# changelog

author: Martin Kutlak <mkutlak@redhat.com> - 2.10.9-9
changelog:
  - spec: turn on --enable-native-unwinder aarch64
  - spec: enable addon-vmcore on aarch64
  - daemon: Fix double closed fd race condition
  - dbus: Add configuration for Python3
  - Add autogen.sh
  - Resolves: #1646569, #1651676, #1650619, #1650622, #1652676


author: Martin Kutlak <mkutlak@redhat.com> - 2.10.9-10
changelog:
  - spec: Add-explicit-package-version-requirement-of-abrt-libs
  - cli: get list of possible workflows for problem_data_t
  - cli: mark the suggestion text for translation
  - cli list: show a hint about creating a case in RHTS
  Resolves: #1649753


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-4
changelog:
  - Tighten cache protection against record from forwarders (CVE-2021-25220)
  - Include test of forwarders


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-5
changelog:
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Gopal Tiwari <gtiwari@redhat.com> - 5.56-1
changelog:
  + bluez-5.56-1
  - Fixing (#1965057)
  - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56


author: Shile Zhang <shile.zhang@linux.alibaba.com> [4.19.91-26_rc1.an8]
changelog:
  - anolis: mm: kidled: use different variables to store the rounds (zhongjiang-ali)
  - anolis: mm: kidled: Make kidled scan both page and slab equally (zhongjiang-ali)
  - anolis: mm: kidled: make kidled to support scan slab separately (zhongjiang-ali)
  - anolis: mm: kidled: isolate slab scan with page scan (zhongjiang-ali)
  - anolis: mm: kidled: make kidled support to identify cold slab (zhongjiang-ali)
  - anolis: mm: kidled: provide a unified interface in preparation for scanning slab (zhongjiang-ali)
  - perf/x86/intel/uncore: Fix CAS_COUNT_WRITE issue for ICX (Yuemin Wu)
  - anolis: net: keep cgroup classid when skb crosses veth and ipvlan (Tony Lu)
  - anolis: mm: introduce ability to reserve page cache on system wide (zhongjiang-ali)
  - bpf: increase complexity limit and maximum program size (Alexei Starovoitov)
  - Revert "bpf/verifier: per-register parent pointers" (Shile Zhang)
  - Revert "bpf: correct slot_type marking logic to allow more stack slot sharing" (Shile Zhang)
  - Revert "bpf: Support variable offset stack access from helpers" (Shile Zhang)
  - Revert "bpf: Reject indirect var_off stack access in raw mode" (Shile Zhang)
  - Revert "bpf: Reject indirect var_off stack access in unpriv mode" (Shile Zhang)
  - Revert "bpf: Sanity check max value for var_off stack access" (Shile Zhang)
  - Revert "selftests/bpf: Test variable offset stack access" (Shile Zhang)
  - Revert "bpf: track spill/fill of constants" (Shile Zhang)
  - Revert "selftests/bpf: fix tests due to const spill/fill" (Shile Zhang)
  - Revert "bpf: Introduce BPF nospec instruction for mitigating Spectre v4" (Shile Zhang)
  - Revert "bpf: Fix leakage due to insufficient speculative store bypass mitigation" (Shile Zhang)
  - Revert "bpf: verifier: Allocate idmap scratch in verifier env" (Shile Zhang)
  - Revert "bpf: Fix pointer arithmetic mask tightening under state pruning" (Shile Zhang)
  - Revert "bpf: precise scalar_value tracking" (Qiao Ma)
  - Revert "bpf: add memlock precharge check for cgroup_local_storage" (Qiao Ma)
  - Revert "bpf: group memory related fields in struct bpf_map_memory" (Qiao Ma)
  - Revert "bpf: rework memlock-based memory accounting for maps" (Qiao Ma)
  - Revert "bpf: move memory size checks to bpf_map_charge_init()" (Qiao Ma)
  - Revert "bpf: export bpf_map_inc_not_zero" (Qiao Ma)
  - Revert "bpf: Switch bpf_map ref counter to atomic64_t so bpf_map_inc() never fails" (Qiao Ma)
  - Revert "bpf: Convert bpf_prog refcnt to atomic64_t" (Qiao Ma)
  - Revert "bpf: Try harder when allocating memory for large maps" (Qiao Ma)
  - Revert "bpf: Add mmap() support for BPF_MAP_TYPE_ARRAY" (Qiao Ma)
  - Revert "bpf: Add iterator for spilled registers" (Qiao Ma)
  - Revert "bpf: Simplify ptr_min_max_vals adjustment" (Qiao Ma)
  - Revert "bpf: Reuse canonical string formatter for ctx errs" (Qiao Ma)
  - Revert "bpf: Generalize ptr_or_null regs check" (Qiao Ma)
  - Revert "bpf: Add PTR_TO_SOCKET verifier type" (Qiao Ma)
  - Revert "bpf: Macrofy stack state copy" (Qiao Ma)
  - Revert "bpf: Add reference tracking to verifier" (Qiao Ma)
  - Revert "bpf: Add helper to retrieve socket in BPF" (Qiao Ma)
  - Revert "selftests/bpf: Generalize dummy program types" (Qiao Ma)
  - Revert "selftests/bpf: Add tests for reference tracking" (Qiao Ma)
  - Revert "libbpf: Support loading individual progs" (Qiao Ma)
  - Revert "selftests/bpf: Add C tests for reference tracking" (Qiao Ma)
  - Revert "Documentation: Describe bpf reference tracking" (Qiao Ma)
  - Revert "net: core: Fix build with CONFIG_IPV6=m" (Qiao Ma)
  - Revert "bpf: Allow sk_lookup with IPv6 module" (Qiao Ma)
  - Revert "bpf: Implement BPF ring buffer and verifier support for it" (Qiao Ma)
  - Revert "libbpf: Add BPF ring buffer support" (Qiao Ma)
  - Revert "selftests/bpf: Add BPF ringbuf selftests" (Qiao Ma)
  - Revert "docs/bpf: Add BPF ring buffer design notes" (Qiao Ma)
  - Revert "bpf: Enforce BPF ringbuf size to be the power of 2" (Qiao Ma)
  - Revert "bpf, ringbuf: Deny reserve of buffers larger than ringbuf" (Qiao Ma)
  - Revert "bpf: Prevent writable memory-mapping of read-only ringbuf pages" (Qiao Ma)
  - Revert "bpf: Fix false positive kmemleak report in bpf_ringbuf_area_alloc()" (Qiao Ma)
  - Revert "bpf: add self-check logic to liveness analysis" (Qiao Ma)
  - Revert "bpf: add verifier stats and log_level bit 2" (Qiao Ma)
  - Revert "bpf: improve verification speed by droping states" (Qiao Ma)
  - Revert "bpf: cleanup explored_states" (Qiao Ma)
  - Revert "bpf: split explored_states" (Qiao Ma)
  - Revert "bpf: convert explored_states to hash table" (Qiao Ma)
  - Revert "bpf: introduce bounded loops" (Qiao Ma)
  - Revert "bpf: verifier: make sure callees don't prune with caller differences" (Qiao Ma)
  - Revert "bpf: fix callees pruning callers" (Qiao Ma)
  - Revert "selftests/bpf: add basic verifier tests for loops" (Qiao Ma)
  - udf: Restore i_lenAlloc when inode expansion fails (Jan Kara)
  - udf: Fix NULL ptr deref when converting from inline format (Jan Kara)
  - anolis: KVM: x86: Support VM_ATTESTATION hypercall (hanliyang)
  - KVM/SVM: add support for SEV attestation command (Brijesh Singh)
  - writeback: fix obtain a reference to a freeing memcg css (Muchun Song)
  - SUNRPC: More fixes for backlog congestion (Trond Myklebust)
  - SUNRPC in case of backlog, hand free slots directly to waiting task (NeilBrown)
  - anolis: mm, kidled: add some missed comments (Gang Deng)
  - anolis: sched: Credit clarification for BVT and its related work (Cruz Zhao)
  - netfilter: nf_tables: initialize registers in nft_do_chain() (Pablo Neira Ayuso)
  - fuse: Switch to using async direct IO for FOPEN_DIRECT_IO (Martin Raiber)
  - anolis: kdump: Fix vmcore fail to be saved in phytium S2500 (Yinan Liu)
  - anolis: mm: fix suspicious RCU usage in mem_cgroup_account_oom_skip (Gu Mi)
  - fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers)
  - NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce() (Trond Myklebust)
  - NFS: Fix initialisation of nfs_client cl_flags field (Trond Myklebust)
  - esp: Fix possible buffer overflow in ESP transformation (Steffen Klassert)
  - net: qrtr: fix another OOB Read in qrtr_endpoint_post (Xiaolong Huang)
  - anolis: configs: Disable group identity by default (Cruz Zhao)
  - anolis: Kconfig: Disable group identity by default (Cruz Zhao)
  - scsi: target: tcmu: Make cmd_ring_size changeable via configfs. (Guixin Liu)
  - quota: check block number when reading the block in quota file (Zhang Yi)
  - anolis: mm, memcg: use css_tryget_online() instead of css_get() (Gang Deng)
  - writeback, cgroup: do not reparent dax inodes (Roman Gushchin)
  - writeback, cgroup: remove wb from offline list before releasing refcnt (Roman Gushchin)
  - writeback, cgroup: release dying cgwbs by switching attached inodes (Roman Gushchin)
  - writeback, cgroup: support switching multiple inodes at once (Roman Gushchin)
  - writeback, cgroup: split out the functional part of inode_switch_wbs_work_fn() (Roman Gushchin)
  - writeback, cgroup: keep list of inodes attached to bdi_writeback (Roman Gushchin)
  - writeback, cgroup: switch to rcu_work API in inode_switch_wbs() (Roman Gushchin)
  - writeback, cgroup: increment isw_nr_in_flight before grabbing an inode (Roman Gushchin)
  - writeback, cgroup: add smp_mb() to cgroup_writeback_umount() (Roman Gushchin)
  - writeback, cgroup: do not switch inodes with I_WILL_FREE flag (Roman Gushchin)
  - writeback, cgroup: inode_switch_wbs() shouldn't give up on wb_switch_rwsem trylock fail (Tejun Heo)
  - Revert "ck: memcg: Point wb to root memcg/blkcg when offlining to avoid zombie" (Jeffle Xu)
  - perf tests bp_account: Make global variable static (Arnaldo Carvalho de Melo)
  - perf bench: Share some global variables to fix build with gcc 10 (Arnaldo Carvalho de Melo)
  - hugetlbfs: flush TLBs correctly after huge_pmd_unshare (Nadav Amit)
  - ipv4: avoid using shared IP generator for connected sockets (Eric Dumazet)
  - ipv4: tcp: send zero IPID in SYNACK messages (Eric Dumazet)
  - scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression (Arnd Bergmann)
  - scsi: megaraid_sas: Check user-provided offsets (Arnd Bergmann)
  - scsi: megaraid_sas: TM command refire leads to controller firmware crash (Sumit Saxena)
  - scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state (Anand Lodnoor)
  - scsi: megaraid_sas: reduce module load time (Steve Sistare)
  - f2fs: fix to do sanity check on inode type during garbage collection (Chao Yu)
  - scsi: megaraid_sas: RAID1 PCI bandwidth limit algorithm is applicable for only Ventura (Chandrakanth Patil)
  - scsi: megaraid_sas: Retry reads of outbound_intr_status reg (Shivasharan S)
  - scsi: megaraid_sas: add retry logic in megasas_readl (Shivasharan S)
  - scsi: megaraid_sas: changes to function prototypes (Shivasharan S)
  - scsi: megaraid_sas: Rename scratch_pad registers (Shivasharan S)
  - scsi: megaraid_sas: Introduce new Aero adapter type (Shivasharan S)
  - scsi: megaraid_sas: Fix Ventura series based checks (Shivasharan S)
  - lib/iov_iter: initialize "flags" in new pipe_buffer (Max Kellermann)
  - usb: gadget: rndis: check size of RNDIS_MSG_SET command (zhaoxinchao)
  - NFS: LOOKUP_DIRECTORY is also ok with symlinks (Trond Myklebust)
  - NFSv4: nfs_atomic_open() can race when looking up a non-regular file (Trond Myklebust)
  - NFSv4: Handle case where the lookup of a directory fails (Trond Myklebust)
  - anolis: mm/vmscan: skip invoke vmpressure for background reclaim (Yong He)
  - io_uring: fix inconsistent lock state (Pavel Begunkov)
  - io_uring: fix REQ_F_COMP_LOCKED by killing it (Pavel Begunkov)
  - io_uring: dig out COMP_LOCK from deep call chain (Pavel Begunkov)
  - io_uring: don't unnecessarily clear F_LINK_TIMEOUT (Pavel Begunkov)
  - io_uring: don't set COMP_LOCKED if won't put (Pavel Begunkov)
  - netfilter: nat: remove l4 protocol port rovers (chengshuyi.csy)
  - ipv4: make exception cache less predictible (Eric Dumazet)
  - ipv4: use siphash instead of Jenkins in fnhe_hashfun() (Eric Dumazet)
  - net: clean up codestyle (Miaohe Lin)
  - ipv6: make exception cache less predictible (Eric Dumazet)
  - ipv6: use siphash in rt6_exception_hash() (Eric Dumazet)
  - ipv6: use jhash2() in rt6_exception_hash() (Eric Dumazet)
  - anolis: sched: fix race condition when adjust guest cputime (Zeng Jiahao)
  - anolis: erofs: kill the unnecessary kunmap_atomic in erofs_read_raw_page() (Gao Xiang)
  - anolis: sched: Ensure the logic of check_preempt_tick with CONFIG_GROUP_IDENTITY off (Peng Wang)
  - tipc: improve size validations for received domain records (Jon Maloy)
  - blk-mq: update hctx->dispatch_busy in case of real scheduler (Ming Lei)
  - cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman)
  - ftrace: modify the scope of sorting mcount at compile (Yinan Liu)
  - anolis: mm: change del_pid permission to write only (zhaoxinchao)
  - ext4: fix error handling in ext4_restore_inline_data() (Ritesh Harjani)
  - ext4: don't use the orphan list when migrating an inode (Theodore Ts'o)
  - ext4: Fix BUG_ON in ext4_bread when write quota data (Ye Bin)
  - ext4: set csum seed in tmp inode while migrating to extents (Luís Henriques)
  - jffs2: GC deadlock reading a page that is used in jffs2_write_begin() (Kyeong Yoo)
  - fs: dlm: filter user dlm messages for kernel locks (Alexander Aring)
  - anolis: fuse: add a mount option to set fs magic value (sanyulh)
  - selftests: cgroup: Test open-time cgroup namespace usage for migration checks (Tejun Heo)
  - selftests: cgroup: Test open-time credential usage for migration checks (Tejun Heo)
  - selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 (Tejun Heo)
  - cgroup: Use open-time cgroup namespace for process migration perm checks (Tejun Heo)
  - cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv (Tejun Heo)
  - cgroup: Use open-time credentials for process migraton perm checks (Tejun Heo)
  - nvme: fix an error code in nvme_init_subsystem() (Dan Carpenter)
  - nvme-core: Fix extra device_put() call on error path (Logan Gunthorpe)
  - nvme: fix controller instance leak (Keith Busch)
  - nvme: Assign subsys instance from first ctrl (Keith Busch)
  - nvme: fix memory leak caused by incorrect subsystem free (Logan Gunthorpe)
  - nvme: change locking for the per-subsystem controller list (Christoph Hellwig)
  - drm/i915: Flush TLBs before releasing backing store (Tvrtko Ursulin)
  - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Mathias Krause)
  - netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc (Haimin Zhang)
  - sctp: account stream padding length for reconf chunk (Eiichi Tsukata)
  - btrfs: unlock newly allocated extent buffer after error (Qu Wenruo)
  - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong)
  - anolis: Fix the bug that cfs_rq->h_nr_expel_immune underflow (Cruz Zhao)
  - anolis: erofs: fix unclean iomap and uninitialized erofs_buf (Gao Xiang)
  - anolis: erofs, virtiofs, dax: fix meta race with virtiofs dax reclaim (Gao Xiang)
  - erofs: use meta buffers for zmap operations (Gao Xiang)
  - erofs: use meta buffers for xattr operations (Gao Xiang)
  - erofs: use meta buffers for super operations (Gao Xiang)
  - erofs: use meta buffers for inode operations (Gao Xiang)
  - erofs: introduce meta buffer operations (Gao Xiang)
  - erofs: clean up erofs_map_blocks tracepoints (Gao Xiang)
  - scsi: megaraid_sas: Add support for MegaRAID Aero controllers (Shivasharan S)
  - ipv6: use prandom_u32() for ID generation (Willy Tarreau)
  - inet: use bigger hash table for IP ID generation (Eric Dumazet)
  - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr() (Chao Yu)
  - fget: clarify and improve __fget() implementation (Linus Torvalds)
  - fget: check that the fd still exists after getting a ref to it (Linus Torvalds)
  - mm, vmscan: guarantee drop_slab_node() termination (Vlastimil Babka)
  - mm/vmscan: fix infinite loop in drop_slab_node (Chunxin Zang)
  - anolis: erofs: fix memory leak of sbi->devs (Liu Bo)
  - anolis: erofs,virtiofs,dax: pin dax mapping when doing fault-in (Liu Bo)
  - io_uring: fix IOPOLL -EAGAIN retries (Jens Axboe)
  - io_uring: retry in case of short read on block device (Ming Lei)
  - io_uring: fix short read retries for non-reg files (Pavel Begunkov)
  - io_uring: ensure async buffered read-retry is setup properly (Jens Axboe)
  - io_uring: short circuit -EAGAIN for blocking read attempt (Jens Axboe)
  - io_uring: fix ITER_BVEC check (Pavel Begunkov)
  - io_uring: fix explicit async read/write mapping for large segments (Jens Axboe)
  - io_uring: revert consumed iov_iter bytes on error (Jens Axboe)
  - io_uring: internally retry short reads (Jens Axboe)
  - io_uring: retain iov_iter state over io_read/io_write calls (Jens Axboe)
  - io_uring: remove REQ_F_MUST_PUNT (Pavel Begunkov)
  - io_uring: remove setting REQ_F_MUST_PUNT in rw (Pavel Begunkov)
  - io_uring: flip if handling after io_setup_async_rw (Pavel Begunkov)
  - io_uring: clean up req->result setting by rw (Pavel Begunkov)
  - Revert "io_uring: fix IOPOLL -EAGAIN retries" (Joseph Qi)
  - io_uring: follow **iovec idiom in io_import_iovec (Pavel Begunkov)
  - io_uring: add a helper for async rw iovec prep (Pavel Begunkov)
  - io_uring: simplify io_req_map_rw() (Pavel Begunkov)
  - selftests/bpf: add basic verifier tests for loops (Alexei Starovoitov)
  - bpf: fix callees pruning callers (Alexei Starovoitov)
  - bpf: verifier: make sure callees don't prune with caller differences (Jakub Kicinski)
  - bpf: introduce bounded loops (Alexei Starovoitov)
  - bpf: convert explored_states to hash table (Alexei Starovoitov)
  - bpf: split explored_states (Alexei Starovoitov)
  - bpf: cleanup explored_states (Alexei Starovoitov)
  - bpf: improve verification speed by droping states (Alexei Starovoitov)
  - bpf: add verifier stats and log_level bit 2 (Alexei Starovoitov)
  - bpf: add self-check logic to liveness analysis (Alexei Starovoitov)
  - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini)
  - ovl: fix use after free in struct ovl_aio_req (yangerkun)
  - ovl: fix lockdep warning for async write (Miklos Szeredi)
  - integrity: double check iint_cache was initialized (Mimi Zohar)
  - fuse: release pipe buf after last use (Miklos Szeredi)
  - proc/vmcore: fix clearing user buffer by properly using clear_user() (David Hildenbrand)
  - fuse: fix page stealing (Miklos Szeredi)
  - fuse: truncate pagecache on atomic_o_trunc (Miklos Szeredi)
  - vfs: check fd has read access in kernel_read_file_from_fd() (Matthew Wilcox (Oracle))
  - bpf: Use kvmalloc for map values in syscall (Stanislav Fomichev)
  - anolis: kernel/memremap: only wakeup is needed for MEMORY_DEVICE_FSDAX when put_page (Liu Bo)
  - anolis: erofs: convert some messages to erofs_dbg(..) (Gao Xiang)
  - anolis: erofs: fix unexpected endless loop when read < 0 (Gao Xiang)
  - bpf: Fix false positive kmemleak report in bpf_ringbuf_area_alloc() (Rustam Kovhaev)
  - bpf: Prevent writable memory-mapping of read-only ringbuf pages (Andrii Nakryiko)
  - bpf, ringbuf: Deny reserve of buffers larger than ringbuf (Thadeu Lima de Souza Cascardo)
  - bpf: Enforce BPF ringbuf size to be the power of 2 (Andrii Nakryiko)
  - docs/bpf: Add BPF ring buffer design notes (Andrii Nakryiko)
  - selftests/bpf: Add BPF ringbuf selftests (Andrii Nakryiko)
  - libbpf: Add BPF ring buffer support (Andrii Nakryiko)
  - bpf: Implement BPF ring buffer and verifier support for it (Andrii Nakryiko)
  - rcu: Set a maximum limit for back-to-back callback invocation (Guanghui Feng)
  - gpu: drm: fix the support of 16bpp,1711BMC (GongJunjie)
  - anolis: task_work: cleanup notification modes (Joseph Qi)
  - io_uring: set ctx sq/cq entry count earlier (Jens Axboe)
  - anolis: io_uring: ensure using TWA_SIGNAL for task_work uncondtionally (Xiaoguang Wang)
  - anolis: erofs: fix EINVAL when using dio on RAFS v6 (Liu Bo)
  - anolis: erofs: introduce blob_path_dir mount option (Gao Xiang)
  - anolis: Kconfig: RICH_CONTAINER should select SCHED_SLI. (Erwei Deng)
  - bpf: Allow sk_lookup with IPv6 module (Joe Stringer)
  - net: core: Fix build with CONFIG_IPV6=m (Joe Stringer)
  - Documentation: Describe bpf reference tracking (Joe Stringer)
  - selftests/bpf: Add C tests for reference tracking (Joe Stringer)
  - libbpf: Support loading individual progs (Joe Stringer)
  - selftests/bpf: Add tests for reference tracking (Joe Stringer)
  - selftests/bpf: Generalize dummy program types (Joe Stringer)
  - bpf: Add helper to retrieve socket in BPF (Joe Stringer)
  - bpf: Add reference tracking to verifier (Joe Stringer)
  - bpf: Macrofy stack state copy (Joe Stringer)
  - bpf: Add PTR_TO_SOCKET verifier type (Joe Stringer)
  - bpf: Generalize ptr_or_null regs check (Joe Stringer)
  - bpf: Reuse canonical string formatter for ctx errs (Joe Stringer)
  - bpf: Simplify ptr_min_max_vals adjustment (Joe Stringer)
  - bpf: Add iterator for spilled registers (Joe Stringer)
  - bpf: Add mmap() support for BPF_MAP_TYPE_ARRAY (Andrii Nakryiko)
  - bpf: Try harder when allocating memory for large maps (Martynas Pumputis)
  - bpf: Convert bpf_prog refcnt to atomic64_t (Andrii Nakryiko)
  - bpf: Switch bpf_map ref counter to atomic64_t so bpf_map_inc() never fails (Andrii Nakryiko)
  - bpf: export bpf_map_inc_not_zero (Stanislav Fomichev)
  - bpf: move memory size checks to bpf_map_charge_init() (Roman Gushchin)
  - bpf: rework memlock-based memory accounting for maps (Roman Gushchin)
  - bpf: group memory related fields in struct bpf_map_memory (Roman Gushchin)
  - bpf: add memlock precharge check for cgroup_local_storage (Roman Gushchin)
  - dm cache metadata: Avoid returning cmd->bm wild pointer on error (Ye Bin)
  - anolis:ftrace:bug fix on nop substitute at built time (Yinan Liu)
  - anolis: script/sorrtable: bug fix about config judgement invalid (Yinan Liu)
  - bpf: precise scalar_value tracking (Alexei Starovoitov)
  - anolis: kprobes: Check function patched by module without kprobe (Yihao Wu)
  - kprobes: Allow kprobes coexist with livepatch (Masami Hiramatsu)
  - drivers/base/memory.c: indicate all memory blocks as removable (Guanghui Feng)
  - anolis: x86: change Makefile to support stack protector (Guanjun)
  - anolis: x86: fix multiple definition build error of "__force_order" (Jiayu Ni)
  - anolis: scripts/sorttable: Do not sort orc unwind if stack validation is skipped (Zelin Deng)
  - anolis: scripts/sorttable: Fix segfault caused by uninitialized (Guanjun)
  - anolis: x86/crypto: Use relative addressing assembly for PIE (Zelin Deng)
  - anolis: arm64: Fix building errors with allnoconfig (Baolin Wang)
  - anolis: memcg: fix compile error if CONFIG_MEMSLI not set (Yi Tao)
  - anolis: swiotlb: fix build error without swiotlb enabled (Jiayu Ni)
  - anolis: x86: Replace %c constraint in bug table (Guanjun)
  - scripts/dtc: Remove redundant YYLOC global declaration (Dirk Mueller)
  - PCI/ACPI: Evaluate PCI Boot Configuration _DSM (Benjamin Herrenschmidt)
  - anolis: sched: fix some warnings with allnoconfig (Cruz Zhao)
  - anolis: sched: Fix the bug that compile failure with CONFIG_SCHED_DEBUG off (Cruz Zhao)
  - anolis: ftrace: bug fix on mcount sorting at build time (Yinan Liu)
  - anolis: configs: update anolis default configs for code changes (Shile Zhang)
  - anolis: x86: configs: change PSTORE_DEFLATE_COMPRESS attribution (Jiayu Ni)
  - anolis: swiotlb: export swiotlb_max_mapping_size() (Xunlei Pang)
  - anolis: xsk: fix build error (Xunlei Pang)
  - x86/cpu: Align the x86_capability array to size of unsigned long (Fenghua Yu)
  - x86/cpu: Align cpu_caps_cleared and cpu_caps_set to unsigned long (Fenghua Yu)
  - anolis: pci: add retry sleep to anti-noises (Jiayu Ni)
  - anolis: pci: for hotplug noises workaround (Jiayu Ni)
  - PCI: pciehp: Ignore Link Down/Up caused by DPC (Lukas Wunner)
  - PCI: pciehp: Reduce noisiness on hot removal (Lukas Wunner)
  - tools/power turbostat: Support Ice Lake server (Chen Yu)
  - tools/power turbostat: consolidate duplicate model numbers (Len Brown)
  - mm/memory_hotplug.c: fix notification in offline error path (Qian Cai)
  - anolis: mm: fix the swap cache shadow entries (zhongjiang-ali)
  - genirq/affinity: Make affinity setting if activated opt-in (Thomas Gleixner)
  - genirq/affinity: Handle affinity setting on inactive interrupts correctly (Thomas Gleixner)
  - anolis: mm/khugepaged: sleep for the last alloc failure (Zhiheng Tao)
  - anolis: mm: Use sched_clock() instead of ktime_get_ns() (Xunlei Pang)
  - anolis: x86/split_lock: disable split lock detection by default (Shannon Zhao)
  - x86/split_lock: Don't write MSR_TEST_CTRL on CPUs that aren't whitelisted (Sean Christopherson)
  - x86/split_lock: Bits in IA32_CORE_CAPABILITIES are not architectural (Tony Luck)
  - x86/split_lock: Avoid runtime reads of the TEST_CTRL MSR (Xiaoyao Li)
  - x86/split_lock: Rework the initialization flow of split lock detection (Xiaoyao Li)
  - x86/split_lock: Enable split lock detection by kernel (Peter Zijlstra (Intel))
  - x86/intel: Aggregate big core mobile naming (Peter Zijlstra)
  - mm: thp: KVM: Explicitly check for THP when populating secondary MMU (Sean Christopherson)
  - x86/hyper-v: Add HvFlushGuestAddressList hypercall support (Lan Tianyu)
  - x86/TSC: Use RDTSCP (Borislav Petkov)
  - x86: Remove X86_FEATURE_MFENCE_RDTSC (Josh Poimboeuf)
  - perf/x86/intel/pt: Export pt_cap_get() (Chao Peng)
  - kvm, x86: Properly check whether a pfn is an MMIO or not (KarimAllah Ahmed)
  - rculist: Introduce list/hlist_for_each_entry_srcu() macros (Madhuparna Bhowmik)
  - cpu/SMT: create and export cpu_smt_possible() (Vitaly Kuznetsov)
  - rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer() (Paul E. McKenney)
  - KVM: x86/vPMU: Add lazy mechanism to release perf_event per vPMC (Like Xu)
  - KVM: x86/vPMU: Declare kvm_pmu->reprogram_pmi field using DECLARE_BITMAP (Like Xu)
  - KVM: x86/vPMU: Reuse perf_event to avoid unnecessary pmc_reprogram_counter (Like Xu)
  - KVM: x86/vPMU: Introduce a new kvm_pmu_ops->msr_idx_to_pmc callback (Like Xu)
  - KVM: x86/vPMU: Rename pmu_ops callbacks from msr_idx to rdpmc_ecx (Like Xu)
  - perf/core: Provide a kernel-internal interface to pause perf_event (Like Xu)
  - perf/core: Provide a kernel-internal interface to recalibrate event period (Like Xu)
  - perf/x86/intel: Make anythread filter support conditional (Stephane Eranian)
  - x86/cpufeatures: Enumerate MOVDIR64B instruction (Fenghua Yu)
  - x86/cpufeatures: Enumerate MOVDIRI instruction (Fenghua Yu)
  - KVM: x86: Inject PMI for KVM guest (Luwei Kang)
  - cpufreq: Call transition notifier only once for each policy (Viresh Kumar)
  - x86: tsc: Rework time_cpufreq_notifier() (Rafael J. Wysocki)
  - Documentation/ABI: Document umwait control sysfs interfaces (Fenghua Yu)
  - x86/umwait: Add sysfs interface to control umwait maximum time (Fenghua Yu)
  - x86/umwait: Add sysfs interface to control umwait C0.2 state (Fenghua Yu)
  - x86/umwait: Initialize umwait control values (Fenghua Yu)
  - x86/cpufeatures: Enumerate user wait instructions (Fenghua Yu)
  - tools/x86: Sync msr-index.h from kernel sources (Sean Christopherson)
  - x86/msr-index: Clean up bit defines for IA32_FEATURE_CONTROL MSR (Sean Christopherson)
  - fuse: fix matching of FUSE_DEV_IOC_CLONE command (Alessio Balsini)
  - fuse: 32-bit user space ioctl compat for fuse device (Alessio Balsini)
  - fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS (Chirantan Ekbote)
  - fuse: fix weird page warning (Miklos Szeredi)
  - fuse: don't check refcount after stealing page (Miklos Szeredi)
  - fuse: fix page dereference after free (Miklos Szeredi)
  - arm64: add arch/arm64/Kbuild (Masahiro Yamada)
  - linkage: Introduce new macros for assembler symbols (Jiri Slaby)
  - include/linux/linkage.h: align weak symbols (Andrey Ryabinin)
  - arm64: entry: Remove confusing comment (Will Deacon)
  - arm64: entry: Place an SB sequence following an ERET instruction (Will Deacon)
  - arm64: Add support for SB barrier and patch in over DSB; ISB sequences (Will Deacon)
  - arm64: Add TCR_EPD{0,1} definitions (Marc Zyngier)
  - include/linux/seq_file.h: introduce DEFINE_SEQ_ATTRIBUTE() helper macro (Kefeng Wang)
  - clocksource/arm_arch_timer: Store physical timer IRQ number for KVM on VHE (Andre Przywara)
  - arm64/mm: Unify CONT_PMD_SHIFT (Gavin Shan)
  - arm64/mm: Unify CONT_PTE_SHIFT (Gavin Shan)
  - arm64/mm: Redefine CONT_{PTE, PMD}_SHIFT (Gavin Shan)
  - KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART (Andrew Scull)
  - KVM: arm64: Annotate hyp NMI-related functions as __always_inline (Alexandru Elisei)
  - vfio/type1: Support faulting PFNMAP vmas (Alex Williamson)
  - iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (Suravee Suthikulpanit)
  - iommu/amd: Fix potential @entry null deref (Joao Martins)
  - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (Suravee Suthikulpanit)
  - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (Suravee Suthikulpanit)
  - iommu/amd: Check feature support bit before accessing MSI capability registers (Suravee Suthikulpanit)
  - iommu/amd: Only support x2APIC with IVHD type 11h/40h (Suravee Suthikulpanit)
  - iommu/amd: Unmap all L7 PTEs when downgrading page-sizes (Andrei Dulea)
  - iommu/amd: Introduce first_pte_l7() helper (Andrei Dulea)
  - iommu/amd: Fix downgrading default page-sizes in alloc_pte() (Andrei Dulea)
  - vfio/type1: Remove map_try_harder() code path (Joerg Roedel)
  - iommu/amd: Allow to upgrade page-size (Joerg Roedel)
  - iommu/amd: Restart loop if cmpxchg64 succeeded in alloc_pte() (Joerg Roedel)
  - iommu/amd: Allow downgrading page-sizes in alloc_pte() (Joerg Roedel)
  - iommu/amd: Ignore page-mode 7 in free_sub_pt() (Joerg Roedel)
  - iommu/amd: Introduce free_sub_pt() function (Joerg Roedel)
  - iommu/amd: Collect page-table pages in freelist (Joerg Roedel)
  - iommu: Allow page responses without PASID (Jean-Philippe Brucker)
  - iommu/amd: Add support for X2APIC IOMMU interrupts (Suthikulpanit Suravee)
  - iommu: Add padding to struct iommu_fault (Jean-Philippe Brucker)
  - iommu: Add recoverable fault reporting (Jean-Philippe Brucker)
  - iommu: Introduce device fault report API (Jacob Pan)
  - iommu: Introduce device fault data (Jacob Pan)
  - driver core: Add per device iommu param (Jacob Pan)
  - iommu: Check for iommu_ops == NULL in iommu_probe_device() (Joerg Roedel)
  - iommu: Consolidate ->add/remove_device() calls (Joerg Roedel)
  - anolis: perf: adjust histogram for spe c2c (Peng Wang)
  - anolis: perf: add spe-c2c help command (Peng Wang)
  - anolis: perf: Speed up the process of perf sample (Peng Wang)
  - anolis: perf: Add progress ui for finding false sharing (Peng Wang)
  - perf events parser: Add missing Intel CPU events to parser (Adrian Hunter)
  - perf c2c: Fix return type for histogram sorting comparision functions (Andres Freund)
  - anolis: perf: accelerate perf spe-c2c report (Peng Wang)
  - openEuler: perf tools: add support for ARM spe-c2c (Tan Xiaojun)
  - openEuler: arm64: perf: add support for cap_user_time_zero (Wei Li)
  - openEuler: perf tools: arm-spe: fix record hang after being terminated (Wei Li)
  - openEuler: perf tools: add perf_evlist__terminate() for terminate (Wei Li)
  - openEuler: perf report: Add --spe options for arm-spe (Tan Xiaojun)
  - openEuler: perf tools: Add support for "report" for some spe events (Tan Xiaojun)
  - openEuler: perf tools: Move arm-spe-pkt-decoder.h/c to the new dir (Tan Xiaojun)
  - x86/fpu: Deactivate FPU state after failure during state load (Sebastian Andrzej Siewior)
  - KVM: x86: Ensure guest's FPU state is loaded when accessing for emulation (Sean Christopherson)
  - KVM: x86: Handle TIF_NEED_FPU_LOAD in kvm_{load,put}_guest_fpu() (Sean Christopherson)
  - kvm/svm: PKU not currently supported (John Allen)
  - KVM: x86: Fix potential put_fpu() w/o load_fpu() on MPX platform (Sean Christopherson)
  - x86/fpu: Don't cache access to fpu_fpregs_owner_ctx (Sebastian Andrzej Siewior)
  - x86/fpu: Inline fpu__xstate_clear_all_cpu_caps() (Sebastian Andrzej Siewior)
  - x86/fpu: Remove the fpu__save() export (Christoph Hellwig)
  - x86/fpu: Simplify kernel_fpu_begin() (Christoph Hellwig)
  - x86/fpu: Simplify kernel_fpu_end() (Christoph Hellwig)
  - x86/fpu: Don't use current->mm to check for a kthread (Christoph Hellwig)
  - x86/fpu: Update kernel's FPU state before using for the fsave header (Sebastian Andrzej Siewior)
  - x86/fpu: Use fault_in_pages_writeable() for pre-faulting (Hugh Dickins)
  - x86/fpu: Fault-in user stack if copy_fpstate_to_sigframe() fails (Sebastian Andrzej Siewior)
  - x86/pkeys: Add PKRU value to init_fpstate (Sebastian Andrzej Siewior)
  - x86/fpu: Restore regs in copy_fpstate_to_sigframe() in order to use the fastpath (Sebastian Andrzej Siewior)
  - x86/fpu: Add a fastpath to copy_fpstate_to_sigframe() (Sebastian Andrzej Siewior)
  - x86/fpu: Add a fastpath to __fpu__restore_sig() (Sebastian Andrzej Siewior)
  - x86/fpu: Defer FPU state load until return to userspace (Rik van Riel)
  - x86/fpu: Merge the two code paths in __fpu__restore_sig() (Sebastian Andrzej Siewior)
  - x86/fpu: Restore from kernel memory on the 64-bit path too (Sebastian Andrzej Siewior)
  - x86/fpu: Inline copy_user_to_fpregs_zeroing() (Sebastian Andrzej Siewior)
  - x86/fpu: Update xstate's PKRU value on write_pkru() (Sebastian Andrzej Siewior)
  - x86/fpu: Prepare copy_fpstate_to_sigframe() for TIF_NEED_FPU_LOAD (Rik van Riel)
  - x86/fpu: Always store the registers in copy_fpstate_to_sigframe() (Rik van Riel)
  - x86/entry: Add TIF_NEED_FPU_LOAD (Sebastian Andrzej Siewior)
  - x86/fpu: Eager switch PKRU state (Rik van Riel)
  - x86/pkeys: Don't check if PKRU is zero before writing it (Sebastian Andrzej Siewior)
  - x86/fpu: Only write PKRU if it is different from current (Sebastian Andrzej Siewior)
  - x86/pkeys: Provide *pkru() helpers (Sebastian Andrzej Siewior)
  - x86/fpu: Use a feature number instead of mask in two more helpers (Sebastian Andrzej Siewior)
  - x86/fpu: Make __raw_xsave_addr() use a feature number instead of mask (Sebastian Andrzej Siewior)
  - x86/fpu: Add an __fpregs_load_activate() internal helper (Rik van Riel)
  - x86/fpu: Remove user_fpu_begin() (Sebastian Andrzej Siewior)
  - x86/fpu: Remove fpu->initialized (Sebastian Andrzej Siewior)
  - x86/fpu: Don't save fxregs for ia32 frames in copy_fpstate_to_sigframe() (Sebastian Andrzej Siewior)
  - x86/fpu: Remove fpu->initialized usage in copy_fpstate_to_sigframe() (Sebastian Andrzej Siewior)
  - x86/fpu: Always init the state in fpu__clear() (Sebastian Andrzej Siewior)
  - x86/fpu: Remove preempt_disable() in fpu__clear() (Sebastian Andrzej Siewior)
  - x86/fpu: Remove fpu__restore() (Sebastian Andrzej Siewior)
  - x86/fpu: Remove fpu->initialized usage in __fpu__restore_sig() (Sebastian Andrzej Siewior)
  - x86/fpu: Fix __user annotations (Jann Horn)
  - anolis: erofs: release bootstrap in .kill_sb() (Gao Xiang)
  - perf: arm-cmn: Fix conversion specifiers for node type (Will Deacon)
  - perf: arm-cmn: Fix unsigned comparison to less than zero (Will Deacon)
  - perf: Add Arm CMN-600 PMU driver (Robin Murphy)
  - anolis: arm64: Add CPU freqency information for /proc/cpuinfo (Baolin Wang)
  - arm64: Expose address bits (physical/virtual) via cpuinfo (Baolin Wang)
  - anolis: vritio: use vring_weak_barriers to control vring weak_barrier (Zou Cao)
  - iommu/arm-smmu-v3: Don't reserve implementation defined register space (Jean-Philippe Brucker)
  - iommu/arm-smmu-v3: Don't display an error when IRQ lines are missing (Jean-Philippe Brucker)
  - arm64: do_csum: implement accelerated scalar version (Rongwei Wang)
  - anolis: UKFEF: report kernel warning (Meng shen)
  - anolis: UKFEF: report kernel crash event (Meng shen)
  - anolis: UKFEF: report bad mm_struct state (Meng shen)
  - anolis: UKFEF: report ext4-fs error (Meng shen)
  - anolis: UKFEF: report fatal signal event (Meng shen)
  - anolis: UKFEF: report memory alloc failed event (Meng shen)
  - anolis: UKFEF: report softlockup event (Meng shen)
  - anolis: UKFEF: report rcu-stall event (Meng shen)
  - anolis: UKFEF: report hung-task event (Meng shen)
  - anolis: UKFEF: report oom event (Meng shen)
  - anolis: UKFEF: report block error (Meng shen)
  - anolis: UKFEF: report mce event (Meng shen)
  - anolis: UKFEF: unified kernel fault event framework (Meng shen)
  - anolis: scripts: ftrace_init optimization about instruction substitution (Yinan Liu)
  - anolis: scripts: ftrace_init optimization about sorting (Yinan Liu)
  - anolis: x86/ftrace: fix ftrace make_nop_x86 wrong offset calculating bug (Qiao Ma)
  - openeuler: memblock: extend memblock_cap_memory_range to multiple ranges (Mike Rapoport)
  - openeuler: arm64: kdump: support reserving crashkernel above 4G (Chen Zhou)
  - openeuler: arm64: support more than one crash kernel regions (Xin Hao)
  - Documentation: kunit: Add some troubleshooting tips to the FAQ (David Gow)
  - kunit: kunit_tool: Fix invalid result when build fails (David Gow)
  - kunit: show error if kunit results are not present (Uriel Guajardo)
  - kunit: kunit_config: Fix parsing of CONFIG options with space (Rikard Falkeborn)
  - kunit: default KUNIT_* fragments to KUNIT_ALL_TESTS (Anders Roxell)
  - kunit: Kconfig: enable a KUNIT_ALL_TESTS fragment (Anders Roxell)
  - kunit: Fix TabError, remove defconfig code and handle when there is no kunitconfig (Vitor Massaru Iha)
  - kunit: use KUnit defconfig by default (Vitor Massaru Iha)
  - kunit: use --build_dir=.kunit as default (Vitor Massaru Iha)
  - Documentation: test.h - fix warnings (Lothar Rubusch)
  - kunit: kunit_tool: Separate out config/build/exec/parse (David Gow)
  - kunit: Add missing newline in summary message (Marco Elver)
  - kunit: tool: add missing test data file content (Brendan Higgins)
  - kunit: update documentation to describe debugfs representation (Alan Maguire)
  - kunit: subtests should be indented 4 spaces according to TAP (Alan Maguire)
  - kunit: add log test (Alan Maguire)
  - kunit: add debugfs /sys/kernel/debug/kunit/<suite>/results display (Alan Maguire)
  - Documentation: kunit: Make the KUnit documentation less UML-specific (David Gow)
  - Fix linked-list KUnit test when run multiple times (David Gow)
  - kunit: kunit_tool: Allow .kunitconfig to disable config items (David Gow)
  - kunit: Always print actual pointer values in asserts (David Gow)
  - kunit: add --make_options (Greg Thelen)
  - kunit: Run all KUnit tests through allyesconfig (Heidi Fahim)
  - kunit: kunit_parser: make parser more robust (Heidi Fahim)
  - kunit: run kunit_tool from any directory (Heidi Fahim)
  - kunit: test: Improve error messages for kunit_tool when kunitconfig is invalid (Heidi Fahim)
  - Documentation: kunit: fixed sphinx error in code block (Brendan Higgins)
  - kunit: update documentation to describe module-based build (Alan Maguire)
  - kunit: allow kunit to be loaded as a module (Alan Maguire)
  - kunit: remove timeout dependence on sysctl_hung_task_timeout_seconds (Alan Maguire)
  - kunit: allow kunit tests to be loaded as a module (Alan Maguire)
  - kunit: hide unexported try-catch interface in try-catch-impl.h (Alan Maguire)
  - kunit: move string-stream.h to lib/kunit (Alan Maguire)
  - kunit/kunit_tool_test: Test '--build_dir' option run (SeongJae Park)
  - kunit: Rename 'kunitconfig' to '.kunitconfig' (SeongJae Park)
  - kunit: Place 'test.log' under the 'build_dir' (SeongJae Park)
  - kunit: Create default config in '--build_dir' (SeongJae Park)
  - kunit: Remove duplicated defconfig creation (SeongJae Park)
  - docs/kunit/start: Use in-tree 'kunit_defconfig' (SeongJae Park)
  - Documentation: kunit: add documentation for kunit_tool (Brendan Higgins)
  - Documentation: kunit: fix typos and gramatical errors (Brendan Higgins)
  - kunit: testing kunit: Bug fix in test_run_timeout function (Heidi Fahim)
  - fs/ext4/inode-test: Fix inode test on 32 bit platforms. (Iurii Zaikin)
  - lib/list-test: add a test for the 'list' doubly linked list (David Gow)
  - ext4: add kunit test for decoding extended timestamps (Iurii Zaikin)
  - Documentation: kunit: Fix verification command (SeongJae Park)
  - kunit: Fix '--build_dir' option (SeongJae Park)
  - kunit: fix failure to build without printk (Brendan Higgins)
  - MAINTAINERS: add proc sysctl KUnit test to PROC SYSCTL section (Brendan Higgins)
  - kernel/sysctl-test: Add null pointer test for sysctl.c:proc_dointvec() (Iurii Zaikin)
  - MAINTAINERS: add entry for KUnit the unit testing framework (Brendan Higgins)
  - Documentation: kunit: add documentation for KUnit (Brendan Higgins)
  - kunit: defconfig: add defconfigs for building KUnit tests (Brendan Higgins)
  - kunit: tool: add Python wrappers for running KUnit tests (Felix Guo)
  - kunit: test: add tests for KUnit managed resources (Avinash Kondareddy)
  - kunit: test: add the concept of assertions (Brendan Higgins)
  - kunit: test: add tests for kunit test abort (Brendan Higgins)
  - kunit: test: add support for test abort (Brendan Higgins)
  - objtool: add kunit_try_catch_throw to the noreturn list (Brendan Higgins)
  - kunit: test: add initial tests (Brendan Higgins)
  - lib: enable building KUnit in lib/ (Brendan Higgins)
  - kunit: test: add the concept of expectations (Brendan Higgins)
  - kunit: test: add assertion printing library (Brendan Higgins)
  - kunit: test: add string_stream a std::stream like string builder (Brendan Higgins)
  - kunit: test: add test resource management API (Brendan Higgins)
  - kunit: test: add KUnit test runner core (Brendan Higgins)
  - drm/amdgpu: don't map BO in reserved region (Madhav Chauhan)
  - drm/amdgpu: prevent double kfree ttm->sg (Philip Yang)
  - drm/amd/display: Stop if retimer is not available (Rodrigo Siqueira)
  - drm/amdgpu: increase atombios cmd timeout (John Clements)
  - drm/amdgpu: Fix buffer overflow in INFO ioctl (Alex Deucher)
  - drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails (Navid Emamdoost)
  - drm/amd/display: fix ref count leak in amdgpu_drm_ioctl (Navid Emamdoost)
  - drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms (Navid Emamdoost)
  - drm/amdgpu: avoid dereferencing a NULL pointer (Jack Xiao)
  - drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl() (Peilin Ye)
  - drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event (Aaron Ma)
  - drm/amdgpu: fix typo for vcn1 idle check (James Zhu)
  - drm/amd/amdgpu: Fix GPR read from debugfs (v2) (Tom St Denis)
  - drm/amd/display: Clear link settings on MST disable connector (Bhawanpreet Lakha)
  - drm/amd/dm/mst: Ignore payload update failures (Lyude Paul)
  - drm/amdgpu: add cache flush workaround to gfx8 emit_fence (Pierre-Eric Pelloux-Prayer)
  - drm/amdgpu: fix uninitialized variable pasid_mapping_needed (Colin Ian King)
  - drm/amdgpu: fix potential double drop fence reference (Pan Bian)
  - drm/amdgpu: disallow direct upload save restore list from gfx driver (Hawking Zhang)
  - drm/amdgpu: grab the id mgr lock while accessing passid_mapping (Christian König)
  - drm/sched: Fix passing zero to 'PTR_ERR' warning v2 (Andrey Grodzovsky)
  - drm/scheduler: fix rare NULL ptr race (Yintian Tao)
  - drm: Don't free jobs in wait_event_interruptible() (Steven Price)
  - drm/sched: Set error to s_fence if HW job submission failed. (Andrey Grodzovsky)
  - drm/scheduler: use job count instead of peek (Christian König)
  - drm/sched: Fix make htmldocs warnings. (Andrey Grodzovsky)
  - drm/sched: Fix static checker warning for potential NULL ptr (Andrey Grodzovsky)
  - drm/scheduler: Fix job cleanup without timeout handler (Erico Nunes)
  - drm/scheduler: Add flag to hint the release of guilty job. (Andrey Grodzovsky)
  - drm/sched: Keep s_fence->parent pointer (Andrey Grodzovsky)
  - drm/scheduler: rework job destruction (Christian König)
  - drm/sched: Fix description of drm_sched_stop (Jonathan Neuschäfer)
  - drm/sched: Fix entities with 0 rqs. (Bas Nieuwenhuizen)
  - drm/sched: Always trace the dependencies we wait on, to fix a race. (Eric Anholt)
  - drm/sched: Rework HW fence processing. (Andrey Grodzovsky)
  - drm/sched: Refactor ring mirror list handling. (Andrey Grodzovsky)
  - drm/scheduler: Add drm_sched_suspend/resume_timeout() (Sharat Masetty)
  - drm/scheduler: Set sched->thread to NULL on failure (Sharat Masetty)
  - drm/sched: revert "fix timeout handling v2" v2 (Christian König)
  - drm/scheduler: Fix bad job be re-processed in TDR (Trigger Huang)
  - drm/scheduler: Add drm_sched_job_cleanup (Sharat Masetty)
  - drm/sched: Add boolean to mark if sched is ready to work v5 (Andrey Grodzovsky)
  - drm/sched: add drm_sched_fault (Christian König)
  - drm/sched: make sure timer is restarted (Christian König)
  - drm/sched: fix timeout handling v2 (Christian König)
  - drm/sched: add drm_sched_start_timeout helper (Christian König)
  - drm/scheduler: Simplify spsc_queue_count check in drm_sched_entity_select_rq (Nathan Chancellor)
  - drm/scheduler: remove timeout work_struct from drm_sched_job (v3) (Nayan Deshmukh)
  - drm/scheduler: avoid redundant shifting of the entity v2 (Nayan Deshmukh)
  - drm/scheduler: Add stopped flag to drm_sched_entity (Andrey Grodzovsky)
  - drm/scheduler: rename gpu_scheduler.c to sched_main.c (Christian König)
  - drm/scheduler: cleanup entity coding style (Christian König)
  - drm/scheduler: move entity handling into separate file (Christian König)
  - drm/scheduler: trivial error handling fix (Christian König)
  - drm/scheduler: change entities rq even earlier (Christian König)
  - drm/scheduler: fix last_scheduled handling (Christian König)
  - drm/scheduler: Remove entity->rq NULL check (Christian König)
  - drm/scheduler: bind job earlier to scheduler (Christian König)
  - drm/scheduler: fix setting the priorty for entities (v2) (Christian König)
  - drm/scheduler: Add job dependency trace. (Andrey Grodzovsky)
  - drm/scheduler: move idle entities to scheduler with less load v2 (Nayan Deshmukh)
  - drm/scheduler: add new function to get least loaded sched v2 (Nayan Deshmukh)
  - drm/scheduler: add counter for total jobs in scheduler (Nayan Deshmukh)
  - drm/scheduler: add a list of run queues to the entity (Nayan Deshmukh)
  - KVM: arm64: pmu: Only handle supported event counters (Eric Auger)
  - KVM: arm64: pmu: Fix chained SW_INCR counters (Eric Auger)
  - KVM: arm64: pmu: Don't mark a counter as chained if the odd one is disabled (Eric Auger)
  - KVM: arm64: pmu: Don't increment SW_INCR if PMCR.E is unset (Eric Auger)
  - KVM: arm64: pmu: Reset sample period on overflow handling (Marc Zyngier)
  - KVM: arm64: pmu: Set the CHAINED attribute before creating the in-kernel event (Marc Zyngier)
  - arm64: KVM: Handle PMCR_EL0.LC as RES1 on pure AArch64 systems (Marc Zyngier)
  - KVM: arm64: pmu: Fix cycle counter truncation (Marc Zyngier)
  - KVM: arm/arm64: Introduce kvm_pmu_vcpu_init() to setup PMU counter index (Zenghui Yu)
  - KVM: arm/arm64: Support chained PMU counters (Andrew Murray)
  - KVM: arm/arm64: Remove pmc->bitmask (Andrew Murray)
  - KVM: arm/arm64: Re-create event when setting counter value (Andrew Murray)
  - KVM: arm/arm64: Extract duplicated code to own function (Andrew Murray)
  - KVM: arm/arm64: Rename kvm_pmu_{enable/disable}_counter functions (Andrew Murray)
  - anolis: kvm/pmu: support kvm compiled for module (Shannon Zhao)
  - arm64: KVM: Fix perf cycle counter support for VHE (Andrew Murray)
  - arm64: docs: Document perf event attributes (Andrew Murray)
  - arm64: KVM: Avoid isb's by using direct pmxevtyper sysreg (Andrew Murray)
  - arm64: KVM: Enable VHE support for :G/:H perf event modifiers (Andrew Murray)
  - arm64: KVM: Enable !VHE support for :G/:H perf event modifiers (Andrew Murray)
  - arm64: arm_pmu: Add !VHE support for exclude_host/exclude_guest attributes (Andrew Murray)
  - arm64: KVM: Add accessors to track guest/host only counters (Andrew Murray)
  - arm64: KVM: Encapsulate kvm_cpu_context in kvm_host_data (Andrew Murray)
  - arm64: arm_pmu: Remove unnecessary isb instruction (Andrew Murray)
  - anolis: mm, memcg: make up for missing config wrapper (Xu Yu)
  - anolis: sched: Prevent rq->cfs_tasks splited into to two cachelines (Yihao Wu)
  - openeuler: firmware: arm_sdei: Prohibit probing in '_sdei_handler' (Xiongfeng Wang)
  - ACPI/IORT: Fix PMCG node single ID mapping handling (Tuan Phan)
  - driver core: platform: Add platform_get_irq_byname_optional() (Hans de Goede)
  - mm/mempolicy.c: fix out of bounds write in mpol_parse_str() (Dan Carpenter)
  - mm/slub.c: fix corrupted freechain in deactivate_slab() (Dongli Zhang)
  - mm/memcg: fix refcount error while moving and swapping (Hugh Dickins)
  - arm64: kaslr: Check command line before looking for a seed (Mark Brown)
  - arm64: kaslr: Announce KASLR status on boot (Mark Brown)
  - arm64: perf: add the missing case 20 in PMEVN_SWITCH() (Wei Li)
  - arm64: perf: fix Invalid PMEV* index WARNING (Wei Li)
  - arm64: perf: fix wrong event counter index (Wei Li)
  - arm64: perf: add pmu_nmi_enable to control pmu nmi (Yang Yingliang)
  - arm64: Add support for hard lockup by using pmu counter (Wei Li)
  - arm_pmu: Use NMIs for PMU (Julien Thierry)
  - arm_pmu: Introduce pmu_irq_ops (Julien Thierry)
  - arm/arm64: kvm: pmu: Make overflow handler NMI safe (Julien Thierry)
  - arm64: perf: Do not call irq_work_run in NMI context (Julien Thierry)
  - perf/arm_pmu: Move PMU lock to ARMv6 events (Julien Thierry)
  - armv7 remove pmu locking (Julien Thierry)
  - armv7 save/resore pmsel (Julien Thierry)
  - armv8 remove pmu locking (Julien Thierry)
  - arm64: perf: avoid PMXEV* indirection (Mark Rutland)
  - block, zoned: fix integer overflow with BLKRESETZONE et al (Alexey Dobriyan)
  - mm, swap: disallow swapon() on zoned block devices (Naohiro Aota)
  - configs: support SMR zoned device (Joseph Qi)
  - block: use blk_op_str() in blk-mq-debugfs.c (Chaitanya Kulkarni)
  - null_blk: add trace in null_blk_zoned.c (Chaitanya Kulkarni)
  - block: add centralize REQ_OP_XXX to string helper (Chaitanya Kulkarni)
  - null_blk: add tracepoint helpers for zoned mode (Chaitanya Kulkarni)
  - block: add a zone condition debug helper (Chaitanya Kulkarni)
  - null_blk: Fix zone write handling (Damien Le Moal)
  - null_blk: Fix REQ_OP_ZONE_CLOSE handling (Damien Le Moal)
  - dm: don't call report zones for more than the user requested (Johannes Thumshirn)
  - scsi: sd_sbc: Fix sd_zbc_report_zones() (Damien Le Moal)
  - scsi: sd_zbc: Remove set but not used variable 'buflen' (YueHaibing)
  - block: rework zone reporting (Christoph Hellwig)
  - scsi: sd_zbc: Cleanup sd_zbc_alloc_report_buffer() (Damien Le Moal)
  - null_blk: Add zone_nr_conv to features (Damien Le Moal)
  - null_blk: clean up report zones (Christoph Hellwig)
  - null_blk: clean up the block device operations (Christoph Hellwig)
  - block: Remove partition support for zoned block devices (Damien Le Moal)
  - block: Simplify report zones execution (Damien Le Moal)
  - block: cleanup the !zoned case in blk_revalidate_disk_zones (Christoph Hellwig)
  - anolis: block: fix type mismatch build warning (Joseph Qi)
  - block: Enhance blk_revalidate_disk_zones() (Damien Le Moal)
  - compat_ioctl: block: handle add zone open, close and finish ioctl (Arnd Bergmann)
  - null_blk: add zone open, close, and finish support (Ajay Joshi)
  - null_blk: return fixed zoned reads > write pointer (Ajay Joshi)
  - null_blk: Fix zoned command return code (Keith Busch)
  - null_blk: create a helper for zoned devices (Chaitanya Kulkarni)
  - dm: add zone open, close and finish support (Ajay Joshi)
  - scsi: sd_zbc: add zone open, close, and finish support (Ajay Joshi)
  - block: add zone open, close and finish ioctl support (Ajay Joshi)
  - block: add zone open, close and finish operations (Ajay Joshi)
  - block: Simplify REQ_OP_ZONE_RESET_ALL handling (Damien Le Moal)
  - block: Remove REQ_OP_ZONE_RESET plugging (Damien Le Moal)
  - scsi: sd_zbc: Fix sd_zbc_complete() (Damien Le Moal)
  - null_blk: implement REQ_OP_ZONE_RESET_ALL (Chaitanya Kulkarni)
  - scsi: implement REQ_OP_ZONE_RESET_ALL (Chaitanya Kulkarni)
  - blk-zoned: implement REQ_OP_ZONE_RESET_ALL (Chaitanya Kulkarni)
  - block: add req op to reset all zones and flag (Chaitanya Kulkarni)
  - null_blk: remove duplicate check for report zone (Chaitanya Kulkarni)
  - null_blk: Add conventional zone configuration for zoned support (Masato Suzuki)
  - scsi: sd_zbc: Fix zone information messages (Damien Le Moal)
  - blk-zoned: Remove the definition of blk_zone_start() (Bart Van Assche)
  - block: Fix potential overflow in blk_report_zones() (Damien Le Moal)
  - dm: fix bug with RCU locking in dm_blk_report_zones (Sergei Shtepa)
  - block: Limit zone array allocation size (Damien Le Moal)
  - block: Fix null_blk_zoned creation failure with small number of zones (Shin'ichiro Kawasaki)
  - sd_zbc: Fix report zones buffer allocation (Damien Le Moal)
  - block: Kill gfp_t argument of blkdev_report_zones() (Damien Le Moal)
  - block: Allow mapping of vmalloc-ed buffers (Damien Le Moal)
  - scsi: sd_zbc: Fix sd_zbc_report_zones() buffer allocation (Masato Suzuki)
  - uapi: fix ioctl documentation (Damien Le Moal)
  - scsi: sd_zbc: Fix compilation warning (Damien Le Moal)
  - uapi: linux/blkzoned.h: fix BLKGETZONESZ and BLKGETNRZONES definitions (Dmitry V. Levin)
  - compat_ioctl: block: handle BLKGETZONESZ/BLKGETNRZONES (Arnd Bergmann)
  - compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE (Arnd Bergmann)
  - block: Introduce blk_revalidate_disk_zones() (Damien Le Moal)
  - block: add a report_zones method (Christoph Hellwig)
  - dm: don't use bio_trim() afterall (Mike Snitzer)
  - block: Expose queue nr_zones in sysfs (Damien Le Moal)
  - block: Improve zone reset execution (Damien Le Moal)
  - block: Introduce BLKGETNRZONES ioctl (Damien Le Moal)
  - block: Introduce BLKGETZONESZ ioctl (Damien Le Moal)
  - block: Limit allocation of zone descriptors for report zones (Damien Le Moal)
  - block: Introduce blkdev_nr_zones() helper (Damien Le Moal)
  - scsi: sd_zbc: Fix sd_zbc_check_zones() error checks (Damien Le Moal)
  - scsi: sd_zbc: Reduce boot device scan and revalidate time (Damien Le Moal)
  - scsi: sd_zbc: Rearrange code (Damien Le Moal)
  - anolis: xsk: bugfix for implicit declaration of function 'xsk_umem_unpin_pages' (Xuan Zhuo)
  - lkdtm: Remove references to CONFIG_REFCOUNT_FULL (Will Deacon)
  - locking/refcount: Remove unused 'refcount_error_report()' function (Will Deacon)
  - locking/refcount: Consolidate implementations of refcount_t (Will Deacon)
  - locking/refcount: Consolidate REFCOUNT_{MAX,SATURATED} definitions (Will Deacon)
  - locking/refcount: Move saturation warnings out of line (Will Deacon)
  - locking/refcount: Improve performance of generic REFCOUNT_FULL code (Will Deacon)
  - locking/refcount: Move the bulk of the REFCOUNT_FULL implementation into the <linux/refcount.h> header (Will Deacon)
  - locking/refcount: Remove unused refcount_*_checked() variants (Will Deacon)
  - locking/refcount: Ensure integer operands are treated as signed (Will Deacon)
  - locking/refcount: Define constants for saturation and max refcount values (Will Deacon)
  - anolis: mm: hugetlb: Fix panic that caused by spin_lock not be unlocked (Xin Hao)
  - mm: migrate: fix missing update page_private to hugetlb_page_subpool (Muchun Song)
  - mm: hugetlb: introduce nr_free_vmemmap_pages in the struct hstate (Muchun Song)
  - mm: hugetlb: add a kernel parameter hugetlb_free_vmemmap (Muchun Song)
  - mm: hugetlb: alloc the vmemmap pages associated with each HugeTLB page (Muchun Song)
  - mm: hugetlb: defer freeing of HugeTLB pages (Muchun Song)
  - anolis: mm: add page_size() func (Xin Hao)
  - mm: hugetlb: free the vmemmap pages associated with each HugeTLB page (Muchun Song)
  - mm: hugetlb: gather discrete indexes of tail page (Muchun Song)
  - mm: hugetlb: introduce a new config HUGETLB_PAGE_FREE_VMEMMAP (Muchun Song)
  - mm: memory_hotplug: factor out bootmem core functions to bootmem_info.c (Muchun Song)
  - hugetlb: fix uninitialized subpool pointer (Mike Kravetz)
  - include/linux/hugetlb.h: add synchronization information for new hugetlb specific flags (Mike Kravetz)
  - hugetlb: convert PageHugeFreed to HPageFreed flag (Mike Kravetz)
  - hugetlb: convert PageHugeTemporary() to HPageTemporary flag (Mike Kravetz)
  - hugetlb: convert page_huge_active() HPageMigratable flag (Mike Kravetz)
  - hugetlb: use page.private for hugetlb specific page flags (Mike Kravetz)
  - x86: mm: add p?d_leaf() definitions (Steven Price)
  - arm64: mm: add p?d_leaf() definitions (Steven Price)
  - mm: add generic p?d_leaf() macros (Steven Price)
  - iommu/vt-d: Fix a bug in intel_iommu_iova_to_phys() for huge page (牛衣)
  - anolis: PHYTIUM: NVME: fixed interrupts are concentrated in one cpu (Xin Hao)
  - anolis: PHYTIUM: smmu: remove the unsued codes (Xin Hao)
  - anolis: mm: Fix minus "Cached" in meminfo (Xunlei Pang)
  - clocksource: Add clocksource id for arm arch counter (Jianyong Wu)
  - time: Add mechanism to recognize clocksource in time_get_snapshot (Thomas Gleixner)
  - ptp: Reorganize ptp_kvm.c to make it arch-independent (Jianyong Wu)
  - irqchip/gic-v3-its: Balance initial LPI affinity across CPUs (Marc Zyngier)
  - irqchip/gic-v3-its: Track LPI distribution on a per CPU basis (Marc Zyngier)
  - perf ordered_events: Add 'struct ordered_events_buffer' layer (Jiri Olsa)
  - perf/core: Fix endless multiplex timer (Wen Yang)
  - perf/core: Fix corner case in perf_rotate_context() (Wen Yang)
  - perf/cgroups: Don't rotate events for cgroups unnecessarily (Wen Yang)
  - anolis: PHYTIUM: smmu: one device per iommu group for VF/PF passthrough (Wang Yinfeng)
  - anolis: PHYTIUM: Add cputypes and machine support (Wang Yinfeng)
  - anolis: meminfo: reduce active and inactive from memcg usage (Issac Hai)
  - bpf/xskmap: Return ERR_PTR for failure case instead of NULL. (Jonathan Lemon)
  - mm/filemap: add missing mem_cgroup_uncharge() to __add_to_page_cache_locked() (Waiman Long)
  - anolis: memcg: Record latency of dirty throttle (Xunlei Pang)
  - PCI: pciehp: Prevent deadlock on disconnect (Mika Westerberg)
  - PCI: pciehp: Tolerate Presence Detect hardwired to zero (Lukas Wunner)
  - perf/amd/uncore: Allow F19h user coreid, threadmask, and sliceid specification (Kim Phillips)
  - perf/amd/uncore: Allow F17h user threadmask and slicemask specification (Kim Phillips)
  - perf/amd/uncore: Prepare to scale for more attributes that vary per family (Kim Phillips)
  - perf/x86/amd: Fix sampling Large Increment per Cycle events (Kim Phillips)
  - perf/amd/uncore: Set all slices and threads to restore perf stat -a behaviour (Kim Phillips)
  - blk-cgroup: Use cond_resched() when destroy blkgs (Baolin Wang)
  - srcu: Take early exit on memory-allocation failure (Paul E. McKenney)
  - mm: memcontrol: fix NR_ANON_THPS accounting in charge moving (Muchun Song)
  - mm: memmap_init: iterate over memblock regions rather that check each PFN (Baoquan He)
  - mm: make memmap_init a proper function (Pavel Tatashin)
  - mm, thp: tweak reclaim/compaction effort of local-only and all-node allocations (Vlastimil Babka)
  - mm, page_alloc: allow hugepage fallback to remote nodes when madvised (David Rientjes)
  - anolis: revert "mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings" (Xu Yu)
  - mm, hugetlb: allow hugepage allocations to reclaim as needed (David Rientjes)
  - mm, page_alloc: avoid expensive reclaim when compaction may not succeed (David Rientjes)
  - arm64: mm: Make flush_tlb_fix_spurious_fault() a no-op (Will Deacon)
  - mm/memory.c: skip spurious TLB flush for retried page fault (Yang Shi)
  - mm: drop mmap_sem before calling balance_dirty_pages() in write fault (Johannes Weiner)
  - page_alloc: consider highatomic reserve in watermark fast (Jaewon Kim)
  - anolis: mm: memcg: Fix memcg reclaim soft lockup (Xunlei Pang)
  - timer: Fix wheel index calculation on last level (Frederic Weisbecker)
  - timer: Prevent base->clk from moving backward (Frederic Weisbecker)
  - anolis: arm64: fixed smmu tlb timeout by msi iommu map (Zou Cao)
  - anolis: arm64: iommu: add iommu_hwfix to work around arm-smmu hw issues (Zou Cao)
  - scsi: qla4xxx: fix double free bug (Pan Bian)
  - scsi: iscsi: qla4xxx: fix double free in probe (Dan Carpenter)
  - virtio-blk: free vblk-vqs in error path of virtblk_probe() (Hou Tao)
  - vfio-pci: Mask cap zero (Alex Williamson)
  - vfio/pci: fix memory leaks in alloc_perm_bits() (Qian Cai)
  - vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn() (Sean Christopherson)
  - vfio: avoid possible overflow in vfio_iommu_type1_pin_pages (Yan Zhao)
  - anolis: livepatch: fix stack check when disabling patch (Xu Yu)
  - anolis: livepatch: undo pre-patch callbacks if patch fails (xiejingfeng)
  - anolis: livepatch: remove the pre_patch_callback/post_unpatch_callback from the stop_machine context (xiejingfeng)
  - anolis: livepatch: adjust some printing level (xiejingfeng)
  - anolis: livepatch: support forced patching (xiejingfeng)
  - anolis: livepatch/core: introduce stop machine consistency model (Shanpei Chen)
  - anolis: livepatch/core: introduce consistency model macro (Shanpei Chen)
  - livepatch: Prevent module-specific KLP rela sections from referencing vmlinux symbols (Josh Poimboeuf)
  - livepatch: Remove .klp.arch (Peter Zijlstra)
  - livepatch: Apply vmlinux-specific KLP relocations early (Josh Poimboeuf)
  - livepatch: Disallow vmlinux.ko (Josh Poimboeuf)
  - ftrace: Introduce PERMANENT ftrace_ops flag (Miroslav Benes)
  - livepatch: Remove stale kobj_added entries from kernel-doc descriptions (Miroslav Benes)
  - livepatch: Remove custom kobject state handling (Petr Mladek)
  - livepatch: Module coming and going callbacks can proceed with all listed patches (Petr Mladek)
  - livepatch: Introduce klp_for_each_patch macro (Petr Mladek)
  - livepatch: Use lists to manage patches, objects and functions (Jason Baron)
  - livepatch: Simplify API by removing registration step (Petr Mladek)
  - livepatch: Don't block the removal of patches loaded after a forced transition (Petr Mladek)
  - livepatch: Consolidate klp_free functions (Petr Mladek)
  - livepatch: Shuffle klp_enable_patch()/klp_disable_patch() code (Petr Mladek)
  - livepatch: Change unsigned long old_addr -> void *old_func in struct klp_func (Petr Mladek)
  - kernel/module: Fix memleak in module_add_modinfo_attrs() (YueHaibing)
  - anolis: Revert "livepatch: enforce patch stacking semantics" (Jeffle Xu)
  - KVM: arm64: Fix 32bit PC wrap-around (Marc Zyngier)
  - KVM: arm64: vgic-its: Fix memory leak on the error path of vgic_add_lpi() (Zenghui Yu)
  - KVM: arm64: vgic-v3: Retire all pending LPIs on vcpu destroy (Zenghui Yu)
  - KVM: arm/arm64: vgic-v3: Retire pending interrupts on disabling LPIs (Marc Zyngier)
  - KVM: arm: vgic: Synchronize the whole guest on GIC{D,R}_I{S,C}ACTIVER read (Marc Zyngier)
  - KVM: arm: vgic: Fix limit condition when writing to GICD_I[CS]ACTIVER (Marc Zyngier)
  - KVM: arm: Make inject_abt32() inject an external abort instead (James Morse)
  - KVM: arm: Fix DFSR setting for non-LPAE aarch32 guests (James Morse)
  - KVM: arm/arm64: Fix young bit from mmu notifier (Gavin Shan)
  - KVM: arm/arm64: vgic-its: Properly check the unmapped coll in DISCARD handler (Zenghui Yu)
  - KVM: arm/arm64: Correct AArch32 SPSR on exception entry (Mark Rutland)
  - KVM: arm/arm64: Correct CPSR on exception entry (Mark Rutland)
  - KVM: arm64: Correct PSTATE on exception entry (Mark Rutland)
  - KVM: arm/arm64: Re-check VMA on detecting a poisoned page (James Morse)
  - KVM: arm/arm64: vgic-its: Fix restoration of unmapped collections (Eric Auger)
  - KVM: arm64: Ensure 'params' is initialised when looking up sys register (Will Deacon)
  - KVM: arm/arm64: vgic: Fix potential double free dist->spis in __kvm_vgic_destroy() (Miaohe Lin)
  - arm64: xen: Use existing helper to check interrupt status (Julien Thierry)
  - arm64: Use daifflag_restore after bp_hardening (Julien Thierry)
  - i2c: ismt: Add support for Intel Cedar Fork (Jarkko Nikula)
  - arm64/mm: Correct the cache line size warning with non coherent device (Masayoshi Mizuma)
  - arm64: cacheinfo: Update cache_line_size detected from DT or PPTT (Shaokun Zhang)
  - drivers: base: cacheinfo: Add variable to record max cache line size (Shaokun Zhang)
  - pmu/smmuv3: Clear IRQ affinity hint on device removal (Jean-Philippe Brucker)
  - perf/smmuv3: Use platform_get_irq_optional() for wired interrupt (John Garry)
  - perf/smmuv3: Remove the leftover put_cpu() in error path (Hanjun Guo)
  - perf/smmuv3: use devm_platform_ioremap_resource() to simplify code (YueHaibing)
  - perf/smmuv3: Validate groups for global filtering (Robin Murphy)
  - perf/smmuv3: Validate group size (Robin Murphy)
  - drivers: depend on HAS_IOMEM for devm_platform_ioremap_resource() (Bartosz Golaszewski)
  - drivers: provide devm_platform_ioremap_resource() (Bartosz Golaszewski)
  - driver core: platform: Introduce platform_get_irq_optional() (Thierry Reding)
  - driver core: platform: Add an error message to platform_get_irq*() (Stephen Boyd)
  - drivers/perf: arm_spe: Don't error on high-order pages for aux buf (Will Deacon)
  - anolis: sysfs/cpu: fix allnoconfig build error (Xunlei Pang)
  - anolis: arm64: hookers: flush proper tlb range (Xu Yu)
  - anolis: net :hookers: fixed error pte operation for write (Zou Cao)
  - anolis: hookers: add the check of pmd huge or pte (Zou Cao)
  - anolis: tcp: Add feature support for tunable tcp delayed ack (George Zhang)
  - anolis: sched: Add a stub function in task's exiting (Erwei Deng)
  - virtiofs: split requests that exceed virtqueue size (Connor Kuehl)
  - fuse: fix typo for fuse_conn.max_pages comment (Connor Kuehl)
  - cuse: fix ioctl (Miklos Szeredi)
  - fuse: add max_pages to init_out (Constantine Shulyupin)
  - anolis: cpuacct: fix guest cgroup usage more than user usage (Zeng Jiahao)
  - anolis: arm64: configs: Add sound card related drivers (Xin Hao)
  - anolis: x86: remove noinstr from _prepare_exit_to_usermode() (Tianchen Ding)
  - mt76: fix array overflow on receiving too many fragments for a packet (Felix Fietkau)
  - mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring (Navid Emamdoost)
  - mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf (Navid Emamdoost)
  - mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Ganapathi Bhat)
  - media: ov519: add missing endpoint sanity checks (Johan Hovold)
  - media: xirlink_cit: add missing descriptor sanity checks (Johan Hovold)
  - media: stv06xx: add missing descriptor sanity checks (Johan Hovold)
  - media: usb: fix memory leak in af9005_identify_state (Navid Emamdoost)
  - Input: add safety guards to input_set_keycode() (Dmitry Torokhov)
  - drm/amdgpu: fix multiple memory leaks in acp_hw_init (Navid Emamdoost)
  - ath9k: release allocated buffer if timed out (Navid Emamdoost)
  - ath9k_htc: release allocated buffer if timed out (Navid Emamdoost)
  - anolis: sched: add paddings for some structures in scheduler (Yihao Wu)
  - anolis: virtio_net: change xsk_budget default to 64 (Xuan Zhuo)
  - anolis: virtio-net: support unpin xsk pages (Xuan Zhuo)
  - anolis: virtio_net: add __netif_tx_lock_bh before access sq->xsk (Xuan Zhuo)
  - anolis: xsk: support unpin page delay (Xuan Zhuo)
  - xsk: remove AF_XDP socket from map when the socket is released (Björn Töpel)
  - bpf_xdp_redirect_map: Perform map lookup in eBPF helper (Toke Høiland-Jørgensen)
  - devmap: Rename ifindex member in bpf_redirect_info (Toke Høiland-Jørgensen)
  - anolis: xsk: do not add to xsk_list when tx is NULL (Xuan Zhuo)
  - anolis: virtio-net: bugfix for xsk free the xsk.hdr with race (Xuan Zhuo)
  - anolis: virtio-net: add barrier for bit option (Xuan Zhuo)
  - anolis: virtio-net: xsk remove the timer cancel option (Xuan Zhuo)
  - anolis: virtio-net: fix kcalloc with GFP_ATOMIC inside xsk enable (Xuan Zhuo)
  - anolis: virtio-net, xsk: add stats from xsk (Xuan Zhuo)
  - anolis: virtio-net, xsk: virtio-net support xsk (Xuan Zhuo)
  - anolis: xsk, virtio-net: prepare for support xsk (Xuan Zhuo)
  - anolis: virtio-net, xsk: distinguish XDP_TX and XSK XMIT ctx (Xuan Zhuo)
  - anolis: xsk: prepare for driver (Xuan Zhuo)
  - anolis: xsk: fix for tx == NULL (Xuan Zhuo)
  - anolis: xsk: support write able edge trigger (Xuan Zhuo)
  - anolis: xsk: not trigger sk_write_space when every skb free (Xuan Zhuo)
  - xsk: Change the tx writeable condition (Xuan Zhuo)
  - xsk: Replace datagram_poll by sock_poll_wait (Xuan Zhuo)
  - xsk: Add getsockopt XDP_OPTIONS (Maxim Mikityanskiy)
  - anolis: erofs: fix opening large blobs over fuse/virtiofs (Gao Xiang)
  - anolis: ext4: fix softlockup during fiemap dump (Jeffle Xu)
  - anolis: configs: enable CONFIG_EROFS_FS (Gao Xiang)
  - anolis: erofs: fix a dead loop due to PIPE iovec (Liu Bo)
  - anolis: dax: add dax_read_one_pfn helper (Liu Bo)
  - anolis: erofs: support passing in struct file * for FUSE (Gao Xiang)
  - anolis: erofs: support blobfile over virtiofs (Gao Xiang)
  - anolis: erofs: support RAFS v6 over virtiofs (Gao Xiang)
  - erofs: add multiple device support (Gao Xiang)
  - erofs: introduce erofs_sb_has_xxx() helpers (Gao Xiang)
  - erofs: fix double free of 'copied' (Gao Xiang)
  - erofs: support reading chunk-based uncompressed files (Gao Xiang)
  - erofs: introduce chunk-based file on-disk format (Gao Xiang)
  - erofs: don't use erofs_map_blocks() any more (Yue Hu)
  - anolis: erofs: move from drivers/staging/ to fs/ (Gao Xiang)
  - anolis: erofs: sync up with kernel 5.10 (Gao Xiang)


author: Shile Zhang <shile.zhang@linux.alibaba.com> [4.19.91-26_rc2.an8]
changelog:
  - netfilter: nat: never update the UDP checksum when it's 0 (Guillaume Nault)
  - anolis: configs: Enable CONFIG_NETDEVSIM by default (Heng Qi)
  - anolis: sched: Fix the performence regression because of update_rq_on_expel() (Cruz Zhao)
  - NFC: reorder the logic in nfc_{un,}register_device (Lin Ma) {CVE-2021-4202}
  - NFC: reorganize the functions in nci_request (Lin Ma) {CVE-2021-4202}
  - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() (Nikola Livic) {CVE-2021-4157}
  - xfs: fix missing CoW blocks writeback conversion retry (Darrick J. Wong)
  - xfs: force writes to delalloc regions to unwritten (Darrick J. Wong)
  - xfs: retry COW fork delalloc conversion when no extent was found (Christoph Hellwig)
  - xfs: remove the truncate short cut in xfs_map_blocks (Christoph Hellwig)
  - xfs: move xfs_iomap_write_allocate to xfs_aops.c (Christoph Hellwig)
  - xfs: move stat accounting to xfs_bmapi_convert_delalloc (Christoph Hellwig)
  - xfs: move transaction handling to xfs_bmapi_convert_delalloc (Christoph Hellwig)
  - xfs: split XFS_BMAPI_DELALLOC handling from xfs_bmapi_write (Christoph Hellwig)
  - xfs: factor out two helpers from xfs_bmapi_write (Christoph Hellwig)
  - xfs: simplify the xfs_bmap_btree_to_extents calling conventions (Christoph Hellwig)
  - xfs: remove the s_maxbytes checks in xfs_map_blocks (Christoph Hellwig)
  - xfs: remove the io_type field from the writeback context and ioend (Christoph Hellwig)
  - xfs: refactor xfs_iomap_prealloc_size (Darrick J. Wong)
  - xfs: measure all contiguous previous extents for prealloc size (Darrick J. Wong)
  - xfs: don't fail unwritten extent conversion on writeback due to edquot (Darrick J. Wong)
  - xfs: attach dquots and reserve quota blocks during unwritten conversion (Darrick J. Wong)
  - xfs: use the latest extent at writeback delalloc conversion time (Brian Foster)
  - xfs: create delalloc bmapi wrapper for full extent allocation (Brian Foster)
  - xfs: remove superfluous writeback mapping eof trimming (Brian Foster)
  - xfs: validate writeback mapping using data fork seq counter (Brian Foster)
  - xfs: update fork seq counter on data fork changes (Brian Foster)
  - mm/page_alloc.c: ratelimit allocation failure warnings more aggressively (Johannes Weiner)
  - mm, page_alloc: drop should_suppress_show_mem (Michal Hocko)
  - mm, page_alloc: move_freepages should not examine struct page of reserved memory (David Rientjes)
  - drm/vgem: Close use-after-free race in vgem_gem_create (Daniel Vetter) {CVE-2022-1419}
  - drm/vgem: Reclassify buffer creation debug message (Chris Wilson) {CVE-2022-1419}
  - mm/swapfile.c: fix potential memory leak in sys_swapon (Miaohe Lin)
  - mm/swapfile.c: move inode_lock out of claim_swapfile (Naohiro Aota)
  - mm/swapfile.c: fix a comment in sys_swapon() (Christoph Hellwig)
  - hibernate: Allow uswsusp to write to swap (Domenico Andreoli)
  - vfs: don't allow writes to swap files (Darrick J. Wong)
  - mm: set S_SWAPFILE on blockdev swap devices (Darrick J. Wong)
  - hinic: fix bug of wq out of bound access (XiangZao)
  - ext4: do not zeroout extents beyond i_disksize (Jan Kara)
  - anolis: mm, kidled: optimize kidled_set_page_age() call (Gang Deng)
  - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register (Haimin Zhang) {CVE-2022-1353}
  - xfs: Fix tail rounding in xfs_alloc_file_space() (Max Reitz)
  - anolis: configs: Enable CONFIG_TEST_BPF by default (root)
  - xfs: properly serialise fallocate against AIO+DIO (Dave Chinner)
  - xfs: prohibit fstrim in norecovery mode (Darrick J. Wong)
  - tracing/kprobes: Do the notrace functions check without kprobes on ftrace (Masami Hiramatsu)
  - net/mlx5: Add command entry handling completion (Moshe Shemesh)
  - anolis: tcmu: fix compile warnings (Joseph Qi)
  - io_uring: fix race between timeout flush and removal (Jens Axboe) {CVE-2022-29582}
  - anolis: x86: Enable Kidled for x86 (zhongjiang-ali)


author: Shile Zhang <shile.zhang@linux.alibaba.com> [4.19.91-26.an8]
changelog:
  - net/sched: cls_u32: fix netns refcount changes in u32_change() (Eric Dumazet) {CVE-2022-29581}
  - anolis: configs: Open CONFIG_RT_GROUP_SCHED (Xuchun)
  - perf tests: Fix a typo (Leo Yan)
  - perf tests: Disable bp_signal testing for arm64 (Leo Yan)
  - perf tests bp_account: Add dedicated checking helper is_supported() (Leo Yan)
  - netfilter: nat: limit port clash resolution attempts (Florian Westphal)
  - anolis: ftrace: fix update_tot_cnt statistic for x86 (Yinan Liu)
  - fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi) {CVE-2022-1011}
  - anolis: compiler: Make symbols visible defaultly when build vdso (Zeng Jiahao)
  - anolis: selftests/sgx: Add sgx functional test support without vdso (GuoRui.Yu)
  - anolis: selftests/sgx: make the sgx testcase compile with older openssl (GuoRui.Yu)
  - anolis: selftests/sgx: Fix sgx testcase compile error without vdso (GuoRui.Yu)
  - mm/vmalloc.c: keep track of free blocks for vmap allocation (Uladzislau Rezki (Sony))
  - anolis: irqbypass: optimize list traversal and lock contention (Zhiheng Tao)
  - ovl: fix regression with re-formatted lower squashfs (Amir Goldstein)
  - ovl: fix corner case of non-constant st_dev;st_ino (Amir Goldstein)
  - ovl: fix corner case of conflicting lower layer uuid (Amir Goldstein)
  - ovl: generalize the lower_fs[] array (Amir Goldstein)
  - ovl: generalize the lower_layers[] array (Amir Goldstein)
  - ovl: fix lookup failure on multi lower squashfs (Amir Goldstein)
  - ovl: relax requirement for non null uuid of lower fs (Amir Goldstein)
  - locks: print unsigned ino in /proc/locks (Amir Goldstein)
  - anolis: fuse: rename FUSE_PERFILE_DAX to FUSE_HAS_INODE_DAX (Jeffle Xu)
  - bpf, selftests: use :: 1 for localhost in tcp_server.py (John Fastabend)
  - anolis: configs: Enable CONFIG_IP_DCCP by default (Heng Qi)
  - ovl: return required buffer size for file handles (Lubos Dolezel)
  - ovl: fix WARN_ON nlink drop to zero (Miklos Szeredi)
  - cuse: fix broken release (Miklos Szeredi)
  - selftests: vm: drop dependencies on page flags from mlock2 tests (Michal Hocko)
  - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses (Eric Dumazet) {CVE-2021-4203}
  - cred: allow get_cred() and put_cred() to be given NULL. (NeilBrown) {CVE-2021-4203}
  - ring-buffer: Protect ring_buffer_reset() from reentrancy (Steven Rostedt (VMware))
  - tracing: Fix race in trace_open and buffer resize call (Gaurav Kohli)
  - ring-buffer: speed up buffer resets by avoiding synchronize_rcu for each CPU (Nicholas Piggin)
  - xfs: replace -EIO with -EFSCORRUPTED for corrupt metadata (Darrick J. Wong)
  - xfs: namecheck directory entry names before listing them (Darrick J. Wong)
  - xfs: namecheck attribute names before listing them (Darrick J. Wong)
  - xfs: check attribute leaf block structure (Darrick J. Wong)
  - xfs: check attribute name validity (Darrick J. Wong)
  - xfs: check directory name validity (Darrick J. Wong)
  - xfs: scrub should flag dir/attr offsets that aren't mappable with xfs_dablk_t (Darrick J. Wong)
  - xfs: abort xattr scrub if fatal signals are pending (Darrick J. Wong)
  - anolis: xfs: serialise aio+dio for missing xfs specific ioctls (Joseph Qi)


author: Li Chenguang <lichenguang@kylinos.cn> [4.19.91-26.01]
changelog:
  - Type: update 
  - ID:   [TASK#121313]
  - SUG:  NA
  - DESC:
  - initial for Kylin
  - processor: patch: 9001-KYLIN-Hygon-disable-Cstate.patch to disable c-state
  - Add Patch9002: 9002-KYLIN-Update-hns3-driver.patch
  - Add Patch9003: 9003-KYLIN-Add-wangxun-txgbe-and-ngbe-drivers.patch
  - configs: arm64: Update CONFIG_GFS2_FS as m
  - Add Patch9004: 9004-KYLIN-Add-huawei-hifc-driver.patch
  - Add Patch9005: 9005-KYLIN-Merge-huawei-bma-code.patch,this patch made by yupeng.
  - Fix SOURCES/kernel-4.19.91-aarch64.config to make the patch effect.
  - logo: Change the installation logo [Patch9006]
  - Add Patch9007: 9007-KYLIN-Github-font-fix-255-glyph-limit-prepare-for-CJK-font.patch
  - Add Patch9008: 9008-KYLIN-Github-font-disable-setfont-if-we-have-cjk-font-in-k.patch
  - Add Patch9009: 9009-KYLIN_Github-font-add-cjk-font-that-has-65536-chars.patch
  - Add Patch9010: 9010-KYLIN-Github-font-font-fix-depend-issue.patch
  - Add Patch9011: 9011-KYLIN-Tty-font-fix-uninitialized-of-old_screen_size.patch
  - Fix SOURCES/kernel-4.19.91-aarch64.config and SOURCES/kernel-4.19.91-x86_64.config to make the patch effect.
  - logo: Adjust the installation logo [Patch9012]
  - Add Patch9013: 9013-KYLIN-Add-proc_osinfo-interface.patch
  - Enable signmodule macro
  - add kernel-abi-whitelists
  - configs: aarch64 and x86_64: Update CONFIG_ECRYPT_FS as m
  - configs: aarch64 Update CONFIG_BCACHE as m and CONFIG_CRC64 as m
  - add x509.genkey and mod-sign.sh


author: Cheng Weizheng <Chengweizheng@kylinos.cn> [4.19.91-26.el8.ks8.02]
changelog:
  - Type: update
  - ID:   [TASK#157396]
  - SUG:  NA
  - DESC: add missing content
  - add i686 header
  - add txgbe ngbe to filter modules


author: Li Chenguang <lichenguang@kylinos.cn> [4.19.91-26.el8.ks8.03]
changelog:
  - Type: bugfix
  - ID:   [TASK#117642]
  - SUG:  NA
  - DESC:
  - net:ipset: add the missing IP_SET_HASH_WITH_NET0 macro {CVE-2023-42753}


author: Chengweizheng <chengweizheng@kylinos.cn> - [4.19.91-26.el8.ks8.04]
changelog:
  - Type: cves
  - ID:   [TASK#224824]
  - SUG:  NA
  - DESC:
  -  netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) {CVE-2024-1086}


author: Zhao Mengmeng <zhaomengmeng@kylinos.cn> - [4.19.91-26.el8.ks8.05]
changelog:
  - Type: bugfix
  - ID:	[TASK#341541]
  - SUG:	NA
  - DESC:
  - REDHAT: mm/memcg: Fix mem_cgroup_id_get_online() underflow problem (Waiman Long)
  - REDHAT: mm/memcg: Free percpu stats memory of dying memcg's (Waiman Long)
  - mm/memcg: remove memcg CONFIG_MEMSLI and exstat feature (Zhao Mengmeng)
  - KYLIN: mm/memcontrol: fix wrong vmstats for dying memcg (Zhao Mengmeng)


author: Qiaojijun <qiaojijun@kylinos.cn> - [4.19.91-26.el8.ks8.06]
changelog:
  - Type: bugfix
  - ID : [TASK#373763],[TASK#341541]
  - SUG: NA
  - DESC:
  - net: fix the RTO timer retransmitting skb every 1ms if linear (Jason Xing) 
  - cgroup: disable kernel memory accounting for all memory cgroups by default (Zhao Mengmeng)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-7
changelog:
  - fix use-after-free in delayed newc link processing (#1602575)
  - fix a few obvious resource leaks and strcpy() misuses (#1602575)


author: Alexey Tikhonov <atikhono@redhat.com> - 1.13.0-6
changelog:
  - Resolves: rhbz#1989425 - CVE-2021-3672 c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-8]


author: Jan Grulich <jgrulich@redhat.com> - 0.26-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1757349


author: Jan Grulich <jgrulich@redhat.com> - 0.26-4
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990398

  - Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS
    Resolves: bz#1990399


author: Jan Grulich <jgrulich@redhat.com> - 0.26-6
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993283

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993246


author: Brian C. Lane <bcl@redhat.com> 28.14.53-1
changelog:
  - tests: Push example blueprints b/c they may not exist (atodorov)
    Related: rhbz#1825190
  - rhel-livemedia.ks: Add anaconda-live package to the example kickstart (bcl)
    Related: rhbz#1691319
  - Switch VMware testing env to improve stability results (chrobert)
    Related: rhbz#1825190


author: Brian C. Lane <bcl@redhat.com> 28.14.56-1
changelog:
  - Switch to using upstream mk-s390image for s390 cdboot.img creation (bcl)
    Related: rhbz#1892404
  - Add --squashfs-only option to drop inner rootfs.img layer (marmarek)
    Resolves: rhbz#1846282


author: Brian C. Lane <bcl@redhat.com> 28.14.57-1
changelog:
  - fixes #543 qemu -nodefconfig deprecated (afm404)
    Resolves: rhbz#1904168
  - sshd_config: Apply suggested changes (bcl)
    Resolves: rhbz#1872892


author: Dongqi <dongqi1@kylinos.cn> - 28.14.57-2.ks8.04
changelog:
  - Type: Update
  - ID: [TASK#179410]
  - SUG: NA
  - DESC: Change Requires lorax-templates-rhel to lorax-templates-kylin


author: Jiri Vanek <jvanek@redhat.com> - 3.7-3
changelog:
  - added link to http://hydra.brq.redhat.com:8080/view/c~j~c/#projectstatus
  - removed source check from test.yaml
  - added gating.yaml
  - Resolves: rhbz#1855374


author: Jiri Vanek <jvanek@redhat.com> - 4.0-2
changelog:
  - commented out requires lua-posix, it was always commented out in el8, never in fedora. IDK
  - Resolves: rhbz#1953923


author: Ondrej Kozina <okozina@redhat.com> - 2.2.0-2
changelog:
  - patch: Fix mapped segments overflow on 32bit architectures.
  - patch: Take optimal io size in account with LUKS2 reencryption.
  - Resolves: #1742815 #1746532


author: Ondrej Kozina <okozina@redhat.com> - 2.2.2-1
changelog:
  - Update to cryptsetup 2.2.2
  - LUKS2 reencryption honors activation flags (one time and persistent).
  - LUKS2 reencryption works also without volume keys put in kernel
    keyring service.
  - Resolves: #1757783 #1750680 #1753597 #1743399


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-2
changelog:
  - patch: Fix possible memory corruption in LUKS2 validation
  	 code in 32bit library.
  - Resolves: #1872294


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-4
changelog:
  - patch: Fix reencryption for custom devices with data segments
    set to use cipher_null.
  - Resolves: #1927409


author: Ondrej Kozina <okozina@redhat.com> - 2.3.7-1
changelog:
  - update to cryptsetup 2.3.7
  - fixes CVE-2021-4122
  - patch: Fix suboptimal optimization in bundled argon2.
  - patch: Fix bogus memory allocation/device read with
           invalid LUKS2 headers
  - patch: Fix typo in luksRepair prompt.
  - Resolves: #2021815 #2022301 #2031859


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-39
changelog:
  - 1941437 - cupsd doesn't log job ids when logging into journal
  - 1782216 - Print queue is paused after ipp backend ends with CUPS_BACKEND_STOP
  - 1938384 - CUPS doesn't start if sssd starts after cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-40
changelog:
  - 1955964 - PreserveJobHistory doesn't work with seconds
  - 1927452 - CVE-2020-10001 cups: access to uninitialized buffer in ipp.c [rhel-8]


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-41
changelog:
  - 2006987 - Unauthenticated users can't move print jobs in Web UI
  - 2017919 - Setting 'MaxJobTime 0' does not set a job time to unlimited
  - 1726383 - "lpadmin -p <queue> -o cupsSNMPSupplies:false" doesn't work
  - 1982891 - Printing of banner before PCL file only prints banner
  - 2006591 - Trying to restart and hold a job doesn't work
  - 1811716 - lpr to non-existent printer reports incorrect error


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-33
changelog:
  - RHEL-19433 Incorrect PS header handling in gstopdf
  - RHEL-16034 pdftopdf results with (N > 1)^2 copies if a file is sent to IPP printer with collate
  - RHEL-13211 redhat-lsb unnecessary pulls in cups and avahi dependencies


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-35
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Simo Sorce <simo@redhat.com> - 2.1.27-0.4rc7
changelog:
  - Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
  - Resolves bz#1618744
  - Fix multilib issue bz#1663120


author: Ray Strode <rstrode@redhat.com> - 1:1.12.8-22
changelog:
  - Use hangup signal instead of termination signal to
    kill sesssion monitoring script to appeach tcsh.
    Related: #2089362


author: Ray Strode <rstrode@redhat.com> - 1:1.12.8-23
changelog:
  - Address race for very short running sessions in SSH
    session monitoring script.
    Related: #2089362


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-20
changelog:
  - Add 0079-libmultipath-use-typedef-for-keyword-handler-and-pri.patch
  - Add 0080-libmultipath-print-the-correct-file-when-parsing-fai.patch
  - Add 0081-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
  - Add 0082-libmultipath-make-set_int-take-a-range-for-valid-val.patch
  - Add 0083-libmultipath-improve-checks-for-set_str.patch
  - Add 0084-libmultipath-split-set_int-to-enable-reuse.patch
  - Add 0085-libmultipath-cleanup-invalid-config-handling.patch
  - Add 0086-libmultipath-don-t-return-error-on-invalid-values.patch
    * Above 8 patches fix bz #1900595
  - Add 0087-multipathd-avoid-unnecessary-path-read-only-reloads.patch
    * Fixes bz #2009624
  - Resolves: bz #1900595, #2009624, #2021823


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-21
changelog:
  - Add 0088-libmultipath-make-helper-function-to-trigger-path-ue.patch
  - Add 0089-multipathd-trigger-udev-change-on-path-addition.patch
  - Resolves: bz #1862032


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-23
changelog:
  - Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
    * Partial fix for bz #2058222
  - Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
    * Fixes bz #2065468
  - Add 0093-updated-HPE-MSA-builtin-config.patch
    * Fixes bz #2058222
  - Resolves bz #2065468, #2058222


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-24
changelog:
  - Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
    * Fixes bz #2052054
  - Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
  - Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
  - Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
  - Add 0098-libmultipath-make-protocol_name-global.patch
  - Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
  - Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
  - Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
  - Add 0102-libmultipath-fix-eh_deadline-documentation.patch
  - Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
  - Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
    * The above 10 patches implement feature from bz #2065477
  - Resolves: bz #2052054, #2065477


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-25
changelog:
  - Add 0105-multipathd-handle-fpin-events.patch
  - Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
  - Resolves: bz #2083077


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-27
changelog:
  - Add 0108-multipathd-Add-missing-ctype-include.patch
  - Add 0109-multipathd-replace-libreadline-with-libedit.patch
    * replace readline with libedit, to avoid license conflicts
  - Resolves: bz #2119887


author: Petr Menšík <pemensik@redhat.com> - 2.79-15
changelog:
  - Fix various issues in dnssec validation (CVE-2020-25681)
  - Accept responses only on correct sockets (CVE-2020-25684)
  - Use strong verification on queries (CVE-2020-25685)


author: Timothy Redaelli <tredaelli@redhat.com> - 19.11.1-1
changelog:
  - Rebase DPDK to 19.11.1 (#1824905)
  - Remove dpdk-pmdinfo.py (#1801361)
  - Add Requires: rdma-core-devel libmnl-devel on x86_64 for dpdk-devel (#1813252)


author: Lukas Czerner <lczerner@redhat.com> 1.45.4-1
changelog:
  - Rebase to the release 1.45.4 (#1783777)
  - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279)
  - fix crafted ext4 partition leads to out-of-bounds write (#1768709)
  - include note about supported rhel8 features and options (#1788573)


author: Lukas Czerner <lczerner@redhat.com> 1.45.6-5
changelog:
  - Update e2fsprogs with upstream fixes and improvements (#2083621)
  - Fix out-of-bounds read/write via crafter filesystem (#2073548)


author: Mark Wielaard <mjw@redhat.com> - 0.178-4
changelog:
  - Add elfutils-debuginfod-client Provides and Requires with depsuffix
    to get multilib dependencies correct. Add %{version}-%{release} to
    keep subpackages in sync.


author: Mark Wielaard <mjw@redhat.com> - 0.182-1
changelog:
  - Upgrade to upstream 0.182
    - backends: Support for tilegx has been removed.
    - config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
    - debuginfod: More efficient package traversal, tolerate various
      errors during scanning, grooming progress is more visible and
      interruptible, more prometheus metrics.
    - debuginfod-client: Now supports compressed (kernel) ELF images.
    - libdwfl: Add ZSTD compression support.


author: Mark Wielaard <mjw@redhat.com> - 0.186-1
changelog:
  - Upgrade to upstream 0.186
    - debuginfod-client: Default $DEBUGINFOD_URLS is computed from
      drop-in files /etc/debuginfod/*.urls rather than
      hardcoded into the /etc/profile.d/debuginfod*
      scripts.
      Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings
      for skipping large/slow transfers.
      Add $DEBUGINFOD_RETRY for retrying aborted lookups.
    - debuginfod: Supply extra HTTP response headers, describing
      archive/file names that satisfy the requested buildid content.
      Support -d :memory: option for in-memory databases.
      Protect against loops in federated server configurations.
      Add -r option to use -I/-X regexes for grooming stale files.
      Protect against wasted CPU from duplicate concurrent requests.
      Limit the duration of groom ops roughly to rescan (-t) times.
      Add --passive mode for serving from read-only database.
      Several other performance improvements & prometheus metrics.
    - libdw: Support for the NVIDIA Cuda line map extensions.
      DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name
      are defined in dwarf.h. New functions dwarf_linecontext and
      dwarf_linefunctionname.
    - translations: Update Japanese translation.


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-4
changelog:
  - CVE-2021-29458 exiv2: out-of-bounds read in Exiv2::Internal::CrwMap::encode
    Resolves: bz#1953758

  - CVE-2021-29457 exiv2: heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1953772


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-5
changelog:
  - CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1954065

  - CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1955014


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-6
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964182

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964188


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-3
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993282

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993245


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018422

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003673


author: Radovan Sroka <rsroka@redhat.com> - 0.9.1-3
changelog:
  RHEL 8.2 ERRATUM
  - fixed build time python interpreter detection (spec)
  - added python2-devel as a BuildRequires (spec)
  - allow running bash scripts in home directories
  Resolves: rhbz#1801872


author: Radovan Sroka <rsroka@redhat.com> - 1.0-2
changelog:
  RHEL 8.3 ERRATUM
  - rebase to v1.0
  - installed multiple policies to /usr/share/fapolicyd
    - known-libs (default)
    - restrictive
  - installed fapolicyd.trust file
  - enhanced fapolicyd-cli
  Resolves: rhbz#1817413
  - introduced fapolicyd-selinux that provides SELinux policy module
  Resolves: rhbz#1714529


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-3
changelog:
  RHEL 8.4.0 ERRATUM
  - rebase to 1.0.2
  - strong dependency on rpm/rpm-plugin-fapolicyd
  - installed dnf-plugin is dummy and we are not using it anymore
  - enabled integrity setting
  Resolves: rhbz#1887451
  - added make check
  - Adding DISA STIG during OS installation causes 'ipa-server-install' to fail
  - fixed java detection
  Resolves: rhbz#1895435
  - dnf update fails when fapolicyd is enabled
  Resolves: rhbz#1876975
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1896875


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-7
changelog:
  - fapolicyd abnormally exits by executing sosreport
  - fixed multiple problems with unlink()
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1943251


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-2
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespace in trust files
  - use full paths in trust files
  Resolves: rhbz#1939379
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#1989272
  - fix fapolicyd-dnf-plugin reporting as '<invalid>'
  Resolves: rhbz#1997414
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014445


author: Radovan Sroka <rsroka@redhat.com> - 1.1-1
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#1939379
  - introduce rules.d feature
  Resolves: rhbz#2054741
  - remove pretrans scriptlet
  Resolves: rhbz#2051485


author: cuiyudong <cuiyudong@kylinos.cn> - 4.2.9.7-3.01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add support gb18030-patch ; add gd18030 conf and so;add modify delete coding for gb18030


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.26-17
changelog:
  - Remove unnecessary python-devel dependency
    (disables build of fetchmailconf, but we don't pack it into rpm anyway)
    Resolves: #1591710


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #1999275, #2002698


author: Liwei Ge <geliwei@openanolis.org> - 20170731-14.0.1
changelog:
  - remove wrong free that cause abattis-cantarell-fonts build crash
  - fix memleak in SFReplaceEncodingBDFProps


author: Akira TAGOH <tagoh@redhat.com> - 1.0.4-9
changelog:
  - Fix security issues CVE-2022-25308, CVE-2022-25309, CVE-2022-25310.
    Resolves: rhbz#2050085, rhbz#2050068, rhbz#2050062
  - Drop --disable-docs from %configure. no such options available.


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.24-1
changelog:
  - rebase to latest upstream version, which contains important CVE fixes
  - additional ZER0-DAY fixes added


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.25-1
changelog:
  - rebase to latest upstream version to fix issues discovered in previous CVE fixes (bug #1631701 and #1626997)


author: Martin Osvald <mosvald@redhat.com> - 9.25-2
changelog:
  - Resolves: #1652937 - CVE-2018-19409 ghostscript: Improperly implemented
    security check in zsetdevice function in psi/zdevice.c
  - Resolves: #1642586 - CVE-2018-18073 ghostscript: saved execution stacks
    can leak operator arrays
  - Resolves: #1642580 - CVE-2018-17961 ghostscript: saved execution stacks
    can leak operator arrays (incomplete fix for CVE-2018-17183)
  - Resolves: #1642941 - CVE-2018-18284 ghostscript: 1Policy operator
    allows a sandbox protection bypass
  - Resolves: #1656336 - CVE-2018-19134 ghostscript: Type confusion in
    setpattern (700141)
  - Resolves: #1660571 - CVE-2018-19475 ghostscript: access bypass in
    psi/zdevice2.c (700153)
  - Resolves: #1660830 - CVE-2018-19476 ghostscript: access bypass in
    psi/zicc.c
  - Resolves: #1661280 - CVE-2018-19477 ghostscript: access bypass in
    psi/zfjbig2.c (700168)
  - Resolves: #1668891 - CVE-2019-6116 ghostscript: subroutines within
    pseudo-operators must themselves be pseudo-operators (700317)


author: Martin Osvald <mosvald@redhat.com> - 9.25-3
changelog:
  - Resolves: #1692798 - CVE-2019-3839 ghostscript: missing attack vector
    protections for CVE-2019-6116
  - Resolves: #1678170 - CVE-2019-3835 ghostscript: superexec operator
    is available (700585)
  - Resolves: #1691414 - CVE-2019-3838 ghostscript: forceput in DefineResource
    is still accessible (700576)
  - fix included for ghostscript: Regression: double comment chars
    '%' in gs_init.ps leading to missing metadata
  - fix for pdf2dsc regression added to allow fix for CVE-2019-3839


author: Martin Osvald <mosvald@redhat.com> - 9.25-5
changelog:
  - Resolves: #1744011 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
  - Resolves: #1744015 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
  - Resolves: #1744006 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
  - Resolves: #1744231 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)


author: Ondrej Pohorelsky <opohorel@redhat.com> - 2.18.2-1
changelog:
  - Update to release 2.18.2
  - Remote code execution in recursive clones with nested submodules
    Resolves: CVE-2019-1387
  - Fixes CVE-2019-1348, CVE-2019-1349, CVE-2019-1350, CVE-2019-1351,	
    CVE-2019-1352, CVE-2019-1353, CVE-2019-1354


author: Daiki Ueno <dueno@redhat.com> - 3.6.14-7
changelog:
  - Increase DH key bits to >= 2048 in self-tests (#1879506)
  - Implement self-tests for KDF and CMAC (#1890870)
  - Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)


author: Daiki Ueno <dueno@redhat.com> - 3.6.16-1
changelog:
  - Update to upstream 3.6.16 release (#1956783)
  - Fix potential use-after-free in key_share handling (#1927597)
  - Fix potential use-after-free in pre_shared_key handling (#1927593)
  - Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
  - Fix cert expiration issue in tests (#1908110)


author: Mike FABIAN <mfabian@redhat.com> - 20170828-1
changelog:
  - Update to upstream snapshot tarball
  - split black-and-white and color fonts into different sub-packages.


author: Peter Oliver <rpm@mavit.org.uk> - 20170928-2
changelog:
  - Prefer zopflipng to optipng, since it should yield smaller files.
  - Use the font we built, rather than the one included with the source.


author: Mike FABIAN <mfabian@redhat.com> - 20180508-1
changelog:
  - Update to upstream snapshot tarball (color emoji font version 2.011)
  - Add patch to build all country flags (Resolves: rhbz#1574195)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-3
changelog:
  - -gtk: Obsoletes/Provides: gstreamer1-plugins-bad-free-gtk
  - Obsoletes/Provides: gstreamer1-plugin-mpg123


author: Jakub Martisko <jamartis@redhat.com> - 1.9-5
changelog:
  - Fix wrong skip size in gzexe
  - Add new test dealing with the ^^ (needs autoreconf)
  - Enable make check (needs less)
    Resolves: 1705413

   * Tue Aug 07 2018 Jakub Martisko <jamartis@redhat.com> - 1.9-4
   - Fix FTBFS bug (gnulib problems)
   - more details: https://lists.gnu.org/r/bug-gnulib/2018-03/msg00000.html
     Resolves 1611722


author: mengchaoming <mengchaoming@kylinos.cn> - 0.5.1-10.54
changelog:
  - x86:add patch52: hardinfo-0.5.1-kylin-modify-unknown-bug.patch
  - arm:add patch53: hardinfo-0.5.1-kylin-arm-modify-unknown-bug.patch


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20140811.1-5
changelog:
  - Add Supplements: tag for langpacks naming guidelines
  - Clean the specfile to follow current packaging guidelines


author: guochao<guochao@kylinos.cn> -5.3.0-2.ks8.01
changelog:
  - TYPE: bugfix
  - ID: [BUG#193551]
  - SUG: NA
  - DESC: delete maven-local Requires: maven-javadoc-plugin;remove build gradle-local;


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-2
changelog:
  - Update to shenandoah-jdk8u342-b07 (GA)
  - Update release notes for 8u342-b07.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2106507


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-2
changelog:
  - Update to shenandoah-jdk8u345-b01 (GA)
  - Update release notes for 8u345-b01.
  - Resolves: rhbz#2112403


author: Stephan Bergmann <sbergman@redhat.com> - 1:1.8.0.345.b01-3
changelog:
  - Disable copy-jdk-configs for Flatpak builds
  - Fix flatpak builds by exempting them from bootstrap
  - Resolves: rhbz#2102733


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-4
changelog:
  - Sync system cacerts support with RHEL 9, disabling using -Dsecurity.systemCACerts=
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Related: rhbz#2055274


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-5
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2048542


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Rebase FIPS patch against 8u352-b07
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Drop JDK-8255559/RH2124390 patch which is now upstream
  - Resolves: rhbz#2159910


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-2
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2163595


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p22
changelog:
  - Type:bugfix&task
  - ID:[BUG#122719] [TASK#88923] 
  - SUG:NA
  - DESC:limit dbus method import_auth_file


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p24
changelog:
  - Type:bugfix
  - ID:[BUG#89131&&BUG128952]
  - SUG:NA
  - DESC:fix show qr code err and import License err


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p25
changelog:
  - Type:update
  - ID:[TASK#105221]
  - SUG:NA
  - DESC:Venue authorization limited time unlimited demand support


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p27
changelog:
  - Type:bugfix
  - ID:[BUG#139688]
  - SUG:NA
  - DESC:fix kms client not show deactivation button while config serverip is url(patch27)


author: huayadong<huayadong@kylinos.cn>-3.0.1s1-1.04
changelog:
  - Type:fixbug
  - ID  :[bug#137670]
  - SUG :NA
  - DESC:add patch32:kylin-computer-viewer-3.9.1s1-kylin-Fix-the-incorrect-display-of-the-internal-attribute.patch
         修复因bios不同导致内存在属性界面显示不正确


author: huayadong<huayadong@kylinos.cn>-3.0.1s1-1.06
changelog:
  - Type:bugfix
  - ID  :[task#187543]
  - SUG :NA
  - DESC:add patch9:kylin-computer-viewer-3.9.1s1-kylin-fix-Authorizatio-activation-status-error.patch


author: yangxudong <yangxudong@kylinos.cn> - 3.2.10-4.ks.06
changelog:
  - add 银河麒麟高级服务器操作系统 V10（8.2）系统管理员手册-V0.1-20210910_1.pdf
  - add 银河麒麟高级服务器操作系统 V10（8.2）安装手册-V0.1-20210910_1.pdf


author: yangxudong <yangxudong@kylinos.cn> - 3.2.10-4.ks.11
changelog:
  - add 银河麒麟高级服务器操作系统 V10（8.2）系统管理员手册-V0.4-20211013.pdf
  - add 银河麒麟高级服务器操作系统 V10（8.2）安装手册-V0.3-20211013.pdf


author: Mike FABIAN <mfabian@redhat.com> - 0.0.38-1
changelog:
  - Add some new translations from CLDR
  - Add agr, bi, hif, kab, mfe, miq, mjw, shn, sm, to, tpi_PG, yuw, AS, MU, SC, TO, VU, WS


author: Pete Walter <pwalter@fedoraproject.org> - 0.0.38-5
changelog:
  - Conditionally add back Python 2 subpackage on Fedora
  - Rename Python 3 subpackage to python3-langtable to follow guidelines
  - Resolves: rhbz#1559099


author: Shi Jingying <shijingying@kylinos.cn> - - 0.0.38-5.el8.ks8.01
changelog:
  - add Patch9000 0001-langtable-add-Beijing-timezone-and-delete-others-lan.patch 
  - add Patch9001 0001-langtable-0.0.38-9-ky10-add-traditional-Chinese-fix-.patch


author: Iryna Shcherbina <ishcherb@redhat.com> - 1.5.9-2
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-2
changelog:
  - make only_urandom a default in non-presence of configuration file
  - run the full FIPS selftests only when the library is called from
    application


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-3
changelog:
  - add CMAC selftest for FIPS POST
  - add continuous FIPS entropy test
  - disable non-approved FIPS hashes in the enforced FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.8.5-3
changelog:
  - new upstream version 1.8.5
  - AES performance improvements backported from master branch
  - FIPS module is implicit with kernel FIPS flag
  - always run the FIPS selftests if FIPS module is installed


author: Jakub Jelen <jjelen@redhat.com> - 1.8.5-6
changelog:
  - Fix for CVE-2021-40528 (#1971421)
  - Enable HW optimizations in FIPS (#1976137)
  - Performance enchancements for ChaCha20 and Poly1305 (#1855231)


author: Till Maas <opensource@till.name> - 0.1.0-10
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.3-3
changelog:
  - Allow for the tablet mode quirk to apply to touchpads (#1664225)
  - Add a quirk for the Asus VivoBook Flip to keep the
    keyboard and touchpad working in tablet mode


author: Michal Židek <mzidek@redhat.com> - 2.2.3-14
changelog:
  - Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be
                             specified up to the seconds


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-16
changelog:
  - Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is
                             omitted and auth_provider is krb5


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-17
changelog:
  - Resolves: rhbz#1718193 - p11_child should have an option to skip
                             C_WaitForSlotEvent if the PKCS#11 module
                             does not implement it properly


author: Michal Židek <mzidek@redhat.com> - 2.2.3-18
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1810634 - id command taking 1+ minute for returning user
                             information


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate
                             (additional patch)


author: zhangjun <zhangjun@kylinos.cn> - 3.0.64.p46
changelog:
  - Type:bugfix
  - ID:[BUG#137974]
  - SUG:NA
  - DESC:slove when replaceing the authorization file view computer properties then serial number changed (patch49)


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p47
changelog:
  - Type:bugfix
  - ID:[BUG#152498]
  - SUG:NA
  - DESC:slove the problem of check error for private activation ordinary users (patch50)


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p49
changelog:
  - Type:bugfix
  - ID:[BUG#166387]
  - SUG:NA
  - DESC:add buildrequires and requires  version of paho-c in spec


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p51
changelog:
  - Type: bugfix
  - ID:[BUG#178000]
  - SUG:NA
  - DESC: fix get expiration time error and add get trial time fuction


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p52
changelog:
  - Type: upadate
  - ID:[TASK#153883]
  - SUG:NA
  - DESC: change service enable way in postinstall and posttrans


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.6.2-13
changelog:
  - Python 2 binary package renamed to python2-louis
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: David King <dking@redhat.com> - 2.6.2-17
changelog:
  - Fix CVE-2018-11577 (#1585906)
  - Fix CVE-2018-11684 (#1588632)
  - Fix CVE-2018-11685 (#1588637)
  - Fix CVE-2018-12085 (#1589942)


author: Wolfgang Ulbrich <chat-to-me@raveit.de> - 1.6.2-2
changelog:
  - disable python bindings
  - add --disable-schemas-compile configure flag
  - use modern make install macro
  - fix unused-direct-shlib-dependency
  - add LGPLv2+ license
  - move huge data in /usr/share in -data subpackage


author: Wolfgang Ulbrich <chat-to-me@raveit.de> - 1.7.90-1
changelog:
  - update to 1.7.90 release
  - use --with-gnome --all-name for find locale
  - enable python bindings, add BR pygtk2-devel


author: guochao <guochao@kylinos.cn> 1.12.1-1.ks8.02
changelog:
  - Type:bugfix
  - ID  :[bug#264515]
  - SUG :NA
  - DESC:change-Macau-HongKong-Taiwan-to-China-Macau-Taiwan-Hongkong


author: Yinxiu jiang <yinxiujiang@kylinos.cn> 1.8.22-2.ks8.04
changelog:
  - Add patch: network-manager-applet-1.8.22-kylin-add-translation-zh_HK_and_zh_TW.patch
  - Fix #bug 37571


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.5-6
changelog:
  - replace all Fedora URLs by corresponding values for RHEL
  - fix coverity issues
  - Resolves: #1602590, #1623406


author: Michal Fabik <mfabik@redhat.com> 2.9.5-7
changelog:
  - bugzilla: change the default bugzilla group
  - tests: Disable strcpm'ing a freed pointer
  - Add autogen.sh
  - Resolves #1660449


author: Martin Kutlak <mkutlak@redhat.com> - 2.9.5-10
changelog:
  - reportclient: Search for required packages recursively
  - reportclient: Find and download required debuginfo packages
  - report-client: Find debuginfos in own method
  - Resolves: rhbz#1783897


author: liudingyao <liudingyao@kylinos.cn> - 2.9.5-10.ks8.06
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:obsolete libreport-rhel related packages
         delete libreport-rhel related packages
         skip test


author: zhangjun <zhangjun@kylinos.cn> 1.0-1.11.1.p01
changelog:
  - update spec:Install libRockeyARM.s0.0.3 library to /usr/lib/xxx-linux-gnu directory
  - bug102904平安银行定制iso授权Key激活失败
  - 本次更新修复将动态库安装到对应架构指定目录


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10
changelog:
  - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
    i2alaw_array in alaw (#1673085)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-11
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985028)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.0-3
changelog:
  - Add Obsoletes in libssh-config to avoid conflict with old libssh which
    installed the configuration files.


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.4-1
changelog:
  - Update to version 0.9.4
    https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  - Fixed CVE-2019-14889 (#1781782)
  - Fixed CVE-2020-1730 (#1802422)
  - Create missing directories in the path provided for known_hosts files (#1733914)
  - Removed inclusion of OpenSSH server configuration file from
    libssh_server.config (#1821339)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.4-2
changelog:
  - Do not return error when server properly closed the channel (#1849071)
  - Add a test for CVE-2019-14889
  - Do not parse configuration file in torture_knownhosts test


author: Sahana Prasad <sahana@redhat.com> - 0.9.4-3
changelog:
  - Fix CVE-2020-16135 NULL pointer dereference in sftpserver.c if
    ssh_buffer_new returns NULL (#1862646)


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-2021-3634: Fix possible heap-buffer overflow when
    rekeying with different key exchange mechanism (#1978810)


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-2021-3634: Fix possible heap-buffer overflow when
    rekeying with different key exchange mechanism
  - Rebase to version 0.9.6
  - Rename SSHD_EXECUTABLE to SSH_EXECUTABLE in tests/torture.c
  - Resolves: rhbz#1896651, rhbz#1994600


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-1
changelog:
  - Resolves: rhbz#1684577 - Rebase libtalloc to version 2.1.16 for Samba
  - Resolves: rhbz#1597315 - libtalloc uses Python 2 to build
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-2
changelog:
  - Remove python2 libraries on upgrade
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-3
changelog:
  - Also obsolete python2-libtalloc-debuginfo
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Kamil Dudka <kdudka@redhat.com> - 1.2.20-16
changelog:
  - fix memory leaks through gnu_long{name,link} (CVE-2021-33645 CVE-2021-33646)
  - fix out-of-bounds read in gnu_long{name,link} (CVE-2021-33643 CVE-2021-33644)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.16-1
changelog:
  - New upstream release 1.3.16
  - Use RHEL_ALLOW_PYTHON2_FOR_BUILD=1 until libtalloc uses waf3
  - Patch the waf script to explicitly call python2 as "env python" doesn't
    yield py2 anymore


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.18.1
changelog:
  - Resolves: rhbz#1684579 - Rebase libtdb to version 1.3.18 for Samba
  - Resolves: rhbz#1597319 - libtdb uses Python 2 to build
  - Resolves: rhbz#1567138 - libtdb: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.18.2
changelog:
  - Obsolete the python2 packages on upgrade
  - Resolves: rhbz#1567138 - libtdb: Drop Python 2 subpackage from RHEL 8


author: Isaac Boukris <iboukris@redhat.com> - 1.4.2-2
changelog:
  - Resolves: rhbz#1754420 - Rebase libtdb 1.4.2 for samba
  - Related: rhbz#1754420 - Fix sssd tests (tdb)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.37-1
changelog:
  - New upstream release 0.9.37
  - Use RHEL_ALLOW_PYTHON2_FOR_BUILD=1 for build
  - Use %{__python2}, not "python", as the Python2 interpreter


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.39-1
changelog:
  - Resolves: #1684580 - Rebase libtevent to version 0.9.36 for Samba
  - Resolves: #1597318 - libtevent uses Python 2 to build
  - Resolves: #1567139 - libtevent: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com>
changelog:
  - Remove the python2 subpackages on upgrade
  - Resolves: #1567139 - libtevent: Drop Python 2 subpackage from RHEL 8


author: Isaac Boukris <iboukris@redhat.com> - 0.10.0-2
changelog:
  - Resolves: #1754421 - Upgrade tevent to 0.10.0 version for samba
  - Related: #1754421 - Fix sssd tests (tevent)


author: David Shea <dshea@redhat.com> - 0.4.5-3
changelog:
  - Render the map directly from SVG (#1335158)
  - Fix memory leaks in tz.c
  - Fix an invalid memory access
  - Do not modify TZ in the process environment
  - Move all data files to /usr/share/libtimezonemap from .../libtimezonemap/ui
  - Add extra city data so all timezone offsets are clickable
  - Move Venezuela from -04:30 to -04:00
  - Fix the conversion of points just west of 180 longitude
  - Remove the out-of-date Olson map data
  - Update the "backward" file
  - Improve the location selected when setting the timezone by name (#1322648)
  - Remove an extra line in the +10:00 layer
  - Move Chile back an hour


author: guojunding <guojunding@kylinos.cn> - 8.4-3.el8.ks8.02
changelog:
  - Type: bugfix
  - ID: TASK#141683
  - SUG: NA
  - DESC: add Patch9002 for kylin productization modifications


author: guojunding <guojunding@kylinos.cn> - 8.4-3.el8.ks8.03
changelog:
  - Type: bugfix
  - ID: TASK#141169
  - SUG: NA
  - DESC: add Patch9003 for kylin productization modifications


author: guojunding <guojunding@kylinos.cn> - 8.4-3.el8.ks8.04
changelog:
  - Type: bugfix
  - ID: TASK#141169
  - SUG: NA
  - DESC: add Patch9004-Patch9009 for kylin productization modifications


author: Parag Nemade <pnemade AT redhat DOT com> - 1.7.0-7
changelog:
  - Add missing BuildRequires: glibc-locale-source
  - Resolves:rh#996429 - Mapping of ਠ is improper as per standard
  - Resolves:rh#903272 - [gu_IN] use Devanagari U0965 instead of U0AE5 in inscript2 map


author: Parag Nemade <pnemade AT redhat DOT com> - 1.8.0-0.1.RC1
changelog:
  - Update to 1.8.0 (#1523967)
  - Resolves:rh#1487512 - Can't enter words beginning "ld" with Tibetan-ewts keyboard


author: huayadong <huayadong@kylinos.cn> -20150918kord0ukui58-10.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#104488]
  - SUG : NA
  - DESC: change %build for add debuginfo,rebuild for loongarch64.


author: huayadong <huayadong@kylinos.cn> -20150918kord0ukui58-10.el8.ks8.02
changelog:
  - Type: bugfix
  - ID  : [Task#141766]
  - SUG : NA
  - DESC: Modify spec, compile i686, add patch18 mate-indicators-kylin-change-menu-name-for-kylin.patch


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1
changelog:
  - new version 1.14.1
  - Resolves: #1647257 - CVE-2018-16845 nginx: Denial of service and
    memory disclosure via mp4 module
  - Resolves: #1647262 - CVE-2018-16844 nginx: Excessive CPU usage
    via flaw in HTTP/2 implementation
  - Resolves: #1647263 - CVE-2018-16843 nginx: Excessive memory consumption
    via flaw in HTTP/2 implementation


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.0-1
changelog:
  - new version 1.16.0
  - enable ngx_stream_ssl_preread module
  - main package does NOT require all-modules package


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-1
changelog:
  - update to 1.16.1
  - Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-5
changelog:
  - FIPS 140-3 changes
  -  Reject Small RSA keys, 1024 bit keys are marked as FIP OK when verifying, reject
     signature keys by policy
  -  Allow applications to retrigger selftests on demand.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-8
changelog:
  - Update fips default for pk12util to AES rather than TDES
  - Fix bug in pkcs12 files with null passwords


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-10
changelog:
  - Fix QA found failures:
  -  remove extra '+' from sslpolicy.txt file causing test error values
  -  only use GRND_RANDOM if the kernel is in FIPS mode.


author: Nikola Forró <nforro@redhat.com> - 2.4.0-1
changelog:
  - Rebase to 2.4.0
  - Resolves: CVE-2018-5727 (#1538467)
  - Resolves: CVE-2018-5785 (#1538556)
  - Resolves: CVE-2018-20845 (#1730679)
  - Resolves: CVE-2018-20847 (#1734337)
  - Resolves: CVE-2019-12973 (#1739076)
  - Resolves: CVE-2020-15389 (#1855115)
  - Resolves: CVE-2020-27814 (#1908965)
  - Resolves: CVE-2020-27823 (#1906222)
  - Resolves: CVE-2020-27824 (#1906216)
  - Resolves: CVE-2020-27842 (#1908165)
  - Resolves: CVE-2020-27843 (#1908164)
  - Resolves: CVE-2020-27845 (#1908168)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-5 + 0.10.3-7
changelog:
  - Do not print "no slots" warning by default (#1744220)
  - Unbreak connecting using gssapi through proxy commands (#1749862)
  - Document in manual pages that CASignatureAlgorithms are handled by crypto policies (#1790604)
  - Use SHA2-based signature algorithms by default for signing certificates (#1790610)
  - Prevent simple ProxyJump loops in configuration files (#1804099)
  - Teach ssh-keyscan to use SHA2 RSA variants (#1744108)
  - Do not fail hard if getrandom() is not available and no SSH_USE_STRONG_RNG is specified (#1812120)
  - Improve wording of crypto policies references in manual pages (#1812854)
  - Do not break X11 forwarding if IPv6 is disabled (#1662189)
  - Enable SHA2-based GSSAPI key exchange algorithms by default (#1816226)
  - Mark RDomain server configuration option unsupported in RHEL (#1807686)
  - Clarify crypto policies defaults in manual pages (#1724195)
  - Mention RSA SHA2 variants in ssh-keygen manual page (#1665900)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-7 + 0.10.3-7
changelog:
  - SFTP sort upon the modification time (#1909988)
  - ssh-keygen printing fingerprint issue with Windows keys (#1901518)
  - PIN is lost when iterating over tokens when adding pkcs11 keys to ssh-agent (#1843372)
  - ssh-agent segfaults during ssh-add -s pkcs11 (#1868996)
  - ssh-copy-id could not resolve ipv6 address ends with colon (#1933517)
  - sshd provides PAM an incorrect error code (#1879503)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-9
changelog:
  - CVE-2020-14145 openssh: Observable Discrepancy leading to an information
    leak in the algorithm negotiation (#1882252)
  - Hostbased ssh authentication fails if session ID contains a '/' (#1944125)


author: Daiki Ueno <dueno@redhat.com> 1.1.1g-16
changelog:
  - Use AI_ADDRCONFIG only when explicit host name is given
  - Allow only curves defined in RFC 8446 in TLS 1.3


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-2
changelog:
  - Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
  - Using safe primes for FIPS DH self-test


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes bugs in s390x AES code.
  - Uses the first detected address family if IPv6 is not available
  - Reverts the changes in https://github.com/openssl/openssl/pull/13305
    as it introduces a regression if server has a DSA key pair, the handshake fails
    when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
    it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
    will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
    known - https://trac.nginx.org/nginx/ticket/2071#comment:1
    As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
    could early callback instead of servername callback.
  - Resolves: rhbz#1978214
  - Related: rhbz#1934534


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-5
changelog:
  - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#2005402


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Resolves: rhbz#2067146


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-7
changelog:
  - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
    Resolves: CVE-2022-2097
  - Update expired certificates used in the testsuite
    Resolves: rhbz#2092462
  - Fix CVE-2022-1292: openssl: c_rehash script allows command injection
    Resolves: rhbz#2090372
  - Fix CVE-2022-2068: the c_rehash script allows command injection
    Resolves: rhbz#2098279


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-9
changelog:
  - Fixed Timing Oracle in RSA Decryption
    Resolves: CVE-2022-4304
  - Fixed Double free after calling PEM_read_bio_ex
    Resolves: CVE-2022-4450
  - Fixed Use-after-free following BIO_new_NDEF
    Resolves: CVE-2023-0215
  - Fixed X.400 address type confusion in X.509 GeneralName
    Resolves: CVE-2023-0286


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p01
changelog:
  - Add patch:Paho-c-add-kylin-env-port-bind.patch 
  - TASK#65925 子 KMS2.2需求实现 / 解决MQTT支持的依赖
  - 本次更新将mqtt本地连接绑定环境变量KY_KMS_PORT的值 之前为随机的端口


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p02
changelog:
  - Add patch:Paho-c-add-kylin-port-reuse.patch 
  - TASK#66261 子 KMS2.2需求实现 / 解决paho-c 重复端口的使用
  - 本次更新支持多个进程或者线程绑定到同一端口，提高服务器程序的性能


author: Petr Pisar <ppisar@redhat.com> - 10.31-6
changelog:
  - Fix global search/replace in pcre2test and pcre2_substitute() when the pattern
    matches an empty string, but never at the starting offset


author: Petr Pisar <ppisar@redhat.com> - 10.31-7
changelog:
  - Fix checking that a lookbehind assertion has a fixed length if the
    lookbehind assertion is used inside a lookahead assertion
  - Fix parsing VERSION conditions


author: Petr Pisar <ppisar@redhat.com> - 10.31-8
changelog:
  - Fix backtracking atomic groups when they are not separated by something with
    a backtracking point


author: Petr Pisar <ppisar@redhat.com> - 10.31-9
changelog:
  - Recognize all Unicode space characters with /x option in a pattern
    (bug #1617960)
  - Fix changing dynamic options (bug #1617960)
  - Fix autopossessifying a repeated negative class with no characters less than
    256 that is followed by a positive class with only characters less than 255,
    (bug #1617960)
  - Fix autopossessifying a repeated negative class with no characters less than
    256 that is followed by a positive class with only characters less than 256,
    (bug #1617960)


author: Petr Pisar <ppisar@redhat.com> - 10.32-1
changelog:
  - 10.32 bump (bug #1628200)
  - Fix a subject buffer overread in JIT when UTF is disabled and \X or \R has
    a greater than 1 fixed quantifier (bug #1628200)
  - Fix matching a zero-repeated subroutine call at a start of a pattern
    (bug #1628200)
  - Fix heap limit checking overflow in pcre2_dfa_match() (bug #1628200)


author: Lumír Balhar <lbalhar@redhat.com> - 39.2.0-4
changelog:
  - New subpackage platform-python-setuptools without files from /usr/bin/*
  - python3-setuptools contains only files from /usr/bin/* and depends
    on platform-python-setuptools
  - Resolves: rhbz#1641973


author: Jan Rybar <jrybar@redhat.com> - 0.115-7
changelog:
  - pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
  - Mitigation of regression caused by fix of CVE-2018-19788
  - Resolves: rhbz#1693781
  - Resolves: rhbz#1693814


author: Florian Festi <ffesti@redhat.com> - 4.14.3-5
changelog:
  - Don't error out when replacing an invalid signature (#1874062)
  - Raise an expection when erasing a package fails in Python (#1872623)
  - Fix builds on NFS filesystems (#1840728)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-12
changelog:
  - Bump up the limit of signature header to 64MB (#1918777)
  - Add fapolicyd plugin (#1923167)
  - Unblock signals in forked scriptlets (#1913765)
  - Fix ambiguous diagnostics output on file triggers (#1883338)
  - Ensure ELF files get stripped when debuginfo is disabled (#1634084)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-13
changelog:
  - Fix minor issues found by COVSCAN in fapolicyd plugin
  - Actually honor libarchive bcond at configure time (#1902887)


author: Guo Jianxing <guojianxing@kylinos.cn> - 4.14.3-13.ks8.01
changelog:
  - add patch10001 for rebranding
  - modify spec, set configuer with-vendor from redhat to kylin, and
  - buildrequires redhat-rpm-config to kylin-rpm-config and rebranding


author: Michal Ruprich <mruprich@redhat.com> - 3.1.3-19
changelog:
  - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-5
changelog:
  RHEL 8.3.0 ERRATUM
  - added qpid-proton as another source and enabled omamqp1 module
    in a separate sub-package with it statically linked
    resolves: rhbz#1713427
  - extended config.enabled patch to cover rest of the cases
    resolves: rhbz#1659383
  - added patch making json serialization thread-safe
    resolves: rhbz#1789675
  - added another patch for imfile state-files id
    resolves: rhbz#1793569
  - fixed typo in commend-out part of default rsyslog.conf


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-6
changelog:
  RHEL 8.3.0 ERRATUM
  - added patch preventing imfile crash when selinux blocks symlink
    access
    resolves: rhbz#1843994
  - fixed config-enabled patch
    resolves: rhbz#1659383


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-2
changelog:
  RHEL 8.5.0 ERRATUM
  - rebase to 8.2102.0
    resolves: rhbz#1932795
  - Enable openssl
    resolves: rhbz#1891458
  - EKU check for client cert on server side
    resolves: rhbz#1783348
  - Use GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1880434
  - Use librelp with openssl enabled
    resolves: rhbz#1795607
  - Close dir when fsync=on
    resolves: rhbz#1960536


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-3
changelog:
  - Priority field must have valid length
    resolves: rhbz#1866877
  - Allocate more memory on too large groups
    resolves: rhbz#1944718


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-5
changelog:
  - Do not exit when user/group can not be found
    resolves: rhbz#1984489
  - Remove abortOnIDResolution fail


author: Javier Martinez Canillas <javierm@redhat.com> - 15-12
changelog:
  - Fix firmware update bug in aarch64 caused by shim ignoring arguments
    Resolves: rhbz#1830871
  - Fix a shim crash when attempting to netboot
    Resolves: rhbz#1795654


author: Peter Jones <pjones@redhat.com> - 15-13
changelog:
  - New signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: yueyuankun <yueyuankun@kylinos.cn> - 15.6-1.ks8.01
changelog:
  - Type:NA
  - ID:TASK#139015
  - SUG:NA
  - DESC:modify BOOTIA32.CSV BOOTX64.CSV BOOTAA64.CSV, change redhat to kylin.


author: Javier Martinez Canillas <javierm@redhat.com> - 15-3
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1704854
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717063


author: Peter Jones <pjones@redhat.com> - 15-7
changelog:
  - Backport this to EL 8 so we can build-dep on the right version.
    Related: CVE-2020-14372 (and others)


author: Radovan Sroka <rsroka@redhat.com> - 1.8.25-6
changelog:
  - RHEL 8.1 ERRATUM
  - Fixed The LDAP backend which is not properly parsing sudoOptions,
    resulting in selinux roles not being applied
  Resolves: rhbz#1738326


author: Radovan Sroka <rsroka@redhat.com> - 1.8.28p1-1
changelog:
  - RHEL 8.2 ERRATUM
  - rebase to 1.8.28p1
  Resolves: rhbz#1733961
  - fixed man page for always_set_home
  Resolves: rhbz#1576880
  - sudo does not work with notbefore/after
  Resolves: rhbz#1679508
  - NOTBEFORE showing value of sudoNotAfter Ldap attribute
  Resolves: rhbz#1715516
  - CVE-2019-14287 sudo
  - Privilege escalation via 'Runas' specification with 'ALL' keyword
  Resolves: rhbz#1760697


author: Radovan Sroka <rsroka@redhat.com> - 1.8.29-7
changelog:
  - RHEL 8.4 ERRATUM
  - CVE-2021-3156
  Resolves: rhbz#1917734
  - CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhzb#1916434
  - CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1917038
  - updated upstream url
  Resolves: rhbz#1923825


author: Radovan Sroka <rsroka@redhat.com> - 1.8.29-8
changelog:
  RHEL 8.6.0 ERRATUM
  - sudoedit does not work with selinux args
  Resolves: rhbz#2029551
  - Make sure SIGCHLD is not ignored when sudo is executed
  Resolves: rhbz#1999751
  - [RFE] pass KRB5CCNAME to pam_authenticate environment if available
  Resolves: rhbz#1917379
  - utmp resource leak in sudo
  Resolves: rhbz#1986572


author: Radovan Sroka <rsroka@redhat.com> - 1.8.29.8.1
changelog:
  RHEL 8.7.0.Z ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161220


author: Michal Sekletár <msekleta@redhat.com> - 11.7.3-2
changelog:
  - sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#1624177)


author: Pavel Raiskup <praiskup@redhat.com> - 1.30-1
changelog:
  - rebase to latest upstream release, per release notes
    http://lists.gnu.org/archive/html/info-gnu/2017-12/msg00011.html


author: Ondrej Dubaj <odubaj@redhat.com> - 1.30-6
changelog:
  - added "padding with zeros" info message (#1913566)
  - do not report disk error as file shrank (#1913569)


author: Patsy Griffin <patsy@redhat.com> - 2020f-1
changelog:
  - Rebase to tzdata-2020f including changes for tzdata-2020e
    - tzdata-2020f fixes a bug in tzdata-2020e that caused an
      invalid zi file in rearguard format
    - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
    - Australia/Currie is identical to Australia/Hobart for all
      timestamps since 1970 and was therefore created by mistake,
      now moved to the "backward" file.


author: Patsy Griffin <patsy@redhat.com> - 2021c-1
changelog:
  - Rebase to tzdata-2021c - supersedes tzdata-2021b
    - Revert most of 2021b changes to 'backward'.
    - Fix 'zic -b fat' bug in pre-1970 32-bit data.
    - Fix two Link line typos.
    - Distribute SECURITY file.
  - Includes changes in tzdata-2021b
    - Innclude patch for Mayen
    - Jordan now starts DST on February's last Thursday.
    - Samoa no longer observes DST.
    - Merge more location-based Zones whose timestamps agree since 1970.
    - Move some backward-compatibility links to 'backward'.
    - Rename Pacific/Enderbury to Pacific/Kanton.
    - Correct many pre-1993 transitions in Malawi, Portugal, etc.
    - zic now creates each output file or link atomically.
    - zic -L no longer omits the POSIX TZ string in its output.
    - zic fixes for truncation and leap second table expiration.
    - zic now follows POSIX for TZ strings using all-year DST.
    - Fix some localtime crashes and bugs in obscure cases.
    - zdump -v now outputs more-useful boundary cases.
    - tzfile.5 better matches a draft successor to RFC 8536.


author: Patsy Griffin <patsy@redhat.com> - 2021e-1
changelog:
  - Rebase to tzdata-2021e - supersedes tzdata-2021d
    - Pacific/Fiji suspended DST for the 2021/2022 season.
    - 'zic -r' now marks unspecified timestamps with "-00".
    - Palestine will fall back 2021-10-29 at 01:00, rather
      than the predicted 2021-10-30.


author: Patsy Griffin <patsy@redhat.com> - 2022a-1
changelog:
  - Rebase to tzdata-2022a
    - Palestine springs forward on 2022-03-27, not -03-26.
    - zdump -v now outputs better failure information
    - fixes for code that reads corrupted TZif data


author: Patsy Griffin <patsy@redhat.com> - 2022b-1
changelog:
  - Rebase to tzdata-2022b
    - Chile transitions to DST on 2022-09-11, not 2022-09-04
    - 'make install' now defaults LOCALTIME to Factory rather than GMT
    - More zones that are the same since 1970 have been moved to backzone.
    - Include patch for awk workaround.


author: Patsy Griffin <patsy@redhat.com> - 2022c-1
changelog:
  - Rebase to tzdata-2022c - supersedes tzdata-2022b
    - Add a work-around for an awk bug in FreeBSD, macOS, etc.
    - Improve tzselect with respect to intercontinental Zones.


author: Patsy Griffin <patsy@redhat.com> - 2022f-1
changelog:
  - Rebase to tzdata-2022f
    - Mexico will stop observing DST except near the US border.
    - Chihuahua moved to -06 year round starting on 2022-10-30.
    - Fiji no longer observes DST.


author: Patsy Griffin <patsy@redhat.com> - 2022g-1
changelog:
  - Rebase to tzdata-2022g
    - The northern edge of the Mexican state of Chihuahua will
      change time zone to agree with nearby US locations on
      2022-11-30.
    - Added a new Zone America/Ciudad_Juarez that splits from
      America/Ojinaga.


author: mengchaoming<mengchaoming@kylinos.cn>-p13
changelog:
  -add patch11: ukui-greeter-kylin-Solve-bug49330-translation.patch
  -添加的定时器有问题,去掉,使用原有定时器;pam传上来的message,greeter进行翻译;


author: huayadong<huayadong@kylinos.cn>-p14
changelog:
  - add ukui-greeter-kylin-fix-bug-can-not-count-down-normally-after-entering-wrong-password-three-times.patch


author: huayadong <huayadong@kylinos.cn> -p16
changelog:
  - Type: bugfix
  - ID  : [Bug#161924]
  - SUG : NA
  - DESC: add patch14 ukui-greeter-1.2.1-kylin-fix-kyreplace3.0-4-lightdm-unable-to-start.patch


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-8
changelog:
  - 1640919 - augroup fedora, test case failure: /CoreOS/vim/Regression/bz241308-use-augroup-for-rh-autocmds


author: Peter Hutterer <peter.hutterer@redhat.com> 2.24-3
changelog:
  - Remove high-keycode removal patches, xkbcomp 1.4.2 has been in stable for
    long enough (related #1587998)


author: Rob Crittenden <rcritten@redhat.com> - 1.51.0-7
changelog:
  - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827)
    (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602)
  - Prevent integer overflow on m_groupSize in doProlog
    (CVE-2021-46143) (#2058560)


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.4-1
changelog:
  - rebase to 5.2.4 (rhbz#1574039), per release notes:
    https://www.mail-archive.com/xz-devel@tukaani.org/msg00295.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.4-2
changelog:
  - drop ppc64p7 hack, per fedora devel list discussion:
    https://lists.fedoraproject.org/archives/list/
    devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
  - don't explicitly set _FILE_OFFSET_BITS, package uses AC_SYS_LARGEFILE


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-11
changelog:
  - IBM Z hardware-accelerated deflate for s390x architectures
  - IBM CRC32 optimalization for POWER 8+ architectures
  - fixed firefox crash due to zlib (#1741266)
  - added test for crc32


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-13
changelog:
  - Added -DDFLTCC parameter to configure to enable 
  - Z hardware-accelerated deflate for s390x architectures (#1659433)


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-16
changelog:
  - Permit a deflateParams() parameter change
  - Another fix for Z hardware-accelerated deflate for s390x architectures
  - according to previous change by upstream


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-17
changelog:
  - Fixed DFLTCC compression level switching issues (#1875492)
  - Enabled HW compression for compression levels 1 through 6 (#1847438)
  - Fixed inflateSyncPoint() bad return value on z15 (#1888930)


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11.19
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


