# changelog

author: songliyang <songliyang@kylinos.cn> - 1.26.2-12.p03
changelog:
  - Type:TASK
  - ID:163317
  - SUG:https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commits/main?search=all-mac
  - DESC:add Patch11 to support promisc mode


author: songliyang <songliyang@kylinos.cn> - 1.26.2-12.p05
changelog:
  - Type:TASK
  - ID:[TASK#163317]
  - SUG:NA
  - DESC: fix the date of p03 changelog to solve a problem that don't show earlier changelog on koji
          p04 version is already used by v10-sp3-custom-gazb tag, use p05 instead


author: zhangyulong <zhangyulong@kylinos.com> - 1.26.2-13.p05
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the issue that NetworkManager service does not self-heal when the dbus service is abnormal


author: kongdelin <kongdelin@kylinos.com> -1.26.2-13.p05.gfb01
changelog:
  - Type:TASK
  - ID:[TASK#163317]
  - SUG:NA
  - DESC: 同步民口支持配置为混杂模式版本，并把kylin patch： fix_show_nmcli.patch和set_default_autoconnect.patch合进来


author: Yin Hao <yinhao@kylinos.cn> - 33.19-31.p16.gfb05
changelog:
  - Type: NA 
  - ID: BUG#181073
  - SUG: NA
  - DESC: add anaconda timeout 10s
  - Add Patches: anaconda-33.19-kylin-0031-add-timeoutsec.patch


author: chenyun <chenyun@kylinos.cn> - 33.19-31.p16.gfb06
changelog:
  - Type: NA 
  - ID: BUG#181682
  - SUG: NA
  - DESC: 安装界面用户密码时提示8位及以上
  - Add Patches: anaconda-33.19-kylin-0032-change-password-reminding.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb07
changelog:
  - Type: NA
  - ID: TASK#170768
  - SUG: NA
  - DESC: ext4文件系统快速安装
  - Add Patches: anaconda-33.19-kylin-0033-exploy-ext4.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb10
changelog:
  - Type: NA
  - ID: BUG#211782
  - SUG: NA
  - DESC: 添加grub备份还原选项 
          解决“安装目标位置”界面显示该U盘为可选项的问题
          解决anaconda中版本显示不全的问题
          解决备份还原时遇到防篡改功能无法还原的问题
  - Add Patches: anaconda-33.19-kylin-1001-add-backup.patch
                 anaconda-33.19-kylin-1006-hide-install-media.patch
                 anaconda-33.19-kylin-1005-wrong-version.patch
                 anaconda-33.19-kylin-1004-recovery-failed.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb11
changelog:
  - Type: bugfix
  - ID: BUG#213214
  - SUG: NA
  - DESC: 安装时手动选择两个硬盘成功后，之后再重新安装系统选择单一
          的硬盘出现数据互通无法选择
  - Add Patches: anaconda-33.19-kylin-1007-select-single-disk.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb13
changelog:
  - Type: bugfix
  - ID: BUG#215825
  - SUG: NA
  - DESC: 修复手动安装删除分区报错问题
  - Add Patches: anaconda-33.19-kylin-1008-custom-install-err.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb14
changelog:
  - Type: bugfix
  - ID: BUG#217054
  - SUG: NA
  - DESC: 分屏安装时采用复制屏
  - Add Patches: anaconda-33.19-kylin-1009-set-the-default-display-as-clone-screen.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb15
changelog:
  - Type: bugfix
  - ID: BUG#215856
  - SUG: NA
  - DESC: 单硬盘安装双系统，GRUB菜单只显示单系统启动项
  - Add Patches: anaconda-33.19-kylin-1010-double-system-grub.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb16
changelog:
  - Type: update
  - ID: TASK#207207
  - SUG: NA
  - DESC: 修改swap分区的分区方案
  - Add Patches:anaconda-33.19-kylin-1011-change-swap-method.patch


author: liujingyuan<liujingyuan@kylinos.cn> - 9100h-39.p01
changelog:
  Transplant sensitive information components and patch 0001-revise-expression-of-sensitive-words.patch


author: wanghao <wanghao2@kylinos.cn>-2.13.3-0.2.p03
changelog:
  - Type: bugfix
  - ID: [BUG#174866]
  - SUG:NA
  - DESC: 修复使用systemctl查看apparmor状态显示failed的bug
  -	修复模式设置时报错的问题
  -	  add patch: apparmor-fix-systemctl-get-status-failed-bug.patch


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-52.31.v2207
changelog:
  - xfs: drop submit side trans alloc for append ioends (Brian Foster) [task:168909]
  - xfs: turn io_append_trans into an io_private void pointer (Christoph Hellwig) [task:168909]
  - xfs: refactor the ioend merging code (Christoph Hellwig) [task:168909]
  - xfs: simplify xfs_ioend_can_merge (Christoph Hellwig) [task:168909]
  - xfs: allow merging ioends over append boundaries (Christoph Hellwig) [task:168909]
  - xfs: merge adjacent io completions of the same type (Darrick J. Wong) [task:168909]
  - xfs: remove unused m_data_workqueue (Darrick J. Wong) [task:168909]
  - xfs: implement per-inode writeback completion queues (Darrick J. Wong) [task:168909]
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local (Lin Ma) [task:179856] {CVE-2023-3863}
  - nfc: llcp: simplify llcp_sock_connect() error paths (Krzysztof Kozlowski) [task:179856]
  - nfc: llcp: nullify llcp_sock->dev on connect() error paths (Krzysztof Kozlowski) [task:179856]
  - nfc: Fix to check for kmemdup failure (Aditya Pakki) [task:179856]
  - io_uring: always grab file table for deferred statx (Jens Axboe) [task:179249] {CVE-2022-20568}
  - io_uring: disable polling pollfree files (Pavel Begunkov) [task:179288] {CVE-2022-3176}
  - Loongarch: Fix 'extioi' logic error (liubaolin) [task:180502]
  - LoongArch: Adjust {copy, clear}_user exception handler behavior (liubaolin) [task:180502]
  - LoongArch: ACPICA: Events: remove the global lock initialization (liubaolin) [task:180502]
  - LoongArch: Fix macro write_fcsr (liubaolin) [task:180502]
  - LoongArch: Fix return value underflow in exception path (liubaolin) [task:180502]
  - LoongArch: Tweak the BADV and CPUCFG.PRID lines in show_regs() (liubaolin) [task:180502]
  - LoongArch: Humanize the ECFG line when showing registers (liubaolin) [task:180502]
  - LoongArch: Humanize the EUEN line when showing registers (liubaolin) [task:180502]
  - LoongArch: Humanize the PRMD line when showing registers (liubaolin) [task:180502]
  - LoongArch: Humanize the CRMD line when showing registers (liubaolin) [task:180502]
  - LoongArch: Fix format of CSR lines during show_regs() (liubaolin) [task:180502]
  - LoongArch: Print symbol info for $ra and CSR.ERA only for kernel-mode contexts (liubaolin) [task:180502]
  - LoongArch: Print GPRs with ABI names when showing registers (liubaolin) [task:180502]
  - LoongArch: Relay BCE exceptions to userland as SIGSEGV with si_code=SEGV_BNDERR (liubaolin) [task:180502]
  - char: pcmcia: remove all the drivers (Jiri Slaby) [task:177573] {CVE-2022-44033}
  - ipv4: avoid using shared IP generator for connected sockets (Eric Dumazet) [task:179316, task:160493] {CVE-2020-36516}
  - OPENEULER: svm: Delete unused ioctl command (huhai) [task:180214] {CVE-2021-33639}
  - media: mceusb: Use USB_DIR_IN in read request (Hongyu Xie) [task:179257] {CVE-2022-3903}
  - media: mceusb: fix control-message timeouts (Johan Hovold) [bug:150405]
  - iomap: Set all uptodate bits for an Uptodate page (Matthew Wilcox (Oracle)) [bug:197566]
  - iomap: Use kzalloc to allocate iomap_page (Matthew Wilcox (Oracle)) [bug:197566]
  - security/kysec: fix possible memory leak in kysec_hash_sha256() (yangzhao) [task:126288]
  - security/kysec: fix the problem that the manufacturer program takes too long to open (wangkanglong) [bug:139540]
  - security/kysec: start menu freezes after opening Loongson browser (wangkanglong) [bug:102574]
  - security/kysec: add timeout for auth wait_event (yangzhao) [bug:169733, bug:170147]
  - igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl) {CVE-2023-45871}
  - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) {CVE-2023-39189}
  - Revert "NFS: Don't interrupt file writeout due to fatal errors" (ChenXiaoSong) [task:198290]
  - Revert "USB: core: Don't hold device lock while reading the "descriptors" sysfs file" (Hongyu Xie) [task:179861] {CVE-2023-37453}
  - OPENEULER: scripts: switch explicitly to Python 3 (Yi Li) [task:180198]
  - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng) [task:179901] {CVE-2023-31085}
  - remove the lightnvm subsystem (Christoph Hellwig) [task:179254] {CVE-2022-2991}
  - KVM: nVMX: add missing consistency checks for CR0 and CR4 (Paolo Bonzini) [task:179282] {CVE-2023-30456}
  - bpf, sockmap: fix deadlocks in the sockhash and sockmap (Xin Liu) [task:179888] {CVE-2023-0160}
  - bpf: Fix NULL event->prog pointer access in bpf_overflow_handler (Yonghong Song) [task:178877]
  - tweewide: Fix most Shebang lines (Finn Behrens)
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net (Hyunwoo Kim) [task:179859] {CVE-2022-45886}
  - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Hyunwoo Kim) [task:179858] {CVE-2022-45919}
  - USB: ene_usb6250: Allocate enough memory for full object (Kees Cook) [task:166857] {CVE-2023-45862}
  - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng) {CVE-2023-31085}
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO (Lee, Chun-Yi) {CVE-2023-31083}
  - tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith) {CVE-2023-1206}
  - xen/netback: Fix buffer overrun triggered by unusual packet (Ross Lagerwall) {CVE-2023-34319}
  - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (Steve Rutherford) [bug:193234]
  - dm: don't stop request queue after the dm device is suspended (Ming Lei) [task:172151]
  - dm rq: don't queue request to blk-mq during DM suspend (Ming Lei) [task:172151]
  - Revert "block: move blk_exit_queue into __blk_release_queue" (zhanggenjian) [task:177423]
  - Revert "block: free sched's request pool in blk_cleanup_queue" (zhanggenjian) [task:177423]
  - Revert "blk-mq: remove WARN_ON(!q->elevator) from blk_mq_sched_free_requests" (zhanggenjian) [task:177423]
  - Revert "block: adjust the position of the code section" (zhanggenjian) [task:177423]
  - Revert "blk-mq-sched: Fix blk_mq_sched_free_tags() build warning" (zhanggenjian) [task:177423]
  - KVM: SVM: document KVM_MEM_ENCRYPT_OP, let userspace detect if SEV is available (Paolo Bonzini) [bug:193234]
  - HYGON: KVM: SVM: Add support for different CSV guests to reuse the same ASID (hanliyang) [bug:193234]
  - KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails (Sean Christopherson) [bug:193234]
  - KVM: SVM: Fix off-by-one indexing when nullifying last used SEV VMCB (Sean Christopherson) [bug:193234]
  - KVM: SVM: Call SEV Guest Decommission if ASID binding fails (Alper Gun) [bug:193234]
  - KVM: SVM: Issue WBINVD after deactivating an SEV guest (Tom Lendacky) [bug:193234]
  - KVM: SVM: Reduce WBINVD/DF_FLUSH invocations (Tom Lendacky) [bug:193234]
  - KVM: SVM: Remove unneeded WBINVD and DF_FLUSH when starting SEV guests (Tom Lendacky) [bug:193234]
  - KVM: SVM: Guard against DEACTIVATE when performing WBINVD/DF_FLUSH (Tom Lendacky) [bug:193234]
  - KVM: SVM: Serialize access to the SEV ASID bitmap (Tom Lendacky) [bug:193234]
  - mm: always have io_remap_pfn_range() set pgprot_decrypted() (Jason Gunthorpe) [bug:193234]
  - HYGON: vfio/pci: Disable VFIO pci reset for hygon DCU device. (fangbaoshun) [bug:193234]
  - swiotlb: Remove call to sme_active() (Thiago Jung Bauermann) [bug:193234]
  - HYGON: KVM: SVM: Print Hygon CSV support info if support is detected (hanliyang) [bug:193234]
  - HYGON: crypto: ccp: Print Hygon CSV API version when CSV support is detected (hanliyang) [bug:193234]
  - HYGON: x86/cpu: Show Hygon csv feature in /proc/cpuinfo (hanliyang) [bug:193234]
  - HYGON: x86/csv: Print CSV info into the kernel log (hanliyang) [bug:193234]
  - HYGON: x86/kvm: Correct number of pages calculation in kvm_init_platform() (hanliyang) [bug:193234]
  - HYGON: x86/mm: Pass variable start to notify_range_enc_status_changed() in __set_memory_enc_dec() (hanliyang) [bug:193234]
  - x86/kvm: Add kexec support for SEV Live Migration. (Ashish Kalra) [bug:193234]
  - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. (Ashish Kalra) [bug:193234]
  - EFI: Introduce the new AMD Memory Encryption GUID. (Ashish Kalra) [bug:193234]
  - mm: x86: Invoke hypercall when page encryption status is changed (Brijesh Singh) [bug:193234]
  - x86/kvm: Add AMD SEV specific Hypercall3 (Brijesh Singh) [bug:193234]
  - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall (Ashish Kalra) [bug:193234]
  - x86/mem_encrypt: Correct physical address calculation in __set_clr_pte_enc() (Isaku Yamahata) [bug:193234]
  - HYGON: Revert "crypto: ccp: Extend sev_user_data_status to provide more information about Hygon firmware" (hanliyang) [bug:193234]
  - HYGON: crypto: ccp: Fix a problem that vq thread may stuck when do multi process test. (Xiangyu Xu) [bug:193234]
  - HYGON: crypto: ccp - Add support for CMD HGSC_CERT_IMPORT (fangbaoshun) [bug:193234]
  - bpf: Don't use tnum_range on array range checking for poke descriptors (Daniel Borkmann) {CVE-2022-2905}
  - bpf: Fix incorrect verifier pruning due to missing register precision taints (Daniel Borkmann) {CVE-2023-2163}
  - security/kysec: use spin_lock_irq() instead of spin_lock() (huanfuxi) [bug:164413]
  - security/kysec: fix bug with deadlock when writing aufs files (yangzhao) [task:136839]
  - security/kysec: fix kmemleak of netctl (wangkanglong) [bug:190255]
  - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (xiaolinkui) [bug:195544]
  - gmjstcm: delete SMO0768 from TCM1 spi device id (Li ZhiGang) [task:175749]
  - mm/munlock: delete munlock_vma_pages_all(), allow oomreap (Hugh Dickins) [bug:163612, bug:188493, bug:188513, bug:189316]
  - netfilter: nft_exthdr: Search chunks in SCTP packets only (Phil Sutter) [bug:192914]
  - netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian (Stephen Suryaputra) [bug:192914]
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) [bug:192914] {CVE-2023-4881}
  - netfilter: nft_exthdr: Fix for unsafe packet data read (Phil Sutter) [bug:192914]
  - netfilter: nft_exthdr: Support SCTP chunks (Phil Sutter) [bug:192914]
  - netfilter: nf_tables: add support for matching IPv4 options (Stephen Suryaputra) [bug:192914]
  - tpm: add TCM2.0 support in tpm_tis_spi (Li ZhiGang) [task:175234]
  - media: usb: siano: Fix warning due to null work_func_t function pointer (Duoming Zhou) [bug:189733] {CVE-2023-4132}
  - media: usb: siano: Fix use after free bugs caused by do_submit_urb (Duoming Zhou) [bug:189733] {CVE-2023-4132}
  - ipv6: do not leave garbage in rt->fib6_metrics (Eric Dumazet) [task:178045]
  - netfilter: xt_u32: validate user space input (Wander Lairson Costa) [bug:197488] {CVE-2023-39192}
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [bug:197492] {CVE-2023-39193}
  - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma) [bug:197496] {CVE-2023-39194}
  - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (Zixuan Fu) [bug:189769] {CVE-2023-4387}
  - fs: jfs: fix possible NULL pointer dereference in dbFree() (Zixuan Fu) [bug:189765] {CVE-2023-4385}
  - cec-api: prevent leaking memory through hole in structure (Hans Verkuil) [task:157172, bug:197484] {CVE-2020-36766}
  - net/sched: Retire rsvp classifier (Jamal Hadi Salim) [bug:196033] {CVE-2023-42755}
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) [bug:196022] {CVE-2023-4622}
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet) [bug:196026] {CVE-2023-42752}
  - ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng) [task:177575] {CVE-2023-42754}
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Hyunwoo Kim) [task:176709] {CVE-2022-45887}


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-52.32.v2207
changelog:
  - vfio/pci: enable CONFIG_VFIO_PCI_VGA for x86 (Cong Liu) [task:184699]
  - drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer (Lu Yao) [task:184449]
  - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Jozsef Kadlecsik) [bug:195544]
  - Revert "netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test" (xiaolinkui) [bug:195544]
  - ext4: forbid commit inconsistent quota data when errors=remount-ro (Ye Bin) [task:183005]
  - quota: fixup *_write_file_info() to return proper error code (Yangtao Li) [task:183005]
  - dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client (Li Lingfeng) [task:183052]
  - dm bufio: do buffer cleanup from a workqueue (Mikulas Patocka) [task:183052]
  - dm bufio: introduce a global cache replacement (Mikulas Patocka) [task:183052]
  - dm bufio: introduce a global queue (Mikulas Patocka) [task:183052]
  - dm bufio: refactor adjust_total_allocated (Mikulas Patocka) [task:183052]
  - dm bufio: call adjust_total_allocated from __link_buffer and __unlink_buffer (Mikulas Patocka) [task:183052]
  - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (Zhihao Cheng) [task:183052]
  - dm thin metadata: add wrappers for managing write locking of metadata (Mike Snitzer) [task:183052]
  - dm: add disk before alloc dax (Li Lingfeng) [task:183060]
  - perf/cgroups: Install cgroup events to correct cpuctx (Song Liu) [task:184204]
  - ovl: adhere to the vfs_ vs. ovl_do_ conventions for xattrs (Miklos Szeredi) [task:186656] {CVE-2023-32629}
  - ext4: fix overflow in ext4_iomap_alloc() (Jan Kara) [task:156171]
  - ext4: Fix occasional generic/418 failure (Jan Kara) [task:156171]
  - ext4: do not block RWF_NOWAIT dio write on unallocated space (Jan Kara) [task:156171]
  - ext4: dio take shared inode lock when overwriting preallocated blocks (Zhang Yi) [task:156171]
  - ext4: optimize file overwrites (Ritesh Harjani) [task:156171]
  - ext4: Optimize ext4 DIO overwrites (Jan Kara) [task:156171]
  - ext4: Move to shared i_rwsem even without dioread_nolock mount opt (Ritesh Harjani) [task:156171]
  - ext4: Start with shared i_rwsem in case of DIO instead of exclusive (Ritesh Harjani) [task:156171]
  - ext4: introduce direct I/O write using iomap infrastructure (Matthew Bobrowski) [task:156171]
  - vfs: introduce file_modified() helper (Amir Goldstein) [task:156171]
  - ext4: remove unnecessary error check (Shi Siyuan) [task:156171]
  - ext4: update ext4_sync_file() to not use __generic_file_fsync() (Matthew Bobrowski) [task:156171]
  - ext4: move inode extension check out from ext4_iomap_alloc() (Matthew Bobrowski) [task:156171]
  - ext4: move inode extension/truncate code out from ->iomap_end() callback (Matthew Bobrowski) [task:156171]
  - ext4: introduce direct I/O read using iomap infrastructure (Matthew Bobrowski) [task:156171]
  - ext4: introduce new callback for IOMAP_REPORT (Matthew Bobrowski) [task:156171]
  - ext4: split IOMAP_WRITE branch in ext4_iomap_begin() into helper (Matthew Bobrowski) [task:156171]
  - ext4: move set iomap routines into a separate helper ext4_set_iomap() (Matthew Bobrowski) [task:156171]
  - ext4: update direct I/O read lock pattern for IOCB_NOWAIT (Matthew Bobrowski) [task:156171]
  - ext4: reorder map.m_flags checks within ext4_iomap_begin() (Matthew Bobrowski) [task:156171]
  - iomap: Allow forcing of waiting for running DIO in iomap_dio_rw() (Jan Kara) [task:156171]
  - iomap: move the iomap_dio_rw ->end_io callback into a structure (Christoph Hellwig) [task:156171]
  - iomap: split size and error for iomap_dio_rw ->end_io (Matthew Bobrowski) [task:156171]
  - Revert "Revert "ext4: Allow parallel DIO reads"" (Shida Zhang) [task:156171]
  - Revert "Revert "Revert "ext4: Allow parallel DIO reads""" (Shida Zhang) [task:156171]
  - Revert "ext4: update direct I/O read lock pattern for IOCB_NOWAIT" (Shida Zhang) [task:156171]
  - Revert "ext4: introduce direct I/O read using iomap infrastructure" (Shida Zhang) [task:156171]
  - scsi: lpfc: Fix missing part of code logic in lpfc_nvmet.c (huhai) [task:184502]
  - scsi: lpfc: Fix missing part of code logic in lpfc_sli.c (huhai) [task:184502]
  - scsi: lpfc: Fix missing part of code logic in lpfc_nvmet.c (huhai) [task:184502]
  - Revert "scsi: lpfc: Fix GFT_ID and PRLI logic for RSCN" (huhai) [task:184502]
  - perf/core: Fix cgroup event list management (Namhyung Kim) [task:184204]
  - perf/core: Optimize perf_install_in_event() (Peter Zijlstra) [task:184204]
  - perf: Rework perf_event_exit_event() (Peter Zijlstra) [task:184204]
  - EULER: perf: Revert "perf: Paper over the hw.target problems" (Yang Jihong) [task:184204]
  - perf: Fix function pointer case (Peter Zijlstra) [task:184204]
  - perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong) [task:184204]
  - perf/core: Fix the same task check in perf_event_set_output (Kan Liang) [task:184204]
  - perf: Fix possible memleak in pmu_dev_alloc() (Chen Zhongjin) [task:184204]
  - perf/core: Fix address filter parser for multiple filters (Adrian Hunter) [task:184204]
  - perf: Fix list corruption in perf_cgroup_switch() (Song Liu) [task:184204]
  - perf/ioctl: Add check for the sample_period value (Ravi Bangoria) [task:184204]
  - objtool: Don't fail on missing symbol table (Josh Poimboeuf) [task:185741]
  - EULER: arm64/mpam: mark partid non-exclusive if self-owned (Wang ShaoBo) [task:182928]
  - EULER: arm64/mpam: realign step entry when traversing rmid_transform (Wang ShaoBo) [task:182928]
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (Yi Yang) [task:182946]
  - OPENEULER: irqchip: gic-v3: Collection table support muti pages (wangwudi) [task:183007]
  - net: add vlan_get_protocol_and_depth() helper (Eric Dumazet) [task:182970]
  - net: tap: check vlan with eth_type_vlan() method (Menglong Dong) [task:182970]
  - ipv6: Fix use of anycast address with loopback (David Ahern) [task:184541, task:183477]
  - ipv6: Create init helper for fib6_nh (David Ahern) [task:184541, task:183477]
  - net/ipv6: Do not reset nl_net in ip6_route_info_create (David Ahern) [task:184541, task:183477]
  - ipv6: Move setting default metric for routes (David Ahern) [task:184541, task:183477]
  - net: rtmsg_to_fib6_config() - use new style struct initializer instead of memset (Maciej Żenczykowski) [task:184541, task:183477]
  - Revert "ipv6: Create init helper for fib6_nh" (luoqing) [task:183477]
  - Revert "ipv6: Fix use of anycast address with loopback" (luoqing) [task:183477]
  - nvmet: set loop queue's segment boundary mask as PAGE_SIZE - 1 (pengcan) [task:174281, task:175051, task:175046, bug:195690, bug:195682, bug:195676]
  - Revert "nvmet: fix building bvec from sg list" (pengcan) [task:174281, task:175051, task:175046, bug:195690, bug:195682, bug:195676]
  - nbd: fix race between nbd_alloc_config() and module removal (Yu Kuai) [task:162162]
  - OPENEULER: xhci: fix USB xhci controller issue (Longfang Liu) [task:182993]
  - OPENEULER: mm: disable kernelcore=mirror when no mirror memory (Ma Wupeng) [task:182939]
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy) [task:119087] {CVE-2022-3564}
  - io_uring: ensure IOPOLL locks around deferred work (Jens Axboe) [task:179887] {CVE-2023-21400}
  - io_uring: get rid of intermediate IORING_OP_CLOSE stage (Jens Axboe) [task:179891] {CVE-2023-1295}
  - fs: provide locked helper variant of close_fd_get_file() (Jens Axboe) [task:179891]
  - file: Rename __close_fd_get_file close_fd_get_file (Eric W. Biederman) [task:179891]
  - xen/events: replace evtchn_rwlock with RCU (Juergen Gross) {CVE-2023-34324}
  - xen/events: don't unmask an event channel when an eoi is pending (Juergen Gross) [task:158827]
  - xen/events: don't use chip_data for legacy IRQs (Juergen Gross)
  - XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information. (Thomas Gleixner) [task:157358]
  - spi: spi-ls: add slave enumeration support when using acpi (Liu Peibao) [task:118969, task:183450]
  - Loongson2K: SPI: Enable spi driver module (Yinbo Zhu) [task:118969, task:183450]
  - Loongson2K/Loongson7A: SPI: Add spi controller pm support (Yinbo Zhu) [task:118969, task:183450]
  - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys (Dheeraj Kumar Srivastava) [task:166857, task:182934]
  - sch_netem: fix issues in netem_change() vs get_dist_table() (Eric Dumazet) [task:182934]
  - sch_netem: acquire qdisc lock in netem_change() (Eric Dumazet) [task:166857, task:182934]
  - cgroup: Do not corrupt task iteration when rebinding subsystem (Xiu Jianfeng) [task:166857, task:182934]
  - loop: loop_set_status_from_info() check before assignment (Zhong Jinghua) [task:182968]
  - loop: Check for overflow while configuring loop (Siddh Raman Pant) [task:162162]
  - scsi: hisi_sas: Fix normally completed I/O analysed as failed (Xingui Yang) [task:182978]
  - net/mlx5: Allow async trigger completion execution on single CPU systems (Roy Novich) [task:182578]
  - net/mlx5: Fix possible use-after-free in async command interface (Tariq Toukan) [task:182578]
  - net/mlx5: rate limit alloc_ent error messages (Li RongQing) [task:182578]
  - net/mlx5: Fix a race on command flush flow (Moshe Shemesh) [task:182578]
  - Revert "net/mlx5: Add retry mechanism to the command entry index allocation" (Moshe Shemesh) [task:182578]
  - net/mlx5: Set command entry semaphore up once got index free (Moshe Shemesh) [task:182578]
  - lib/stackdepot.c: fix global out-of-bounds in stack_slabs (Alexander Potapenko) [task:155707, task:183063]
  - i40e: Fix uninitialized variable mfs_max (Colin Ian King) [bug:194556]
  - i40e: Add netlink callbacks support for software based DCB (Arkadiusz Kubalewski) [bug:194556]
  - i40e: Add init and default config of software based DCB (Arkadiusz Kubalewski) [bug:194556]
  - i40e: Add hardware configuration for software based DCB (Arkadiusz Kubalewski) [bug:194556]
  - i40e: remove unused defines (Jesse Brandeburg) [bug:194556]
  - i40e: Move client header location (Shiraz Saleem) [bug:194556]
  - drm/atomic-helper: Bump vblank timeout to 100 ms (Linus Walleij) [task:182959]
  - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one (Florian Westphal) {CVE-2023-39197}
  - net: sched: fix NULL pointer dereference in mq_attach (Zhengchao Shao) [task:183053]
  - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled (Zhipeng Xie) [task:104354]
  - of: overlay: kmemleak in dup_and_fixup_symbol_prop() (Frank Rowand) [task:183064]
  - iommu/dma: Fix MSI reservation allocation (Marc Zyngier) [task:183064]
  - Revert "Revert "mm, sl[aou]b: guarantee natural alignment for kmalloc(power-of-two)"" (Shida Zhang) [task:82242, task:182892]
  - ipv6: Fix use of anycast address with loopback (David Ahern) [task:99622, task:183477]
  - ipv6: Create init helper for fib6_nh (user) [task:99622, task:183477]
  - security/kysec: update memory protect interface (huanfuxi) [bug:193040]
  - 3rd/hsdimm-lite: refactor the module (huanfuxi) [bug:193040]
  - loongarch/module: Reduce the PLT required memory size (liubaolin) [task:183312]
  - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE (Sean Christopherson) [task:182171]
  - KVM: fix overflow of zero page refcount with ksm running (Zhuang Yanying) [task:157172]
  - ravb: Fix use-after-free issue in ravb_tx_timeout_work() (Yoshihiro Shimoda) [task:181443] {CVE-2023-35827}


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-52.33.v2207
changelog:
  - bpf: skmsg, fix psock create on existing kcm/tls port (John Fastabend) [task:189070]
  - Revert "fs/pipe:dont need wake up self in a single process of ub" (xiaolinkui) [task:186974]
  - Revert "fs/pipe: Solve the problem of LTP smoketest failure" (xiaolinkui) [task:186974]
  - security/kysec: allow rsync to inherit trusted lable (huanfuxi) [bug:113477]
  - security/kysec: fix unnecessary inspection in kysec_hash_sync_label_unknown() (yangzhao) [task:126286]
  - security/kysec: fix possible NULL pointer in SM3_final() (yangzhao) [task:126283]
  - epoll: fix missing code of do_epoll_ctl (xiaolinkui) [task:186974]
  - jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (Zhihao Cheng) [task:187896]
  - HYGON:: hct only build on X86 platform (yangdepei) [task:189463]
  - ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg) [task:188435]
  - ipmi: fix SSIF not responding under certain cond. (Zhang Yuchen) [task:188418]
  - ipmi_ssif: Rename idle state and check (Corey Minyard) [task:188419]
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Järvinen) [task:188423]
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Järvinen) [task:188424]
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima) [task:188425]
  - of: Fix modalias string generation (Miquel Raynal) [task:188428]
  - dccp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima) [task:188412]
  - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). (Kuniyuki Iwashima) [task:188412]
  - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). (Kuniyuki Iwashima) [task:188412]
  - HYGON: Adding ioctl variables MCCP_SHARE_OP_DMA_UNMAP_ALL to distinguish between DMA_UNMAP and DMA_UNMAP_ALL. (Yabin Li) [task:174598]
  - HYGON: add mediated ccp support in virtual machine (Yabin Li) [task:174598]
  - HYGON: bugfix: fix phy addr check failed in hct.ko due to C-bit. (Yabin Li) [task:174598]
  - HYGON: Support interrupt request for HCT asynchronous mode (Yabin Li) [task:174598]
  - HYGON: newfeature: ccp: add hct module (yangdepei) [task:174598]
  - HYGON: Support tkm virtualization (niuyongwen) [task:174598]
  - HYGON: Support psp virtualization (niuyongwen) [task:174598]
  - HYGON: newfeature: common: Add psp mutex enable ioctl support (chench) [task:174598]
  - HYGON: newfeature: common: concurrent psp access support between user and kernel space (chench) [task:174598]
  - HYGON: crypto: ccp: Add support for issue commands in RING_BUFFER Mode (fangbaoshun) [task:174598]
  - HYGON: crypto: ccp: Implement SEV_RING_BUFFER command handler (fangbaoshun) [task:174598]
  - HYGON: crypto:ccp: Add the status dequeue API support for CSV RING_BUFFER Mode (fangbaoshun) [task:174598]
  - HYGON: crypto:ccp: Add the command enqueue API support for CSV RING_BUFFER Mode (fangbaoshun) [task:174598]
  - HYGON: crypto: ccp: Add the init and free API support for CSV RING_BUFFER Mode (fangbaoshun) [task:174598]
  - net: Add conditions for auto affinity (xiaolinkui) [task:187683]
  - sctp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima) [task:188412]
  - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. (Kuniyuki Iwashima) [task:188414]
  - net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues(). (Kuniyuki Iwashima) [task:188413]
  - EULER: config: enable set the max iova mag size to 128 (Zhang Zekun) [task:183036]
  - EULER: iommu/iova: increase the iova_rcache depot max size (Zhang Zekun) [task:183036]
  - dm thin metadata: check fail_io before using data_sm (Li Lingfeng) [task:182982]
  - dm space maps: improve performance with inc/dec on ranges of blocks (Joe Thornber) [task:182982]
  - dm: don't lock fs when the map is NULL during suspend or resume (Li Lingfeng) [task:182983]
  - dm: don't lock fs when the map is NULL in process of resume (Li Lingfeng) [task:182983]
  - skbuff: Fix a race between coalescing and releasing SKBs (Liang Chen) [task:185227]
  - skbuff: fix coalescing for page_pool fragment recycling (Jean-Philippe Brucker) [task:185227]
  - skbuff: Fix a potential race while recycling page_pool packets (Ilias Apalodimas) [task:185227]
  - security/kyextend: Remove the default assignment of zero (chengang) [bug:189708]
  - NFS: make sure open context mode have FMODE_EXEC when file open for exec (ChenXiaoSong) [task:187717] {CVE-2022-24448}
  - NFSv4: fix open failure with O_ACCMODE flag (ChenXiaoSong) [task:187717] {CVE-2022-24448}
  - Revert "NFSv4: Handle the special Linux file open access mode" (ChenXiaoSong) [task:187717] {CVE-2022-24448}
  - EULER: net: hns3: update hns3 version to 23.7.1 (Yonglong Liu) [task:186993]
  - EULER: net: hns3: fix tx timeout issue (Jian Shen) [task:186991]
  - EULER: net: hns3: add barrier in vf mailbox reply process (Yonglong Liu) [task:182950]
  - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (Jie Wang) [task:182948]
  - nvmet: fix setting ns queue's segment boundary (pengcan) [task:187823]
  - Revert "Revert "nvmet: fix building bvec from sg list"" (pengcan) [task:187823]
  - config: disable unprivileged eBPF by default (chenyuan) [task:178019, task:186859]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.34.v2207
changelog:
  - scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs (Yihang Li) [task:196398]
  - ida: Fix crash in ida_free when the bitmap is empty (Matthew Wilcox (Oracle)) [task:196096] {CVE-2023-6915}
  - drm/atomic: Fix potential use-after-free in nonblocking commits (Daniel Vetter) [task:196093] {CVE-2023-51043}
  - drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig) [task:196092] {CVE-2023-51042}
  - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (Krzysztof Kozlowski) [task:196011] {CVE-2023-46343}
  - net: hns3: fix output information incomplete for dumping tx queue info with debugfs (Jie Wang) [task:183106]
  - net: hns3: fix reset delay time to avoid configuration timeout (Jie Wang) [task:182918]
  - security/kysec: bound pcr_extend with kysec status not exectl. (penghuaihe) [bug:210446, bug:210278, bug:210330, bug:210312]
  - security/kysec: encapsulate hash cal as a separate function (penghuaihe) [bug:210446, bug:210278, bug:210330, bug:210312]
  - stmmac: remove is_ft_mcu_ready when getting mac addr from nvmem (luyun) [task:18023, bug:210342]
  - config: Enable support for CFB mode (chengang) [bug:211037]
  - tty: fix hang on tty device with no_room set (Hui Li) [task:190651]
  - security/kysec: Fix inheritance error in parent process marking (chengang) [task:208546]
  - smb: client: fix potential OOB in smb2_dump_detail() (Paulo Alcantara) [task:195442] {CVE-2023-6610}
  - smb: client: fix OOB in receive_encrypted_standard() (Paulo Alcantara) [task:196094] {CVE-2024-0565}
  - media: v4l2-mem2mem: fix epoll() by calling poll_wait first (Hans Verkuil) [task:193171]
  - net/sched: cbs: Fix not adding cbs instance to list (Vinicius Costa Gomes) [task:193171]
  - sctp: fix potential deadlock on &net->sctp.addr_wq_lock (Chengfeng Ye) [task:196364] {CVE-2024-0639}
  - LoongArch: driver : rnp: Fix the irq numbers of rnp dirver request. (liubaolin) [task:195831]
  - netfilter: ipset: Fix the last missing check of nla_parse_deprecated() (Jozsef Kadlecsik) [task:193171]
  - Revert "Revert "ima: check the xattr length of ima&evm before measurement"" (mengdehui) [task:195294]
  - Revert "Revert "ima: change the default hash algorithm to sha256"" (mengdehui) [task:195294]
  - net/vlan: include the shift in skb_vlan_tag_get_prio() (Michał Mirosław) [task:194897]
  - Loongson: Loongson3: numa: fix high_memory calculate. (Chong Qiao) [task:194608]
  - LoongArch: numa: fix high_memory calculate. (Chong Qiao) [task:194609]
  - spi: loongson: add bus driver for the loongson spi controller (Qiming Yang) [task:194611]
  - signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal (Eric W. Biederman)
  - release-stable-kernel: Add Zhengyuan Liu as Maintainer for SP3 (Jackie Liu)
  - Input: add bounds checking to input_set_capability() (Jeff LaBundy) [task:162162] {CVE-2022-48619}
  - Revert "ima: change the default hash algorithm to sha256" (liuqi) [task:192131]
  - Revert "ima: check the xattr length of ima&evm before measurement" (liuqi) [task:192131]
  - bpf, devmap: Use GFP_KERNEL for xdp bulk queue allocation (Jun'ichi Nomura) [bug:203534]
  - smb: client: fix OOB in smbCalcSize() (Paulo Alcantara) [task:193171] {CVE-2023-6606}
  - phy: fix driver name display error (xiaolinkui) [task:194225]
  - dm crypt: Initialize crypto wait structures (Damien Le Moal) [task:184881]
  - dm crypt: fix GFP flags passed to skcipher_request_alloc() (Mikulas Patocka) [task:184881]
  - dm crypt: reuse eboiv skcipher for IV generation (Ard Biesheuvel) [task:184881]
  - dm crypt: Implement Elephant diffuser for Bitlocker compatibility (Milan Broz) [task:184881]
  - dm crypt: implement eboiv - encrypted byte-offset initialization vector (Milan Broz) [task:184881]
  - vhost: use kzalloc() instead of kmalloc() followed by memset() (Prathu Baronia) [task:193171] {CVE-2024-0340}
  - bpf: Synchronize dispatcher update with bpf_dispatcher_xdp_func (Jiri Olsa) [task:190915]
  - Revert "security/kysec: add netlink_send hook into LSM." (tianyunnuan) [task:179762]
  - Revert "security/kysec: pk label limit is useful only in sm env." (tianyunnuan) [task:179762]
  - security/kysec: Fix bug of non-execution tcm2 extension (liuqi) [task:193262]
  - security/kysec: Fix build dependence with tpm (liuqi) [task:193237]
  - nbd: fix null-ptr-dereference while accessing 'nbd->config' (Li Nan) [task:184984]
  - nbd: factor out a helper to get nbd_config without holding 'config_lock' (Li Nan) [task:184984]
  - nbd: fold nbd config initialization into nbd_alloc_config() (Li Nan) [task:184984]
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao) [task:193171] {CVE-2023-6932}
  - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg (Hyunwoo Kim) [task:193171] {CVE-2023-51779}
  - net/rose: Fix Use-After-Free in rose_ioctl (Hyunwoo Kim) [task:193171] {CVE-2023-51782}
  - appletalk: Fix Use-After-Free in atalk_ioctl (Hyunwoo Kim) [task:193171] {CVE-2023-51781}
  - atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim) [task:193171] {CVE-2023-51780}
  - security/kysec: Fixed compilation errors without PROCESS PROTECT (chengang) [task:192327]
  - OPENEULER: irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801 (Xiang Chen) [task:183018]
  - irqchip/gic-v3-its: Make is_v4 use a TYPER copy (Marc Zyngier) [task:183018]
  - crypto: cryptd - Protect per-CPU resource by disabling BH. (Sebastian Andrzej Siewior) [task:184972]
  - blk-wbt: make enable_state more accurate (Yu Kuai) [task:184970]
  - ext4: turning quotas off if mount failed after enable quotas (Baokun Li) [task:184977]
  - OPENEULER: x86/kprobes: Fix the error judgment for debug exceptions (Li Huafei) [task:184976]
  - ipmi_si: fix a memleak in try_smi_init() (Yi Yang) [task:184979]
  - quota: simplify drop_dquot_ref() (Baokun Li) [task:184966]
  - quota: fix dqput() to follow the guarantees dquot_srcu should provide (Baokun Li) [task:184966]
  - quota: add new helper dquot_active() (Baokun Li) [task:184966]
  - quota: rename dquot_active() to inode_quota_active() (Baokun Li) [task:184966]
  - quota: factor out dquot_write_dquot() (Baokun Li) [task:184966]
  - quota: add dqi_dirty_list description to comment of Dquot List Management (Chengguang Xu) [task:184966]
  - quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list (Chengguang Xu) [task:184966]
  - jbd2: fix checkpoint cleanup performance regression (Zhang Yi) [task:184982]
  - jbd2: remove __journal_try_to_free_buffer() (Zhang Yi) [task:184983]
  - jbd2: fix a race when checking checkpoint buffer busy (Zhang Yi) [task:184983]
  - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (Zhihao Cheng) [task:184983]
  - jbd2: remove journal_clean_one_cp_list() (Zhang Yi) [task:184983]
  - jbd2: remove t_checkpoint_io_list (Zhang Yi) [task:184983]
  - jbd2: recheck chechpointing non-dirty buffer (Zhang Yi) [task:184983]
  - security/kysec: implementation of dentry_create_files_as() hook (yangzhao) [bug:30065]
  - security/kysec: remove judgments greater than 32 signals (wangkanglong) [bug:111722]
  - security/kysec: filter signals which are not kill signal in task_kill() (yangzhao) [bug:107836]
  - security/kysec: use msleep_interruptible() instead of msleep() (yangzhao) [task:131471]
  - security/kysec: optimize kysec thread waiting mode by wait_event (yangzhao) [task:110527]
  - KVM: arm64: Fix clean dcache when vcpu is 0 (zhanghao1) [task:186056]
  - nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust) [task:184474]
  - nfsd4: kill warnings on testing stateids with mismatched clientids (J. Bruce Fields) [task:184474]
  - EULER: net: hns: fix wrong head when modify the tx feature when sending packets (Yonglong Liu) [task:182947]
  - KVM: SVM: Add 5-level page table support for SVM (Wei Huang) [bug:197000]
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua) [task:193171] {CVE-2023-7192}
  - HYGON: crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash (liulanyi) [bug:207605]
  - security/kysec: Record TPM log using a kthread (liuqi) [task:181343]
  - security/kysec: Only record TPM log once per file (liuqi) [task:181343]
  - security/kysec: Add TPM based static measurement functions (huanfuxi) [task:177770, task:181343]
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Linus Torvalds)
  - blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" (Ming Lei)
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan) [task:188430]
  - net/packet: convert po->auxdata to an atomic flag (Eric Dumazet) [task:188433]
  - net/packet: convert po->origdev to an atomic flag (Eric Dumazet) [task:188434]
  - nvmet: nul-terminate the NQNs passed in the connect command (Christoph Hellwig) [task:189180] {CVE-2023-6121}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.35.v2207
changelog:
  - USB: serial: pl2303: fix line-speed handling on newer chips (Johan Hovold) [bug:211186]
  - USB: serial: pl2303: add support for PL2303HXN (Charles Yeh) [bug:211186]
  - USB: serial: pl2303: fix tranceiver suspend mode (Johan Hovold) [bug:211186]
  - USB: serial: pl2303: fix non-supported xon/xoff (Johan Hovold) [bug:211186]
  - perf: Fix perf_event_validate_size() (Peter Zijlstra) [task:199635] {CVE-2023-6931}
  - loop: loop_set_status_from_info() check before assignment (Zhong Jinghua) [task:192988]
  - loop: Check for overflow while configuring loop (Siddh Raman Pant) [task:192988]
  - loop: Factor out configuring loop from status (Martijn Coenen) [task:192988]
  - Revert "loop: Check for overflow while configuring loop" (zhanggenjian) [task:192988]
  - loop: properly observe rotational flag of underlying device (Holger Hoffstätte) [task:192988]
  - loop: Refactor loop_set_status() size calculation (Martijn Coenen) [task:192988]
  - loop: Factor out setting loop device size (Martijn Coenen) [task:192988]
  - loop: Remove sector_t truncation checks (Martijn Coenen) [task:192988]
  - loop: Call loop_config_discard() only after new config is applied (Martijn Coenen) [task:192988]
  - Revert "loop: loop_set_status_from_info() check before assignment" (zhanggenjian) [task:192988]
  - tcm: support tpmrm function of ax99100_spi interface TCM module (jiangxiujie) [task:198010]
  - LoongArch: Clean up play_dead code (Yangyinglu) [task:198660]
  - LoongArch:LSVZ: remove uncached_acc CSR emulation (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: rename gcsr_readq with gcsr_read (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: rename wait instruction with idle (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: remove unused variable (Mao Bibo) [task:118969]
  - LoongArch: delete struct boot_mem_map (liuyun) [task:198660]
  - LoongArch:LSVZ: set guestid variable at percpu area (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: rename lvz_trap_handle_xxx with _kvm_handle_xxx (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: kvm code cleanup v2 (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: kvm code cleanup on mm (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: kvm code cleanup (Mao Bibo) [task:198660]
  - PCI: Add ACS quirk for Wangxun NICs (Mengyuan Lou) [task:195929]
  - PCI: Unify ACS quirk desired vs provided checking (Bjorn Helgaas) [task:195929]
  - PCI: Add ACS quirk for iProc PAXB (Abhinav Ratna) [task:195929]
  - PCI: Make ACS quirk implementations more uniform (Bjorn Helgaas) [task:195929]
  - rpmbuild: Choose the algorithm for module signing based on the config (chengang) [task:197392]
  - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (Sharath Srinivasan) [task:198453] {CVE-2024-23849}
  - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() (Tuo Li) [task:198457] {CVE-2024-24855}
  - dm: limit the number of targets and parameter size area (Mikulas Patocka) [task:198455] {CVE-2023-52429}
  - dm ioctl: log an error if the ioctl structure is corrupted (Mikulas Patocka) [task:198455]
  - jfs: fix log->bdev_handle null ptr deref in lbmStartIO (Lizhi Xu) [task:196809]
  - scsi: fcoe: pass in fcoe_rport structure instead of fc_rport_priv (Hannes Reinecke) [task:197881]
  - scsi: libfc: Whitespace cleanup in libfc.h (Hannes Reinecke) [task:197881]
  - netfilter: nf_tables: Reject tables of unsupported family (Phil Sutter) [task:196095] {CVE-2023-6040}
  - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (Dan Carpenter) [task:196363] {CVE-2024-0607}
  - security/kysec: Resolve abnormal KYSEC audit log issues (chengang) [bug:210410]
  - block: fix NULL pointer dereference in account statistics with IDE (Logan Gunthorpe) [task:196111]
  - block: account statistics for passthrough requests (Logan Gunthorpe) [task:196111]
  - machine_t: Limit specific architecture judgment functions (Jackie Liu)
  - LoongArch: hugepage table replace tlb (liuyun) [task:198242]
  - ZHAOXIN: Update PMU uncore dump bug patch (leoliu-oc) [bug:203040]
  - ZHAOXIN: Update PMU support for Zhaoxin KX-7000 (leoliu-oc) [bug:203040]
  - ZHAOXIN: Fix Zhaoxin PMU uncore kdump fail bug (leoliu-oc) [bug:203040]
  - arch/x86: avoid redefinition issues (liwanwu) [bug:203040]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.36.v2207
changelog:
  - package: Fix packing problem when building rpm packages (Jiangshan Yi) [task:171572, task:201386]
  - rpmbuild: support srpm when need (Jackie Liu) [task:201386]
  - net: openvswitch: fix race on port output (Felix Huettner) [task:202729]
  - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201794] {CVE-2020-36782}
  - net: sched: sch_teql: fix null-pointer dereference (Pavel Tikhomirov) [task:215813]
  - mm: swapoff: shmem_unuse() stop eviction without igrab() (Hugh Dickins) [task:199161]
  - mm: swapoff: take notice of completion sooner (Hugh Dickins) [task:199161]
  - mm: swapoff: remove too limiting SWAP_UNUSE_MAX_TRIES (Hugh Dickins) [task:199161]
  - mm: swapoff: shmem_find_swap_entries() filter out other types (Hugh Dickins) [task:199161]
  - mm: swap: properly update readahead statistics in unuse_pte_range() (Andrea Righi) [task:199161]
  - mm: rid swapoff of quadratic complexity (Vineeth Remanan Pillai) [task:199161]
  - mm: refactor swap-in logic out of shmem_getpage_gfp (Vineeth Remanan Pillai) [task:199161]
  - shmem: Convert shmem_add_to_page_cache to XArray (Matthew Wilcox) [task:199161]
  - shmem: Convert find_swap_entry to XArray (Matthew Wilcox) [task:199161]
  - shmem: Convert shmem_confirm_swap to XArray (Matthew Wilcox) [task:199161]
  - shmem: Convert shmem_radix_tree_replace to XArray (Matthew Wilcox) [task:199161]
  - LoongArch:modify vfat and nls936 config to y (liubaolin) [task:193507]
  - LoongArch:LSVZ: disable hugepage during migration process (Bibo Mao) [task:198660]
  - LoongArch: LSVZ: Fix huge page check issue (liubaolin) [task:198660]
  - LoongArch: Flush the cache of PTW when creating new page table. (liubaolin) [task:198660]
  - LoongArch: Introduce hardware page table walk (liubaolin) [task:198660]
  - irqchip/loongarch: Improve extioi code for guest cpu (liubaolin) [task:198660]
  - LoongArch: Fix initrd parsing in the small fdt method (Youling Tang) [task:198660]
  - LoongArch: Fix the initrd parsing on the command line (yangqiming) [task:198660]
  - LoongArch: Efistub support V40 interface (yangqiming) [task:198660]
  - LoongArch: Fix kexec operation failed to resolve initrd on V4.0 interface (Youling Tang) [task:198660]
  - LoongArch: Support initrd passing by systemtable (Jianmin Lv) [task:198660]
  - irqchip: irq-loongarch-extioi: fix code error (Baoqi Zhang) [task:198660]
  - irqchip: irq-loongarch-extioi: update dt parameters (Liu Peibao) [task:198660]
  - loongarch: fix enable_pcie_wakeup() called twice (mengyingkun) [task:198660]
  - LoongArch: Rename csr register Help functions (Yanteng Si) [task:198660]
  - x86/alternatives: add missing insn.h include (Dave Hansen) [task:198393]
  - x86/alternatives: Sync bp_patching update for avoiding NULL pointer exception (Masami Hiramatsu) [task:198393]
  - x86/kprobes: Fix ordering while text-patching (Peter Zijlstra) [task:198393]
  - x86/alternatives: Add and use text_gen_insn() helper (Peter Zijlstra) [task:198393]
  - x86/alternatives, jump_label: Provide better text_poke() batching interface (Peter Zijlstra) [task:198393]
  - x86/alternatives: Teach text_poke_bp() to emulate instructions (Peter Zijlstra) [task:198393]
  - x86/jump_label: Make tp_vec_nr static (YueHaibing) [task:198393]
  - x86/jump_label: Batch jump label updates (Daniel Bristot de Oliveira) [task:198393]
  - x86/jump_label: Add a __jump_label_set_jump_code() helper (Daniel Bristot de Oliveira) [task:198393]
  - x86/alternative: Batch of patch operations (Daniel Bristot de Oliveira) [task:198393]
  - x86/kprobes: Prohibit probing on functions before kprobe_int3_handler() (Masami Hiramatsu) [task:198393]
  - rcu: Refactor rcu_{nmi,irq}_{enter,exit}() (Byungchul Park) [task:198393]
  - x86/alternatives: Remove the return value of text_poke_*() (Nadav Amit) [task:198393]
  - x86/jump-label: Remove support for custom text poker (Nadav Amit) [task:198393]
  - x86/jump_label: Use text_poke_early() during early init (Nadav Amit) [task:198393]
  - x86/jump_label: Switch to jump_entry accessors (Ard Biesheuvel) [task:198393]
  - jump_label: Implement generic support for relative references (Ard Biesheuvel) [task:198393]
  - jump_label: Abstract jump_entry member accessors (Ard Biesheuvel) [task:198393]
  - KVM: arm64: pmu: Reset sample period on overflow handling (Marc Zyngier) [task:197911]
  - KVM: arm/arm64: Remove pmc->bitmask (Andrew Murray) [task:197911]
  - kylin/gmjstcm:Adapting TCM1.0 to x86 (wudandan) [task:195669]
  - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (Hao Sun) [task:200744] {CVE-2024-26589}
  - crypto: enable SM3_GENERIC configs (chengang) [bug:215175]
  - vhost_net: revert upend_idx only on retriable error (Andrey Smetanin) [task:201250]
  - netfilter: nf_tables: don't skip expired elements during walk (Florian Westphal) [task:179882] {CVE-2023-4244}
  - netfilter: nft_set_rbtree: Add missing expired checks (Phil Sutter) [task:179882]
  - EDAC/thunderx: Fix possible out-of-bounds string access (Arnd Bergmann) [task:200669] {CVE-2023-52464}
  - blk-mq: fix IO hang from sbitmap wakeup race (Ming Lei)
  - Makefile: add mips and loongarch SRCARCH (Li ZhiGang) [task:199827]
  - security/ima&evm: change default hash algorithm to sha256 (liuqi) [task:192131]
  - security/ima&evm: fix xattr check error (liuqi) [task:192131]
  - f2fs: explicitly null-terminate the xattr list (Eric Biggers) [task:200626] {CVE-2023-52436}
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Zhipeng Lu) [task:200671] {CVE-2023-52469}
  - net: qualcomm: rmnet: fix global oob in rmnet_policy (Lin Ma) [task:200745] {CVE-2024-26597}
  - sched/membarrier: reduce the ability to hammer on sys_membarrier (Linus Torvalds) [task:200749] {CVE-2024-26602}
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Tony Lindgren) [task:200752] {CVE-2024-26600}
  - binder: signal epoll threads of self-work (Carlos Llamas) [task:200750] {CVE-2024-26606}
  - CIFS: Fix retry mid list corruption on reconnects (Pavel Shilovsky) [task:197803]
  - net: devlink: skip info_get op call if it is not defined in dumpit (Jiri Pirko) [task:199476]
  - Revert "optimize: rm redundant code in kysec fpro" (penghuaihe) [bug:207104]
  - Bluetooth: Fix atomicity violation in {min,max}_key_size_set (Gui-Dong Han) [task:199813] {CVE-2024-24860}
  - Bluetooth: Move {min,max}_key_size debugfs into hci_debugfs_create_le (Marcel Holtmann) [task:199813]
  - Bluetooth: Add support for LE ping feature (Spoorthi Ravishankar Koppad) [task:199813]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.37.v2207
changelog:
  - scripts: add a script to calculate tasks (Zhengyuan Liu)
  - Revert "GRT: net: fix some warning by gcc" (zhulei) [task:215796]
  - clk: sunxi-ng: Unregister clocks/resets when unbinding (Samuel Holland) [task:212525, task:215462] {CVE-2021-47205}
  - Revert "clk: sunxi-ng: add support for the Allwinner A100 CCU" (Jiangshan Yi) [task:215462]
  - Revert "clk: sunxi-ng: Add support for the Allwinner H616 CCU" (Jiangshan Yi) [task:215462]
  - Revert "clk: sunxi-ng: Unregister clocks/resets when unbinding" (Jiangshan Yi) [task:215462]
  - clk: Add of_clk_hw_register() API for early clk drivers (Stephen Boyd) [task:212789, task:215462]
  - clk: Prepare for clk registration API that uses DT nodes (Stephen Boyd) [task:212789, task:215462]
  - GRT: net: fix some warning by gcc (zhulei) [task:215796]
  - security/kysec: Fixed kernel compilation security warnings (mengdehui) [task:215795]
  - security/kysec: fix some code still run when pcr closed (mengdehui) [bug:217795]
  - securirty/kysec: fix dentry info mem leak (mengdehui) [bug:217795]
  - security/kysec: Add mount_lock when traversing mnt list (mengdehui) [bug:217795]
  - security/kysec: Add fault tolerance when sb_sec is NULL (mengdehui) [bug:217795]
  - NETSWIFT: txgbe: fix some warning by gcc (zhulei) [task:215796]
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Kunwu Chan) [task:207382] {CVE-2023-52607}
  - powerpc/mm: fix a warning when a cache is common to PGD and hugepages (Christophe Leroy) [task:207382] {CVE-2023-52607}
  - powerpc/mm: replace hugetlb_cache by PGT_CACHE(PTE_T_ORDER) (Christophe Leroy) [task:207382] {CVE-2023-52607}
  - Revert "i40e: The state of phy may not be correct during power-on" (xiaolinkui) [task:210775]
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Duoming Zhou) [task:209227, task:214895] {CVE-2024-26654}
  - ALSA: sh: Fix compile warning wrt const (Takashi Iwai) [task:155707, task:214895]
  - ALSA: aica: Fix a long-time build breakage (Takashi Iwai) [task:153627, task:214895]
  - LoongArch:adjust the calc method of number of packages. (wanghongliang) [task:209781]
  - LoongArch:irqchip/loongarch-extioi:Fix ext irq route error. (wanghongliang) [task:209781]
  - cpufreq: loongson3-acpi: Initialize the value of policy->cur (mengyingkun) [task:209781]
  - ipmi: ls2k500 kcs ipmi add nolock version support. (Chong Qiao) [task:209781]
  - irqchip/loongarch-extioi: Fix ext irq route fail when some cpus offline (Juxin Gao) [task:209781]
  - OPENEULER: SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers (zhanglei) [task:205210]
  - arm64/config: CONFIG_PHYTIUM_MBOX=m (chizhiling) [bug:221940]
  - OPENEULER: mailbox: add phytium mailbox driver (Chen Ziqiang) [bug:221940]
  - scsi: qedf: Add pointer checks in qedf_update_link_speed() (Javed Hasan) [task:206931] {CVE-2021-47077}
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (Chun-Yi Lee) [task:194976] {CVE-2023-6270}
  - thermal: Fix NULL pointer dereferences in of_thermal_ functions (Subbaraman Narayanamurthy) [task:212533] {CVE-2021-47202}
  - tracing/trigger: Fix to return error if failed to alloc snapshot (Masami Hiramatsu (Google)) [task:212517] {CVE-2024-26920}
  - x86, relocs: Ignore relocations in .notes section (Kees Cook) [task:212412] {CVE-2024-26816}
  - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume (Omar Sandoval) [task:209259] {CVE-2024-26644}
  - PM / devfreq: Synchronize devfreq_monitor_[start/stop] (Mukesh Ojha) [task:209249] {CVE-2023-52635}
  - nilfs2: fix potential bug in end_buffer_async_write (Ryusuke Konishi) [task:210283] {CVE-2024-26685}
  - aoe: avoid potential deadlock at set_capacity (Maksim Kiselev) [task:210627] {CVE-2024-26775}
  - clk: sunxi-ng: Unregister clocks/resets when unbinding (Samuel Holland) [task:212525] {CVE-2021-47205}
  - clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock (Icenowy Zheng) [task:155707]
  - clk: sunxi-ng: Add support for the Allwinner H616 CCU (Andre Przywara) [task:212525]
  - clk: sunxi-ng: add support for the Allwinner A100 CCU (Yangtao Li) [task:212525]
  - clk: sunxi: Don't call clk_hw_get_name() on a hw that isn't registered (Stephen Boyd) [task:212525]
  - clk: sunxi-ng: v3s: add Allwinner V3 support (Icenowy Zheng) [task:212525]
  - clk: sunxi-ng: v3s: add the missing PLL_DDR1 (Icenowy Zheng) [task:153627]
  - clk: sunxi-ng: v3s: Use local parent references for CLK_FIXED_FACTOR (Chen-Yu Tsai) [task:212525]
  - clk: sunxi-ng: switch to of_clk_hw_register() for registering clks (Chen-Yu Tsai) [task:212525]
  - clk: sunxi-ng: h6: Preset hdmi-cec clock parent (Jernej Skrabec) [task:212525]
  - clk: sunxi-ng: f1c100s: fix USB PHY gate bit offset (Icenowy Zheng) [task:212525]
  - clk: sunxi-ng: add support for suniv F1C100s SoC (Mesih Kilinc) [task:212525]
  - x86/alternatives: Disable KASAN in apply_alternatives() (Kirill A. Shutemov) [task:205153] {CVE-2023-52504}
  - binder: fix race between mmput() and do_exit() (Carlos Llamas) [task:207402] {CVE-2023-52609}
  - reiserfs: Avoid touching renamed directory if parent does not change (Jan Kara) [task:207282] {CVE-2023-52591}
  - bnxt_en: Fix RX consumer index logic in the error path. (Michael Chan) [task:206925] {CVE-2021-47015}
  - bnxt_en: Reduce unnecessary message log during RX errors. (Michael Chan) [task:206925]
  - md: don't clear MD_RECOVERY_FROZEN for new dm-raid until resume (Yu Kuai) [task:210625]
  - md: Don't ignore suspended array in md_check_recovery() (Yu Kuai) [task:210625] {CVE-2024-26758}
  - vfio/pci: Lock external INTx masking ops (Alex Williamson) [task:210634] {CVE-2024-26810}
  - rt2x00: initialize last_reset (Stanislaw Gruszka) [task:207285]
  - rt2x00: clear IV's on start to fix AP mode regression (Stanislaw Gruszka) [task:207285] {CVE-2023-52595}
  - rt2x00: add restart hw (Stanislaw Gruszka) [task:207285]
  - rt2800: add pre_reset_hw callback (Stanislaw Gruszka) [task:207285]
  - rt2800: initial watchdog implementation (Stanislaw Gruszka) [task:207285]
  - rt2800: add helpers for reading dma done index (Stanislaw Gruszka) [task:207285]
  - rt2x00: allow to specify watchdog interval (Stanislaw Gruszka) [task:207285]
  - rt2x00: use different txstatus timeouts when flushing (Stanislaw Gruszka) [task:207285]
  - rt2x00: do not check for txstatus timeout every time on tasklet (Stanislaw Gruszka) [task:207285]
  - rt2800mmio: use txdone/txstatus routines from lib (Stanislaw Gruszka) [task:207285]
  - rt2800: move usb specific txdone/txstatus routines to rt2800lib (Stanislaw Gruszka) [task:207285]
  - net/smc: remove device from smcd_dev_list after failed device_add() (Julian Wiedmann) [task:207216] {CVE-2021-47143}
  - KVM: Destroy target device if coalesced MMIO unregistration fails (Sean Christopherson) [task:206929] {CVE-2021-47060}
  - KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (Kefeng Wang) [task:206929] {CVE-2021-47060}
  - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed (Sean Christopherson) [task:206929] {CVE-2021-47060}
  - ubi: Check for too small LEB size in VTBL code (Richard Weinberger) [task:212058] {CVE-2024-25739}
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation (Bastien Nocera) [task:212057] {CVE-2024-24859}
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (Yuxuan Hu) [task:212059] {CVE-2024-22099}
  - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (Ziqi Zhao) [task:210651] {CVE-2023-52638}
  - net: rds: use maybe_get_net() when acquiring refcount on TCP sockets (Tetsuo Handa) [task:209413]
  - tee: optee: Fix incorrect page free bug (Sumit Garg) [task:206938] {CVE-2021-47087}
  - asix: fix wrong return value in asix_check_host_enable() (Pavel Skripkin) [task:206939]
  - asix: fix uninit-value in asix_mdio_read() (Pavel Skripkin) [task:206939] {CVE-2021-47101}
  - net: asix: fix uninit value bugs (Pavel Skripkin) [task:206939]
  - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command (Michal Grzedzicki) [task:205228] {CVE-2023-52500}
  - x86/kvm: Do not try to disable kvmclock if it was not enabled (Kirill A. Shutemov) [task:207214]
  - x86/kvm: Disable kvmclock on all CPUs on shutdown (Vitaly Kuznetsov) [task:207214] {CVE-2021-47110}
  - x86/kvm: Teardown PV features on boot CPU as well (Vitaly Kuznetsov) [task:206940] {CVE-2021-47112}
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Xingyuan Mo) [task:210392] {CVE-2023-7042}
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Baokun Li) [task:210360] {CVE-2024-26773}
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Baokun Li) [task:210642] {CVE-2024-26772}
  - ext4: fix double-free of blocks due to wrong extents moved_len (Baokun Li) [task:210641] {CVE-2024-26704}
  - RDMA/srpt: Support specifying the srpt_service_guid parameter (Bart Van Assche) [task:210645] {CVE-2024-26744}
  - net: ip_tunnel: prevent perpetual headroom growth (Florian Westphal) [task:210646] {CVE-2024-26804}
  - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (Oleksij Rempel) [task:210648] {CVE-2023-52637}
  - can: j1939: j1939_sk_init(): set SOCK_RCU_FREE to call sk_destruct() after RCU is done (Oleksij Rempel) [task:210648]
  - fbdev: savage: Error out if pixclock equals zero (Fullway Wang) [task:210633] {CVE-2024-26778}
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Zach O'Keefe) [task:210632] {CVE-2024-26720}
  - wifi: mac80211: fix race condition on enabling fast-xmit (Felix Fietkau) [task:210626] {CVE-2024-26779}
  - dmaengine: ti: edma: Add some null pointer checks to the edma_probe (Kunwu Chan) [task:210482] {CVE-2024-26771}
  - btrfs: dev-replace: properly validate device names (David Sterba) [task:210624] {CVE-2024-26791}
  - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (Ryosuke Yasuoka) [task:210464] {CVE-2024-26805}
  - fbdev: sis: Error out if pixclock equals zero (Fullway Wang) [task:210465] {CVE-2024-26777}
  - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [task:210432] {CVE-2024-26743}
  - Bluetooth: Avoid potential use-after-free in hci_error_reset (Ying Hsu) [task:210462] {CVE-2024-26801}
  - ipv6: sr: fix possible use-after-free and null-ptr-deref (Vasiliy Kovalev) [task:210463] {CVE-2024-26735}
  - gtp: fix use-after-free and null-ptr-deref in gtp_newlink() (Alexander Ofitserov) [task:210471] {CVE-2024-26793}
  - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() (Vasiliy Kovalev) [task:210471]
  - ARM: ep93xx: Add terminator to gpiod_lookup_table (Nikita Shubin) [task:210473] {CVE-2024-26751}
  - dm-crypt: don't modify the data when using authenticated encryption (Mikulas Patocka) [task:210478] {CVE-2024-26763}
  - nilfs2: fix data corruption in dsync block recovery for small block sizes (Ryusuke Konishi) [task:210301] {CVE-2024-26697}
  - usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Cañuelo) [task:205167] {CVE-2023-52477}
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (Hans de Goede) [task:205219] {CVE-2023-52478}
  - NFS: Fix an Oopsable condition in __nfs_pageio_add_request() (Trond Myklebust) [task:207226] {CVE-2021-47167}
  - ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao) [task:205581]
  - ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao) [task:205581]
  - xfrm: fix slab-use-after-free in decode_session6 (Zhengchao Shao) [task:205581]
  - media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run (Zheng Wang) [task:204919] {CVE-2023-52491}
  - media: platform: Add mechanism to handle jpeg hardware's locking up (Xia Jiang) [task:204919]
  - media: platform: Improve power on and power off flow (Xia Jiang) [task:204919]
  - vfio/pci: Disable auto-enable of exclusive INTx IRQ (Alex Williamson) {CVE-2024-27437}
  - genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() (Barry Song)
  - media: vimc: stream: fix build by missing dev (Jackie Liu) [task:209415]
  - ACPI: tables: Simplify PPTT leaf node detection (Jeremy Linton) [task:207620]
  - virtio-blk: remove VIRTIO_BLK_F_SCSI support (Christoph Hellwig) [task:209004]
  - net: prevent mss overflow in skb_segment() (Eric Dumazet) [task:209255] {CVE-2023-52435}
  - media: vimc: streamer: if kthread_stop fails, ignore the error (Dafna Hirschfeld) [task:209314]
  - tracing: Ensure visibility when inserting an element into tracing_map (Petr Pavlu) [task:209253] {CVE-2024-26645}
  - efi/arm: Show SMBIOS bank/device location in CPER and GHES error logs (Marcin Benka) [bug:218049]
  - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (Shigeru Yoshida) [task:209216] {CVE-2024-26663}
  - sr9800: Add check for usbnet_get_endpoints (Chen Ni) [task:209210] {CVE-2024-26651}
  - inet: read sk->sk_family once in inet_recv_error() (Eric Dumazet) [task:209235] {CVE-2024-26679}
  - ppp_async: limit MRU to 64K (Eric Dumazet) [task:209233] {CVE-2024-26675}
  - netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso) [task:207391] {CVE-2023-52620}
  - swapfile: fix soft lockup in scan_swap_map_slots (Chen Wandun) [task:183285]
  - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (Sean Christopherson) [task:206928] {CVE-2021-47061}
  - KVM: use struct_size() and flex_array_size() helpers in kvm_io_bus_unregister_dev() (Rustam Kovhaev) [task:206928]
  - overflow.h: Add flex_array_size() helper (Gustavo A. R. Silva) [task:162874, task:161899]
  - jfs: fix uaf in jfs_evict_inode (Edward Adam Davis) [task:207381] {CVE-2023-52600}
  - tipc: wait and exit until all work queues are done (Xin Long) [task:207225] {CVE-2021-47163}
  - team: fix null-ptr-deref when team device type is changed (Ziyang Xuan) [task:207278] {CVE-2023-52574}
  - perf/x86/lbr: Filter vsyscall addresses (JP Kobryn) [task:205164] {CVE-2023-52476}
  - UBSAN: array-index-out-of-bounds in dtSplitRoot (Osama Muhammad) [task:207406] {CVE-2023-52603}
  - s390/ptrace: handle setting of fpc register correctly (Heiko Carstens) [task:207408] {CVE-2023-52598}
  - KVM: s390: fix setting of fpc register (Heiko Carstens) [task:207400] {CVE-2023-52597}
  - PCI: switchtec: Fix stdev_release() crash after surprise hot remove (Daniel Stodden) [task:207403] {CVE-2023-52617}
  - switchtec: Add MRPC DMA mode support (Wesley Sheng) [task:207403]
  - can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer() (Oleksij Rempel) [task:205575]
  - ceph: fix deadlock or deadcode of misusing dget() (Xiubo Li) [task:207229] {CVE-2023-52583}
  - IB/ipoib: Fix mcast list locking (Daniel Vacek) [task:207280] {CVE-2023-52587}
  - RDMA/IPoIB: Fix error code return in ipoib_mcast_join (Jack Wang) [task:207280]
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Minsuk Kang) [task:207380] {CVE-2023-52594}
  - jfs: fix array-index-out-of-bounds in diNewExt (Edward Adam Davis) [task:207379] {CVE-2023-52599}
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree (Osama Muhammad) [task:207384] {CVE-2023-52604}
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Herbert Xu) [task:207385] {CVE-2023-52615}
  - powerpc/lib: Validate size for vector operations (Naveen N Rao) [task:207386] {CVE-2023-52606}
  - ocfs2: Avoid touching renamed directory if parent does not change (Jan Kara) [task:207378] {CVE-2023-52590}
  - fs: ocfs2: check status values (Artem Chernyshev) [task:207378]
  - pstore/ram: Fix crash when setting number of cpus to an odd number (Weichen Chen) [task:207388] {CVE-2023-52619}
  - SUNRPC: Fix a suspicious RCU usage warning (Anna Schumaker) [task:207390] {CVE-2023-52623}
  - jfs: fix slab-out-of-bounds Read in dtSearch (Manas Ghandat) [task:207383] {CVE-2023-52602}
  - crypto: scomp - fix req->dst buffer overflow (Chengming Zhou) [task:207387] {CVE-2023-52612}
  - crypto: scompress - initialize per-CPU variables on each CPU (Sebastian Andrzej Siewior) [task:207387]
  - crypto: scompress - Use per-CPU struct instead multiple variables (Sebastian Andrzej Siewior) [task:207387]
  - crypto: scompress - return proper error code for allocation failure (Sebastian Andrzej Siewior) [task:207387]
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian) [task:207228] {CVE-2023-52566}
  - nvme-loop: fix memory leak in nvme_loop_create_ctrl() (Wu Bo) [task:206937] {CVE-2021-47074}
  - nvme-loop: don't put ctrl on nvme_init_ctrl error (Chaitanya Kulkarni) [task:206937]
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso) [task:206383] {CVE-2024-26642}
  - llc: make llc_ui_sendmsg() more robust against bonding changes (Eric Dumazet) [task:206384] {CVE-2024-26636}
  - security/kysec: fix k tag java hung_task_timeout_secs (mengdehui) [bug:218233]
  - ring-buffer: Have saved event hold the entire event (Steven Rostedt (Google)) [task:205154]
  - ring-buffer: Do not attempt to read past "commit" (Steven Rostedt (Google)) [task:205154] {CVE-2023-52501}
  - ring-buffer: Have rb_iter_head_event() handle concurrent writer (Steven Rostedt (VMware)) [task:205154]
  - ring-buffer: Add page_stamp to iterator for synchronization (Steven Rostedt (VMware)) [task:205154]
  - ring-buffer: Have ring_buffer_empty() not depend on tracing stopped (Steven Rostedt (VMware)) [task:205154]
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value (Cyril Hrubis) [task:205110]
  - sched/rt: Disallow writing invalid values to sched_rt_period_us (Cyril Hrubis) [task:205110]
  - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset (Cyril Hrubis) [task:205110]
  - net: rds: acquire refcount on TCP sockets (Tetsuo Handa) [task:205876]
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Eric Dumazet) [task:205232] {CVE-2023-52502}
  - nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski) [task:205232]
  - drm: Don't unref the same fb many times by mistake due to deadlock handling (Ville Syrjälä) [task:205231] {CVE-2023-52486}
  - ipv6: init the accept_queue's spinlocks in inet6_create (Zhengchao Shao) [task:205163]
  - tcp: make sure init the accept_queue's spinlocks once (Zhengchao Shao) [task:205163] {CVE-2024-26614}
  - l2tp: pass correct message length to ip6_append_data (Tom Parkin) [task:205227]
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells) [task:205227] {CVE-2023-52527}
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu) [task:205220] {CVE-2023-52510}
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Wen Gu) [task:205222] {CVE-2024-26615}
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida) [task:205218] {CVE-2023-52528}
  - tomoyo: fix UAF write bug in tomoyo_write_control() (Tetsuo Handa) [task:205063] {CVE-2024-26622}
  - net: nfc: llcp: Add lock when modifying device list (Jeremy Cline) [task:205036] {CVE-2023-52524}
  - nfc: nci: assert requested protocol is valid (Jeremy Cline) [task:205032] {CVE-2023-52507}
  - Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco) [task:204918] {CVE-2023-52475}
  - llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima) [task:204916] {CVE-2024-26635}
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (Eric Dumazet) [task:204917] {CVE-2024-26633}
  - Revert "arm64/config: CONFIG_IP_DCCP=m" (Jiangshan Yi) [task:206427]
  - ax25: Fix ax25 session cleanup problems (Duoming Zhou) [task:203789]
  - mm: fix race between MADV_FREE reclaim and blkdev direct IO read (Mauricio Faria de Oliveira) [task:162162, task:204700]
  - nfsd: fix use-after-free due to delegation race (J. Bruce Fields) [task:160493]
  - arm64/config: CONFIG_IP_DCCP=m (lingfuyi) [bug:217102]
  - tty: n_gsm: check error while registering tty devices (Hillf Danton)
  - tty: n_gsm: add helpers to convert mux-num to/from tty-base (Martin Hundebøll)
  - USB: gadget: dummy-hcd: Fix errors in port-reset handling (Alan Stern)
  - bfs: extra sanity checking and static inode bitmap (Tigran Aivazian)
  - USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug (Alan Stern)
  - i2c: cadence: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201795] {CVE-2020-36784}
  - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201797] {CVE-2020-36783}
  - i2c: sprd: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201796] {CVE-2020-36780}
  - PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter (Zhang Qilong) [task:201796] {CVE-2020-36780}
  - security/kysec: add kysec_tcm_type boot parameter (huanfuxi) [bug:210498]
  - llc: call sock_orphan() at release time (Eric Dumazet) [task:203087] {CVE-2024-26625}
  - af_unix: fix lockdep positive in sk_diag_dump_icons() (Eric Dumazet) [task:203085] {CVE-2024-26624}
  - xen-netback: don't produce zero-size SKB frags (Jan Beulich) [task:203084] {CVE-2023-46838}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.38.v2207
changelog:
  - driver core: Let dev_of_node() accept a NULL dev (Stephen Boyd) [task:215336, bug:226512]
  - GRT: fix some warning by gcc (zhulei) [task:215796]
  - clk: Use parent node pointer during registration if necessary (Stephen Boyd) [bug:226512]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.39.v2207
changelog:
  - kvm/mmu: Add head file (zhanghao1) [task:218131]
  - bpf: Clear subreg_def for global function return values (Ilya Leoshkevich) [task:219647]
  - bpf: Fix error path under memory pressure (Alexei Starovoitov) [task:219647]
  - bpf: Introduce function-by-function verification (Alexei Starovoitov) [task:219647]
  - bpf: Fix bpf_event_output re-entry issue (Allan Zhang) [task:220155]
  - PHYTIUM: KVM: arm64: Move the clean of dcache to the map handler (zhanghao1) [task:218131]
  - net: fix kernel crash caused by ft_net_auto_affinity (Yun Lu) [bug:229383]
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [task:198456] {CVE-2024-1086}
  - nfc: nci: free rx_data_reassembly skb on NCI device cleanup (Fedor Pchelkin) [task:213955] {CVE-2024-26825}
  - NFC: nci: fix memory leak in nci_allocate_device (Dongliang Mu) [task:158827]
  - x86/xen: Add some null pointer checking to smp.c (Kunwu Chan) [task:214160] {CVE-2024-26908}
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Xiu Jianfeng) [task:164562]
  - xen/events: only register debug interrupt for 2-level events (Juergen Gross) [task:164562]
  - media: edia: dvbdev: fix a use-after-free (Zhipeng Lu) [task:220692] {CVE-2024-27043}
  - media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Hyunwoo Kim) [task:220692] {CVE-2022-45884}
  - media: dvbdev: fix error logic at dvb_register_device() (Mauro Carvalho Chehab) [task:220692]
  - media: dvbdev: Fix memleak in dvb_register_device (Dinghao Liu) [task:220692]
  - media: media/dvb: Use kmemdup rather than duplicating its implementation (Fuqian Huang) [task:220692]
  - media: dvbdev: remove double-unlock (Mauro Carvalho Chehab) [task:220692]
  - media: dvbdev: fix refcnt bug (Lin Ma) [task:220692]
  - media: dvbdev: adopts refcnt to avoid UAF (Lin Ma) [task:220692]
  - media: dvbdev: Fix memory leak in dvb_media_device_free() (Peilin Ye) [task:220692]
  - media: dvb-core: Fix double free in dvb_register_device() (Keita Suzuki) [task:220692]
  - mm: swap: fix race between free_swap_and_cache() and swapoff() (Ryan Roberts) [task:220694] {CVE-2024-26960}
  - swap: comments get_swap_device() with usage rule (Huang Ying) [task:220694]
  - net/smc: Fix possible access to freed memory in link clear (Yacan Liu) [task:219443] {CVE-2022-48673}
  - scsi: sd: Fix sd_do_mode_sense() buffer length handling (Damien Le Moal) [task:213954] {CVE-2021-47182}
  - scsi: core: Fix scsi_mode_sense() buffer length handling (Damien Le Moal) [task:213954] {CVE-2021-47182}
  - scsi: core: Reshuffle response handling in scsi_mode_sense() (Hannes Reinecke) [task:213954] {CVE-2021-47182}
  - scsi: core: Fixup calling convention for scsi_mode_sense() (Hannes Reinecke) [task:213954] {CVE-2021-47182}
  - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [task:217548] {CVE-2024-26982}
  - clk: zynq: Prevent null pointer dereference caused by kmalloc failure (Duoming Zhou) [task:217565] {CVE-2024-27037}
  - sysv: don't call sb_bread() with pointers_lock held (Tetsuo Handa) [task:219573]
  - afs: Increase buffer size in afs_update_volume_status() (Daniil Dulov) [task:210635] {CVE-2024-26736}
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Bart Van Assche) [task:210640]
  - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio (Bart Van Assche) [task:210640] {CVE-2024-26764}
  - Bluetooth: af_bluetooth: Fix deadlock (Luiz Augusto von Dentz) [task:214134] {CVE-2024-26886}
  - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Ziyang Xuan) [task:217550] {CVE-2024-27019}
  - net/mlx5e: Prevent deadlock while disabling aRFS (Carolina Jubran) [task:217553] {CVE-2024-27014}
  - security/kysec: decrease pcr hashtable size (penghuaihe) [task:219597]
  - security/kysec: move pcr hashtable init to sb_alloc_security (penghuaihe) [task:219597]
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier (ZhaoLong Wang) [task:219460] {CVE-2023-52449}
  - speakup: Avoid crash on very long word (Samuel Thibault) [task:219451] {CVE-2024-26994}
  - f2fs: fix to avoid dirent corruption (Chao Yu) [task:219461] {CVE-2023-52444}
  - apparmor: avoid crash when parsed profile name is empty (Fedor Pchelkin) [task:219459] {CVE-2023-52443}
  - powerpc/pseries/memhp: Fix access beyond end of drmem array (Nathan Lynch) [task:219457] {CVE-2023-52451}
  - powerpc/pseries/memhotplug: Quieten some DLPAR operations (Laurent Dufour) [task:219457]
  - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (Hyunwoo Kim) [task:219456] {CVE-2024-27395}
  - net: openvswitch: ovs_ct_exit to be done under ovs_lock (Tonghao Zhang) [task:219456]
  - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value (Anastasia Belova) [task:219454] {CVE-2024-27051}
  - net: gtp: Fix Use-After-Free in gtp_dellink (Hyunwoo Kim) [task:219455] {CVE-2024-27396}
  - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays (Gabor Juhos) [task:219452] {CVE-2024-26966}
  - crypto: qat - resolve race condition during AER recovery (Damian Muszynski) [task:219450] {CVE-2024-26974}
  - crypto: qat - fix double free during reset (Svyatoslav Pankratov) [task:219450]
  - txgbe: Fix handling of NAPI budget when multiple queues are enabled per vector (xiaolinkui) [task:217379]
  - ngbe: Fix handling of NAPI budget when multiple queues are enabled per vector (xiaolinkui) [task:217379]
  - printk: disable optimistic spin during panic (Stephen Brennan) [task:217379]
  - printk: Add panic_in_progress helper (Stephen Brennan) [task:217379]
  - s390/zcrypt: fix reference counting on zcrypt card objects (Harald Freudenberger) [task:219444] {CVE-2024-26957}
  - xfs: wake commit waiters on CIL abort before log item abort (Brian Foster) [task:217956]
  - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays (Gabor Juhos) [task:219446] {CVE-2024-26969}
  - vfio/platform: Create persistent IRQ handlers (Alex Williamson) [task:210628] {CVE-2024-26813}
  - vfio/platform: Disable virqfds on cleanup (Alex Williamson) [task:210628]
  - LoongArch: Fixup extioi bounce (Jun Yi) [task:214965]
  - dm: call the resume method on internal suspend (Mikulas Patocka) [task:214159] {CVE-2024-26880}
  - quota: Fix potential NULL pointer dereference (Wang Jianjian) [task:214158] {CVE-2024-26878}
  - quota: check time limit when back out space/inode change (Chengguang Xu) [task:214158]
  - quota: code cleanup for __dquot_alloc_space() (Chengguang Xu) [task:214158]
  - jfs: fix array-index-out-of-bounds in dbAdjTree (Manas Ghandat) [task:207401] {CVE-2023-52601}
  - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled (Rahul Rameshbabu) [task:214161] {CVE-2023-52644}
  - b43: dma: Fix use true/false for bool type variable (Saurav Girepunje) [task:214161]
  - i40e: Fix VF MAC filter removal (Ivan Vecera) [task:214154]
  - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [task:214154] {CVE-2024-26830}
  - i40e: Add ensurance of MacVlan resources for every trusted VF (Karen Sornek) [task:214154]
  - i40e: Fix MAC address setting for a VF via Host/VM (Slawomir Laba) [task:214154]
  - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip (Hsin-Yi Wang) [task:214148] {CVE-2024-26874}
  - net: Set true network header for ECN decapsulation (Gilad Naaman) [task:214149]
  - net/bnx2x: Prevent access to a freed page in page_pool (Thinh Tran) [task:214143] {CVE-2024-26859}
  - vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang) [task:205064] {CVE-2022-48627}
  - ext4: avoid online resizing failures due to oversized flex bg (Baokun Li) [task:207394] {CVE-2023-52622}
  - ext4: unify the type of flexbg_size to unsigned int (Baokun Li) [task:207394] {CVE-2023-52622}
  - ext4: remove unnecessary check from alloc_flex_gd() (Baokun Li) [task:207394] {CVE-2023-52622}
  - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Oleg Nesterov) [task:210335] {CVE-2024-26686}
  - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Oleg Nesterov) [task:210335]
  - fs/proc: do_task_stat: use __for_each_thread() (Oleg Nesterov) [task:210335]
  - exit: Use the correct exit_code in /proc/<pid>/stat (Eric W. Biederman) [task:210335]
  - RDMA/rxe: Return CQE error if invalid lkey was supplied (Leon Romanovsky) [task:206932] {CVE-2021-47076}
  - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Lena Wang) [task:214040] {CVE-2024-26851}
  - IB/hfi1: Fix a memleak in init_credit_return (Zhipeng Lu) [task:214039] {CVE-2024-26839}
  - hsr: Fix uninit-value access in hsr_get_node() (Shigeru Yoshida) [task:214042] {CVE-2024-26863}
  - net: hsr: fix placement of logical operator in a multi-line statement (Murali Karicheri) [task:214042]
  - amdkfd: use calloc instead of kzalloc to avoid integer overflow (Dave Airlie) [task:214061] {CVE-2024-26817}
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Nikita Zhandarovich) [task:214102] {CVE-2024-26901}
  - media: pvrusb2: fix uaf in pvr2_context_set_notify (Edward Adam Davis) [task:214062] {CVE-2024-26875}
  - media: pvrusb2: fix use after free on context disconnection (Ricardo B. Marliere) [task:214062]
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Armin Wolf) [task:214136] {CVE-2024-26894}
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Eric Dumazet) [task:214130] {CVE-2024-26852}
  - bpf: Fix hashtab overflow check on 32-bit arches (Toke Høiland-Jørgensen) [task:214132] {CVE-2024-26884}
  - scsi: target: core: Add TMF to tmr_list handling (Dmitry Bogdanov) [task:214137] {CVE-2024-26845}
  - arp: Prevent overflow in arp_req_get(). (Kuniyuki Iwashima) [task:210302] {CVE-2024-26733}
  - drm: bridge/panel: Cleanup connector on bridge detach (Paul Cercueil) [task:206930] {CVE-2021-47063}
  - LOONGSON: rtc-ls2x: fix a ls3a4000 rtc update trouble (zhangtianyang) [task:147526]
  - config: enable CONFIG_CGROUP_FILES. (cuitao) [task:220723]
  - OPENEULER: fs/filescontrol: add a switch to enable / disable accounting of open fds (Yu Kuai) [task:220723]
  - drm/amdgpu: validate the parameters of bo mapping operations more clearly (xinhui pan) [task:220691] {CVE-2024-26922}
  - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu) [task:220691]
  - drm/amdgpu: check alignment on CPU page for bo map (Xℹ Ruoyao) [task:220691]
  - sched: disabled sysctl_sched_optimize_enabled by default (liwanwu) [task:217846]
  - net: don't let netpoll invoke NAPI if in xmit context (Jakub Kicinski) [task:217379]
  - net/mlx5e: alloc the correct size for indirection_rqt (Saeed Mahameed) [task:217500]
  - net/mlx5e: allocate 'indirection_rqt' buffer dynamically (Arnd Bergmann) [task:217500]
  - net/mlx5: Increase the max number of channels to 128 (Fan Li) [task:217500]
  - security/secureboot: vmlinuz signature support SM and RSA (penghuaihe) [task:218116]
  - security: LoongArch support kernel signature (penghuaihe) [task:181644]
  - security/kysec: secureboot add x86 arch support. (penghuaihe) [task:172384]
  - security/secureboot add signature to kernel (penghuaihe) [task:172384]
  - USB: core: Fix deadlock in usb_deauthorize_interface() (Alan Stern) [task:217563] {CVE-2024-26934}
  - irqchip: The kdump capture kernel is probably stuck In the virtual machine (duanchenghao) [bug:219683]
  - drm/hisilicon: Fix a NULL pointer access when call hibmc_unload (Shixiong Ou) [task:217158]
  - usb: roles: fix NULL pointer issue when put module's reference (Xu Yang) [task:210461] {CVE-2024-26747}
  - media: rc: bpf attach/detach requires write permission (Sean Young) [task:214138] {CVE-2023-52642}
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Alan Stern) [task:217585] {CVE-2024-26993}
  - btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve (Filipe Manana) [task:214141] {CVE-2024-26904}
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern) [task:217587] {CVE-2024-27059}
  - nilfs2: prevent kernel bug at submit_bh_wbc() (Ryusuke Konishi) [task:217584] {CVE-2024-26955}
  - nilfs2: use a more common logging style (Joe Perches) [task:217584]
  - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays (Gabor Juhos) [task:217583] {CVE-2024-26965}
  - scsi: qla2xxx: Fix command flush on cable pull (Quinn Tran) [task:217582] {CVE-2024-26931}
  - nilfs2: fix failure to detect DAT corruption in btree and direct mappings (Ryusuke Konishi) [task:217589] {CVE-2024-26956}
  - media: go7007: fix a memleak in go7007_load_encoder (Zhipeng Lu) [task:217575] {CVE-2024-27074}
  - media: v4l2-tpg: fix some memleaks in tpg_alloc (Zhipeng Lu) [task:217576] {CVE-2024-27078}
  - SUNRPC: fix some memleaks in gssx_dec_option_array (Zhipeng Lu) [task:217578] {CVE-2024-27388}
  - drm/tegra: dsi: Add missing check for of_find_device_by_node (Chen Ni) [task:217580] {CVE-2023-52650}
  - mm/swapfile.c: __swap_entry_free() always free 1 entry (Wei Yang) [task:217590]
  - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Huang Ying) [task:217590]
  - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Huang Ying) [task:217590]
  - serial: mxs-auart: add spinlock around changing cts state (Emil Kronborg) [task:217594] {CVE-2024-27000}
  - nouveau: fix instmem race condition around ptr stores (Dave Airlie) [task:217591] {CVE-2024-26984}
  - net/rds: fix possible cp null dereference (Mahmoud Adam) [task:217596]
  - net/rds: fix WARNING in rds_conn_connect_if_down (Edward Adam Davis) [task:217596] {CVE-2024-27024}
  - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler (Fei Shao) [task:217571] {CVE-2024-27028}
  - scsi: ufs: core: Improve SCSI abort handling (Bart Van Assche) [task:212521] {CVE-2021-47188}
  - nfp: flower: handle acti_netdevs allocation failure (Duoming Zhou) [task:217573] {CVE-2024-27046}
  - nilfs2: fix OOB in nilfs_set_de_type (Jeongjun Park) [task:217541] {CVE-2024-26981}
  - fat: fix uninitialized field in nostale filehandles (Jan Kara) [task:217540] {CVE-2024-26973}
  - tun: limit printing rate when illegal packet received by tun dev (Lei Chen) [task:217543] {CVE-2024-27013}
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan) [task:217564] {CVE-2024-27020}
  - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Pablo Neira Ayuso) [task:217564]
  - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [task:217566] {CVE-2024-26976}
  - drm: nv04: Fix out of bounds access (Mikhail Kobuk) [task:217570] {CVE-2024-27008}
  - vfio/pci: Create persistent INTx handler (Alex Williamson) [task:210644] {CVE-2024-26812}
  - vfio: Introduce interface to flush virqfd inject workqueue (Alex Williamson) [task:210644]
  - media: dvb-frontends: avoid stack overflow warnings with clang (Arnd Bergmann) [task:217558] {CVE-2024-27075}
  - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity (Zhipeng Lu) [task:217549] {CVE-2024-27077}
  - drm/amdgpu: Reset IH OVERFLOW_CLEAR bit (Friedrich Vock) [task:214156] {CVE-2024-26915}
  - net/mlx5: Update error handler for UCTX and UMEM (Neta Ostrovsky) [task:216632] {CVE-2021-47212}
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Rand Deeb) [task:214041] {CVE-2024-26855}
  - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi) [task:210638] {CVE-2024-26696}
  - binder: check offset alignment in binder_get_object() (Carlos Llamas) [task:216630] {CVE-2024-26926}
  - xen/events: close evtchn after mapping cleanup (Maximilian Heyne) [task:210357] {CVE-2024-26687}
  - wifi: mac80211: fix potential key use-after-free (Johannes Berg) [task:205233] {CVE-2023-52530}
  - xfs: check free AG space when making per-AG reservations (Darrick J. Wong) [task:215506]
  - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (Luís Henriques) [task:216634] {CVE-2022-48631}
  - media: xc4000: Fix atomicity violation in xc4000_get_frequency (Gui-Dong Han) [task:216633] {CVE-2024-24861}
  - RDMA/srpt: Do not register event handler until srpt device is fully setup (William Kucharski) [task:213762] {CVE-2024-26872}
  - uio: Fix use-after-free in uio_open (Guanghui Feng) [task:209257] {CVE-2023-52439}
  - config: enable CONFIG_SECURITY_YAMA for arm64 (huanfuxi) [task:214710]
  - btrfs: fix hang during unmount when stopping a space reclaim worker (Filipe Manana) [task:216635] {CVE-2022-48664}
  - Btrfs: fix crash during unmount due to race with delayed inode workers (Filipe Manana) [task:155707]
  - iavf: free q_vectors before queues in iavf_disable_vf (Nicholas Nunley) [task:212529] {CVE-2021-47201}
  - xhci: handle isoc Babble and Buffer Overrun events properly (Michal Pecio) [task:209228] {CVE-2024-26659}
  - xhci: process isoc TD properly when there was a transaction error mid TD. (Mathias Nyman) [task:209228]
  - xhci: Fix incorrect tracking of free space on transfer rings (Mathias Nyman) [task:209228]
  - xhci: store TD status in the td struct instead of passing it along (Mathias Nyman) [task:209228]
  - xhci: remove extra loop in interrupt context (Mathias Nyman) [task:209228]
  - xhci: get isochronous ring directly from endpoint structure (Mathias Nyman) [task:209228]
  - drm/amdgpu: restrict bo mapping within gpu address limits (Rajneesh Bhardwaj) [task:216641]
  - tcp: fix race condition when creating child sockets from syncookies (Ricardo Dias) [task:162162]
  - mm/swap: fix race when skipping swapcache (Kairui Song) [task:210472] {CVE-2024-26759}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.40.v2207
changelog:
  - net: fix __dst_negative_advice() race (Eric Dumazet) [task:328468] {CVE-2024-36971}
  - net: annotate data-races around sk->sk_dst_pending_confirm (Eric Dumazet) [task:328468]
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Yue Haibing) [task:330556] {CVE-2024-33621}
  - net/tls: Fix flipped sign in tls_err_abort() calls (Daniel Jordan) [task:223103] {CVE-2021-47496}
  - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Justin Tee) [task:224215] {CVE-2024-36924}
  - bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue (Jason Xing) [task:224201] {CVE-2024-36938}
  - bpf: sk_msg, fix socket data_ready events (John Fastabend) [task:111650]
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima) [task:328482] {CVE-2024-36933}
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen) [task:328482]
  - Fix race for duplicate reqsk on identical SYN (luoxuanqiang) [task:220628]
  - usb: cdc-wdm: close race between read and workqueue (Oliver Neukum) [task:327804] {CVE-2024-35812}
  - wifi: iwlwifi: read txq->read_ptr under lock (Johannes Berg) [task:224209] {CVE-2024-36922}
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (Bob Pearson) [task:330478] {CVE-2024-38544}
  - memblock,arm64: expand the static memblock memory table (Zhou Guanghui) [task:331741]
  - LoongArch: Fixup INIT_MEMBLOCK_RESERVED_REGIONS for loongarch (Jun Yi) [task:331741]
  - loongson: pci/quirks: LS7A2000 enble msi (wusheng) [task:331741]
  - LoongArch: kdump: fix huge memory machine trigger capture kernel failure (Ming Wang) [task:331741]
  - sizes.h: Add entries between SZ_32G and SZ_64T (Matt Coster) [task:331741]
  - sizes.h: Add SZ_1T macro (Christophe Leroy) [task:331741]
  - sizes.h: add SZ_8G/SZ_16G/SZ_32G macros (Huang Shijie) [task:331741]
  - x86/kdump/64: Restrict kdump kernel reservation to <64TB (Baoquan He) [task:331741]
  - x86/kdump: Have crashkernel=X reserve under 4G by default (Dave Young) [task:331741]
  - loongson: spi: fix repeated kfree() (zhaoqunqin) [task:331741]
  - loongson: cpufreq: loongson3-acpi: Fixed the error of assigning the value of Mhz to Khz (Juxin Gao) [task:331741]
  - loongson: pic: update interrupt registration policy (wanghongliang) [task:331741]
  - LoongArch: Implement constant timer shutdown interface (Bibo Mao) [task:331741]
  - tcp: fix page frag corruption on page fault (Paolo Abeni) [task:225588] {CVE-2021-47544}
  - s390/ap: Fix crash in AP internal function modify_bitmap() (Harald Freudenberger) [task:332252] {CVE-2024-38661}
  - media: lgdt3306a: Add a check against null-pointer-def (Zheyu Ma) [task:332251] {CVE-2022-48772}
  - media: dvb-frontends: Use kmemdup instead of duplicating its function (zhong jiang) [task:332251]
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Baokun Li) [task:332253] {CVE-2024-39276}
  - Input: cyapa - add missing input core locking to suspend/resume functions (Marek Szyprowski) [task:332207] {CVE-2023-52884}
  - net/9p: fix uninit-value in p9_client_rpc() (Nikita Zhandarovich) [task:332238] {CVE-2024-39301}
  - of: module: add buffer overflow check in of_modalias() (Sergey Shtylyov) [task:330476] {CVE-2024-38541}
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima) [task:216629]
  - af_unix: Fix garbage collector racing against connect() (Michal Luczaj) [task:216629] {CVE-2024-26923}
  - af_unix: Do not use atomic ops for unix_sk(sk)->inflight. (Kuniyuki Iwashima) [task:216629]
  - mlxsw: core_thermal: Fix fan speed in maximum cooling state (Ido Schimmel) [task:223114]
  - mlxsw: thermal: Fix out-of-bounds memory accesses (Ido Schimmel) [task:223114] {CVE-2021-47441}
  - mlxsw: core: Extend cooling device with cooling levels (Vadim Pasternak) [task:223114]
  - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [task:223105] {CVE-2021-47307}
  - usb-storage: alauda: Check whether the media is initialized (Shichao Lai) [task:330542] {CVE-2024-38619}
  - drm/mediatek: Add 0 size check to mtk_drm_gem_obj (Justin Green) [task:330472] {CVE-2024-38549}
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jiri Pirko) [task:330562] {CVE-2024-37353}
  - ipv6: sr: fix invalid unregister error path (Hangbin Liu) [task:330500] {CVE-2024-38612}
  - wifi: carl9170: add a proper sanity check for endpoints (Nikita Zhandarovich) [task:330490] {CVE-2024-38567}
  - usb: xhci-plat: fix crash when suspend if remote wake enable (Frank Li) [task:330356] {CVE-2022-48761}
  - usb: host: xhci-plat: add .suspend_quirk for struct xhci_plat_priv (Peter Chen) [task:330356]
  - of: module: prevent NULL pointer dereference in vsnprintf() (Sergey Shtylyov) [task:327802] {CVE-2024-35878}
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (Dongli Zhang) [task:330555] {CVE-2024-31076}
  - inet_diag: fix kernel-infoleak for UDP sockets (Eric Dumazet) [task:330553] {CVE-2021-47597}
  - inet_diag: use jiffies_delta_to_msecs() (Eric Dumazet) [task:330553]
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Eric Dumazet) [task:330559] {CVE-2024-36286}
  - media: stk1160: fix bounds checking in stk1160_copy_video() (Dan Carpenter) [task:330567] {CVE-2024-38621}
  - serial: max3100: Update uart_driver_registered on driver removal (Andy Shevchenko) [task:330568] {CVE-2024-38633}
  - greybus: lights: check return of get_channel_from_mode (Rui Miguel Silva) [task:330569] {CVE-2024-38637}
  - nilfs2: fix potential hang in nilfs_detach_log_writer() (Ryusuke Konishi) [task:330571] {CVE-2024-38582}
  - nilfs2: fix unexpected freezing of nilfs_segctor_sync() (Ryusuke Konishi) [task:330571]
  - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger (Duoming Zhou) [task:330572] {CVE-2024-38630}
  - serial: max3100: Lock port->lock when calling uart_handle_cts_change() (Andy Shevchenko) [task:330573] {CVE-2024-38634}
  - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (Tetsuo Handa) [task:330574] {CVE-2024-38780}
  - stm class: Fix a double free in stm_register_device() (Dan Carpenter) [task:330576] {CVE-2024-38627}
  - enic: Validate length of nl attributes in enic_set_vf_port (Roded Zats) [task:330578] {CVE-2024-38659}
  - cifs: fix underflow in parse_server_interfaces() (Dan Carpenter) [task:214157] {CVE-2024-26828}
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Daniel Starke) [task:224203] {CVE-2024-36016}
  - um: Add winch to winch_handlers before registering winch IRQ (Roberto Sassu) {CVE-2024-39292}
  - scsi: qedf: Ensure the copied buf is NUL terminated (Bui Quang Minh) [task:330528] {CVE-2024-38559}
  - speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter) [task:330524] {CVE-2024-38587}
  - crypto: bcm - Fix pointer arithmetic (Aleksandr Mishin) [task:330302] {CVE-2024-38579}
  - jffs2: prevent xattr node from overflowing the eraseblock (Ilya Denisyev) [task:330534] {CVE-2024-38599}
  - ALSA: timer: Set lower bound of start tick time (Takashi Iwai) [task:330536] {CVE-2024-38618}
  - wifi: ar5523: enable proper endpoint verification (Nikita Zhandarovich) [task:330532] {CVE-2024-38565}
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Breno Leitao) [task:330510] {CVE-2024-38596}
  - net/mlx5: Discard command completions in internal error (Akiva Goldberger) [task:330514] {CVE-2024-38555}
  - drm/amd/display: Fix potential index out of bounds in color transformation function (Srinivasan Shanmugam) [task:330516] {CVE-2024-38552}
  - virtio-net: Add validation for used length (Xie Yongji) [task:221959] {CVE-2021-47352}
  - ARM: 9170/1: fix panic when kasan and kprobe are enabled (sparkhuang) [task:330279] {CVE-2021-47618}
  - PM / devfreq: Fix buffer overflow in trans_stat_show (Christian Marangi) [task:207389] {CVE-2023-52614}
  - btrfs: don't drop extent_map for free space inode on write error (Josef Bacik) [task:210433] {CVE-2024-26726}
  - fs/9p: fix uninitialized values during inode evict (Eric Van Hensbergen) [task:224205] {CVE-2024-36923}
  - Revert "sched: Fix sched_fork() access an invalid sched_task_group" (Bing Huang) [task:224985]
  - x86/signal: Detect and prevent an alternate signal stack overflow (Chang S. Bae) [task:223059] {CVE-2021-47326}
  - SUNRPC: fix a memleak in gss_import_v2_context (Zhipeng Lu) [task:217597] {CVE-2023-52653}
  - net/smc: fix compile error in smc_vlan_by_tcpsk function (weirongguang) [task:329030]
  - drm/ast: Fix soft lockup (Jammy Huang) [task:221869] {CVE-2024-35952}
  - drm_lease.c: copy user-array safely (Philipp Stanner) [task:223074] {CVE-2023-52820}
  - drm/panel: fix a possible null pointer dereference (Ma Ke) [task:222109] {CVE-2023-52821}
  - drm/amdgpu: fix gart.bo pin_count leak (Leslie Shi) [task:222035] {CVE-2021-47431}
  - lib/generic-radix-tree.c: Don't overflow in peek() (Kent Overstreet) [task:221979] {CVE-2021-47432}
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo) [task:225616] {CVE-2023-52880}
  - phonet/pep: fix racy skb_queue_empty() use (Rémi Denis-Courmont) [task:220864] {CVE-2024-27402}
  - i2c: smbus: fix NULL function pointer dereference (Wolfram Sang) [task:223077] {CVE-2024-35984}
  - i2c: core: remove level of indentation in i2c_transfer (Wolfram Sang) [task:223077]
  - i2c: core: remove outdated DEBUG output (Wolfram Sang) [task:223077]
  - usb: gadget: f_fs: change ep->status safe in ffs_epfile_io() (Linyu Yuan) [task:225394]
  - drm/sched: Avoid data corruptions (Andrey Grodzovsky) [task:223136] {CVE-2021-47354}
  - cpu/hotplug: Don't offline the last non-isolated CPU (Ran Xiaokai) [task:223118] {CVE-2023-52831}
  - cpu/hotplug: Prevent self deadlock on CPU hot-unplug (Thomas Gleixner) [task:223118] {CVE-2023-52831}
  - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Borislav Petkov (AMD)) [task:223094] {CVE-2024-35876}
  - iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() (Zhang Shurong) [task:223123] {CVE-2023-52802}
  - staging: rtl8712: fix use-after-free in rtl8712_dl_fw (Pavel Skripkin) [task:222111] {CVE-2021-47479}
  - RDMA: Verify port when creating flow rule (Maor Gottlieb) [task:223096] {CVE-2021-47265}
  - phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet) [task:328460] {CVE-2024-36946}
  - net: sched: sch: Bounds check priority (Kees Cook) [task:222057] {CVE-2023-52734}
  - htb: use anonymous union for simplicity (Cong Wang) [task:222057]
  - media: imon: fix access to invalid resource for the second interface (Takashi Iwai) [task:222087] {CVE-2023-52754}
  - block: fix overflow in blk_ioctl_discard() (Li Nan) [task:328466] {CVE-2024-36917}
  - bna: ensure the copied buf is NUL terminated (Bui Quang Minh) [task:328454] {CVE-2024-36934}
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman) [task:328462] {CVE-2024-36950}
  - fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt) [task:328470] {CVE-2024-36964}
  - drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin) [task:328443] {CVE-2024-36960}
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet) [task:224189] {CVE-2024-36905}
  - tcp: remove redundant check on tskb (Colin Ian King) [task:224189]
  - .gitignore: Add compilation database file (Toru Komatsu)
  - of: unittest: Fix compile in the non-dynamic case (Christian A. Ehrhardt) [task:220891]
  - of: unittest: Fix of_count_phandle_with_args() expected value message (Geert Uytterhoeven) [task:220891]
  - of: Fix double free in of_parse_phandle_with_args_map (Christian A. Ehrhardt) [task:220891] {CVE-2023-52679}
  - of: unittest: fix EXPECT text for gpio hog errors (Frank Rowand) [task:220891]
  - of: gpio unittest kfree() wrong object (Frank Rowand) [task:220891]
  - of: unittest: make gpio overlay test dependent on CONFIG_OF_GPIO (Frank Rowand) [task:220891]
  - of: unittest: add overlay gpio test to catch gpio hog problem (Frank Rowand) [task:220891]
  - netfilter: ctnetlink: Fix regression in conntrack entry deletion (Felix Kaechele) [bug:233722]
  - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (Eric Dumazet) [task:223050] {CVE-2024-35976}
  - net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() (Karsten Graul) [task:225614] {CVE-2021-47559}
  - powerpc/mm: Fix lockup on kernel exec fault (Christophe Leroy) [task:222047] {CVE-2021-47350}
  - soc: qcom: llcc: Handle a second device without data corruption (Uwe Kleine-König) [task:222019] {CVE-2023-52871}
  - i2c: dev: copy userspace array safely (Philipp Stanner) [task:223063] {CVE-2023-52758}
  - string.h: add array-wrappers for (v)memdup_user() (Philipp Stanner) [task:223063] {CVE-2023-52758}
  - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao) [task:221811] {CVE-2024-35997}
  - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (felix) [task:221821] {CVE-2023-52803}
  - f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances (Chao Yu) [task:221841] {CVE-2021-47335}
  - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Hans Verkuil) [task:227331] {CVE-2024-23848}
  - atl1c: fix tx timeout after link flap on Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: Work around the DMA RX overflow issue (Sieng-Piaw Liew) [task:222007] {CVE-2023-52834}
  - atl1c: add 4 RX/TX queue support for Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: detect NIC type early (Gatis Peisenieks) [task:222007]
  - atl1c: show correct link speed on Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: remove redundant assignment to variable tpd_req (Colin Ian King) [task:222007]
  - net/atheros: Clean atheros code from driver version (Leon Romanovsky) [task:222007]
  - atl1c: improve performance by avoiding unnecessary pcie writes on xmit (Gatis Peisenieks) [task:222007]
  - net: core: add __netdev_sent_queue as variant of __netdev_tx_sent_queue (Heiner Kallweit) [task:222007]
  - atl1c: prepare for multiple rx queues (Gatis Peisenieks) [task:222007]
  - atl1c: move tx napi into tpd_ring (Gatis Peisenieks) [task:222007]
  - atl1c: move tx cleanup processing out of interrupt (Gatis Peisenieks) [task:222007]
  - net: export dev_set_threaded symbol (Lorenzo Bianconi) [task:222007]
  - atl1c: switch to napi_gro_receive (Sieng Piaw Liew) [task:222007]
  - atl1c: use napi_alloc_skb (Sieng Piaw Liew) [task:222007]
  - erofs: fix pcluster use-after-free on UP platforms (Gao Xiang) [task:217577] {CVE-2022-48674}
  - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error (Norihiko Hama) [task:217593] {CVE-2024-26996}
  - netfilter: nft_compat: remove flush counter optimization (Florian Westphal) [task:221983]
  - netfilter: complete validation of user input (Eric Dumazet) [task:221923]
  - netfilter: nf_tables: flush pending destroy work before exit_net release (Pablo Neira Ayuso) [task:221983] {CVE-2024-35899}
  - netfilter: nft_compat: make sure xtables destructors have run (Florian Westphal) [task:221983]
  - ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup (Feng Zhou) [task:221949] {CVE-2021-47399}
  - netfilter: validate user input for expected length (Eric Dumazet) [task:221923] {CVE-2024-35896}
  - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() (Valentine Fatiev) [task:223066]
  - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path (Valentine Fatiev) [task:223066] {CVE-2021-47438}
  - security/kysec: fix image sign err (penghuaihe) [task:226800]
  - net: atlantic: eliminate double free in error handling logic (Igor Russkikh) [task:220884] {CVE-2023-52664}
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Fedor Pchelkin) [task:217545] {CVE-2024-26961}
  - NTB: fix possible name leak in ntb_register_device() (Yang Yingliang) [task:217598] {CVE-2023-52652}
  - soc: fsl: qbman: Use raw spinlock for cgr_lock (Sean Anderson) [task:223104] {CVE-2024-35819}
  - soc: fsl: qbman: Add helper for sanity checking cgr ops (Sean Anderson) [task:223104]
  - soc: fsl: qbman: Add CGR update function (Sean Anderson) [task:223104]
  - KVM: x86: Handle SRCU initialization failure during page track init (Haimin Zhang) [task:221891] {CVE-2021-47407}
  - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Oliver Upton) [task:224206] {CVE-2024-36953}
  - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Marc Zyngier) [task:224206]
  - ipv4: Fix uninit-value access in __ip_make_skb() (Shigeru Yoshida) [task:224214] {CVE-2024-36927}
  - can: j1939: fix Use-after-Free, hold skb ref while in use (Oleksij Rempel) [task:225604] {CVE-2021-47232}
  - can: j1939: transport: add j1939_session_skb_find_by_offset() function (Oleksij Rempel) [task:225604]
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou) [task:225600] {CVE-2024-27398}
  - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc (Norbert Zulinski) [task:225576] {CVE-2021-47501}
  - i40e: Fix sparse error: uninitialized symbol 'ring' (Arkadiusz Kubalewski) [task:225576]
  - i40e: introduce new dump desc XDP command (Ciara Loftus) [task:225576]
  - tcp: do not accept ACK of bytes we never sent (Eric Dumazet) [task:225596] {CVE-2023-52881}
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou) [task:225580] {CVE-2024-27399}
  - net/mlx5e: Fix page reclaim for dead peer hairpin (Dima Chumak) [task:225574] {CVE-2021-47246}
  - clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (Jernej Skrabec) [task:225550] {CVE-2023-52882}
  - drm/arm/malidp: fix a possible null pointer dereference (Huai-Yuan Liu) [task:225554] {CVE-2024-36014}
  - ppdev: Add an error check in register_device (Huai-Yuan Liu) [task:225556] {CVE-2024-36015}
  - ppdev: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET) [task:225556]
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats) [task:225558] {CVE-2024-36017}
  - firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos) [task:225560] {CVE-2024-27401}
  - mmc: mmc_spi: fix error handling in mmc_spi_probe() (Yang Yingliang) [task:225564] {CVE-2023-52708}
  - mmc: mmc_spi: Indentation fixes (Andy Shevchenko) [task:225564]
  - mmc: spi: Convert to use GPIO descriptors (Linus Walleij) [task:225564]
  - phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init() (Tiezhu Yang) [task:225568] {CVE-2021-47234}
  - drm/client: Fully protect modes[] with dev->mode_config.mutex (Ville Syrjälä) [task:221977] {CVE-2024-35950}
  - s390/dasd: fix double module refcount decrement (Miroslav Franc) [task:217574] {CVE-2024-27054}
  - mm/filemap: avoid buffered read/write race to read inconsistent data (Baokun Li) [task:225198]
  - drm/virtio: fix memory leak of vbuf (liweishi) [task:205462]
  - blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling (zhengbin) [task:225157]
  - REDHAT: mm/memcg: Fix mem_cgroup_id_get_online() underflow problem (lihongfu) [task:193929]
  - REDHAT: mm/memcg: Free percpu stats memory of dying memcg's (lihongfu) [task:193929]
  - nfs: Handle error of rpc_proc_register() in nfs_net_init(). (Kuniyuki Iwashima) [task:224227] {CVE-2024-36939}
  - overflow: Include header file with SIZE_MAX declaration (Leon Romanovsky) [task:158034]
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap) [task:224219] {CVE-2024-36919}
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Kuniyuki Iwashima) [task:224221] {CVE-2024-36904}
  - tipc: fix UAF in error path (Paolo Abeni) [task:224223] {CVE-2024-36886}
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Eric Dumazet) [task:224225] {CVE-2024-36902}
  - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (Wesley Cheng) [task:224213] {CVE-2024-36894}
  - usb: gadget: f_fs: use io_data->status consistently (John Keeping) [task:224213]
  - pinctrl: core: delete incorrect free in pinctrl_enable() (Dan Carpenter) [task:224212] {CVE-2024-36940}
  - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) [task:221819] {CVE-2021-47386}
  - hwmon: (w83791d) convert to use devm_i2c_new_dummy_device (Wolfram Sang) [task:221819]
  - net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo) [task:224208] {CVE-2024-36883}
  - tcp: properly terminate timers for kernel sockets (Eric Dumazet) [task:223109] {CVE-2024-35910}
  - mptcp: add sk_stop_timer_sync helper (Geliang Tang) [task:223109]
  - bonding: stop the device in bond_setup_by_slave() (Eric Dumazet) [task:223073] {CVE-2023-52784}
  - bonding: reset bond's flags when down link is P2P device (Hangbin Liu) [task:223073]
  - wifi: nl80211: don't free NULL coalescing rule (Johannes Berg) [task:224195] {CVE-2024-36941}
  - Julia Lawall reported this null pointer dereference, this should fix it. (Mike Marshall) [task:224194] {CVE-2024-36023}
  - orangefs: Fix sb refcount leak when allocate sb info failed. (Chenyuan Mi) [task:224194]
  - orangefs: set up and use backing_dev_info (Martin Brandenburg) [task:224194]
  - dyndbg: fix old BUG_ON in >control parser (Jim Cromie) [task:223134] {CVE-2024-35947}
  - btrfs: send: handle path ref underflow in header iterate_inode_ref() (David Sterba) [task:223135] {CVE-2024-35935}
  - drm/amd/display: Avoid NULL dereference of timing generator (Wayne Lin) [task:222113] {CVE-2023-52753}
  - ax25: fix use-after-free bugs caused by ax25_ds_del_timer (Duoming Zhou) [task:222117] {CVE-2024-35887}
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Harshit Mogalapalli) [task:223052] {CVE-2024-35944}
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (Wenchao Hao) [task:223057] {CVE-2023-52809}
  - pwm: Fix double shift bug (Dan Carpenter) [task:223061] {CVE-2023-52756}
  - mm, slub: fix potential memoryleak in kmem_cache_open() (Miaohe Lin) [task:223062] {CVE-2021-47466}
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (Jia-Ju Bai) [task:223064] {CVE-2023-52855}
  - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (Ziyang Xuan) [task:223071] {CVE-2021-47459}
  - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Ping-Ke Shih) [task:223076] {CVE-2023-52832}
  - media: bttv: fix use after free error due to btv->timeout timer (Zheng Wang) [task:223078] {CVE-2023-52847}
  - thermal: core: prevent potential string overflow (Dan Carpenter) [task:223081] {CVE-2023-52868}
  - usb: udc: remove warning when queue disabled ep (yuan linyu) [task:223085] {CVE-2024-35822}
  - Bluetooth: btintel: Fixe build regression (Luiz Augusto von Dentz) [task:223087]
  - Bluetooth: btintel: Fix null ptr deref in btintel_read_version (Edward Adam Davis) [task:223087] {CVE-2024-35933}
  - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Shigeru Yoshida) [task:223088] {CVE-2023-52845}
  - jfs: fix array-index-out-of-bounds in dbFindLeaf (Manas Ghandat) [task:223091] {CVE-2023-52799}
  - dma-debug: prevent an error message from causing runtime problems (Hamza Mahfooz) [task:223100] {CVE-2021-47374}
  - dma-debug: report -EEXIST errors in add_dma_entry (Hamza Mahfooz) [task:223100]
  - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) [task:223098] {CVE-2021-47385}
  - hwmon: (w83792d) convert to use devm_i2c_new_dummy_device (Wolfram Sang) [task:223098]
  - net/mlx5e: fix a double-free in arfs_create_groups (Zhipeng Lu) [task:223101] {CVE-2024-35835}
  - net/mlx5: Use kfree(ft->g) in arfs_create_groups() (Denis Efremov) [task:223101]
  - ubifs: Set page uptodate in the correct place (Matthew Wilcox (Oracle)) [task:223108] {CVE-2024-35821}
  - hid: cp2112: Fix duplicate workqueue initialization (Danny Kaehn) [task:223106] {CVE-2023-52853}
  - HID: cp2112: Use irqchip template (Linus Walleij) [task:223106]
  - soc: fsl: qbman: Always disable interrupts when taking cgr_lock (Sean Anderson) [task:223111] {CVE-2024-35806}
  - raid1: fix use-after-free for original bio in raid1_write_request() (Yu Kuai) [task:223112] {CVE-2024-35979}
  - md/raid1: free the r1bio before waiting for blocked rdev (Xueshi Hu) [task:223112]
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Felix Fietkau) [task:223119] {CVE-2024-35789}
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Justin Tee) [task:223120] {CVE-2024-35930}
  - PCI/PM: Drain runtime-idle callbacks before driver removal (Rafael J. Wysocki) [task:223117] {CVE-2024-35809}
  - PCI: Drop pci_device_remove() test of pci_dev->driver (Uwe Kleine-König) [task:223117]
  - net/sched: act_skbmod: prevent kernel-infoleak (Eric Dumazet) [task:223125] {CVE-2024-35893}
  - irqchip/gic-v3-its: Prevent double free on error (Guanrui Huang) [task:222083] {CVE-2024-35847}
  - Fix page corruption caused by racy check in __free_pages (David Chen) [task:222097] {CVE-2023-52739}
  - ext4: fix corruption during on-line resize (Maximilian Heyne) [task:222107] {CVE-2024-35807}
  - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Kemeng Shi) [task:222107]
  - block: prevent division by zero in blk_rq_stat_sum() (Roman Smirnov) [task:222081] {CVE-2024-35925}
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale) [task:222091] {CVE-2024-36004}
  - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) [task:222075] {CVE-2021-47384}
  - hwmon: (w83793d) convert to use devm_i2c_new_dummy_device (Wolfram Sang) [task:222075]
  - i2c: add newly exported functions to the header, too (Wolfram Sang) [task:222075]
  - i2c: core: add device-managed version of i2c_new_dummy (Heiner Kallweit) [task:222075]
  - i2c: core: improve return value handling of i2c_new_device and i2c_new_dummy (Heiner Kallweit) [task:222075]
  - vt: fix unicode buffer corruption when deleting characters (Nicolas Pitre) [task:222055] {CVE-2024-35823}
  - platform/x86: wmi: Fix opening of char device (Armin Wolf) [task:222045] {CVE-2023-52864}
  - platform/x86: wmi: remove unnecessary initializations (Barnabás Pőcze) [task:222045]
  - ALSA: hda: Fix possible null-ptr-deref when assigning a stream (Cezary Rojewski) [task:222049] {CVE-2023-52806}
  - cifs: Fix use-after-free in rdata->read_into_pages() (ZhaoLong Wang) [task:222065] {CVE-2023-52741}
  - s390/dasd: protect device queue against concurrent access (Jan Höppner) [task:222069] {CVE-2023-52774}
  - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() (Zhipeng Lu) [task:222033] {CVE-2024-35828}
  - tty: vcc: Add check for kstrdup() in vcc_probe() (Yi Yang) [task:222029] {CVE-2023-52789}
  - x86/mm/pat: fix VM_PAT handling in COW mappings (David Hildenbrand) [task:222013] {CVE-2024-35877}
  - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ido Schimmel) [task:219462] {CVE-2024-26586}
  - perf/core: Bail out early if the request AUX area is out of bound (Shuai Xue) [task:222041] {CVE-2023-52835}
  - arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer (Nathan Chancellor) [task:222027] {CVE-2023-52750}
  - arm64: Make CPU_BIG_ENDIAN depend on ld.bfd or ld.lld 13.0.0+ (Nathan Chancellor) [task:222027]
  - arm64: Kconfig: add a choice for endianness (Anders Roxell) [task:222027]
  - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (Dan Carpenter) [task:222005] {CVE-2023-52840}
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (Jiasheng Jiang) [task:222009] {CVE-2023-52865}
  - Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov) [task:222003] {CVE-2024-35978}
  - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() (Dominique Martinet) [task:222001]
  - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (David Sterba) [task:222001] {CVE-2024-35936}
  - erspan: make sure erspan_base_hdr is present in skb->head (Eric Dumazet) [task:221973] {CVE-2024-35888}
  - ip_gre: do not report erspan version on GRE interface (Hangbin Liu) [task:221973]
  - erspan: Check IFLA_GRE_ERSPAN_VER is set. (William Tu) [task:221973]
  - erspan: Add type I version 0 support. (William Tu) [task:221973]
  - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (Ryosuke Yasuoka) [task:221993]
  - nfc: nci: Fix uninit-value in nci_rx_work (Ryosuke Yasuoka) [task:221993]
  - nfc: nci: Fix kcov check in nci_rx_work() (Tetsuo Handa) [task:221993]
  - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (Ryosuke Yasuoka) [task:221993] {CVE-2024-35915}
  - jfs: fix array-index-out-of-bounds in diAlloc (Manas Ghandat) [task:221969] {CVE-2023-52805}
  - media: tc358743: register v4l2 async device only after successful setup (Alexander Stein) [task:221967] {CVE-2024-35830}
  - md/raid5: fix atomicity violation in raid5_cache_count (Gui-Dong Han) [task:212055] {CVE-2024-23307}
  - dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock (Sergey Senozhatsky) [task:205035] {CVE-2023-52516}
  - dma-debug: make __dma_entry_alloc_check_leak() static (Jason Yan) [task:205035]
  - dma-debug: Make leak-like behaviour apparent (Robin Murphy) [task:205035]
  - dma-debug: Dynamically expand the dma_debug_entry pool (Robin Murphy) [task:205035]
  - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (Johannes Thumshirn) [task:221877] {CVE-2024-35849}
  - bpf: Add oversize check before call kvcalloc() (Bixuan Cui) [task:221879] {CVE-2021-47376}
  - fbmon: prevent division by zero in fb_videomode_from_videomode() (Roman Smirnov) [task:221889] {CVE-2024-35922}
  - ipv6: Fix infinite recursion in fib6_dump_done(). (Kuniyuki Iwashima) [task:221895] {CVE-2024-35886}
  - net/mlx5: Properly link new fs rules into the tree (Cosmin Ratiu) [task:221917] {CVE-2024-35960}
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Rajeshwar R Shinde) [task:221919] {CVE-2023-52764}
  - llc: verify mac len before reading mac header (Willem de Bruijn) [task:221933] {CVE-2023-52843}
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [task:221945] {CVE-2024-35969}
  - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (Mario Limonciello) [task:221901] {CVE-2023-52818}
  - ACPI / processor: fix cpufreq_get_max_state(cpu) for loongarch (Li ZhiGang) [bug:225708]
  - drm/radeon: possible buffer overflow (Konstantin Meskhidze) [task:221865] {CVE-2023-52867}
  - fs/jfs: Add validity check for db_maxag and db_agpref (Juntong Deng) [task:221861] {CVE-2023-52804}
  - mm: fix use-after-free bug when mm->mmap is reused after being freed (Suren Baghdasaryan) [task:217008]
  - mm: protect free_pgtables with mmap_lock write lock in exit_mmap (Suren Baghdasaryan) [task:217008]
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Ziyang Xuan) [task:221827] {CVE-2024-35898}
  - fs/jfs: Add check for negative db_l2nbperpage (Juntong Deng) [task:221929] {CVE-2023-52810}
  - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (Siddh Raman Pant) [task:221929]
  - fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu) [task:164562]
  - jfs: fix divide error in dbNextAG (Pavel Skripkin) [task:162162]
  - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (Mario Limonciello) [task:221829] {CVE-2023-52819}
  - Bluetooth: Fix double free in hci_conn_cleanup (ZhengHan Wang) [task:221833] {CVE-2023-52830}
  - batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann) [task:221835] {CVE-2024-35982}
  - ALSA: usx2y: Don't call free_pages_exact() with NULL address (Takashi Iwai) [task:221837] {CVE-2021-47332}
  - ALSA: us122l: Use alloc_pages_exact() (Takashi Iwai) [task:221837]
  - net/sched: fix lockdep splat in qdisc_tree_reduce_backlog() (Eric Dumazet) [task:221845] {CVE-2024-35892}
  - locking/ww_mutex/test: Fix potential workqueue corruption (John Stultz) [task:221843] {CVE-2023-52836}
  - gfs2: ignore negated quota changes (Bob Peterson) [task:221849] {CVE-2023-52759}
  - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Alex Deucher) [task:221851]
  - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Qu Huang) [task:221851] {CVE-2023-52817}
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (Jiasheng Jiang) [task:221847] {CVE-2023-52875}
  - kcm: do not sense pfmemalloc status in kcm_sendpage() (Eric Dumazet) [task:217601]
  - net: do not sense pfmemalloc status in skb_append_pagefrags() (Eric Dumazet) [task:217601]
  - tcp: TX zerocopy should not sense pfmemalloc status (Eric Dumazet) [task:217601] {CVE-2022-48689}
  - net: introduce __skb_fill_page_desc_noacc (Pavel Begunkov) [task:217601]
  - net: zerocopy: combine pages in zerocopy_sg_from_iter() (Eric Dumazet) [task:217601]
  - netrom: Fix a data-race around sysctl_netrom_link_fails_count (Jason Xing) [task:220900] {CVE-2024-27420}
  - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay (Jason Xing) [task:220866] {CVE-2024-27424}
  - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Kunwu Chan) [task:220898] {CVE-2023-52675}
  - rpmsg: virtio: Free driver_override when rpmsg_remove() (Xiaolei Wang) [task:220897] {CVE-2023-52670}
  - ACPI: video: check for error while searching for backlight device parent (Nikita Kiryushin) [task:220896] {CVE-2023-52693}
  - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (Sergey Shtylyov) [task:220894] {CVE-2023-52685}
  - ACPI: LPIT: Avoid u32 multiplication overflow (Nikita Kiryushin) [task:220888] {CVE-2023-52683}
  - calipso: fix memory leak in netlbl_calipso_add_pass() (Gavrilov Ilia) [task:220887] {CVE-2023-52698}
  - netlabel: remove unused parameter in netlbl_netlink_auditinfo() (Zheng Yejian) [task:220887]
  - net: netlabel: Fix kerneldoc warnings (Andrew Lunn) [task:220887]
  - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries (Jason Xing) [task:220882] {CVE-2024-27426}
  - netfilter: nft_limit: reject configurations that cause integer overflow (Florian Westphal) [task:209247] {CVE-2024-26668}
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found. (Johan Carlsson) [task:220883] {CVE-2024-27436}
  - drm/amd/pm: fix a double-free in si_dpm_init (Zhipeng Lu) [task:220893] {CVE-2023-52691}
  - netrom: Fix a data-race around sysctl_netrom_routing_control (Jason Xing) [task:220890] {CVE-2024-27421}
  - usb: gadget: ncm: Fix handling of zero block length packets (Krishna Kurapati) [task:220889]
  - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs (Krishna Kurapati) [task:220889] {CVE-2024-27405}
  - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (Krishna Kurapati) [task:220889]
  - USB: gadget: f_ncm: Fix NDP16 datagram validation (Bryan O'Donoghue) [task:157172]
  - USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() (Brooke Basile) [task:157172]
  - powerpc/powernv: Add a null pointer check in opal_event_init() (Kunwu Chan) [task:220885] {CVE-2023-52686}
  - netrom: Fix data-races around sysctl_net_busy_read (Jason Xing) [task:220863] {CVE-2024-27419}
  - wifi: nl80211: reject iftype change with mesh ID change (Johannes Berg) [task:220865] {CVE-2024-27410}
  - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay (Jason Xing) [task:220871] {CVE-2024-27425}
  - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser (Jason Xing) [task:220876] {CVE-2024-27428}
  - efi/capsule-loader: fix incorrect allocation size (Arnd Bergmann) [task:220877] {CVE-2024-27413}
  - netrom: Fix a data-race around sysctl_netrom_transport_timeout (Jason Xing) [task:220880] {CVE-2024-27427}
  - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout (Jason Xing) [task:220881] {CVE-2024-27422}
  - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size (Jason Xing) [task:220881]
  - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser (Jason Xing) [task:220878] {CVE-2024-27429}
  - netrom: Fix a data-race around sysctl_netrom_default_path_quality (Jason Xing) [task:220874] {CVE-2024-27430}
  - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() (Eric Dumazet) [task:220862] {CVE-2024-27417}
  - dma: fix kabi broken for introduce dma_max_mapping_size() (leixiang) [task:226458]
  - virtio-blk: fix implicit overflow on virtio_max_dma_size (zhenwei pi) [task:221853] {CVE-2023-52762}
  - virtio-blk: support per-device queue depth (Joseph Qi) [task:221853]
  - virtio-blk: Consider virtio_max_dma_size() for maximum segment size (Joerg Roedel) [task:176679]
  - virtio: Introduce virtio_max_dma_size() (Joerg Roedel) [task:176679]
  - dma: Introduce dma_max_mapping_size() (Joerg Roedel) [task:176679]
  - swiotlb: Add is_swiotlb_active() function (Joerg Roedel) [task:176679]
  - swiotlb: Introduce swiotlb_max_mapping_size() (Joerg Roedel) [task:176679]
  - bpf: fix kabi broken in struct bpf_func_info_aux (chenyuan) [task:219647]
  - bpf: Clear subreg_def for global function return values (Ilya Leoshkevich) [task:219647]
  - bpf: Fix error path under memory pressure (Alexei Starovoitov) [task:219647]
  - bpf: Introduce function-by-function verification (Alexei Starovoitov) [task:219647]
  - sched/fair: Fix wrong cpu selecting from isolated domain (Bing Huang) [bug:225308]
  - selinux: avoid dereference of garbage after mount failure (Christian Göttsche) [task:221817] {CVE-2024-35904}
  - selinux: mark some global variables __ro_after_init (Ondrej Mosnacek) [task:221817]
  - selinux: make selinuxfs_mount static (Ondrej Mosnacek) [task:221817]
  - loongson: ACPI: Fix unmet direct dependencies detected for ACPI_PPTT (Tiezhu Yang) [task:331741]
  - LoongArch: Fix kernel boot failure with CONFIG_KASAN (Tiezhu Yang) [task:331741]
  - vfs: vfs_clone_file_prep_inodes should return EINVAL for a clone from beyond EOF (Darrick J. Wong) [task:204423, task:327911]
  - bpf: pull before calling skb_postpull_rcsum() (Jakub Kicinski) [task:329163]
  - inet: inet_defrag: prevent sk release while still in use (Florian Westphal) [task:213813] {CVE-2024-26921}
  - inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [task:213813]
  - skb_expand_head() adjust skb->truesize incorrectly (Vasily Averin) [task:213813]
  - skbuff: introduce skb_expand_head() (Vasily Averin) [task:213813]
  - ipv6: prevent NULL dereference in ip6_output() (Eric Dumazet) [task:226456]
  - ipv6: annotate data-races around cnf.disable_ipv6 (Eric Dumazet) [task:226456]
  - netfilter: conntrack: serialize hash resizes and cleanups (Eric Dumazet) [task:226456] {CVE-2021-47408}
  - tls: fix race between tx work scheduling and socket close (Jakub Kicinski) [task:219458] {CVE-2024-26585}
  - spec: enable kabi check (Zhengyuan Liu) [task:224852]


author: Cao Keqian <caokeqian@kylinos.cn> 01.12.7-1kord0k233.p28.gfb01
changelog:
  - Type:fixbug
  - ID  :[bug#173433;bug#172623]
  - SUG :NA
  - DESC: Regenerate some patches from 355 version to synchronize base code. 
  	patch33: regen-20200821-icon-size.patch	修改桌面图标大小溢出问题
  	patch34: regen-resolve_after_manual_sort_overlapping_icons.patch 解决手动排序后图标重叠的问题
  	patch35: regen-resolve_my_computer_interface_icon_overlapping.patch 解决gparted关闭后，我的电脑界面设备之间图标遮盖的问题
  	patch36: regen-resolve_smallest_two_zoom_out_icon_no_change.patch 解决最小的两次缩放图标没变化的问题 
  	patch37: regen-resolve_after_manual_sort_icons_overlap.patch 解决手动排序时，创建文件后图标重叠的问题
  	patch38: regen-resolve_file_can_not_drag_in_extended_screen_mode.patch 解决扩展模式下，无法将文件/文件夹拖到扩展屏上的问题 
  	patch39: regen-resolve_after_change_resolution_desktop_icon_covered.patch 解决调整分辨率后，桌面图标被任务栏遮住的问题 
  	patch40: regen-resolve_external_mode_modify_low_monitor_desktop_icon_error.patch 解决扩展屏下，从最高分辨率调到最低分辨率后，桌面图标乱序的问题
  	patch41: regen-resolve_after_modify_monitor_resolution_desktop_icon_covered.patch 解决修改分辨率后桌面图标被遮住的问题
  	patch42: regen-resolve_desktop_icon_covered_by_panel.patch 解决修改分辨率，任务栏重启后，桌面图标被任务栏遮住的问题 
  	patch43: regen-add_fix_chandao14422_HDMI-sort.patch 移动补丁fix_chandao14422.patch，repair-HDMI-sort.patch（导致编译不过的问题）


author: zhangyu <zhangyu@kylinos.cn> - 33.1.0_0-3.gfb01
changelog:
  - Type: bugfix
  - ID:[bug#306451]
  - SUG: NA
  - DESC: fix sensitive issues
  - ADD: cldr-emoji-annotation-33.1.0_0-Fix_sensitive_issues.patch


author: Xiao Zai<xiaozai@kylinos.cn> - 8.32-5.p04
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: backport three patches: backport-ls-fix-crash-printing-SELinux-context-for-unstatable.patch,backport-tr-fix-crash-validating-c-with-some-case-char-classe.patch,backport-timeout-ensure-foreground-k-exits-with-status-137.patch


author: chenshengdong<chenshengdong@kylinos.cn> - 8.32-5.p04.gfb01
changelog:
  - Type:NA
  - ID:[BUG200707]
  - SUG:NA
  - DESC: fixbug-200707_partition_mounted_lsblk_and_df_Th_inconsistency.patch


author: xinghe <xinghe2@h-partners.com> - 4.11.12-31
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: xingwei <xingwei14@h-partners.com> - 7.71.1-23
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: lixiaodong <lixiaodong@kylinos.cn> - 1.45.6-8.gfb02
changelog:
  - Patch:Kylin-add-kylin-lockf.patch
  - Add: add ELF executable kylin-lockf 
  - DESC:
  - DESC:In order to prevent tampering, the judgment of the parameters 
         passed in to chattr has been added,and binary kylin lockf has 
         been added to copy the chattr file for tampering prevention


author: lixiaodong <lixiaodong@kylinos.cn> - 1.45.6-8.gfb04
changelog:
  - mv Kylin-add-kylin-lockf.patch to kylin-e2fsprogs-add-kylin-lockf.patch
  - Modify the file filtering function to remove excess output information


author: yinhao <yinhao@kylinos.cn> - 1:4.11-4.gfb01
changelog:
  - Type: NA
  - ID: BUG#194297
  - SUG: NA
  - DESC: eclipse打开失败，提示“The Eclipse execute launcher is configured to not...”
  	change specs: sed -i '1i-protect\nroot' eclipse.ini


author: xiaojiantao <xiaojiantao1@h-partners.com> - 2:5.15-3
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:add support to set or get rx buf len and tx push by ethtool


author: chenshengdong <chenshengdong@kylinos.cn> 2.31.0-4.01.gfb02
changelog:
  -Type: bugfix
  - ID  : [BUG#279803]
  - SUG : NA
  - DESC: add fixbug-279803-resolve_issue_of_duplicate_icons_in_kylin_menu.patch


author: lilu <lilu@kylinos.cn> - 1.0-1.p01
changelog:
  - Type: bugfix
  - ID: [Task#164565]
  - SUG: NA
  - DESC: Modified abnormal display and get info thread errors


author: wuzhaomin <wuzhaomin@kylinos.cn> - 1.0-2
changelog:
  - Type: bugfix
  - ID: [Task#129614]
  - SUG: NA
  - DESC: Code optimization and fix get top memory total and other errors


author: wuzhaomin <wuzhaomin@kylinos.cn> - 1.1.0-0
changelog:
  - Type: bugfix
  - ID: [Task#205345]
  - SUG: NA
  - DESC: Optimize code and resolve issues such as flame graph display errors


author: dongjiao <dongjiao@kylinos.cn> - 1.2.2-2
changelog:
  - Type: update 
  - ID: [Task#213115]
  - SUG: NA
  - DESC: Upgrade version to 1.2.2-2
  	Add depend-v10 to add module whl file


author: cuiyudong <cuiyudong@kylinos.cn> - 4.2.9.1.p04
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add support gb18030-patch ; add gd18030 conf and so  
          add page size-patch ; modify size to 16
          add modify patch ; delete 9 coding for gb18030


author: liujingyuan <liujingyuan@kylinos.cn> - 2.2.4-7.gfb05
changelog:
  - Resolve sensitive characters. datum_shift.csv gcs.csv gdal_datum.csv gt_datum.csv ozi_datum.csv pci_datum.txt pcs.csv s57agencies.csv s57expectedinput.csv vertcs.csv gcs.csv gdal_datum.csv geoccs.csv gt_datum.csv ozi_datum.csv pci_datum.txt projop_wparm.csv s57agencies.csv Hong Kong Taiwan is modified to China/Hong KoNG China/Taiwan


author: houhongxun <houhongxun@kylinos.cn> - 20200916-3.p02
changelog:
  - Type: update
  - ID:   [TASK#327639]
  - SUG:  NA
  - DESC: rebuild to remove sensitive information for sp1、sp2、sp3、sp4


author: yueyuankun<yueyuankun@kylinos.cn> - 2.04-21.se.01.p06
changelog:
  - Type:update
  - ID:bug#127107
  - SUG:NA
  - DESC:add PATCH0371, loongArch64 solve "out of memory" during PXE installation


author: kangyu<kangyu@kylinos.cn> - 2.04-21.se.01.p07
changelog:
  - Type:update
  - ID:bug#128022
  - SUG:NA
  - DESC:Remove the not find kyee prompt
         add press y to enter the system


author: Xiao Zai <xiaozai@kylinos.cn> - 2.04-21.se.01.p08
changelog:
  - Type:NA
  - ID:bug#134276
  - SUG:NA
  - DESC: remove executable permission bits for grub-boot-indeterminate.service


author: kangyu <kangyu@kylinos.cn> - 2.04-21.se.03.p08
changelog:
  - Type:NA
  - ID:bug#144461
  - SUG:NA
  - DESC: measurefile.mod failed to load after x86qcow start message was displayed


author: Xiao Zai <xiaozai@kylinos.cn> - 2.04-21.se.03.p09
changelog:
  - Type:bugfix
  - ID:task#143178
  - SUG:NA
  - DESC: move the password from spec file into 00_header.in file


author: kangyu <kangyu@kylinos.cn> - 2.04-21.se.04.p09
changelog:
  - Type:bugfix
  - ID:task#148830
  - SUG:NA
  - DESC: Troubleshoot the nested virtualization installation exception


author: yinhao <yinhao@kylinos.cn> - 2.04-21.se.04.p10
changelog:
  - Type:bugfix
  - ID:task#192661
  - SUG:NA
  - DESC: Delete Patch:0001-add-default-password-into-00_header.in.patch


author: chenshengdong <chenshengdong@kylinos.cn> - 2.04-21.se.04.p10.gfb02
changelog:
  - Type:bugfix
  - ID:task#205993
  - SUG:NA
  - DESC: Add fixbug-205993-solve_exit_stuck_in_grub_command_line.patch


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-21
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:restart
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.43-24
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-25
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.4.43-25.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.
          add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: caokeqian<caokeqian@kylinos.cn> - 0.337-1.p01.gfb01
changelog:
  - Type:enhancement
  - BUGID: 170150
  - DESC: add Patch9003 支持沐创网卡

   Wed Mar 25 2021 hanshuang <hanshuang@kylinos.cn> - 0.337-1.p01
  - Add upgrade_pci.ids.patch  update to v2.2 pci.ids


author: kongdelin<kongdelin@kylinos.cn> - 0.337-1.p01.gfb03
changelog:
  - Type:update
  - ID:[TASK#404285]
  - SUG:NA
  - DESC: add 001-hwdata-fix-sensitive-information-fields.patch, 修复敏感字段："Hong Kong" -> "Hong Kong,China", "Taipei" -> "Taipei,China"等


author: yinhao<yinhao@kylinos.cn> - 0.3.82-1.p04
changelog:
  - Type:bugfix
  - ID:bug#221535
  - SUG:NA
  - DESC:Add initial-setup-0.3.82-kylin-set-the-default-display-as-clone-screen.patch


author: liujingyuan<liujingyuan@kylinos.cn> - 0.3.82-1.p05
changelog:
  - Type:bugfix
  - ID:bug#283461
  - SUG:NA
  - DESC:Add to spec file  check_system=`systemctl list-units --type=service --all | grep -E 'initial-setup-graphical|initial-setup-text'`,Check if the initial setup granular and initial setup text services exist


author: liujingyuan <liujingyuan@kylinos.cn> - 4.5.0-1.p03.gfb01
changelog:
  - add Modify_sensitive_characters_HongKongTaiwan.patch 修改敏感字符，Tiwan HongKong 为 Tiwan，China HongKong，China


author: Jackie Liu <liuyun01@kylinos.cn> - 1.0-1
changelog:
  - inject: add missing -h args
  - filesnoop: fix crash when -o OPEN
  - Add dbstat support
  - Add ustat support
  - Add inject support
  - tcplinks: fix typo for helps
  - Add icstat support
  - memleak: Tiny fixes
  - memleak: Fix memory leak
  - Fix memory leak when using getline()
  - dbslower: Fixes build errors caused by uninitialized variables in bpf program
  - Add dbslower support
  - Add ugc support
  - Add mysqld-qslower support
  - javagc: fix some attach errors
  - Add uflow support
  - ucalls: Correct 'phpccalls' to 'phpcalls'
  - Add cachetop support
  - biotop/filetop: Fix 'count' print count
  - Add get_uid_name() implementation
  - Add trace support
  - Display UID in username format
  - libbpf-tools: update arm vmlinux with missing perf_event, BPF_PROG_TYPE_PERF_EVENT
  - setuids: rename UID to SU_UID
  - filegone: convert errno to error string
  - filegone: Increase the buffer for filename
  - filegone: Add return code support
  - Expand the print width of pid
  - libbpf-tools/filelife: Check btf struct field for CO-RE
  - tplist: Use tracefs_path()
  - Add reset-trace support
  - Tiny fixes
  - libbpf-tools/tcprtt: use the same options to filter IPv4 and IPv6 addresses
  - tools, libpf-tools: increase IPv6 address width to 39 characters
  - Fix memory leak in capable.c
  - libbpf-tools/execsnoop: fix ret type of bpf_probe_read_user*.
  - libbpf-tools: add block_io_{start,done} tracepoints support to bio tools
  - libbpf-tools: fix tcppktlat show wrong ports
  - Tiny fix we meet
  - funcslower/profile/stackcount: Add folded format output
  - filegone: rewrite filegone base on unlinksnoop
  - offwaketime/wakeuptime: Add folded format output
  - offcputime: Add folded format output
  - Add offwaketime support
  - offcputime: Change the tracepoint mode to kprobe to repair the calltrace display
  - ketones: reword new software tagline
  - dcstat: fix macro err defined
  - Add uthreads support
  - Fix potential double fclose warning
  - Use bpf_core_filed_exist for bpf_ringbuf exist
  - Fix allocating and freeing memory in {probe,free}_usdt_notes
  - Add shmsnoop support
  - uobjnew: Adjust this program to better match the BCC version
  - Add uobjnew support
  - Add tplist support
  - package: Prompt for compilation dependencies
  - Add unlinksnoop support
  - Add dcstat support
  - core_fixes: Fix __builtin_preserve_enum_value not defined issue
  - libbpf-tools: Allow tcppktlat to run on old kernels
  - libbpf-tools: Add support for IPv6 to tcprtt.
  - libbpf-tools: fallback to tracefs mount point if debugfs is not mounted
  - libbpf-tools: add filter for biosnoop
  - cpufreq: read initial freqs only of valid links
  - libbpf-tools: Avoid virtual memory area [uprobes] warning
  - statsnoop: print parent pid
  - opensnoop: print parent pid
  - filesnoop: drop opensnoop and statsnoop in filesnoop
  - Revert "statsnoop: Remove specially designed statsnoop"
  - filesnoop: extend parent pid
  - debian rules to package ketones
  - prepare for make project
  - statsnoop: Remove specially designed statsnoop
  - libbpf: Support POSIX regular expressions for multi kprobe
  - Add tcprst support
  - Add ucalls support
  - uprobe_helpers: Fix path acquisition function
  - libbpf-tools: syscount: Add syscall lookup table for arm64 and riscv
  - Add profile support
  - Add tcpdrop support
  - tcplinks: use ncurses for draw UI
  - libbpf: tiny fixup of libbpf
  - Add tcpsubnet support
  - Add tcplinks support
  - libbpf: don't attach to non-attachable kprobes
  - Add stackcount support
  - libbpf: don't need zero res in exit path
  - libbpf: available_filter_functions_addrs for filter functions
  - Fix the function to get the sk_protocol
  - tcpaccept: Delete redundant code to make more compact
  - tcp: Delete unnecessary parameters
  - Add zfsslower support
  - Add zfsdist support
  - Add funcslower support
  - signal: fix undefined behavior of signal handler
  - commons: Simplified time_since_start function
  - Add tcpaccept support
  - Makefile: fix compile error for bpflist
  - Add tcpretrans support
  - ttysnoop: Implement new way for CO-RE
  - libbpf: rewrite kprobe.multi filter with available_filter_functions
  - Add funccount support
  - Resolve compilation errors on loongarch
  - libbpf: support record count of functions has been traced
  - Makefile: bpflist: remove unnecessary compilation dependencies
  - libbpf: filter by available functions
  - Add vfscount support and cleanup unused variable
  - Add README
  - Add filesnoop support
  - Add bpflist support
  - Add stacksnoop support
  - Add writeback support
  - vfsstat: fix exit value when SIGINT
  - Add threadsnoop support
  - trace_helpers: fix proc maps with [uprobes] entry
  - Add syncsnoop support
  - Cleanup vmlinux and others
  - loads: register perf event on all cpus
  - klockstat: fix running on un-implement down_read_interruptible kernel
  - loads: Remove unnecessary assign 0 operations
  - readahead: fix CO-RE on running without fentry
  - memleak: fix kmalloc and kmalloc_node's hook running on old kernel
  - Makefile: fix foo.bpf.o build without foo.h
  - libbpf-tools: Add loongarch support
  - libbpf-tools: use fentry in funclatency
  - libbpf-tools: Filter with kprobe blacklist for kprobe_exists() api.
  - libbpf-tools/memleak: support ksyms and syms_cache
  - libbpf-tools/memleak: make it run on old kernel
  - change storage type of helper err to int
  - libbpf-tools/memleak: remove unused arg "PERCPU"
  - libbpf-tools/memleak: fix 'show allocs'
  - Makefile: fix binary depends on includes file update
  - ttysnoop: fix co-re on struct iov_iter hasn't ubuf
  - loads: sample_period works on ns, convert to second
  - Add setuids support
  - Sync upstream bpftool libbpf blazesym without submodules
  - Redefine the global name of the project and its representative meanings
  - Add ttysnoop support
  - Move various tracing programs to his directory
  - Move binary to ./bin directory
  - Spit includes and libs into directory
  - Add pidpersec support
  - Add naptime support
  - Add cpuwalk support
  - Add dcsnoop support
  - Add loads support
  - Add swapin support
  - Add tcppktlat support
  - Add javagc support
  - Add tcpstates support
  - Add tcprtt support
  - Add tcplife support
  - tcpconnect: Drop unused ts_us
  - Add tcpconnect support
  - Fix some string features must be done in _GNU_SOURCE
  - Fix potential early exit of the program
  - Add tcpsynbl support
  - Add tcptop support
  - Add tcptracer support
  - Use strftime_now for cleanup
  - Add vfsstat support
  - Use BPF_CORE_READ_STR_INTO to instead of bpf_probe_read_kernel_str
  - Add syscount support
  - Merge changes If1eb510b,I220234bb
  - tcpconnlat: Remove entries from map in all cases
  - execsnoop: add execveat support
  - Fix load of ringbuffer is not support
  - Add tcpconnlat support
  - Add statsnoop support
  - Add solisten support
  - Add support slabratetop
  - Add sigsnoop support
  - Add support readahead
  - Add opensnoop support
  - update submodules url into gitee.com
  - Add support oomkill
  - Add support mountsnoop
  - Use argp_parse_pid and do_process_running wrapper for cleanup
  - memleak: use blazesym for show symbols
  - Add support blazesym
  - Makefile: Generate a symlink for different ebpf programs
  - Add support memleak
  - Add support mdflush
  - Update submodules
  - Add support llcstat
  - Add support ksnoop
  - rename bpf_map_lookup_and_delete to bpf_map_lookup_and_delete_elem
  - Add support klockstat
  - biostacks: fix wrong function name of __blk_account_io_start
  - biosnoop.bpf: fix run by inline functions
  - cpufreq: fix typo from raw_btf to raw_tp
  - biostacks: support run on kernel without btf
  - offcputime: work on kernel without btf
  - fsdist: fix crash on kernel without bss support
  - cpufreq: work on kernel without btf
  - bitesize: fix run on kernel without btf
  - biosnoop: support kernel without fentry
  - numamove: fix initial of num and latency
  - Add fsslower support
  - Drop libbpf_set_strict_mode() calls
  - Add support fsdist
  - bitesize: add missing partitions__load
  - Add support filetop
  - Use bpf_get_current_ns_pid_tgid for WSL or container
  - Add support filelife
  - Add support exitsnoop
  - Add drsnoop support
  - Add support capable
  - Add support cachestat
  - Add support bitesize
  - Add support biostacks
  - Add support biosnoop
  - Add support biopattern
  - Add support biolatency
  - Add support bindsnoop
  - Add support cpufreq
  - Add biotop support
  - Add support funclatency
  - Add gethostlatency support
  - Add bash readline support
  - numamove: only work for numa node > 1
  - runqlen: Add run queue length support
  - execsnoop: convert to use bpf_core_read_xxx
  - Add numasched support
  - execsnoop: works on !(tracepoint/syscalls)
  - numamove: fixes BPF_KRETPROBE for kretprobe
  - update vmlinux.h
  - Add numamove support
  - Fix wrong patch of uapi/linux/bpf.h
  - Add wakeuptime support
  - Add execsnoop support
  - Add support offcputime
  - Add support cpudist
  - Add support runqueue-latency
  - Add support hardirqs
  - use warning instead of fprintf stderr
  - Add softirqs support
  - runqslower support thread id
  - Add .gitreview for git-review
  - Add README.md for build binary
  - Add runqslower tools
  - Init submodules
  - Initial LICENSE


author: Youling Tang <tangyouling@kylinos.cn> - 1.0-2
changelog:
  - softirqs: Fix the naming error
  - Revert "ksnoop: use bpf_get_func_ip() where helper is available"
  - Add criticalstat support
  - ttysnoop: fix iov_iter.ubuf CO-RE mismatch
  - libbpf-tools/gethostlatency: Resolve the path of libc for different namespaces
  - libbpf-tools: Fix misaligned pointer accesses in exitsnoop
  - libbpf-tools/filelife: Fix error tracking caused by failed unlink
  - Added support for f2fs to fsdist and fsslower tools.
  - libbpf-tools: Check biolatency tracepoints using BTF
  - libbpf-tools: Add s390x support
  - libbpf-tools: Fix bindsnoop types usage
  - libbpf-tools: Fix -Wformat errors for 32bit systems
  - ksnoop: use bpf_get_func_ip() where helper is available
  - use tid instead of tgid
  - Add sofdsnoop support
  - spec: mark ketones need clang >= 10
  - package ketones for RPM


author: Youling Tang <tangyouling@kylinos.cn> - 1.0-3
changelog:
  - Add adaptive readahead support
  - Add wqlat support
  - libbpf-tools: fix syscall tracepoints
  - Fix bashreadline
  - libbpf-tools/offcputime, futexctn: Fix incorrect DSO information in stacktrace
  - libbpf-tools/memleak: Add verbose option
  - libbpf: Some advanced features customized for ketones
  - Update libbpf to 1.4.0
  - Add netqtop support
  - Add kvmexit support
  - Add dddos support
  - cpuunclaimed: Add cpuunclaimed support
  - libbpf-tools/ksnoop: perf buffer fix unnecessary junk bits output
  - libbpf-tools: Fix bindsnoop for kernel v6.6+
  - libbpf-tools: Fix trace_helper symbol search bug
  - libbpf-tools/biotop: Add PID filter support
  - libbpf-tools: Fix misaligned pointer accesses in drsnoop
  - libbpf-tools: Fix misaligned pointer accesses in tcptracer
  - libbpf-tools: Fix misaligned pointer accesses in tcpstates
  - libbpf-tools: Fix misaligned pointer accesses in filegone
  - libbpf-tools: Fix misaligned pointer accesses in tcplife
  - libbpf-tools: Fix misaligned pointer accesses in tcpconnect
  - libbpf-tools: Fix misaligned pointer accesses in statsnoop
  - libbpf-tools: Fix misaligned pointer accesses in runqslower
  - libbpf-tools: Fix misaligned pointer accesses in opensnoop
  - libbpf-tools: Fix misaligned pointer accesses in gethostlatency
  - libbpf-tools: Fix misaligned pointer accesses in fsslower
  - libbpf-tools: Fix misaligned pointer accesses in filelife
  - libbpf-tools: Fix misaligned pointer accesses in biosnoop
  - Add futexctn support
  - libbpf-tools/memleak: correct key size of memptrs
  - Sync ketones.spec to v1.0-2


author: chenshengdong <chenshengdong@kylinos.cn> - 1.0-3.gfb01
changelog:
  - Type: task
  - ID  : [TASK#341359]
  - SUG : NA
  - DESC: Delete some commands due to kernel version issues.


author: chenshengdong <chenshengdong@kylinos.cn> - 1.0-3.gfb02
changelog:
  - Type: task
  - ID  : [TASK#282439]
  - SUG : NA
  - DESC: Add fixbug-fsslower_suppoerts_output_to_csv_file.patch


author: chenshengdong <chenshengdong@kylinos.cn> - 1.0-3.gfb03
changelog:
  - Type: bug
  - ID  : [BUG#282079]
  - SUG : NA
  - DESC: Add fixbug-282079-solve_cachetop_title_alignment_problem.patch


author: chenshengdong <chenshengdong@kylinos.cn> - 1.0-3.gfb04
changelog:
  - Type: bug
  - ID  : [BUG#282481]
  - SUG : NA
  - DESC: Modify spec and delete commands outside of requirements.


author: chenshengdong <chenshengdong@kylinos.cn> - 1.0-3.gfb06
changelog:
  - Type: bug
  - ID  : [BUG#282427]
  - SUG : NA
  - DESC: Add fixbug-282427-solve_the_issue_of_grabled_text_in_file.patch


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1.0.1-3.p01
changelog:
  - Type:update
  - ID:[TASK#162318]
  - SUG:NA
  - DESC:Add BuildRequires/Requires and fix compilation error with mock


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1.0.1-3.p02
changelog:
  - Type:update
  - ID:[TASK#162318]
  - SUG:NA
  - DESC:Remove kernel version from package name and rebuild with kernel-4.19.90-82.0.v2307.ky10


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p31
changelog:
  - Type:bugfix
  - ID:[BUG#178000] [TASK#176779] [TASK#179475]
  - SUG:NA
  - DESC: add get trial date fuction for dbus
  - DESC: open auto activation for kms privatization
  - DESC: add ipv6 support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p33.02
changelog:
  - Type: bugfix
  - ID:[bug#216077]
  - SUG: NA
  - DESC: add tips when inputed activation code is too short


author: zhangyu <zhangyu@kylinos.cn>.p05.gfb01
changelog:
  - Change LANCE to GFB For lsb_release file
  - Add Patches:kylin-settings-14.10.63-Change_LANCEtoGFB.patch


author: zhangyu <zhangyu@kylinos.cn>.p05.gfb02
changelog:
  - Type:bugfix
  - ID:[BUG#229495]
  - SUG:NA
  - DESC:set default lockscreen
  - Add Patches:kylin-settings_set_default_lockscreen.patch


author: baiguo <baiguo@kylinos.cn> - 1.2-11
changelog:
  - update to 1.2-11
  - DESC: add memory leak monitor and net monitor(send aspect), fix kylin-sysassist-monitor.service 644


author: chenshengdong<chenshengdong@kylinos.cn> - 1.3-1.gfb01
changelog:
  - Type: task
  - ID  : [TASK#341361]
  - SUG : NA
  - DESC: Delete functions that depend on the database and delete the db generation in the spec.
          Add Temporarily-remove-some-database-dependent-functions.patch


author: chenshengdong<chenshengdong@kylinos.cn> - 1.3-1.gfb02
changelog:
  - Type: bugfix
  - ID  : [BUG#282147]
  - SUG : NA
  - DESC: Add fixbug-solve_problem_of_crash_when_collecting_system_logs.patch


author: chenshengdong<chenshengdong@kylinos.cn> - 1.3-1.gfb03
changelog:
  - Type: bugfix
  - ID  : [BUG#282035]
  - SUG : NA
  - DESC: Add fixbug-282035-solve_issue_of_incorrect_system_activation_logs.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.01
changelog:
  - 新增无事务数据加载接口
  -   add patch: kysec-common-add-without-transaction-retrieve-interface-for-sqlite.patch
  - 修复调用path_is_mount_bind接口失败的bug
  -   add patch: kysec-common-fix-bug-of-call-path_is_mount_bind.patch
  - Bug:  #66918
  - 参数为空时日志为none
  -   add patch: kysec-common-update-unknown-to-none.patch
  - Bug:  #69396 #70642
  - 二进制程序覆盖python脚本，python脚本状态变成“已损坏”
  - 安全中心打印kysec.log日志的时间格式，以/etc/default/locale中的语言环境为准
  -   add patch: kysec-common-optimize-script-file-parse-move-to-end.patch
  - Bug:  #80484
  - 语言环境变量错误，导致英文模式下，执行控制弹框为中文
  -   add patch: kysec-common-fix-other-app-lang-env-error-caused-by-time.patch
  - kysec日志添加日志轮询功能
  -   add patch: kysec-common-add-logrotate-for-kysec-log.patch
  - 应用桌面补丁到：1.0.1-21kylin


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.03
changelog:
  - Type: update 
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -         add patch: kysec-common-fix-fortify.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.04
changelog:
  - Type: bugfix
  - ID:[BUG#141967]
  - SUG:NA
  - DESC: 修复无效日志数据导致kyseclogd崩溃问题
  -         add patch: kysec-common-fix-kyseclogd-coredump-caused-by-invalid-msg.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.05
changelog:
  - Type: bugfix
  - ID:[BUG#143870]
  - SUG:NA
  - DESC: 修改kysec_logd服务的监听ip为127.0.0.1
  -         add patch: kysec-common-modify-kysec-log-server-listen-ip.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.06
changelog:
  - Type: bugfix
  - ID:[BUG#165526]
  - SUG:NA
  - DESC: 解决获取所有进程防杀死列表不全的问题
  -         add patch: kysec-common-fix-get-ppro-list-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.07
changelog:
  - Type: bugfix
  - ID:[BUG#184694]
  - SUG:NA
  - DESC: 修复secadm用户获取进程防杀死信息失败的问题
  -	  add patch: kysec-common-fix-secadm-ppro-get-pid-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.08
changelog:
  - Type: bugfix
  - ID:[BUG#184694]
  - SUG:NA
  - DESC: 修复secadm用户无法通过pid获取进程管控状态的问题
  -	  add patch: kysec-common-fix-secadm-can-not-get-ppro-by-pid.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.09
changelog:
  - Type: update
  - ID:[任务#189436]
  - SUG:NA
  - DESC: 修改解压xz文件的方式,提高解析文件类型的速度,修改spec文件，添加xz依赖
  -	  add patch: kysec-common-modify-decompress-xz-file.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.10
changelog:
  - Type: bugfix
  - ID:[BUG#184694]
  - SUG:NA
  - DESC: 修复当secadm使用kysec_get查询指定路径的ppro状态时,若selinux拦截
  -	了pid的查询,获取的pid会是kysec_get进程的pid的问题
  -	  add patch: kysec-common-fix-get-pid-error-when-selinux-prevent.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.11
changelog:
  - Type: bugfix
  - ID: [Bug#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: kysec-daemon-fix-not-set-status-when-close-3adm.patch 
  - Type: update
  - ID: [TASK#111368]
  - SUG:NA
  - DESC: 为security-switch加入回滚机制
  -       add patch: kysec-daemon-security-switch-add-rollback.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.12
changelog:
  - Type: bugfix
  - ID: [Bug#144683]
  - SUG:NA
  - DESC: 修复在strict模式下，关闭box重启后security-switch和getstatus失败的问题
  -         add patch: kysec-daemon-fix-security-switch-get-error-when-set-box-disable.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.13
changelog:
  - Type: bugfix
  - ID: [Bug#144594]
  - SUG:NA
  - DESC: 修复安全优先模式切换其他模式，未重启前模式显示错误的问题
  -         add patch: kysec-daemon-fix-security-switch-get-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.14
changelog:
  - Type: update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: kysec-daemon-netctl-set-off.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#157216]
  - SUG:NA
  - DESC: 解决添加白名单后whlist.db文件无法关闭的问题
  -         add patch: kysec-daemon-fix-whlist-db-close-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#161996]
  - SUG:NA
  - DESC: 修复执行控制白名单和文件防篡改列表为空的问题
  -         add patch: kysec-daemon-fix-whlist-init-failed.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 1.0.3-36.se.17
changelog:
  - Type: bugfix
  - ID: [BUG#151059]
  - SUG:NA
  - DESC: 切换selinux的permissive及enforcing模式实时生效
  -         add patch: kysec-daemon-fix-selinux-status-changenow.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.18
changelog:
  - Type: update
  - ID: [任务#137354]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -         add patch: kysec-daemon-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.20
changelog:
  - Type: bugfix
  - ID: [BUG#205663][BUG#206934]
  - SUG:NA
  - DESC: 修复security-switch --set strict设置三元密码时，dbus通信超时导致密码设置失败的问题[BUG#205663]
  -	  add patch: kysec-daemon-fix-set-passwd-dbus-timeout-failed.patch
  -	修复三员用户家目录删除后,stirct模式仍然可以成功切换,但无法登录的问题[BUG#206934]
  -	  add patch: kysec-daemon-fix-login-failed-when-del-3adm-home-dir.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.3-36.se.21
changelog:
  - Type: bugfix
  - ID: [BUG#220612]
  - SUG:NA
  - DESC: 【kysec】kysec状态关闭再打开后，重启系统后可以修改或删除受保护文件.
  -	  add patch:  kysec-daemon-fix-readonly-tag-loss-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.22
changelog:
  - Type: bugfix
  - ID: [BUG#190352]
  - SUG:NA
  - DESC: 修复kysec设置disable后，提示重启生效的问题
  -	  add patch: kysec-utils-fix-kysec-set-disable-tips-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.23
changelog:
  - Type: update
  - ID: [任务#180316]
  - SUG:NA
  - DESC: 将load_policy命令加入到secadm_list文件中
  -	  add patch: kysec-utils-load_policy-add-secadm_list-file.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.24
changelog:
  - Type: bugfix
  - ID: [BUG#200000]
  - SUG:NA
  - DESC: 修改切换状态时提示kill用法错误
  -	  add patch: kysec-utils-fix-setstatus-tips-kill-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.25
changelog:
  - Type: bugfix
  - ID: [BUG#184694]
  - SUG:NA
  - DESC: 修复secadm用户无法通过pid获取进程管控状态的问题
  -	  add patch: kysec-utils-fix-secadm-can-not-get-ppro-by-pid.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.26
changelog:
  - Type: bugfix
  - ID: [BUG#206934]
  - SUG:NA
  - DESC: 修复三员用户家目录删除后,stirct模式仍然可以成功切换,但无法登录的问题
  -	  add patch: kysec-utils-fix-login-failed-when-del-3adm-home-dir.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.3.6-33.se.27
changelog:
  - Type: bugfix
  - ID: [BUG#215075]
  - SUG:NA
  - DESC: 【授权管控】【S2500】系统安全切换至strict或者default模式后，切换tty后未显示授权管控提示语句
  -	  add patch: kysec-utils-fix-unetdns-service-start-failed.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.3.6-33.se.28
changelog:
  - Type: bugfix
  - ID: [BUG#218250]
  - SUG:NA
  - DESC:  【52.36】【访问控制】【白名单访问控制】kysec配置-进程保护标签列表查看
  -         回退由国防bug引入的改动.
  -	  add patch: kysec-utils-fix-ppro-get-not-running-process-info.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.3.6-33.se.28.gfb01
changelog:
  - Type: bugfix
  - ID: [BUG#215075]
  - SUG:NA
  - DESC: 切换至strict或default模式，tty不显示授权管控提示
  -         add patch: kysec-utils-fix-missing-authorize-status-hint.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.3.6-33.se.29.gfb01
changelog:
  - Type: bugfix
  - ID: [BUG#217723]
  - SUG:NA
  - DESC: 同步[BUG#220613 SP3补丁] 解决insmod 被篡改的ko模块没有kysec 拒绝日志.
  -         add patch: kysec-utils-fix-no-kysec-deny-logs-when-insmod-hash-not-verified-ko.patch


author: yinhao <yinhao@kylinos.cn> - 0.0.51-1.p08
changelog:
  - Type:NA
  - ID:TASK#222109
  - SUG:NA
  - DESC:Patch7:langtable-0.0.51-kylin-change-Macau-to-Macao.patch


author: chenshengdong <chenshengdong@kylinos.cn> - 0.0.51-1.p08.gfb01
changelog:
  - Type:NA
  - ID:TASK#212189
  - SUG:NA
  - DESC:Patch8:langtable-0.0.51-kylin-change-Macau-to-Macao_1.patch


author: chenyun <chenyun@kylinos.cn> - 0.0.51-1.p08.gfb03
changelog:
  - Type:NA
  - ID:TASK#404285,BUG:306573
  - SUG:NA
  - DESC:Patch10:langtable-0.0.51-Fix_Sensitive_Issues_1.patch


author: xiaohong li <lixiaohong@kylinos.cn> -1.7.5-1.gfb02
changelog:
  - fix-memory-leak-from-upstream.patch
  - allow_XIfEvent_to_reenter_libx11_from_upstream.patch
  - fix-CVE-2023-43785-from-upstream.patch
  - fix-CVE-2023-43786-from-upstream.patch
  - fix-heap-overflow-from-upstream.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 2.35.2-10.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add patch 9100,9300, Fix hwclock wrong time in aarch64 when reboot 200 times


author: wanfeng <wanfeng@kylinos.cn> - 2.35.2-10.p05
changelog:
  - Type:bugfix
  - ID:[BUG#153935]
  - SUG:NA
  - DESC:add patch:9400 for supporting utf-8 to fix problematic output when
  -      executing below commands at /dev/ttyN(N>1):
  -      systemctl restart rescue.service
  -      systemctl set-default rescue.target and reboot


author: zhangmingyi<zhangmingyi5@huawei.com> - 2:0.8.1-3
changelog:
  -- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                  backport-libbpf-Fix-the-name-of-a-reused-map.patch
                  backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch


author: JofDiamonds <kwb0523@163.com> -2:0.8.1-4
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
    backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
    backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
    backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
    backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
    backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
    backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch


author: SuperCharge <xiesongyang@huawei.com> -2:0.8.1-6
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch


author: zhangmingyi <zhangmingyi5@huawei.com> -2:0.8.1-8
changelog:
  - backport patches from upstream:
    backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
    backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
    backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch


author: Qingqing Li <liqingqing3@huawei.com> -2:0.8.1-10
changelog:
  - backport patch from openEuler kernel repo:
    backport-sync-the-newly-added-helper-functions-from-kernel.patch


author: jinzhiguang <jinzhiguang@kylinos.cn> - 2:0.8.1-10.p01
changelog:
  - Type: update
  - ID:   TASK#183701
  - SUG:  NA
  - DESC: rebuild and addpatch:
  	0001-export-bpf_program__pin_instance.patch
  	0001-libbpf-Avoid-enum-forward-declarations-in-public-API.patch
  	move_btf_ext_header_for_bcc_make.patch
  	0001-export-bpf_object__variable_offset-and-bpf_object__s.patch
  	0001-export-libbpf__bpf_prog_load.patch


author: kongdelin<kongdelin@kylinos.cn> - 1.4.0-15.gfb01
changelog:
  - Type:update
  - ID:[TASK#404285]
  - SUG:NA
  - DESC: add 001-libgeotiff-fix-sensitive-information-fields.patch, 修复敏感字段


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p49
changelog:
  - Type:bugfix
  - ID:[BUG#166387]
  - SUG:NA
  - DESC:add buildrequires and requires  version of paho-c in spec


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p51
changelog:
  - Type: bugfix
  - ID:[BUG#178000]
  - SUG:NA
  - DESC: fix get expiration time error and add get trial time fuction


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p52
changelog:
  - Type: upadate
  - ID:[TASK#153883]
  - SUG:NA
  - DESC: change service enable way in postinstall and posttrans


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p53
changelog:
  - Type: upadate
  - ID:[TASK#163840]
  - SUG:NA
  - DESC: add longmai and haitaifangyuan ukey driver support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p64
changelog:
  - Type: Task
  - ID:[TASK#188185]
  - SUG: NA
  - DESC: add debuginfo and delete useless code file
  - DESC: merge main branch to this


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p65
changelog:
  - Type: bugfix
  - ID:[BUG#211902][BUG#212682]
  - SUG: NA
  - DESC: gather together kms cmd
  - DESC: add writable port and decoupling echoip from kms server


author: kongdelin<kongdelin@kylinos.cn> - 1.18.22-4.p10.gfb21
changelog:
  - add network-manager-applet-1.8.22-opitimization-0001.patch
  - 1. 修复"配置ip点击保存按钮，出现两次已连接提醒"
  - 2. 只重启对应的网络配置


author: kongdelin<kongdelin@kylinos.cn> - 1.18.22-4.p10.gfb22
changelog:
  - add network-manager-applet-1.8.22-opitimization-0002.patch
  - 修复ip冲突提示语句，"IP地址改变，检测IP地址冲突"改为"正在检测IP地址是否存在冲突..."


author: liujingyuan<liujingyuan@kylinos.cn> - 1.18.22-4.p10.gfb23
changelog:
  -fix bug 275599 275569 275091 275087 275081,添加fix-bug-275599-275569-275091-275087-275081.patch
  -修复拔掉网线再接入另一个网口，配置IP后网络不连通
  -修复网络已连接情况下，IPv4设置切换为自动再切换为手动，无IP冲突提示
  -修复更换冲突IP，多次点击保存按钮，配置成功保存，网络连接成功
  -修复IP冲突检测提示多个共存，可占满桌面右侧
  -修复更换冲突IP地址无“正在检测IP地址是否存在冲突


author: kongdelin<kongdelin@kylinos.cn> - 1.18.22-4.p10.gfb25
changelog:
  - 1. add nma-task-412015.patch，修复连接信息界面bond不显示速率问题
  - 2. add nma-bugfix-275087.patch ,修复检测弹窗闪的太快看不清提示信息


author: chenshengdong <chenshengdong@kylinos.cn> 2.31.0-1.p01.gfb01
changelog:
  -Type: bugfix
  - ID  : [BUG#232649]
  - SUG : NA
  - DESC: add fix-bug232649-leaks_caused_by_high-frequency_clicks.patch


author: huayadong <huayadong@kylinos.cn> -20150918kord0ukui58-10.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#104488]
  - SUG : NA
  - DESC: change %build for add debuginfo,rebuild for loongarch64.


author: chenshengdong<chenshengdong@kylinos.cn> -20150918kord0ukui58-10.p09.gfb06
changelog:
  - Type: bugfix
  - ID  : [BUG#213576]
  - SUG : NA
  - DESC: 1. the calendar in the lower right corner of the desktop is implemented using gcalendar instead, and
             the webkit dependency is removed.
          2. indicator-desktop removes the libwnck dependent library and uses x11 to implement the corresponding fuctions.
          3. the time display format is changed to the monitoring key value change method.
          4. add fixbug-213576-solve_the_problem_of_memory_leak_caused_by_calendar_display.patch


author: chenshengdong<chenshengdong@kylinos.cn> -20150918kord0ukui58-10.p09.gfb08
changelog:
  - Type: bugfix
  - ID  : [TASK#212260]
  - SUG : NA
  - DESC: 1. synchronize some modifications of version 95.
          2. add fix-task212260-high-memory-usage.patch


author: CJ<caojian@kylinos.cn> - p03.gfb02
changelog:
  - add patch: mate-settings-daemon-fix-after-50days-cause-blackscreen.patch
  - 修复32位时间戳溢出导致的50天插拔显示器黑屏问题.


author: chenshengdong<chenshengdong@kylinos.cn> 1.24.0-1.p10.gfb02
changelog:
  - Type: bugfix
  - ID:   [BUG#221501]
  - SUB:  NA
  - DESC: Add fixbug-221501-solve_inconsistency_between_memory_usage_and_command.patch


author: chenshengdong<chenshengdong@kylinos.cn> 1.24.0-1.p10.gfb03
changelog:
  - Type: bugfix
  - ID:   [BUG#241170]
  - SUB:  NA
  - DESC: Delete fixbug-221501-solve_inconsistency_between_memory_usage_and_command.patch
          ZF's LTP stress test looks at the memory used by the system monitor. As a result,the memory stress test
          percentage does not meet the standard.if it is restored to the previous version,the memory will be consistent
          with the ratio of top memory used. the used memory calculation of the previous version is total-available,which is co          nsistent with the calculation method of top's used ratio.


author: guoshengsheng<guoshengsheng@kylinos.cn>1.12.2-1kord1k10.p02
changelog:
  - Add %post 
  - dconf reset /org/mate/terminal/profiles/default/font
  - dconf write /org/mate/terminal/profiles/default/font "'Courier 10 Pitch 12'"


author: Lu lijun<lulijun@kylinos.cn>1.12.2-1kord1k10.p03
changelog:
  - add Patch:mate-terminal-1.12.1-kylin-modify-setting-default-font.patch
  - fix bug20234 and bug18836.


author: chenshengdong <chenshengdong@kylinos.cn> - 1.4.7-6.gfb02
changelog:
  - Type: bug
  - ID  : [BUG#306365]
  - SUG : NA
  - DESC: Add installation dependdency:accountsservice-libs


author: shanjinkui <shanjinkui1308@jjgpu.com> 1.4.2
changelog:
  -  修复eDP问题
  -  修复苍穹GIS问题
  -  修复NFS挂载编译问题
  -  修复迈动互联等应用问题
  -  修复mpv黑屏问题
  -  修复微信截图问题
  -  修复浏览器视频播放问题
  -  修复pwm的问题
  -  修复笔电缩放出现白屏问题


author: shanjinkui <shanjinkui1308@jjgpu.com> 1.5.0-beta1
changelog:
  -  修复多个苍穹、空天院、横歌、等GIS问题
  -  修复图元问题
  -  修复渲染问题
  -  修复虚线问题
  -  修复花屏问题
  -  修复DMA问题
  -  修复影音问题
  -  修复段错误问题
  -  修复纹理问题
  -  修复piglit问题
  -  修复Vulkan问题
  -  修复EDP问题
  -  修复HDMI问题
  -  修复黑屏问题
  -  修复编译器问题
  -  修复微信截图问题
  -  支持中科方德+ARM
  -  支持Ubuntu 20.04+x86
  -  支持KOS+SW831
  -  支持USB签字屏
  -  支持Wayland
  -  支持希沃应用
  -  优化调色板功能
  -  优化线程锁
  -  优化功耗管理


author: shanjinkui <shanjinkui1308@jjgpu.com> 1.5.0
changelog:
  -  新增适配8GB显卡
  -  新增虚拟化功能
  -  优化HDMI 信号质量
  -  修复OGRE应用问题
  -  优化DMA性能
  -  优化openCL性能
  -  修复云盒子缩放异常问题
  -  修复GL相关的应用问题
  -  修复纹理问题
  -  适配eletron应用硬件加速
  -  优化虚拟化调频策略
  -  调整虚拟化CPU编码策略
  -  修复WebGIS问题
  -  修复kylin-camera画面撕裂问题
  -  修复3D问题


author: liyunqing <liyunqing@kylinos.cn> - 1.2.6-1.p02
changelog:
  - Type:bugfix
  - Id:[BUG#198569、198327]
  - SUG:NA
  - DESC:add patch 002 to fix segment fault when traversal ctx_hash 
         add patch 003 to delete unsupport kprobe ping_lookup in aarch64


author: WangShuo <wangshuo@kylinos.cn> - 8.2P1-16.p05
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Kylin delete configure "--with-sandbox=seccomp_filter" support loongarch64


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p09
changelog:
  - Type:update
  - ID: TASK#184873
  - SUG: NA
  - DESC: fix ssh-agent coredump when ssh-add exec add library


author: yuejiayuan <yuejiayuan@kylinos.cn> - 8.2P1-16.p10
changelog:
  - Type:update
  - ID: TASK#189950
  - SUG: NA
  - DESC: fix CVE-2023-51385
  	add backport-CVE-2023-51385-upstream-ban-user-hostnames-with-most-shell-metachar.patch


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p12
changelog:
  - Type:update
  - ID:TASK#193814
  - SUG:NA
  - DESC:support sm3 hmac feature, update ssh change mode script and 
         and fix memory leak


author: bianxiuning <bianxiuning@kylinos.cn> - 1:1.1.1f-15.p14
changelog:
  - Type: update
  - ID: [TASK#172146]
  - SUG: NA
  - DESC: add Patch117, add zhao-xin gmi suport for sm3 sm4 and random


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p21
changelog:
  - Type: update
  - ID: TASK#193265
  - SUG: NA
  - DESC: port sm2utl command tool code , support default user id, 
  	and optimize the return code, optimize dgst keyform for PEM,
  	support pkeyutl verify function for sm2 cert.


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1f-15.p22
changelog:
  - Type: update
  - ID: TASK#198465
  - SUG: NA
  - DESC: Fix CVE-2024-0727 PKCS12 Decoding crashes
  	add backport-CVE-2024-0727-fix-pkcs12-decoding-crashes.patch


author: zhangyu <zhangyu@kylinos.cn> - 1.2.3-18.p01.gfb01
changelog:
  - Type: bugfix
  - ID:[bug#306479]
  - SUG: NA
  - ADD:  phpldapadmin-1.2.3-Fix_Sensitive_Issues.patch
  - DESC: Fix Sensitive Issues


author: songliyang <songliyang@kylinos.cn> - 2.0.0-2.p01
changelog:
  - Type: TASK
  - ID: 163327
  - SUG: NA
  - DESC: add Patch0 Patch1 Source4 Source5 Source6 to support loongarch, modify spec file to generate pingtrace sub package, remove some unnecessary dependencies.


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.05.p01
changelog:
  - Type: bugfix
  - ID:[BUG#162241]
  - SUG:NA
  - DESC: -c命令行参数加入exectl状态检查
  -         add patch: python2-parameter-c-add-exectl-status-check.patch


author: dingcaokai <dingcaokai@kylinos.cn> - 4.9.2-4.p03.gfb03
changelog:
  - Add qt-creator_empty_project.patch to fix the bug that
    when the project is empty, it hints that the project already exists


author: dingcaokai <dingcaokai@kylinos.cn> - 4.9.2-4.p03.gfb04
changelog:
  - Add always_autotect_qt_versions.patch fix_qt_version_autodetection.patch 
    add_path_for_qt_version_autodetection.patch to fix the bug that kit can
    not auto detect the qmake


author: kongdelin <kongdelin@kylinos.cn> - 4.9.2-4.p03.gfb08
changelog:
  - Type:bugfix
  - ID:BUG#229435
  - SUG:NA
  - DESC:add qt-creator-bugfix-229435.patch, fix bug#229435 rebuild in tag v10-sp3-gfb-031;
  -      Replaced xterm with mate-terminal as default terminal


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.16
changelog:
  - Type:update
  - ID:[bug#144372] 
  - SUG:NA
  - DESC: 144372 【selinux-ukmcs】执行#chpolicy ukmls切换模式重启异常
  - add Patch7001: selinux-policy-setstatus.patch
  - DESC: 142670 【安全模块状态设置】strict模式运行chpolicy命令失败
  - DESC: 142637 【安全模块状态设置】strict模式下，开启box失败
  - DESC: 142633 【安全模式切换】【终端命令】strict模式下关闭kysec失败
  - DESC: 142631 【安全模式切换】【终端命令】strict模式下关闭selinux失败
  - DESC: 135572 【管理员分权】secadm-kysec状态切换失败


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.17
changelog:
  - Type:update
  - ID:[bug#142670] 
  - SUG:NA
  - DESC: 142670 【安全模块状态设置】strict模式运行chpolicy命令失败
  - add Patch7002: selinux-policy-chp-telnet-reinforce.patch
  - DESC: 145902 【网络服务】服务端default,strict模式下，客户端telnet远程登录失败
  - DESC: 135942 【安全加固】【潜在风险】strict模式下，潜在危险文件加固失败
  - DESC: 139752 【升级测试】升级后的系统切换default模式，开始菜单无日志
  - DESC: 146714 【模式切换】仅开启selinux，在安全中心开启联网控制、应用保护，界面提示异常


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.18
changelog:
  - Type:update
  - ID:[BUG#147575] 
  - SUG:NA
  - DESC: 147575 【模式切换】strcit模式下，使用setstatus开启网络控制，无法管控
  - add Patch7003: selinux-policy-loongson-netctl.patch


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.19
changelog:
  - Type:update
  - ID:[BUG#150987#151320] 
  - SUG:NA
  - add Patch7004: selinux-policy-ksc.patch
  - DESC: 150987 【管理员分权】PKS开启selinux后，安全中心可信度量模块被隐藏
  - DESC: 151320 【安全中心】【安全内存】PKS三权模式下，无法获取安全内存详细信息


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.20
changelog:
  - Type:update
  - ID:[BUG#163701][BUG#164167][BUG#164345][BUG#151074][BUG#161242][BUG#144179]
  - SUG:NA
  - add Patch7005: selinux-policy-vnc-deploy.patch
  - DESC: 163701 【SM】【selinux】开启selinux,vnc客户端无法连接远程桌面
  - DESC: 164167 【SM】系统开启selinux后一键部署报错
  - DESC: 164345 【SM】【selinux】开启selinux,使用iso virt-install创建/安装虚拟机报错
  - DESC: 151074 【安全模式切换】【前端设置】安全优先切换其他模式时，ARM架构服务器重启失败

  - add Patch7006: security-reinforce-CAD-Screen.patch
  - DESC:bug[161242]【安全加固】使用前端界面进行一键加固时进度卡住不动 
  - DESC:bug[144179]【安全加固】【系统设置】strict模式和custom模式系统ctrl+alt+del组合键禁用，加固失败


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.21
changelog:
  - Type:update
  - ID:[BUG#165348]
  - SUG:NA
  - add Patch7007: selinux-policy-audit.patch
  - DESC:165348 【20230328内网源测试】开启selinux模式后无法安装audit软件包


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.22
changelog:
  - Type:update
  - ID:[BUG#170799]
  - SUG:NA
  - add Patch7008: selinux-policy-reboot.patch
  - DESC:170799 [SP3]开启selinux模式target后重启系统异常


author: hanhuijie<hanhuijie@kylinos.cn> - 3.14.2-76.se.23
changelog:
  - Type:update
  - ID:[BUG#169925][BUG#169921] [BUG#169400]
  - SUG:NA
  - add Patch7009: kysec-adapter-SXF.patch
  - DESC:bug[169925]【安全模式】strict模式下第一次开启exectl报错	深信服源码授权	    
  -      bug[169921]【访问控制】【白名单访问控制】【strict模式】系统初始化白名单后，/etc/kysec/db/whlist.db文件的relabel_status表rebabel字段的值为0
  -      bug[169400]【安全模式切换】【前端设置】安全中心设置中安全优先模式切换成关闭，secadm用户点击重启后未重启


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.24
changelog:
  - Type:update
  - ID:[BUG#183181]
  - SUG:NA
  - add Patch7010: selinux-policy-rpm-decode.patch
  - DESC:183181 【通用安全】【ARM&X86】开启strict模式后，rpm包无法升级


author: tiandongdong<tiandongdong@kylinos.cn> - 3.14.2-76.se.26
changelog:
  - Type:update
  - ID:[BUG#215075][BUG#215052]
  - SUG:NA
  - add Patch7011: selinux-policy-add-unetdns-module.patch
  - DESC: [BUG#215075] 【授权管控】【S2500】系统安全切换至strict或者default模式后，切换tty后未显示授权管控提示语句
  -       [BUG#215052] 【S2500】切换至strict模式后，鼠标右击我的电脑，选择属性会直接闪退


author: Cao Keqian <caokeqian@kylinos.cn> - 243-55.p01.se.01.gfb03
changelog:
  - Type:update
  - ID:[Task#141805]
  - SUG:NA
  - DESC: 添加第二张盘时自动构建本地yum源
    add Patch10006 systemd-add-automount-sdk-iso-rules-script.patch


author: Cao keqian <caokeqian@kylinos.cn> - 243-55.p01.se.01.gfb05
changelog:
  - DESC: 最小安装，基础服务器安装支持自动挂载功能，需要安装udisks2相关的包。
  - add Patch10008 support_minimum_install_automount.patch


author: Cao keqian <caokeqian@kylinos.cn - 243-55.p01.se.01.gfb06
changelog:
  - Type:update
  - ID:[-]
  - SUG:NA
  - DESC: 更新99-sdk-automount.rules中ID_FS_LABEL识别字段为：KY10-S-EXT
    add Patch10009 change-id_fs_label-to-KY10-S-EXT.patch


author: Yinhao <yinhao@kylinos.cn - 243-55.p01.se.01.gfb07
changelog:
  - Type:update
  - ID:[task#355021]
  - SUG:NA
  - DESC: 插入sdk盘后清理缓存
    add Patch10010 systemd-243-sdk-clean-yum-cache.patch


author: chenyun <chenyun@kylinos.cn - 243-55.p01.se.01.gfb10
changelog:
  - Type:update
  - ID:[task#280699]
  - SUG:NA
  - DESC: 扩展盘源地址中添加麒麟标签检测
    add Patch10012 systemd-243-add-sdk-mount-gpgkey.patch


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


author: chenyun<chenyun@kylinos.cn> -p26.gfb02
changelog:
  - Type: bugfix
  - IDi : [Bug#174967]
  - SUG : NA
  - DESC: add ukui-greeter-1.2.1-gfb-password-button.patch
  	非root用户，睁眼图标：显示密码；闭眼图标：显示“.”


author: chenyun<chenyun@kylinos.cn> -p26.gfb03
changelog:
  - Type: bugfix
  - IDi : [Task#156638]
  - SUG : NA
  - DESC: add ukui-greeter-1.2.1-delete-sessionButton.patch
  	登陆界面右上角的“选择桌面环境”按钮去除


author: chenyun<chenyun@kylinos.cn> -p26.gfb04
changelog:
  - Type: bugfix
  - IDi : [Bug#173635]
  - SUG : NA
  - DESC: add ukui-greeter-1.2.1-gfb-enter-password-display.patch
          密码登陆界面，不输入密码直接回车有密码错误显示
          修改changelog


author: chenyun<chenyun@kylinos.cn> -p26.gfb06
changelog:
  - Type: bugfix
  - ID : [Bug#174967]
  - SUG : NA
  - DESC: add ukui-greeter-1.2.1-kylin-the-eye-on-the-right-side-of-the-password-input-box-disappears-when-logging-in-to-the-system.patch
          登陆界面从root用户切换到普通用户，再切回root用户后无密码眼睛图标问题


author: caokeqian <caokeqian@kylinos.cn> - p26.gfb07
changelog:
  - Type:bugfix
  - ID:[Bug#200423]
  - SUG:NA
  - DESC: add patch31:fix-greeter-page-capslock-reverse.patch
  	修复问题：登录界面打开大写，返回用户界面关闭大写，再进入登录界面大写锁定标记
  	仍然打开，与实际输入大小写相反。


author: yinhao <yinhao@kylinos.cn> - p26.gfb08
changelog:
  - Type:bugfix
  - ID:[Bug#187873]
  - SUG:NA
  - DESC: 登录界面，限制用户名输入框，不允许输入非法字符
  - Add Patches: add patch31:ukui-greeter-1.2.1-login-characters.patch


author: chenyun <chenyun@kylinos.cn> - p26.gfb09
changelog:
  - Type:bugfix
  - ID:[Bug#211908]
  - SUG:NA
  - DESC: 登录界面，扩大信息显示框
  - Add Patches: add patch32:ukui-greeter-1.2.1-expand-display-message-box.patch


author: dingcaokai <dingcaokai@kylinos.cn> - p26.gfb10
changelog:
  - Type:bugfix
  - ID:[Bug#221538]
  - SUG:NA
  - DESC: 登录界面，扩大信息显示框
  - Add Patches: ukui-greeter-1.2.1-always-clone-mode-with-more-than-two-screens.patch


author: zhangyu <zhangyu@kylinos.cn> - p26.gfb11
changelog:
  - Type:bugfix
  - ID:[Task#339343]
  - SUG:NA
  - DESC: 系统登录用户名不能为空
  - Add Patches: ukui-greeter-1.2.1-Do_not_react_to_empty_input_fields.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 2:9.0-14.p01
changelog:
  - Type:update
  - ID:[BUG#101652]
  - SUG:NA
  - DESC:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题
  -      Task 152726: 升级vim版本至9.0-14后，合入安全部门修改，from wanghao2


author: leechm <liqimei@kylinos.cn> -2.2.1-2.16.gfb03
changelog:
  - add 0001-delete-distro-for-cdrom-remote-connection.patch
  - add 0001-delete-ui-storage-diskpool-create.patch


author: leechm <liqimei@kylinos.cn> -2.2.1-2.16.gfb05
changelog:
  - bug https://172.17.50.104/bug-view-174473.html
  - add 0001-delete-process-bar-when-virt-clone.patch


author: caokeqian <caokeqian@kylinos.cn> - 2.2.1-2.16.gfb07
changelog:
  - Type:bugfix
  - ID:175884
  - SUG:NA
  - DESC: Lack of add-memory-balloon-function.patch will lead to the v4
  -	vm machine's lightdm.service failed problem.
  -	Regenerated it from gfb01.


author: chenyun<chenyun@kylinos.cn> -0:2.7.1-39.gfb01
changelog:
  - Type: TASK
  - ID: [TASK#404285]
  - SUG: NA
  - DESC: add patch2:xalan-j2-change-sensitive-characters.patch


author: peijiankang<peijiankang@kylinos.cn> - 2.30-2.p02
changelog:
  - Type: update
  - ID  : [Task#165843]
  - SUG : NA
  - DESC: add patch:xkeyboard-config-2.30-kylin-delete-sensitive-words.patch


author: chenyun<chenyun@kylinos.cn> - 2.30-2.p02.gfb01
changelog:
  - Type: update
  - ID  : [Task#404285]
  - SUG : NA
  - DESC: add patch:xkeyboard-config-2.30-kylin-delete-sensitive-words-1.patch


author: Zhenneng Li <lizhenneng@kylinos.cn> - 1.20.8-10.p06
changelog:
  - Type: update
  - ID:   [TASK#105748]
  - SUG:  NA
  - DESC: Delete -D__KYLIN_FT1500A_DISPLAY__ for CFLAGS/CXXFLAGS


author: xurui <xurui@kylinos.cn> - 1.20.8-3.p04
changelog:
  - Id:CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344
  - SUG:NA
  - DESC:fix CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344


author: Chen Yushan <chenyushan@kylinos.cn> - 1.20.8-3.p09.gfb01
changelog:
  - Type: update
  - ID:   [TASK#193779]
  - DESC: add 0004-xorg-server-1.20.8-e2000.patch
  - to fix the black screen issue in e2000(Provided by phytium)
  - add 0005-KYLIN-add-ljmcore-driver-support.patch


author: Chen Yushan <chenyushan@kylinos.cn> - 1.20.8-3.p09.gfb02
changelog:
  - Type: update
  - ID:   [TASK#213143]
  - DESC: del 0004-xorg-server-1.20.8-e2000.patch,
  - add 0006-xorg-ast-ft-bmc-5000c.patch to
  - fix the black screen issue in e2000 or ast(Provided by phytium)


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}12
changelog:
  - Type:bugfix
  - ID  :[bug#117856]
  - SUG :NA
  - DESC:add Patch:0001-yhkylin-backup-auto-and-backup-auto-efi-add-help.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}13
changelog:
  - Type:bugfix
  - ID  :[bug#117776]
  - SUG :fix bakcup-daemon no help 
  - DESC:add Patch:0001-fix-backup-daemon-help.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}14
changelog:
  - Type:bugfix
  - ID  :[bug#134599]
  - SUG :add patch 0001-remove-space-fix-134599.patch
  - DESC:fix Click "Backup Management" to exit automatically


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}15
changelog:
  - Type:bugfix
  - ID  :153868
  - SUG :NA
  - DESC:remove 0001-remove-debian-directory.patch and repach tar.gz
               add patch:0001-kylin-remove-some-annotating-code.patch


author: yinhao <yinhao@kylinos.cn> - 4.0.12kord1{?ns_dist}16
changelog:
  - Type:bugfix
  - ID  :[bug#]173512
  - SUG :add patch yhkylin-backup-tools-4.0.12-fix-error-size.patch
  - DESC:fix <0.01GB problem


author: yinhao <yinhao@kylinos.cn> - 4.0.12kord1{?ns_dist}17
changelog:
  - Type:bugfix
  - ID  :[bug#]212049
  - SUG :add patch yhkylin-backup-tools-4.0.12-mount-backup.patch
  - DESC:自动挂载backup分区


