# changelog

author: Scott Weaver <scweaver@redhat.com> [4.18.0-305.80.1.el8_4]
changelog:
  - act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164650 2131339] {CVE-2022-4269}
  - net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164650 2131339] {CVE-2022-4269}
  - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152569 2152572] {CVE-2022-4378}
  - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152569 2152572] {CVE-2022-4378}


author: Scott Weaver <scweaver@redhat.com> [4.18.0-305.82.1.el8_4]
changelog:
  - KVM: VMX: Dont' send posted IRQ if vCPU == this vCPU and vCPU is IN_GUEST_MODE (Maxim Levitsky) [2165648 2074835]
  - KVM: VMX: Fold fallback path into triggering posted IRQ helper (Maxim Levitsky) [2165648 2074835]
  - KVM: VMX: Pass desired vector instead of bool for triggering posted IRQ (Maxim Levitsky) [2165648 2074835]
  - KVM: VMX: Don't do full kick when triggering posted interrupt "fails" (Maxim Levitsky) [2165648 2074835]
  - KVM: nVMX: Ensure vCPU honors event request if posting nested IRQ fails (Maxim Levitsky) [2165648 2074835]
  - KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU (Maxim Levitsky) [2165648 2074835]
  - KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled (Maxim Levitsky) [2165648 2074835]
  - KVM: x86: Use a stable condition around all VT-d PI paths (Maxim Levitsky) [2165648 2074835]
  - KVM: x86: check PIR even for vCPUs with disabled APICv (Maxim Levitsky) [2165648 2074835]
  - KVM: VMX: prepare sync_pir_to_irr for running with APICv disabled (Maxim Levitsky) [2165648 2074835]
  - KVM: x86: ignore APICv if LAPIC is not enabled (Maxim Levitsky) [2165648 2074835]
  - KVM: x86: check for interrupts before deciding whether to exit the fast path (Maxim Levitsky) [2165648 2074835]
  - KVM: move EXIT_FASTPATH_REENTER_GUEST to common code (Maxim Levitsky) [2165648 2074835]
  - KVM: nVMX: promptly process interrupts delivered while in guest mode (Maxim Levitsky) [2165648 2074835]


author: Scott Weaver <scweaver@redhat.com> [4.18.0-305.84.1.el8_4]
changelog:
  - ice: fix lost multicast packets in promisc mode (Ken Cox) [2172552 2138215]
  - futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170056 2161526]


author: Scott Weaver <scweaver@redhat.com> [4.18.0-305.85.1.el8_4]
changelog:
  - locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170941 2162139]
  - locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170941 2162139]
  - locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170941 2162139]
  - locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170941 2162139]
  - locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170941 2162139]
  - locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170941 2162139]
  - locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170941 2162139]
  - locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170941 2162139]
  - locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170941 2162139]
  - locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170941 2162139]
  - locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170941 2162139]
  - locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170941 2162139]
  - locking/rwsem: Remove an unused parameter of rwsem_wake() (Waiman Long) [2170941 2162139]
  - locking/rwsem: Fix comment typo (Waiman Long) [2170941 2162139]
  - kernel: delete repeated words in comments (Waiman Long) [2170941 2162139]
  - ice: virtchnl rss hena support (Petr Oros) [2167712 2136516]
  - s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166298 2161328]


author: Scott Weaver <scweaver@redhat.com> [4.18.0-305.86.1.el8_4]
changelog:
  - net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167642 2112927]
  - net/ulp: use consistent error code when blocking ULP (Sabrina Dubroca) [2176952 2176956] {CVE-2023-0461}
  - net/ulp: prevent ULP without clone op from entering the LISTEN status (Sabrina Dubroca) [2176952 2176956] {CVE-2023-0461}


author: Scott Weaver <scweaver@redhat.com> [4.18.0-305.87.1.el8_4]
changelog:
  - audit: improve audit queue handling when "audit=1" on cmdline (Richard Guy Briggs) [2180419 2035123]
  - audit: improve robustness of the audit queue handling (Richard Guy Briggs) [2180419 2035123]
  - powerpc/64/kdump: Limit kdump base to 512MB (Mamatha Inamdar) [2154273 2132921]
  - target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2182096 2156546]
  - net: sch: eliminate unnecessary RCU waits in mini_qdisc_pair_swap() (Ivan Vecera) [2179433 2106271]
  - rcu: Provide polling interfaces for Tree RCU grace periods (Waiman Long) [2179433 2106271]


author: Scott Weaver <scweaver@redhat.com> [4.18.0-305.88.1.el8_4]
changelog:
  - ice/ptp: fix the PTP worker retrying indefinitely if the link went down (Petr Oros) [2178274 2166392]
  - ice: reschedule ice_ptp_wait_for_offset_valid during reset (Petr Oros) [2178274 2166392]
  - ice: make Tx and Rx vernier offset calibration independent (Petr Oros) [2178274 2166392]
  - ice: only check set bits in ice_ptp_flush_tx_tracker (Petr Oros) [2178274 2166392]
  - ice: handle flushing stale Tx timestamps in ice_ptp_tx_tstamp (Petr Oros) [2178274 2166392]
  - ice: cleanup allocations in ice_ptp_alloc_tx_tracker (Petr Oros) [2178274 2166392]
  - ice: protect init and calibrating check in ice_ptp_request_ts (Petr Oros) [2178274 2166392]
  - ice: check Tx timestamp memory register for ready timestamps (Petr Oros) [2178274 2166392]
  - ice: handle discarding old Tx requests in ice_ptp_tx_tstamp (Petr Oros) [2178274 2166392]
  - ice: always call ice_ptp_link_change and make it void (Petr Oros) [2178274 2166392]
  - ice: fix misuse of "link err" with "link status" (Petr Oros) [2178274 2166392]
  - ice: Reset TS memory for all quads (Petr Oros) [2178274 2166392]
  - ice: Remove the E822 vernier "bypass" logic (Petr Oros) [2178274 2166392]
  - ice: Use more generic names for ice_ptp_tx fields (Petr Oros) [2178274 2166392]
  - ice: Merge pin initialization of E810 and E810T adapters (Petr Oros) [2178274 2166392]
  - ice: Check if reset in progress while waiting for offsets (Petr Oros) [2178274 2166392]
  - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2182654 2158726]
  - s390/smp,vdso: fix ASCE handling (Tobias Huschle) [2176465 2103887]
  - kernfs: don't create a negative dentry if inactive node exists (Ian Kent) [2178237 2001597]
  - kernfs: also call kernfs_set_rev() for positive dentry (Ian Kent) [2178237 2001597]
  - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163397 2163401] {CVE-2023-0266}


author: Chengweizheng <chengweizheng@kylinos.cn> [4.18.0-305.88.1.el8_4.ks8.01]
changelog:
  - Type: cves
  - ID:   [TASK#184508]
  - SUG:  NA
  - DESC:
  - add translation patch [ 0002~0006 patches ] and change config file for cjk
  - add patch: 0007-x86_kernel-4.18.0-305.el8_add_hygon_family_18h.patch for Hygon CPU
  - add patch: 0008-zhaoxin-patch and .config to support zhaoxin
  - add patch: 0009-add-qla2xxx-device-number-2432.patch
  - debrand for kylin kernel productization
  - net:ipset: add the missing IP_SET_HASH_WITH_NET0 macro {CVE-2023-42753}


author: wanggang <wanggang1@kylinos.cn> - 1.0-2.4.ks8.15
changelog:
  - Type: task
  - ID: 148249
  - SUG: NA
  - DESC: add file: ks8-adv-BaseOS-updates.repo, ks8-adv-AppStream-updates.repo


author: zhangjun <zhangjun@kylinos.cn> - 3.0.64.p46
changelog:
  - Type:bugfix
  - ID:[BUG#137974]
  - SUG:NA
  - DESC:slove when replaceing the authorization file view computer properties then serial number changed (patch49)


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p47
changelog:
  - Type:bugfix
  - ID:[BUG#152498]
  - SUG:NA
  - DESC:slove the problem of check error for private activation ordinary users (patch50)


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p49
changelog:
  - Type:bugfix
  - ID:[BUG#166387]
  - SUG:NA
  - DESC:add buildrequires and requires  version of paho-c in spec


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p51
changelog:
  - Type: bugfix
  - ID:[BUG#178000]
  - SUG:NA
  - DESC: fix get expiration time error and add get trial time fuction


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p52
changelog:
  - Type: upadate
  - ID:[TASK#153883]
  - SUG:NA
  - DESC: change service enable way in postinstall and posttrans


author: Martin Kutlak <mkutlak@redhat.com> - 2.9.5-10
changelog:
  - reportclient: Search for required packages recursively
  - reportclient: Find and download required debuginfo packages
  - report-client: Find debuginfos in own method
  - Resolves: rhbz#1783897


author: Michal Židek <mzidek@redhat.com> - 2.9.5-12
changelog:
  - Resolves: rhbz#1835388 - abrt-addon-ccpp causes failures during openscap scans on CCE-27119-7
  - This is just libreport side (abrt also needs to be patched)


author: jiangjixiang <jiangjixiang@kylinos.cn> - 2.9.5-15.el8.ks8.02
changelog:
  - Type:bugfix
  - ID:[TASK#141171]
  - SUG:NA
  - DESC:Migrate the difference between libreport-2.9.5-10.el8.ks8.05 and libreport-2.9.5-10.el8
         Add Patch10000: 0001-Red-Hat-to-KYLIN.patch
         Don't compile centos packages
         Localization


author: liudingyao <liudingyao@kylinos.cn> - 2.9.5-15.el8.ks8.03
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:obsolete libreport-rhel related packages
         delete libreport-rhel related packages
         skip test


author: zhangjun <zhangjun@kylinos.cn> 1.0-1.11.1.p01
changelog:
  - update spec:Install libRockeyARM.s0.0.3 library to /usr/lib/xxx-linux-gnu directory
  - bug102904平安银行定制iso授权Key激活失败
  - 本次更新修复将动态库安装到对应架构指定目录


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p01
changelog:
  - Add patch:Paho-c-add-kylin-env-port-bind.patch 
  - TASK#65925 子 KMS2.2需求实现 / 解决MQTT支持的依赖
  - 本次更新将mqtt本地连接绑定环境变量KY_KMS_PORT的值 之前为随机的端口


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p02
changelog:
  - Add patch:Paho-c-add-kylin-port-reuse.patch 
  - TASK#66261 子 KMS2.2需求实现 / 解决paho-c 重复端口的使用
  - 本次更新支持多个进程或者线程绑定到同一端口，提高服务器程序的性能


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-31
changelog:
  - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
  Resolves: rhbz#1856481
  - Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
  Resolves: rhbz#1854926


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-32
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in http.client
  Resolves: rhbz#1883257


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-33
changelog:
  - Add support for upstream architecture names
  https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names
  Resolves: rhbz#1868003


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-34
changelog:
  - Security fix for CVE-2020-27619: eval() call on content received via HTTP in the CJK codec tests
  Resolves: rhbz#1890237


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-39
changelog:
  - Security fix for CVE-2021-3733: Denial of service when identifying crafted invalid RFCs
  Resolves: rhbz#1995234


