inode type during garbage collection
  - mm: Check page status in page_reliable()
  - mm: Show ReliableTaskUsed in /proc/meminfo
  - mm: Refactor code in reliable_report_meminfo()
  - mm: Show correct reliable_user_used if PAGE_SIZE is not 4K
  - proc: Fix reliable display err in /proc/pid/status
  - Revert "mm: add page cache fallback statistic"
  - mm: fix page cache use reliable memory when reliable_debug=P
  - mm: add support for limiting the usage of reliable memory in pagecache
  - mm: add "ReliableFileCache" item in /proc/meminfo
  - mm: Introduce shmem mirrored memory limit for memory reliable
  - mm: Introduce watermark check for memory reliable
  - mm: Count mirrored pages in buddy system
  - mm: Export mem_reliable_status() for checking memory reliable status
  - mm: Make MEMORY_RELIABLE depends on HAVE_MEMBLOCK_NODE_MAP
  - efi: Disable mirror feature if kernelcore is not spcified
  - mm: Introduce proc interface to control memory reliable features
  - mm: Demote warning message in vmemmap_verify() to debug level
  - mm: Ratelimited mirrored memory related warning messages


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2203.3.0.0141
changelog:
  - crypto: pcrypt - Fix user-after-free on module unload
  - lib/iov_iter: initialize "flags" in new pipe_buffer
  - mm: Count reliable shmem used based on NR_SHMEM
  - mm: fix zoneref mapping problem in memory reliable
  - mm: disable memory reliable when kdump is in progress
  - mm: introduce "clear_freelist" kernel parameter
  - mm: fix unable to use reliable memory in page cache
  - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
  - select: Fix indefinitely sleeping task in poll_schedule_timeout()
  - mtd: nand: bbt: Fix corner case in bad block table handling
  - netns: add schedule point in ops_exit_list()
  - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
  - crypto: stm32/crc32 - Fix kernel BUG triggered in probe()
  - ext4: don't use the orphan list when migrating an inode
  - ext4: set csum seed in tmp inode while migrating to extents
  - ext4: make sure quota gets properly shutdown on error
  - ext4: make sure to reset inode lockdep class when quota enabling fails
  - cputime, cpuacct: Include guest time in user time in cpuacct.stat
  - serial: Fix incorrect rs485 polarity on uart open
  - scsi: sr: Don't use GFP_DMA
  - dm space map common: add bounds check to sm_ll_lookup_bitmap()
  - dm btree: add a defensive bounds check to insert_at()
  - ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
  - ACPICA: Utilities: Avoid deleting the same object twice in a row
  - jffs2: GC deadlock reading a page that is used in jffs2_write_begin()
  - bpf: Do not WARN in bpf_warn_invalid_xdp_action()
  - net: bonding: debug: avoid printing debug logs when bond is not notifying peers
  - net-sysfs: update the queue counts in the unregistration path
  - dmaengine: pxa/mmp: stop referencing config->slave_id
  - scsi: ufs: Fix race conditions related to driver data
  - iommu/io-pgtable-arm: Fix table descriptor paddr formatting
  - ext4: avoid trim error on fs with small groups
  - net: mcs7830: handle usb read errors properly
  - tpm: add request_locality before write TPM_INT_ENABLE
  - netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
  - xfrm: state and policy should fail if XFRMA_IF_ID 0
  - xfrm: interface with if_id 0 should return error
  - crypto: stm32/cryp - fix double pm exit
  - xfrm: fix a small bug in xfrm_sa_len()
  - sched/rt: Try to restart rt period timer when rt runtime exceeded
  - serial: amba-pl011: do not request memory region twice
  - tty: serial: uartlite: allow 64 bit address
  - netfilter: bridge: add support for pppoe filtering
  - crypto: qce - fix uaf on qce_ahash_register_one
  - shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode
  - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet
  - ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate
  - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()
  - ipv6: Do cleanup if attribute validation fails in multipath route
  - ipv6: Continue processing multipath route even if gateway attribute is invalid
  - ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route
  - ipv6: Check attribute length for RTA_GATEWAY in multipath route
  - tracing: Tag trace_percpu_buffer as a percpu pointer
  - tracing: Fix check for trace_percpu_buffer validity in get_trace_buf()
  - net: fix use-after-free in tw_timer_handler
  - udp: using datalen to cap ipv6 udp max gso segments
  - selinux: initialize proto variable in selinux_ip_postroute_compat()
  - x86/pkey: Fix undefined behaviour with PKRU_WD_BIT
  - ipmi: fix initialization when workqueue allocation fails
  - ipmi: bail out if init_srcu_struct fails
  - bonding: fix ad_actor_system option setting to default
  - ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
  - net: skip virtio_net_hdr_set_proto if protocol already set
  - net: hns3: update hns3 version to 22.2.1
  - net: hns3: fix RMW issue for VLAN filter switch
  - net: hns3: fix pf vlan filter out of work after self test
  - arm64: acpi: fix UBSAN warning
  - sched: Fix sleeping in atomic context at cpu_qos_write()
  - io_uring: don't re-setup vecs/iter in io_resumit_prep() is already there
  - io_uring: don't double complete failed reissue request
  - io_uring: remove redundant initialization of variable ret
  - block: don't ignore REQ_NOWAIT for direct IO
  - io_uring: re-issue block requests that failed because of resources
  - dm multipath: fix missing blk_account_io_done() in error path
  - block: account inflight from blk_account_io_start() if 'precise_iostat' is set
  - block: add a switch for precise iostat accounting
  - blk-throttle: Set BIO_THROTTLED when bio has been throttled
  - bfq: fix use-after-free in bfq_dispatch_request
  - hugetlbfs: fix a truncation issue in hugepages parameter


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2203.4.0.0142
changelog:
  - kabi: fix kabi broken in struct fuse_in
  - fuse: fix pipe buffer lifetime for direct_io
  - blk-throtl: fix race in io dispatching
  - ext4: Fix symlink file size not match to file content
  - livepatch/core: Check klp_func before 'klp_init_object_loaded'
  - irqchip/gic-phytium-2500: Fix issue that interrupts are concentrated in one cpu
  - blk-mq: add exception handling when srcu->sda alloc failed
  - audit: improve audit queue handling when "audit=1" on cmdline
  - Revert "audit: bugfix for infinite loop when flush the hold queue"
  - veth: Do not record rx queue hint in veth_xmit


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2203.5.0.0143
changelog:
  - livepatch/arm64: Fix incorrect endian conversion when long jump
  - arm64/mpam: realign step entry when traversing rmid_transform
  - dt-bindings: mpam: refactor device tree node structure
  - arm64/mpam: refactor device tree structure to support multiple devices
  - arm64/mpam: fix __mpam_device_create() section mismatch error
  - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern
  - hugetlb: Add huge page alloced limit
  - swiotlb: rework "fix info leak with DMA_FROM_DEVICE"
  - swiotlb: fix info leak with DMA_FROM_DEVICE
  - esp: Fix possible buffer overflow in ESP transformation
  - sock: remove one redundant SKB_FRAG_PAGE_ORDER macro
  - io_uring: fix UAF in get_files_struct()
  - xfs: fix an undefined behaviour in _da3_path_shift
  - xfs: Fix possible null-pointer dereferences in xchk_da_btree_block_check_sibling()
  - xfs: fix use after free in buf log item unlock assert
  - ACPI/IORT: Do not blindly trust DMA masks from firmware


author: caina <caina@uniontech.com> - 4.19.90-2211.5.0.0178.25
changelog:
  - stable: {CVE-2024-1086} netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - euler: netfilter: nf_queue: fix socket leak
  - UOS: Add flags for Fisherman algo


author: caina <caina@uniontech.com> - 4.19.90-2211.5.0.0178.26
changelog:
  - uos: svm: fix multiple macro definitions [B255647]
  - stable: {CVE-2024-42232} libceph: fix race between delayed_work() and ceph_monc_stop() [T360521]
  - stable: {CVE-2022-48856} gianfar: ethtool: Fix refcount leak in gfar_get_ts_info [T360521]
  - uos: KVM: x86/mmu: Support shadowing NPT when 5-level paging is enabled in host [B255647]
  - uos: KVM: SVM: Allow AVIC support on system w/ physical APIC ID > 255 [B255647]
  - uos: KVM: x86: SVM: move avic definitions from AMD's spec to svm.h [B255647]
  - uos: KVM: SVM: Add 5-level page table support for SVM [B255647]
  - uos: KVM: x86: Prevent KVM SVM from loading on kernels with 5-level paging [B255647]


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2211.5.0.0178.28
changelog:
  - euler: {CVE-2024-44965} x86/mm: Fix pti_clone_pgtable() alignment assumption [T371989]
  - euler: {CVE-2024-46755} wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() [T371989]
  - euler: {CVE-2024-46744} Squashfs: sanity check symbolic link size [T371989]
  - euler: {CVE-2021-47101} net: asix: fix uninit value bugs [T371989]
  - euler: {CVE-2024-46745} Input: uinput - reject requests with unreasonable number of slots [T371989]
  - euler: {CVE-2024-45008} Input: MT - limit max slots [T371989]
  - euler: {CVE-2024-46759} hwmon: (adc128d818) Fix underflows seen when writing limit attributes [T371989]
  - euler: {CVE-2024-46747} HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup [T371989]
  - euler: {CVE-2024-44999} gtp: pull network headers in gtp_dev_xmit() [T371989]
  - euler: {CVE-2024-46677} gtp: make sure only SOCK_DGRAM UDP sockets are accepted [T371989]
  - euler: {CVE-2024-26654} ALSA: aica: Fix a long-time build breakage [T371989]
  - euler: {CVE-2024-47684} tcp: check skb is non-NULL in tcp_rto_delta_us() [T371989]
  - euler: {CVE-2024-53158} soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() [T371989]
  - euler: {CVE-2024-56746} fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() [T371989]
  - euler: {CVE-2024-56746} fbdev/sh7760fb: Alloc DMA memory from hardware device [T371989]
  - euler: {CVE-2024-56704} 9p/xen: fix release of IRQ [T371989]
  - euler: {CVE-2024-56532} ALSA: us122l: Use snd_card_free_when_closed() at disconnection [T371989]
  - euler: {CVE-2022-49035} media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE [T371989]
  - euler: {CVE-2024-50142} xfrm: validate new SA's prefixlen using SA family when sel.family is unset [T371989]
  - euler: {CVE-2024-56747} scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() [T371989]
  - euler: {CVE-2024-56531} ALSA: caiaq: Use snd_card_free_when_closed() at disconnection [T371989]
  - euler: {CVE-2024-53194} PCI: Fix use-after-free of slot->bus on hot remove [T371989]
  - euler: {CVE-2024-53214} vfio/pci: Properly hide first-in-list PCIe extended capability [T371989]
  - euler: {CVE-2024-53183} um: net: Do not use drvdata in release [T371989]
  - euler: {CVE-2024-56539} wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() [T371989]
  - euler: {CVE-2024-53184} um: ubd: Do not use drvdata in release [T371989]
  - euler: {CVE-2024-56700} media: wl128x: Fix atomicity violation in fmc_send_cmd() [T371989]
  - euler: {CVE-2024-53140} netlink: terminate outstanding dump on socket close [T371989]
  - euler: {CVE-2022-49034} sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK [T371989]
  - euler: {CVE-2024-53103} hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer [T371989]
  - euler: {CVE-2024-56681} crypto: bcm - add error check in the ahash_hmac_init function [T371989]
  - euler: {CVE-2024-53165} sh: intc: Fix use-after-free bug in register_intc_controller() [T371989]
  - euler: {CVE-2024-53239} ALSA: 6fire: Release resources at card release [T371989]
  - euler: {CVE-2024-53146} NFSD: Prevent a potential integer overflow [T371989]
  - euler: {CVE-2024-53173} NFSv4.0: Fix a use-after-free problem in the asynchronous open() [T371989]
  - euler: {CVE-2024-53173} NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid() [T371989]
  - euler: {CVE-2024-53197} ALSA: usb-audio: Fix a DMA to stack memory bug [T371989]
  - euler: {CVE-2024-53197} ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices [T371989]
  - euler: {CVE-2024-53217} nfsd: restore callback functionality for NFSv4.0 [T371989]
  - euler: {CVE-2024-53217} NFSD: Prevent NULL dereference in nfsd4_process_cb_update() [T371989]
  - euler: {CVE-2024-53141} netfilter: ipset: add missing range check in bitmap_ip_uadt [T371989]
  - euler: {CVE-2024-39508} io_uring/io-wq: Use set_bit() and test_bit() at worker->flags [T371989]
  - euler: {CVE-2024-53095} smb: client: Fix use-after-free of network namespace. [T371989]
  - euler: {CVE-2024-50194} arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning [T371989]
  - euler: {CVE-2024-50194} arm64: probes: Fix uprobes for big-endian kernels [T371989]
  - euler: {CVE-2024-50194} arm64:uprobe fix the uprobe SWBP_INSN in big-endian [T371989]
  - euler: {CVE-2024-53131} nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint [T371989]
  - euler: {CVE-2024-46733} btrfs: fix the length of reserved qgroup to free [T371989]
  - euler: {CVE-2024-46733} btrfs: fix qgroup reserve leaks in cow_file_range [T371989]
  - euler: {CVE-2024-50251} netfilter: nft_payload: sanitize offset and length before calling skb_checksum() [T371989]
  - euler: {CVE-2024-50167} be2net: fix potential memory leak in be_xmit() [T371989]
  - euler: {CVE-2024-50168} net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() [T371989]
  - euler: {CVE-2024-50125} Bluetooth: SCO: Fix UAF on sco_sock_timeout [T371989]
  - euler: {CVE-2024-50125} Bluetooth: call sock_hold earlier in sco_conn_del [T371989]
  - euler: {CVE-2024-53142} initramfs: avoid filename buffer overrun [T371989]
  - euler: {CVE-2024-50218} ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow [T371989]
  - euler: {CVE-2024-53104} media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format [T371989]
  - euler: {CVE-2024-50150} usb: typec: altmode should keep reference to parent [T371989]
  - euler: {CVE-2024-50287} media: v4l2-tpg: prevent the risk of a division by zero [T371989]
  - euler: {CVE-2024-50278} dm cache: fix potential out-of-bounds access on the first resume [T371989]
  - euler: {CVE-2024-50278} dm cache: optimize dirty bit checking with find_next_bit when resizing [T371989]
  - euler: {CVE-2024-53101} fs: Fix uninitialized value issue in from_kuid and from_kgid [T371989]
  - euler: {CVE-2024-50236} wifi: ath10k: Fix memory leak in management tx [T371989]
  - euler: {CVE-2024-50236} ath10k: Remove msdu from idr when management pkt send fails [T371989]
  - euler: {CVE-2024-50262} bpf: Fix out-of-bounds write in trie_get_next_key() [T371989]
  - euler: {CVE-2024-50148} Bluetooth: bnep: fix wild-memory-access in proto_unregister [T371989]
  - euler: {CVE-2024-50154} tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). [T371989]
  - euler: {CVE-2024-50230} nilfs2: fix kernel bug due to missing clearing of checked flag [T371989]
  - euler: {CVE-2024-53052} io_uring/rw: fix missing NOWAIT check for O_DIRECT start write [T371989]
  - euler: {CVE-2024-53061} media: s5p-jpeg: prevent buffer overflows [T371989]
  - euler: {CVE-2024-53066} nfs: Fix KMSAN warning in decode_getfattr_attrs() [T371989]
  - euler: {CVE-2024-50179} ceph: remove the incorrect Fw reference check when dirtying pages [T371989]
  - euler: {CVE-2024-50202} nilfs2: propagate directory read errors from nilfs_find_entry() [T371989]
  - euler: {CVE-2024-50195} posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() [T371989]
  - euler: {CVE-2024-50195} posix-clock: Fix missing timespec64 check in pc_clock_settime() [T371989]
  - euler: {CVE-2024-50237} wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower [T371989]
  - euler: {CVE-2024-50117} drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported [T371989]
  - euler: {CVE-2024-50117} drm/amd: Guard against bad data for ATIF ACPI method [T371989]
  - euler: {CVE-2024-47745} mm: split critical region in remap_file_pages() and invoke LSMs in between [T371989]
  - euler: {CVE-2024-47745} mm: call the security_mmap_file() LSM hook in remap_file_pages() [T371989]
  - euler: {CVE-2024-47745} mm/mmap.c: don't unlock VMAs in remap_file_pages() [T371989]
  - euler: {CVE-2024-50115} KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory [T371989]
  - euler: {CVE-2024-47701} ext4: avoid OOB when system.data xattr changes underneath the filesystem [T371989]
  - euler: {CVE-2024-47701} ext4: explicitly exit when ext4_find_inline_entry returns an error [T371989]
  - euler: {CVE-2024-47701} ext4: return error on ext4_find_inline_entry [T371989]
  - euler: {CVE-2024-47701} ext4: ext4_search_dir should return a proper error [T371989]
  - euler: {CVE-2024-47701} ext4: fix RENAME_WHITEOUT handling for inline directories [T371989]
  - euler: {CVE-2024-50073} tty: n_gsm: Fix use-after-free in gsm_cleanup_mux [T371989]
  - euler: {CVE-2024-49878} resource: fix region_intersects() vs add_memory_driver_managed() [T371989]
  - euler: {CVE-2024-49878} mm/resource: Use resource_overlaps() to simplify region_intersects() [T371989]
  - euler: {CVE-2024-49950} Bluetooth: L2CAP: Fix uaf in l2cap_connect [T371989]
  - euler: {CVE-2024-49950} Bluetooth: Return whether a connection is outbound [T371989]
  - euler: {CVE-2022-49002} iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() [T371989]
  - euler: {CVE-2024-49881} ext4: update orig_path in ext4_find_extent() [T371989]
  - euler: {CVE-2022-48992} ASoC: soc-pcm: Add NULL check in BE reparenting [T371989]
  - euler: {CVE-2024-47696} RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency [T371989]
  - euler: {CVE-2022-48966} net: mvneta: Fix an out of bounds check [T371989]
  - euler: {CVE-2022-48966} net: mvneta: Prevent out of bounds read in mvneta_config_rss() [T371989]
  - euler: {CVE-2024-49877} ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate [T371989]
  - euler: {CVE-2024-49882} ext4: fix double brelse() the buffer of the extents path [T371989]
  - euler: {CVE-2024-49883} ext4: aovid use-after-free in ext4_ext_insert_extent() [T371989]
  - euler: {CVE-2024-49889} ext4: avoid use-after-free in ext4_ext_show_leaf() [T371989]
  - euler: {CVE-2022-48971} Bluetooth: Fix not cleanup led when bt_init fails [T371989]
  - euler: {CVE-2022-48949} igb: Initialize mailbox message for VF reset [T371989]
  - euler: {CVE-2024-49995} tipc: guard against string buffer overrun [T371989]
  - euler: {CVE-2022-49020} net/9p: Fix a potential socket leak in p9_socket_open [T371989]
  - euler: {CVE-2024-49991} drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer [T371989]
  - euler: {CVE-2022-49031} iio: health: afe4403: Fix oob read in afe4403_read_raw [T371989]
  - euler: {CVE-2024-49860} ACPI: sysfs: validate return type of _STR method [T371989]
  - euler: {CVE-2024-49981} media: venus: fix use after free bug in venus_remove due to race condition [T371989]
  - euler: {CVE-2022-49032} iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw [T371989]
  - euler: {CVE-2024-50058} serial: protect uart_port_dtr_rts() in uart_shutdown() too [T371989]
  - euler: {CVE-2024-49884} ext4: fix slab-use-after-free in ext4_split_extent_at() [T371989]
  - euler: {CVE-2024-49884} ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path [T371989]
  - euler: {CVE-2022-48978} HID: core: fix shift-out-of-bounds in hid_report_raw_event [T371989]
  - euler: {CVE-2024-50033} slip: make slhc_remember() more robust against malicious packets [T371989]
  - euler: {CVE-2022-48960} net: hisilicon: Fix potential use-after-free in hix5hd2_rx() [T371989]
  - euler: {CVE-2022-48972} mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() [T371989]
  - euler: {CVE-2022-48962} net: hisilicon: Fix potential use-after-free in hisi_femac_rx() [T371989]
  - euler: {CVE-2024-47659} smack: tcp: ipv4, fix incorrect labeling [T371989]
  - euler: {CVE-2024-47697} drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error [T371989]
  - euler: {CVE-2022-48948} usb: gadget: uvc: Prevent buffer overflow in setup handler [T371989]
  - euler: {CVE-2024-49936} net/xen-netback: prevent UAF in xenvif_flush_hash() [T371989]
  - euler: {CVE-2022-49021} net: phy: fix null-ptr-deref while probe() failed [T371989]
  - euler: {CVE-2024-50035} ppp: fix ppp_async_encode() illegal access [T371989]
  - euler: {CVE-2024-49924} fbdev: pxafb: Fix possible use after free in pxafb_task() [T371989]
  - euler: {CVE-2024-47669} nilfs2: fix state management in error path of log writing function [T371989]
  - euler: {CVE-2024-47742} firmware_loader: Block path traversal [T371989]
  - euler: {CVE-2022-49011} hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() [T371989]
  - euler: {CVE-2024-49894} drm/amd/display: Fix index out of bounds in degamma hardware format translation [T371989]
  - euler: {CVE-2024-47685} netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() [T371989]
  - euler: {CVE-2024-50036} net: do not delay dst_entries_add() in dst_release() [T371989]
  - euler: {CVE-2022-48967} NFC: nci: Bounds check struct nfc_target arrays [T371989]
  - euler: {CVE-2022-49029} hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails [T371989]
  - euler: {CVE-2022-48973} gpio: amd8111: Fix PCI device reference count leak [T371989]
  - euler: {CVE-2023-52918} media: pci: cx23885: check cx23885_vdev_init() return [T371989]
  - euler: {CVE-2022-48994} ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event [T371989]
  - euler: {CVE-2024-49900} jfs: Fix uninit-value access of new_ea in ea_buffer [T371989]
  - euler: {CVE-2024-49855} nbd: fix race between timeout and normal completion [T371989]
  - euler: {CVE-2022-49010} hwmon: (coretemp) Check for null before removing sysfs attrs [T371989]
  - euler: {CVE-2022-49007} nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() [T371989]
  - euler: {CVE-2022-48946} udf: Fix preallocation discarding at indirect extent boundary [T371989]
  - euler: {CVE-2022-49033} btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() [T371989]
  - euler: {CVE-2024-47698} drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error [T371989]
  - euler: {CVE-2024-46675} usb: dwc3: core: Prevent USB core invalid event buffer address access [T371989]
  - euler: {CVE-2024-46675} usb: dwc3: core: Skip setting event buffers for host only controllers [T371989]
  - euler: {CVE-2024-46757} hwmon: (nct6775-core) Fix underflows seen when writing limit attributes [T371989]
  - euler: {CVE-2024-46826} ELF: Fix mixed declarations and code of "snapshot_randomize_va_space" [T371989]
  - euler: {CVE-2024-46826} ELF: fix kernel.randomize_va_space double read [T371989]
  - euler: {CVE-2024-46840} btrfs: clean up our handling of refs == 0 in snapshot delete [T371989]
  - euler: {CVE-2024-46859} platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses [T371989]
  - euler: {CVE-2024-46816} drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links [T371989]
  - euler: {CVE-2024-46849} ASoC: meson: axg-card: fix 'use-after-free' [T371989]
  - euler: {CVE-2024-46829} rtmutex: Drop rt_mutex::wait_lock before scheduling [T371989]
  - euler: {CVE-2024-44958} sched/smt: Fix unbalance sched_smt_present dec/inc [T371989]
  - euler: {CVE-2024-44958} sched/smt: Introduce sched_smt_present_inc/dec() helper [T371989]
  - euler: {CVE-2024-46780} nilfs2: protect references to superblock parameters exposed in sysfs [T371989]
  - euler: {CVE-2024-46758} hwmon: (lm95234) Fix underflows seen when writing limit attributes [T371989]
  - euler: {CVE-2024-46750} PCI: Add missing bridge lock to pci_bus_lock() [T371989]
  - euler: {CVE-2024-46674} usb: dwc3: st: fix probed platform device ref count on probe error path [T371989]
  - euler: {CVE-2024-46738} VMCI: Fix use-after-free when removing resource in vmci_resource_remove() [T371989]
  - euler: {CVE-2024-46777} udf: Avoid excessive partition lengths [T371989]
  - euler: {CVE-2024-46777} udf: Define EFSCORRUPTED error code [T371989]
  - euler: {CVE-2024-46771} can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). [T371989]
  - euler: {CVE-2024-46771} can: bcm: Remove proc entry when dev is unregistered. [T371989]
  - euler: {CVE-2024-46781} nilfs2: fix missing cleanup on rollforward recovery error [T371989]
  - euler: {CVE-2024-46781} nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput [T371989]
  - euler: {CVE-2024-44954} ALSA: line6: Fix racy access to midibuf [T371989]
  - euler: {CVE-2024-46740} binder: fix UAF caused by offsets overwrite [T371989]
  - euler: {CVE-2023-52742} net: USB: Fix wrong-direction WARNING in plusb.c [T371989]
  - euler: {CVE-2024-45006} xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration [T371989]
  - euler: {CVE-2024-45025} s390/cio: rename bitmap_size() -> idset_bitmap_size() [T371989]
  - euler: {CVE-2023-52915} media: dvb-usb-v2: af9035: fix missing unlock [T371989]
  - euler: {CVE-2023-52915} media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer [T371989]
  - euler: {CVE-2024-44960} usb: gadget: core: Check for unset descriptor [T371989]
  - euler: {CVE-2024-44987} ipv6: prevent UAF in ip6_send_skb() [T371989]
  - euler: {CVE-2024-44948} x86/mtrr: Check if fixed MTRRs exist before saving them [T371989]
  - euler: {CVE-2023-52907} nfc: pn533: initialize struct pn533_out_arg properly [T371989]
  - euler: {CVE-2023-52907} nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() [T371989]
  - euler: {CVE-2024-43914} md/raid5: avoid BUG_ON() while continue reshape after reassembling [T371989]
  - euler: {CVE-2021-47400} net: hns3: do not allow call hns3_nic_net_open repeatedly [T371989]
  - euler: {CVE-2023-52894} usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() [T371989]
  - euler: {CVE-2024-42301} dev/parport: fix the array out-of-bounds risk [T371989]
  - euler: {CVE-2022-48926} usb: gadget: rndis: add spinlock for rndis response list [T371989]
  - euler: {CVE-2024-42259} drm/i915/gem: Fix Virtual Memory mapping boundaries calculation [T371989]
  - euler: {CVE-2024-42295} nilfs2: handle inconsistent state in nilfs_btnode_create_block() [T371989]
  - euler: {CVE-2022-48905} ibmvnic: free reset-work-item when flushing [T371989]
  - euler: {CVE-2024-42311} hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() [T371989]
  - euler: {CVE-2022-48891} regulator: da9211: Use irq handler when ready [T371989]
  - euler: {CVE-2024-43871} devres: Fix memory leakage caused by driver API devm_free_percpu() [T371989]
  - euler: {CVE-2024-43858} jfs: Fix array-index-out-of-bounds in diFree [T371989]
  - euler: {CVE-2024-44944} netfilter: ctnetlink: use helper function to calculate expect ID [T371989]
  - euler: {CVE-2023-52899} Add exception protection processing for vd in axi_chan_handle_err function [T371989]
  - euler: {CVE-2024-43893} serial: core: check uartclk for zero to avoid divide by zero [T371989]
  - euler: {CVE-2024-43900} media: xc2028: avoid use-after-free in load_firmware_cb() [T371989]
  - euler: {CVE-2022-48908} net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() [T371989]
  - euler: {CVE-2024-42131} mm: avoid overflows in dirty throttling logic [T371989]
  - euler: {CVE-2024-43892} memcg: protect concurrent access to mem_cgroup_idr [T371989]
  - euler: {CVE-2022-48879} efi: fix NULL-deref in init error path [T371989]
  - euler: {CVE-2022-48937} io_uring: add a schedule point in io_add_buffers() [T371989]
  - euler: {CVE-2024-42286} scsi: qla2xxx: validate nvme_local_port correctly [T371989]
  - euler: {CVE-2024-40901} scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory [T371989]
  - euler: {CVE-2024-40901} scsi: mpt3sas: Add ioc_<level> logging macros [T371989]
  - euler: {CVE-2024-40901} scsi: mpt3sas: Fix error return code of mpt3sas_base_attach() [T371989]
  - euler: {CVE-2024-42292} kobject_uevent: Fix OOB access within zap_modalias_env() [T371989]
  - euler: {CVE-2024-43856} dma: fix call order in dmam_free_coherent [T371989]
  - euler: {CVE-2024-43890} tracing: Fix overflow in get_free_elt() [T371989]
  - euler: {CVE-2022-48877} f2fs: let's avoid panic if extent_tree is not created [T371989]
  - euler: {CVE-2024-43883} usb: vhci-hcd: Do not drop references before new references are gained [T371989]
  - euler: {CVE-2022-48914} xen/netfront: destroy queues before real_num_tx_queues is zeroed [T371989]
  - euler: {CVE-2024-42312} sysctl: always initialize i_uid/i_gid [T371989]
  - euler: {CVE-2024-42265} protect the fetch of ->fd[fd] in do_dup2() from mispredictions [T371989]
  - euler: {CVE-2022-48943} KVM: x86/mmu: make apf token non-zero to fix bug [T371989]
  - euler: {CVE-2022-48928} iio: adc: men_z188_adc: Fix a resource leak in an error handling path [T371989]
  - euler: {CVE-2023-52893} gsmi: fix null-deref in gsmi_get_variable [T371989]
  - euler: {CVE-2024-42289} scsi: qla2xxx: During vport delete send async logout explicitly [T371989]
  - euler: {CVE-2024-42271} net/iucv: fix use after free in iucv_sock_close() [T371989]
  - euler: {CVE-2024-42280} mISDN: Fix a use after free in hfcmulti_tx() [T371989]
  - euler: {CVE-2024-43882} exec: Fix ToCToU between perm check and set-uid/gid usage [T371989]
  - euler: {CVE-2024-42297} f2fs: fix to don't dirty inode for readonly filesystem [T371989]
  - euler: {CVE-2023-52900} nilfs2: fix general protection fault in nilfs_btree_insert() [T371989]
  - euler: {CVE-2024-43879} wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() [T371989]
  - euler: {CVE-2022-48899} drm/virtio: Fix GEM handle creation UAF [T371989]
  - euler: {CVE-2024-39501} driver core: Fix uevent_show() vs driver detach race [T371989]
  - euler: {CVE-2024-39501} selftests: forwarding: devlink_lib: Wait for udev events after reloading [T371989]
  - euler: {CVE-2024-39501} drivers: core: synchronize really_probe() and dev_uevent() [T371989]
  - euler: {CVE-2024-42153} i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr [T371989]
  - euler: {CVE-2024-41015} ocfs2: add bounds checking to ocfs2_check_dir_entry() [T371989]
  - euler: {CVE-2023-52898} xhci: Fix null pointer dereference when host dies [T371989]
  - euler: {CVE-2023-52898} xhci: avoid race between disable slot command and host runtime suspend [T371989]
  - euler: {CVE-2022-48795} parisc: Fix data TLB miss in sba_unmap_sg [T371989]
  - euler: {CVE-2024-41068} s390/sclp: Fix sclp_init() cleanup on failure [T371989]
  - euler: {CVE-2024-42284} tipc: Return non-zero value from tipc_udp_addr2str() on error [T371989]
  - euler: {CVE-2024-42313} media: venus: fix use after free in vdec_close [T371989]
  - euler: {CVE-2024-42285} RDMA/iwcm: Fix a use-after-free related to destroying CM IDs [T371989]
  - euler: {CVE-2024-42304} ext4: make sure the first directory block is not a hole [T371989]
  - euler: {CVE-2024-42304} ext4: check dot and dotdot of dx_root before making dir indexed [T371989]
  - euler: {CVE-2024-43839} bna: adjust 'name' buf size of bna_tcb and bna_ccb structures [T371989]
  - euler: {CVE-2024-43830} leds: trigger: Unregister sysfs attributes before calling deactivate() [T371989]
  - euler: {CVE-2024-42310} drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes [T371989]
  - euler: {CVE-2024-42236} usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() [T371989]
  - euler: {CVE-2024-42070} netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers [T371989]
  - euler: {CVE-2024-42229} crypto: aead,cipher - zeroize key buffer after use [T371989]
  - euler: {CVE-2021-47207} ALSA: gus: fix null pointer dereference on pointer block [T371989]
  - euler: {CVE-2024-42143} orangefs: fix out-of-bounds fsid access [T371989]
  - euler: {CVE-2024-42087} drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep [T371989]
  - euler: {CVE-2024-42105} nilfs2: fix inode number range checks [T371989]
  - euler: {CVE-2024-42244} USB: serial: mos7840: fix crash on resume [T371989]
  - euler: {CVE-2024-41065} powerpc/pseries: Whitelist dtl slub object for copying to userspace [T371989]
  - euler: {CVE-2024-42148} bnx2x: Fix multiple UBSAN array-index-out-of-bounds [T371989]
  - euler: {CVE-2024-42154} tcp_metrics: validate source addr length [T371989]
  - euler: {CVE-2024-42157} s390/pkey: Wipe sensitive data on failure [T371989]
  - euler: {CVE-2024-42223} media: dvb-frontends: tda10048: Fix integer overflow [T371989]
  - euler: {CVE-2024-41034} nilfs2: fix kernel bug on rename operation of broken directory [T371989]
  - euler: {CVE-2024-41034} nilfs2: return the mapped address from nilfs_get_page() [T371989]
  - euler: {CVE-2024-41034} nilfs2: Remove check for PageError [T371989]
  - euler: {CVE-2024-42160} f2fs: Add inline to f2fs_build_fault_attr() stub [T371989]
  - euler: {CVE-2024-42160} f2fs: check validation of fault attrs in f2fs_build_fault_attr() [T371989]
  - euler: {CVE-2024-41012} filelock: Remove locks reliably when fcntl/close race is detected [T371989]
  - euler: {CVE-2024-42094} net/iucv: Avoid explicit cpumask var allocation on stack [T371989]
  - euler: {CVE-2024-41017} jfs: don't walk off the end of ealist [T371989]
  - euler: {CVE-2024-42096} x86: stop playing stack games in profile_pc() [T371989]
  - euler: {CVE-2022-48860} ethernet: Fix error handling in xemaclite_of_probe [T371989]
  - euler: {CVE-2024-42119} drm/amd/display: Skip finding free audio for unknown engine_id [T371989]
  - euler: {CVE-2024-41095} drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes [T371989]
  - euler: {CVE-2024-42077} ocfs2: fix DIO failure due to insufficient transaction credits [T371989]
  - euler: {CVE-2024-42106} inet_diag: Initialize pad field in struct inet_diag_req_v2 [T371989]
  - euler: {CVE-2024-42089} ASoC: fsl-asoc-card: set priv->pdev before using it [T371989]
  - euler: {CVE-2024-42224} net: dsa: mv88e6xxx: Correct check for empty list [T371989]
  - euler: {CVE-2024-41035} USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor [T371989]
  - euler: {CVE-2024-41097} usb: atm: cxacru: fix endpoint checking in cxacru_bind() [T371989]
  - euler: {CVE-2024-41059} hfsplus: fix uninit-value in copy_name [T371989]
  - euler: {CVE-2024-41087} ata: libata-core: Fix double free on error [T371989]
  - euler: {CVE-2024-41072} wifi: cfg80211: wext: add extra SIOCSIWSCAN data check [T371989]
  - euler: {CVE-2024-41044} ppp: reject claimed-as-LCP but actually malformed packets [T371989]
  - euler: {CVE-2024-41044} ppp: ensure minimum packet size in ppp_write() [T371989]
  - euler: {CVE-2024-42145} IB/core: Implement a limit on UMAD receive List [T371989]
  - euler: {CVE-2024-41089} drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes [T371989]
  - euler: {CVE-2024-41046} net: ethernet: lantiq_etop: fix double free in detach [T371989]
  - euler: {CVE-2024-41046} net: lantiq_etop: add blank line after declaration [T371989]
  - euler: {CVE-2024-41081} ila: block BH in ila_output() [T371989]
  - euler: {CVE-2024-42092} gpio: davinci: Validate the obtained number of IRQs [T371989]
  - euler: {CVE-2024-42104} nilfs2: add missing check for inode numbers on directory entries [T371989]
  - euler: {CVE-2024-42084} ftruncate: pass a signed offset [T371989]
  - euler: {CVE-2024-41063} Bluetooth: hci_core: cancel all works upon hci_unregister_dev() [T371989]
  - euler: {CVE-2024-41014} xfs: add bounds checking to xlog_recover_process_data [T371989]
  - euler: {CVE-2024-42228} drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc [T371989]
  - euler: {CVE-2024-42086} iio: chemical: bme680: Fix overflows in compensate() functions [T371989]
  - euler: {CVE-2024-42115} jffs2: Fix potential illegal address access in jffs2_free_inode [T371989]
  - euler: {CVE-2024-40959} xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() [T371989]
  - euler: {CVE-2024-42097} ALSA: emux: improve patch ioctl data validation [T371989]
  - euler: {CVE-2024-41069} ASoC: topology: Fix route memory corruption [T371989]
  - euler: {CVE-2024-41069} ASoC: topology: Fix references to freed memory [T371989]
  - euler: {CVE-2024-42090} pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER [T371989]
  - euler: {CVE-2024-41020} filelock: Fix fcntl/close race recovery compat path [T371989]
  - euler: {CVE-2021-47202} thermal: Fix NULL pointer dereferences in of_thermal_ functions [T371989]
  - euler: {CVE-2024-39509} HID: core: remove unnecessary WARN_ON() in implement() [T371989]
  - euler: {CVE-2024-40988} drm/radeon: fix UBSAN warning in kv_dpm.c [T371989]
  - euler: {CVE-2022-48857} NFC: port100: fix use-after-free in port100_send_complete [T371989]
  - euler: {CVE-2024-40902} jfs: xattr: fix buffer overflow for invalid xattr [T371989]
  - euler: {CVE-2024-40981} batman-adv: bypass empty buckets in batadv_purge_orig_ref() [T371989]
  - euler: {CVE-2024-40942} wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects [T371989]
  - euler: {CVE-2022-48863} mISDN: Fix memory leak in dsp_pipeline_build() [T371989]
  - euler: {CVE-2022-48845} MIPS: smp: fill in sibling and core maps earlier [T371989]
  - euler: {CVE-2024-40978} scsi: qedi: Fix crash while reading debugfs attribute [T371989]
  - euler: {CVE-2024-41006} netrom: Fix a memory leak in nr_heartbeat_expiry() [T371989]
  - euler: {CVE-2024-26921} sk_buff: Fix KABI break for the modification of struct sk_buff [T371989]
  - euler: {CVE-2024-26921} inet: inet_defrag: prevent sk release while still in use [T371989]
  - euler: {CVE-2024-26920} Revert "tracing/trigger: Fix to return error if failed to alloc snapshot" [T371989]
  - euler: {CVE-2021-47112} x86/kvm: Teardown PV features on boot CPU as well [T370671]
  - Merge changes from topic "cve-1070-to-1050u2-1060-push" into lts-1050u2
  - Merge changes from topic "cve-1070-to-1050u2-1060-push" into lts-1050u2
  - Merge changes from topic "cve-1070-to-1050u2-1060-push" into lts-1050u2
  - Merge changes from topic "cve-1070-to-1050u2-1060-push" into lts-1050u2
  - stable: {CVE-2024-50282} drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() [T370671]
  - mainline: {CVE-2024-50272} filemap: Fix bounds checking in filemap_read() [G2024120400043] [T370671]
  - mainline: i40e: fix i40e_count_filters() to count only active/new filters [G2024120400043] [T370671]
  - mainline: {CVE-2024-50166} fsl/fman: Fix refcount handling of fman-related devices [G2024120400043] [T370671]
  - mainline: fsl/fman: Save device references taken in mac_probe() [G2024120400043] [T370671]
  - mainline: net: fman: Unregister ethernet device on removal [G2024120400043] [T370671]
  - mainline: {CVE-2024-50264} vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans [G2024120400043] [T370671]
  - mainline: {CVE-2024-50279} dm cache: fix out-of-bounds access to the dirty bitset when resizing [G2024120400043] [T370671]
  - mainline: {CVE-2024-50267} USB: serial: io_edgeport: fix use after free in debug printk [G2024120400043] [T370671]
  - mainline: {CVE-2024-50273} btrfs: reinitialize delayed ref list after deleting it from the list [G2024120400043] [T370671]
  - mainline: {CVE-2024-50299} sctp: properly validate chunk size in sctp_sf_ootb() [G2024120400043] [T370671]
  - mainline: {CVE-2024-53063} media: dvbdev: prevent the risk of out of memory access [G2024120400043] [T370671]
  - mainline: {CVE-2024-50301} security/keys: fix slab-out-of-bounds in key_task_permission [G2024120400043] [T370671]
  - mainline: {CVE-2024-53057} net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT [G2024120400043] [T370671]
  - mainline: {CVE-2024-50265} ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() [G2024120400043] [T370671]
  - mainline: {CVE-2024-50302} HID: core: zero-initialize the report buffer [G2024120400043] [T370671]
  - euler: {CVE-2023-52878} can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds [T370671]
  - euler: {CVE-2021-47173} usb: misc: fix improper handling of refcount in uss720_probe() [T370671]
  - euler: {CVE-2023-3609} net/sched: cls_u32: Fix reference counter leak leading to overflow [T370671]
  - drm/vmwgfx: Validate the box size for the snooped cursor [T370671]
  - euler: {CVE-2022-48695} scsi: mpt3sas: Fix use-after-free warning [T355043] [T370671]
  - euler: {CVE-2023-52458} block: add check that partition length needs to be aligned with block size [T370671]
  - block: Fix the partition start may overflow in add_partition() [T370671]
  - block: refactor blkpg_ioctl [T370671]
  - euler: {CVE-2024-38588} ftrace: Fix possible use-after-free issue in ftrace_location() [T370671]
  - euler: ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() [T370671]
  - euler: {CVE-2024-36933} nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). [T370671]
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() [T370671]
  - euler: {CVE-2024-35808} md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen [T370671]
  - euler: {CVE-2024-35808} md/dm-raid: don't call md_reap_sync_thread() directly [T370671]
  - md: refactor action_store() for 'idle' and 'frozen' [T370671]
  - euler: {CVE-2021-47408} netfilter: conntrack: serialize hash resizes and cleanups [T370671]
  - euler: netfilter: conntrack: fix infinite loop on rmmod [T370671]
  - euler: {CVE-2024-26923} af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). [T370671]
  - euler: af_unix: fix lockdep positive in sk_diag_dump_icons() [T370671]
  - euler: {CVE-2024-26926} binder: check offset alignment in binder_get_object() [T370671]
  - euler: {CVE-2024-26740} net/sched: act_mirred: use the backlog for mirred ingress [T370671]
  - euler: {CVE-2021-47061} KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU [T370671]
  - euler: {CVE-2021-47060} KVM: Stop looking for coalesced MMIO zones if the bus is destroyed [T370671]
  - euler: {CVE-2023-46838} xen-netback: don't produce zero-size SKB frags [T370671]
  - euler: {CVE-2022-40982} x86/speculation: Mark all Skylake CPUs as vulnerable to GDS [T370671]
  - euler: {CVE-2022-40982} Documentation/x86: Fix backwards on/off logic about YMM support [T370671]
  - euler: {CVE-2022-40982} x86/speculation: Add Kconfig option for GDS [T370671]
  - euler: {CVE-2022-40982} x86/speculation: Add force option to GDS mitigation [T370671]
  - euler: {CVE-2022-40982} x86/speculation: Add cpu_show_gds() prototype [T370671]
  - euler: {CVE-2022-40982} x86/speculation: Add Gather Data Sampling mitigation [T370671]
  - euler: {CVE-2023-34319} xen/netback: Fix buffer overrun triggered by unusual packet [T370671]
  - euler: {CVE-2023-21255} binder: fix UAF caused by faulty buffer cleanup [T370671]
  - scsi: dpt_i2o: Remove obsolete driver [T370671]
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern [T370671]
  - net: qcom/emac: Fix use after free bug in emac_remove due to race condition [T370671]
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg [T370671]
  - sctp: leave the err path free in sctp_stream_init to sctp_stream_free [T370671]
  - RDMA/core: Refactor rdma_bind_addr [T370671]
  - Revert "RDMA/cma: Simplify rdma_resolve_addr() error flow" [T370671]
  - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition [T370671]
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() [T370671]
  - x86/speculation: Allow enabling STIBP with legacy IBRS [T370671]
  - KVM: nVMX: add missing consistency checks for CR0 and CR4 [T370671]
  - x86/speculation: Add RSB VM Exit protections [T370671]
  - x86/cpu: Add a steppings field to struct x86_cpu_id [T370671]
  - net/sched: Retire tcindex classifier [T370671]
  - Documentation/hw-vuln: Fix rST warning [T370671]
  - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions [T370671]
  - KVM: x86: Mitigate the cross-thread return address predictions bug [T370671]
  - cpu/SMT: create and export cpu_smt_possible() [T370671]
  - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition [T370671]
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition [T370671]
  - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition [T370671]
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach [T370671]
  - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition [T370671]
  - Fix double fget() in vhost_net_set_backend() [T370671]
  - btrfs: fix race between quota disable and quota assign ioctls [T370671]
  - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF [T370671]
  - RDMA/core: Don't infoleak GRH fields [T370671]
  - net/sched: tcindex: search key must be 16 bits [T370671]
  - net/sched: tcindex: update imperfect hash filters respecting rcu [T370671]
  - rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer() [T370671]
  - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts [T370671]
  - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current [T370671]
  - x86/speculation: Disable RRSBA behavior [T370671]
  - x86/bugs: Add Cannon lake to RETBleed affected CPU list [T370671]
  - x86/cpu/amd: Enumerate BTC_NO [T370671]
  - x86/common: Stamp out the stepping madness [T370671]
  - x86/speculation: Fill RSB on vmexit for IBRS [T370671]
  - KVM: VMX: Fix IBRS handling after vmexit [T370671]
  - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS [T370671]
  - x86/speculation: Remove x86_spec_ctrl_mask [T370671]
  - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit [T370671]
  - x86/speculation: Fix SPEC_CTRL write on SMT state change [T370671]
  - x86/speculation: Fix firmware entry SPEC_CTRL handling [T370671]
  - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n [T370671]
  - x86/speculation: Change FILL_RETURN_BUFFER to work with objtool [T370671]
  - intel_idle: Disable IBRS during long idle [T370671]
  - x86/bugs: Report Intel retbleed vulnerability [T370671]
  - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() [T370671]
  - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS [T370671]
  - x86/bugs: Optimize SPEC_CTRL MSR writes [T370671]
  - x86/entry: Add kernel IBRS implementation [T370671]
  - x86/entry: Remove skip_r11rcx [T370671]
  - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value [T370671]
  - x86/bugs: Add AMD retbleed= boot parameter [T370671]
  - x86/cpufeatures: Move RETPOLINE flags to word 11 [T370671]
  - x86/cpu: Add consistent CPU match macros [T370671]
  - x86/devicetable: Move x86 specific macro out of generic code [T370671]
  - x86/cpufeature: Fix various quality problems in the <asm/cpu_device_hd.h> header [T370671]
  - x86/cpufeature: Add facility to check for min microcode revisions [T370671]
  - Revert "x86/cpu: Add a steppings field to struct x86_cpu_id" [T370671]
  - Revert "x86/speculation: Add RSB VM Exit protections" [T370671]
  - x86/nospec: Fix i386 RSB stuffing [T370671]
  - act_mirred: use the backlog for nested calls to mirred ingress [T370671]
  - net/sched: act_mirred: refactor the handle of xmit [T370671]
  - net: sched: don't expose action qstats to skb_tc_reinsert() [T370671]
  - net: sched: refactor reinsert action [T370671]
  - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() [T370671]
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() [T370671]
  - tipc: add an extra conn_get in tipc_conn_alloc [T370671]
  - tipc: set con sock in tipc_conn_alloc [T370671]
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() [T370671]
  - net/mlx4: Fix EEPROM dump support [T370671]
  - memcg: enable accounting for file lock caches [T370671]
  - HID: asus: use spinlock to safely schedule workers [T370671]
  - HID: asus: use spinlock to protect concurrent accesses [T370671]
  - HID: asus: Remove check for same LED brightness on set [T370671]
  - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 [T370671]
  - binder: Address corner cases in deferred copy and fixup [T370671]
  - binder: fix pointer cast warning [T370671]
  - binder: defer copies of pre-patched txn data [T370671]
  - binder: read pre-translated fds from sender buffer [T370671]
  - binder: avoid potential data leakage when copying txn [T370671]
  - binder: fix handling of error during copy [T370671]
  - binder: use cred instead of task for getsecid [T370671]
  - binder: don't detect sender/target during buffer cleanup [T370671]
  - binder: make sure fd closes complete [T370671]
  - binder: Remove bogus warning on failed same-process transaction [T370671]
  - binder: fix incorrect calculation for num_valid [T370671]
  - binder: Prevent repeated use of ->mmap() via NULL mapping [T370671]
  - binder: Don't modify VMA bounds in ->mmap handler [T370671]
  - binder: Set end of SG buffer area properly. [T370671]
  - binder: return errors from buffer copy functions [T370671]
  - binder: check for overflow when alloc for security context [T370671]
  - binder: fix BUG_ON found by selinux-testsuite [T370671]
  - binder: fix handling of misaligned binder object [T370671]
  - binder: use userspace pointer as base of buffer space [T370671]
  - binder: remove user_buffer_offset [T370671]
  - binder: remove kernel vm_area for buffer space [T370671]
  - binder: avoid kernel vm_area for buffer fixups [T370671]
  - binder: add function to copy binder object from buffer [T370671]
  - binder: add functions to copy to/from binder buffers [T370671]
  - binder: create userspace-to-binder-buffer copy function [T370671]
  - binder: fix use-after-free due to ksys_close() during fdget() [T370671]
  - binder: fix kerneldoc header for struct binder_buffer [T370671]
  - binder: create node flag to request sender's security context [T370671]
  - binder: Add BINDER_GET_NODE_INFO_FOR_REF ioctl. [T370671]
  - binder: use standard functions to allocate fds [T370671]
  - sctp: fail if no bound addresses can be used for a given scope [T370671]
  - HID: check empty report_list in hid_validate_values() [T370671]
  - ntfs: fix out-of-bounds read in ntfs_attr_find() [T370671]
  - ntfs: fix use-after-free in ntfs_ucsncmp() [T370671]
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() [T370671]
  - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function [T370671]
  - netfilter: nf_tables: fix null deref due to zeroed list head [T370671]
  - tcp: Fix listen() regression in 5.15.88. [T370671]
  - rds: rds_rm_zerocopy_callback() use list_first_entry() [T370671]
  - net: mpls: fix stale pointer if allocation fails during device rename [T370671]
  - x86/bugs: Flush IBP in ib_prctl_set() [T370671]
  - media: vivid: fix compose size exceed boundary [T370671]
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry [T370671]
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames [T370671]
  - net: sched: disallow noqueue for qdisc classes [T370671]
  - net: sched: atm: dont intepret cls results when asked to drop [T370671]
  - net: sched: cbq: dont intepret cls results when asked to drop [T370671]
  - USB: Fix kABI for usb_device->reset_in_progress [T370671]
  - rndis_wlan: Prevent buffer overflow in rndis_query_oid [T370671]
  - USB: core: Fix RST error in hub.c [T370671]
  - USB: core: Prevent nested device-reset calls [T370671]
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access() [T370671]
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os [T370671]
  - drm: mali-dp: potential dereference of null pointer [T370671]
  - power: supply: wm8350-power: Add missing free in free_charger_irq [T370671]
  - media: dvb-core: Fix UAF due to refcount races at releasing [T370671]
  - drm/amdkfd: Check for null pointer after calling kmemdup [T370671]
  - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() [T370671]
  - Bluetooth: L2CAP: Fix build errors in some archs [T370671]
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression [T370671]
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put [T370671]
  - hv_netvsc: Add check for kvmalloc_array [T370671]
  - xen/netback: don't call kfree_skb() with interrupts disabled [T370671]
  - xen/netback: fix build warning [T370671]
  - xen/netback: Ensure protocol headers don't fall in the non-linear area [T370671]
  - media: mceusb: Use new usb_control_msg_*() routines [T370671]
  - media: mceusb: fix control-message timeouts [T370671]
  - USB: add usb_control_msg_send() and usb_control_msg_recv() [T370671]
  - Bluetooth: L2CAP: Fix u8 overflow [T370671]
  - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock [T370671]
  - l2tp: Serialize access to sk_user_data with sk_callback_lock [T370671]
  - drivers: net: slip: fix NPD bug in sl_tx_timeout() [T370671]
  - staging: rtl8712: fix use after free bugs [T370671]
  - stable: {CVE-2022-27672} x86/speculation: Identify processors vulnerable to SMT RSB predictions [T370671]
  - stable: {CVE-2022-29901} x86/bugs: Report AMD retbleed vulnerability [T370671]
  - net: add sock_init_data_uid() [T370671]
  - net: sched: protect against stack overflow in TC act_mirred [T370671]
  - euler: {CVE-2024-39475} fbdev: savage: Handle err return when savagefb_check_var failed [T355043] [T370671]
  - mainline: {CVE-2023-25775} RDMA/irdma: Prevent zero-length STAG registration [T355043] [T370671]
  - mainline: {CVE-2024-26736} afs: Increase buffer size in afs_update_volume_status() [T355043] [T370671]
  - stable: {CVE-2021-4001} Bluetooth: fix init and cleanup of sco_conn.timeout_work [T355043] [T370671]
  - stable: {CVE-2024-35969} ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr [T355043] [T370671]
  - stable: {CVE-2023-3212} gfs2: Don't deref jdesc in evict [T355043] [T370671]
  - stable: {CVE-2023-1077} sched/rt: pick_next_rt_entity(): check list_entry [T355043] [T370671]
  - euler: {CVE-2021-47144} drm/amd/amdgpu: fix refcount leak [T355043] [T370671]
  - stable: {CVE-2021-47142} drm/amdgpu: Fix a use-after-free [T355043] [T370671]
  - euler: {CVE-2022-48794} net: ieee802154: at86rf230: Stop leaking skb's [T355043] [T370671]
  - euler: {CVE-2022-48855} sctp: fix kernel-infoleak for SCTP sockets [T355043] [T370671]
  - euler: {CVE-2024-40904} USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages [T355043] [T370671]
  - euler: {CVE-2024-41007} tcp: avoid too many retransmit packets [T355043] [T370671]
  - euler: {CVE-2024-41007} tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() [T355043] [T370671]
  - euler: {CVE-2024-41007} net: tcp: fix unexcepted socket die when snd_wnd is 0 [T355043] [T370671]
  - euler: {CVE-2024-41007} tcp: refactor tcp_retransmit_timer() [T355043] [T370671]
  - euler: {CVE-2024-41007} tcp: fix incorrect undo caused by DSACK of TLP retransmit [T355043] [T370671]
  - euler: {CVE-2022-48851} staging: gdm724x: fix use after free in gdm_lte_rx() [T355043] [T370671]
  - euler: {CVE-2022-48865} tipc: fix kernel panic when enabling bearer [T355043] [T370671]
  - euler: {CVE-2022-48865} tipc: fix NULL pointer dereference in tipc_disc_rcv() [T355043] [T370671]
  - euler: {CVE-2022-48775} Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj [T355043] [T370671]
  - euler: {CVE-2022-48786} vsock: remove vsock from connected table when connect is interrupted by a signal [T355043] [T370671]
  - euler: {CVE-2024-39494} ima: Fix use-after-free on a dentry's dname.name [T355043] [T370671]
  - euler: {CVE-2024-40912} wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() [T355043] [T370671]
  - euler: {CVE-2022-48836} Input: aiptek - properly check endpoint type [T355043] [T370671]
  - euler: {CVE-2022-48836} Input: aiptek - fix endpoint sanity check [T355043] [T370671]
  - euler: {CVE-2022-48804} vt_ioctl: fix array_index_nospec in vt_setactivate [T355043] [T370671]
  - euler: {CVE-2022-48828} NFSD: Fix ia_size underflow [T355043] [T370671]
  - euler: {CVE-2024-40941} wifi: iwlwifi: mvm: don't read past the mfuart notifcation [T355043] [T370671]
  - euler: {CVE-2022-48788} nvme-rdma: fix possible use-after-free in transport error_recovery work [T355043] [T370671]
  - euler: {CVE-2022-48838} usb: gadget: Fix use-after-free bug by not setting udc->dev.driver [T355043] [T370671]
  - euler: {CVE-2024-40929} wifi: iwlwifi: mvm: check n_ssids before accessing the ssids [T355043] [T370671]
  - euler: {CVE-2022-48822} usb: f_fs: Fix use-after-free for epfile [T355043] [T370671]
  - euler: {CVE-2024-40968} MIPS: Octeon: Add PCIe link status check [T355043] [T370671]
  - euler: {CVE-2024-40995} net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() [T355043] [T370671]
  - euler: {CVE-2021-47206} usb: host: ohci-tmio: check return value after calling platform_get_resource() [T355043] [T370671]
  - euler: {CVE-2024-40987} drm/amdgpu: fix UBSAN warning in kv_dpm.c [T355043] [T370671]
  - euler: {CVE-2024-39499} vmci: prevent speculation leaks by sanitizing event in event_deliver() [T355043] [T370671]
  - euler: {CVE-2024-40960} ipv6: prevent possible NULL dereference in rt6_probe() [T355043] [T370671]
  - euler: {CVE-2024-39506} liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet [T355043] [T370671]
  - euler: {CVE-2024-40932} drm/exynos/vidi: fix memory leak in .get_modes() [T355043] [T370671]
  - euler: {CVE-2024-41005} netpoll: Fix race condition in netpoll_owner_active [T355043] [T370671]
  - euler: {CVE-2024-40984} ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." [T355043] [T370671]
  - euler: {CVE-2024-40943} ocfs2: fix races between hole punching and AIO+DIO [T355043] [T370671]
  - euler: {CVE-2024-40974} powerpc/pseries: Enforce hcall result buffer validity and size [T355043] [T370671]
  - euler: {CVE-2024-39487} bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() [T355043] [T370671]
  - euler: {CVE-2024-39489} ipv6: sr: fix memleak in seg6_hmac_init_algo [T355043] [T370671]
  - euler: {CVE-2024-39493} crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak [T355043] [T370671]
  - euler: {CVE-2021-47181} usb: musb: tusb6010: check return value after calling platform_get_resource() [T355043] [T370671]
  - euler: {CVE-2021-47189} btrfs: fix memory ordering between normal and ordered work functions [T355043] [T370671]
  - euler: {CVE-2021-47204} net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove [T355043] [T370671]
  - euler: {CVE-2024-39484} mmc: davinci: Don't strip remove function when driver is builtin [T355043] [T370671]
  - euler: {CVE-2024-39480} kdb: Fix buffer overflow during tab-complete [T355043] [T370671]
  - euler: {CVE-2021-47598} sch_cake: do not call cake_destroy() from cake_init() [T355043] [T370671]
  - euler: {CVE-2024-22386} drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() [T355043] [T370671]
  - euler: {CVE-2024-23848} media: cec: cec-api: add locking in cec_release() [T355043] [T370671]
  - euler: {CVE-2024-23848} media: cec: cec-adap: always cancel work in cec_transmit_msg_fh [T355043] [T370671]
  - euler: {CVE-2022-48760} USB: core: Fix hang in usb_kill_urb by adding memory barriers [T355043] [T370671]
  - euler: {CVE-2024-38565} wifi: ar5523: enable proper endpoint verification [T355043] [T370671]
  - euler: {CVE-2024-38558} net: openvswitch: fix overwriting ct original tuple for ICMPv6 [T355043] [T370671]
  - euler: {CVE-2024-36949} amd/amdkfd: sync all devices to wait all processes being evicted [T355043] [T370671]
  - euler: {CVE-2024-36949} drm/amdkfd: Rework kfd_locked handling [T355043] [T370671]
  - euler: {CVE-2024-38559} scsi: qedf: Ensure the copied buf is NUL terminated [T355043] [T370671]
  - euler: {CVE-2024-39301} net/9p: fix uninit-value in p9_client_rpc() [T355043] [T370671]
  - euler: {CVE-2021-47515} seg6: fix the iif in the IPv6 socket control block [T355043] [T370671]
  - euler: {CVE-2022-48743} net: amd-xgbe: Fix skb data length underflow [T355043] [T370671]
  - euler: {CVE-2022-48757} net: fix kabi breakage in struct packet_type [T355043] [T370671]
  - euler: {CVE-2022-48757} net: fix information leakage in /proc/net/ptype [T355043] [T370671]
  - euler: {CVE-2024-35915} nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() [T355043] [T370671]
  - euler: {CVE-2024-35915} nfc: nci: Fix uninit-value in nci_rx_work [T355043] [T370671]
  - euler: {CVE-2024-35915} nfc: nci: Fix kcov check in nci_rx_work() [T355043] [T370671]
  - euler: {CVE-2024-35915} nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet [T355043] [T370671]
  - euler: {CVE-2022-48738} ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min [T355043] [T370671]
  - euler: {CVE-2022-48738} ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() [T355043] [T370671]
  - euler: {CVE-2024-38583} nilfs2: fix use-after-free of timer for log writer thread [T355043] [T370671]
  - euler: {CVE-2024-38579} crypto: bcm - Fix pointer arithmetic [T355043] [T370671]
  - euler: {CVE-2024-38780} dma-buf/sw-sync: don't enable IRQ from sync_print_obj() [T355043] [T370671]
  - euler: {CVE-2021-47270} usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS [T355043] [T370671]
  - euler: {CVE-2021-47270} usb: fix various gadgets null ptr deref on 10gbps cabling. [T355043] [T370671]
  - euler: {CVE-2024-38567} wifi: carl9170: add a proper sanity check for endpoints [T355043] [T370671]
  - euler: {CVE-2024-38567} USB: core: Add routines for endpoint checks in old drivers [T355043] [T370671]
  - euler: {CVE-2024-36286} netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() [T355043] [T370671]
  - euler: {CVE-2024-38637} greybus: lights: check return of get_channel_from_mode [T355043] [T370671]
  - euler: {CVE-2024-38554} ax25: Fix reference count leak issue of net_device [T355043] [T370671]
  - euler: {CVE-2024-37078} nilfs2: fix potential kernel bug due to lack of writeback flag waiting [T355043] [T370671]
  - euler: {CVE-2021-47296} KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak [T355043] [T370671]
  - euler: {CVE-2021-47612} nfc: fix segfault in nfc_genl_dump_devices_done [T355043] [T370671]
  - euler: {CVE-2021-47611} mac80211: validate extended element ID is present [T355043] [T370671]
  - euler: {CVE-2024-38578} ecryptfs: Fix buffer size for tag 66 packet [T355043] [T370671]
  - euler: {CVE-2024-38618} ALSA: timer: Set lower bound of start tick time [T355043] [T370671]
  - euler: {CVE-2024-38582} nilfs2: fix potential hang in nilfs_detach_log_writer() [T355043] [T370671]
  - euler: {CVE-2024-38582} nilfs2: fix unexpected freezing of nilfs_segctor_sync() [T355043] [T370671]
  - euler: {CVE-2022-48717} ASoC: max9759: fix underflow in speaker_gain_control_put() [T355043] [T370671]
  - euler: {CVE-2022-48722} net: ieee802154: ca8210: Stop leaking skb's [T355043] [T370671]
  - euler: {CVE-2021-47583} media: mxl111sf: change mutex_init() location [T355043] [T370671]
  - euler: {CVE-2024-37356} tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). [T355043] [T370671]
  - euler: {CVE-2024-37356} params: lift param_set_uint_minmax to common code [T355043] [T370671]
  - euler: {CVE-2022-48758} scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() [T355043] [T370671]
  - euler: {CVE-2024-38546} drm: vc4: Fix possible null pointer dereference [T355043] [T370671]
  - stable: {CVE-2023-52830} Bluetooth: Fix double free in hci_conn_cleanup [T355043] [T370671]
  - mainline: {CVE-2023-52821} drm/panel: fix a possible null pointer dereference [T355043] [T370671]
  - stable: {CVE-2021-47472} Revert "mdio_bus: Fix use-after-free on device_register fails" [T370671]
  - euler: {CVE-2022-48674} erofs: fix pcluster use-after-free on UP platforms [T370671]
  - euler: {CVE-2021-47565} scsi: mpt3sas: Fix kernel panic during drive powercycle test [T370671]
  - euler: {CVE-2021-47473} scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els() [T370671]
  - stable: {CVE-2021-47311} net: qcom/emac: fix UAF in emac_remove [T370671]
  - euler: {CVE-2024-36924} scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() [T370671]
  - euler: {CVE-2024-35982} batman-adv: Avoid infinite loop trying to resize local TT [T370671]
  - euler: {CVE-2024-26931} scsi: qla2xxx: Fix command flush on cable pull [T370671]
  - euler: {CVE-2024-36946} phonet: fix rtm_phonet_notify() skb allocation [T370671]
  - euler: {CVE-2024-38612} ipv6: sr: fix invalid unregister error path [T370671]
  - euler: {CVE-2024-38627} stm class: Fix a double free in stm_register_device() [T370671]
  - euler: {CVE-2024-38613} m68k: Fix spinlock race in kernel thread creation [T370671]
  - euler: {CVE-2021-47285} net/nfc/rawsock.c: fix a permission check bug [T370671]
  - euler: {CVE-2021-47602} mac80211: track only QoS data frames for admission control [T370671]
  - euler: {CVE-2024-38659} enic: Validate length of nl attributes in enic_set_vf_port [T370671]
  - euler: {CVE-2022-48732} drm/nouveau: fix off by one in BIOS boundary checking [T370671]
  - euler: {CVE-2024-38560} scsi: bfa: Ensure the copied buf is NUL terminated [T370671]
  - euler: {CVE-2024-38597} eth: sungem: remove .ndo_poll_controller to avoid deadlocks [T370671]
  - euler: {CVE-2024-38597} net: fec: remove .ndo_poll_controller to avoid deadlocks [T370671]
  - euler: {CVE-2024-38661} s390/ap: Fix crash in AP internal function modify_bitmap() [T370671]
  - euler: {CVE-2022-48744} net/mlx5e: Avoid field-overflowing memcpy() [T370671]
  - euler: {CVE-2021-47587} net: systemport: Add global locking for descriptor lifecycle [T370671]
  - euler: {CVE-2024-39276} ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() [T370671]
  - euler: {CVE-2024-37353} virtio: delete vq in vp_find_vqs_msix() when request_irq() fails [T370671]
  - euler: {CVE-2021-47589} igbvf: fix double free in `igbvf_probe` [T370671]
  - euler: {CVE-2022-48759} rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev [T370671]
  - euler: {CVE-2022-48772} media: lgdt3306a: Add a check against null-pointer-def [T370671]
  - euler: {CVE-2024-38587} speakup: Fix sizeof() vs ARRAY_SIZE() bug [T370671]
  - euler: {CVE-2024-38630} watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger [T370671]
  - euler: {CVE-2024-38589} netrom: fix possible dead-lock in nr_rt_ioctl() [T370671]
  - euler: {CVE-2024-39292} um: Add winch to winch_handlers before registering winch IRQ [T370671]
  - euler: {CVE-2021-47434} xhci: Fix commad ring abort, write all 64 bits to CRCR register. [T370671]
  - euler: {CVE-2021-47434} xhci: Fix command ring pointer corruption while aborting a command [T370671]
  - euler: {CVE-2024-38599} jffs2: prevent xattr node from overflowing the eraseblock [T370671]
  - euler: {CVE-2022-48737} ASoC: ops: Fix bounds check for _sx controls [T370671]
  - euler: {CVE-2022-48737} ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() [T370671]
  - euler: {CVE-2022-48715} scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe [T370671]
  - euler: {CVE-2024-38621} media: stk1160: fix bounds checking in stk1160_copy_video() [T370671]
  - euler: {CVE-2024-38549} drm/mediatek: Add 0 size check to mtk_drm_gem_obj [T370671]
  - euler: {CVE-2024-36014} drm/arm/malidp: fix a possible null pointer dereference [T370671]
  - euler: {CVE-2024-31076} genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline [T370671]
  - euler: {CVE-2022-48756} drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable [T370671]
  - euler: {CVE-2024-38633} serial: max3100: Update uart_driver_registered on driver removal [T370671]
  - euler: {CVE-2024-38632} vfio/pci: fix potential memory leak in vfio_intx_enable() [T370671]
  - euler: {CVE-2024-38607} macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" [T370671]
  - euler: {CVE-2021-47609} firmware: arm_scpi: Fix string overflow in SCPI genpd driver [T370671]
  - euler: {CVE-2024-38634} serial: max3100: Lock port->lock when calling uart_handle_cts_change() [T370671]
  - euler: {CVE-2022-48736} ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() [T370671]
  - euler: {CVE-2024-38596} af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg [T370671]
  - euler: {CVE-2024-38552} drm/amd/display: Fix potential index out of bounds in color transformation function [T370671]
  - euler: {CVE-2022-48755} powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 [T370671]
  - euler: {CVE-2021-47469} spi: fix kabi breakage in struct spi_controller [T370671]
  - euler: {CVE-2021-47469} spi: Fix deadlock when adding SPI controllers on SPI buses [T370671]
  - euler: {CVE-2024-38538} net: bridge: xmit: make sure we have at least eth header len bytes [T370671]
  - euler: {CVE-2024-38541} of: module: add buffer overflow check in of_modalias() [T370671]
  - euler: {CVE-2021-47231} can: mcba_usb_start(): add missing urb->transfer_dma initialization [T370671]
  - euler: {CVE-2021-47231} can: mcba_usb: fix memory leak in mcba_usb [T370671]
  - euler: {CVE-2021-47597} inet_diag: fix kernel-infoleak for UDP sockets [T370671]
  - euler: {CVE-2024-38601} ring-buffer: Fix a race between readers and resize checks [T370671]
  - euler: {CVE-2021-47252} batman-adv: Avoid WARN_ON timing related checks [T370671]
  - euler: {CVE-2021-47346} coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer() [T370671]
  - euler: {CVE-2024-35955} kprobes: Fix possible use-after-free issue on kprobe registration [T370671]
  - euler: {CVE-2021-47521} can: sja1000: fix use after free in ems_pcmcia_add_card() [T370671]
  - euler: {CVE-2021-47232} can: j1939: fix Use-after-Free, hold skb ref while in use [T370671]
  - euler: {CVE-2021-47232} can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer() [T370671]
  - euler: {CVE-2021-47232} can: j1939: transport: add j1939_session_skb_find_by_offset() function [T370671]
  - euler: {CVE-2024-36971} net: fix kabi breakage in struct dst_ops [T370671]
  - euler: {CVE-2024-36971} net: fix __dst_negative_advice() race [T370671]
  - euler: {CVE-2021-47235} net: ethernet: fix potential use-after-free in ec_bhf_remove [T370671]
  - euler: {CVE-2021-47391} RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests [T370671]
  - euler: {CVE-2021-47500} iio: mma8452: Fix trigger reference couting [T370671]
  - euler: {CVE-2024-35830} media: tc358743: register v4l2 async device only after successful setup [T370671]
  - euler: {CVE-2021-47288} media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() [T370671]
  - euler: {CVE-2024-36950} firewire: ohci: mask bus reset interrupts between ISR and bottom half [T370671]
  - euler: {CVE-2024-36941} wifi: nl80211: don't free NULL coalescing rule [T370671]
  - euler: {CVE-2021-47347} wl1251: Fix possible buffer overflow in wl1251_cmd_scan [T370671]
  - euler: {CVE-2024-27436} ALSA: usb-audio: Stop parsing channels bits when all channels are found. [T370671]
  - euler: {CVE-2024-36894} usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete [T370671]
  - euler: {CVE-2023-52853} hid: cp2112: Fix duplicate workqueue initialization [T370671]
  - euler: {CVE-2023-52834} atl1c: Work around the DMA RX overflow issue [T370671]
  - euler: {CVE-2023-52739} Fix page corruption caused by racy check in __free_pages [T370671]
  - euler: {CVE-2021-47466} mm, slub: fix potential memoryleak in kmem_cache_open() [T370671]
  - euler: {CVE-2023-52670} rpmsg: virtio: Free driver_override when rpmsg_remove() [T370671]
  - euler: {CVE-2023-52730} mmc: sdio: fix possible resource leaks in some error paths [T370671]
  - euler: {CVE-2021-47493} jbd2: export jbd2_journal_[grab|put]_journal_head [T370671]
  - euler: {CVE-2021-47493} ocfs2: fix a deadlock when commit trans [T370671]
  - euler: {CVE-2021-47493} ocfs2: fix race between searching chunks and release journal_head from buffer_head [T370671]
  - euler: {CVE-2021-47571} staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() [T370671]
  - euler: {CVE-2021-47229} PCI: aardvark: Fix kernel panic during PIO transfer [T370671]
  - euler: {CVE-2021-47229} PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response [T370671]
  - euler: {CVE-2021-47229} PCI: aardvark: Don't rely on jiffies while holding spinlock [T370671]
  - euler: {CVE-2021-47485} IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() [T370671]
  - euler: {CVE-2021-47485} IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields [T370671]
  - euler: {CVE-2021-47345} RDMA/cma: Fix rdma_resolve_route() memory leak [T370671]
  - euler: {CVE-2021-47321} watchdog: Fix possible use-after-free by calling del_timer_sync() [T370671]
  - euler: {CVE-2021-47261} IB/mlx5: Fix initializing CQ fragments buffer [T370671]
  - euler: {CVE-2024-35819} soc: fsl: qbman: Use raw spinlock for cgr_lock [T370671]
  - euler: {CVE-2021-47249} net: rds: fix memory leak in rds_recvmsg [T370671]
  - euler: {CVE-2021-47281} ALSA: seq: Fix race of snd_seq_timer_open() [T370671]
  - euler: {CVE-2021-47509} ALSA: pcm: oss: Limit the period size to 16MB [T370671]
  - euler: {CVE-2021-47509} ALSA: pcm: oss: Fix potential out-of-bounds shift [T370671]
  - euler: {CVE-2023-52747} IB/hfi1: Restore allocated resources on failed copyout [T370671]
  - euler: {CVE-2024-36016} tty: n_gsm: fix possible out-of-bounds in gsm0_receive() [T370671]
  - euler: {CVE-2024-35828} wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() [T370671]
  - euler: {CVE-2021-47334} misc/libmasm/module: Fix two use after free in ibmasm_init_one [T370671]
  - euler: {CVE-2021-47440} net: encx24j600: check error in devm_regmap_init_encx24j600 [T370671]
  - euler: {CVE-2024-36919} scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload [T370671]
  - euler: {CVE-2021-47425} i2c: acpi: fix resource leak in reconfiguration device addition [T370671]
  - euler: {CVE-2024-36905} net: relax socket state check at accept time. [T370671]
  - euler: {CVE-2024-36905} tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets [T370671]
  - euler: {CVE-2023-52875} clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data [T370671]
  - euler: {CVE-2024-36934} bna: ensure the copied buf is NUL terminated [T370671]
  - euler: {CVE-2021-47516} nfp: Fix memory leak in nfp_cpp_area_cache_add() [T370671]
  - euler: {CVE-2021-47474} comedi: vmk80xx: fix bulk-buffer overflow [T370671]
  - euler: {CVE-2021-47310} net: ti: fix UAF in tlan_remove_one [T370671]
  - euler: {CVE-2024-36883} net: fix out-of-bounds access in ops_init [T370671]
  - euler: {CVE-2024-36952} scsi: lpfc: Move NPIV's transport unregistration to after resource clean up [T370671]
  - euler: {CVE-2024-36960} drm/vmwgfx: Fix invalid reads in fence signaled events [T370671]
  - euler: {CVE-2024-36901} ipv6: prevent NULL dereference in ip6_output() [T370671]
  - euler: {CVE-2021-47479} staging: rtl8712: fix use-after-free in rtl8712_dl_fw [T370671]
  - euler: {CVE-2024-35809} PCI/PM: Drain runtime-idle callbacks before driver removal [T370671]
  - euler: {CVE-2024-36902} ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() [T370671]
  - euler: {CVE-2021-47324} watchdog: Fix possible use-after-free in wdt_startup() [T370671]
  - euler: {CVE-2021-47301} igb: Fix use-after-free error during reset [T370671]
  - euler: {CVE-2021-47344} media: zr364xx: fix memory leak in zr364xx_start_readpipe [T370671]
  - euler: {CVE-2021-47294} netrom: Fix use-after-free of a listening socket. [T370671]
  - euler: {CVE-2021-47294} netrom: Decrease sock refcount when sock timers expire [T370671]
  - euler: {CVE-2023-52810} fs/jfs: Add check for negative db_l2nbperpage [T370671]
  - euler: {CVE-2023-52810} jfs: jfs_dmap: Validate db_l2nbperpage while mounting [T370671]
  - euler: {CVE-2023-52880} tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc [T370671]
  - euler: {CVE-2021-47315} memory: fsl_ifc: fix leak of IO mapping on probe failure [T370671]
  - euler: {CVE-2023-52843} llc: verify mac len before reading mac header [T370671]
  - euler: {CVE-2024-36886} tipc: fix UAF in error path [T370671]
  - euler: {CVE-2024-36914} drm/amd/display: Skip on writeback when it's not applicable [T370671]
  - euler: {CVE-2024-35821} ubifs: Set page uptodate in the correct place [T370671]
  - euler: {CVE-2024-36904} tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). [T370671]
  - euler: {CVE-2024-35910} tcp: properly terminate timers for kernel sockets [T370671]
  - euler: {CVE-2024-35910} mptcp: add sk_stop_timer_sync helper [T370671]
  - euler: {CVE-2024-35893} net/sched: act_skbmod: prevent kernel-infoleak [T370671]
  - euler: {CVE-2023-52754} media: imon: fix access to invalid resource for the second interface [T370671]
  - euler: {CVE-2021-47483} regmap: Fix possible double-free in regcache_rbtree_exit() [T370671]
  - euler: {CVE-2021-47468} isdn: mISDN: Fix sleeping function called from invalid context [T370671]
  - euler: {CVE-2023-52855} usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency [T370671]
  - euler: {CVE-2021-47267} usb: fix various gadget panics on 10gbps cabling [T370671]
  - euler: {CVE-2024-35937} wifi: cfg80211: check A-MSDU format more carefully [T370671]
  - euler: {CVE-2021-47482} net: batman-adv: fix error handling [T370671]
  - euler: {CVE-2021-47372} net: macb: fix use after free on rmmod [T370671]
  - euler: {CVE-2023-52865} clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data [T370671]
  - euler: {CVE-2024-36017} rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation [T370671]
  - euler: {CVE-2021-47520} can: pch_can: pch_can_rx_normal: fix use after free [T370671]
  - euler: {CVE-2021-47547} net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound [T370671]
  - euler: {CVE-2024-27402} phonet/pep: fix racy skb_queue_empty() use [T370671]
  - euler: {CVE-2023-52708} mmc: mmc_spi: fix error handling in mmc_spi_probe() [T370671]
  - euler: {CVE-2021-47518} nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done [T370671]
  - euler: {CVE-2024-35947} dyndbg: fix old BUG_ON in >control parser [T370671]
  - euler: {CVE-2021-47234} phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init() [T370671]
  - euler: {CVE-2024-35888} erspan: make sure erspan_base_hdr is present in skb->head [T370671]
  - euler: {CVE-2024-36964} fs/9p: only translate RWX permissions for plain 9P2000 [T370671]
  - euler: {CVE-2024-35896} netfilter: complete validation of user input [T370671]
  - euler: {CVE-2024-35896} netfilter: validate user input for expected length [T370671]
  - euler: {CVE-2021-47336} smackfs: restrict bytes count in smk_set_cipso() [T370671]
  - euler: {CVE-2023-52764} media: gspca: cpia1: shift-out-of-bounds in set_flicker [T370671]
  - euler: {CVE-2021-47456} can: peak_pci: peak_pci_remove(): fix UAF [T370671]
  - euler: {CVE-2021-47538} rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() [T370671]
  - euler: {CVE-2021-47542} net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() [T370671]
  - euler: {CVE-2024-36029} mmc: sdhci-msm: pervent access to suspended controller [T370671]
  - euler: {CVE-2021-47257} net: ieee802154: fix null deref in parse dev addr [T370671]
  - euler: {CVE-2021-47254} gfs2: Fix use-after-free in gfs2_glock_shrink_scan [T370671]
  - euler: {CVE-2021-47236} net: cdc_eem: fix tx fixup skb leak [T370671]
  - euler: {CVE-2024-36954} tipc: fix a possible memleak in tipc_buf_append [T370671]
  - euler: {CVE-2021-47358} staging: greybus: uart: fix tty use after free [T370671]
  - euler: {CVE-2023-52803} SUNRPC: Fix RPC client cleaned up the freed pipefs dentries [T370671]
  - euler: {CVE-2021-47478} isofs: Fix out of bound access for corrupted isofs image [T370671]
  - euler: {CVE-2021-47409} usb: dwc2: Fix memory leak in dwc2_hcd_init [T370671]
  - euler: {CVE-2021-47409} usb: dwc2: check return value after calling platform_get_resource() [T370671]
  - euler: {CVE-2023-52756} pwm: Fix double shift bug [T370671]
  - euler: {CVE-2023-52753} drm/amd/display: Avoid NULL dereference of timing generator [T370671]
  - euler: {CVE-2024-35984} i2c: smbus: fix NULL function pointer dereference [T370671]
  - euler: {CVE-2021-47511} ALSA: pcm: oss: Fix negative period/buffer sizes [T370671]
  - euler: {CVE-2021-47511} ALSA: pcm: oss: Fix a few more UBSAN fixes [T370671]
  - euler: {CVE-2021-47403} ipack: ipoctal: fix module reference leak [T370671]
  - euler: {CVE-2021-47499} iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove [T370671]
  - euler: {CVE-2021-47354} drm/sched: Avoid data corruptions [T370671]
  - euler: {CVE-2023-52864} platform/x86: wmi: Fix opening of char device [T370671]
  - euler: {CVE-2021-47424} i40e: Fix freeing of uninitialized misc IRQ vector [T370671]
  - euler: {CVE-2021-47476} comedi: ni_usb6501: fix NULL-deref in command paths [T370671]
  - euler: {CVE-2021-47541} net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() [T370671]
  - euler: {CVE-2024-27413} efi/capsule-loader: fix incorrect allocation size [T370671]
  - euler: {CVE-2021-47543} perf report: Fix memory leaks around perf_tip() [T370671]
  - euler: {CVE-2023-52705} nilfs2: fix underflow in second superblock position calculations [T370671]
  - euler: {CVE-2021-47544} tcp: fix page frag corruption on page fault [T370671]
  - euler: {CVE-2023-52871} soc: qcom: llcc: Handle a second device without data corruption [T370671]
  - euler: {CVE-2021-47460} ocfs2: fix data corruption after conversion from inline format [T370671]
  - euler: {CVE-2023-52774} s390/dasd: protect device queue against concurrent access [T370671]
  - euler: {CVE-2023-52836} locking/ww_mutex/test: Fix potential workqueue corruption [T370671]
  - euler: {CVE-2023-52686} powerpc/powernv: Add a null pointer check in opal_event_init() [T370671]
  - euler: {CVE-2021-47275} bcache: avoid oversized read request in cache missing code path [T370671]
  - euler: {CVE-2021-47237} net: hamradio: fix memory leak in mkiss_close [T370671]
  - euler: {CVE-2023-52752} smb: client: fix use-after-free bug in cifs_debug_data_proc_show() [T370671]
  - euler: {CVE-2021-47356} mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq [T370671]
  - euler: {CVE-2021-47356} mISDN: fix possible use-after-free in HFC_cleanup() [T370671]
  - euler: {CVE-2021-47314} memory: fsl_ifc: fix leak of private memory on probe failure [T370671]
  - euler: {CVE-2023-52789} tty: vcc: Add check for kstrdup() in vcc_probe() [T370671]
  - euler: {CVE-2024-36015} ppdev: Add an error check in register_device [T370671]
  - euler: {CVE-2024-36015} ppdev: Remove usage of the deprecated ida_simple_xx() API [T370671]
  - euler: {CVE-2021-47353} udf: Fix NULL pointer dereference in udf_symlink function [T370671]
  - euler: {CVE-2024-27399} Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout [T370671]
  - euler: {CVE-2021-47323} watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() [T370671]
  - euler: {CVE-2021-47297} net: fix uninit-value in caif_seqpkt_sendmsg [T370671]
  - euler: {CVE-2021-47438} net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() [T370671]
  - euler: {CVE-2021-47438} net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path [T370671]
  - euler: {CVE-2021-47362} drm/amd/pm: Update intermediate power state for SI [T370671]
  - euler: {CVE-2024-36940} pinctrl: core: delete incorrect free in pinctrl_enable() [T370671]
  - euler: {CVE-2021-47477} comedi: dt9812: fix DMA buffers on stack [T370671]
  - euler: {CVE-2021-47395} mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap [T370671]
  - euler: {CVE-2021-47442} NFC: digital: fix possible memory leak in digital_in_send_sdd_req() [T370671]
  - euler: {CVE-2023-52750} arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer [T370671]
  - euler: {CVE-2023-52750} arm64: Make CPU_BIG_ENDIAN depend on ld.bfd or ld.lld 13.0.0+ [T370671]
  - euler: {CVE-2021-47443} NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() [T370671]
  - euler: {CVE-2023-52802} iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() [T370671]
  - euler: {CVE-2021-47330} tty: serial: 8250: serial_cs: Fix a memory leak in error handling path [T370671]
  - euler: {CVE-2021-47459} can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv [T370671]
  - euler: {CVE-2024-35978} Bluetooth: Fix memory leak in hci_req_sync_complete() [T370671]
  - euler: {CVE-2021-47423} drm/nouveau/debugfs: fix file release memory leak [T370671]
  - euler: {CVE-2021-47277} kvm: fix previous commit for 32-bit builds [T370671]
  - euler: {CVE-2021-47277} kvm: avoid speculation-based attacks from out-of-range memslot accesses [T370671]
  - euler: {CVE-2021-47545} perf hist: Fix memory leak of a perf_hpp_fmt [T370671]
  - euler: {CVE-2021-47548} ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() [T370671]
  - euler: {CVE-2024-35960} net/mlx5: Properly link new fs rules into the tree [T370671]
  - euler: {CVE-2023-52832} wifi: mac80211: don't return unset power in ieee80211_get_tx_power() [T370671]
  - euler: {CVE-2023-52819} drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga [T370671]
  - euler: {CVE-2023-52703} net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path [T370671]
  - euler: {CVE-2021-47361} mcb: fix error handling in mcb_alloc_bus() [T370671]
  - euler: {CVE-2023-52799} jfs: fix array-index-out-of-bounds in dbFindLeaf [T370671]
  - euler: {CVE-2023-52799} fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev [T370671]
  - euler: {CVE-2021-47388} mac80211: fix use-after-free in CCMP/GCMP RX [T370671]
  - euler: {CVE-2023-52796} ipvlan: add ipvlan_route_v6_outbound() helper [T370671]
  - euler: {CVE-2021-47350} powerpc/mm: Fix lockup on kernel exec fault [T370671]
  - euler: {CVE-2021-47357} atm: iphase: fix possible use-after-free in ia_module_exit() [T370671]
  - euler: {CVE-2024-35822} usb: udc: remove warning when queue disabled ep [T370671]
  - euler: {CVE-2023-52699} sysv: don't call sb_bread() with pointers_lock held [T370671]
  - euler: {CVE-2023-52759} gfs2: ignore negated quota changes [T370671]
  - euler: {CVE-2023-52804} fs/jfs: Add validity check for db_maxag and db_agpref [T370671]
  - euler: {CVE-2023-52804} fs: jfs: fix shift-out-of-bounds in dbAllocAG [T370671]
  - euler: {CVE-2023-52804} jfs: fix divide error in dbNextAG [T370671]
  - euler: {CVE-2023-52845} tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING [T370671]
  - euler: {CVE-2024-35877} x86/mm/pat: fix VM_PAT handling in COW mappings [T370671]
  - euler: {CVE-2021-47559} net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() [T370671]
  - euler: {CVE-2021-47458} ocfs2: mount fails with buffer overflow in strlen [T370671]
  - euler: {CVE-2021-47445} drm/msm: Fix null pointer dereference on pointer edp [T370671]
  - euler: {CVE-2021-47265} RDMA: Verify port when creating flow rule [T370671]
  - euler: {CVE-2021-47355} atm: nicstar: Fix possible use-after-free in nicstar_cleanup() [T370671]
  - euler: {CVE-2021-47405} HID: usbhid: free raw_report buffers in usbhid_stop [T370671]
  - euler: {CVE-2023-52693} ACPI: video: check for error while searching for backlight device parent [T370671]
  - euler: {CVE-2023-52806} ALSA: hda: Fix possible null-ptr-deref when assigning a stream [T370671]
  - euler: {CVE-2021-47495} usbnet: fix error return code in usbnet_probe() [T370671]
  - euler: {CVE-2021-47495} usbnet: sanity check for maxpacket [T370671]
  - euler: {CVE-2023-52805} jfs: fix array-index-out-of-bounds in diAlloc [T370671]
  - euler: {CVE-2021-47397} sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb [T370671]
  - euler: {CVE-2021-47401} ipack: ipoctal: fix stack information leak [T370671]
  - euler: {CVE-2023-52809} scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() [T370671]
  - euler: {CVE-2021-47549} sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl [T370671]
  - euler: {CVE-2021-47404} HID: betop: fix slab-out-of-bounds Write in betop_probe [T370671]
  - euler: {CVE-2021-47427} scsi: iscsi: Fix iscsi_task use after free [T370671]
  - euler: {CVE-2021-47427} scsi: iscsi: Have abort handler get ref to conn [T370671]
  - euler: {CVE-2024-35789} wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes [T370671]
  - euler: {CVE-2024-35789} mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN [T370671]
  - euler: {CVE-2021-47475} comedi: vmk80xx: fix expression for tx buffer size [T370671]
  - euler: {CVE-2021-47475} comedi: vmk80xx: fix transfer-buffer overflows [T370671]
  - euler: {CVE-2024-35925} block: prevent division by zero in blk_rq_stat_sum() [T370671]
  - euler: {CVE-2024-35823} vt: fix unicode buffer corruption when deleting characters [T370671]
  - euler: {CVE-2024-35995} ACPI: CPPC: Fix access width used for PCC registers [T370671]
  - euler: {CVE-2024-35995} ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro [T370671]
  - euler: {CVE-2024-35995} ACPI: CPPC: Use access_width over bit_width for system memory accesses [T370671]
  - euler: {CVE-2024-35995} ACPI: CPPC: Fix up I/O port access in cpc_read() [T370671]
  - euler: {CVE-2024-35995} ACPI: CPPC: Implement support for SystemIO registers [T370671]
  - euler: {CVE-2021-47407} KVM: x86: Handle SRCU initialization failure during page track init [T370671]
  - euler: {CVE-2024-35904} selinux: avoid dereference of garbage after mount failure [T370671]
  - euler: {CVE-2023-52669} crypto: s390/aes - Fix buffer overread in CTR mode [T370671]
  - euler: {CVE-2021-47269} usb: dwc3: ep0: fix NULL pointer exception [T370671]
  - euler: {CVE-2023-52818} drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 [T370671]
  - euler: {CVE-2021-47284} isdn: mISDN: netjet: Fix crash in nj_probe: [T370671]
  - euler: {CVE-2024-35806} soc: fsl: qbman: Always disable interrupts when taking cgr_lock [T370671]
  - euler: {CVE-2024-35950} drm/client: Fully protect modes[] with dev->mode_config.mutex [T370671]
  - euler: {CVE-2024-35976} xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING [T370671]
  - euler: {CVE-2023-52817} drm/amdgpu/debugfs: fix error code when smc register accessors are NULL [T370671]
  - euler: {CVE-2023-52817} drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL [T370671]
  - euler: {CVE-2024-35898} netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() [T370671]
  - euler: {CVE-2023-52835} perf/core: Bail out early if the request AUX area is out of bound [T370671]
  - euler: {CVE-2021-47496} net/tls: Fix flipped sign in tls_err_abort() calls [T370671]
  - euler: {CVE-2024-35997} HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up [T370671]
  - euler: {CVE-2021-47455} ptp: fix code indentation issues [T370671]
  - euler: {CVE-2021-47455} ptp: Fix possible memory leak in ptp_clock_register() [T370671]
  - euler: {CVE-2022-48710} drm/radeon: fix a possible null pointer dereference [T370671]
  - euler: {CVE-2024-35922} fbmon: prevent division by zero in fb_videomode_from_videomode() [T370671]
  - euler: {CVE-2021-47497} nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells [T370671]
  - euler: {CVE-2024-35886} ipv6: Fix infinite recursion in fib6_dump_done(). [T370671]
  - euler: {CVE-2024-27426} netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries [T370671]
  - euler: {CVE-2021-47393} hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs [T370671]
  - euler: {CVE-2021-47335} f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances [T370671]
  - euler: {CVE-2023-52868} thermal: core: prevent potential string overflow [T370671]
  - euler: {CVE-2023-52847} media: bttv: fix use after free error due to btv->timeout timer [T370671]
  - euler: {CVE-2024-35835} net/mlx5e: fix a double-free in arfs_create_groups [T370671]
  - euler: {CVE-2024-27428} netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser [T370671]
  - euler: {CVE-2024-27427} netrom: Fix a data-race around sysctl_netrom_transport_timeout [T370671]
  - euler: {CVE-2024-27403} netfilter: nft_flow_offload: reset dst in route object after setting up flow [T370671]
  - euler: {CVE-2023-52840} Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() [T370671]
  - euler: {CVE-2023-52656} io_uring: drop any code related to SCM_RIGHTS [T370671]
  - euler: {CVE-2023-52656} io_uring/unix: drop usage of io_uring socket [T370671]
  - euler: {CVE-2023-52691} drm/amd/pm: fix a double-free in si_dpm_init [T370671]
  - euler: {CVE-2023-52698} calipso: fix memory leak in netlbl_calipso_add_pass() [T370671]
  - euler: {CVE-2023-52698} netlabel: remove unused parameter in netlbl_netlink_auditinfo() [T370671]
  - euler: {CVE-2023-52698} net: netlabel: Fix kerneldoc warnings [T370671]
  - euler: {CVE-2023-52867} drm/radeon: possible buffer overflow [T370671]
  - euler: {CVE-2024-27419} netrom: Fix data-races around sysctl_net_busy_read [T370671]
  - euler: {CVE-2024-35936} btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() [T370671]
  - euler: {CVE-2024-35936} btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() [T370671]
  - euler: {CVE-2024-35807} ext4: fix corruption during on-line resize [T370671]
  - euler: {CVE-2024-35930} scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() [T370671]
  - euler: {CVE-2024-26886} Bluetooth: af_bluetooth: Fix deadlock [T370671]
  - euler: {CVE-2024-35805} dm snapshot: fix lockup in dm_exception_table_exit [T370671]
  - euler: {CVE-2024-35935} btrfs: send: handle path ref underflow in header iterate_inode_ref() [T370671]
  - euler: {CVE-2024-35847} irqchip/gic-v3-its: Prevent double free on error [T370671]
  - euler: {CVE-2023-52675} powerpc/imc-pmu: Add a null pointer check in update_events_in_group() [T370671]
  - euler: {CVE-2023-52685} pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() [T370671]
  - euler: {CVE-2024-35849} btrfs: fix information leak in btrfs_ioctl_logical_to_ino() [T370671]
  - euler: {CVE-2024-27398} Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout [T370671]
  - euler: {CVE-2024-27401} firewire: nosy: ensure user_length is taken into account when fetching packet contents [T370671]
  - euler: {CVE-2024-27395} net: openvswitch: Fix Use-After-Free in ovs_ct_exit [T370671]
  - euler: {CVE-2024-27396} net: gtp: Fix Use-After-Free in gtp_dellink [T370671]
  - euler: {CVE-2024-26957} s390/zcrypt: fix reference counting on zcrypt card objects [T370671]
  - euler: {CVE-2023-52652} NTB: fix possible name leak in ntb_register_device() [T370671]
  - euler: {CVE-2024-27054} s390/dasd: fix double module refcount decrement [T370671]
  - euler: {CVE-2024-26921} inet: frags: re-introduce skb coalescing for local delivery [T370671]
  - euler: {CVE-2024-26921} net: Fix KABI break for introducing is_skb_wmem() [T370671]
  - euler: {CVE-2024-26921} skb_expand_head() adjust skb->truesize incorrectly [T370671]
  - euler: {CVE-2024-26921} skbuff: introduce skb_expand_head() [T370671]
  - euler: {CVE-2024-26958} nfs: fix UAF in direct writes [T370671]
  - euler: {CVE-2024-26996} usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error [T370671]
  - euler: {CVE-2024-26982} Squashfs: check the inode number is not the invalid value of zero [T370671]
  - euler: {CVE-2021-47182} scsi: sd: Fix sd_do_mode_sense() buffer length handling [T370671]
  - euler: {CVE-2024-27072} media: usbtv: Remove useless locks in usbtv_video_free() [T370671]
  - euler: {CVE-2024-27388} SUNRPC: fix some memleaks in gssx_dec_option_array [T370671]
  - euler: {CVE-2023-52653} SUNRPC: fix a memleak in gss_import_v2_context [T370671]
  - euler: {CVE-2024-27037} clk: zynq: Prevent null pointer dereference caused by kmalloc failure [T370671]
  - euler: {CVE-2022-48704} drm/radeon: add a force flush to delay work when radeon [T370671]
  - euler: {CVE-2024-26960} mm: swap: fix race between free_swap_and_cache() and swapoff() [T370671]
  - euler: {CVE-2024-26960} mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() [T370671]
  - euler: {CVE-2024-26976} KVM: Always flush async #PF workqueue when vCPU is being destroyed [T370671]
  - euler: {CVE-2024-27019} netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() [T370671]
  - euler: {CVE-2024-26865} tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge() [T370671]
  - euler: {CVE-2024-26865} tcp: Clean up kernel listener's reqsk in inet_twsk_purge() [T370671]
  - euler: {CVE-2024-27020} netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() [T370671]
  - euler: {CVE-2024-27020} netfilter: nf_tables: __nft_expr_type_get() selects specific family type [T370671]
  - euler: {CVE-2024-27062} nouveau: lock the client object tree. [T370671]
  - euler: {CVE-2024-26956} nilfs2: fix failure to detect DAT corruption in btree and direct mappings [T370671]
  - euler: {CVE-2022-48697} nvmet: fix a use-after-free [T370671]
  - euler: {CVE-2024-26955} nilfs2: prevent kernel bug at submit_bh_wbc() [T370671]
  - euler: {CVE-2024-27024} net/rds: fix possible cp null dereference [T370671]
  - euler: {CVE-2024-27024} net/rds: fix WARNING in rds_conn_connect_if_down [T370671]
  - euler: {CVE-2024-27059} USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command [T370671]
  - euler: {CVE-2023-52644} wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled [T370671]
  - euler: {CVE-2023-52644} b43: dma: Fix use true/false for bool type variable [T370671]
  - euler: {CVE-2024-27078} media: v4l2-tpg: fix some memleaks in tpg_alloc [T370671]
  - euler: {CVE-2024-27001} comedi: vmk80xx: fix incomplete endpoint checking [T370671]
  - euler: {CVE-2024-26966} clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays [T370671]
  - euler: {CVE-2024-26897} wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete [T370671]
  - euler: {CVE-2024-26897} ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet() [T370671]
  - euler: {CVE-2022-48693} soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs [T370671]
  - euler: {CVE-2022-48693} soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe [T370671]
  - euler: {CVE-2024-26981} nilfs2: fix OOB in nilfs_set_de_type [T370671]
  - euler: {CVE-2024-26969} clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays [T370671]
  - euler: {CVE-2024-27073} media: ttpci: fix two memleaks in budget_av_attach [T370671]
  - euler: {CVE-2024-27010} net/sched: fix kabi change in struct Qdisc [T370671]
  - euler: {CVE-2024-27010} net/sched: Fix mirred deadlock on device recursion [T370671]
  - euler: {CVE-2024-27014} net/mlx5e: Prevent deadlock while disabling aRFS [T370671]
  - euler: {CVE-2024-27043} media: edia: dvbdev: fix a use-after-free [T370671]
  - euler: {CVE-2024-26961} mac802154: fix llsec key resources release in mac802154_llsec_key_del [T370671]
  - euler: {CVE-2024-26965} clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays [T370671]
  - euler: {CVE-2024-27046} nfp: flower: handle acti_netdevs allocation failure [T370671]
  - euler: {CVE-2022-48701} ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() [T370671]
  - euler: {CVE-2024-26974} crypto: qat - resolve race condition during AER recovery [T370671]
  - euler: {CVE-2024-26974} crypto: qat - fix double free during reset [T370671]
  - euler: {CVE-2024-26994} speakup: Avoid crash on very long word [T370671]
  - euler: {CVE-2024-27000} serial: core: fix kernel-doc for uart_port_unlock_irqrestore() [T370671]
  - euler: {CVE-2024-27000} serial: mxs-auart: add spinlock around changing cts state [T370671]
  - euler: {CVE-2024-27000} serial: core: Provide port lock wrappers [T370671]
  - euler: {CVE-2024-27011} netfilter: nf_tables: fix memleak in map from abort path [T370671]
  - euler: {CVE-2024-27028} spi: spi-mt65xx: Fix NULL pointer access in interrupt handler [T370671]
  - euler: {CVE-2024-26934} USB: core: Fix deadlock in usb_deauthorize_interface() [T370671]
  - euler: {CVE-2024-27008} drm: nv04: Fix out of bounds access [T370671]
  - euler: {CVE-2024-27013} tun: limit printing rate when illegal packet received by tun dev [T370671]
  - euler: {CVE-2024-27051} cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value [T370671]
  - euler: {CVE-2024-24858} Bluetooth: Fix TOCTOU in HCI debugfs implementation [T370671]
  - euler: {CVE-2024-26846} nvme-fc: do not wait in vain when unloading module [T370671]
  - euler: {CVE-2024-26846} nvme-fc: remove err_work work item [T370671]
  - euler: {CVE-2024-27074} media: go7007: fix a memleak in go7007_load_encoder [T370671]
  - euler: {CVE-2024-27077} media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity [T370671]
  - euler: {CVE-2024-26984} nouveau: fix instmem race condition around ptr stores [T370671]
  - euler: {CVE-2024-27075} media: dvb-frontends: avoid stack overflow warnings with clang [T370671]
  - euler: {CVE-2024-26999} serial/pmac_zilog: Remove flawed mitigation for rx irq flood [T370671]
  - euler: {CVE-2023-52650} drm/tegra: dsi: Add missing check for of_find_device_by_node [T370671]
  - euler: {CVE-2022-48636} s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup [T370671]
  - euler: {CVE-2024-26883} bpf: Fix stackmap overflow check on 32-bit arches [T370671]
  - euler: {CVE-2024-26883} bpf: Check for integer overflow when using roundup_pow_of_two() [T370671]
  - euler: {CVE-2022-48702} ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() [T370671]
  - euler: {CVE-2024-26993} fs: sysfs: Fix reference leak in sysfs_break_active_protection() [T370671]
  - euler: {CVE-2024-26973} fat: fix uninitialized field in nostale filehandles [T370671]
  - euler: {CVE-2024-26923} af_unix: Fix garbage collector racing against connect() [T370671]
  - euler: {CVE-2024-26845} scsi: target: core: Add TMF to tmr_list handling [T370671]
  - euler: {CVE-2022-48664} btrfs: fix hang during unmount when stopping a space reclaim worker [T370671]
  - euler: {CVE-2022-48664} Btrfs: fix crash during unmount due to race with delayed inode workers [T370671]
  - euler: {CVE-2024-26922} drm/amdgpu: validate the parameters of bo mapping operations more clearly [T370671]
  - euler: {CVE-2024-26922} amdgpu: validate offset_in_bo of drm_amdgpu_gem_va [T370671]
  - euler: {CVE-2024-26922} drm/amdgpu: restrict bo mapping within gpu address limits [T370671]
  - euler: {CVE-2024-26922} drm/amdgpu: check alignment on CPU page for bo map [T370671]
  - euler: {CVE-2024-26878} quota: Fix potential NULL pointer dereference [T370671]
  - euler: {CVE-2024-26878} quota: check time limit when back out space/inode change [T370671]
  - euler: {CVE-2024-26878} quota: code cleanup for __dquot_alloc_space() [T370671]
  - euler: {CVE-2024-26828} cifs: fix underflow in parse_server_interfaces() [T370671]
  - euler: {CVE-2024-26876} drm/bridge: adv7511: fix crash on irq during probe [T370671]
  - euler: {CVE-2024-26852} net/ipv6: avoid possible UAF in ip6_route_mpath_notify() [T370671]
  - euler: {CVE-2024-26857} geneve: make sure to pull inner header in geneve_rx() [T370671]
  - euler: {CVE-2021-47217} x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails [T370671]
  - euler: {CVE-2024-26863} hsr: Fix uninit-value access in hsr_get_node() [T370671]
  - euler: {CVE-2024-26863} net: hsr: fix placement of logical operator in a multi-line statement [T370671]
  - euler: {CVE-2024-26817} amdkfd: use calloc instead of kzalloc to avoid integer overflow [T370671]
  - euler: {CVE-2024-26859} net/bnx2x: Prevent access to a freed page in page_pool [T370671]
  - euler: {CVE-2024-26915} drm/amdgpu: Reset IH OVERFLOW_CLEAR bit [T370671]
  - euler: {CVE-2024-26882} net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() [T370671]
  - euler: {CVE-2024-26894} ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() [T370671]
  - euler: {CVE-2024-26874} drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip [T370671]
  - euler: {CVE-2023-52642} media: rc: bpf attach/detach requires write permission [T370671]
  - euler: {CVE-2024-26825} nfc: nci: free rx_data_reassembly skb on NCI device cleanup [T370671]
  - euler: {CVE-2024-26839} IB/hfi1: Fix a memleak in init_credit_return [T370671]
  - euler: {CVE-2024-24860} Bluetooth: Fix atomicity violation in {min,max}_key_size_set [T370671]
  - euler: {CVE-2024-24860} Bluetooth: Move {min,max}_key_size debugfs into hci_debugfs_create_le [T370671]
  - euler: {CVE-2024-26851} netfilter: nf_conntrack_h323: Add protection for bmp length out of range [T370671]
  - euler: {CVE-2021-47183} scsi: lpfc: Fix link down processing to address NULL pointer dereference [T370671]
  - euler: {CVE-2024-26840} cachefiles: fix memory leak in cachefiles_add_cache() [T370671]
  - euler: {CVE-2024-26872} RDMA/srpt: Do not register event handler until srpt device is fully setup [T370671]
  - euler: {CVE-2024-26875} media: pvrusb2: fix uaf in pvr2_context_set_notify [T370671]
  - euler: {CVE-2024-26901} do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak [T370671]
  - euler: {CVE-2024-26813} vfio/platform: Create persistent IRQ handlers [T370671]
  - euler: {CVE-2024-26813} vfio/platform: Disable virqfds on cleanup [T370671]
  - euler: {CVE-2021-47182} scsi: core: Fix scsi_mode_sense() buffer length handling [T370671]
  - euler: {CVE-2021-47182} scsi: core: Reshuffle response handling in scsi_mode_sense() [T370671]
  - euler: {CVE-2021-47182} scsi: core: Fixup calling convention for scsi_mode_sense() [T370671]
  - euler: {CVE-2024-26880} dm: call the resume method on internal suspend [T370671]
  - euler: {CVE-2024-26904} btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve [T370671]
  - euler: {CVE-2024-26884} bpf: Fix hashtab overflow check on 32-bit arches [T370671]
  - euler: {CVE-2023-52638} can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock [T370671]
  - euler: {CVE-2024-26920} tracing/trigger: Fix to return error if failed to alloc snapshot [T370671]
  - euler: {CVE-2024-26908} x86/xen: Add some null pointer checking to smp.c [T370671]
  - euler: {CVE-2024-26663} tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() [T370671]
  - euler: {CVE-2024-24861} media: xc4000: Fix atomicity violation in xc4000_get_frequency [T370671]
  - euler: {CVE-2021-47216} scsi: advansys: Fix kernel pointer leak [T370671]
  - euler: {CVE-2024-26801} Bluetooth: Avoid potential use-after-free in hci_error_reset [T370671]
  - euler: {CVE-2024-26793} gtp: fix use-after-free and null-ptr-deref in gtp_newlink() [T370671]
  - euler: {CVE-2023-47233} wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach [T370671]
  - euler: {CVE-2024-26733} arp: Prevent overflow in arp_req_get(). [T370671]
  - euler: {CVE-2021-47203} scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() [T370671]
  - euler: {CVE-2021-47210} usb: typec: tipd: Remove WARN_ON in tps6598x_block_read [T370671]
  - euler: {CVE-2024-25739} ubi: Check for too small LEB size in VTBL code [T370671]
  - euler: {CVE-2021-47211} ALSA: usb-audio: fix null pointer dereference on pointer cs_desc [T370671]
  - euler: {CVE-2021-47194} cfg80211: call cfg80211_stop_ap when switch from P2P_GO type [T370671]
  - euler: {CVE-2024-26739} net/sched: act_mirred: don't override retval if we already lost the skb [T370671]
  - euler: {CVE-2024-26812} vfio/pci: Create persistent INTx handler [T370671]
  - euler: {CVE-2024-26812} vfio: Introduce interface to flush virqfd inject workqueue [T370671]
  - euler: {CVE-2021-47201} iavf: free q_vectors before queues in iavf_disable_vf [T370671]
  - euler: {CVE-2024-26687} xen/events: close evtchn after mapping cleanup [T370671]
  - euler: {CVE-2024-27437} vfio/pci: Disable auto-enable of exclusive INTx IRQ [T370671]
  - euler: {CVE-2024-27437} genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() [T370671]
  - euler: {CVE-2024-26810} vfio/pci: Lock external INTx masking ops [T370671]
  - euler: {CVE-2024-26805} netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter [T370671]
  - euler: {CVE-2023-52637} can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) [T370671]
  - euler: {CVE-2024-26764} fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion [T370671]
  - euler: {CVE-2024-26764} fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio [T370671]
  - euler: {CVE-2024-26686} fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats [T370671]
  - euler: {CVE-2024-26686} fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() [T370671]
  - euler: {CVE-2024-26686} fs/proc: do_task_stat: use __for_each_thread() [T370671]
  - euler: {CVE-2024-26686} exit: Use the correct exit_code in /proc/<pid>/stat [T370671]
  - euler: {CVE-2024-26804} net: ip_tunnel: prevent perpetual headroom growth [T370671]
  - euler: {CVE-2024-26779} wifi: mac80211: fix race condition on enabling fast-xmit [T370671]
  - euler: {CVE-2024-26697} nilfs2: fix data corruption in dsync block recovery for small block sizes [T370671]
  - euler: {CVE-2024-26754} gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() [T370671]
  - euler: {CVE-2024-26685} nilfs2: fix potential bug in end_buffer_async_write [T370671]
  - euler: {CVE-2024-26685} nilfs2: fix buffer corruption due to concurrent device reads [T370671]
  - euler: {CVE-2024-26726} btrfs: don't drop extent_map for free space inode on write error [T370671]
  - euler: {CVE-2023-52635} PM / devfreq: Synchronize devfreq_monitor_[start/stop] [T370671]
  - euler: {CVE-2023-52639} KVM: s390: vsie: fix race during shadow creation [T370671]
  - euler: {CVE-2024-26759} mm/swap: fix race when skipping swapcache [T370671]
  - euler: {CVE-2024-26735} ipv6: sr: fix possible use-after-free and null-ptr-deref [T370671]
  - euler: {CVE-2024-26791} btrfs: dev-replace: properly validate device names [T370671]
  - euler: {CVE-2024-26778} fbdev: savage: Error out if pixclock equals zero [T370671]
  - euler: {CVE-2024-26743} RDMA/qedr: Fix qedr_create_user_qp error flow [T370671]
  - euler: {CVE-2024-26744} RDMA/srpt: Support specifying the srpt_service_guid parameter [T370671]
  - euler: {CVE-2024-26704} ext4: fix double-free of blocks due to wrong extents moved_len [T370671]
  - euler: {CVE-2024-26763} dm-crypt: don't modify the data when using authenticated encryption [T370671]
  - euler: {CVE-2024-26771} dmaengine: ti: edma: Add some null pointer checks to the edma_probe [T370671]
  - euler: {CVE-2024-26771} dmaengine: ti: edma: Fix error return code in edma_probe() [T370671]
  - euler: {CVE-2024-26771} dmaengine: ti: edma: add missed operations [T370671]
  - euler: {CVE-2024-26771} dmaengine: ti: edma: fix missed failure handling [T370671]
  - euler: {CVE-2024-26772} ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() [T370671]
  - euler: {CVE-2024-26777} fbdev: sis: Error out if pixclock equals zero [T370671]
  - euler: {CVE-2024-26696} nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() [T370671]
  - euler: {CVE-2024-26773} ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() [T370671]
  - stable: {CVE-2024-26816} x86/boot: Ignore relocations in .notes sections in walk_relocs() too [B262317] [T370671]
  - stable: {CVE-2024-26816} x86, relocs: Ignore relocations in .notes section [B262317] [T370671]
  - euler: {CVE-2023-7042} wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() [T370671]
  - euler: {CVE-2024-26751} ARM: ep93xx: Add terminator to gpiod_lookup_table [T370671]
  - euler: {CVE-2024-26668} netfilter: nft_limit: reject configurations that cause integer overflow [T370671]
  - euler: {CVE-2021-47150} net: fec: fix the potential memory leak in fec_enet_init() [T370671]
  - euler: {CVE-2023-52629} sh: push-switch: Reorder cleanup operations to avoid use-after-free bug [T370671]
  - euler: {CVE-2024-26644} btrfs: don't abort filesystem when attempting to snapshot deleted subvolume [T370671]
  - euler: {CVE-2024-26654} ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs [T370671]
  - euler: {CVE-2021-47163} tipc: wait and exit until all work queues are done [T370671]
  - euler: {CVE-2024-26641} ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() [T370671]
  - euler: {CVE-2024-26651} sr9800: Add check for usbnet_get_endpoints [T370671]
  - euler: {CVE-2021-47167} NFS: Fix an Oopsable condition in __nfs_pageio_add_request() [T370671]
  - euler: {CVE-2021-47162} tipc: skb_linearize the head skb when reassembling msgs [T370671]
  - euler: {CVE-2021-47170} USB: usbfs: Don't WARN about excessively large memory allocations [T370671]
  - euler: {CVE-2023-52587} IB/ipoib: Fix mcast list locking [T370671]
  - euler: {CVE-2023-52587} RDMA/IPoIB: Fix error code return in ipoib_mcast_join [T370671]
  - euler: {CVE-2021-47091} mac80211: fix locking in ieee80211_start_ap error path [T370671]
  - euler: {CVE-2021-47131} net/tls: Use RCU API to access tls_ctx->netdev [T370671]
  - euler: {CVE-2021-47131} net/tls: Remove the context from the list in tls_device_down [T370671]
  - euler: {CVE-2021-47131} tls: Fix context leak on tls_device_down [T370671]
  - euler: {CVE-2021-47131} net/tls: Resolve KABI break when backport bugfix of CVE-2021-47131 [T370671]
  - euler: {CVE-2021-47131} net/tls: Fix use-after-free after the TLS device goes down and up [T370671]
  - euler: {CVE-2021-47131} net/tls: Replace TLS_RX_SYNC_RUNNING with RCU [T370671]
  - euler: {CVE-2021-47153} i2c: i801: Don't generate an interrupt on bus reset [T370671]
  - euler: {CVE-2021-47171} net: usb: fix possible use-after-free in smsc75xx_bind [T370671]
  - euler: {CVE-2021-47171} net: usb: fix memory leak in smsc75xx_bind [T370671]
  - euler: {CVE-2023-52622} ext4: avoid online resizing failures due to oversized flex bg [T370671]
  - euler: {CVE-2023-52622} ext4: unify the type of flexbg_size to unsigned int [T370671]
  - euler: {CVE-2023-52622} ext4: remove unnecessary check from alloc_flex_gd() [T370671]
  - euler: {CVE-2021-47159} net: dsa: fix a crash if ->get_sset_count() fails [T370671]
  - euler: {CVE-2021-47160} net: dsa: mt7530: fix VLAN traffic leaks again [T370671]
  - euler: {CVE-2021-47160} net: dsa: mt7530: fix VLAN traffic leaks [T370671]
  - euler: {CVE-2021-47146} mld: fix panic in mld_newpack() [T370671]
  - euler: {CVE-2024-26645} tracing: Ensure visibility when inserting an element into tracing_map [T370671]
  - euler: {CVE-2021-47169} serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait' [T370671]
  - euler: {CVE-2021-47173} misc/uss720: fix memory leak in uss720_probe [T370671]
  - euler: {CVE-2021-47149} net: fujitsu: fix potential null-ptr-deref [T370671]
  - euler: {CVE-2021-47180} NFC: nci: fix memory leak in nci_allocate_device [T370671]
  - euler: {CVE-2021-47143} net/smc: remove device from smcd_dev_list after failed device_add() [T370671]
  - euler: {CVE-2024-26642} netfilter: nf_tables: disallow anonymous set with timeout flag [T370671]
  - euler: {CVE-2024-26633} ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() [T370671]
  - euler: {CVE-2021-47145} btrfs: do not BUG_ON in link_to_fixup_dir [T370671]
  - euler: {CVE-2024-23307} md/raid5: fix atomicity violation in raid5_cache_count [T370671]
  - euler: {CVE-2023-52620} netfilter: nf_tables: disallow timeout for anonymous sets [T370671]
  - euler: {CVE-2023-52601} jfs: fix array-index-out-of-bounds in dbAdjTree [T370671]
  - euler: {CVE-2021-47161} spi: spi-fsl-dspi: Fix a resource leak in an error handling path [T370671]
  - euler: {CVE-2024-24855} scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() [T370671]
  - euler: {CVE-2021-47110} x86/kvm: Do not try to disable kvmclock if it was not enabled [T370671]
  - euler: {CVE-2021-47110} x86/kvm: Disable kvmclock on all CPUs on shutdown [T370671]
  - euler: {CVE-2023-52619} pstore/ram: Fix crash when setting number of cpus to an odd number [T370671]
  - euler: {CVE-2024-26636} llc: make llc_ui_sendmsg() more robust against bonding changes [T370671]
  - euler: {CVE-2024-26635} llc: Drop support for ETH_P_TR_802_2. [T370671]
  - euler: {CVE-2024-26640} tcp: add sanity checks to rx zerocopy [T370671]
  - euler: {CVE-2023-52600} jfs: fix uaf in jfs_evict_inode [T370671]
  - euler: {CVE-2023-52600} JFS: fix memleak in jfs_mount [T370671]
  - euler: {CVE-2023-52599} jfs: fix array-index-out-of-bounds in diNewExt [T370671]
  - euler: {CVE-2023-52594} wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() [T370671]
  - euler: {CVE-2021-47114} ocfs2: issue zeroout to EOF blocks [T370671]
  - euler: {CVE-2021-47114} ocfs2: fix zero out valid data [T370671]
  - euler: {CVE-2021-47114} ocfs2: fix data corruption by fallocate [T370671]
  - euler: {CVE-2023-52597} KVM: s390: fix setting of fpc register [T370671]
  - euler: {CVE-2023-52615} hwrng: core - Fix page fault dead lock on mmap-ed hwrng [T370671]
  - euler: {CVE-2021-47113} btrfs: abort in rename_exchange if we fail to insert the second ref [T370671]
  - euler: {CVE-2021-47122} net: caif: fix memory leak in caif_device_notify [T370671]
  - euler: {CVE-2021-47121} net: caif: fix memory leak in cfusbl_device_notify [T370671]
  - euler: {CVE-2021-47121} net: caif: add proper error handling [T370671]
  - euler: {CVE-2021-47121} net: caif: added cfserl_release function [T370671]
  - euler: {CVE-2023-52595} rt2x00: Fix kabi breakage in struct rt2x00lib_ops [T370671]
  - euler: {CVE-2023-52595} wifi: rt2x00: restart beacon queue when hardware reset [T370671]
  - euler: {CVE-2023-52595} rt2x00: clear up IV's on key removal [T370671]
  - euler: {CVE-2023-52595} rt2x00: clear IV's on start to fix AP mode regression [T370671]
  - euler: {CVE-2023-52595} rt2800: add pre_reset_hw callback [T370671]
  - euler: {CVE-2023-52595} rt2800: do not nullify initialization vector data [T370671]
  - euler: {CVE-2023-52609} binder: fix race between mmput() and do_exit() [T370671]
  - euler: {CVE-2023-52603} UBSAN: array-index-out-of-bounds in dtSplitRoot [T370671]
  - euler: {CVE-2023-52602} jfs: fix slab-out-of-bounds Read in dtSearch [T370671]
  - euler: {CVE-2021-47086} phonet/pep: refuse to enable an unbound pipe [T370671]
  - euler: {CVE-2024-26615} net/smc: fix illegal rmb_desc access in SMC-D connection dump [T370671]
  - euler: {CVE-2024-26622} tomoyo: fix UAF write bug in tomoyo_write_control() [T370671]
  - stable: {CVE-2023-6270} aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts [T370671]
  - euler: {CVE-2023-52515} RDMA/srp: Do not call scsi_done() from srp_abort() [T370671]
  - euler: {CVE-2023-52598} s390/ptrace: handle setting of fpc register correctly [T370671]
  - euler: {CVE-2023-52586} drm/msm/dpu: Add mutex lock in control vblank irq [T370671]
  - euler: {CVE-2023-52604} FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree [T370671]
  - euler: {CVE-2024-26625} llc: call sock_orphan() at release time [T370671]
  - euler: {CVE-2023-52583} ceph: fix deadlock or deadcode of misusing dget() [T370671]
  - euler: {CVE-2023-52606} powerpc/lib: Validate size for vector operations [T370671]
  - euler: {CVE-2023-52607} powerpc/mm: Fix null-pointer dereference in pgtable_cache_add [T370671]
  - euler: {CVE-2022-48630} crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ [T370671]
  - euler: {CVE-2022-48629} crypto: qcom-rng - ensure buffer for generate is completely filled [T370671]
  - euler: {CVE-2023-52486} drm: Don't unref the same fb many times by mistake due to deadlock handling [T370671]
  - euler: {CVE-2023-52524} net: nfc: llcp: Add lock when modifying device list [T370671]
  - euler: {CVE-2023-52502} net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() [T370671]
  - euler: {CVE-2023-52502} nfc: constify several pointers to u8, char and sk_buff [T370671]
  - euler: {CVE-2023-52507} nfc: nci: assert requested protocol is valid [T370671]
  - euler: {CVE-2021-46952} NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds [T370671]
  - euler: {CVE-2021-46926} ALSA: hda: intel-sdw-acpi: harden detection of controller [T370671]
  - euler: {CVE-2021-46926} soundwire: intel: filter SoundWire controller device search [T370671]
  - euler: {CVE-2023-52578} net: fix kabi check warning [T370671]
  - euler: {CVE-2023-52578} net: Fix unwanted sign extension in netdev_stats_to_stats64() [T370671]
  - euler: {CVE-2023-52578} net: bridge: use DEV_STATS_INC() [T370671]
  - euler: {CVE-2023-52578} net: add atomic_long_t to net_device_stats fields [T370671]
  - euler: {CVE-2023-52478} HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect [T370671]
  - euler: {CVE-2023-52530} wifi: mac80211: fix potential key use-after-free [T370671]
  - euler: {CVE-2021-47063} drm: bridge/panel: Cleanup connector on bridge detach [T370671]
  - euler: {CVE-2021-47071} uio_hv_generic: Fix a memory leak in error handling paths [T370671]
  - euler: {CVE-2021-47076} RDMA/rxe: Return CQE error if invalid lkey was supplied [T370671]
  - euler: {CVE-2021-47074} nvme-loop: fix memory leak in nvme_loop_create_ctrl() [T370671]
  - euler: {CVE-2021-47074} nvme-loop: don't put ctrl on nvme_init_ctrl error [T370671]
  - euler: {CVE-2021-47078} RDMA/rxe: Clear all QP fields if creation failed [T370671]
  - euler: {CVE-2023-52522} net: fix possible store tearing in neigh_periodic_work() [T370671]
  - euler: {CVE-2021-46933} usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. [T370671]
  - euler: {CVE-2021-46998} ethernet:enic: Fix a use after free bug in enic_hard_start_xmit [T370671]
  - euler: {CVE-2021-46984} kyber: fix kabi broken in ->bio_merge() [T370671]
  - euler: {CVE-2021-46984} kyber: fix out of bounds access when preempted [T370671]
  - euler: {CVE-2023-52504} x86/alternatives: Disable KASAN in apply_alternatives() [T370671]
  - euler: {CVE-2021-47020} soundwire: stream: fix memory leak in stream config error path [T370671]
  - euler: {CVE-2021-47015} bnxt_en: Fix RX consumer index logic in the error path. [T370671]
  - euler: {CVE-2022-48627} vt: fix memory overlapping when deleting chars in the buffer [T370671]
  - euler: {CVE-2021-47013} net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send [T370671]
  - euler: {CVE-2020-36783} i2c: img-scb: fix reference leak when pm_runtime_get_sync fails [T370671]
  - euler: {CVE-2023-52528} net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg [T370671]
  - euler: {CVE-2023-52566} nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() [T370671]
  - euler: {CVE-2021-46935} binder: fix async_free_space accounting for empty parcels [T370671]
  - euler: {CVE-2023-52451} powerpc/64s: Fix crashes when toggling entry flush barrier [T370671]
  - euler: {CVE-2020-36778} i2c: xiic: fix reference leak when pm_runtime_get_sync fails [T370671]
  - euler: {CVE-2021-47077} scsi: qedf: Add pointer checks in qedf_update_link_speed() [T370671]
  - euler: {CVE-2021-47024} vsock/virtio: free queued packets when closing socket [T370671]
  - euler: {CVE-2021-47024} vsock/virtio: discard packets only when socket is really closed [T370671]
  - euler: {CVE-2021-47024} virtio_vsock: Fix race condition in virtio_transport_recv_pkt [T370671]
  - euler: {CVE-2021-47034} powerpc/64s: Fix pte update for kernel memory on radix [T370671]
  - euler: {CVE-2021-46924} NFC: st21nfca: Fix memory leak in device probe and remove [T370671]
  - euler: {CVE-2023-52510} ieee802154: ca8210: Fix a potential UAF in ca8210_probe [T370671]
  - euler: {CVE-2023-52476} perf/x86/lbr: Filter vsyscall addresses [T370671]
  - euler: {CVE-2021-47056} crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init [T370671]
  - euler: {CVE-2021-46934} i2c: validate user data in compat ioctl [T370671]
  - euler: {CVE-2024-26600} phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP [T370671]
  - euler: {CVE-2023-52500} scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command [T370671]
  - euler: {CVE-2021-46909} ARM: footbridge: fix PCI interrupt mapping [T370671]
  - euler: {CVE-2021-46906} HID: usbhid: fix info leak in hid_submit_ctrl [T370671]
  - euler: {CVE-2023-52477} usb: hub: Guard against accesses to uninitialized BOS descriptors [T370671]
  - euler: {CVE-2020-36780} i2c: sprd: fix reference leak when pm_runtime_get_sync fails [T370671]
  - euler: {CVE-2021-47073} platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios [T370671]
  - euler: {CVE-2024-22099} Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security [T370671]
  - euler: {CVE-2020-36777} media: dvbdev: Fix memory leak in dvb_media_device_free() [T370671]
  - euler: {CVE-2021-46932} Input: appletouch - initialize work before device registration [T370671]
  - euler: {CVE-2019-25162} i2c: Fix a potential use after free [T370671]
  - euler: {CVE-2020-36784} i2c: cadence: fix reference leak when pm_runtime_get_sync fails [T370671]
  - euler: {CVE-2021-47006} ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook [T370671]
  - euler: {CVE-2024-1151} net: openvswitch: limit the number of recursions from action sets [T370671]
  - euler: {CVE-2021-46941} usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup [T370671]
  - euler: {CVE-2021-46941} usb: dwc3: core: balance phy init and exit [T370671]
  - euler: {CVE-2021-46941} usb: dwc3: core: Do core softreset when switch mode [T370671]
  - euler: {CVE-2023-52475} Input: powermate - fix use-after-free in powermate_config_complete [T370671]
  - euler: {CVE-2021-46989} hfsplus: prevent corruption in shrinking truncate [T370671]
  - euler: {CVE-2021-47054} bus: qcom: Put child node before return [T370671]
  - euler: {CVE-2021-46955} openvswitch: fix stack OOB read while fragmenting IPv4 packets [T370671]
  - euler: {CVE-2021-47049} Drivers: hv: vmbus: Use after free in __vmbus_open() [T370671]
  - euler: {CVE-2024-26602} sched/membarrier: reduce the ability to hammer on sys_membarrier [T370671]
  - euler: {CVE-2020-36782} i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails [T370671]
  - euler: {CVE-2020-36782} PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter [T370671]
  - euler: {CVE-2021-47040} io_uring: fix overflows checks in provide buffers [T370671]
  - euler: {CVE-2021-46928} parisc: Clear stale IIR value on instruction access rights trap [T370671]
  - euler: {CVE-2023-52451} powerpc/pseries/memhotplug: Quieten some DLPAR operations [T370671]
  - euler: {CVE-2023-52469} drivers/amd/pm: fix a use-after-free in kv_parse_power_table [T370671]
  - euler: {CVE-2024-26606} binder: signal epoll threads of self-work [T370671]
  - euler: {CVE-2024-26598} KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache [T370671]
  - euler: {CVE-2021-46904} net: hso: fix NULL-deref on disconnect regression [T370671]
  - euler: {CVE-2021-46904} net: hso: fix null-ptr-deref during tty device unregistration [T370671]
  - euler: {CVE-2021-46904} usb: hso: check for return value in hso_serial_common_create() [T370671]
  - euler: {CVE-2024-26595} mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path [T370671]
  - euler: {CVE-2024-26586} mlxsw: spectrum_acl_tcam: Fix stack corruption [T370671]
  - euler: {CVE-2023-52435} net: Fix compile warning in skb_segment() [T370671]
  - euler: {CVE-2023-52435} net: prevent mss overflow in skb_segment() [T370671]
  - euler: {CVE-2023-52436} f2fs: explicitly null-terminate the xattr list [T370671]
  - stable: {CVE-2023-52439} uio: Fix use-after-free in uio_open [T370671]
  - stable: {CVE-2023-52443} apparmor: avoid crash when parsed profile name is empty [T370671]
  - stable: {CVE-2023-52444} f2fs: fix to avoid dirent corruption [T370671]
  - stable: {CVE-2023-52445} media: pvrusb2: fix use after free on context disconnection [T370671]
  - stable: {CVE-2023-52449} mtd: Fix gluebi NULL pointer dereference caused by ftl notifier [T370671]
  - stable: {CVE-2023-52451} powerpc/pseries/memhp: Fix access beyond end of drmem array [T370671]
  - stable: {CVE-2023-52464} EDAC/thunderx: Fix possible out-of-bounds string access [T370671]
  - stable: {CVE-2024-26597} net: qualcomm: rmnet: fix global oob in rmnet_policy [T370671]
  - euler: {CVE-2023-52340} ipv6: fix kabi broken in struct dst_ops [T370671]
  - euler: {CVE-2023-52340} ipv6: Document that max_size sysctl is deprecated [T370671]
  - euler: {CVE-2023-52340} ipv6: remove max_size check inline with ipv4 [T370671]
  - euler: net/dst: use a smaller percpu_counter batch for dst entries accounting [T370671]
  - euler: net: add a route cache full diagnostic message [T370671]
  - euler: {CVE-2023-51043} drm/atomic: Fix potential use-after-free in nonblocking commits [T370671]
  - euler: {CVE-2023-6531} io_uring/af_unix: disable sending io_uring over sockets [T370671]
  - euler: {CVE-2024-23849} net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv [T370671]
  - euler: {CVE-2023-51042} drm/amdgpu: Fix potential fence use-after-free v2 [T370671]
  - euler: {CVE-2023-46343} nfc: nci: fix possible NULL pointer dereference in send_acknowledge() [T370671]
  - euler: {CVE-2024-0639} sctp: fix potential deadlock on &net->sctp.addr_wq_lock [T370671]
  - euler: {CVE-2024-0607} netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() [T370671]
  - euler: {CVE-2022-48619} Input: add bounds checking to input_set_capability() [T370671]
  - euler: {CVE-2024-0565} smb: client: fix OOB in receive_encrypted_standard() [T370671]
  - euler: {CVE-2023-6040} netfilter: nf_tables: Reject tables of unsupported family [T370671]
  - euler: {CVE-2024-0340} vhost: use kzalloc() instead of kmalloc() followed by memset() [T370671]
  - euler: {CVE-2023-6121} nvmet: nul-terminate the NQNs passed in the connect command [T370671]
  - euler: {CVE-2023-7192} netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() [T370671]
  - euler: {CVE-2023-51781} appletalk: Fix Use-After-Free in atalk_ioctl [T370671]
  - euler: {CVE-2023-51779} Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg [T370671]
  - euler: {CVE-2023-6610} smb: client: fix potential OOB in smb2_dump_detail() [T370671]
  - euler: {CVE-2023-6606} smb: client: fix OOB in smbCalcSize() [T370671]
  - euler: {CVE-2023-51782} net/rose: Fix Use-After-Free in rose_ioctl [T370671]
  - euler: {CVE-2023-51780} atm: Fix Use-After-Free in do_vcc_ioctl [T370671]
  - euler: {CVE-2023-35827} ravb: Fix races between ravb_tx_timeout_work() and net related ops [T370671]
  - euler: {CVE-2023-35827} ravb: Fix use-after-free issue in ravb_tx_timeout_work() [T370671]
  - euler: {CVE-2023-6564} tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux [T370671]
  - euler: {CVE-2023-6564} tty: n_gsm: fix restart handling via CLD command [T370671]
  - euler: {CVE-2023-6391} perf: Fix perf_event_validate_size() [T370671]
  - euler: {CVE-2023-39197} netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one [T370671]
  - euler: {CVE-2023-29198} drm/qxl: fix UAF on handle creation [T370671]
  - euler: {CVE-2022-45884} media: dvb-core: Fix use-after-free due to race at dvb_register_device() [T370671]
  - euler: {CVE-2022-45884} media: media/dvb: Use kmemdup rather than duplicating its implementation [T370671]
  - euler: {CVE-2022-45884} media: dvbdev: Fix memleak in dvb_register_device [T370671]
  - euler: {CVE-2023-31085} ubi: Refuse attaching if mtd's erasesize is 0 [T370671]
  - euler: {CVE-2022-44033} char: pcmcia: remove all the drivers [T370671]
  - euler: {CVE-2022-44033} tty: ipwireless: move Kconfig entry to tty [T370671]
  - euler: {CVE-2023-5717} perf: Fix kabi breakage in struct perf_event [T370671]
  - euler: {CVE-2023-5717} perf: Disallow mis-matched inherited group reads [T370671]
  - euler: {CVE-2023-31083} Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO [T370671]
  - euler: {CVE-2023-34324} xen/events: replace evtchn_rwlock with RCU [T370671]
  - euler: {CVE-2023-45871} igb: set max size RX buffer when store bad packet is enabled [T370671]
  - euler: {CVE-2023-39192} netfilter: xt_u32: validate user space input [T370671]
  - euler: {CVE-2023-45862} USB: ene_usb6250: Allocate enough memory for full object [T370671]
  - euler: netfilter: xt_sctp: validate the flag_info count [T370671]
  - euler: netfilter: nfnetlink_osf: avoid OOB read [T370671]
  - euler: {CVE-2023-42754} ipv4: fix null-deref in ipv4_link_failure [T370671]
  - euler: {CVE-2023-42755} net/sched: Retire rsvp classifier [T370671]
  - euler: {CVE-2023-42753} netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c [T370671]
  - euler: {CVE-2020-36766} cec-api: prevent leaking memory through hole in structure [T370671]
  - euler: {CVE-2022-45887} media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() [T370671]
  - euler: {CVE-2023-4921} net: sched: sch_qfq: Fix UAF in qfq_dequeue() [T370671]
  - euler: {CVE-2023-4881} netfilter: nftables: exthdr: fix 4-byte stack OOB write [T370671]
  - euler: {CVE-2023-21400} io_uring: ensure IOPOLL locks around deferred work [T370671]
  - euler: {CVE-2023-20588} x86/CPU/AMD: Fix the DIV(0) initial fix attempt [T370671]
  - euler: {CVE-2023-20588} x86/CPU/AMD: Do not leak quotient data after a division by 0 [T370671]
  - euler: {CVE-2023-4623} net/sched: sch_hfsc: Ensure inner classes have fsc curve [T370671]
  - euler: {CVE-2023-4622} af_unix: Fix null-ptr-deref in unix_stream_sendpage(). [T370671]
  - euler: {CVE-2022-40982} x86: Move gds_ucode_mitigated() declaration to header [T370671]
  - euler: {CVE-2022-40982} KVM: Add GDS_NO support to KVM [T370671]
  - stable: {CVE-2022-45919} media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 [T370671]
  - euler: {CVE-2023-4385} fs: jfs: fix possible NULL pointer dereference in dbFree() [T370671]
  - euler: {CVE-2023-4459} net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() [T370671]
  - euler: {CVE-2023-1206} tcp: Reduce chance of collisions in inet6_hashfn(). [T370671]
  - euler: {CVE-2023-40283} Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb [T370671]
  - euler: {CVE-2023-4387} net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() [T370671]
  - euler: {CVE-2023-4194} net: tap_open(): set sk_uid from current_fsuid() [T370671]
  - tap: tap_open(): correctly initialize socket uid [T370671]
  - euler: {CVE-2023-4194} net: tun_chr_open(): set sk_uid from current_fsuid() [T370671]
  - tun: tun_chr_open(): correctly initialize socket uid [T370671]
  - euler: {CVE-2023-4128} net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free [T370671]
  - euler: {CVE-2023-4128} net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free [T370671]
  - euler: {CVE-2023-4128} net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free [T370671]
  - euler: {CVE-2023-3772} xfrm: add NULL check in xfrm_update_ae_params [T370671]
  - euler: {CVE-2023-4132} media: usb: siano: Fix warning due to null work_func_t function pointer [T370671]
  - euler: {CVE-2023-4132} media: usb: siano: Fix use after free bugs caused by do_submit_urb [T370671]
  - euler: {CVE-2023-3863} net: nfc: Fix use-after-free caused by nfc_llcp_find_local [T370671]
  - euler: {CVE-2023-3863} nfc: llcp: simplify llcp_sock_connect() error paths [T370671]
  - euler: {CVE-2023-3863} nfc: llcp: nullify llcp_sock->dev on connect() error paths [T370671]
  - euler: {CVE-2023-3863} nfc: Fix to check for kmemdup failure [T370671]
  - euler: {CVE-2023-3776} net/sched: cls_fw: Fix improper refcount update leads to use-after-free [T370671]
  - euler: {CVE-2023-3611} net/sched: sch_qfq: account for stab overhead in qfq_enqueue [T370671]
  - euler: {CVE-2022-45886} media: dvb-core: Fix use-after-free due on race condition at dvb_net [T370671]
  - euler: {CVE-2023-35001} netfilter: nf_tables: prevent OOB access in nft_byteorder_eval [T370671]
  - euler: {CVE-2023-3117} netfilter: nf_tables: unbind non-anonymous set if rule construction fails [T370671]
  - euler: {CVE-2023-3117} netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain [T370671]
  - euler: {CVE-2023-3117} netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE [T370671]
  - stable: {CVE-2023-20539} X86/cpu/amd: Add a Zenbleed fix [T370671]
  - io_uring: get rid of intermediate IORING_OP_CLOSE stage [T370671]
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb [T370671]
  - drm/msm/dpu: Add check for pstates [T370671]
  - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition [T370671]
  - HID: intel_ish-hid: Add check for ishtp_dma_tx_map [T370671]
  - media: saa7134: fix use after free bug in saa7134_finidev due to race condition [T370671]
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition [T370671]
  - relayfs: fix out-of-bounds access in relay_file_read [T370671]
  - kernel/relay.c: fix read_pos error when multiple readers [T370671]
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() [T370671]
  - memstick: r592: Fix UAF bug in r592_remove due to race condition [T370671]
  - fbcon: Check font dimension limits [T370671]
  - firewire: fix potential uaf in outbound_phy_packet_callback() [T370671]
  - arm64: Add AMPERE1 to the Spectre-BHB affected list [T370671]
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() [T370671]
  - fs: hfsplus: fix UAF issue in hfsplus_put_super [T370671]
  - ipv6: sr: fix out-of-bounds read when setting HMAC data. [T370671]
  - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition [T370671]
  - drm: Lock pointer access in drm_master_release() [T370671]
  - drm: Fix use-after-free read in drm_getunique() [T370671]
  - xfs: verify buffer contents when we skip log replay [T370671]
  - bluetooth: Perform careful capability checks in hci_sock_ioctl() [T370671]
  - netrom: Fix use-after-free caused by accept on already connected socket [T370671]
  - uos: update 1050u2 spec [T00000]
  - uos: add srpm source for lts-1050u2 [T00000]
  - uos: modify the bitmap size () function ALIGN macro to PERF_LIGN to solve the issue of perf compilation errors [G006855]
  - stable: {CVE-2024-46813} drm/amd/display: Check link_index before accessing dc->links[] [G006855]
  - stable: {CVE-2024-45025} bitmap: introduce generic optimized bitmap_size() [G006855]
  - stable: {CVE-2024-46832} MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed [G006855]
  - stable: {CVE-2024-46809} drm/amd/display: Check BIOS images before it is used [G006855]
  - stable: {CVE-2024-46722} drm/amdgpu: fix mc_data out-of-bounds read warning [G006855]
  - stable: {CVE-2024-46743} of/irq: Prevent device address out-of-bounds read in interrupt map walk [G006855]
  - stable: {CVE-2024-46724} drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number [G006855]
  - stable: {CVE-2024-46761} pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv [G006855]
  - stable: {CVE-2024-46800} sch/netem: fix use after free in netem_dequeue [G006855]
  - stable: {CVE-2024-46756} hwmon: (w83627ehf) Fix underflows seen when writing limit attributes [G006855]
  - stable: {CVE-2024-46723} drm/amdgpu: fix ucode out-of-bounds read warning [G006855]
  - stable: {CVE-2024-46677} gtp: fix a potential NULL pointer dereference [G006855]
  - stable: {CVE-2024-46673} scsi: aacraid: Fix double-free on probe failure [G006855]
  - stable: {CVE-2024-45025} fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE [G006855]
  - stable: {CVE-2024-45021} memcg_write_event_control(): fix a user-triggerable oops [G006855]
  - stable: {CVE-2024-45028} mmc: mmc_test: Fix NULL dereference on allocation failure [G006855]
  - stable: {CVE-2024-46721} apparmor: fix possible NULL pointer dereference [G006855]
  - stable: {CVE-2024-46739} uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind [G006855]
  - stable: {CVE-2024-46695} selinux,smack: don't bypass permissions check in inode_setsecctx hook [G006855]
  - stable: {CVE-2024-46685} pinctrl: single: fix potential NULL dereference in pcs_get_function() [G006855]
  - uos: Revert "uos: Linux verison banner : 4.19.0-arm64-server [T367737]" [G006855]
  - uos: add debian files [T367737]
  - uos: (CVE-2023-32233):netfilter: nf_tables: deactivate anonymous set from preparation phase [T367737]
  - uos: UOS: modify the loop configs same as the serverd [T367737]
  - uos: Linux verison banner : 4.19.0-arm64-server [T367737]
  - uos: add make bindeb-pkg version aligned with x86-arch [T367737]
  - uos: remove deb version with + [T367737]


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2211.5.0.0178.29
changelog:
  - Merge "uos: open CONFIG_MOTORCOMM_PHY for x86 [G2025012200008]" into lts-1050u2
  - Merge "uos: net: update Motorcomm Phy driver to 2.2.26536 [G2025012200008]" into lts-1050u2
  - uos: open CONFIG_MOTORCOMM_PHY for x86 [G2025012200008]
  - Merge "euler: {CVE-2024-56777} drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check [T371989]" into lts-1050u2
  - euler: {CVE-2024-56777} drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check [T371989]
  - mainline: {CVE-2024-57896} btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount [G2025021000010]
  - mainline: btrfs: wait for fixup workers before stopping cleaner kthread during umount [G2025021000010]
  - mainline: {CVE-2024-57900} ila: serialize calls to nf_register_net_hooks() [G2025021000010]
  - mainline: {CVE-2024-56658} net: defer final 'struct net' free in netns dismantle [G2025012400012]
  - mainline: {CVE-2024-56614} xsk: fix OOB map writes when deleting elements [G2025012400012]
  - uos: net: update Motorcomm Phy driver to 2.2.26536 [G2025012200008]
  - euler: {CVE-2024-57892} ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv [T371989]
  - euler: {CVE-2024-57892} ocfs2: correct return value of ocfs2_local_free_info() [T371989]
  - euler: {CVE-2024-56631} scsi: sg: Fix slab-use-after-free read in sg_release() [T371989]
  - euler: {CVE-2024-56615} bpf: fix OOB devmap writes when deleting elements [T371989]
  - euler: {CVE-2024-53150} ALSA: usb-audio: Fix out of bounds reads when finding clock sources [T371989]
  - euler: {CVE-2024-56662} acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl [T371989]
  - euler: {CVE-2024-56603} net: af_can: do not leave a dangling sk pointer in can_create() [T371989]
  - euler: {CVE-2024-56642} tipc: fix NULL deref in cleanup_bearer() [T371989]
  - euler: {CVE-2024-56642} tipc: Fix use-after-free of kernel socket in cleanup_bearer(). [T371989]
  - euler: {CVE-2024-56642} tipc: remove ub->ubsock checks [T371989]
  - euler: {CVE-2024-56739} rtc: check if __rtc_read_time was successful in rtc_timer_do_work() [T371989]
  - euler: {CVE-2024-53157} firmware: arm_scpi: Check the DVFS OPP count returned by the firmware [T371989]
  - euler: {CVE-2024-53155} ocfs2: fix uninitialized value in ocfs2_file_read_iter() [T371989]
  - euler: {CVE-2024-56570} ovl: Filter invalid inodes with missing lookup function [T371989]
  - euler: {CVE-2024-56619} nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() [T371989]
  - mainline: nfsd: Fix races between nfsd4_cb_release() and nfsd4_shutdown_callback() [G2025010700006]
  - mainline: nfsd: minor 4.1 callback cleanup [G2025010700006]
  - uos: update srpm to 4.19.90-2211.5.0.0178.28 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2211.5.0.0178.30
changelog:
  - uos: Revert "stable: {CVE-2021-47472} Revert "mdio_bus: Fix use-after-free on device_register fails"" [T371989]
  - mainline: {CVE-2024-56659} net: lapb: increase LAPB_HEADER_LEN [G2025021900016]
  - euler: {CVE-2024-56551} drm/amdgpu: fix usage slab after free [T371989]
  - euler: {CVE-2025-21648} netfilter: conntrack: clamp maximum hashtable size to INT_MAX [T371989]
  - euler: {CVE-2024-56650} netfilter: x_tables: fix LED ID check in led_tg_check() [T371989]
  - euler: {CVE-2024-57887} drm: adv7511: Fix use-after-free in adv7533_attach_dsi() [T371989]
  - euler: {CVE-2024-50051} spi: mpc52xx: Add cancel_work_sync before module remove [T371989]
  - euler: {CVE-2024-56605} Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc [T371989]
  - euler: {CVE-2024-56605} Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() [T371989]
  - euler: {CVE-2024-53227} scsi: bfa: Fix use-after-free in bfad_im_module_exit() [T371989]
  - euler: {CVE-2024-57893} ALSA: seq: oss: Fix races at processing SysEx messages [T371989]
  - euler: {CVE-2024-56604} Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() [T371989]
  - euler: {CVE-2024-56604} Bluetooth: Consolidate code around sk_alloc into a helper function [T371989]
  - euler: {CVE-2024-26689} ceph: prevent use-after-free in encode_cap_msg() [T371989]
  - Merge "uos: {CVE-2022-48695} fix cve error [T372895]" into lts-1050u2
  - uos: {CVE-2022-48695} fix cve error [T372895]
  - euler: sched/rt: Disable RT_RUNTIME_SHARE by default [G2024122600015]
  - uos: update srpm to 4.19.90-2211.5.0.0178.29 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2211.5.0.0178.31
changelog:
  - stable: {CVE-2025-21682} eth: bnxt: always recalculate features after XDP clearing, fix null-deref [G2025031100011]
  - euler: {CVE-2022-49375} rtc: mt6397: check return value after calling platform_get_resource() [T371989]
  - euler: {CVE-2022-49331} nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling [T371989]
  - euler: {CVE-2022-49315} drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() [T371989]
  - euler: {CVE-2022-49414} ext4: fix race condition between ext4_write and ext4_convert_inline_data [T371989]
  - euler: {CVE-2022-49248} ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction [T371989]
  - euler: {CVE-2021-47634} ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl [T371989]
  - euler: {CVE-2022-49381} jffs2: fix memory leak in jffs2_do_fill_super [T371989]
  - euler: {CVE-2022-49277} jffs2: fix memory leak in jffs2_do_mount_fs [T371989]
  - euler: {CVE-2022-49276} jffs2: fix memory leak in jffs2_scan_medium [T371989]
  - euler: {CVE-2021-47656} jffs2: fix use-after-free in jffs2_clear_xattr_subsystem [T371989]
  - euler: {CVE-2022-49489} drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume [T371989]
  - euler: {CVE-2022-49324} mips: cpc: Fix refcount leak in mips_cpc_default_phys_base [T371989]
  - euler: {CVE-2022-49514} ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe [T371989]
  - euler: {CVE-2022-49514} ASoC: mediatek: mt8173: fix device_node leak [T371989]
  - euler: {CVE-2022-49052} mm: fix unexpected zeroed page mapping with zram swap [T371989]
  - euler: {CVE-2022-49527} media: venus: hfi: avoid null dereference in deinit [T371989]
  - euler: {CVE-2022-49488} drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected [T371989]
  - euler: {CVE-2022-49581} be2net: Fix buffer overflow in be_get_module_eeprom [T371989]
  - euler: {CVE-2022-49625} sfc: fix kernel panic when creating VF [T371989]
  - euler: {CVE-2025-21791} vrf: use RCU protection in l3mdev_l3_out() [T371989]
  - euler: {CVE-2022-49725} i40e: Fix call trace in setup_tx_descriptors [T371989]
  - euler: {CVE-2022-49729} nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred [T371989]
  - euler: {CVE-2022-49155} scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() [T371989]
  - euler: {CVE-2022-49087} rxrpc: Restore removed timer deletion [T371989]
  - euler: {CVE-2022-49087} rxrpc: fix a race in rxrpc_exit_net() [T371989]
  - euler: {CVE-2022-49513} cpufreq: governor: Use kobject release() method to free dbs_data [T371989]
  - euler: cpufreq: Move to_gov_attr_set() to cpufreq.h [T371989]
  - euler: {CVE-2022-49648} tracing/histograms: Fix memory leak problem [T371989]
  - euler: {CVE-2024-56548} hfsplus: don't query the device logical block size multiple times [T371989]
  - euler: {CVE-2022-49137} drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj [T371989]
  - euler: {CVE-2022-49433} RDMA/hfi1: Prevent use of lock before it is initialized [T371989]
  - euler: {CVE-2022-49439} powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup [T371989]
  - euler: {CVE-2022-49447} ARM: hisi: Add missing of_node_put after of_find_compatible_node [T371989]
  - euler: {CVE-2022-49564} crypto: qat - add param check for DH [T371989]
  - euler: {CVE-2022-49685} iio: trigger: sysfs: fix use-after-free on remove [T371989]
  - euler: {CVE-2022-49661} can: gs_usb: gs_usb_open/close(): fix memory leak [T371989]
  - euler: {CVE-2022-49682} xtensa: Fix refcount leak bug in time.c [T371989]
  - euler: {CVE-2022-49608} pinctrl: ralink: Check for null return of devm_kcalloc [T371989]
  - euler: {CVE-2022-49526} md/bitmap: don't set sb values if can't pass sanity check [T371989]
  - euler: {CVE-2022-49055} drm/amdkfd: Check for potential null return of kmalloc_array() [T371989]
  - euler: {CVE-2022-49326} rtl818x: Prevent using not initialized queues [T371989]
  - euler: {CVE-2022-49044} dm integrity: fix memory corruption when tag_size is less than digest size [T371989]
  - euler: {CVE-2021-47642} video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow [T371989]
  - euler: {CVE-2022-49544} ipw2x00: Fix potential NULL dereference in libipw_xmit() [T371989]
  - euler: {CVE-2022-49532} drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes [T371989]
  - euler: {CVE-2022-49620} net: tipc: fix possible refcount leak in tipc_sk_create() [T371989]
  - euler: {CVE-2025-21702} pfifo_tail_enqueue: Drop new packet when sch->limit == 0 [T371989]
  - euler: {CVE-2025-21702} net_sched: sch_fifo: implement lockless __fifo_dump() [T371989]
  - euler: {CVE-2025-21700} net: sched: Disallow replacing of child qdisc from one parent to another [T371989]
  - euler: {CVE-2022-49253} media: usb: go7007: s2250-board: fix leak in probe() [T371989]
  - euler: {CVE-2022-49308} extcon: Modify extcon device to be created after driver data is set [T371989]
  - euler: {CVE-2022-49308} extcon: Fix error handling in extcon_dev_register [T371989]
  - euler: {CVE-2022-49351} net: altera: Fix refcount leak in altera_tse_mdio_create [T371989]
  - euler: {CVE-2022-49091} drm/imx: Fix memory leak in imx_pd_connector_get_modes [T371989]
  - euler: {CVE-2021-47652} video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() [T371989]
  - euler: {CVE-2024-56606} af_packet: avoid erroring out after sock_init_data() in packet_create() [T371989]
  - euler: {CVE-2022-49341} bpf, arm64: Clear prog->jited_len along prog->jited [T371989]
  - euler: {CVE-2022-49404} RDMA/hfi1: Fix potential integer multiplication overflow errors [T371989]
  - euler: {CVE-2022-49114} scsi: libfc: Fix use after free in fc_exch_abts_resp() [T371989]
  - euler: {CVE-2021-47631} ARM: davinci: da850-evm: Avoid NULL pointer dereference [T371989]
  - euler: {CVE-2022-49394} blk-iolatency: Fix inflight count imbalances and IO hangs on offline [T371989]
  - euler: {CVE-2022-49073} ata: sata_dwc_460ex: Fix crash due to OOB write [T371989]
  - euler: {CVE-2024-54680} smb: client: Fix netns refcount imbalance causing leaks and use-after-free [T371989]
  - euler: {CVE-2024-54680} smb: client: fix TCP timers deadlock after rmmod [T371989]
  - euler: {CVE-2023-52572} cifs: Fix UAF in cifs_demultiplex_thread() [T371989]
  - stable: {CVE-2024-53156} wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() [T371989]
  - stable: {CVE-2024-50269} usb: musb: sunxi: Fix accessing an released usb phy [T371989]
  - stable: {CVE-2024-46782} ila: call nf_unregister_net_hooks() sooner [T371989]
  - stable: {CVE-2024-44998} atm: idt77252: prevent use after free in dequeue_rx() [T371989]
  - stable: {CVE-2024-27405} usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs [T371989]
  - stable: usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call [T371989]
  - stable: USB: gadget: f_ncm: Fix NDP16 datagram validation [T371989]
  - stable: USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() [T371989]
  - stable: {CVE-2023-52885} SUNRPC: Fix UAF in svc_tcp_listen_data_ready() [T371989]
  - stable: {CVE-2023-52679} of: Fix double free in of_parse_phandle_with_args_map [T371989]
  - stable: {CVE-2022-49015} net: hsr: Fix potential use-after-free [T371989]
  - stable: {CVE-2023-52922} can: bcm: Fix UAF in bcm_proc_show() [T371989]
  - stable: {CVE-2021-47082} tun: avoid double free in tun_free_netdev [T371989]
  - stable: {CVE-2022-48956} ipv6: avoid use-after-free in ip6_fragment() [T371989]
  - stable: {CVE-2022-48988} memcg: fix possible use-after-free in memcg_write_event_control() [T371989]
  - stable: {CVE-2022-48991} mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths [T371989]
  - stable: {CVE-2022-49014} net: tun: Fix use-after-free in tun_detach() [T371989]
  - uos: update srpm to 4.19.90-2211.5.0.0178.30 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2211.5.0.0178.32
changelog:
  - Revert "mainline: {CVE-2025-21844} smb: client: Add check for next_buffer in receive_encrypted_standard() [G2025040700014]"
  - Merge changes from topic "cve-lts-1050e-20250417" into lts-1050u2
  - Merge "mainline: {CVE-2025-21848} nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() [G2025040700014]" into lts-1050u2
  - Merge "mainline: {CVE-2025-21844} smb: client: Add check for next_buffer in receive_encrypted_standard() [G2025040700014]" into lts-1050u2
  - Merge "mainline: {CVE-2025-21858} geneve: Fix use-after-free in geneve_find_dev() [G2025040700014]" into lts-1050u2
  - uos: fix kabi broken in struct css_set
  - mainline: {CVE-2022-49085} drbd: Fix five use after free bugs in get_initial_state
  - mainline: {CVE-2022-49626} sfc: fix use after free when disabling sriov
  - mainline: sfc: error code if SRIOV cannot be disabled
  - mainline: sfc: avoid double pci_remove of VFs
  - mainline: {CVE-2021-47165} drm/meson: fix shutdown crash when component not probed
  - mainline: drm/meson: fix shutdown crash when component not probed
  - mainline: {CVE-2022-49639} cipso: Fix data-races around sysctl.
  - mainline: {CVE-2022-49652} dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate
  - mainline: {CVE-2021-47637} ubifs: Fix deadlock in concurrent rename whiteout and inode writeback
  - mainline: {CVE-2022-49059} nfc: nci: add flush_workqueue to prevent uaf
  - mainline: {CVE-2022-49416} wifi: mac80211: fix use-after-free in chanctx code
  - mainline: {CVE-2022-49451} firmware: arm_scmi: Fix list protocols enumeration in the base protocol
  - mainline: {CVE-2022-49482} ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
  - mainline: {CVE-2022-49491} drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
  - mainline: {CVE-2022-49495} drm/msm/hdmi: check return value after calling platform_get_resource_byname()
  - mainline: {CVE-2022-49755} usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
  - mainline: {CVE-2021-47636} ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()
  - mainline: {CVE-2022-49185} pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
  - mainline: {CVE-2022-49216} drm/tegra: Fix reference leak in tegra_dsi_ganged_probe
  - mainline: {CVE-2022-49224} power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init
  - mainline: {CVE-2022-49232} drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()
  - mainline: {CVE-2022-49235} ath9k_htc: fix uninit value bugs
  - mainline: {CVE-2022-49242} ASoC: mxs: Fix error handling in mxs_sgtl5000_probe
  - mainline: {CVE-2022-49388} ubi: ubi_create_volume: Fix use-after-free when volume creation failed
  - mainline: {CVE-2022-49438} Input: sparcspkr - fix refcount leak in bbc_beep_probe
  - mainline: {CVE-2022-49441} tty: fix deadlock caused by calling printk() under tty_port->lock
  - mainline: {CVE-2022-49450} rxrpc: Fix listen() setting the bar too high for the prealloc rings
  - mainline: {CVE-2022-49467} drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
  - mainline: {CVE-2022-49478} media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
  - mainline: {CVE-2022-49481} regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
  - mainline: {CVE-2022-49517} ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
  - mainline: {CVE-2022-49609} power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe
  - mainline: {CVE-2022-49647} cgroup: Use separate src/dst nodes when preloading css_sets for migration
  - mainline {CVE-2022-49649} xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue
  - mainline: {CVE-2022-49656} ARM: meson: Fix refcount leak in meson_smp_prepare_cpus
  - mainline: {CVE-2022-49667} net: bonding: fix use-after-free after 802.3ad slave unbind
  - mainline: {CVE-2022-49679} ARM: Fix refcount leak in axxia_boot_secondary
  - mainline: {CVE-2022-49680} ARM: exynos: Fix refcount leak in exynos_map_pmu
  - mainline: {CVE-2022-49712} usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe
  - mainline: {CVE-2022-49753} dmaengine: Fix double increment of client_count in dma_chan_get()
  - mainline: {CVE-2023-53023} net: nfc: Fix use-after-free in local_cleanup()
  - mainline: {CVE-2024-57798} drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() [G2025041000012]
  - newfeature: Crypto: ccp: Optimize the exchanging context data between crypto and driver.
  - mainline: {CVE-2025-21844} smb: client: Add check for next_buffer in receive_encrypted_standard() [G2025040700014]
  - mainline: {CVE-2025-21848} nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() [G2025040700014]
  - mainline: {CVE-2025-21858} geneve: Fix use-after-free in geneve_find_dev() [G2025040700014]
  - uos: crypto: Fix kernel crash caused by null pointer [G2025040700001]
  - newfeature: crypto: CCP: Userspace can exchange context data including iv, etc with kernel space.
  - uos: add linux version for x86 of version d [T00000]
  - Merge "uos: add linux version source for version d [T00000]" into lts-1050u2
  - Merge "uos: update srpm to 4.19.90-2211.5.0.0178.31 [T00000]" into lts-1050u2
  - Merge "uos: change CONFIG_BLK_DEV_DM/MD value [G2025031100004]" into lts-1050u2
  - uos: change CONFIG_BLK_DEV_DM/MD value [G2025031100004]
  - uos: add linux version source for version d [T00000]
  - uos: update srpm to 4.19.90-2211.5.0.0178.31 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2211.5.0.0178.33
changelog:
  - mainline: {CVE-2021-47668} can: dev: can_restart: fix use after free bug
  - euler: can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on()
  - euler: can: dev: can_restart(): don't crash kernel if carrier is OK
  - euler: can: dev: move driver related infrastructure into separate subdir
  - mainline: {CVE-2021-47669} can: vxcan: vxcan_xmit: fix use after free bug
  - mainline: {CVE-2021-47670} can: peak_usb: fix use after free bugs
  - mainline: can: peak_usb: add range checking in decode operations
  - mainline: {CVE-2022-49275} can: m_can: m_can_tx_handler(): fix use after free of skb
  - mainline: can: m_can: Disable and ignore ELO interrupt
  - mainline: can: m_can: m_can_do_rx_poll(): fix extraneous msg loss warning
  - mainline: can: m_can: fix nominal bitiming tseg2 min for version >= 3.1
  - mainline: can: m_can: m_can_handle_state_change(): fix state change
  - mainline: {CVE-2022-49508} HID: elan: Fix potential double free in elan_input_configured
  - mainline: HID: elan: Fix memleak in elan_input_configured
  - Merge changes I5f6685b0,I62907a6d into lts-1050u2
  - Merge changes Icaee4dab,I985bd41a,I2b80abdb,I461dbfb0 into lts-1050u2
  - mainline: {CVE-2022-49921} net: sched: Fix use after free in red_enqueue()
  - mainline: {CVE-2022-49846} udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
  - mainline: {CVE-2022-49842} ASoC: core: Fix use-after-free in snd_soc_exit()
  - mainline: {CVE-2023-53139} nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties
  - mainline: ipv4: get rid of fib_info_hash_{alloc|free} [G2025042400029]
  - uos: update srpm to 4.19.90-2211.5.0.0178.32 [T00000]
  - mainline: xfs: use iomap_valid method to detect stale cached iomaps [G2025022600028]
  - mainline: iomap: write iomap validity checks [G2025022600028]


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2211.5.0.0178.34
changelog:
  - mainline: {CVE-2022-49839} scsi: scsi_transport_sas: Fix error handling in sas_phy_add() [G2025060500017]
  - mainline: scsi: drivers: base: Propagate errors through the transport component [G2025060500017]
  - mainline: scsi: drivers: base: Support atomic version of attribute_container_device_trigger [G2025060500017]
  - mainline: {CVE-2020-36789} can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context
  - mainline: {CVE-2022-49677} ARM: cns3xxx: Fix refcount leak in cns3xxx_init
  - mainline: {CVE-2022-49850} nilfs2: fix deadlock in nilfs_count_free_blocks()
  - mainline: nilfs2: use refcount_dec_and_lock() to fix potential UAF
  - mainline: {CVE-2022-49861} dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()
  - mainline: dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  - mainline: {CVE-2022-49862} tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header
  - mainline: tipc: convert dest node's address to network order
  - mainline: {CVE-2022-49871} net: tun: Fix memory leaks of napi_get_frags
  - mainline: {CVE-2022-49874} HID: hyperv: fix possible memory leak in mousevsc_probe()
  - mainline: {CVE-2022-49881} wifi: cfg80211: fix memory leak in query_regdb_file()
  - mainline: cfg80211: set custom regdomain after wiphy registration
  - mainline: cfg80211: regulatory: Fix inconsistent format argument
  - mainline: cfg80211: regulatory: reject invalid hints
  - mainline: cfg80211: check reg_rule for NULL in handle_channel_custom()
  - mainline: cfg80211: Fix radar event during another phy CAC
  - mainline: wireless: fix enabling channel 12 for custom regulatory domain
  - mainline: cfg80211: regulatory: make initialization more robust
  - mainline: {CVE-2022-49915} mISDN: fix possible memory leak in mISDN_register_device()
  - mainline: mISDN: change function names to avoid conflicts
  - mainline: {CVE-2022-49926} net: dsa: Fix possible memory leaks in dsa_loop_init()
  - mainline: net: dsa: loop: Add module soft dependency
  - mainline: {CVE-2022-49922} nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() [G2025060500017]
  - uos: fix nf_table crash [G2025052200027]
  - uos: update srpm to 4.19.90-2211.5.0.0178.33 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2211.5.0.0178.35
changelog:
  - Revert "mainline: {CVE-2022-49667} net: bonding: fix use-after-free after 802.3ad slave unbind" [G2025060900006]
  - uos: update srpm to 4.19.90-2211.5.0.0178.34 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2211.5.0.0178.36
changelog:
  - Merge "uos: fix "mainline: {CVE-2022-49679} ARM: Fix refcount leak in axxia_boot_secondary"" into lts-1050u2
  - Merge "uos: fix "mainline: {CVE-2021-47165} drm/meson: fix shutdown crash when component not probed"" into lts-1050u2
  - Merge "uos: fix "mainline: {CVE-2022-49482} ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe"" into lts-1050u2
  - uos: fix "mainline: {CVE-2022-49482} ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe"
  - uos: fix "mainline: {CVE-2021-47165} drm/meson: fix shutdown crash when component not probed"
  - uos: fix "mainline: {CVE-2022-49679} ARM: Fix refcount leak in axxia_boot_secondary"
  - uos: fix "mainline: {CVE-2022-49755} usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait"
  - uos: update srpm to 4.19.90-2211.5.0.0178.35 [T00000]


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2212.4.0.0183.31
changelog:
  - fix build error for 6a97042
  - config: add CONFIG_SELINUX_SID2 to debug configs
  - Add Hygon CCP driver
  - CIFS: Add direct I/O functions to file_operations
  - CIFS: Add support for direct I/O write
  - CIFS: Add support for direct I/O read


author: jiazhenyuan <jiazhenyuan@uniontech.com> - 4.19.90-2212.4.0.0183.32
changelog:
  - Replace socket_socketcreate_seaudit_sid
  - Merge changes I91752461,I7a3d5c47 into uos_release
  - fix elfverify no response when reboot
  - add elfverify register:systemd
  - Revert "UOS: fix update drm qxl version to kernel v5.1"
  - fix kabi change problem
  - fix:kernel compilation failure caused by undefined socket_sockcreate_saudit_sid


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2301.2.0.0183.34
changelog:
  - timekeeping: Avoiding false sharing in field access of tk_core
  - mm/hwpoison: put page in already hwpoisoned case with MF_COUNT_INCREASED
  - mm/memory-failure.c: fix race with changing page more robustly
  - mm,memory_failure: always pin the page in madvise_inject_error
  - kobject: Fix slab-out-of-bounds in fill_kobj_path()
  - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access()
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
  - mm/sharepool: Charge Buddy hugepage to memcg
  - UOS: net: update ice drvier from 1.6.7 to 1.9.11
  - UOS: config: add config CONFIG_DEBUG_INFO_BTF
  - Add Zhaoxin hw rng driver


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2301.5.0.0184.38
changelog:
  - USB: Fix kABI for usb_device->reset_in_progress
  - rndis_wlan: Prevent buffer overflow in rndis_query_oid
  - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
  - ima: Directly assign the ima_default_policy pointer to ima_rules
  - driver core: Don't probe devices after bus_type.match() probe deferral
  - KEYS: trusted: Fix migratable=1 failing
  - certs: Fix blacklist flag type confusion
  - crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  - ipc/sem: Fix dangling sem_array access in semtimedop race
  - ipv6: avoid use-after-free in ip6_fragment()
  - nvme initialize core quirks before calling nvme_init_subsystem
  - memcg: fix possible use-after-free in memcg_write_event_control()
  - x86/ioremap: Fix page aligned size calculation in __ioremap_caller()
  - nvme: restrict management ioctls to admin
  - arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72
  - arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors
  - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
  - net: tun: Fix use-after-free in tun_detach()
  - of: property: decrement node refcount in of_fwnode_get_reference_args()
  - af_key: Fix send_acquire race with pfkey_register
  - audit: fix undefined behavior in bit shift for AUDIT_BIT
  - USB: core: Fix RST error in hub.c
  - USB: core: Prevent nested device-reset calls
  - ima: Do not print policy rule with inactive LSM labels
  - lsm: Resolve KABI changes on lsm_notifier
  - ima: Evaluate error in init_ima()
  - ima: ima/lsm policy rule loading logic bug fixes
  - ima: Handle -ESTALE returned by ima_filter_rule_match()
  - ima: use the lsm policy update notifier
  - LSM: switch to blocking policy update notifiers
  - mm/hwpoison: do not lock page again when me_huge_page() successfully recovers
  - arm64: Kconfig: default unset ARCH_LLC_128_LINE_SIZE
  - mm/sharepool: clean up ABI breakage
  - Set zhaoxin crypto driver =m
  - Driver for Zhaoxin GMI SM4 Secure Hash algorithm
  - Driver for Zhaoxin GMI SM3 Secure Hash algorithm
  - Add Zhaoxin ACE driver
  - UOS: Fix the error caused by Hygon patch merging
  - bugfix: crypto: ccp: fix multiple repeat insmod rmmod ccp.ko system a probabilistic crash occurs mem alloc by devm_kzalloc func should not uses kfree to release, it will automatic free when drive rmmod
  - bugfix: crypto: ccp: Fix bug that access psp_mutex_enabled has a race condition
  - Add supoort for API HGSC_CERT_IMPORT
  - Support dynamic protection for SCT and IDT by HYGON TDM.
  - Compile the tdm driver into ccp.ko
  - Format TDM driver code to conform to kernel code standards
  - opensource: crypto: ccp - Fix SEV_VERSION_GREATER_OR_EQUAL
  - opensource: crypto: ccp - introduce SEV_GET_ID2 command
  - opensource: crypto: ccp - Allow SEV firmware to be chosen based on Family and Model
  - newfeature: KVM: x86: Support VM_ATTESTATION hypercall
  - opensource: KVM/SVM: add support for SEV attestation command
  - bugfix: crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
  - bugfix: crypto: ccp: Only handle interrupts by completion, eliminating by empty queue.
  - bugfix: crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
  - newfeature: Crypto: ccp: Optimize the exchanging context data between crypto and driver.
  - newfeature: crypto: CCP: Userspace can exchange context data including iv, etc with kernel space.
  - UOS: algif: Fix comments for variable op
  - newfeature: crypto: ccp: Add psp mutex enable ioctl support
  - newfeature: crypto: ccp: concurrent psp access support between user and kernel space
  - newfeature: tpm: add sm3 support in tpm2_pcr_read.
  - newfeature: alinux: tpm: add Hygon TPM2 driver
  - newfeature: crypto: tdm: Add Hygon TDM driver
  - newfeature: crypto: ccp: Add another mailbox interrupt support for PSP sending command to X86
  - newfeature: crypto: ccp: Add a new interface for X86 sending command to PSP
  - newfeature: x86: add hygon family 18h


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2301.6.0.0185.39
changelog:
  - bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal
  - of/fdt: Don't calculate initrd size from DT if start > end
  - lib/cmdline: avoid page fault in next_arg
  - genirq: Introduce warn log when irq be reentrant
  - net: sched: disallow noqueue for qdisc classes
  - net: sched: atm: dont intepret cls results when asked to drop
  - block: check 'bd_super' before rescanning partition
  - net: sched: cbq: dont intepret cls results when asked to drop
  - swapfile: fix soft lockup in scan_swap_map_slots
  - Huawei BMA: Fix iBMA driver bug


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2302.1.0.0186.40
changelog:
  - ring-buffer: Fix race between reset page and reading page
  - block: don't allow a disk link holder to itself
  - ext4: fix use-after-free in ext4_orphan_cleanup
  - ext4: lost matching-pair of trace in ext4_truncate
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
  - mm/swapfile: add cond_resched() in get_swap_pages()
  - hugetlbfs: don't delete error page from pagecache
  - mm: hwpoison: refactor refcount check handling
  - dhugetlb: set DYNAMIC_HUGETLB to y for hulk_defconfig
  - dhugetlb: use enable_dhugetlb to disable huge_memory
  - dhugetlb: skip dissolve hugepage belonging to dynamic hugetlb
  - dhugetlb: only support 1G/2M hugepage and ARM64_4K_PAGES
  - dhugetlb: isolate dynamic hugetlb code
  - dhugetlb: backport dynamic hugetlb feature
  - cfq: fix memory leak for cfqq
  - mm: fix false-positive OVERCOMMIT_GUESS failures


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2302.3.0.0187.41
changelog:
  - block, bfq: switch 'bfqg->ref' to use atomic refcount apis
  - x86/bugs: Flush IBP in ib_prctl_set()
  - media: vivid: fix compose size exceed boundary
  - cifs: do not include page data when checking signature
  - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
  - net: stream: purge sk_error_queue in sk_stream_kill_queues()
  - net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
  - ext4: fix deadlock due to mbcache entry corruption
  - mbcache: automatically delete entries from cache on freeing
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
  - mm/khugepaged: fix GUP-fast interaction by sending IPI
  - mm: gup: fix the fast GUP race against THP collapse
  - prlimit: do_prlimit needs to have a speculation check
  - arm64: cmpxchg_double*: hazard against entire exchange variable
  - net/ulp: prevent ULP without clone op from entering the LISTEN status
  - driver core: Fix bus_type.match() error handling in __driver_attach()
  - md: fix a crash in mempool_free
  - bpf: pull before calling skb_postpull_rcsum()
  - SUNRPC: ensure the matching upcall is in-flight upon downcall
  - ovl: Use ovl mounter's fsuid and fsgid in ovl_link()
  - pnode: terminate at peers of source
  - cifs: Fix uninitialized memory read for smb311 posix symlink create
  - device_cgroup: Roll back to original exceptions after copy failure
  - PCI/sysfs: Fix double free in error path
  - PCI: Fix pci_device_is_present() for VFs by checking PF
  - ipmi: fix use after free in _ipmi_destroy_user()
  - ima: Fix a potential NULL pointer access in ima_restore_measurement_list
  - ipmi: fix long wait in unload when IPMI disconnect
  - binfmt: Fix error return code in load_elf_fdpic_binary()
  - chardev: fix error handling in cdev_device_add()
  - mrp: introduce active flags to prevent UAF when applicant uninit
  - bpf: make sure skb->len != 0 when redirecting to a tunneling device
  - ipmi: fix memleak when unload ipmi driver
  - ACPICA: Fix error code path in acpi_ds_call_control_method()
  - skbuff: Account for tail adjustment during pull operations
  - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle.
  - serial: amba-pl011: avoid SBSA UART accessing DMACR register
  - class: fix possible memory leak in __class_register()
  - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
  - blktrace: Fix output non-blktrace event when blk_classic option enabled
  - SUNRPC: Fix missing release socket in rpc_sockname()
  - bonding: uninitialized variable in bond_miimon_inspect()
  - pinctrl: pinconf-generic: add missing of_node_put()
  - ima: Fix misuse of dereference of pointer in template_desc_init_fields()
  - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed
  - blk-mq: fix possible memleak when register 'hctx' failed
  - perf: Fix possible memleak in pmu_dev_alloc()
  - cpuidle: dt: Return the correct numbers of parsed idle states
  - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP
  - pstore/ram: Fix error return code in ramoops_probe()
  - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()
  - sched/rt: Optimize checking group RT scheduler constraints
  - md: protect md_unregister_thread from reentrancy
  - hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
  - lib/list_debug.c: Detect uninitialized lists
  - crypto: tcrypt - avoid signed overflow in byte count
  - mm: sharepool: fix hugepage_rsvd count increase error
  - config: enbale irq pending config for openeuler
  - genirq: introduce CONFIG_GENERIC_PENDING_IRQ_FIX_KABI
  - irqchip/gic-v3-its: introduce CONFIG_GENERIC_PENDING_IRQ
  - md: fix uaf in md_wakeup_thread
  - genirq: add printk safe in irq context
  - jbd2: Fix data missing when reusing bh which is ready to be checkpointed
  - x86/unwind: Fix orc entry for paravirt {save,restore}_fl
  - cifs: sanitize multiple delimiters in prepath
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
  - Merge "UOS: qla2xxx: Use kernel default parameter -mindirect-branch-register" into uos_release
  - UOS: qla2xxx: Use kernel default parameter -mindirect-branch-register
  - UOS: arm64: mm: add macro __cacheline_aligned to improve the performance of Kunpeng 920 Unixbench pipeline
  - UOS: Fix the failure to  initialise zstd compressing backend due to Hygon patch merging


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2302.4.0.0188.42
changelog:
  - x86/unwind: Fix check_paravirt() calls orc_find() before declaration
  - dhugetlb: set hpool to NULL for cont-bit hugepage
  - arm64/ascend: Delete CONFIG_ASCEND_AUTO_TUNING_HUGEPAGE in hulk_defconfig
  - arm64/ascend: Delete unused feature auto-tuning hugepage
  - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
  - net: bridge: mcast: add and enforce query interval minimum
  - net: bridge: mcast: add and enforce startup query interval minimum
  - anolis: bond: broadcast ARP or ND messages to all slaves
  - net: bonding: Inherit MPLS features from slave devices
  - UOS: hotplug: fix the problem of power failure under the disk


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2302.5.0.0189.43
changelog:
  - genirq: Remove irqd_irq_disabled in __irq_move_irq
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
  - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
  - net: mpls: fix stale pointer if allocation fails during device rename
  - nbd: fix assignment error for first_minor in nbd_dev_add
  - selinux: further adjust init order for cred_* hooks
  - selinux: further adjust init order for file_alloc_security hook
  - selinux: reorder hooks to make runtime disable less broken
  - evm: Fix a small race in init_desc()
  - evm: Check also if *tfm is an error pointer in init_desc()
  - iommu: Properly export iommu_group_get_for_dev()
  - of: resolver: Add of_node_put() before return and break
  - of: unittest: Add of_node_put() before return
  - drivers/iommu: Allow IOMMU bus ops to be unregistered
  - drivers/iommu: Export core IOMMU API symbols to permit modular drivers
  - component: do not dereference opaque pointer in debugfs
  - ipmi: use %*ph to print small buffer
  - crypto: algif_skcipher - Use chunksize instead of blocksize
  - crypto: algif_skcipher - EBUSY on aio should be an error
  - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete()
  - dhugetlb: isolate hwpoison hugepage when release
  - mm/sharepool: Fix null-pointer-deference in sp_free_area


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2303.1.0.0190.44
changelog:
  - HID: check empty report_list in hid_validate_values()
  - dhugetlb: use mutex lock in update_reserve_pages()
  - ntfs: fix out-of-bounds read in ntfs_attr_find()
  - ntfs: fix use-after-free in ntfs_ucsncmp()
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
  - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
  - netfilter: nf_tables: fix null deref due to zeroed list head
  - tcp: Fix listen() regression in 5.15.88.
  - tap: tap_open(): correctly initialize socket uid
  - tun: tun_chr_open(): correctly initialize socket uid
  - net: add sock_init_data_uid()
  - rds: rds_rm_zerocopy_callback() use list_first_entry()
  - UOS: Add some header file
  - UOS: Fix the bug of network control failure


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2303.3.0.0191.45
changelog:
  - scsi: cancel the inflight async device probe when remove scsi_target
  - scsi: fix use-after-free problem in scsi_remove_target
  - HID: asus: use spinlock to safely schedule workers
  - HID: asus: use spinlock to protect concurrent accesses
  - HID: asus: Remove check for same LED brightness on set
  - blk-wbt: don't enable throttling if default elevator is bfq
  - block: Fix kabi broken by "block: split .sysfs_lock into two locks"
  - block: fix comment and add lockdep assert
  - block: don't release queue's sysfs lock during switching elevator
  - block: fix race between switching elevator and removing queues
  - block: split .sysfs_lock into two locks
  - crypto: rsa-pkcs1pad - restore signature length check
  - fs/proc: task_mmu.c: don't read mapcount for migration entry
  - migrate: hugetlb: check for hugetlb shared PMD in node migration
  - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
  - ipv6: Fix tcp socket connection with DSCP.
  - ipv6: Fix datagram socket connection with DSCP.
  - aio: fix mremap after fork null-deref
  - bpf: Always return target ifindex in bpf_fib_lookup
  - serial: 8250_dma: Fix DMA Rx rearm race
  - serial: 8250_dma: Fix DMA Rx completion race
  - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
  - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
  - netlink: annotate data races around sk_state
  - netlink: annotate data races around dst_portid and dst_group
  - netlink: annotate data races around nlk->portid
  - netlink: remove hash::nelems check in netlink_insert
  - net: fix UaF in netns ops registration error path
  - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state
  - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
  - binder: Address corner cases in deferred copy and fixup
  - binder: fix pointer cast warning
  - binder: defer copies of pre-patched txn data
  - binder: read pre-translated fds from sender buffer
  - binder: avoid potential data leakage when copying txn
  - binder: fix handling of error during copy
  - binder: use cred instead of task for getsecid
  - binder: don't detect sender/target during buffer cleanup
  - binder: make sure fd closes complete
  - binder: Remove bogus warning on failed same-process transaction
  - binder: fix incorrect calculation for num_valid
  - binder: Prevent repeated use of ->mmap() via NULL mapping
  - binder: Don't modify VMA bounds in ->mmap handler
  - binder: Set end of SG buffer area properly.
  - binder: return errors from buffer copy functions
  - binder: check for overflow when alloc for security context
  - binder: fix BUG_ON found by selinux-testsuite
  - binder: fix handling of misaligned binder object
  - binder: use userspace pointer as base of buffer space
  - binder: remove user_buffer_offset
  - binder: remove kernel vm_area for buffer space
  - binder: avoid kernel vm_area for buffer fixups
  - binder: add function to copy binder object from buffer
  - binder: add functions to copy to/from binder buffers
  - binder: create userspace-to-binder-buffer copy function
  - binder: fix use-after-free due to ksys_close() during fdget()
  - binder: fix kerneldoc header for struct binder_buffer
  - binder: create node flag to request sender's security context
  - binder: Add BINDER_GET_NODE_INFO_FOR_REF ioctl.
  - binder: use standard functions to allocate fds
  - block: fix kabi change since add bd_write_openers and bd_part_write_openers
  - block: add info when opening an exclusive opened block device for write
  - block: add info when opening a write opend block device exclusively
  - Revert "block: add info when opening an exclusive opened block device for write"
  - Revert "block: add info when opening a write opend block device exclusively"
  - ext4: fix WARNING in mb_find_extent
  - sctp: fail if no bound addresses can be used for a given scope
  - UOS: mq-deadline: Add front merge in insert request


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2303.4.0.0192.46
changelog:
  - tipc: add an extra conn_get in tipc_conn_alloc
  - tipc: set con sock in tipc_conn_alloc
  - mm/oom_kill.c: fix oom_cpuset_eligible() comment
  - oom: decouple mems_allowed from oom_unkillable_task
  - mm, oom: remove redundant task_in_mem_cgroup() check
  - mm, oom: refactor dump_tasks for memcg OOMs
  - block: Fix wrong offset in bio_truncate()
  - fs: move guard_bio_eod() after bio_set_op_attrs
  - block: add bio_truncate to fix guard_bio_eod
  - mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
  - cifs: Fix use-after-free in rdata->read_into_pages()
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
  - Merge "memcg: enable accounting for file lock caches" into uos_release
  - net/mlx4: Fix EEPROM dump support
  - memcg: enable accounting for file lock caches
  - Merge "netfilter: br_netfilter: do not skip all hooks with 0 priority" into uos_release
  - Merge "netfilter: bridge: prevent UAF in brnf_exit_net()" into uos_release
  - Merge "netfilter: bridge: namespace bridge netfilter sysctls" into uos_release
  - Merge "netfilter: bridge: port sysctls to use brnf_net (conflicts resolved)" into uos_release
  - Merge "net: bridge: convert nf call options to bits" into uos_release
  - Merge "net: bridge: add bitfield for options and convert vlan opts" into uos_release
  - netfilter: br_netfilter: do not skip all hooks with 0 priority
  - netfilter: bridge: prevent UAF in brnf_exit_net()
  - netfilter: bridge: namespace bridge netfilter sysctls
  - netfilter: bridge: port sysctls to use brnf_net (conflicts resolved)
  - net: bridge: convert nf call options to bits
  - net: bridge: add bitfield for options and convert vlan opts


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2303.5.0.0194.47
changelog:
  - UOS: fix 'struct bdi_writeback' kabi changed
  - net/sched: tcindex: search key must be 16 bits
  - net/sched: tcindex: update imperfect hash filters respecting rcu
  - rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer()
  - x86/speculation: Add RSB VM Exit protections
  - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts
  - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current
  - x86/speculation: Disable RRSBA behavior
  - x86/bugs: Add Cannon lake to RETBleed affected CPU list
  - x86/cpu/amd: Enumerate BTC_NO
  - x86/common: Stamp out the stepping madness
  - x86/speculation: Fill RSB on vmexit for IBRS
  - KVM: VMX: Fix IBRS handling after vmexit
  - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS
  - x86/speculation: Remove x86_spec_ctrl_mask
  - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit
  - x86/speculation: Fix SPEC_CTRL write on SMT state change
  - x86/speculation: Fix firmware entry SPEC_CTRL handling
  - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n
  - x86/speculation: Change FILL_RETURN_BUFFER to work with objtool
  - intel_idle: Disable IBRS during long idle
  - x86/bugs: Report Intel retbleed vulnerability
  - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation()
  - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS
  - x86/bugs: Optimize SPEC_CTRL MSR writes
  - x86/entry: Add kernel IBRS implementation
  - x86/entry: Remove skip_r11rcx
  - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value
  - x86/bugs: Add AMD retbleed= boot parameter
  - x86/bugs: Report AMD retbleed vulnerability
  - x86/cpufeatures: Move RETPOLINE flags to word 11
  - x86/cpu: Add a steppings field to struct x86_cpu_id
  - x86/cpu: Add consistent CPU match macros
  - x86/devicetable: Move x86 specific macro out of generic code
  - x86/cpufeature: Fix various quality problems in the <asm/cpu_device_hd.h> header
  - x86/cpufeature: Add facility to check for min microcode revisions
  - Revert "x86/cpu: Add a steppings field to struct x86_cpu_id"
  - Revert "x86/speculation: Add RSB VM Exit protections"
  - x86/nospec: Fix i386 RSB stuffing
  - ext4: make sure fs error flag setted before clear journal error
  - ext4: commit super block if fs record error when journal record without error
  - hugetlb: fix hugepages_setup when deal with pernode
  - hugetlb: fix wrong use of nr_online_nodes
  - tty: fix out-of-bounds access in tty_driver_lookup_tty()
  - arm64: errata: Remove AES hwcap for COMPAT tasks
  - kernel: Initialize cpumask before parsing
  - genirq: Disable interrupts for force threaded handlers
  - softirq: Don't try waking ksoftirqd before it has been spawned
  - scsi: hisi_sas: Clear interrupt status when exiting channel int0 for v3 hw
  - scsi: hisi_sas: Handle NCQ error when IPTT is valid
  - scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list
  - act_mirred: use the backlog for nested calls to mirred ingress
  - net/sched: act_mirred: refactor the handle of xmit
  - net: sched: don't expose action qstats to skb_tc_reinsert()
  - net: sched: protect against stack overflow in TC act_mirred
  - net: sched: refactor reinsert action
  - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  - ext4: fix another off-by-one fsmap error on 1k block filesystems
  - kvm: initialize all of the kvm_debugregs structure before sending it to userspace
  - scsi: lpfc: Add the FLOGI cmd to the list of commands which are allowed to retry
  - writeback, cgroup: do not reparent dax inodes
  - writeback, cgroup: remove wb from offline list before releasing refcnt
  - writeback, cgroup: release dying cgwbs by switching attached inodes
  - writeback, cgroup: support switching multiple inodes at once
  - writeback, cgroup: split out the functional part of inode_switch_wbs_work_fn()
  - writeback, cgroup: keep list of inodes attached to bdi_writeback
  - writeback, cgroup: switch to rcu_work API in inode_switch_wbs()
  - writeback, cgroup: increment isw_nr_in_flight before grabbing an inode
  - writeback, cgroup: add smp_mb() to cgroup_writeback_umount()
  - writeback, cgroup: do not switch inodes with I_WILL_FREE flag
  - writeback, cgroup: inode_switch_wbs() shouldn't give up on wb_switch_rwsem trylock fail
  - KVM: arm64: pmu: Only handle supported event counters
  - KVM: arm64: pmu: Fix chained SW_INCR counters
  - KVM: arm64: pmu: Don't mark a counter as chained if the odd one is disabled
  - KVM: arm64: pmu: Reset sample period on overflow handling
  - KVM: arm64: pmu: Set the CHAINED attribute before creating the in-kernel event
  - arm64: KVM: Handle PMCR_EL0.LC as RES1 on pure AArch64 systems
  - KVM: arm64: pmu: Fix cycle counter truncation
  - KVM: arm/arm64: Introduce kvm_pmu_vcpu_init() to setup PMU counter index
  - KVM: arm/arm64: Support chained PMU counters
  - KVM: arm/arm64: Remove pmc->bitmask
  - KVM: arm/arm64: Extract duplicated code to own function
  - KVM: arm/arm64: Rename kvm_pmu_{enable/disable}_counter functions
  - anolis: kvm/pmu: support kvm compiled for module
  - KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART
  - KVM: arm64: pmu: Don't increment SW_INCR if PMCR.E is unset
  - KVM: x86: work around leak of uninitialized stack contents


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2304.1.0.0196.48
changelog:
  - ext4: Fix i_disksize exceeding i_size problem in paritally written case
  - ext4: ext4_put_super: Remove redundant checking for 'sbi->s_journal_bdev'
  - ext4: Fix reusing stale buffer heads from last failed mounting
  - net: virtio_net_hdr_to_skb: count transport header in UFO
  - net: be more gentle about silly gso requests coming from user
  - ext4: fix race between writepages and remount
  - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
  - ftrace: Fix invalid address access in lookup_rec() when index is 0
  - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
  - scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
  - RDMA/core: Don't infoleak GRH fields
  - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
  - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
  - cgroup/cpuset: Change cpuset_rwsem and hotplug lock order
  - mm: memcontrol: fix cannot alloc the maximum memcg ID
  - perf event: Check ref_reloc_sym before using it


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2304.3.0.0197.49
changelog:
  - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach
  - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
  - bpf: add missing header file include
  - uaccess: Add speculation barrier to copy_from_user()
  - random: always mix cycle counter in add_latent_entropy()
  - x86/mm: Fix use of uninitialized buffer in sme_enable()
  - ext4: fail ext4_iget if special inode unallocated
  - ext4: zero i_disksize when initializing the bootloader inode
  - irqdomain: Drop bogus fwspec-mapping error handling
  - irqdomain: Fix disassociation race
  - irqdomain: Fix association race
  - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range
  - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic
  - x86/bugs: Reset speculation control settings on init
  - timers: Prevent union confusion from unexpected restart_syscall()
  - crypto: rsa-pkcs1pad - Use akcipher_request_complete
  - crypto: seqiv - Handle EBUSY correctly
  - ACPI: battery: Fix missing NUL-termination with large strings
  - ACPICA: nsrepair: handle cases without a return value correctly
  - genirq: Fix the return type of kstat_cpu_irqs_sum()
  - ACPI: NFIT: fix a potential deadlock during NFIT teardown
  - alarmtimer: Prevent starvation by small intervals and SIG_IGN
  - ring-buffer: Fix race while reader and writer are on the same page
  - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
  - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
  - cgroup/cpuset: Change cpuset_rwsem and hotplug lock order
  - Revert "cgroup/cpuset: Change cpuset_rwsem and hotplug lock order"
  - Revert "cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock"
  - Revert "cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()"
  - block: fix wrong mode for blkdev_put() from disk_scan_partitions()
  - block: fix scan partition for exclusively open device again
  - block: fix kabi broken in ioctl.c
  - block: merge disk_scan_partitions and blkdev_reread_part
  - block: cleanup partition scanning in register_disk
  - block: Revert "block: check 'bd_super' before rescanning partition"
  - md: fix kabi broken in struct mddev
  - md: use interruptible apis in idle/frozen_sync_thread
  - md: wake up 'resync_wait' at last in md_reap_sync_thread()
  - md: refactor idle/frozen_sync_thread()
  - md: add a mutex to synchronize idle and frozen in action_store()
  - md: refactor action_store() for 'idle' and 'frozen'
  - mm: mem_reliable: Initialize reliable_nr_page when mm_init()
  - md: fix soft lockup in status_resync
  - md: don't update recovery_cp when curr_resync is ACTIVE
  - md: Ensure resync is reported after it starts
  - md: Use enum for overloaded magic numbers used by mddev->curr_resync
  - loop: Add parm check in loop_control_ioctl
  - block/wbt: enable wbt after switching cfq to other schedulers
  - Fix double fget() in vhost_net_set_backend()
  - sched/fair: Sanitize vruntime of entity being migrated
  - sched/fair: sanitize vruntime of entity being placed
  - Revert "sched: Reinit task's vruntime if a task sleep over 200 days"
  - btrfs: fix race between quota disable and quota assign ioctls
  - smartpqi: update driver to 1.2.16-040


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2304.4.0.0197.51
changelog:
  - KVM: nVMX: add missing consistency checks for CR0 and CR4
  - drm/vmwgfx: Validate the box size for the snooped cursor
  - net/sched: Retire tcindex classifier
  - Documentation/hw-vuln: Fix rST warning
  - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
  - KVM: x86: Mitigate the cross-thread return address predictions bug
  - x86/speculation: Identify processors vulnerable to SMT RSB predictions
  - cpu/SMT: create and export cpu_smt_possible()
  - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
  - config: enable CONFIG_ECRYPT_FS for encryptfs filesystem
  - Merge "UOS:add x86_64 CONFIG_DRM_SMI and CONFIG_DRM_SMI_HDMI" into uos_release
  - UOS:add x86_64 CONFIG_DRM_SMI and CONFIG_DRM_SMI_HDMI


author: jiazhenyuan <jiazhenyuan@uniontech.com> - 4.19.90-2304.4.0.0197.52
changelog:
  - UOS: lock tuned
  - UOS: config: enable SCHED_CLUSTER
  - UOS: zhaoxin: rename topology_cluster_id to topology_zx_cluster_id
  - UOS: sched: Add cluster scheduler level for x86
  - UOS: sched: Add cluster scheduler level in core and related Kconfig for ARM64
  - UOS: topology: Represent clusters of CPUs within a die
  - ACPI/PPTT: Add acpi_pptt_warn_missing() to consolidate logs
  - UOS: sched: short execution cycle process optimization
  - UOS: fix code style about selinux_audit.c
  - UOS: fix: the impact of UTS audit function on performance degradation when selinux is not enabled.
  - Zhaoxin: tcp: add a missing nf_reset_ct() in 3WHS handling
  - Zhaoxin: net: add skb_defer_max sysctl
  - Zhaoxin: net: use napi_consume_skb() in skb_defer_free_flush()
  - Zhaoxin: net: fix possible race in skb_attempt_defer_free()
  - Zhaoxin: net: call skb_defer_free_flush() before each napi_poll()
  - Zhaoxin: tcp: drop skb dst in tcp_rcv_established()
  - Zhaoxin: net: make sure net_rx_action() calls skb_defer_free_flush()
  - Zhaoxin: net: generalize skb freeing deferral to per-cpu lists
  - Zhaoxin: Fix coherent DMA writes disorder issue for Zhaoxin's KH-40000  platform
  - Zhaoxin: Fix streaming DMA writes disorder issue for Zhaoxin's  KH-40000 platform
  - Zhaoxin: tcp: add a missing sk_defer_free_flush() in tcp_splice_read()
  - Zhaoxin: tcp: Add a stub for sk_defer_free_flush()
  - Zhaoxin: net: Flush deferred skb free on socket destroy
  - Zhaoxin: net/tls: Fix another skb memory leak when running kTLS  traffic
  - Zhaoxin: net/tls: Fix skb memory leak when running kTLS traffic
  - Zhaoxin: tcp: defer skb freeing after socket lock is released
  - Zhaoxin: tcp: add missing htmldocs for skb->ll_node and sk->defer_list
  - Zhaoxin: tcp: avoid indirect calls to sock_rfree
  - Zhaoxin: Add Zhaoxin I2C driver
  - Zhaoxin: USB: HCD: Fix URB giveback issue in tasklet function
  - Zhaoxin: USB:Fix xhci ERDP update issue
  - Zhaoxin: usb: host: xhci: Support running urb giveback in tasklet  context
  - Zhaoxin: usb: host: xhci: update event ring dequeue pointer on purpose
  - Zhaoxin: Add support for turning off Zhaoxin ahci controller runtime  pm from sysfs.
  - Zhaoxin: Add support of turbo boost control interface for Zhaoxin  CPUs.
  - Zhaoxin: EHCI:Clear wakeup signal locked in S0 state when device plug  in
  - Zhaoxin: ALSA: hda: Add support of Zhaoxin NB HDAC codec
  - Zhaoxin: ALSA: hda: Add support of Zhaoxin NB HDAC
  - Zhaoxin: ALSA: hda: Add support of Zhaoxin SB HDAC
  - Zhaoxin: ata: sata_zhaoxin: Add support for Zhaoxin Serial ATA
  - Zhaoxin: crypto: x86/crc32c-intel Exclude low performance CRC32C  instruction CPUs
  - Zhaoxin: x86/cpu: Set low performance CRC32C flag on some Zhaoxin CPUs
  - Zhaoxin: x86/cpufeatures: Add low performance CRC32C instruction CPU  feature
  - Zhaoxin: x86/acpi/cstate: Optimize ARB_DISABLE on Centaur CPUs
  - Zhaoxin: ACPI, x86: Add Zhaoxin processors support for NONSTOP TSC


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2304.5.0.0198.53
changelog:
  - UOS: fix stmmac_probe_config_acpi conflicts
  - ext4: fix a possible ABBA deadlock due to busy PA
  - ext4: discard preallocations before releasing group lock
  - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init()
  - blk-wbt: call rq_qos_add() after wb_normal is initialized
  - UOS: optimization for stream
  - UOS: modify pipe read/write
  - UOS: optimize short cycle process solution
  - UOS: modify syscall for ARM64
  - RDMA/hns: Add check for user-configured max_inline_data value
  - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
  - audit: fix a memleak caused by auditing load module
  - tcp: restrict net.ipv4.tcp_app_win
  - x86/speculation: Allow enabling STIBP with legacy IBRS
  - iommu/arm-smmu-v3: Fix UAF when handle evt during iommu group removing
  - UOS: fix ltp cpuhotplug stuck
  - Merge "Phytium: add dwmac-phytium support for d2000" into uos_release
  - Merge changes I069f9fc4,Id9b7ef06 into uos_release
  - Merge changes I37b14ca6,I5bf6aad7,Ie5a7401f,I8ca57d28 into uos_release
  - Phytium: add dwmac-phytium support for d2000
  - xhci: guard accesses to ep_state in xhci_endpoint_reset()
  - xhci: Always restore EP_SOFT_CLEAR_TOGGLE even if ep reset failed
  - UOS: fix kabi broken by ee1257dd9eae
  - UOS: fix kabi broken by 7f972da7bcbe
  - UOS: fix kabi broken by 91b0549796d7
  - UOS:net/phy: update Motorcomm Phy driver to 2.2.10068
  - Zhaoxin: Update coherent DMA writes disorder issue fix patch
  - UOS: Zhaoxin: config:enable Zhaoxin i2c/sata/random/cputemp/sm3/sm4
  - Zhaoxin: patch version log
  - Merge changes I6e1102c0,Iddaed228,Ic7aee925,I452805fe,Icf5a31d0, ... into uos_release


author: caina <caina@uniontech.com> - 4.19.90-2304.5.0.0198.54
changelog:
  - UOS: config: x86 disable SCHED_CLUSTER
  - media: dvbdev: fix refcnt bug
  - media: dvbdev: fix build warning due to comments
  - media: dvbdev: dvbdev: adopts refcnt to avoid UAF
  - UOS: improve stream performance
  - Merge "UOS: fix ltp cpuset_hotlog bug" into uos_release
  - stmmac: debugfs entry name is not be changed when udev rename device name.
  - UOS: fix ltp cpuset_hotlog bug
  - UOS: fix 'struct task_struct' kabi changed


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2305.1.0.0199.55
changelog:
  - ipv6: Fix an uninit variable access bug in __ip6_make_skb()
  - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach()
  - verify_pefile: relax wrapper length check
  - udp6: fix potential access to stale information
  - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()
  - ftrace: Mark get_lock_parent_ip() __always_inline
  - perf/core: Fix the same task check in perf_event_set_output
  - net: don't let netpoll invoke NAPI if in xmit context
  - icmp: guard against too small mtu
  - sched_getaffinity: don't assume 'cpumask_size()' is fully initialized
  - dm stats: check for and propagate alloc_percpu failure
  - dm thin: fix deadlock when swapping to thin device
  - genirq: introduce handle_fasteoi_edge_irq for phytium
  - genirq: introduce handle_fasteoi_edge_irq flow handler
  - Revert "genirq: Remove irqd_irq_disabled in __irq_move_irq"
  - Revert "config: enbale irq pending config for openeuler"
  - Revert "genirq: introduce CONFIG_GENERIC_PENDING_IRQ_FIX_KABI"
  - Revert "irqchip/gic-v3-its: introduce CONFIG_GENERIC_PENDING_IRQ"
  - scsi: dpt_i2o: Remove obsolete driver
  - md: extend disks_mutex coverage
  - md: use msleep() in md_notify_reboot()
  - md: fix double free of mddev->private in autorun_array()
  - block/badblocks: fix badblocks loss when badblocks combine
  - block/badblocks: fix the bug of reverse order
  - block: Only set bb->changed when badblocks changes
  - md: fix sysfs duplicate file while adding rdev
  - md: replace invalid function flush_rdev_wq() with flush_workqueue()
  - bonding: Fix memory leak when changing bond type to Ethernet
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern
  - timers/nohz: Last resort update jiffies on nohz_full IRQ entry
  - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
  - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
  - net: qcom/emac: Fix use after free bug in emac_remove due to race condition
  - ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
  - ext4: only update i_reserved_data_blocks on successful block allocation
  - mm: mem_reliable: Use zone_page_state to count free reliable pages
  - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
  - sctp: leave the err path free in sctp_stream_init to sctp_stream_free
  - RDMA/core: Refactor rdma_bind_addr
  - Revert "RDMA/cma: Simplify rdma_resolve_addr() error flow"
  - fix kabi broken due to import new inode operation get_inode_acl
  - ovl: enable RCU'd ->get_acl()
  - vfs: add rcu argument to ->get_acl() callback


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2305.1.0.0199.56
changelog:
  - kabi: fix kabi broken by cde4d1199563
  - kabi: fix kabi broken by 85c5f19aef7a
  - vfio/mdev: Add iommu related member in mdev_device
  - vfio/type1: Handle different mdev isolation type
  - vfio/type1: Add domain at(de)taching group helpers
  - iommu/vt-d: Return ID associated with an auxiliary domain
  - iommu/vt-d: Aux-domain specific domain attach/detach
  - iommu/vt-d: Move common code out of iommu_attch_device()
  - iommu/vt-d: Add per-device IOMMU feature ops entries
  - iommu/vt-d: Make intel_iommu_enable_pasid() more generic
  - iommu: Add APIs for multiple domains per device
  - iommu/vt-d: Remove misleading "domain 0" test from domain_exit()
  - iommu/vt-d: Remove unused dmar_remove_one_dev_info() argument
  - iommu/vt-d: Remove unnecessary local variable initializations
  - iommu/vt-d: Use dev_printk() when possible
  - iommu: Use dev_printk() when possible
  - iommu/vt-d: Remove deferred invalidation
  - iommu/vt-d: Shared virtual address in scalable mode
  - iommu/vt-d: Add first level page table interface
  - iommu/vt-d: Setup context and enable RID2PASID support
  - iommu/vt-d: Pass pasid table to context mapping
  - iommu/vt-d: Setup pasid entry for RID2PASID support
  - iommu/vt-d: Add second level page table interface
  - iommu/vt-d: Reserve a domain id for FL and PT modes
  - iommu/vt-d: Add 256-bit invalidation descriptor support
  - iommu/vt-d: Move page table helpers into header
  - iommu/vt-d: Manage scalalble mode PASID tables
  - iommu/vt-d: Enumerate the scalable mode capability
  - iommu/vtd: Cleanup dma_remapping.h header
  - iommu/vt-d: Add debugfs support to show context internals
  - iommu/vt-d: Add debugfs support for Interrupt remapping
  - iommu/vt-d: Add debugfs support to show register contents
  - iommu/vt-d: Enable base Intel IOMMU debugfs support
  - iommu/vt-d: Update register definitions to VT-d 3.0 specification
  - iommu/vt-d: Relocate struct/function declarations to its header files
  - ipvlan: Modify the value of ipvlan modes
  - UOS: Add flags for Fisherman algo


author: caina <caina@uniontech.com> - 4.19.90-2305.1.0.0199.69
changelog:
  - uos: Fix compilation error
  - uos: update uos hooks
  - uos: kabi: only run check_kabi.sh
  - uos: add commit hook and sign tool
  - uos: fix kabi changed with cpu_info
  - uos: fix kapi error
  - euler: {CVE-2023-45862} USB: ene_usb6250: Allocate enough memory for full object
  - euler: {CVE-2023-45871} igb: set max size RX buffer when store bad packet is enabled
  - uos: x86: Open tcm_fc configuration
  - uos: Fix Zhaoxin PMU uncore kdump fail bug by ddc1b8132
  - uos: arm64: fix boot_cpu_data undeclared issue introduced by zhaoxin patch
  - uos: zhaoxin: Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
  - uos: zhaoxin: Add support for Zhaoxin USB4
  - uos: zhaoxin: KVM: x86: Introduce support for Zhaoxin ZXPAUSE instruction
  - uos: zhaoxin: KVM: x86: Fix APIC page invalidation race
  - uos: zhaoxin: x86/delay: add support for Zhaoxin ZXPAUSE instruction
  - uos: zhaoxin: Add support Zhaoxin GPIO pinctrl
  - uos: zhaoxin: Update PMU uncore dump bug patch
  - uos: zhaoxin: Add support for Zhaoxin GMI SM2 Secure Hash algorithm
  - uos: zhaoxin: cpufreq: ACPI: enable itmt support with _CPC method
  - uos: zhaoxin: cpufreq: ACPI: add ITMT support when CPPC enabled
  - uos: zhaoxin: Update Zhaoxin core temperature monitoring driver
  - uos: zhaoxin: Update HDAC support for Zhaoxin KX-7000
  - uos: zhaoxin: Update PMU support for Zhaoxin KX-7000
  - uos: zhaoxin: Fix Zhaoxin PMU uncore kdump fail bug
  - uos: zhaoxin: Update Zhaoxin GMI SM4 Block Cipher algorithm driver
  - uos: zhaoxin: Update Zhaoxin GMI SM3 Secure Hash algorithm driver
  - uos: zhaoxin: drm/qxl: remove men_bus_offset set to 0 in qxl_ttm_io_mem_reserve
  - uos: update inspur driver of drm
  - euler: DRM: Phytium display DRM document
  - euler: DRM: Phytium display DRM driver
  - euler: DRM: sound patch for Phytium dc driver
  - euler: DRM: Phytium vendor id
  - uos: add config CONFIG_NVME_TARGET_TCP=m [T300323]
  - mainline: nvme-tcp: add NVMe over TCP host driver [T300323]
  - mainline: nvmet: allow configfs tcp trtype configuration [T300323]
  - mainline: nvmet-tcp: add NVMe over TCP target driver [T300323]
  - mainline: nvme-tcp: Add protocol header [T300323]
  - mainline: nvme-fabrics: allow user passing data digest [T300323]
  - mainline: nvme-fabrics: allow user passing header digest [T300323]
  - mainline: nvmet: Add install_queue callout [T300323]
  - mainline: datagram: introduce skb_copy_and_hash_datagram_iter helper [T300323]
  - mainline: iov_iter: introduce hash_and_copy_to_iter helper [T300323]
  - mainline: datagram: consolidate datagram copy to iter helpers [T300323]
  - mainline: iov_iter: pass void csum pointer to csum_and_copy_to_iter [T300323]
  - mainline: datagram: open-code copy_page_to_iter [T300323]
  - mainline: ath6kl: add ath6kl_ prefix to crypto_type [T300323]
  - mainline: node: Add access1 class to represent CPU to memory characteristics [T300323]
  - mainline: x86/numa: add 'nohmat' option [T300323]
  - mainline: ACPI: Remove side effect of partly creating a node in acpi_get_node() [T300323]
  - mainline: ACPI: Support Generic Initiator only domains [T300323]
  - mainline: x86/numa: cleanup configuration dependent command-line options [T300323]
  - mainline: ACPI: NUMA: Process hotpluggable memblocks when !CONFIG_MEMORY_HOTPLUG [T300323]
  - mainline: ACPI: HMAT: Fix handling of changes from ACPI 6.2 to ACPI 6.3 [T300323]
  - mainline: ACPI: NUMA: Remove the useless 'node >= MAX_NUMNODES' check [T300323]
  - mainline: ACPI: NUMA: Remove the useless sub table pointer check [T300323]
  - mainline: ACPI: NUMA: Up-level "map to online node" functionality [T300323]
  - mainline: ACPI: HMAT: use %u instead of %d to print u32 values [T300323]
  - mainline: ACPI: HMAT: don't mix pxm and nid when setting memory target processor_pxm [T300323]
  - mainline: ACPI: NUMA: HMAT: Register HMAT at device_initcall level [T300323]
  - mainline: ACPI: NUMA: Establish a new drivers/acpi/numa/ directory [T300323]
  - mainline: ACPICA: ACPI 6.3: SRAT: add Generic Affinity Structure subtable [T300323]
  - mainline: ACPI: HMAT: ACPI_HMAT_MEMORY_PD_VALID is deprecated since ACPI-6.3 [T300323]
  - mainline: HMAT: Skip publishing target info for nodes with no online memory [T300323]
  - mainline: HMAT: Register attributes for memory hot add [T300323]
  - mainline: HMAT: Register memory-side cache after parsing [T300323]
  - uos: fix compile error for c886098641c3
  - stable: PCI/AER: Remove pci_cleanup_aer_uncorrect_error_status() calls [T300323]
  - stable: PCI/EDR: Clear Device Status after EDR error recovery [T300323]
  - anolis: PCI/AER: Iterate over error counters instead of error strings [T300323]
  - anolis: PCI/RCEC: Fix RCiEP device to RCEC association [T300323]
  - anolis: PCI/AER: Add RCEC AER error injection support [T300323]
  - anolis: PCI/AER: Add pcie_walk_rcec() to RCEC AER handling [T300323]
  - anolis: PCI/ERR: Recover from RCiEP AER errors [T300323]
  - anolis: PCI/ERR: Add pcie_link_rcec() to associate RCiEPs [T300323]
  - anolis: PCI/ERR: Recover from RCEC AER errors [T300323]
  - anolis: PCI/AER: Write AER Capability only when we control it [T300323]
  - anolis: PCI/ERR: Clear AER status only when we control AER [T300323]
  - anolis: PCI/ERR: Add pci_walk_bridge() to pcie_do_recovery() [T300323]
  - anolis: PCI/ERR: Avoid negated conditional for clarity [T300323]
  - anolis: PCI/ERR: Use "bridge" for clarity in pcie_do_recovery() [T300323]
  - anolis: PCI/ERR: Simplify by computing pci_pcie_type() once [T300323]
  - anolis: PCI/ERR: Simplify by using pci_upstream_bridge() [T300323]
  - anolis: PCI/ERR: Cache RCEC EA Capability offset in pci_init_capabilities() [T300323]
  - anolis: PCI/ERR: Bind RCEC devices to the Root Port driver [T300323]
  - anolis: PCI/ERR: Clear PCIe Device Status errors only if OS owns AER [T300323]
  - anolis: PCI/ERR: Rename pci_aer_clear_device_status() to pcie_clear_device_status() [T300323]
  - anolis: PCI/AER: Log correctable errors as warning, not error [T300323]
  - anolis: PCI/AER: Simplify __aer_print_error() [T300323]
  - anolis: PCI: Convert PCIe capability PCIBIOS errors to errno [T300323]
  - anolis: PCI/AER: Use "aer" variable for capability offset [T300323]
  - anolis: PCI/AER: Remove redundant dev->aer_cap checks [T300323]
  - anolis: PCI/AER: Remove redundant pci_is_pcie() checks [T300323]
  - anolis: PCI/AER: Remove HEST/FIRMWARE_FIRST parsing for AER ownership [T300323]
  - anolis: PCI/AER: Use only _OSC to determine AER ownership [T300323]
  - anolis: PCI/AER: Add PoisonTLPBlocked to Uncorrectable error counters [T300323]
  - mainline: PCI/AER: Rationalize error status register clearing [T300323]
  - mainline: PCI/DPC: Add Error Disconnect Recover (EDR) support [T300323]
  - mainline: PCI/DPC: Expose dpc_process_error(), dpc_reset_link() for use by EDR [T300323]
  - mainline: PCI/AER: Add pci_aer_raw_clear_status() to unconditionally clear Error Status [T300323]
  - mainline: PCI/DPC: Cache DPC capabilities in pci_init_capabilities() [T300323]
  - mainline: PCI/ERR: Return status of pcie_do_recovery() [T300323]
  - mainline: PCI/ERR: Remove service dependency in pcie_do_recovery() [T300323]
  - mainline: PCI/DPC: Move DPC data into struct pci_dev [T300323]
  - anolis: UKFEF: report kernel warning
  - anolis: UKFEF: report kernel crash event
  - anolis: UKFEF: report bad mm_struct state
  - anolis: UKFEF: report ext4-fs error
  - anolis: UKFEF: report fatal signal event
  - anolis: UKFEF: report memory alloc failed event
  - anolis: UKFEF: report softlockup event
  - anolis: UKFEF: report rcu-stall event
  - anolis: UKFEF: report hung-task event
  - anolis: UKFEF: report oom event
  - anolis: UKFEF: report block error
  - anolis: UKFEF: report mce event
  - euler: mm,hwpoison: send SIGBUS with error virutal address [T300323]
  - euler: x86/mce: Decode a kernel instruction to determine if it is copying from user [T300323]
  - euler: x86/mce: Recover from poison found while copying from user space [T300323]
  - euler: x86/mce: Avoid tail copy when machine check terminated a copy from user [T300323]
  - euler: x86/mce: Add _ASM_EXTABLE_CPY for copy user access [T300323]
  - euler: x86/mce: Provide method to find out the type of an exception handler [T300323]
  - euler: x86/mce: Pass pointer to saved pt_regs to severity calculation routines [T300323]
  - euler: x86/mce: Stop mce_reign() from re-computing severity for every CPU [T300323]
  - euler: x86/mce: Add Skylake quirk for patrol scrub reported errors [T300323]
  - euler: x86/mce: Convert the CEC to use the MCE notifier [T300323]
  - euler: x86/mce: Rename "first" function as "early" [T300323]
  - anolis: x86/mce: fixup exception only for the correct mces [T300323]
  - anolis: x86/mce: Add mce=print_all option [T300323]
  - anolis: x86/mce: Change default MCE logger to check mce->kflags [T300323]
  - anolis: x86/mce: Fix all mce notifiers to update the mce->kflags bitmask [T300323]
  - anolis: x86/mce: Add a struct mce.kflags field [T300323]
  - anolis: x86: Replace ist_enter() with nmi_enter() [T300323]
  - anolis: x86/mce: Send #MC singal from task work [T300323]
  - anolis: x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned [T300323]
  - anolis: x86/entry: Get rid of ist_begin/end_non_atomic() [T300323]
  - anolis: UKFEF: unified kernel fault event framework
  - euler: alinux: net/tcp: Support tunable tcp timeout value in TIME-WAIT state [T300323]
  - uos: fix: space format errors
  - mainline: mm/memory-failure: Add memory_failure_queue_kick()
  - uos: Change the code according with mainline.
  - mainline: ACPI: APEI: do not add task_work to kernel thread to avoid memory leak [300485]
  - mainline: ACPI: APEI: fix synchronous external aborts in user-mode [300485]
  - mainline: ACPI: APEI: Kick the memory_failure() queue for synchronous errors [300485]
  - mainline: ACPI / APEI: Add support for the SDEI GHES Notification type [300485]
  - mainline: firmware: arm_sdei: Add ACPI GHES registration helper
  - mainline: ACPI / APEI: Use separate fixmap pages for arm64 NMI-like notifications [300485]
  - mainline: ACPI / APEI: Only use queued estatus entry during in_nmi_queue_one_entry() [300485]
  - mainline: ACPI / APEI: Split ghes_read_estatus() to allow a peek at the CPER length [300485]
  - mainline: ACPI / APEI: Make GHES estatus header validation more user friendly [300485]
  - mainline: ACPI / APEI: Pass ghes and estatus separately to avoid a later copy [300485]
  - mainline: ACPI / APEI: Let the notification helper specify the fixmap slot [300485]
  - mainline: ACPI / APEI: Move locking to the notification helper [300485]
  - mainline: ACPI / APEI: Switch NOTIFY_SEA to use the estatus queue [300485]
  - mainline: ACPI / APEI: Move NOTIFY_SEA between the estatus-queue and NOTIFY_NMI [300485]
  - mainline: ACPI / APEI: Don't allow ghes_ack_error() to mask earlier errors [300485]
  - mainline: ACPI / APEI: Generalise the estatus queue's notify code [300485]
  - mainline: ACPI / APEI: Don't update struct ghes' flags in read/clear estatus [300485]
  - mainline: ACPI / APEI: Remove spurious GHES_TO_CLEAR check [300485]
  - mainline: ACPI / APEI: Don't store CPER records physical address in struct ghes [300485]
  - mainline: ACPI / APEI: Make estatus pool allocation a static size [300485]
  - mainline: ACPI / APEI: Make hest.c manage the estatus memory pool [300485]
  - mainline: ACPI / APEI: Remove silent flag from ghes_read_estatus() [300485]
  - mainline: ACPI: APEI: EINJ: Use DEFINE_DEBUGFS_ATTRIBUTE for debugfs files [300485]
  - mainline: ACPI / APEI: Fix parsing HEST that includes Deferred Machine Check subtable [300485]
  - uos: feat: add module phytium ce drivers crypto api (taskid 300665)
  - stable: drm/ast: Fix ARM compatibility
  - euler: block, bfq: consider also ioprio classes in symmetry detection [T300325]
  - anolis: ovl: show "userxattr" in the mount data [T300325]
  - anolis: ovl: fix out of bounds access warning in ovl_check_fb_len() [T300325]
  - anolis: ovl: potential crash in ovl_fid_to_fh() [T300325]
  - anolis: ovl: replace zero-length array with flexible-array member [T300325]
  - anolis: ovl: do not get metacopy for userxattr [T300325]
  - anolis: ovl: do not fail when setting origin xattr [T300325]
  - anolis: ovl: user xattr [T300325]
  - anolis: ovl: rearrange ovl_can_list() [T300325]
  - anolis: ovl: enumerate private xattrs [T300325]
  - anolis: ovl: pass ovl_fs down to functions accessing private xattrs [T300325]
  - anolis: ovl: remove not used argument in ovl_check_origin [T300325]
  - anolis: ovl: ignore failure to copy up unknown xattrs [T300325]
  - anolis: ovl: fix typo in MODULE_PARM_DESC [T300325]
  - anolis: ovl: drop flags argument from ovl_do_setxattr() [T300325]
  - anolis: ovl: adhere to the vfs_ vs. ovl_do_ conventions for xattrs [T300325]
  - anolis: ovl: use ovl_do_getxattr() for private xattr [T300325]
  - anolis: ovl: make sure that real fid is 32bit aligned in memory [T300325]
  - anolis: ovl: fold ovl_getxattr() into ovl_get_redirect_xattr() [T300325]
  - anolis: ovl: clean up ovl_getxattr() in copy_up.c [T300325]
  - anolis: duplicate ovl_getxattr() [T300325]
  - uos: qxl: adapt io map cache policy in arm64 for qxl
  - uos: qxl: Resolve qxl driver initialization failure issue
  - uos: arm64/cpuinfo: add 'model name' field to show cpu model [T300655]
  - uos: default disable short task solution


author: caina <caina@uniontech.com> - 4.19.90-2305.1.0.0199.70
changelog:
  - euler: {CVE-2023-34256} ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
  - uos: enable CONFIG_DRM_PHYTIUM=m


author: caina <caina@uniontech.com> - 4.19.90-2305.1.0.0199.71
changelog:
  - euler: {CVE-2023-31085} ubi: Refuse attaching if mtd's erasesize is 0
  - euler: {CVE-2022-44033} char: pcmcia: remove all the drivers
  - euler: {CVE-2022-44033} tty: ipwireless: move Kconfig entry to tty
  - euler: {CVE-2023-5717} perf: Fix kabi breakage in struct perf_event
  - euler: {CVE-2023-5717} perf: Disallow mis-matched inherited group reads
  - euler: {CVE-2023-31083} Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
  - euler: {CVE-2023-34324} xen/events: replace evtchn_rwlock with RCU


author: caina <caina@uniontech.com> - 4.19.90-2305.1.0.0199.74
changelog:
  - uos: fix boot_cpu_data undeclared issue introduced by zhaoxin patch
  - uos: Fix the patch of coherent DMA writes disorder issue for Zhaoxin KH-40000
  - uos: zhaoxin: add patch log from v5.0.3
  - uos: dup: rename config and cmdline
  - uos: rename config to uos419
  - uos: zhaoxin: Add support for Zhaoxin Processors
  - uos: feature1: fix params passed error in uld_copy_bitmap()
  - uos: feature1: fix full_fds init error
  - uos: feature1: fix fdt changed after get_unused_fd()
  - uos: feature1: fix __get_file NULL pointer dereference


author: caina <caina@uniontech.com> - 4.19.90-2305.1.0.0199.75
changelog:
  - uos: dup: pick file after uld_close_fd()
  - uos: dup: check lazy dup in iterate_fd() and __close_fd_get_file()
  - uos: enbale CONFIG_MICROCODE_HYGON


author: caina <caina@uniontech.com> - 4.19.90-2305.1.0.0199.76
changelog:
  - euler: {CVE-2023-6121} nvmet: nul-terminate the NQNs passed in the connect command
  - euler: {CVE-2023-7192} netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
  - euler: {CVE-2023-51781} appletalk: Fix Use-After-Free in atalk_ioctl
  - euler: {CVE-2023-51779} Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
  - euler: {CVE-2023-6610} smb: client: fix potential OOB in smb2_dump_detail()
  - euler: {CVE-2023-6606} smb: client: fix OOB in smbCalcSize()
  - euler: {CVE-2023-51782} net/rose: Fix Use-After-Free in rose_ioctl
  - euler: {CVE-2023-51780} atm: Fix Use-After-Free in do_vcc_ioctl
  - euler: {CVE-2023-35827} ravb: Fix races between ravb_tx_timeout_work() and net related ops
  - euler: {CVE-2023-35827} ravb: Fix use-after-free issue in ravb_tx_timeout_work()
  - euler: {CVE-2023-6564} tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
  - euler: {CVE-2023-6564} tty: n_gsm: fix restart handling via CLD command
  - euler: {CVE-2023-6391} perf: Fix perf_event_validate_size() lockdep splat
  - euler: {CVE-2023-6391} perf: Fix perf_event_validate_size()
  - euler: {CVE-2023-39197} netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
  - euler: {CVE-2023-29198} drm/qxl: fix UAF on handle creation
  - euler: {CVE-2022-45884} media: dvb-core: Fix use-after-free due to race at dvb_register_device()
  - euler: {CVE-2022-45884} media: media/dvb: Use kmemdup rather than duplicating its implementation
  - euler: {CVE-2022-45884} media: dvbdev: Fix memleak in dvb_register_device
  - euler: netfilter: nf_queue: fix socket leak
  - stable: ACPICA: ACPI 6.3: add Error Disconnect Recover Notification value [T300323]
  - uos: bugfix: fixup marvell sata controller init fail on some machine
  - uos: lms feature optimized
  - stable: iommu/vt-d: Leave scalable mode default off [T285937]
  - uos: uos lms feature
  - uos: Revert "uos: stream performance optimization"


author: caina <caina@uniontech.com> - 4.19.90-2305.1.0.0199.78
changelog:
  - euler: {CVE-2023-52340} ipv6: fix kabi broken in struct dst_ops
  - euler: {CVE-2023-52340} ipv6: remove max_size check inline with ipv4
  - euler: {CVE-2023-46838} xen-netback: don't produce zero-size SKB frags
  - euler: {CVE-2023-52340} ipv6: Document that max_size sysctl is deprecated
  - euler: {CVE-2024-1086} netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - euler: {CVE-2023-51043} drm/atomic: Fix potential use-after-free in nonblocking commits
  - euler: {CVE-2023-6531} io_uring/af_unix: disable sending io_uring over sockets
  - uos: elfverify: fix slab memory leak [T325833]
  - euler: {CVE-2024-23849} net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
  - euler: {CVE-2023-51042} drm/amdgpu: Fix potential fence use-after-free v2
  - euler: {CVE-2023-46343} nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
  - euler: {CVE-2024-0639} sctp: fix potential deadlock on &net->sctp.addr_wq_lock
  - euler: {CVE-2024-0607} netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
  - euler: {CVE-2022-48619} Input: add bounds checking to input_set_capability()
  - euler: {CVE-2024-0565} smb: client: fix OOB in receive_encrypted_standard()
  - euler: {CVE-2023-6040} netfilter: nf_tables: Reject tables of unsupported family
  - euler: {CVE-2024-0340} vhost: use kzalloc() instead of kmalloc() followed by memset()
  - uos: change the python-shabang to '/usr/xx' path [B235061]


author: caina <caina@uniontech.com> - 4.19.90-2305.1.0.0199.79
changelog:
  - uos: bugfix: fixup marvell sata controller init fail on some machine
  - stable: {CVE-2023-52439} uio: Fix use-after-free in uio_open
  - stable: {CVE-2023-52443} apparmor: avoid crash when parsed profile name is empty
  - stable: {CVE-2023-52444} f2fs: fix to avoid dirent corruption
  - stable: {CVE-2023-52445} media: pvrusb2: fix use after free on context disconnection
  - stable: {CVE-2023-52449} mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
  - stable: {CVE-2023-52451} powerpc/pseries/memhp: Fix access beyond end of drmem array
  - stable: {CVE-2023-52464} EDAC/thunderx: Fix possible out-of-bounds string access
  - stable: {CVE-2024-26597} net: qualcomm: rmnet: fix global oob in rmnet_policy
  - euler: {CVE-2024-0775} ext4: improve error recovery code paths in __ext4_remount()
  - euler: {CVE-2021-33631} ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
  - euler: {CVE-2023-6932} ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
  - euler: {CVE-2023-39194} net: xfrm: Fix xfrm_address_filter OOB read
  - euler: {CVE-2023-39193} netfilter: xt_sctp: validate the flag_info count
  - euler: {CVE-2023-39189} netfilter: nfnetlink_osf: avoid OOB read


author: caina <caina@uniontech.com> - 4.19.90-2305.1.0.0199.80
changelog:
  - stable: {CVE-2023-6270} aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  - euler: {CVE-2023-52515} RDMA/srp: Do not call scsi_done() from srp_abort()
  - euler: {CVE-2023-52598} s390/ptrace: handle setting of fpc register correctly
  - euler: {CVE-2023-52586} drm/msm/dpu: Add mutex lock in control vblank irq
  - euler: {CVE-2023-52604} FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - euler: {CVE-2024-26625} llc: call sock_orphan() at release time
  - euler: {CVE-2023-52583} ceph: fix deadlock or deadcode of misusing dget()
  - euler: {CVE-2023-52606} powerpc/lib: Validate size for vector operations
  - euler: {CVE-2023-52607} powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
  - euler: {CVE-2022-48630} crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ
  - euler: {CVE-2022-48629} crypto: qcom-rng - ensure buffer for generate is completely filled
  - euler: {CVE-2023-52486} drm: Don't unref the same fb many times by mistake due to deadlock handling
  - euler: {CVE-2023-52524} net: nfc: llcp: Add lock when modifying device list
  - euler: {CVE-2023-52502} net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
  - euler: {CVE-2023-52502} nfc: constify several pointers to u8, char and sk_buff
  - euler: {CVE-2023-52507} nfc: nci: assert requested protocol is valid
  - euler: {CVE-2021-46952} NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
  - euler: {CVE-2021-46926} ALSA: hda: intel-sdw-acpi: harden detection of controller
  - euler: {CVE-2021-46926} soundwire: intel: filter SoundWire controller device search
  - euler: {CVE-2023-52578} net: fix kabi check warning
  - euler: {CVE-2023-52578} net: Fix unwanted sign extension in netdev_stats_to_stats64()
  - euler: {CVE-2023-52578} net: bridge: use DEV_STATS_INC()
  - euler: {CVE-2023-52578} net: add atomic_long_t to net_device_stats fields
  - euler: {CVE-2023-52478} HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  - euler: {CVE-2023-52530} wifi: mac80211: fix potential key use-after-free
  - euler: {CVE-2021-47063} drm: bridge/panel: Cleanup connector on bridge detach
  - euler: {CVE-2021-47071} uio_hv_generic: Fix a memory leak in error handling paths
  - euler: {CVE-2021-47076} RDMA/rxe: Return CQE error if invalid lkey was supplied
  - euler: {CVE-2021-47074} nvme-loop: fix memory leak in nvme_loop_create_ctrl()
  - euler: {CVE-2021-47074} nvme-loop: don't put ctrl on nvme_init_ctrl error
  - euler: {CVE-2021-47078} RDMA/rxe: Clear all QP fields if creation failed
  - euler: {CVE-2023-52522} net: fix possible store tearing in neigh_periodic_work()
  - euler: {CVE-2021-46933} usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
  - euler: {CVE-2021-46998} ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
  - euler: {CVE-2021-46984} kyber: fix kabi broken in ->bio_merge()
  - euler: {CVE-2021-46984} kyber: fix out of bounds access when preempted
  - euler: {CVE-2023-52504} x86/alternatives: Disable KASAN in apply_alternatives()
  - euler: {CVE-2021-47020} soundwire: stream: fix memory leak in stream config error path
  - euler: {CVE-2021-47015} bnxt_en: Fix RX consumer index logic in the error path.
  - euler: {CVE-2022-48627} vt: fix memory overlapping when deleting chars in the buffer
  - euler: {CVE-2021-47013} net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
  - euler: {CVE-2020-36783} i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
  - euler: {CVE-2023-52528} net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
  - euler: {CVE-2023-52566} nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
  - euler: {CVE-2021-46935} binder: fix async_free_space accounting for empty parcels
  - euler: {CVE-2023-52451} powerpc/64s: Fix crashes when toggling entry flush barrier
  - euler: {CVE-2020-36778} i2c: xiic: fix reference leak when pm_runtime_get_sync fails
  - euler: {CVE-2021-47077} scsi: qedf: Add pointer checks in qedf_update_link_speed()
  - euler: {CVE-2021-47024} vsock/virtio: free queued packets when closing socket
  - euler: {CVE-2021-47024} vsock/virtio: discard packets only when socket is really closed
  - euler: {CVE-2021-47024} virtio_vsock: Fix race condition in virtio_transport_recv_pkt
  - euler: {CVE-2021-47034} powerpc/64s: Fix pte update for kernel memory on radix
  - euler: {CVE-2021-46924} NFC: st21nfca: Fix memory leak in device probe and remove
  - euler: {CVE-2023-52510} ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  - euler: {CVE-2023-52476} perf/x86/lbr: Filter vsyscall addresses
  - euler: {CVE-2021-47056} crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
  - euler: {CVE-2021-46934} i2c: validate user data in compat ioctl
  - euler: {CVE-2024-26600} phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
  - euler: {CVE-2023-52500} scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
  - euler: {CVE-2021-46909} ARM: footbridge: fix PCI interrupt mapping
  - euler: {CVE-2021-46906} HID: usbhid: fix info leak in hid_submit_ctrl
  - euler: {CVE-2023-52477} usb: hub: Guard against accesses to uninitialized BOS descriptors
  - euler: {CVE-2020-36780} i2c: sprd: fix reference leak when pm_runtime_get_sync fails
  - euler: {CVE-2021-47073} platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
  - euler: {CVE-2024-22099} Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  - euler: {CVE-2020-36777} media: dvbdev: Fix memory leak in dvb_media_device_free()
  - euler: {CVE-2021-47061} KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
  - euler: {CVE-2021-46932} Input: appletouch - initialize work before device registration
  - euler: {CVE-2020-36784} i2c: cadence: fix reference leak when pm_runtime_get_sync fails
  - euler: {CVE-2021-47060} KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
  - euler: {CVE-2019-25162} i2c: Fix a potential use after free
  - euler: {CVE-2021-47006} ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook
  - euler: {CVE-2024-1151} net: openvswitch: limit the number of recursions from action sets
  - euler: {CVE-2021-46941} usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup
  - euler: {CVE-2021-46941} usb: dwc3: core: balance phy init and exit
  - euler: {CVE-2021-46941} usb: dwc3: core: Do core softreset when switch mode
  - euler: {CVE-2023-52475} Input: powermate - fix use-after-free in powermate_config_complete
  - euler: {CVE-2021-46989} hfsplus: prevent corruption in shrinking truncate
  - euler: {CVE-2021-47054} bus: qcom: Put child node before return
  - euler: {CVE-2021-46955} openvswitch: fix stack OOB read while fragmenting IPv4 packets
  - euler: {CVE-2021-47049} Drivers: hv: vmbus: Use after free in __vmbus_open()
  - euler: {CVE-2024-26602} sched/membarrier: reduce the ability to hammer on sys_membarrier
  - euler: {CVE-2020-36782} i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails
  - euler: {CVE-2020-36782} PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter
  - euler: {CVE-2021-47040} io_uring: fix overflows checks in provide buffers
  - euler: {CVE-2021-46928} parisc: Clear stale IIR value on instruction access rights trap
  - euler: {CVE-2023-52451} powerpc/pseries/memhotplug: Quieten some DLPAR operations
  - euler: {CVE-2023-52469} drivers/amd/pm: fix a use-after-free in kv_parse_power_table
  - euler: {CVE-2024-26606} binder: signal epoll threads of self-work
  - euler: {CVE-2024-26598} KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
  - euler: {CVE-2021-46904} net: hso: fix NULL-deref on disconnect regression
  - euler: {CVE-2021-46904} net: hso: fix null-ptr-deref during tty device unregistration
  - euler: {CVE-2021-46904} usb: hso: check for return value in hso_serial_common_create()
  - euler: {CVE-2024-26595} mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
  - euler: {CVE-2024-26586} mlxsw: spectrum_acl_tcam: Fix stack corruption
  - euler: {CVE-2023-52435} net: Fix compile warning in skb_segment()
  - euler: {CVE-2023-52435} net: prevent mss overflow in skb_segment()
  - euler: {CVE-2023-52436} f2fs: explicitly null-terminate the xattr list
  - stable: kvm/arm64: fixed passthrough gpu into vm on arm64


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2305.1.0.0199.83
changelog:
  * Wed May 08 2024 caina <caina@uniontech.com> - 4.19.90-2305.1.0.0199.81
  - euler: {CVE-2021-47161} spi: spi-fsl-dspi: Fix a resource leak in an error handling path
  - euler: {CVE-2024-24855} scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
  - euler: {CVE-2021-47110} x86/kvm: Do not try to disable kvmclock if it was not enabled
  - euler: {CVE-2021-47110} x86/kvm: Disable kvmclock on all CPUs on shutdown
  - euler: {CVE-2023-52619} pstore/ram: Fix crash when setting number of cpus to an odd number
  - euler: {CVE-2024-26636} llc: make llc_ui_sendmsg() more robust against bonding changes
  - euler: {CVE-2024-26635} llc: Drop support for ETH_P_TR_802_2.
  - euler: {CVE-2024-26640} tcp: add sanity checks to rx zerocopy
  - euler: {CVE-2023-52600} jfs: fix uaf in jfs_evict_inode
  - euler: {CVE-2023-52600} JFS: fix memleak in jfs_mount
  - euler: {CVE-2023-52599} jfs: fix array-index-out-of-bounds in diNewExt
  - euler: {CVE-2021-47112} x86/kvm: Teardown PV features on boot CPU as well
  - euler: {CVE-2023-52594} wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
  - euler: {CVE-2021-47114} ocfs2: issue zeroout to EOF blocks
  - euler: {CVE-2021-47114} ocfs2: fix zero out valid data
  - euler: {CVE-2021-47114} ocfs2: fix data corruption by fallocate
  - euler: {CVE-2023-52597} KVM: s390: fix setting of fpc register
  - euler: {CVE-2023-52615} hwrng: core - Fix page fault dead lock on mmap-ed hwrng
  - euler: {CVE-2021-47113} btrfs: abort in rename_exchange if we fail to insert the second ref
  - euler: {CVE-2021-47122} net: caif: fix memory leak in caif_device_notify
  - euler: {CVE-2021-47121} net: caif: fix memory leak in cfusbl_device_notify
  - euler: {CVE-2021-47121} net: caif: add proper error handling
  - euler: {CVE-2021-47121} net: caif: added cfserl_release function
  - euler: {CVE-2023-52595} rt2x00: Fix kabi breakage in struct rt2x00lib_ops
  - euler: {CVE-2023-52595} wifi: rt2x00: restart beacon queue when hardware reset
  - euler: {CVE-2023-52595} rt2x00: clear up IV's on key removal
  - euler: {CVE-2023-52595} rt2x00: clear IV's on start to fix AP mode regression
  - euler: {CVE-2023-52595} rt2800: add pre_reset_hw callback
  - euler: {CVE-2023-52595} rt2800: do not nullify initialization vector data
  - euler: {CVE-2023-52609} binder: fix race between mmput() and do_exit()
  - euler: {CVE-2023-52603} UBSAN: array-index-out-of-bounds in dtSplitRoot
  - euler: {CVE-2023-52602} jfs: fix slab-out-of-bounds Read in dtSearch
  - euler: {CVE-2021-47086} phonet/pep: refuse to enable an unbound pipe
  - euler: {CVE-2024-26615} net/smc: fix illegal rmb_desc access in SMC-D connection dump
  - euler: {CVE-2024-26622} tomoyo: fix UAF write bug in tomoyo_write_control()
  - uos: export uld_fcheck_file symbol [B251417]
  - fix: wrong logic when allocating memory in elf module


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-10
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-13
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 CVE-2021-42386


author: liuxu <liuxu156@huawei.com> - 1:1.31.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-80.0
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Adding:
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-80.2
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-80.0
changelog:
  - Update to CKBI 2.60_v7.0.306 from NSS 3.91
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "CCA India 2007"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"
  -     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "ATHEX Root CA"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "America Online Root Certification Authority 1"
  -     # Certificate "Juur-SK"
  -     # Certificate "ComSign CA"
  -     # Certificate "ComSign Secured CA"
  -     # Certificate "ComSign Advanced Security CA"
  -     # Certificate "Global Chambersign Root"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "Swiss Government Root CA III"
  -     # Certificate "Application CA G4 Root"
  -     # Certificate "SSC GDL CA Root A"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-80.0
changelog:
  - Update to CKBI 2.69_v8.0.303 from NSS 3.101.1
  -    Removing:
  -     # Certificate "Verisign Class 1 Public Primary Certification Authority - G3"
  -     # Certificate "Verisign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "Security Communication Root CA"
  -     # Certificate "Camerfirma Chambers of Commerce Root"
  -     # Certificate "Hongkong Post Root CA 1"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G6"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "FNMT-RCM"
  -    Adding:
  -     # Certificate "LAWtrust Root CA2 (4096)"
  -     # Certificate "Sectigo Public Email Protection Root E46"
  -     # Certificate "Sectigo Public Email Protection Root R46"
  -     # Certificate "Sectigo Public Server Authentication Root E46"
  -     # Certificate "Sectigo Public Server Authentication Root R46"
  -     # Certificate "SSL.com TLS RSA Root CA 2022"
  -     # Certificate "SSL.com TLS ECC Root CA 2022"
  -     # Certificate "SSL.com Client ECC Root CA 2022"
  -     # Certificate "SSL.com Client RSA Root CA 2022"
  -     # Certificate "Atos TrustedRoot Root CA ECC G2 2020"
  -     # Certificate "Atos TrustedRoot Root CA RSA G2 2020"
  -     # Certificate "Atos TrustedRoot Root CA ECC TLS 2021"
  -     # Certificate "Atos TrustedRoot Root CA RSA TLS 2021"
  -     # Certificate "TrustAsia Global Root CA G3"
  -     # Certificate "TrustAsia Global Root CA G4"
  -     # Certificate "CommScope Public Trust ECC Root-01"
  -     # Certificate "CommScope Public Trust ECC Root-02"
  -     # Certificate "CommScope Public Trust RSA Root-01"
  -     # Certificate "CommScope Public Trust RSA Root-02"
  -     # Certificate "D-Trust SBR Root CA 1 2022"
  -     # Certificate "D-Trust SBR Root CA 2 2022"
  -     # Certificate "Telekom Security SMIME ECC Root 2021"
  -     # Certificate "Telekom Security TLS ECC Root 2020"
  -     # Certificate "Telekom Security SMIME RSA Root 2023"
  -     # Certificate "Telekom Security TLS RSA Root 2023"
  -     # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
  -     # Certificate "SECOM Trust.net"
  -     # Certificate "Chambers of Commerce Root"
  -     # Certificate "VeriSign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "SSL.com Code Signing RSA Root CA 2022"
  -     # Certificate "SSL.com Code Signing ECC Root CA 2022"


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.11-45
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.8-werror.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.9-efi-boot.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.9-no_mp3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.9-buffer_overflow.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.10-build-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.11-manpagefix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.11-rootstat.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.11-usalinst.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.11-readsegfault.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.11-format.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.11-handler.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.11-dvdman.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.11-paranoiacdda.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.11-utf8.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.11-cmakewarn.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.11-memset.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.11-ppc64le_elfheader.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.11-werror_gcc5.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.11-devname.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.11-sysmacros.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/cdrkit-1.1.11-gcc10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: chixinze <xmdxcxz@gmail.com> - 1:12.2.8-13
changelog:
  - fix CVE-2020-27781
  - ceph-volume-client: allow atomic updates for RADOS objects
  - qa: make test_volume_client.py py3 compatible


author: Li Qiang <liqiang64@huawei.com> - 1:12.2.8-16
changelog:
  - Synchronize the performance optimization of the pick_a_shard
  - function in the upstream community.


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-CVE-2021-20208.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/1001-cifs.upcall-update-the-cap-bounding-set-only-when-CA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/1002-mount.cifs-update-the-cap-bounding-set-only-when-CAP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 19.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix the error level logs displayed for the cloud-init-local service


author: panchenbo <panchenbo@uniontech.com> - 19.4-10.up4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Adaptive arm architecture
  	Fix for network configuration not persisting after reboot
  	fix UnionTech network issues
  	add UnionTech into distro


author: Katerina Koukiou <kkoukiou@redht.com> - 233.1-1
changelog:
  - Non-admin users no longer see Cockpit in motd (rhbz#1872562)
  - Improved host editing
  - Replace system's graph page with a completely new USE method page
  - Logging of remote IP addresses
  - shell: Any page can be the shell
  - Accounts: Allow setting weak passwords (rhbz#1652390)
  - Terminal: Fix issue with prompt not returning when clicking reset button in disoconnected session (rhbz#1897430)


author: Martin Pitt <mpitt@redhat.com> - 235-1
changelog:
  - Login: Improved handling of SSH host keys
  - Overview: Editable motd
  - Adjust tests for sos 4.x to fix gating tests (rhbz#1895912)


author: Martin Pitt <mpitt@redhat.com> - 238-1
changelog:
  - Web server: Preserve permissions of administrator-provided certificates
  - System: Performance page shows busiest CPU cores


author: Martin Pitt <mpitt@redhat.com> - 238.1-1
changelog:
  - Several UI alignment fixes
  - Re-drop unit tests from built packages
  - Metrics: Don't show swap column when no swap is present
  - Metrics: Don't show duplicate events


author: zhangxianting <zhangxianting@uniontech.com> - 310.4-1.01
changelog:
  - spec: no BR gdb on loongarch64 
  - spec: add patch1 for gcc-7.3.0 based compilation
  - spec: Change the subscription-manager-cockpit dependency level
  - fix: delete arch/* empty link(bugid:123783)
  - fix: fix no display /usr/share/cockpit/motd/inactive.motd (bugid:192093)
  - fix: remove rhel and centos(bugid:198321)
  - fix: closed others brands(bugid:243459)


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. check task list to avoid unnecessary cleanup.
         2. fix dead loop
         3. cleanup dangling shim by brand new context
         4. fix potential panic for task in unknown state


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-201
changelog:
  - Type:bugfix                                          
  - ID:NA                                                   
  - SUG:NA
  - DESC:reduce permissions for bundle dir to fix CVE-2021-41103


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-202
changelog:
  - Type:bugfix
  - ID:NA 
  - SUG:NA
  - DESC:Use fs.RootPath when mounting volumes for bundle dir to fix CVE-2022-23648


author: zhangzikang <zhangzikang@kylinos.cn> - 1.6.22-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add loong64 to THP patch, fix build error for loongarch64
         fix incorrect dates


author: Bo Wang<wangbob@uniontech.com> - 1.6.22-15.02
changelog:
  - feat: change default sandbox image to uos pause image
  - feat: change default cni bin dir
  - feat: change default SystemdCgroup to true


author: lijian<lijian2@kylinos.cn> - 1:1.1.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: eastb233 <xiezhiheng@huawei.com> - 7.3.0-20210628.41
changelog:
  - fix-PR83666-punt-BLKmode-when-expand_debug_expr.patch: New patch for bugfix
  - fix-AArch64-128-bit-immediate-ICEs.patch: Likewise
  - gcc.spec: Add new patch


author: kkz <zhaoshuang@uniontech.com> - 7.3.0-48
changelog:
  - Add patch Remove-_GLIBCXX_USE_INT128-autoconf-macro.patch to resolve int128 related compile issue
  - refer to https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=ad0a3be4df5eecc79075d899fd79179d0f61270e
             https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff;h=29a9de9b40277af98515eabebb75be1f154e9505
             https://www.mail-archive.com/gcc-patches@gcc.gnu.org/msg259436.html


author: liyancheng <412998149@qq.com> - 7.3.0-2020033101.50
changelog:
  - Add-bolt-linker-plugin.patch: New file
  - Enable-BOLT-linker-plugin-on-aarch64.patch: New file
  - gcc.spec: Add new patches, enable bolt plugin on aarch64.


author: yanglongkang <yanglongkang@huawei.com> - 2.3.3-4
changelog:
  - add buildrequire gcc
    add make check
    backport upstream patches to solve several problems -epoch2


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-Check-segment-gaps-regardless-of-heap-space.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-Fix-posible-buffer-overflows-in-LUKS-conversion.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-Fix-a-memleak-in-blockwise-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-CVE-2021-4122.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-Check-segment-gaps-regardless-of-heap-space.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-Fix-posible-buffer-overflows-in-LUKS-conversion.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-Fix-a-memleak-in-blockwise-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-CVE-2021-4122.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-4
changelog:
  - patch: Fix reencryption for custom devices with data segments
    set to use cipher_null.
  - Resolves: #1927409


author: Ondrej Kozina <okozina@redhat.com> - 2.3.7-1
changelog:
  - update to cryptsetup 2.3.7
  - fixes CVE-2021-4122
  - patch: Fix suboptimal optimization in bundled argon2.
  - patch: Fix bogus memory allocation/device read with
           invalid LUKS2 headers
  - patch: Fix typo in luksRepair prompt.
  - Resolves: #2021815 #2022301 #2031859


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-4
changelog:
  - Type:cves
  - ID:CVE-2020-27840 CVE-2021-20277 CVE-2021-20254
  - SUG:NA
  - DESC:fix CVE-2020-27840 CVE-2021-20277 CVE-2021-20254


author: zengwefeng <zwfeng@huawei.com> - 4.11.12-5
changelog:
  - Type:cves
  - ID:CVE-2020-14318 CVE-2020-14323 CVE-2020-14383
  - SUG:NA
  - DESC:fix CVE-2020-14318 CVE-2020-14323 CVE-2020-14383


author: xihaochen <xihaochen@huawei.com> - 4.11.12-7
changelog:
  - Type:cves
  - ID:CVE-2020-25717,CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738
  - SUG:NA
  - DESC:fix CVE-2020-25717,CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-8
changelog:
  - Type:cves
  - ID:CVE-2021-43566
  - SUG:NA
  - DESC:backport patches to fix CVE-2021-43566:
         s3/lib: add parent_smb_fname function
         smbd: use parent_smb_fname in check_parent_access
         smbd: use parent_smb_fname in inherit_new_acl
         s3/VFS: Add SMB_VFS_MKDIRAT
         vfs_full_audit: pass conn to smb_fname_str_do_log
         s3/VFS: change connection_struct cwd_fname to cwd_fsp
         s3/smbd: Change mkdir_internal to call SMB_VFS_MKDIRAT
         smbd: use parent_smb_fname in mkdir_internal
         fix CVE-2021-43566


author: xinghe <xinghe@h-partners.com> - 4.11.12-12
changelog:
  - Type:cves
  - CVE:CVE-2022-32746 CVE-2022-32744 CVE-2022-2031 CVE-2022-32742
  - SUG:NA
  - DESC:fix CVE-2022-32746 CVE-2022-32744 CVE-2022-2031 CVE-2022-32742


author: xinghe <xinghe2@h-partners.com> - 4.11.12-30
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966 CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: yuxiaojun <yuxiaojun@uniontech.com> - 2.2.13-17.up4
changelog:
  - rebuild
  - feat:merge uts01
  - fix: cups autostart when enabled (bugid:161411)
  - fix build error for UnionTech


author: gaoxingwang<gaoxingwang@huawei.com> - 7.71.1-12
changelog:
  - Type:CVE
  - CVE:CVE-2021-22922 CVE-2021-22923
  - SUG:NA
  - DESC:disable metalink to fix CVE-2021-22922 and CVE-2021-22923


author: yanglu <yanglu72@huawei.com> - 7.71.1-11
changelog:
  - Type:CVE
  - CVE:CVE-2021-22945 CVE-2021-22946 CVE-2021-22947
  - SUG:NA
  - DESC:fix CVE-2021-22945 CVE-2021-22946 CVE-2021-22947


author: gaihuiying <eaglegai@163.com> - 7.71.1-13
changelog:
  - Type:cves
  - CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
  - SUG:NA
  - DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776


author: gaihuiying <eaglegai@163.com> - 7.71.1-15
changelog:
  - Type:cves
  - CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
  - SUG:NA
  - DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208


author: gaihuiying <eaglegai@163.com> - 7.71.1-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix build error when add --disable-http-auth configure option


author: xingwei <xingwei14@h-partners.com> - 7.71.1-23
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: liyanan <liyanan32@huawei.com> - 2.1.27-13
changelog:
  - Split cyrus-sasl-ldap cyrus-sasl-gs2 cyrus-sasl-scram cyrus-sasl-gssapi
    cyrus-sasl-md5 cyrus-sasl-ntlm cyrus-sasl-plain sub-package


author: Carl George <carl@george.computer> - 3.6.4-11
changelog:
  - Backport fix for CVE-2021-41687/CVE-2021-41688/CVE-2021-41690, resolves rhbz#2106336/rhbz#2106315/rhbz#2106332
  - Backport fix for CVE-2021-41689, resolves rhbz#2106340
  - Backport fix for CVE-2022-2119/CVE-2022-2120/CVE-2022-2121, resolves rhbz#2173039/rhbz#2173042/rhbz#2173045
  - Backport fix for CVE-2022-43272, resolves rhbz#2150931
  - Use bundled charls (Ankur Sinha)


author: lichao <lichaod@uniontech.com> - 1.0.47-1.01
changelog:
  - update: update to 1.0.47
  - spec: limit opencv BuildRequires
  - fix: fix incorrect pkg replacing relation(bugid:219967)
  - spec: sw BuildRequires: opencv


author: zhoushuiqing <zhoushuiqing2@huawei.com> - 3.6.2-5
changelog:
  - Type:CVE
  - CVE:CVE-2005-1849,CVE-2016-9840,CVE-2016-9841,CVE-2016-9843,CVE-2018-25032,CVE-2022-37434
  - SUG:NA
  - DESC:backport patchs fix zlib cves: CVE-2005-1849 CVE-2016-9840
         CVE-2016-9841 CVE-2016-9843 CVE-2018-25032 CVE-2022-37434
         backport-fix-CVE-2005-1849.patch
         backport-fix-CVE-2016-9840.patch
         backport-fix-CVE-2016-9841.patch
         backport-fix-CVE-2016-9843.patch
         backport-fix-CVE-2018-25032.patch
         backport-fix-CVE-2022-37434-1.patch
         backport-fix-CVE-2022-37434-2.patch


author: zhaoshuang <zhaoshuang@uniontech.com> - 8.2.03.09-12.up1
changelog:
  - Sync from openEuler-20.03-LTS-SP3
  - keep UOS modify
  -    1: enable dlm lock
  -    2: uos patch fix messages error


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-5
changelog:
  - Exit with error when --devicesfile used does not exist.
  - Additional important fixes from upstream up to commit 3b0f9ce.


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-8
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC: Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: zhangxingrong <zhangxingrong@uniontech.com> - 12:4.4.2-9.01
changelog:
  - cve: CVE-2022-2795 CVE-2022-38177 CVE-2020-8623 CVE-2020-8622  CVE-2020-8625 
  - cve: CVE-2020-8624 CVE-2022-38178  CVE-2020-8619 CVE-2020-8617 CVE-2020-8616


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-9
changelog:
  - Type:cves
  - ID:CVE-2022-2928, CVE-2022-2929
  - SUG:restart
  - DESC: Fix CVE-2022-2928 and CVE-2022-2929


author: Roberto Sassu <roberto.sassu@huawei.com> - 0.3.94-1
changelog:
  - Add obj_label attribute in file list
  - Replace hard coded permission
  - Set user.digest_list xattr
  - Bug fixes


author: gaihuiying <gaihuiying1@huawei.com> - 4.2.23-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix errors when use "yum module remove --all per:common" command
         fix test test_mode_tty failed


author: gaihuiying <gaihuiying1@huawei.com> - 4.2.23-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove recommends rpm-plugins-systemd-inhibit
         backport community patches and fix CVE-2021-3445
         delete duplicate python3-libdnf dependency


author: mahailiang <mahailiang@uniontech.com> - 4.2.23-8.up2
changelog:
  - refactor: delete --with-cve --with-bug
  - spec: remove 0001-dnf-uos-modify-yum-updateinfo-list.patch


author: mahailiang <mahailiang@uniontech.com> - 4.7.0-8.0.1.06
changelog:
  - refactor: delete --with-cve --with-bug
  - refactor: delete  patch 10001-dnf-uos-modify-yum-updateinfo-list.patch


author: Richard W.M. Jones <rjones@redhat.com> - 4.7.0-10
changelog:
  - Backport fix for leaks of libsolv's page file descriptors in Base object
    resolves: rhbz#2087734
  - Include instructions for regenerating patches.


author: Lukas Hrazky <lhrazky@redhat.com> - 4.7.0-11
changelog:
  - [doc] Describe how gpg keys are stored for `repo_ggpcheck`
  - Add only relevant pkgs to upgrade transaction (RhBug:2097757)


author: liulong <liulong20@huawei.com> - 2.82-4
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2020-25681 CVE-2020-25682 CVE-2020-25683 CVE-2020-25684 CVE-2020-25685 CVE-2020-25686 
  CVE-2020-25687


author: zengwefeng <zwfeng@huawei.com> - 2.82-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add missing check for NULL return from allocate_rfd
         Fix DNS reply when asking for DNSSEC and a validated


author: gaihuiying <gaihuiying1@huawei.com> - 2.82-8
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: Handle caching with EDNS options better
          Fix to 75e2f0aec33e58ef5b8d4d107d821c215a52827c
          Fix for 12af2b171de0d678d98583e2190789e544440e02
          Fix problem with DNS retries in 2.83 2.84 version
          Simplify preceding fix
          Update to new struct frec fields in conntrack code
          Use the values of min port and max port in TCP connection
          Correct occasional bind dynamic synchronization
          Move fd into frec_src fixes 15b60ddf935a531269bb8c68
          fix CVE-2021-3448


author: zhangbowei<zhangbowei@kylinos.cn> - 25.0.3-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix bug by using docker-proxy in the source file to get better compatibility


author: jingrui<jingrui@huawei.com> - 18.09.0-105
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix include
    1. fix image cleanup failed.
    2. cleanup load tmp files.
    3. kill residual container process.
    4. resume suspend dm device.
    5. dont kill containerd during dockerd starting.
    6. handle exit event for restore failed container.
    7. wait io with timeout when start failed.
    8. support hostname mirror registry.
    9. mask unused proc files.


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. fix execCommands leak in health-check.
         2. check containerd pid before kill it.


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-201
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix Access to remapped root allows privilege escalation to real root (CVE-2021-21284)


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-202
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent an invalid image from crashing docker daemon(CVE-2021-21285)


author: chenjiankun<chenjiankun1@huawei.com> - 18.09.0-230
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix container exited after docker restart when processEvent hang


author: chenjiankun<chenjiankun1@huawei.com> - 18.09.0-231
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix "endpoint with name container_xx already exists in network none" error


author: chenjiankun <chenjiankun1@huawei.com> - 18.09.0-240
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Add an ExitPid field for State struct to record exit process id


author: DCCooper <1866858@gmail.com> - 18.09.0-244
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change runc original install location (/usr/local/bin --> /usr/bin) to fix compile problem


author: zhongjiawei<zhongjiawei1@huawei.com> - 18.09.0-253
changelog:
  - Type:CVE
  - CVE:CVE-2023-28840,CVE-2023-28841,CVE-2023-28842
  - SUG:NA
  - DESC:fix CVE-2023-28840,CVE-2023-28841,CVE-2023-28842


author: lvgenggeng <lvgenggeng@uniontech.com> 18.09.0-253.up2
changelog:
  - fix: disable pigz for docker pull error (bug:181023)
  - Change the spec file name to be the same as the repo name


author: chenjiankun<chenjiankun1@huawei.com> - 18.09.0-256
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:repalce unix.Rmdir with os.RemoveAll when remove mount point dir


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-104
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:don't deny all devices when update cgroup resource
         do not permit /proc mounts to non-directories
         fix permission denied


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. add cpu and memory info when print cgroup info
         2. fix freezing race


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-201
changelog:
  - Type:CVE
  - CVE:CVE-2021-30465
  - SUG:NA
  - DESC:add mount destination validation(fix CVE-2021-30465)


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-209
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Make sure signalAllProcesses is invoked in the function of destroy when container shares pid namespace


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 4.1-10
changelog:
  - backport patches to fix two memory leak problems, rename patch names,
    and set release num to 9 for CI.


author: chenyanpanHW <chenyanpan@huawei.com> - 4.1-11
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-Append-git-to-version-number.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-Turn-label-in-struct-DOS_FS-into-char-array-from-pointer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-Fix-printf-format-specifier-for-printing-label.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-Add-asprintf-wrapper.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-Add-get_line-function-to-read-user-input-in-canonica.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-Add-get_choice-function.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-Overhaul-interactive-prompts.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-Remove-get_key.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-fsck-Don-t-ask-whether-to-perform-changes-in-immediate-write-mode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-fsck-Make-prompts-asking-for-writing-changes-at-end-more-verbose-and-clear.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0011-fsck-Add-quit-choice-to-interactive-prompts.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0012-mkfs.fat.c-Change-misleading-comment-about-FAT32-selection.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0013-fsck-Clean-up-usage-message-a-little.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0014-fsck-Pass-the-exit-value-to-use-to-usage.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0015-fsck-Switch-to-getopt_long-option-parser-and-add-help-option.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0016-fsck.fat.h-Remove-extern-declarations-of-interactive-and-write_immed.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0017-mkfs-Link-with-common.c-and-use-its-die-implementation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0018-Move-all-three-check_atari-and-atari_format-definiti.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0019-Disable-legacy-check-for-68k-Atari-by-default.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0020-manpages-configure.ac-Correct-description-of-Atari-format-selection.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0021-manpages-Rework-the-intro-of-the-mkfs-man-page.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0022-mkfs-fsck-Add-variant-TYPE-command-line-option.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0023-mkfs-List-all-options-with-short-descriptions-in-help-message.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0024-add-missing-n.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0025-Fix-signed-integer-overflow-in-FSTART.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0026-Warn-that-r-is-useless-with-FAT32-filesystems.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0027-fatlabel-Change-option-parsing-to-getopt_long.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0028-fatlabel-Expand-help-message-by-description-and-options.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0029-Read-volume-ID-in-read_boot.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0030-Make-fs_open-path-argument-const-char.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0031-Add-write_serial-function.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0032-fatlabel-Implement-volume-ID-mode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0033-fatlabel-Fix-parsing-volume-ID.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0034-mkfs-Handle-n-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0035-fatlabel-Fix-erasing-label.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0036-Avoid-returning-deleted-directory-entries-as-labels.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0037-Terminate-volume-label-search-at-end-of-directory.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0038-Remove-leftover-handling-of-split-directory-entry-name.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0039-Handle-0xe5-as-first-character-of-volume-label.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0040-fatlabel-Refuse-empty-strings-as-labels.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0041-Add-remove_label-function.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0042-Move-generation-of-serial-number-into-new-function-generate_volume_id.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0043-fatlabel-Don-t-access-element-of-argv-array-that-may-not-exist.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0044-fatlabel-Add-new-r-reset-option.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0045-Harmonize-unknown-command-line-option-handling.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0046-manpages-Make-SEE-ALSO-sections-conform-to-conventios.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0047-manpages-Clarify-rules-for-volume-labels-as-implemented.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0048-manpages-Remove-formatting-from-NAME-sections-where-it-doesnot-belong.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0049-src-check.c-Fix-up-mtools-created-bad-dir-entries.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0050-mkfs-Check-volume-label-given-with-n-is-no-longer-than-11-characters.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0051-fatlabel-Show-only-label-stored-in-root-directory.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0052-fatlabel-Print-label-without-padding-spaces.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0053-fatlabel-Clear-ATTR_VOLUME-from-directory-entry-when-removing-label.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0054-fatlabel-Optimize-size-of-the-binary.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0055-manpages-Add-section-COMPATIBILITY-and-BUGS-to-fatlabel.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0056-fsck.fat-Handle-0xe5-as-first-character-of-directory-entry.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0057-mkfs.fat-Correctly-process-0xe5-as-first-character-of-directory-entry.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0058-Remove-long-file-name-when-changing-short-file-name.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0059-Fix-gcc-sprintf-length-warnings.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0060-fsck.fat-Fix-Year-2038-Bug.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0061-mkfs.fat-Fix-parsing-of-block-number.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0062-device_info-Fix-parsing-partition-number.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0063-Fix-memory-leaks-in-read_fat-function.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: uoser <uoser@uniontech.com> - 4.1-11.up1
changelog:
  - Type:bugfix
  - ID:PMS47511
  - SUG:NA
  - DESC:sync upstream patch from profession edition
    Add Patches:0001-Append-git-to-version-number.patch
                0002-Turn-label-in-struct-DOS_FS-into-char-array-from-pointer.patch
                0003-Fix-printf-format-specifier-for-printing-label.patch
                0004-Add-asprintf-wrapper.patch
                0005-Add-get_line-function-to-read-user-input-in-canonica.patch
                0006-Add-get_choice-function.patch
                0007-Overhaul-interactive-prompts.patch
                0008-Remove-get_key.patch
                0009-fsck-Don-t-ask-whether-to-perform-changes-in-immediate-write-mode.patch
                0010-fsck-Make-prompts-asking-for-writing-changes-at-end-more-verbose-and-clear.patch
                0011-fsck-Add-quit-choice-to-interactive-prompts.patch
                0012-mkfs.fat.c-Change-misleading-comment-about-FAT32-selection.patch
                0013-fsck-Clean-up-usage-message-a-little.patch
                0014-fsck-Pass-the-exit-value-to-use-to-usage.patch
                0015-fsck-Switch-to-getopt_long-option-parser-and-add-help-option.patch
                0016-fsck.fat.h-Remove-extern-declarations-of-interactive-and-write_immed.patch
                0017-mkfs-Link-with-common.c-and-use-its-die-implementation.patch
                0018-Move-all-three-check_atari-and-atari_format-definiti.patch
                0019-Disable-legacy-check-for-68k-Atari-by-default.patch
                0020-manpages-configure.ac-Correct-description-of-Atari-format-selection.patch
                0021-manpages-Rework-the-intro-of-the-mkfs-man-page.patch
                0022-mkfs-fsck-Add-variant-TYPE-command-line-option.patch
                0023-mkfs-List-all-options-with-short-descriptions-in-help-message.patch
                0024-add-missing-n.patch
                0025-Fix-signed-integer-overflow-in-FSTART.patch
                0026-Warn-that-r-is-useless-with-FAT32-filesystems.patch
                0027-fatlabel-Change-option-parsing-to-getopt_long.patch
                0028-fatlabel-Expand-help-message-by-description-and-options.patch
                0029-Read-volume-ID-in-read_boot.patch
                0030-Make-fs_open-path-argument-const-char.patch
                0031-Add-write_serial-function.patch
                0032-fatlabel-Implement-volume-ID-mode.patch
                0033-fatlabel-Fix-parsing-volume-ID.patch
                0034-mkfs-Handle-n-correctly.patch
                0035-fatlabel-Fix-erasing-label.patch
                0036-Avoid-returning-deleted-directory-entries-as-labels.patch
                0037-Terminate-volume-label-search-at-end-of-directory.patch
                0038-Remove-leftover-handling-of-split-directory-entry-name.patch
                0039-Handle-0xe5-as-first-character-of-volume-label.patch
                0040-fatlabel-Refuse-empty-strings-as-labels.patch
                0041-Add-remove_label-function.patch
                0042-Move-generation-of-serial-number-into-new-function-generate_volume_id.patch
                0043-fatlabel-Don-t-access-element-of-argv-array-that-may-not-exist.patch
                0044-fatlabel-Add-new-r-reset-option.patch
                0045-Harmonize-unknown-command-line-option-handling.patch
                0046-manpages-Make-SEE-ALSO-sections-conform-to-conventios.patch
                0047-manpages-Clarify-rules-for-volume-labels-as-implemented.patch
                0048-manpages-Remove-formatting-from-NAME-sections-where-it-doesnot-belong.patch
                0049-src-check.c-Fix-up-mtools-created-bad-dir-entries.patch
                0050-mkfs-Check-volume-label-given-with-n-is-no-longer-than-11-characters.patch
                0051-fatlabel-Show-only-label-stored-in-root-directory.patch
                0052-fatlabel-Print-label-without-padding-spaces.patch
                0053-fatlabel-Clear-ATTR_VOLUME-from-directory-entry-when-removing-label.patch
                0054-fatlabel-Optimize-size-of-the-binary.patch
                0055-manpages-Add-section-COMPATIBILITY-and-BUGS-to-fatlabel.patch
                0056-fsck.fat-Handle-0xe5-as-first-character-of-directory-entry.patch
                0057-mkfs.fat-Correctly-process-0xe5-as-first-character-of-directory-entry.patch
    Del Patches:0000-Fix-signed-integer-overflow-in-FSTART.patch
                0001-Avoid-returning-deleted-directory-entries-as-labels.patch
                0002-src-check.c-Fix-up-mtools-created-bad-dir-entries.patch
                0009-Turn-label-in-struct-DOS_FS-into-char-array-from-poi.patch
    Rename Patches:0003-Remove-long-file-name-when-changing-short-file-name.patch -->0058-Remove-long-file-name-when-changing-short-file-name.patch
                   0004-Fix-gcc-sprintf-length-warnings.patch----------------------->0059-Fix-gcc-sprintf-length-warnings.patch
                   0005-fsck.fat-Fix-Year-2038-Bug.patch---------------------------->0060-fsck.fat-Fix-Year-2038-Bug.patch


author: konglidong <konglidong@uniontech.com> - 4.1-11.up2
changelog:
  - DESC: sync from openEuler-20.03-LTS-SP2
    Add patchs:0061-mkfs.fat-Fix-parsing-of-block-number.patch
               0062-device_info-Fix-parsing-partition-number
               0063-Fix-memory-leaks-in-read_fat-function


author: jiangheng <jiangheng14@huawei.com> - 19.11-22
changelog:
  - gro: fix chain index for more than 2 packets
  - gro: trim tail padding bytes
  - gro: check payload length after trim


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 1.45.6-8
changelog:
  - DESC: fix three issues:
    - e2fsck: exit journal recovery when find EIO, ENOMEM errors
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4RZUT?from=project-issue
    - e2fsck: exit journal recovery when jounral superblock fails to update
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4S0SD?from=project-issue
    - e2fsck: add env param E2FS_UNRELIABLE_IO to fix unreliable io case
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4RZVX?from=project-issue


author: wuguanghao<wuguanghao3@huawei.com> - 1.45.6-4
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-e2fsprogs-set-hugefile-from-4T-to-1T-in-hugefile-tes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-e2fsck-fix-off-by-one-check-when-validating-depth-of.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-mke2fs-fix-up-check-for-hardlinks-always-false-if-in.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-add-device-check-in-ismount-process.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-libss-add-newer-libreadline.so.8-to-dlopen-path.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-e2fsck-fix-indexed-dir-rehash-failure-with-metadata_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-libext2fs-retry-reading-superblock-on-open-when-chec.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-libext2fs-fix-potential-buffer-overrun-in-__get_dire.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-tune2fs-reset-MMP-state-on-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-e2fsck-use-size_t-instead-of-int-in-string_copy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0011-libext2fs-fix-incorrect-negative-error-return-in-uni.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0012-debugfs-fix-double-free-in-realloc-error-path-in-rea.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0013-tune2fs-fix-resource-leak-in-handle_quota_options.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0014-libext2fs-fix-UBSAN-warning-in-ext2fs_mmp_new_seq.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0015-libext2fs-fix-segault-when-setting-an-xattr-with-an-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0016-mke2fs-fix-a-importing-a-directory-with-an-ACL-and-i.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0017-mke2fs-fix-resource-leak-on-error-path-when-creating.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0018-libext2fs-fix-incorrect-error-code-return-in-ext2fs_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0019-debugfs-fix-memory-allocation-failures-when-parsing-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0020-debugfs-fix-logdump-on-file-systems-with-block-sizes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0021-libext2fs-fix-crash-when-ext2fs_mmp_stop-is-called-b.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0022-debugfs-fix-dump_metadata_block-for-block-sizes-8192.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0023-debugfs-fix-memory-leak-problem-in-read_list.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0024-debugfs-fix-rdump-and-ls-to-handle-uids-and-gids-655.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0025-e2image-fix-overflow-in-l2-table-processing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0026-e2fsck-fix-last-mount-write-time-when-e2fsck-is-forc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0027-profile_create_node-set-magic-before-strdup-name-to-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0028-tdb_transaction_recover-fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0029-zap_sector-fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0030-misc-fix-potential-segmentation-fault-problem-in-sca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0031-ext2ed-fix-potential-NULL-pointer-dereference-in-dup.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0032-ss_add_info_dir-fix-error-handling-when-memory-alloc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0033-ss_create_invocation-fix-error-handling-when-memory-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0034-ss_create_invocation-fix-potential-unititalized-refe.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0035-libext2fs-fix-unexpected-NULL-variable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0036-libsupport-fix-potental-NULL-pointer-dereferences-in.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0037-libext2fs-fix-coverity-nits-in-tdb.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0038-e2fsck-exit-journal-recovery-when-find-EIO-ENOMEM-er.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0039-e2fsck-exit-journal-recovery-when-jounral-superblock.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0040-e2fsck-add-env-param-E2FS_UNRELIABLE_IO-to-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0041-e2fsck-do-not-clean-up-file-acl-if-the-inode-is-trun.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0042-e2fsck-handle-level-is-overflow-in-ext2fs_extent_get.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0043-libext2fs-add-sanity-check-to-extent-manipulation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequire git


author: yexiao<yexiao7@huawei.com> - 202002-17
changelog:
  - fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727


author: yexiao<yexiao7@huawei.com> - 202002-19
changelog:
  - fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: zhangxianting <zhangxianting@uniontech.com> - 202002-19.04
changelog:
  - feat: Support hygon CSV3 feature
  - fix: check sev before csv that will read MSR_SEV_STATUS, but some hardware platforms do not have MSR_SEV_STATUS MSR.(bugid:252205)


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 0.9.3-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:use local cert, add coredns checker, add list command, update cert of ca


author: panxiaohe <panxiaohe@huawei.com> - 0.180-3
changelog:
  - detach subpackages elfutils-libs, elfutils-libelf,
    elfutils-libelf-devel, elfutils-default-yama-scope


author: panxiaohe <panxh.life@foxmail.com> - 0.180-8
changelog:
  - Get instance correctly for eu-ar -N option
  - Use make macros
  - Use upstream patch for no stdin flag


author: fuanan <fuanan3@h-partners.com> - 0.180-9
changelog:
  - Fix "/usr/lib64/libdebuginfod.so.1" not found when uninstall elfutils-debuginfod-client-devel
  - Fix Obsoletes in spec


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch
  - Add an explicit versioned requires from elfutils-debuginfod-client
    on elfutils-libs and elfutils-libelf.
  - Remove brew testsuite workarounds


author: wangkerong <wangkerong@huawei.com> - 1:27.1-5
changelog:
  - Type: improvement
  - DESC: use /usr/bin/make -O -j64 V=1 VERBOSE=1 instead of make for building bootstrap


author: yangcheng <yangcheng87@huawei.com> - 1:27.1-6
changelog:
  - fixed the upgrade error caused by the info file in the emacs-common software package being repackaged


author: wangkerong <wangkerong@huawei.com> - 1:27.1-5
changelog:
  - Type: improvement
  - DESC: use /usr/bin/make -O -j96 V=1 VERBOSE=1 instead of make for building bootstrap


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29463 CVE-2021-29464 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29463,CVE-2021-29464,CVE-2021-29473


author: wangjie <wangjie375@huawei.com> - 2.2.9-4
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.2.9-6
changelog:
  - Type:CVE
  - ID:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: wangkai <wangkai385@huawei.com> - 1.0.6-20
changelog:
  - Rebuild for fix log4j1.x cves

   * Thu Mar 5 2020 wangzhishun <wangzhishun1@huawei.com> - 1.0.6-19
   - Package init


author: happyworker <208suo@208suo.com> - 4.2.4-23
changelog:
  - Fix CVE-2020-22026/CVE-2020-22019/CVE-2020-22021/CVE-2020-22038/CVE-2020-22039/CVE-2020-22044/CVE-2020-22043


author: happyworker <208suo@208suo.com> - 4.2.4-24
changelog:
  - Fix CVE-2021-38090/CVE-2020-21697/CVE-2020-22042/CVE-2020-21688/CVE-2020-22037/CVE-2020-22051/CVE-2020-22020/CVE-2025-22921/CVE-2025-22919


author: xu_ping <xuping33@huawei.com> - 3.0.3.32900-9
changelog:
  - Fix connect linking to web database by modifying the firebird.conf items to make client and server compatible


author: lvfei <lvfei@kylinos.cn> - 79.0-12
changelog:
  - Fix for expat CVE-2021-45960 CVE-2021-46143
    CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: wangxiao <wangxiao65@huawei.com> - 79.0-4
changelog:
  - Fix CVE-2020-15664 CVE-2020-15665 CVE-2020-15666 CVE-2020-15667
    CVE-2020-15668 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678


author: wangxiao <wangxiao65@huawei.com> - 79.0-5
changelog:
  - Fix CVE-2020-15969 CVE-2020-15999 CVE-2020-16012 CVE-2020-26951
    CVE-2020-26953 CVE-2020-26956 CVE-2020-26957 CVE-2020-26958
    CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26963
    CVE-2020-26965 CVE-2020-25966 CVE-2020-26967


author: zhouyihang <zhouyihang3@h-partners.com> - 0.6.6-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 2.6.4-3
changelog:
  - The autoreconf command is used during compilation.
    Therefore,the automake and autoconf compilation dependencies need to added.


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7
  - Fix CVE-2024-32039,CVE-2024-32040,CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460


author: Richard Hughes <richard@hughsie.com> 1.5.5-2
changelog:
  - Do not invalidate all remote timestamps during package install to fix rpm -V.
  - Backport some important high priority fixes from upstream.
  - Resolves: #1926382


author: Richard Hughes <richard@hughsie.com> 1.5.9-3
changelog:
  - Rebase to include the SBAT metadata section to allow fixing BootHole
  - Resolves: rhbz#1933012
  - Resolves: rhbz#1932953
  - Resolves: rhbz#1932909
  - Resolves: rhbz#1932882
  - Resolves: rhbz#1932579
  - Resolves: rhbz#1932553
  - Resolves: rhbz#1932423


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport upstream changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1969472
  - Resolves: rhbz#1976408


author: Richard Hughes <richard@hughsie.com> 1.7.1-2
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Resolves: rhbz#2029333


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Resolves: rhbz#2038258
  - Resolves: rhbz#2037294


author: jiangheng <jiangheng14@huawei.com> - 1.0.1-12
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:update readme
         fix some bugs
         refactor pkt read send to improve performance
         refactoe kernle event to improve performanc


author: jiangheng <jiangheng14@huawei.com> - 1.0.1-13
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:modify eth_dev_ops to lstack_eth_dev_ops
         adapt dpdk19.11


author: kircher <majun65@huawei.com> - 1.0.1-53
changelog:
  - when send ring full whether dynamic alloc mbuf is configurable reduce cpu usage when send ring full
  - send should return -1, errno EAGAIN when ring full
  - send ring size is configure
  - remove rxtx driver cache
  - fix do_close core dump
  - fix private data offset error


author: jiangheng <jiagheng14@huawei.com> - 1.0.1-54
changelog:
  - add pbuf lock when aggregate pbuf
  - support multi process
  - add gazellectl x to show nic stats
  - add same node ring for inter process communication
  - fix send reset by peer when not sleep after connect
  - add tuple_filter in conf to diff rss rule and tuple filter
  - support tuple rule add/delete


author: kircher <majun65@huawei.com> - 1.0.1-58
changelog:
  - do not transfer broadcast arp pkts to other process
  - waiting when primary process not start already
  - gazelle send/recv thread bind numa


author: kircher <majun65@huawei.com> - 1.0.1-59
changelog:
  - optimite select_path and pbuf_take
  - check primary process idx and secondary lstack num
  - sepeate_string_to array add error args handle
  - revert select_thread_path and optimize app thread when sendmsg


author: jiangheng12 <jiangheng14@huawei.com> - 1.0.1-60
changelog:
  - add socket check before write it
  - set kni_switch valid only in primary process
  - fix build err on select_path


author: jiangheng12 <jiangheng14@huawei.com> - 1.0.1-61
changelog:
  - fix gazellectl -x error when multiplt user nic config
  - update lstack.Makefile
  - fix config flow rule race
  - optimize do_close
  - fix client connect number unbalance on lstack


author: jiangheng12 <jiangheng14@huawei.com> - 1.0.1-62
changelog:
  - fix bond_ports parse error fix socket_mem parse error when the value exceeds 65536 exit if create_rxtx_pktmbuf failed build.sh build failed return 1 clean code
  - add udp protocol support in example
  - add parentheses to fix build error
  - fix rpc msg alloc failed fix process_numa args error coredump fix sock->conn not free when fd is kernel mode
  - kni down not stop nic
  - set client nonblock to fix example connect error


author: kircher <majun65@huawei.com> - 1.0.1-63
changelog:
  - add udp multicast support in gazelle
  - clean code
  - add bond4 suport
  - dfx: security function failed, return error directly
  - dfx: set g_unix_fd to -1 after abnormal close fd to avoid double close


author: hugel <gengqihu2@h-partners.com> - 9.52-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Sync some patches from community
         backport-Fix-memory-leak-in-pdfwrite-device.patch
         backport-Fix-memory-leak-on-error-in-bitmap_paint-and-its-cal.patch
         backport-Fix-memory-leaks-in-tiffsep.patch


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.27.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolved the problem that a failure message is displayed when the git-daemon package is uninstalled


author: panxiaohe <panxiaohe@huawei.com> - 2.27.0-4
changelog:
  - Fix CVE-2021-29468
  - Add gcc and gettext to BuildRequires
    - necessary for building and msgfmt command


author: fuanan <fuanan3@h-partners.com> - 2.27.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.27.0-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.27.0-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.27.0-19
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.27.0-25
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA 
  - DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: gaihuiying <gaihuiying1@huawei.com> - 2.23.0-16
changelog:
  - Type:cves
  - ID:CVE-2020-11008
  - SUG:NA
  - DESC:fix CVE-2020-11008
         credential: detect unrepresentable values when parsin urls
         fsck: detect gitmodules URLs with embedded newlines


author: yangcheng <yangcheng87@huawei.com> - 2.66.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESE:remove the installation dependency of the main pakage on the help package


author: lvgenggeng <lvgenggeng@uniontech.com> - 2.28-101.07
changelog:
  - cve: CVE-2024-33599
  - cve: CVE-2024-33600
  - cve: CVE-2024-33601
  - cve: CVE-2024-33602
  - cve: CVE-2024-2961
  - build: sync from openEuler-20.03-LTS-SP4


author: Yang yanchao <yangyanchao6@huawei.com> - 2.28-83
changelog:
  - iconv: revert Add missing brackets
    Rewrite iconv option parsing [BZ #19519]
    intl: Handle translation output codesets with suffixes [BZ #26383]


author: wanglimin<wanglimin@xfusion.com> - 3.30.1-4
changelog:
  - fix msg error in zh_CN.po for page files of index, a11y-*,
  - about-*,accounts-*,backup-*,bluetooth-*,clock-*,color-*,
  - contacts-*,disk-*


author: wanglimin<wanglimin@xfusion.com> - 3.30.1-5
changelog:
  - fix msg error in zh_CN.po for page files of :
  - files-*,gnome-*,hardware-*,help-*,keyboard-*,look-*,mouse-*


author: wanglimin<wanglimin@xfusion.com> - 3.30.1-7
changelog:
  - fix msg error in zh_CN.po for page files of :
  - power-*,prefs-*,printing-*,privacy-*,screen-*,session-*,sharing-*
  - shell-*,sound-*,status-*,tips-*,user-*,video-*,wacom-*
  - append some missing msg


author: chenjiankun <chenjiankun1@huawei.com> - 1.15.7-5
changelog:
  - fix CVE-2021-33195,CVE-2021-33196,CVE-2021-33197,CVE-2021-33198,CVE-2021-34558,CVE-2021-29923,CVE-2021-38297,CVE-2021-36221


author: hanchao<hanchao47@huawei.com> - 1.15.7-14
changelog:
  - fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
    CVE-2022-30635,CVE-2022-30632,CVE-2022-28131,
    CVE-2022-30631,CVE-2022-30629,CVE-2022-30634


author: hanchao<hanchao47@huawei.com> - 1.15.7-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: golang: modify the golang.spec to remove unnecessary files
  	from golang-help package


author: hanchao<hanchao47@huawei.com> - 1.15.7-21
changelog:
  - Type:CVE
  - CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
  - SUG:NA
  - DESC:fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879


author: hanchao <hanchao47@huawei.com> - 1.15.7-24
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
  - SUG:NA
  - DESC:fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725


author: hanchao <hanchao47@huawei.com> - 1.15.7-25
changelog:
  - Type:CVE
  - CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
  - SUG:NA
  - DESC:fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: hanchao <hanchao63@huawei.com> - 1.15.7-27
changelog:
  - Type:CVE
  - CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
  - SUG:NA
  - DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540


author: hanchao <hanchao63@huawei.com> - 1.15.7-28
changelog:
  - Type:CVE
  - CVE:CVE-2023-29402,CVE-2023-29404,CVE-2023-29405
  - SUG:NA
  - DESC: fix CVE-2023-29402,CVE-2023-29404,CVE-2023-29405


author: luoyujie <luoyujie5@huawei.com> - 1.15.7-34
changelog:
  - Type:CVE
  - CVE:CVE-2023-39318,CVE-2023-39319
  - SUG:NA
  - DESC:fix CVE-2023-39318 and CVE-2023-39319


author: hanchao <hanchao63@huawei.com> - 1.15.7-39
changelog:
  - Type:CVE
  - CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
  - SUG:NA
  - DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-42
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters


author: gaihuiying <eaglegai@163.com> - 1.31.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix adjust to abseil-cpp 20210324,since it dont provides absl_dynamic_annotations library anymore


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport the patches that upstream community released on
         March 2, 2021


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport some patches from upstream community and fix incorrect
         author names in patches


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:delete the Symbolic Link of grubenv in grub2-efi-x64 and grub-efi-aa64 packages


author: chenjirong<chenjirong@huawei.com> - 2.04-24
changelog:
  - Type:CVE
  - CVE:CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696
  - SUG:NA
  - DESC:fix CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696


author: wanglu<wanglu210@huawei.com> - 1:2.04-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tests: Disable blkid cache usage
         disk/efi/efidisk: Pass buffers with higher ailgnment


author: wangce <wangce@uniontech.com> - 1:2.04-27.up5
changelog:
  - fix: 9008-amend-10_linux-and-delete-advance.patch(bugid:165463)
  - fix: deltel 9008-grub-add-load_background patch(bugid:165463)
  - fix: amend uosEuler and UnionTech directory update uos(bugid:193879)
  - fix: amend efi directory UnionTech to uos (bugid:193879)
  - add UnionTech patchs


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disk/diskfilter: Check calloc() result for NULL
         kern/buffer: Handle NULL input pointer in grub_buffer_free()
         disk/diskfilter: Don't make a RAID array with more than 1024 disks
         loader/multiboot_elfxx: Fix memory leak
         loader/linux: Ensure the newc pathname is NULL-terminated
         term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
         normal/cmdline: Fix two related integer underflows
         fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
         fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
         fs/xfs: Fix memory leaks in XFS module
         kern/file: Fix error handling in grub_file_open()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-32
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
         net/bootp: Fix unchecked return value
         fs/iso9660: Avoid reading past the entry boundary
         fs/iso9660: Incorrect check for entry boundary
         fs/iso9660: Prevent skipping CE or ST at start of continuation area
         fs/iso9660: Prevent read past the end of system use area
         fs/iso9660: Add check to prevent infinite loop
         gentpl.py: Remove .interp section from .img files
         kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
         font: Reject fonts with negative max_char_width or max_char_height
         font: Assign null_font to unknown_glyph
         font: Check return value of grub_malloc() in ascii_glyph_lookup()


author: Funda Wang <fundawang@yeah.net> - 1.16.2-6
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: xinghe <xinghe2@h-partners.com> - 2.2.16-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: caodongxia <caodongxia@huawei.com> - 1.8.20-12
changelog:
  - add sub packages hdf5-openmpi-static, hdf5-openmpi-devel, hdf5-openmpi,
  - hdf5-mpich-static, hdf5-mpich-devel, hdf5-mpich


author: yaoxin <yaoxin30@h-parters.com> - 1.12.1-1
changelog:
  - Update to 1.12.1 and fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-8
changelog:
  - Type:cves
  - ID:CVE-2021-26690
  - SUG:NA
  - DESC:fix CVE-2021-26690
         modify version number in changelog


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-9
changelog:
  - Type:cves
  - ID:CVE-2021-34798 CVE-2021-36160 CVE-2021-40438
  - SUG:restart
  - DESC:fix CVE-2021-34798 CVE-2021-36160 CVE-2021-40438


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-10
changelog:
  - Type:cves
  - ID:CVE-2021-40438 CVE-2021-39275
  - SUG:restart
  - DESC:fix CVE-2021-40438 fully and correctly
         fix CVE-2021-39275


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix int overflow in ap_timeout_parameter_parse
         Improve fix to please a fuzzer int overflow


author: gaihuiying <eaglegai@163.com> - 2.4.43-14
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934


author: chenzhitao <chenzhitao8@huawei.com> - 2.4.43-16
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-28614 CVE-2022-26377 CVE-2022-30522 CVE-2022-28615  CVE-2022-31813


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-21
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:restart
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.43-24
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-25
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: Parag Nemade <pnemade AT redhat DOT com> - 1.4.0-1
changelog:
  - Update to 1.4.0 release
  - Update hunspell dictionary directory path
    https://fedoraproject.org/wiki/Changes/Hunspell_dictionary_dir_change
  - Added CI tests


author: chengzeruizhi <chengzeruizhi@huawei.com> - 2.0.10-11
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: fixed a bug that occurs when starting a container in host mode


author: zhangxiaoyu <zhangxiaoyu58@huawei.com> - 2.0.14-6
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: fix different type convert and add check to arguments


author: zhangxiaoyu <zhangxiaoyu58@huawei.com> - 2.0.14-7
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: fix type convert, add null pointer check, remove unuse macro


author: yangjiaqi <yangjiaqi16@huawei.com> - 2.0.17-10
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: remove chmod 751 permission for dirs by engine when user-remap enabled


author: zhangxiaoyu <zhangxiaoyu58@huawei.com> - 2.0.16-4
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: invalid free default-runtime and cri-runtime after free json-confs


author: zhangxiaoyu <zhangxiaoyu58@huawei.com> - 2.0.17-3
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: add required package lcr clibcni lower and upper version


author: gaoxingwang<gaoxingwang@huawei.com> - 10.04-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon


author: chenyanpanHW <chenyanpan@huawei.com> - 0.6-23
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-Switch-from-python-to-python3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-Fix-build-error-with-Python-3-caused-by-itervalues-i.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-Only-split-proc-status-lines-on-the-character.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-Ignore-invalid-lines-in-proc-status-files.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-Actually-skip-invalid-lines-in-proc-status.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-replace-powerpc-with-ppc-in-ioprio.py.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-add-aarch64-prio-in-ioprio.py.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-Print-the-titles-at-specific-locations.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-Improve-the-message-that-is-printed-when-Linux-tasks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-Fix-crash-due-to-syntax-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0011-Use-monotonic-time-to-calculate-durations.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: xihaochen <xihaochen@huawei.com> - 1.8.18-17
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:move exchange-bmc-os-info,bmc-snmp-proxy to separate subpackages from ipmitool


author: mengkanglai <mengkanglai2@huawei.com> - 1.8.18-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lan channel fix set alert on off and lanplus realloc the msg if the payload_length gets update


author: chengycehun <chengycehun1@huawei.com> - 5.5.0-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:lib/bpf:fix bpffs mount when /sys/fs/bpf exists
             tc/f_flower:fix port range parsing


author: wuchangsheng <wuchangsheng2@huawei.com> - 5.5.0-10
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:tc flowerr Fix buffer overflow on large labels
         q_cake allow changing to diffserv3


author: jiangheng <jiangheng14@huawei.com> - 5.5.0-11
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix devlink health dump command without arg
         tc: em_u32: fix offset parsing
         l2tp: fix typo in AF_INET6 checksum JSON print
         bridge: fix memory leak when doing fdb get
         ip neigh: fix memory leak when doing 'get'
         ip address: fix memory leak when specifying device


author: yanglu <yanglu72@h-partners.com> - 20190709-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix ping6 binding to VRF and address
         Avoid binding to non-VRF
         Fix ARP protocol field for AX.25 and NETROM


author: xinsheng3 <xinsheng3@huawei.com> - 2.0.1-7
changelog:
  - ID:NA
  - SUG:NA
  - DESC: Rectify the failure to copy yum.repos.d and cancel the background execution of create_install_img.


author: DCCooper <1866858@gmail.com> - 0.9.5-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:optimize function IsExist and add more testcase for filepath.go


author: jingxiaolu <lujingxiao@huawei.com> - 0.9.5-21
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:restart
  - DESC:add repo to local image when output transporter is docker://


author: wangyue <wangyue92@huawei.com> - 2.9.8-6
changelog:
  - fix CVE-2020-36179 CVE-2020-36180 CVE-2020-36181
    CVE-2020-36182 CVE-2020-36188 CVE-2020-36189
    CVE-2020-36187 CVE-2020-36186 CVE-2020-36184 CVE-2020-36183


author: eapen <zhangyipeng7@huawei.com> - 1:1.8.0.322-b06.0
changelog:
  - upgrade to 8u322-b06(ga)
  - modified fast-serializer-jdk8.patch to adopt openjdk
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8182036.patch
  - deleted 8183543-Aarch64-C2-compilation-often-fails-with-fail--last.patch
  - deleted Delete-expired-certificate-globalsignr2ca.patch
  - deleted inline-optimize-for-aarch64.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.322-b06.2
changelog:
  - add add-system-property-swing.JComboBox.useLegacyMode.patch
  - add debuginfo.diz-should-not-contain-the-path-after-unzip.patch
  - add 8173361-various-crashes-in-JvmtiExport-post_compiled.patch
  - add fix-TestUseCompressedOopsErgo-run-failed.patch
  - add fix-testme-Test6929067-run-faild.patch
  - add penetration_testing_vulnerability_fix.patch
  - add 8136577_Make_AbortVMOnException_available_in_product_builds.patch
  - add add-environment-variable-ZIP_INVALID_LOC_HEADER_EXIT.patch
  - add print-fd-and-file-path-when-a-zip-invalid-loc-header.patch
  - add 8207011-Remove-uses-of-the-register-storage-class-specifier.patch
  - modified implementation_of_Blas_hotspot_function_in_Intrinsics.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.332-b09.0
changelog:
  - deleted Support-Git-commit-ID-in-the-SOURCE-field-of-the-release.patch
  - deleted 8167014-jdeps-failed-with-Missing-message-warn-skippen-entry.patch
  - deleted fix-wrong-commitID-in-release-file.patch
  - deleted recreate-.java_pid-file-when-deleted-for-attach-mechanism.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8194154.patch
  - modified add-missing-test-case.patch
  - add fix-make-bugs-when-git-and-hg-not-exist.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.342-b07.0
changelog:
  - del 8168926.patch
  - del 8194154.patch
  - del 8202142-jfr-event-io-TestInstrumentation-is-unstable.patch
  - del 8266187_Memory_leak_in_appendBootClassPath.patch
  - del debuginfo.diz-should-not-contain-the-path-after-unzip.patch
  - del fix-make-bugs-when-git-and-hg-not-exist.patch
  - modified 7092821-java.security.Provider.getService-is-synchro.patch
  - modified 8268819-SA-Remove-libthread_db-dependency-on-Linux.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch


author: DXwangg<wangjiawei80@huawei.com> - 1:1.8.0.352-b07.0
changelog:
  - upgrade to jdk8u352-b07
  - deleted Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
  - deleted 8173361-various-crashes-in-JvmtiExport-post_compiled.patch
  - modified Fix-compile-and-runtime-failures-for-minimal1-versio.patch
  - deleted 8173339-AArch64-Fix-minimum-stack-size-computations.patch
  - modified add-appcds-file-lock.patch
  - modified add-DumpSharedSpace-guarantee-when-create-anonymous-classes.patch
  - modified fix-appcds-s-option-AppCDSLockFile.patch
  - modified fix-windows-compile-fail.patch


author: eapen<zhangyipeng7@huawei.com> - 1:1.8.0.352-b08.6.up2
changelog:
  - add 8296480-Fix-the-problem-that-the-TestPolicy.java-cas.patch
  - add 8296485-BuildEEBasicConstraints.java-test-fails-with.patch
  - add 8294357-tz-Update-Timezone-Data-to-2022d.patch
  - add 8296241-tz-Update-Timezone-Data-to-2022e.patch
  - add 8296108-tz-Update-Timezone-Data-to-2022f.patch
  - add 8257695-linux-Add-process-memory-information-to-hs-e.patch
  - add 8261167-print_process_memory_info-add-a-close-call-a.patch
  - add 8268893-jcmd-to-trim-the-glibc-heap.patch
  - add 8263185-Mallinfo-deprecated-in-glibc-2.33.patch
  - add 8293114-GC-should-trim-the-native-heap-and-bug-fix.patch
  - add 8275775-Add-jcmd-VM.classes-to-print-details-of-all-.patch
  - add Fix-compactibleFreeListSpace-block_size_no_stall-cra.patch
  - add 8203682-Add-jcmd-VM.classloaders-command-to-print-ou.patch
  - add 8229517-Support-for-optional-asynchronous-buffered-l.patch
  - add 8189688-NMT-Report-per-class-load-metadata-informati.patch
  - add 8219584-Try-to-dump-error-file-by-thread-which-cause.patch
  - add 8204595-add-more-thread-related-system-settings-info.patch
  - add 8198553-jcmd-separate-Metaspace-statistics-from-NMT.patch
  - add 8242181-Show-source-information-when-printing-native.patch
  - add Print-class-loading-details-when-enable-TraceClassLo.patch
  - add 8200720-Print-additional-information-in-thread-dump-.patch
  - add support-numactl-for-hadoop-yarn.patch
  - add 8232069-enable-shutdown-UseCompressedClassPointers-U.patch
  - add 8065402-G1-does-not-expand-marking-stack-when-mark-s.patch
  - add fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
  - add 8140594-Various-minor-code-improvements-compiler.patch
  - add Fix-the-crash-that-occurs-when-the-process-exits-due.patch
  - add Fix-AsyncGCLog-s-content-consistent-bug.patch


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.13.7-2
changelog:
  - add 8273111-Default-timezone-should-return-zone-ID-if-locatiome-is-valid-but-not-canonicalization-on-linux.patch


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.15.10-0
changelog:
  - modified 8231441-3-AArch64-Initial-SVE-backend-support.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.16.8-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
  - modified fast-serializer-jdk11.patch
  - modified dfx-enhancement-of-FastSerializer.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
  - modified add-missing-inline.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix_X509TrustManagerImpl_symantec_distrust.patch
  - add fix_Internal_and_external_code_inconsistency.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.6-0
changelog:
  - update to 11.0.17+5
  - modified NUMA-Aware-Implementation-humongous-region.patch
  - modified Add-KAE-implementation.patch
  - modified fast-serializer-jdk11.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.8-0
changelog:
  - update to 11.0.17+8(GA)
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.18.10-0
changelog:
  - update to 11.0.18+10(GA)
  - modified 8231441-2-AArch64-Initial-SVE-backend-support.patch
  - delete 8290705_fix_StringConcat_validate_mem_flow_asserts_with_unexpected_userStoreI.patch


author: wanghao <wanghao564@huawei.com> - 1:11.0.19.7-0
changelog:
  - update to 11.0.19+7(GA)
  - deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
  - modified Add-KAE-implementation.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified delete_expired_certificates.patch
  - modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch


author: noah <hedongbo@huawei.com> - 1:18.0.0.37-0.0.ea.rolling
changelog:
  - Update to jdk-18.0.0.0+37
  - adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch


author: DXwangg <wangjiawei80@huawei.com> -1:19.0.0.36-0.0.ea.rolling
changelog:
  - Update to jdk-19.0.0.0+36
  - Remove references to sample directory removed by JDK-8284999
  - Need to include the '.S' suffix in debuginfo checks after JDK-8284661


author: yaoxin <yao_xin001@hoperun.com> - 1.5.4-1
changelog:
  - Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
    CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436


author: konglidong <konglidong@uniontech.com> - 9.4.16-1.up1
changelog:
  - build:modify jetty-util version to project_version for build error
  - fix bogus date and describtion in changelog


author: jiangpengfei<jiangpengfei9@huawei.com> - 1.11.1-7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:update
  - DESC:update kata-containers source forms of organization to move all kata-containers related source repo into one repo kata-containers


author: Lichang Zhao<zhaolichang@huawei.com> - 1.11.1-13
changelog:
  +- Type:bugfix
  +- ID:NA
  +- SUG:NA
  +- DESC:fix the problem that sandbox stratovirt with network devices fails to start


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.0.0
changelog:
  - remove empty conf dir when uninstall keentune-bench
  - fix bug: can not running in alinux2 and centos7
  - change modify codeup address to gitee
  - add keentune to systemd
  - use 'MulanPSLv2' macro
  - update license to MulanPSLv2
  - Initial KeenTune-bench


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com>- 1.0.1
changelog:
  - Supporting of multiple target tuning
  - Remove version limitation of tornado
  - Fix some user experience issues


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.1.0-1
changelog:
  - fix bug: update version to 1.1.0 in setup.py script.
  - refactor tornado module: replace await by threadpool
  - fix other bugs


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.3.0-0
changelog:
  - update config items in bench.conf
  - return error message if benchmark script return an invalid data


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.0.0
changelog:
  - remove empty conf dir when uninstall keentune-brain
  - fix bug: can not running in alinux2 and centos7
  - change modify codeup address to gitee
  - add keentune to systemd
  - fix: wrong license in setup.py
  - use 'MulanPSLv2' macro
  - update license to MulanPSLv2
  - Initial KeenTune-brain


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com>- 1.0.1
changelog:
  - Verify input arguments of command 'param tune'
  - Supporting of multiple target tuning
  - Fix bug which cause keentune hanging after command 'param stop'
  - Add verification of conflicting commands such as 'param dump', 'param delete' when a tuning job is runing.
  - Remove version limitation of tornado
  - Refactor sysctl domain to improve stability of parameter setting
  - Fix some user experience issues


author: Runzhe Wang <15501019889@126.com> - 1.1.0-1
changelog:
  - fix bug: update version to 1.1.0 in setup.py script.
  - Add support for GP (in iTuned) in sensitizing algorithms
  - Add support for lasso in sensitizing algorithms
  - refactor tornado module: replace await by threadpool
  - lazy load domain in keentune-target
  - fix other bugs


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.2.0-2
changelog:
  - Wrong version index in python
  - Control checking range of settable target for 'profile set'
  - add function of all rollback


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.1.0-1
changelog:
  - Add support for GP (in iTuned) in sensitizing algorithms
  - Add support for lasso in sensitizing algorithms
  - refactor tornado module: replace await by threadpool
  - lazy load domain in keentune-target
  - fix other bugs


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.4.0-1
changelog:
  - fix: domain 'my_cnf' actived without mysql sevice
  - fix: fix the problem that cannot be rolled back normally


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.0.0
changelog:
  - add tpce tpch benchmark files
  - fix bug: can not running in alinux2 and centos7
  - change modify codeup address to gitee
  - manage keentuned with systemctl
  - fix: show brain error in the keentuned log
  - fix: profile set supports absolute and relative paths
  - fix: show exact job abort log after the stop command
  - add nginx_conf parameter config file
  - use 'MulanPSLv2' macro
  - update license to MulanPSLv2
  - Init Keentuned.


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.1.0
changelog:
  - remove parameter fs.nr_open
  - Add support for GP (in iTuned) in sensitizing algorithms
  - Add support for lasso in sensitizing algorithms
  - refactor tornado module: replace await by threadpool
  - lazy load domain in keentune-target
  - fix other bugs
  - Add baseline reading before init brain
  - Supporting multiple param json for tuning
  - Fix rollback failure
  - Clean empty dir when uninstall
  - Verify input arguments of command 'param tune'
  - Supporting of multiple target tuning
  - Fix bug which cause keentune hanging after command 'param stop'
  - Add verification of conflicting commands such as 'param dump', 'param delete' when a tuning job is runing.
  - Remove version limitation of tornado
  - Refactor sysctl domain to improve stability of parameter setting
  - Fix some user experience issues


author: Runzhe Wang <runzhe.wrz@alibaba-inc.com> - 1.2.0
changelog:
  - Add capabilities of target-group and bench-group
  - Fix some issues
  - Add 'keentune version' command


author: Wenchao Liu <wb-lwc921938@alibaba-inc.com> - 1.4.0-0
changelog:
  - add: Support UI Intelligent tuning and Sensitive parameter identification
  - add: Support show recommendation log for expert one click tuning
  - add: Support UI configure KeenTune groups' network environment
  - add: Support UI perform param rollback
  - add: Support UI perform param dump
  - add: Support KeenTune Recovery of all environments
  - add: Remove field '--config' from Intelligent tuning and Sensitive parameter identification
  - fix: Remove daemon self start
  - fix: Unify response code for cli
  - fix: Modify daemon start show log
  - other bugs fix


author: snoweay <snoweay@163.com> - 2.0.20-15
changelog:
  - Add support for quick kexec
    kexec: Add quick kexec support
    arm64: Quick kexec implementation for arm64


author: GouHao <gouhao@uniontech.com> - 2.0.20-17.up6
changelog:
  - Update source to 2.0.20-17
    patches shouldn't be surrounded by ifarch condition
    Fix bugs on some ft2500
    Fix x86 build error
    Fix kdump failed for FT2500
    add kernel version to release and add buildrequires uname-build-checks


author: zhangkea <zhangkea@uniontech.com> - 6.2.2.24-8.up2
changelog:
  - fix kmod_kernel_version to `uname -r`
    add kernel version to release
  - add buildrequires uname-build-checks


author: panchenbo <panchenbo@uniontech.com> -1:0.9.1-20.up3
changelog:
  - amend gcc version
    amend make_hotpatch file
    add kernel version to release and add buildrequires uname-build-checks


author: Bin Hu<hubin73@huawei.com> -1:0.9.1-21.up3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:kpatch-build: fix gcc version check when using OOT_MODULE
         already fixed in 9000


author: zhangxiaoyu <zhangxiaoyu58@huawei.com> - 1.20.2-8
changelog:
  - DESC: delete -Sgit from 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git add .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "kubernetes-1.20.2 base"


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-kubelet-support-exec-websocket-protocol.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0001-kubelet-support-exec-websocket-protocol.patch --author "rpm-build <rpm-build>"


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-fix-compile-options.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0002-fix-compile-options.patch --author "rpm-build <rpm-build>"


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-fix-CVE-2021-25735.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0003-fix-CVE-2021-25735.patch --author "rpm-build <rpm-build>"


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-fix-CVE-2021-25737.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0004-fix-CVE-2021-25737.patch --author "rpm-build <rpm-build>"


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-fix-CVE-2021-25741.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0005-fix-CVE-2021-25741.patch --author "rpm-build <rpm-build>"


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-kubelet-support-attach-websocket-protocol.patch | 
  /usr/bin/git apply --index  -
  /usr/bin/git commit -q -m 0006-kubelet-support-attach-websocket-protocol.patch --author "rpm-build <rpm-build>"


author: chengzeruizhi <chengzeruizhi@huawei.com> - 2.0.6-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: add new fields in config v2 and inspect to support modifications on iSulad


author: chengzeruizhi<chengzeruizhi@huawei.com> - 2.0.8-3
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: add HAVE_ISULAD definition and fix cpu quota out of range


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.8-7
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: modify depends package lxc version to 4.0.3-20221024XX


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.8-9
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:add macro to adapt musl libc and add add-gids option for exec


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.9-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix update cpu-rt period failed and fix layer size type as int64


author: fuanan <fuanan3@huawei.com> - 551-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Minor memory leak.
         Remove unnecessary and incorrectly used variable same_pos_bell.
         Fix erroneous EOF calculation when F command is interrupted.
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: wangce <wangce@uniontech.com> - 2.35.2-11.up3
changelog:
  - Revert tty Chinese mode modification
    lscpu Add Phytium aarch64 FT-2000+ & S2500 cpupart
    Delete Chinese translation for sulogin


author: haomimi <haomimi@uniontech.com> - 2.35.2-12.up4.07
changelog:
  - build: sync from anolis
  - build: fix #2142496 - update upstream tests
  - build: fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES
  - build: fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38
  - build: fix #2180413 - Backport hint about systemd daemon-reload


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.35.2-4
changelog:
  - Fix memleak in fdisk_script_read_file
    Fix heap-buffer-overflow in fdisk_partname
    Fix integer overflow in partno_from_devname


author: panchenbo <panchenbo@uniontech.com> - 2.35.2-11.up4
changelog:
  - Revert tty Chinese mode modification
    lscpu Add Phytium aarch64 FT-2000+ & S2500 cpupart
    Delete Chinese translation for sulogin
    fix noarch package built differently on different architectures


author: Lv Ying<lvying6@huawei.com> - 0.1.1-2
changelog:
  - support detecting and attaching of writable tracepoint program
    https://lore.kernel.org/bpf/20211004094857.30868-3-hotforest@gmail.com


author: zhangmingyi <zhangmingyi5@huawei.com> - 2:0.3-2
changelog:
  - backporting: 	backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch
  		backport-libbpf-Fix-the-name-of-a-reused-map.patch
  		backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch


author: zhangmingyi <zhangmingyi5@huawei.com> - 2:0.3-5
changelog:
  - backporting patches from upstream:
        backport-libbpf-Fix-crash-if-SEC-freplace-programs-don-t-have.patch
        backport-libbpf-Fix-the-case-of-running-as-non-root-with-capa.patch
        backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
        backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
        backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
        backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
        backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
        backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
        backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: capsh better error handling for integer parsing
          setcap clean up error handling of the ns rootid argument


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: If needed search PATH for capsh (==) self-execution
          Guarantee sufficient memory for scratch pathname


author: imxcc <xingchaochao@huawei.com> - 1.0.0-4
changelog:
  - libcare-patch-make: adapt libcare-patch-make to meson
  - gitignore: ignore some tests and binary
  - elf/strip: adapt to new gcc version(10.3.1)


author: imxcc <xingchaochao@huawei.com> - 1.0.0-5
changelog:
  - kpatch_elf: compatible with older versions of the so naming rules
  - kpatch_parse: fix failed to recognize .cold


author: yezengruan <yezengruan@huawei.com> 1.0.0-12
changelog:
  - kpatch_process: fix possible double free.
  - ptrace: fix NULL pointer access problem
  - fix patched process crashing when acccess the global var
  - fix probably restore cc symbol link fail when kill patch building uncourteous
  - optimize: Remove unnecessary comparison code


author: haowenchao <haowenchao@huawei.com> - 1.19.0-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-iscsi-ls-Fix-iser-url-scheme-parsing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-test-tool-Compare-Write-skip-InvalidDataOutSize-unle.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-test-tool-Compare-Write-override-driver-queue_pdu-ca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-test-tool-iSCSICmdSnTooLow-override-driver-queue_pdu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-test-tool-iSCSICmdSnTooHigh-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-test-tool-iSCSIDataSnInvalid-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-test-tool-BlockEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-test-tool-BlockEraseReserved-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-test-tool-CryptoEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-test-tool-CryptoEraseReserved-override-driver-queue_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-test-tool-OverwriteReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-test-tool-OverwriteReserved-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-test-tool-remove-unused-iscsi_queue_pdu-symbol-overl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-iser-remove-__packed-from-struct-iser_cm_hdr-declaration.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-test-tools-use-extern-init-in-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0016-iscsi-inq-handle-setting-of-debug_level-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0017-Updata-iscsi-dd.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0018-iscsi-swp-handle-setting-of-debug_level-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0019-fix-iscsi-ls-parameter-parse.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0020-Check-return-value-of-scsi_malloc-in-order-to.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0021-Fix-segmentation-fault-problem.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0022-init-fix-memory-leak-in-iscsi_create_context.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0023-iscsi-command-Fix-leak-in-iscsi_send_data_out.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Ruijun Ge <geruijun@huawei.com> - 1.19.0-8
changelog:
  - DESC: backport patches to solve command parameter parse problem
          and dereference null pointer problem


author: haowenchao <haowenchao@huawei.com> - 1.19.0-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0001-iscsi-ls-Fix-iser-url-scheme-parsing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0002-test-tool-Compare-Write-skip-InvalidDataOutSize-unle.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0003-test-tool-Compare-Write-override-driver-queue_pdu-ca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0004-test-tool-iSCSICmdSnTooLow-override-driver-queue_pdu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0005-test-tool-iSCSICmdSnTooHigh-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0006-test-tool-iSCSIDataSnInvalid-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0007-test-tool-BlockEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0008-test-tool-BlockEraseReserved-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0009-test-tool-CryptoEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0010-test-tool-CryptoEraseReserved-override-driver-queue_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0011-test-tool-OverwriteReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0012-test-tool-OverwriteReserved-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0013-test-tool-remove-unused-iscsi_queue_pdu-symbol-overl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0014-iser-remove-__packed-from-struct-iser_cm_hdr-declaration.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0015-test-tools-use-extern-init-in-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0016-iscsi-inq-handle-setting-of-debug_level-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0017-Updata-iscsi-dd.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0018-iscsi-swp-handle-setting-of-debug_level-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0019-fix-iscsi-ls-parameter-parse.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0020-Check-return-value-of-scsi_malloc-in-order-to.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /home/abuild/rpmbuild/SOURCES/0021-Fix-segmentation-fault-problem.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: yanglu <yanglu72@h-partners.com> - 8.16.1-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add require procmail, Fix send mail error which no procmail command


author: yanglu<yanglu72@h-partners.com> - 8.16.1-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix newaliases command error and postfix service start execption after sendmail install


author: guojunding <guojunding@kylinos.cn> - 0.8.0.dev.2-103
changelog:
  - Fix null dereference in findLBEndpointSandbox

   * Thu Mar 18 2021 xiadanni<xiadanni1@huawei.com> 0.8.0.dev.2-102
   - Type:bugfix
   - Id:NA
   - SUG:NA
   - DESC:compile option compliance


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Fix the key string parsing in url_substitution
  - When zchunk enabled and not using HTTP/S protocol, download the whole file (RhBug:1886706)
  - Add an option LRO_SSLVERIFYSTATUS to check TLS certificate revocation status (using OCSP stapling) (RhBug:1814383)
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for working with certificates used with proxy
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.2-1
changelog:
  - Update to 1.14.2
  - Reduce time to load metadata
  - Fix resource leaks and memory leaks
  - Remove build dependency on python3-flask


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 3.1-3
changelog:
  - fix heap-use-after-free in cil_yy_switch_to_buffer
  - fix heap-use-after-free in __class_reset_perm_values()
  - fix heap-buffer-overflow in cil_print_recursive_blockinherit


author: xingxing <xingxing9@h-partners.com> - 0.7.14-6
changelog:
  - Type:cves
  - CVE:CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-20
  21-44576-CVE-2021-44577
  - SUG:NA
  - DESC:fix CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-C
  VE-2021-44576-CVE-2021-44577


author: xinghe <xinghe2@h-partners.com> - 2.71.0-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.71.0-5
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.71.0-6
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: Devrim Gündüz <devrim@gunduz.org> - 5.0.0-beta0-1
changelog:
  - Initial EPEL 8 packaging, based on Fedora rawhide spec file (with
    rpmlint fixes, 5.0.0 update, patches and cosmetic updates)


author: gaihuiying <eaglegai@163.com> - 0.9.4-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport upstream patches:
         add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-6
changelog:
  - Enable client and server testing build time
  - Fix failing rekey test on arch s390x
  - Resolves: rhbz#2126342


author: Liwei Ge <liwei.glw@alibaba-inc.com> - 0.9.6-7
changelog:
  - NULL pointer dereference during rekeying with algorithm guessing (CVE-2023-1667)
  - authorization bypass in pki_verify_data_signature (CVE-2023-2283)


author: shangyibin <shangyibin1@openeuler.org> - 1.4.2-4
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Adding help package to the installation dependency of the main package


author: shangyibin <shangyibin1@openeuler.org> - 1.4.2-5
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Change the dependecy on the help package from requires to recommends.


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-9
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: herengui <herengui@uniontech.com> - 2.9.0-4.up1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:delete udisks2.conf, change udisks mount point from /run/media to /media
  -      add automount script


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - rpc: gendispatch: handle empty flags
  - rpc: add support for filtering @acls by uint params
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses
  - qemu: agent: set ifname to NULL after freeing


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - util: Move virIsDevMapperDevice() to virdevmapper.c
  - virdevmapper: Don't use libdevmapper to obtain dependencies


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - libvirt: Add 'retry' support for error policy
  - qemu: Support 'retry' BLOCK_IO_ERROR event.
  - libvirt/conf: Set default values of retry fileds


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  - security: fix SELinux label generation logic


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - virDevMapperGetTargets: Don't ignore EBADF
  - virdevmapper: Don't cache device-mapper major
  - virdevmapper: Handle kernel without device-mapper support


author: zhangxianting <zhangxianting@uniontech.com>
changelog:
  - fix: When QEMU introduces new firmware features libvirt will fail, We should simply ignore the new feature like not support feature 'amd-sev-es'(bugid:243335)


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix memory leaks in XPointer string-range function
         fix null pointer deref in xmlXPtrRangeInsideFunction
         stop using maxParserDepth in xpath.c
         hardcode maximum XPath recursion depth
         fix XPath recursion limit


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix following issues:
         fix unsigned integer overflow in htmlParseTryOrFinish
         fix undefined behavior in UTF16LEToUTF8
         fix SEGV in xmlSAXParseFileWithData
         encoding: fix memleak in xmlRegisterCharEncodingHandler()
         fix null deref in xmlStringGetNodeList
         fix memory leak in xmlParseElementMixedContentDecl
         fix slow parsing of HTML with encoding errors


author: fuanan <fuanan3@h-partners.com> - 2.9.10-25
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: fuanan <fuanan3@h-partners.com> - 2.9.10-30
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: Funda Wang <fundawang@yeah.net> - 2.9.10-43
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: chenyanpanHW <chenyanpan@huawei.com> - 9-5
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Relax-content-tests-in-test-suite.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-Force-creation-of-LUKS1-containers-in-test-suite.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-Define-log-callback-function-to-use-with-libcryptset.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


