# changelog

author: songliyang <songliyang@kylinos.cn> - 1.26.2-12.p03
changelog:
  - Type:TASK
  - ID:163317
  - SUG:https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commits/main?search=all-mac
  - DESC:add Patch11 to support promisc mode


author: songliyang <songliyang@kylinos.cn> - 1.26.2-12.p05
changelog:
  - Type:TASK
  - ID:[TASK#163317]
  - SUG:NA
  - DESC: fix the date of p03 changelog to solve a problem that don't show earlier changelog on koji
          p04 version is already used by v10-sp3-custom-gazb tag, use p05 instead


author: zhangyulong <zhangyulong@kylinos.com> - 1.26.2-13.p05
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the issue that NetworkManager service does not self-heal when the dbus service is abnormal


author: kongdelin <kongdelin@kylinos.com> -1.26.2-13.p05.gfb01
changelog:
  - Type:TASK
  - ID:[TASK#163317]
  - SUG:NA
  - DESC: 同步民口支持配置为混杂模式版本，并把kylin patch： fix_show_nmcli.patch和set_default_autoconnect.patch合进来


author: Yin Hao <yinhao@kylinos.cn> - 33.19-31.p16.gfb05
changelog:
  - Type: NA 
  - ID: BUG#181073
  - SUG: NA
  - DESC: add anaconda timeout 10s
  - Add Patches: anaconda-33.19-kylin-0031-add-timeoutsec.patch


author: chenyun <chenyun@kylinos.cn> - 33.19-31.p16.gfb06
changelog:
  - Type: NA 
  - ID: BUG#181682
  - SUG: NA
  - DESC: 安装界面用户密码时提示8位及以上
  - Add Patches: anaconda-33.19-kylin-0032-change-password-reminding.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb07
changelog:
  - Type: NA
  - ID: TASK#170768
  - SUG: NA
  - DESC: ext4文件系统快速安装
  - Add Patches: anaconda-33.19-kylin-0033-exploy-ext4.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb10
changelog:
  - Type: NA
  - ID: BUG#211782
  - SUG: NA
  - DESC: 添加grub备份还原选项 
          解决“安装目标位置”界面显示该U盘为可选项的问题
          解决anaconda中版本显示不全的问题
          解决备份还原时遇到防篡改功能无法还原的问题
  - Add Patches: anaconda-33.19-kylin-1001-add-backup.patch
                 anaconda-33.19-kylin-1006-hide-install-media.patch
                 anaconda-33.19-kylin-1005-wrong-version.patch
                 anaconda-33.19-kylin-1004-recovery-failed.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb11
changelog:
  - Type: bugfix
  - ID: BUG#213214
  - SUG: NA
  - DESC: 安装时手动选择两个硬盘成功后，之后再重新安装系统选择单一
          的硬盘出现数据互通无法选择
  - Add Patches: anaconda-33.19-kylin-1007-select-single-disk.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb13
changelog:
  - Type: bugfix
  - ID: BUG#215825
  - SUG: NA
  - DESC: 修复手动安装删除分区报错问题
  - Add Patches: anaconda-33.19-kylin-1008-custom-install-err.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb14
changelog:
  - Type: bugfix
  - ID: BUG#217054
  - SUG: NA
  - DESC: 分屏安装时采用复制屏
  - Add Patches: anaconda-33.19-kylin-1009-set-the-default-display-as-clone-screen.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb15
changelog:
  - Type: bugfix
  - ID: BUG#215856
  - SUG: NA
  - DESC: 单硬盘安装双系统，GRUB菜单只显示单系统启动项
  - Add Patches: anaconda-33.19-kylin-1010-double-system-grub.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb16
changelog:
  - Type: update
  - ID: TASK#207207
  - SUG: NA
  - DESC: 修改swap分区的分区方案
  - Add Patches:anaconda-33.19-kylin-1011-change-swap-method.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb19
changelog:
  - Type: update
  - ID: task#433317
  - SUG: NA
  - DESC: 合并民口补丁： bug#187734 bug#191289 bug#221252
  - Add Patches: anaconda-33.19-kylin-0033-fix-translation-for-network-and-hostname-spoke.patch
                 backport-dracut-handle-compressed-kernel-modules.patch
                 backport-network-use-separate-main-conext-for-NM-client-in-threads.patch
                 anaconda-33.19-kylin-0037-set-environment-to-en_US.UTF-8-when-falling-back-to-text-mode.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-31.p16.gfb20
changelog:
  - Type:bugfix
  - ID:BUG#186888
  - SUG:NA
  - DESC:Solve the problem that sometimes the circular loading progress bar does not rotate


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb21
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 同步ghost patch：
          anaconda-33.19-kylin-1013-kylin-os-installer.patch
          anaconda-33.19-kylin-1014-add-ghost-install.patch
          anaconda-33.19-kylin-1016-ghost-size.patch
          anaconda-33.19-kylin-1017-ghost-sig.patch
          anaconda-33.19-kylin-1018-ghost-verify.patch
          anaconda-33.19-kylin-1019-nfs-ghost.patch
          anaconda-33.19-kylin-1020-ghost-source.patch
          anaconda-33.19-kylin-1021-update-shortcut-key.patch
          anaconda-33.19-kylin-1022-ghost-tmp.patch
          anaconda-33.19-kylin-1023-automated-ghost.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: 解决安装识别kyimg出现空值报错的问题
  - Add Patches: anaconda-33.19-kylin-1024-kyimg-error.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb23
changelog:
  - Type:bugfix
  - ID:[bug#353336][bug#353265]
  - SUG:NA
  - DESC: 解决ghost安装无法正确还原LICENSE和kyinfo的问题
          解决initial-setup崩溃的问题
  - Add Patches: anaconda-33.19-kylin-1025-kyinfo-and-initial-error.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb24
changelog:
  - Type:bugfix
  - ID:[bug#355679]
  - SUG:NA
  - DESC: 解决pxe安装时在进入安装界面前报错的问题
  - Add Patches: anaconda-33.19-kylin-1026-ghost-error.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb25
changelog:
  - Type:bugfix
  - ID:[bug#358857][bug#357091][bug#358927][bug#361897][bug#353162]
  - SUG:NA
  - DESC: 解决安装界面和控制面板时间制不一致的问题
          解决ghost镜像快捷键在二次进入时消失的问题
          解决选择ghost镜像并设置安装目的地后。二次进入安装源退出报错问题
          修改ghost还原空间不足时的提示信息，删除修改软件选择的提示语
          解决进入安装前有报错信息的问题，停止加载不必要的模块
  - Add Patches: anaconda-33.19-kylin-1027-ghost-shortcut.patch
                 anaconda-33.19-kylin-1028-time-set.patch
                 anaconda-33.19-kylin-1029-ghost-and-modprobe-info.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb26
changelog:
  - Type:bugfix
  - ID:[bug#358439]
  - SUG:NA
  - DESC: ghost安装源失败时，设置安装目的地会默认跳转安装源，且重设目的地配置。
  - Add Patch: anaconda-33.19-kylin-1030-reset-storage-if-ghost-error.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb27
changelog:
  - Type:bugfix
  - ID:[bug#371919]
  - SUG:NA
  - DESC: 还原的系统手册打开备份还原工具出错
  - Add Patch: anaconda-33.19-kylin-1031-write-bootinfo.patch


author: yinhao <yinhao@kylinos.cn> - 33.19-31.p16.gfb28
changelog:
  - Type:bugfix
  - ID:[bug#358927]
  - SUG:NA
  - DESC: 选择Ghost 镜像并设置安装目的地后，二次进入安装源保存退出时主界面报错
  - Add Patch: anaconda-33.19-kylin-1032-hide-partition.patch


author: liujingyuan<liujingyuan@kylinos.cn> - 9100h-39.p01
changelog:
  Transplant sensitive information components and patch 0001-revise-expression-of-sensitive-words.patch


author: wanghao <wanghao2@kylinos.cn>-2.13.3-0.2.p03
changelog:
  - Type: bugfix
  - ID: [BUG#174866]
  - SUG:NA
  - DESC: 修复使用systemctl查看apparmor状态显示failed的bug
  -	修复模式设置时报错的问题
  -	  add patch: apparmor-fix-systemctl-get-status-failed-bug.patch


author: douyan <douyan@kylinos.cn> - 1.17.0-3.p10
changelog:
  - Type: update
  - ID:   [TASK#187126]
  - SUG:  NA
  - DESC: add atril-1.17.0-kylin-add-zh_HK-translation.patch


author: guochao <guochao@kylinos.cn> - 2.34-19.p02
changelog:
  - Type:CVE
  - ID:CVE-2022-48064 CVE-2022-47011 CVE-2022-47008 CVE-2021-46174 CVE-2022-47696
  - SUG:NA
  - DESC:Fix CVE-2022-48064 CVE-2022-47011 CVE-2022-47008 CVE-2021-46174 CVE-2022-47696


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.35.v2207
changelog:
  - USB: serial: pl2303: fix line-speed handling on newer chips (Johan Hovold) [bug:211186]
  - USB: serial: pl2303: add support for PL2303HXN (Charles Yeh) [bug:211186]
  - USB: serial: pl2303: fix tranceiver suspend mode (Johan Hovold) [bug:211186]
  - USB: serial: pl2303: fix non-supported xon/xoff (Johan Hovold) [bug:211186]
  - perf: Fix perf_event_validate_size() (Peter Zijlstra) [task:199635] {CVE-2023-6931}
  - loop: loop_set_status_from_info() check before assignment (Zhong Jinghua) [task:192988]
  - loop: Check for overflow while configuring loop (Siddh Raman Pant) [task:192988]
  - loop: Factor out configuring loop from status (Martijn Coenen) [task:192988]
  - Revert "loop: Check for overflow while configuring loop" (zhanggenjian) [task:192988]
  - loop: properly observe rotational flag of underlying device (Holger Hoffstätte) [task:192988]
  - loop: Refactor loop_set_status() size calculation (Martijn Coenen) [task:192988]
  - loop: Factor out setting loop device size (Martijn Coenen) [task:192988]
  - loop: Remove sector_t truncation checks (Martijn Coenen) [task:192988]
  - loop: Call loop_config_discard() only after new config is applied (Martijn Coenen) [task:192988]
  - Revert "loop: loop_set_status_from_info() check before assignment" (zhanggenjian) [task:192988]
  - tcm: support tpmrm function of ax99100_spi interface TCM module (jiangxiujie) [task:198010]
  - LoongArch: Clean up play_dead code (Yangyinglu) [task:198660]
  - LoongArch:LSVZ: remove uncached_acc CSR emulation (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: rename gcsr_readq with gcsr_read (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: rename wait instruction with idle (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: remove unused variable (Mao Bibo) [task:118969]
  - LoongArch: delete struct boot_mem_map (liuyun) [task:198660]
  - LoongArch:LSVZ: set guestid variable at percpu area (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: rename lvz_trap_handle_xxx with _kvm_handle_xxx (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: kvm code cleanup v2 (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: kvm code cleanup on mm (Mao Bibo) [task:198660]
  - LoongArch:LSVZ: kvm code cleanup (Mao Bibo) [task:198660]
  - PCI: Add ACS quirk for Wangxun NICs (Mengyuan Lou) [task:195929]
  - PCI: Unify ACS quirk desired vs provided checking (Bjorn Helgaas) [task:195929]
  - PCI: Add ACS quirk for iProc PAXB (Abhinav Ratna) [task:195929]
  - PCI: Make ACS quirk implementations more uniform (Bjorn Helgaas) [task:195929]
  - rpmbuild: Choose the algorithm for module signing based on the config (chengang) [task:197392]
  - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (Sharath Srinivasan) [task:198453] {CVE-2024-23849}
  - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() (Tuo Li) [task:198457] {CVE-2024-24855}
  - dm: limit the number of targets and parameter size area (Mikulas Patocka) [task:198455] {CVE-2023-52429}
  - dm ioctl: log an error if the ioctl structure is corrupted (Mikulas Patocka) [task:198455]
  - jfs: fix log->bdev_handle null ptr deref in lbmStartIO (Lizhi Xu) [task:196809]
  - scsi: fcoe: pass in fcoe_rport structure instead of fc_rport_priv (Hannes Reinecke) [task:197881]
  - scsi: libfc: Whitespace cleanup in libfc.h (Hannes Reinecke) [task:197881]
  - netfilter: nf_tables: Reject tables of unsupported family (Phil Sutter) [task:196095] {CVE-2023-6040}
  - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (Dan Carpenter) [task:196363] {CVE-2024-0607}
  - security/kysec: Resolve abnormal KYSEC audit log issues (chengang) [bug:210410]
  - block: fix NULL pointer dereference in account statistics with IDE (Logan Gunthorpe) [task:196111]
  - block: account statistics for passthrough requests (Logan Gunthorpe) [task:196111]
  - machine_t: Limit specific architecture judgment functions (Jackie Liu)
  - LoongArch: hugepage table replace tlb (liuyun) [task:198242]
  - ZHAOXIN: Update PMU uncore dump bug patch (leoliu-oc) [bug:203040]
  - ZHAOXIN: Update PMU support for Zhaoxin KX-7000 (leoliu-oc) [bug:203040]
  - ZHAOXIN: Fix Zhaoxin PMU uncore kdump fail bug (leoliu-oc) [bug:203040]
  - arch/x86: avoid redefinition issues (liwanwu) [bug:203040]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.36.v2207
changelog:
  - package: Fix packing problem when building rpm packages (Jiangshan Yi) [task:171572, task:201386]
  - rpmbuild: support srpm when need (Jackie Liu) [task:201386]
  - net: openvswitch: fix race on port output (Felix Huettner) [task:202729]
  - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201794] {CVE-2020-36782}
  - net: sched: sch_teql: fix null-pointer dereference (Pavel Tikhomirov) [task:215813]
  - mm: swapoff: shmem_unuse() stop eviction without igrab() (Hugh Dickins) [task:199161]
  - mm: swapoff: take notice of completion sooner (Hugh Dickins) [task:199161]
  - mm: swapoff: remove too limiting SWAP_UNUSE_MAX_TRIES (Hugh Dickins) [task:199161]
  - mm: swapoff: shmem_find_swap_entries() filter out other types (Hugh Dickins) [task:199161]
  - mm: swap: properly update readahead statistics in unuse_pte_range() (Andrea Righi) [task:199161]
  - mm: rid swapoff of quadratic complexity (Vineeth Remanan Pillai) [task:199161]
  - mm: refactor swap-in logic out of shmem_getpage_gfp (Vineeth Remanan Pillai) [task:199161]
  - shmem: Convert shmem_add_to_page_cache to XArray (Matthew Wilcox) [task:199161]
  - shmem: Convert find_swap_entry to XArray (Matthew Wilcox) [task:199161]
  - shmem: Convert shmem_confirm_swap to XArray (Matthew Wilcox) [task:199161]
  - shmem: Convert shmem_radix_tree_replace to XArray (Matthew Wilcox) [task:199161]
  - LoongArch:modify vfat and nls936 config to y (liubaolin) [task:193507]
  - LoongArch:LSVZ: disable hugepage during migration process (Bibo Mao) [task:198660]
  - LoongArch: LSVZ: Fix huge page check issue (liubaolin) [task:198660]
  - LoongArch: Flush the cache of PTW when creating new page table. (liubaolin) [task:198660]
  - LoongArch: Introduce hardware page table walk (liubaolin) [task:198660]
  - irqchip/loongarch: Improve extioi code for guest cpu (liubaolin) [task:198660]
  - LoongArch: Fix initrd parsing in the small fdt method (Youling Tang) [task:198660]
  - LoongArch: Fix the initrd parsing on the command line (yangqiming) [task:198660]
  - LoongArch: Efistub support V40 interface (yangqiming) [task:198660]
  - LoongArch: Fix kexec operation failed to resolve initrd on V4.0 interface (Youling Tang) [task:198660]
  - LoongArch: Support initrd passing by systemtable (Jianmin Lv) [task:198660]
  - irqchip: irq-loongarch-extioi: fix code error (Baoqi Zhang) [task:198660]
  - irqchip: irq-loongarch-extioi: update dt parameters (Liu Peibao) [task:198660]
  - loongarch: fix enable_pcie_wakeup() called twice (mengyingkun) [task:198660]
  - LoongArch: Rename csr register Help functions (Yanteng Si) [task:198660]
  - x86/alternatives: add missing insn.h include (Dave Hansen) [task:198393]
  - x86/alternatives: Sync bp_patching update for avoiding NULL pointer exception (Masami Hiramatsu) [task:198393]
  - x86/kprobes: Fix ordering while text-patching (Peter Zijlstra) [task:198393]
  - x86/alternatives: Add and use text_gen_insn() helper (Peter Zijlstra) [task:198393]
  - x86/alternatives, jump_label: Provide better text_poke() batching interface (Peter Zijlstra) [task:198393]
  - x86/alternatives: Teach text_poke_bp() to emulate instructions (Peter Zijlstra) [task:198393]
  - x86/jump_label: Make tp_vec_nr static (YueHaibing) [task:198393]
  - x86/jump_label: Batch jump label updates (Daniel Bristot de Oliveira) [task:198393]
  - x86/jump_label: Add a __jump_label_set_jump_code() helper (Daniel Bristot de Oliveira) [task:198393]
  - x86/alternative: Batch of patch operations (Daniel Bristot de Oliveira) [task:198393]
  - x86/kprobes: Prohibit probing on functions before kprobe_int3_handler() (Masami Hiramatsu) [task:198393]
  - rcu: Refactor rcu_{nmi,irq}_{enter,exit}() (Byungchul Park) [task:198393]
  - x86/alternatives: Remove the return value of text_poke_*() (Nadav Amit) [task:198393]
  - x86/jump-label: Remove support for custom text poker (Nadav Amit) [task:198393]
  - x86/jump_label: Use text_poke_early() during early init (Nadav Amit) [task:198393]
  - x86/jump_label: Switch to jump_entry accessors (Ard Biesheuvel) [task:198393]
  - jump_label: Implement generic support for relative references (Ard Biesheuvel) [task:198393]
  - jump_label: Abstract jump_entry member accessors (Ard Biesheuvel) [task:198393]
  - KVM: arm64: pmu: Reset sample period on overflow handling (Marc Zyngier) [task:197911]
  - KVM: arm/arm64: Remove pmc->bitmask (Andrew Murray) [task:197911]
  - kylin/gmjstcm:Adapting TCM1.0 to x86 (wudandan) [task:195669]
  - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (Hao Sun) [task:200744] {CVE-2024-26589}
  - crypto: enable SM3_GENERIC configs (chengang) [bug:215175]
  - vhost_net: revert upend_idx only on retriable error (Andrey Smetanin) [task:201250]
  - netfilter: nf_tables: don't skip expired elements during walk (Florian Westphal) [task:179882] {CVE-2023-4244}
  - netfilter: nft_set_rbtree: Add missing expired checks (Phil Sutter) [task:179882]
  - EDAC/thunderx: Fix possible out-of-bounds string access (Arnd Bergmann) [task:200669] {CVE-2023-52464}
  - blk-mq: fix IO hang from sbitmap wakeup race (Ming Lei)
  - Makefile: add mips and loongarch SRCARCH (Li ZhiGang) [task:199827]
  - security/ima&evm: change default hash algorithm to sha256 (liuqi) [task:192131]
  - security/ima&evm: fix xattr check error (liuqi) [task:192131]
  - f2fs: explicitly null-terminate the xattr list (Eric Biggers) [task:200626] {CVE-2023-52436}
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Zhipeng Lu) [task:200671] {CVE-2023-52469}
  - net: qualcomm: rmnet: fix global oob in rmnet_policy (Lin Ma) [task:200745] {CVE-2024-26597}
  - sched/membarrier: reduce the ability to hammer on sys_membarrier (Linus Torvalds) [task:200749] {CVE-2024-26602}
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Tony Lindgren) [task:200752] {CVE-2024-26600}
  - binder: signal epoll threads of self-work (Carlos Llamas) [task:200750] {CVE-2024-26606}
  - CIFS: Fix retry mid list corruption on reconnects (Pavel Shilovsky) [task:197803]
  - net: devlink: skip info_get op call if it is not defined in dumpit (Jiri Pirko) [task:199476]
  - Revert "optimize: rm redundant code in kysec fpro" (penghuaihe) [bug:207104]
  - Bluetooth: Fix atomicity violation in {min,max}_key_size_set (Gui-Dong Han) [task:199813] {CVE-2024-24860}
  - Bluetooth: Move {min,max}_key_size debugfs into hci_debugfs_create_le (Marcel Holtmann) [task:199813]
  - Bluetooth: Add support for LE ping feature (Spoorthi Ravishankar Koppad) [task:199813]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.37.v2207
changelog:
  - scripts: add a script to calculate tasks (Zhengyuan Liu)
  - Revert "GRT: net: fix some warning by gcc" (zhulei) [task:215796]
  - clk: sunxi-ng: Unregister clocks/resets when unbinding (Samuel Holland) [task:212525, task:215462] {CVE-2021-47205}
  - Revert "clk: sunxi-ng: add support for the Allwinner A100 CCU" (Jiangshan Yi) [task:215462]
  - Revert "clk: sunxi-ng: Add support for the Allwinner H616 CCU" (Jiangshan Yi) [task:215462]
  - Revert "clk: sunxi-ng: Unregister clocks/resets when unbinding" (Jiangshan Yi) [task:215462]
  - clk: Add of_clk_hw_register() API for early clk drivers (Stephen Boyd) [task:212789, task:215462]
  - clk: Prepare for clk registration API that uses DT nodes (Stephen Boyd) [task:212789, task:215462]
  - GRT: net: fix some warning by gcc (zhulei) [task:215796]
  - security/kysec: Fixed kernel compilation security warnings (mengdehui) [task:215795]
  - security/kysec: fix some code still run when pcr closed (mengdehui) [bug:217795]
  - securirty/kysec: fix dentry info mem leak (mengdehui) [bug:217795]
  - security/kysec: Add mount_lock when traversing mnt list (mengdehui) [bug:217795]
  - security/kysec: Add fault tolerance when sb_sec is NULL (mengdehui) [bug:217795]
  - NETSWIFT: txgbe: fix some warning by gcc (zhulei) [task:215796]
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Kunwu Chan) [task:207382] {CVE-2023-52607}
  - powerpc/mm: fix a warning when a cache is common to PGD and hugepages (Christophe Leroy) [task:207382] {CVE-2023-52607}
  - powerpc/mm: replace hugetlb_cache by PGT_CACHE(PTE_T_ORDER) (Christophe Leroy) [task:207382] {CVE-2023-52607}
  - Revert "i40e: The state of phy may not be correct during power-on" (xiaolinkui) [task:210775]
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Duoming Zhou) [task:209227, task:214895] {CVE-2024-26654}
  - ALSA: sh: Fix compile warning wrt const (Takashi Iwai) [task:155707, task:214895]
  - ALSA: aica: Fix a long-time build breakage (Takashi Iwai) [task:153627, task:214895]
  - LoongArch:adjust the calc method of number of packages. (wanghongliang) [task:209781]
  - LoongArch:irqchip/loongarch-extioi:Fix ext irq route error. (wanghongliang) [task:209781]
  - cpufreq: loongson3-acpi: Initialize the value of policy->cur (mengyingkun) [task:209781]
  - ipmi: ls2k500 kcs ipmi add nolock version support. (Chong Qiao) [task:209781]
  - irqchip/loongarch-extioi: Fix ext irq route fail when some cpus offline (Juxin Gao) [task:209781]
  - OPENEULER: SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers (zhanglei) [task:205210]
  - arm64/config: CONFIG_PHYTIUM_MBOX=m (chizhiling) [bug:221940]
  - OPENEULER: mailbox: add phytium mailbox driver (Chen Ziqiang) [bug:221940]
  - scsi: qedf: Add pointer checks in qedf_update_link_speed() (Javed Hasan) [task:206931] {CVE-2021-47077}
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (Chun-Yi Lee) [task:194976] {CVE-2023-6270}
  - thermal: Fix NULL pointer dereferences in of_thermal_ functions (Subbaraman Narayanamurthy) [task:212533] {CVE-2021-47202}
  - tracing/trigger: Fix to return error if failed to alloc snapshot (Masami Hiramatsu (Google)) [task:212517] {CVE-2024-26920}
  - x86, relocs: Ignore relocations in .notes section (Kees Cook) [task:212412] {CVE-2024-26816}
  - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume (Omar Sandoval) [task:209259] {CVE-2024-26644}
  - PM / devfreq: Synchronize devfreq_monitor_[start/stop] (Mukesh Ojha) [task:209249] {CVE-2023-52635}
  - nilfs2: fix potential bug in end_buffer_async_write (Ryusuke Konishi) [task:210283] {CVE-2024-26685}
  - aoe: avoid potential deadlock at set_capacity (Maksim Kiselev) [task:210627] {CVE-2024-26775}
  - clk: sunxi-ng: Unregister clocks/resets when unbinding (Samuel Holland) [task:212525] {CVE-2021-47205}
  - clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock (Icenowy Zheng) [task:155707]
  - clk: sunxi-ng: Add support for the Allwinner H616 CCU (Andre Przywara) [task:212525]
  - clk: sunxi-ng: add support for the Allwinner A100 CCU (Yangtao Li) [task:212525]
  - clk: sunxi: Don't call clk_hw_get_name() on a hw that isn't registered (Stephen Boyd) [task:212525]
  - clk: sunxi-ng: v3s: add Allwinner V3 support (Icenowy Zheng) [task:212525]
  - clk: sunxi-ng: v3s: add the missing PLL_DDR1 (Icenowy Zheng) [task:153627]
  - clk: sunxi-ng: v3s: Use local parent references for CLK_FIXED_FACTOR (Chen-Yu Tsai) [task:212525]
  - clk: sunxi-ng: switch to of_clk_hw_register() for registering clks (Chen-Yu Tsai) [task:212525]
  - clk: sunxi-ng: h6: Preset hdmi-cec clock parent (Jernej Skrabec) [task:212525]
  - clk: sunxi-ng: f1c100s: fix USB PHY gate bit offset (Icenowy Zheng) [task:212525]
  - clk: sunxi-ng: add support for suniv F1C100s SoC (Mesih Kilinc) [task:212525]
  - x86/alternatives: Disable KASAN in apply_alternatives() (Kirill A. Shutemov) [task:205153] {CVE-2023-52504}
  - binder: fix race between mmput() and do_exit() (Carlos Llamas) [task:207402] {CVE-2023-52609}
  - reiserfs: Avoid touching renamed directory if parent does not change (Jan Kara) [task:207282] {CVE-2023-52591}
  - bnxt_en: Fix RX consumer index logic in the error path. (Michael Chan) [task:206925] {CVE-2021-47015}
  - bnxt_en: Reduce unnecessary message log during RX errors. (Michael Chan) [task:206925]
  - md: don't clear MD_RECOVERY_FROZEN for new dm-raid until resume (Yu Kuai) [task:210625]
  - md: Don't ignore suspended array in md_check_recovery() (Yu Kuai) [task:210625] {CVE-2024-26758}
  - vfio/pci: Lock external INTx masking ops (Alex Williamson) [task:210634] {CVE-2024-26810}
  - rt2x00: initialize last_reset (Stanislaw Gruszka) [task:207285]
  - rt2x00: clear IV's on start to fix AP mode regression (Stanislaw Gruszka) [task:207285] {CVE-2023-52595}
  - rt2x00: add restart hw (Stanislaw Gruszka) [task:207285]
  - rt2800: add pre_reset_hw callback (Stanislaw Gruszka) [task:207285]
  - rt2800: initial watchdog implementation (Stanislaw Gruszka) [task:207285]
  - rt2800: add helpers for reading dma done index (Stanislaw Gruszka) [task:207285]
  - rt2x00: allow to specify watchdog interval (Stanislaw Gruszka) [task:207285]
  - rt2x00: use different txstatus timeouts when flushing (Stanislaw Gruszka) [task:207285]
  - rt2x00: do not check for txstatus timeout every time on tasklet (Stanislaw Gruszka) [task:207285]
  - rt2800mmio: use txdone/txstatus routines from lib (Stanislaw Gruszka) [task:207285]
  - rt2800: move usb specific txdone/txstatus routines to rt2800lib (Stanislaw Gruszka) [task:207285]
  - net/smc: remove device from smcd_dev_list after failed device_add() (Julian Wiedmann) [task:207216] {CVE-2021-47143}
  - KVM: Destroy target device if coalesced MMIO unregistration fails (Sean Christopherson) [task:206929] {CVE-2021-47060}
  - KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (Kefeng Wang) [task:206929] {CVE-2021-47060}
  - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed (Sean Christopherson) [task:206929] {CVE-2021-47060}
  - ubi: Check for too small LEB size in VTBL code (Richard Weinberger) [task:212058] {CVE-2024-25739}
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation (Bastien Nocera) [task:212057] {CVE-2024-24859}
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (Yuxuan Hu) [task:212059] {CVE-2024-22099}
  - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (Ziqi Zhao) [task:210651] {CVE-2023-52638}
  - net: rds: use maybe_get_net() when acquiring refcount on TCP sockets (Tetsuo Handa) [task:209413]
  - tee: optee: Fix incorrect page free bug (Sumit Garg) [task:206938] {CVE-2021-47087}
  - asix: fix wrong return value in asix_check_host_enable() (Pavel Skripkin) [task:206939]
  - asix: fix uninit-value in asix_mdio_read() (Pavel Skripkin) [task:206939] {CVE-2021-47101}
  - net: asix: fix uninit value bugs (Pavel Skripkin) [task:206939]
  - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command (Michal Grzedzicki) [task:205228] {CVE-2023-52500}
  - x86/kvm: Do not try to disable kvmclock if it was not enabled (Kirill A. Shutemov) [task:207214]
  - x86/kvm: Disable kvmclock on all CPUs on shutdown (Vitaly Kuznetsov) [task:207214] {CVE-2021-47110}
  - x86/kvm: Teardown PV features on boot CPU as well (Vitaly Kuznetsov) [task:206940] {CVE-2021-47112}
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Xingyuan Mo) [task:210392] {CVE-2023-7042}
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Baokun Li) [task:210360] {CVE-2024-26773}
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Baokun Li) [task:210642] {CVE-2024-26772}
  - ext4: fix double-free of blocks due to wrong extents moved_len (Baokun Li) [task:210641] {CVE-2024-26704}
  - RDMA/srpt: Support specifying the srpt_service_guid parameter (Bart Van Assche) [task:210645] {CVE-2024-26744}
  - net: ip_tunnel: prevent perpetual headroom growth (Florian Westphal) [task:210646] {CVE-2024-26804}
  - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (Oleksij Rempel) [task:210648] {CVE-2023-52637}
  - can: j1939: j1939_sk_init(): set SOCK_RCU_FREE to call sk_destruct() after RCU is done (Oleksij Rempel) [task:210648]
  - fbdev: savage: Error out if pixclock equals zero (Fullway Wang) [task:210633] {CVE-2024-26778}
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Zach O'Keefe) [task:210632] {CVE-2024-26720}
  - wifi: mac80211: fix race condition on enabling fast-xmit (Felix Fietkau) [task:210626] {CVE-2024-26779}
  - dmaengine: ti: edma: Add some null pointer checks to the edma_probe (Kunwu Chan) [task:210482] {CVE-2024-26771}
  - btrfs: dev-replace: properly validate device names (David Sterba) [task:210624] {CVE-2024-26791}
  - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (Ryosuke Yasuoka) [task:210464] {CVE-2024-26805}
  - fbdev: sis: Error out if pixclock equals zero (Fullway Wang) [task:210465] {CVE-2024-26777}
  - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [task:210432] {CVE-2024-26743}
  - Bluetooth: Avoid potential use-after-free in hci_error_reset (Ying Hsu) [task:210462] {CVE-2024-26801}
  - ipv6: sr: fix possible use-after-free and null-ptr-deref (Vasiliy Kovalev) [task:210463] {CVE-2024-26735}
  - gtp: fix use-after-free and null-ptr-deref in gtp_newlink() (Alexander Ofitserov) [task:210471] {CVE-2024-26793}
  - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() (Vasiliy Kovalev) [task:210471]
  - ARM: ep93xx: Add terminator to gpiod_lookup_table (Nikita Shubin) [task:210473] {CVE-2024-26751}
  - dm-crypt: don't modify the data when using authenticated encryption (Mikulas Patocka) [task:210478] {CVE-2024-26763}
  - nilfs2: fix data corruption in dsync block recovery for small block sizes (Ryusuke Konishi) [task:210301] {CVE-2024-26697}
  - usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Cañuelo) [task:205167] {CVE-2023-52477}
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (Hans de Goede) [task:205219] {CVE-2023-52478}
  - NFS: Fix an Oopsable condition in __nfs_pageio_add_request() (Trond Myklebust) [task:207226] {CVE-2021-47167}
  - ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao) [task:205581]
  - ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao) [task:205581]
  - xfrm: fix slab-use-after-free in decode_session6 (Zhengchao Shao) [task:205581]
  - media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run (Zheng Wang) [task:204919] {CVE-2023-52491}
  - media: platform: Add mechanism to handle jpeg hardware's locking up (Xia Jiang) [task:204919]
  - media: platform: Improve power on and power off flow (Xia Jiang) [task:204919]
  - vfio/pci: Disable auto-enable of exclusive INTx IRQ (Alex Williamson) {CVE-2024-27437}
  - genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() (Barry Song)
  - media: vimc: stream: fix build by missing dev (Jackie Liu) [task:209415]
  - ACPI: tables: Simplify PPTT leaf node detection (Jeremy Linton) [task:207620]
  - virtio-blk: remove VIRTIO_BLK_F_SCSI support (Christoph Hellwig) [task:209004]
  - net: prevent mss overflow in skb_segment() (Eric Dumazet) [task:209255] {CVE-2023-52435}
  - media: vimc: streamer: if kthread_stop fails, ignore the error (Dafna Hirschfeld) [task:209314]
  - tracing: Ensure visibility when inserting an element into tracing_map (Petr Pavlu) [task:209253] {CVE-2024-26645}
  - efi/arm: Show SMBIOS bank/device location in CPER and GHES error logs (Marcin Benka) [bug:218049]
  - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (Shigeru Yoshida) [task:209216] {CVE-2024-26663}
  - sr9800: Add check for usbnet_get_endpoints (Chen Ni) [task:209210] {CVE-2024-26651}
  - inet: read sk->sk_family once in inet_recv_error() (Eric Dumazet) [task:209235] {CVE-2024-26679}
  - ppp_async: limit MRU to 64K (Eric Dumazet) [task:209233] {CVE-2024-26675}
  - netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso) [task:207391] {CVE-2023-52620}
  - swapfile: fix soft lockup in scan_swap_map_slots (Chen Wandun) [task:183285]
  - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (Sean Christopherson) [task:206928] {CVE-2021-47061}
  - KVM: use struct_size() and flex_array_size() helpers in kvm_io_bus_unregister_dev() (Rustam Kovhaev) [task:206928]
  - overflow.h: Add flex_array_size() helper (Gustavo A. R. Silva) [task:162874, task:161899]
  - jfs: fix uaf in jfs_evict_inode (Edward Adam Davis) [task:207381] {CVE-2023-52600}
  - tipc: wait and exit until all work queues are done (Xin Long) [task:207225] {CVE-2021-47163}
  - team: fix null-ptr-deref when team device type is changed (Ziyang Xuan) [task:207278] {CVE-2023-52574}
  - perf/x86/lbr: Filter vsyscall addresses (JP Kobryn) [task:205164] {CVE-2023-52476}
  - UBSAN: array-index-out-of-bounds in dtSplitRoot (Osama Muhammad) [task:207406] {CVE-2023-52603}
  - s390/ptrace: handle setting of fpc register correctly (Heiko Carstens) [task:207408] {CVE-2023-52598}
  - KVM: s390: fix setting of fpc register (Heiko Carstens) [task:207400] {CVE-2023-52597}
  - PCI: switchtec: Fix stdev_release() crash after surprise hot remove (Daniel Stodden) [task:207403] {CVE-2023-52617}
  - switchtec: Add MRPC DMA mode support (Wesley Sheng) [task:207403]
  - can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer() (Oleksij Rempel) [task:205575]
  - ceph: fix deadlock or deadcode of misusing dget() (Xiubo Li) [task:207229] {CVE-2023-52583}
  - IB/ipoib: Fix mcast list locking (Daniel Vacek) [task:207280] {CVE-2023-52587}
  - RDMA/IPoIB: Fix error code return in ipoib_mcast_join (Jack Wang) [task:207280]
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Minsuk Kang) [task:207380] {CVE-2023-52594}
  - jfs: fix array-index-out-of-bounds in diNewExt (Edward Adam Davis) [task:207379] {CVE-2023-52599}
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree (Osama Muhammad) [task:207384] {CVE-2023-52604}
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Herbert Xu) [task:207385] {CVE-2023-52615}
  - powerpc/lib: Validate size for vector operations (Naveen N Rao) [task:207386] {CVE-2023-52606}
  - ocfs2: Avoid touching renamed directory if parent does not change (Jan Kara) [task:207378] {CVE-2023-52590}
  - fs: ocfs2: check status values (Artem Chernyshev) [task:207378]
  - pstore/ram: Fix crash when setting number of cpus to an odd number (Weichen Chen) [task:207388] {CVE-2023-52619}
  - SUNRPC: Fix a suspicious RCU usage warning (Anna Schumaker) [task:207390] {CVE-2023-52623}
  - jfs: fix slab-out-of-bounds Read in dtSearch (Manas Ghandat) [task:207383] {CVE-2023-52602}
  - crypto: scomp - fix req->dst buffer overflow (Chengming Zhou) [task:207387] {CVE-2023-52612}
  - crypto: scompress - initialize per-CPU variables on each CPU (Sebastian Andrzej Siewior) [task:207387]
  - crypto: scompress - Use per-CPU struct instead multiple variables (Sebastian Andrzej Siewior) [task:207387]
  - crypto: scompress - return proper error code for allocation failure (Sebastian Andrzej Siewior) [task:207387]
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian) [task:207228] {CVE-2023-52566}
  - nvme-loop: fix memory leak in nvme_loop_create_ctrl() (Wu Bo) [task:206937] {CVE-2021-47074}
  - nvme-loop: don't put ctrl on nvme_init_ctrl error (Chaitanya Kulkarni) [task:206937]
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso) [task:206383] {CVE-2024-26642}
  - llc: make llc_ui_sendmsg() more robust against bonding changes (Eric Dumazet) [task:206384] {CVE-2024-26636}
  - security/kysec: fix k tag java hung_task_timeout_secs (mengdehui) [bug:218233]
  - ring-buffer: Have saved event hold the entire event (Steven Rostedt (Google)) [task:205154]
  - ring-buffer: Do not attempt to read past "commit" (Steven Rostedt (Google)) [task:205154] {CVE-2023-52501}
  - ring-buffer: Have rb_iter_head_event() handle concurrent writer (Steven Rostedt (VMware)) [task:205154]
  - ring-buffer: Add page_stamp to iterator for synchronization (Steven Rostedt (VMware)) [task:205154]
  - ring-buffer: Have ring_buffer_empty() not depend on tracing stopped (Steven Rostedt (VMware)) [task:205154]
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value (Cyril Hrubis) [task:205110]
  - sched/rt: Disallow writing invalid values to sched_rt_period_us (Cyril Hrubis) [task:205110]
  - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset (Cyril Hrubis) [task:205110]
  - net: rds: acquire refcount on TCP sockets (Tetsuo Handa) [task:205876]
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Eric Dumazet) [task:205232] {CVE-2023-52502}
  - nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski) [task:205232]
  - drm: Don't unref the same fb many times by mistake due to deadlock handling (Ville Syrjälä) [task:205231] {CVE-2023-52486}
  - ipv6: init the accept_queue's spinlocks in inet6_create (Zhengchao Shao) [task:205163]
  - tcp: make sure init the accept_queue's spinlocks once (Zhengchao Shao) [task:205163] {CVE-2024-26614}
  - l2tp: pass correct message length to ip6_append_data (Tom Parkin) [task:205227]
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells) [task:205227] {CVE-2023-52527}
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu) [task:205220] {CVE-2023-52510}
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Wen Gu) [task:205222] {CVE-2024-26615}
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida) [task:205218] {CVE-2023-52528}
  - tomoyo: fix UAF write bug in tomoyo_write_control() (Tetsuo Handa) [task:205063] {CVE-2024-26622}
  - net: nfc: llcp: Add lock when modifying device list (Jeremy Cline) [task:205036] {CVE-2023-52524}
  - nfc: nci: assert requested protocol is valid (Jeremy Cline) [task:205032] {CVE-2023-52507}
  - Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco) [task:204918] {CVE-2023-52475}
  - llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima) [task:204916] {CVE-2024-26635}
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (Eric Dumazet) [task:204917] {CVE-2024-26633}
  - Revert "arm64/config: CONFIG_IP_DCCP=m" (Jiangshan Yi) [task:206427]
  - ax25: Fix ax25 session cleanup problems (Duoming Zhou) [task:203789]
  - mm: fix race between MADV_FREE reclaim and blkdev direct IO read (Mauricio Faria de Oliveira) [task:162162, task:204700]
  - nfsd: fix use-after-free due to delegation race (J. Bruce Fields) [task:160493]
  - arm64/config: CONFIG_IP_DCCP=m (lingfuyi) [bug:217102]
  - tty: n_gsm: check error while registering tty devices (Hillf Danton)
  - tty: n_gsm: add helpers to convert mux-num to/from tty-base (Martin Hundebøll)
  - USB: gadget: dummy-hcd: Fix errors in port-reset handling (Alan Stern)
  - bfs: extra sanity checking and static inode bitmap (Tigran Aivazian)
  - USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug (Alan Stern)
  - i2c: cadence: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201795] {CVE-2020-36784}
  - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201797] {CVE-2020-36783}
  - i2c: sprd: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201796] {CVE-2020-36780}
  - PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter (Zhang Qilong) [task:201796] {CVE-2020-36780}
  - security/kysec: add kysec_tcm_type boot parameter (huanfuxi) [bug:210498]
  - llc: call sock_orphan() at release time (Eric Dumazet) [task:203087] {CVE-2024-26625}
  - af_unix: fix lockdep positive in sk_diag_dump_icons() (Eric Dumazet) [task:203085] {CVE-2024-26624}
  - xen-netback: don't produce zero-size SKB frags (Jan Beulich) [task:203084] {CVE-2023-46838}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.38.v2207
changelog:
  - driver core: Let dev_of_node() accept a NULL dev (Stephen Boyd) [task:215336, bug:226512]
  - GRT: fix some warning by gcc (zhulei) [task:215796]
  - clk: Use parent node pointer during registration if necessary (Stephen Boyd) [bug:226512]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.39.v2207
changelog:
  - kvm/mmu: Add head file (zhanghao1) [task:218131]
  - bpf: Clear subreg_def for global function return values (Ilya Leoshkevich) [task:219647]
  - bpf: Fix error path under memory pressure (Alexei Starovoitov) [task:219647]
  - bpf: Introduce function-by-function verification (Alexei Starovoitov) [task:219647]
  - bpf: Fix bpf_event_output re-entry issue (Allan Zhang) [task:220155]
  - PHYTIUM: KVM: arm64: Move the clean of dcache to the map handler (zhanghao1) [task:218131]
  - net: fix kernel crash caused by ft_net_auto_affinity (Yun Lu) [bug:229383]
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [task:198456] {CVE-2024-1086}
  - nfc: nci: free rx_data_reassembly skb on NCI device cleanup (Fedor Pchelkin) [task:213955] {CVE-2024-26825}
  - NFC: nci: fix memory leak in nci_allocate_device (Dongliang Mu) [task:158827]
  - x86/xen: Add some null pointer checking to smp.c (Kunwu Chan) [task:214160] {CVE-2024-26908}
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Xiu Jianfeng) [task:164562]
  - xen/events: only register debug interrupt for 2-level events (Juergen Gross) [task:164562]
  - media: edia: dvbdev: fix a use-after-free (Zhipeng Lu) [task:220692] {CVE-2024-27043}
  - media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Hyunwoo Kim) [task:220692] {CVE-2022-45884}
  - media: dvbdev: fix error logic at dvb_register_device() (Mauro Carvalho Chehab) [task:220692]
  - media: dvbdev: Fix memleak in dvb_register_device (Dinghao Liu) [task:220692]
  - media: media/dvb: Use kmemdup rather than duplicating its implementation (Fuqian Huang) [task:220692]
  - media: dvbdev: remove double-unlock (Mauro Carvalho Chehab) [task:220692]
  - media: dvbdev: fix refcnt bug (Lin Ma) [task:220692]
  - media: dvbdev: adopts refcnt to avoid UAF (Lin Ma) [task:220692]
  - media: dvbdev: Fix memory leak in dvb_media_device_free() (Peilin Ye) [task:220692]
  - media: dvb-core: Fix double free in dvb_register_device() (Keita Suzuki) [task:220692]
  - mm: swap: fix race between free_swap_and_cache() and swapoff() (Ryan Roberts) [task:220694] {CVE-2024-26960}
  - swap: comments get_swap_device() with usage rule (Huang Ying) [task:220694]
  - net/smc: Fix possible access to freed memory in link clear (Yacan Liu) [task:219443] {CVE-2022-48673}
  - scsi: sd: Fix sd_do_mode_sense() buffer length handling (Damien Le Moal) [task:213954] {CVE-2021-47182}
  - scsi: core: Fix scsi_mode_sense() buffer length handling (Damien Le Moal) [task:213954] {CVE-2021-47182}
  - scsi: core: Reshuffle response handling in scsi_mode_sense() (Hannes Reinecke) [task:213954] {CVE-2021-47182}
  - scsi: core: Fixup calling convention for scsi_mode_sense() (Hannes Reinecke) [task:213954] {CVE-2021-47182}
  - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [task:217548] {CVE-2024-26982}
  - clk: zynq: Prevent null pointer dereference caused by kmalloc failure (Duoming Zhou) [task:217565] {CVE-2024-27037}
  - sysv: don't call sb_bread() with pointers_lock held (Tetsuo Handa) [task:219573]
  - afs: Increase buffer size in afs_update_volume_status() (Daniil Dulov) [task:210635] {CVE-2024-26736}
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Bart Van Assche) [task:210640]
  - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio (Bart Van Assche) [task:210640] {CVE-2024-26764}
  - Bluetooth: af_bluetooth: Fix deadlock (Luiz Augusto von Dentz) [task:214134] {CVE-2024-26886}
  - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Ziyang Xuan) [task:217550] {CVE-2024-27019}
  - net/mlx5e: Prevent deadlock while disabling aRFS (Carolina Jubran) [task:217553] {CVE-2024-27014}
  - security/kysec: decrease pcr hashtable size (penghuaihe) [task:219597]
  - security/kysec: move pcr hashtable init to sb_alloc_security (penghuaihe) [task:219597]
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier (ZhaoLong Wang) [task:219460] {CVE-2023-52449}
  - speakup: Avoid crash on very long word (Samuel Thibault) [task:219451] {CVE-2024-26994}
  - f2fs: fix to avoid dirent corruption (Chao Yu) [task:219461] {CVE-2023-52444}
  - apparmor: avoid crash when parsed profile name is empty (Fedor Pchelkin) [task:219459] {CVE-2023-52443}
  - powerpc/pseries/memhp: Fix access beyond end of drmem array (Nathan Lynch) [task:219457] {CVE-2023-52451}
  - powerpc/pseries/memhotplug: Quieten some DLPAR operations (Laurent Dufour) [task:219457]
  - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (Hyunwoo Kim) [task:219456] {CVE-2024-27395}
  - net: openvswitch: ovs_ct_exit to be done under ovs_lock (Tonghao Zhang) [task:219456]
  - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value (Anastasia Belova) [task:219454] {CVE-2024-27051}
  - net: gtp: Fix Use-After-Free in gtp_dellink (Hyunwoo Kim) [task:219455] {CVE-2024-27396}
  - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays (Gabor Juhos) [task:219452] {CVE-2024-26966}
  - crypto: qat - resolve race condition during AER recovery (Damian Muszynski) [task:219450] {CVE-2024-26974}
  - crypto: qat - fix double free during reset (Svyatoslav Pankratov) [task:219450]
  - txgbe: Fix handling of NAPI budget when multiple queues are enabled per vector (xiaolinkui) [task:217379]
  - ngbe: Fix handling of NAPI budget when multiple queues are enabled per vector (xiaolinkui) [task:217379]
  - printk: disable optimistic spin during panic (Stephen Brennan) [task:217379]
  - printk: Add panic_in_progress helper (Stephen Brennan) [task:217379]
  - s390/zcrypt: fix reference counting on zcrypt card objects (Harald Freudenberger) [task:219444] {CVE-2024-26957}
  - xfs: wake commit waiters on CIL abort before log item abort (Brian Foster) [task:217956]
  - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays (Gabor Juhos) [task:219446] {CVE-2024-26969}
  - vfio/platform: Create persistent IRQ handlers (Alex Williamson) [task:210628] {CVE-2024-26813}
  - vfio/platform: Disable virqfds on cleanup (Alex Williamson) [task:210628]
  - LoongArch: Fixup extioi bounce (Jun Yi) [task:214965]
  - dm: call the resume method on internal suspend (Mikulas Patocka) [task:214159] {CVE-2024-26880}
  - quota: Fix potential NULL pointer dereference (Wang Jianjian) [task:214158] {CVE-2024-26878}
  - quota: check time limit when back out space/inode change (Chengguang Xu) [task:214158]
  - quota: code cleanup for __dquot_alloc_space() (Chengguang Xu) [task:214158]
  - jfs: fix array-index-out-of-bounds in dbAdjTree (Manas Ghandat) [task:207401] {CVE-2023-52601}
  - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled (Rahul Rameshbabu) [task:214161] {CVE-2023-52644}
  - b43: dma: Fix use true/false for bool type variable (Saurav Girepunje) [task:214161]
  - i40e: Fix VF MAC filter removal (Ivan Vecera) [task:214154]
  - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [task:214154] {CVE-2024-26830}
  - i40e: Add ensurance of MacVlan resources for every trusted VF (Karen Sornek) [task:214154]
  - i40e: Fix MAC address setting for a VF via Host/VM (Slawomir Laba) [task:214154]
  - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip (Hsin-Yi Wang) [task:214148] {CVE-2024-26874}
  - net: Set true network header for ECN decapsulation (Gilad Naaman) [task:214149]
  - net/bnx2x: Prevent access to a freed page in page_pool (Thinh Tran) [task:214143] {CVE-2024-26859}
  - vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang) [task:205064] {CVE-2022-48627}
  - ext4: avoid online resizing failures due to oversized flex bg (Baokun Li) [task:207394] {CVE-2023-52622}
  - ext4: unify the type of flexbg_size to unsigned int (Baokun Li) [task:207394] {CVE-2023-52622}
  - ext4: remove unnecessary check from alloc_flex_gd() (Baokun Li) [task:207394] {CVE-2023-52622}
  - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Oleg Nesterov) [task:210335] {CVE-2024-26686}
  - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Oleg Nesterov) [task:210335]
  - fs/proc: do_task_stat: use __for_each_thread() (Oleg Nesterov) [task:210335]
  - exit: Use the correct exit_code in /proc/<pid>/stat (Eric W. Biederman) [task:210335]
  - RDMA/rxe: Return CQE error if invalid lkey was supplied (Leon Romanovsky) [task:206932] {CVE-2021-47076}
  - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Lena Wang) [task:214040] {CVE-2024-26851}
  - IB/hfi1: Fix a memleak in init_credit_return (Zhipeng Lu) [task:214039] {CVE-2024-26839}
  - hsr: Fix uninit-value access in hsr_get_node() (Shigeru Yoshida) [task:214042] {CVE-2024-26863}
  - net: hsr: fix placement of logical operator in a multi-line statement (Murali Karicheri) [task:214042]
  - amdkfd: use calloc instead of kzalloc to avoid integer overflow (Dave Airlie) [task:214061] {CVE-2024-26817}
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Nikita Zhandarovich) [task:214102] {CVE-2024-26901}
  - media: pvrusb2: fix uaf in pvr2_context_set_notify (Edward Adam Davis) [task:214062] {CVE-2024-26875}
  - media: pvrusb2: fix use after free on context disconnection (Ricardo B. Marliere) [task:214062]
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Armin Wolf) [task:214136] {CVE-2024-26894}
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Eric Dumazet) [task:214130] {CVE-2024-26852}
  - bpf: Fix hashtab overflow check on 32-bit arches (Toke Høiland-Jørgensen) [task:214132] {CVE-2024-26884}
  - scsi: target: core: Add TMF to tmr_list handling (Dmitry Bogdanov) [task:214137] {CVE-2024-26845}
  - arp: Prevent overflow in arp_req_get(). (Kuniyuki Iwashima) [task:210302] {CVE-2024-26733}
  - drm: bridge/panel: Cleanup connector on bridge detach (Paul Cercueil) [task:206930] {CVE-2021-47063}
  - LOONGSON: rtc-ls2x: fix a ls3a4000 rtc update trouble (zhangtianyang) [task:147526]
  - config: enable CONFIG_CGROUP_FILES. (cuitao) [task:220723]
  - OPENEULER: fs/filescontrol: add a switch to enable / disable accounting of open fds (Yu Kuai) [task:220723]
  - drm/amdgpu: validate the parameters of bo mapping operations more clearly (xinhui pan) [task:220691] {CVE-2024-26922}
  - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu) [task:220691]
  - drm/amdgpu: check alignment on CPU page for bo map (Xℹ Ruoyao) [task:220691]
  - sched: disabled sysctl_sched_optimize_enabled by default (liwanwu) [task:217846]
  - net: don't let netpoll invoke NAPI if in xmit context (Jakub Kicinski) [task:217379]
  - net/mlx5e: alloc the correct size for indirection_rqt (Saeed Mahameed) [task:217500]
  - net/mlx5e: allocate 'indirection_rqt' buffer dynamically (Arnd Bergmann) [task:217500]
  - net/mlx5: Increase the max number of channels to 128 (Fan Li) [task:217500]
  - security/secureboot: vmlinuz signature support SM and RSA (penghuaihe) [task:218116]
  - security: LoongArch support kernel signature (penghuaihe) [task:181644]
  - security/kysec: secureboot add x86 arch support. (penghuaihe) [task:172384]
  - security/secureboot add signature to kernel (penghuaihe) [task:172384]
  - USB: core: Fix deadlock in usb_deauthorize_interface() (Alan Stern) [task:217563] {CVE-2024-26934}
  - irqchip: The kdump capture kernel is probably stuck In the virtual machine (duanchenghao) [bug:219683]
  - drm/hisilicon: Fix a NULL pointer access when call hibmc_unload (Shixiong Ou) [task:217158]
  - usb: roles: fix NULL pointer issue when put module's reference (Xu Yang) [task:210461] {CVE-2024-26747}
  - media: rc: bpf attach/detach requires write permission (Sean Young) [task:214138] {CVE-2023-52642}
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Alan Stern) [task:217585] {CVE-2024-26993}
  - btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve (Filipe Manana) [task:214141] {CVE-2024-26904}
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern) [task:217587] {CVE-2024-27059}
  - nilfs2: prevent kernel bug at submit_bh_wbc() (Ryusuke Konishi) [task:217584] {CVE-2024-26955}
  - nilfs2: use a more common logging style (Joe Perches) [task:217584]
  - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays (Gabor Juhos) [task:217583] {CVE-2024-26965}
  - scsi: qla2xxx: Fix command flush on cable pull (Quinn Tran) [task:217582] {CVE-2024-26931}
  - nilfs2: fix failure to detect DAT corruption in btree and direct mappings (Ryusuke Konishi) [task:217589] {CVE-2024-26956}
  - media: go7007: fix a memleak in go7007_load_encoder (Zhipeng Lu) [task:217575] {CVE-2024-27074}
  - media: v4l2-tpg: fix some memleaks in tpg_alloc (Zhipeng Lu) [task:217576] {CVE-2024-27078}
  - SUNRPC: fix some memleaks in gssx_dec_option_array (Zhipeng Lu) [task:217578] {CVE-2024-27388}
  - drm/tegra: dsi: Add missing check for of_find_device_by_node (Chen Ni) [task:217580] {CVE-2023-52650}
  - mm/swapfile.c: __swap_entry_free() always free 1 entry (Wei Yang) [task:217590]
  - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Huang Ying) [task:217590]
  - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Huang Ying) [task:217590]
  - serial: mxs-auart: add spinlock around changing cts state (Emil Kronborg) [task:217594] {CVE-2024-27000}
  - nouveau: fix instmem race condition around ptr stores (Dave Airlie) [task:217591] {CVE-2024-26984}
  - net/rds: fix possible cp null dereference (Mahmoud Adam) [task:217596]
  - net/rds: fix WARNING in rds_conn_connect_if_down (Edward Adam Davis) [task:217596] {CVE-2024-27024}
  - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler (Fei Shao) [task:217571] {CVE-2024-27028}
  - scsi: ufs: core: Improve SCSI abort handling (Bart Van Assche) [task:212521] {CVE-2021-47188}
  - nfp: flower: handle acti_netdevs allocation failure (Duoming Zhou) [task:217573] {CVE-2024-27046}
  - nilfs2: fix OOB in nilfs_set_de_type (Jeongjun Park) [task:217541] {CVE-2024-26981}
  - fat: fix uninitialized field in nostale filehandles (Jan Kara) [task:217540] {CVE-2024-26973}
  - tun: limit printing rate when illegal packet received by tun dev (Lei Chen) [task:217543] {CVE-2024-27013}
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan) [task:217564] {CVE-2024-27020}
  - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Pablo Neira Ayuso) [task:217564]
  - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [task:217566] {CVE-2024-26976}
  - drm: nv04: Fix out of bounds access (Mikhail Kobuk) [task:217570] {CVE-2024-27008}
  - vfio/pci: Create persistent INTx handler (Alex Williamson) [task:210644] {CVE-2024-26812}
  - vfio: Introduce interface to flush virqfd inject workqueue (Alex Williamson) [task:210644]
  - media: dvb-frontends: avoid stack overflow warnings with clang (Arnd Bergmann) [task:217558] {CVE-2024-27075}
  - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity (Zhipeng Lu) [task:217549] {CVE-2024-27077}
  - drm/amdgpu: Reset IH OVERFLOW_CLEAR bit (Friedrich Vock) [task:214156] {CVE-2024-26915}
  - net/mlx5: Update error handler for UCTX and UMEM (Neta Ostrovsky) [task:216632] {CVE-2021-47212}
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Rand Deeb) [task:214041] {CVE-2024-26855}
  - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi) [task:210638] {CVE-2024-26696}
  - binder: check offset alignment in binder_get_object() (Carlos Llamas) [task:216630] {CVE-2024-26926}
  - xen/events: close evtchn after mapping cleanup (Maximilian Heyne) [task:210357] {CVE-2024-26687}
  - wifi: mac80211: fix potential key use-after-free (Johannes Berg) [task:205233] {CVE-2023-52530}
  - xfs: check free AG space when making per-AG reservations (Darrick J. Wong) [task:215506]
  - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (Luís Henriques) [task:216634] {CVE-2022-48631}
  - media: xc4000: Fix atomicity violation in xc4000_get_frequency (Gui-Dong Han) [task:216633] {CVE-2024-24861}
  - RDMA/srpt: Do not register event handler until srpt device is fully setup (William Kucharski) [task:213762] {CVE-2024-26872}
  - uio: Fix use-after-free in uio_open (Guanghui Feng) [task:209257] {CVE-2023-52439}
  - config: enable CONFIG_SECURITY_YAMA for arm64 (huanfuxi) [task:214710]
  - btrfs: fix hang during unmount when stopping a space reclaim worker (Filipe Manana) [task:216635] {CVE-2022-48664}
  - Btrfs: fix crash during unmount due to race with delayed inode workers (Filipe Manana) [task:155707]
  - iavf: free q_vectors before queues in iavf_disable_vf (Nicholas Nunley) [task:212529] {CVE-2021-47201}
  - xhci: handle isoc Babble and Buffer Overrun events properly (Michal Pecio) [task:209228] {CVE-2024-26659}
  - xhci: process isoc TD properly when there was a transaction error mid TD. (Mathias Nyman) [task:209228]
  - xhci: Fix incorrect tracking of free space on transfer rings (Mathias Nyman) [task:209228]
  - xhci: store TD status in the td struct instead of passing it along (Mathias Nyman) [task:209228]
  - xhci: remove extra loop in interrupt context (Mathias Nyman) [task:209228]
  - xhci: get isochronous ring directly from endpoint structure (Mathias Nyman) [task:209228]
  - drm/amdgpu: restrict bo mapping within gpu address limits (Rajneesh Bhardwaj) [task:216641]
  - tcp: fix race condition when creating child sockets from syncookies (Ricardo Dias) [task:162162]
  - mm/swap: fix race when skipping swapcache (Kairui Song) [task:210472] {CVE-2024-26759}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-52.40.v2207
changelog:
  - net: fix __dst_negative_advice() race (Eric Dumazet) [task:328468] {CVE-2024-36971}
  - net: annotate data-races around sk->sk_dst_pending_confirm (Eric Dumazet) [task:328468]
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Yue Haibing) [task:330556] {CVE-2024-33621}
  - net/tls: Fix flipped sign in tls_err_abort() calls (Daniel Jordan) [task:223103] {CVE-2021-47496}
  - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Justin Tee) [task:224215] {CVE-2024-36924}
  - bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue (Jason Xing) [task:224201] {CVE-2024-36938}
  - bpf: sk_msg, fix socket data_ready events (John Fastabend) [task:111650]
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima) [task:328482] {CVE-2024-36933}
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen) [task:328482]
  - Fix race for duplicate reqsk on identical SYN (luoxuanqiang) [task:220628]
  - usb: cdc-wdm: close race between read and workqueue (Oliver Neukum) [task:327804] {CVE-2024-35812}
  - wifi: iwlwifi: read txq->read_ptr under lock (Johannes Berg) [task:224209] {CVE-2024-36922}
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (Bob Pearson) [task:330478] {CVE-2024-38544}
  - memblock,arm64: expand the static memblock memory table (Zhou Guanghui) [task:331741]
  - LoongArch: Fixup INIT_MEMBLOCK_RESERVED_REGIONS for loongarch (Jun Yi) [task:331741]
  - loongson: pci/quirks: LS7A2000 enble msi (wusheng) [task:331741]
  - LoongArch: kdump: fix huge memory machine trigger capture kernel failure (Ming Wang) [task:331741]
  - sizes.h: Add entries between SZ_32G and SZ_64T (Matt Coster) [task:331741]
  - sizes.h: Add SZ_1T macro (Christophe Leroy) [task:331741]
  - sizes.h: add SZ_8G/SZ_16G/SZ_32G macros (Huang Shijie) [task:331741]
  - x86/kdump/64: Restrict kdump kernel reservation to <64TB (Baoquan He) [task:331741]
  - x86/kdump: Have crashkernel=X reserve under 4G by default (Dave Young) [task:331741]
  - loongson: spi: fix repeated kfree() (zhaoqunqin) [task:331741]
  - loongson: cpufreq: loongson3-acpi: Fixed the error of assigning the value of Mhz to Khz (Juxin Gao) [task:331741]
  - loongson: pic: update interrupt registration policy (wanghongliang) [task:331741]
  - LoongArch: Implement constant timer shutdown interface (Bibo Mao) [task:331741]
  - tcp: fix page frag corruption on page fault (Paolo Abeni) [task:225588] {CVE-2021-47544}
  - s390/ap: Fix crash in AP internal function modify_bitmap() (Harald Freudenberger) [task:332252] {CVE-2024-38661}
  - media: lgdt3306a: Add a check against null-pointer-def (Zheyu Ma) [task:332251] {CVE-2022-48772}
  - media: dvb-frontends: Use kmemdup instead of duplicating its function (zhong jiang) [task:332251]
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Baokun Li) [task:332253] {CVE-2024-39276}
  - Input: cyapa - add missing input core locking to suspend/resume functions (Marek Szyprowski) [task:332207] {CVE-2023-52884}
  - net/9p: fix uninit-value in p9_client_rpc() (Nikita Zhandarovich) [task:332238] {CVE-2024-39301}
  - of: module: add buffer overflow check in of_modalias() (Sergey Shtylyov) [task:330476] {CVE-2024-38541}
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima) [task:216629]
  - af_unix: Fix garbage collector racing against connect() (Michal Luczaj) [task:216629] {CVE-2024-26923}
  - af_unix: Do not use atomic ops for unix_sk(sk)->inflight. (Kuniyuki Iwashima) [task:216629]
  - mlxsw: core_thermal: Fix fan speed in maximum cooling state (Ido Schimmel) [task:223114]
  - mlxsw: thermal: Fix out-of-bounds memory accesses (Ido Schimmel) [task:223114] {CVE-2021-47441}
  - mlxsw: core: Extend cooling device with cooling levels (Vadim Pasternak) [task:223114]
  - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [task:223105] {CVE-2021-47307}
  - usb-storage: alauda: Check whether the media is initialized (Shichao Lai) [task:330542] {CVE-2024-38619}
  - drm/mediatek: Add 0 size check to mtk_drm_gem_obj (Justin Green) [task:330472] {CVE-2024-38549}
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jiri Pirko) [task:330562] {CVE-2024-37353}
  - ipv6: sr: fix invalid unregister error path (Hangbin Liu) [task:330500] {CVE-2024-38612}
  - wifi: carl9170: add a proper sanity check for endpoints (Nikita Zhandarovich) [task:330490] {CVE-2024-38567}
  - usb: xhci-plat: fix crash when suspend if remote wake enable (Frank Li) [task:330356] {CVE-2022-48761}
  - usb: host: xhci-plat: add .suspend_quirk for struct xhci_plat_priv (Peter Chen) [task:330356]
  - of: module: prevent NULL pointer dereference in vsnprintf() (Sergey Shtylyov) [task:327802] {CVE-2024-35878}
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (Dongli Zhang) [task:330555] {CVE-2024-31076}
  - inet_diag: fix kernel-infoleak for UDP sockets (Eric Dumazet) [task:330553] {CVE-2021-47597}
  - inet_diag: use jiffies_delta_to_msecs() (Eric Dumazet) [task:330553]
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Eric Dumazet) [task:330559] {CVE-2024-36286}
  - media: stk1160: fix bounds checking in stk1160_copy_video() (Dan Carpenter) [task:330567] {CVE-2024-38621}
  - serial: max3100: Update uart_driver_registered on driver removal (Andy Shevchenko) [task:330568] {CVE-2024-38633}
  - greybus: lights: check return of get_channel_from_mode (Rui Miguel Silva) [task:330569] {CVE-2024-38637}
  - nilfs2: fix potential hang in nilfs_detach_log_writer() (Ryusuke Konishi) [task:330571] {CVE-2024-38582}
  - nilfs2: fix unexpected freezing of nilfs_segctor_sync() (Ryusuke Konishi) [task:330571]
  - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger (Duoming Zhou) [task:330572] {CVE-2024-38630}
  - serial: max3100: Lock port->lock when calling uart_handle_cts_change() (Andy Shevchenko) [task:330573] {CVE-2024-38634}
  - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (Tetsuo Handa) [task:330574] {CVE-2024-38780}
  - stm class: Fix a double free in stm_register_device() (Dan Carpenter) [task:330576] {CVE-2024-38627}
  - enic: Validate length of nl attributes in enic_set_vf_port (Roded Zats) [task:330578] {CVE-2024-38659}
  - cifs: fix underflow in parse_server_interfaces() (Dan Carpenter) [task:214157] {CVE-2024-26828}
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Daniel Starke) [task:224203] {CVE-2024-36016}
  - um: Add winch to winch_handlers before registering winch IRQ (Roberto Sassu) {CVE-2024-39292}
  - scsi: qedf: Ensure the copied buf is NUL terminated (Bui Quang Minh) [task:330528] {CVE-2024-38559}
  - speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter) [task:330524] {CVE-2024-38587}
  - crypto: bcm - Fix pointer arithmetic (Aleksandr Mishin) [task:330302] {CVE-2024-38579}
  - jffs2: prevent xattr node from overflowing the eraseblock (Ilya Denisyev) [task:330534] {CVE-2024-38599}
  - ALSA: timer: Set lower bound of start tick time (Takashi Iwai) [task:330536] {CVE-2024-38618}
  - wifi: ar5523: enable proper endpoint verification (Nikita Zhandarovich) [task:330532] {CVE-2024-38565}
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Breno Leitao) [task:330510] {CVE-2024-38596}
  - net/mlx5: Discard command completions in internal error (Akiva Goldberger) [task:330514] {CVE-2024-38555}
  - drm/amd/display: Fix potential index out of bounds in color transformation function (Srinivasan Shanmugam) [task:330516] {CVE-2024-38552}
  - virtio-net: Add validation for used length (Xie Yongji) [task:221959] {CVE-2021-47352}
  - ARM: 9170/1: fix panic when kasan and kprobe are enabled (sparkhuang) [task:330279] {CVE-2021-47618}
  - PM / devfreq: Fix buffer overflow in trans_stat_show (Christian Marangi) [task:207389] {CVE-2023-52614}
  - btrfs: don't drop extent_map for free space inode on write error (Josef Bacik) [task:210433] {CVE-2024-26726}
  - fs/9p: fix uninitialized values during inode evict (Eric Van Hensbergen) [task:224205] {CVE-2024-36923}
  - Revert "sched: Fix sched_fork() access an invalid sched_task_group" (Bing Huang) [task:224985]
  - x86/signal: Detect and prevent an alternate signal stack overflow (Chang S. Bae) [task:223059] {CVE-2021-47326}
  - SUNRPC: fix a memleak in gss_import_v2_context (Zhipeng Lu) [task:217597] {CVE-2023-52653}
  - net/smc: fix compile error in smc_vlan_by_tcpsk function (weirongguang) [task:329030]
  - drm/ast: Fix soft lockup (Jammy Huang) [task:221869] {CVE-2024-35952}
  - drm_lease.c: copy user-array safely (Philipp Stanner) [task:223074] {CVE-2023-52820}
  - drm/panel: fix a possible null pointer dereference (Ma Ke) [task:222109] {CVE-2023-52821}
  - drm/amdgpu: fix gart.bo pin_count leak (Leslie Shi) [task:222035] {CVE-2021-47431}
  - lib/generic-radix-tree.c: Don't overflow in peek() (Kent Overstreet) [task:221979] {CVE-2021-47432}
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo) [task:225616] {CVE-2023-52880}
  - phonet/pep: fix racy skb_queue_empty() use (Rémi Denis-Courmont) [task:220864] {CVE-2024-27402}
  - i2c: smbus: fix NULL function pointer dereference (Wolfram Sang) [task:223077] {CVE-2024-35984}
  - i2c: core: remove level of indentation in i2c_transfer (Wolfram Sang) [task:223077]
  - i2c: core: remove outdated DEBUG output (Wolfram Sang) [task:223077]
  - usb: gadget: f_fs: change ep->status safe in ffs_epfile_io() (Linyu Yuan) [task:225394]
  - drm/sched: Avoid data corruptions (Andrey Grodzovsky) [task:223136] {CVE-2021-47354}
  - cpu/hotplug: Don't offline the last non-isolated CPU (Ran Xiaokai) [task:223118] {CVE-2023-52831}
  - cpu/hotplug: Prevent self deadlock on CPU hot-unplug (Thomas Gleixner) [task:223118] {CVE-2023-52831}
  - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Borislav Petkov (AMD)) [task:223094] {CVE-2024-35876}
  - iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() (Zhang Shurong) [task:223123] {CVE-2023-52802}
  - staging: rtl8712: fix use-after-free in rtl8712_dl_fw (Pavel Skripkin) [task:222111] {CVE-2021-47479}
  - RDMA: Verify port when creating flow rule (Maor Gottlieb) [task:223096] {CVE-2021-47265}
  - phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet) [task:328460] {CVE-2024-36946}
  - net: sched: sch: Bounds check priority (Kees Cook) [task:222057] {CVE-2023-52734}
  - htb: use anonymous union for simplicity (Cong Wang) [task:222057]
  - media: imon: fix access to invalid resource for the second interface (Takashi Iwai) [task:222087] {CVE-2023-52754}
  - block: fix overflow in blk_ioctl_discard() (Li Nan) [task:328466] {CVE-2024-36917}
  - bna: ensure the copied buf is NUL terminated (Bui Quang Minh) [task:328454] {CVE-2024-36934}
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman) [task:328462] {CVE-2024-36950}
  - fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt) [task:328470] {CVE-2024-36964}
  - drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin) [task:328443] {CVE-2024-36960}
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet) [task:224189] {CVE-2024-36905}
  - tcp: remove redundant check on tskb (Colin Ian King) [task:224189]
  - .gitignore: Add compilation database file (Toru Komatsu)
  - of: unittest: Fix compile in the non-dynamic case (Christian A. Ehrhardt) [task:220891]
  - of: unittest: Fix of_count_phandle_with_args() expected value message (Geert Uytterhoeven) [task:220891]
  - of: Fix double free in of_parse_phandle_with_args_map (Christian A. Ehrhardt) [task:220891] {CVE-2023-52679}
  - of: unittest: fix EXPECT text for gpio hog errors (Frank Rowand) [task:220891]
  - of: gpio unittest kfree() wrong object (Frank Rowand) [task:220891]
  - of: unittest: make gpio overlay test dependent on CONFIG_OF_GPIO (Frank Rowand) [task:220891]
  - of: unittest: add overlay gpio test to catch gpio hog problem (Frank Rowand) [task:220891]
  - netfilter: ctnetlink: Fix regression in conntrack entry deletion (Felix Kaechele) [bug:233722]
  - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (Eric Dumazet) [task:223050] {CVE-2024-35976}
  - net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() (Karsten Graul) [task:225614] {CVE-2021-47559}
  - powerpc/mm: Fix lockup on kernel exec fault (Christophe Leroy) [task:222047] {CVE-2021-47350}
  - soc: qcom: llcc: Handle a second device without data corruption (Uwe Kleine-König) [task:222019] {CVE-2023-52871}
  - i2c: dev: copy userspace array safely (Philipp Stanner) [task:223063] {CVE-2023-52758}
  - string.h: add array-wrappers for (v)memdup_user() (Philipp Stanner) [task:223063] {CVE-2023-52758}
  - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao) [task:221811] {CVE-2024-35997}
  - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (felix) [task:221821] {CVE-2023-52803}
  - f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances (Chao Yu) [task:221841] {CVE-2021-47335}
  - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Hans Verkuil) [task:227331] {CVE-2024-23848}
  - atl1c: fix tx timeout after link flap on Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: Work around the DMA RX overflow issue (Sieng-Piaw Liew) [task:222007] {CVE-2023-52834}
  - atl1c: add 4 RX/TX queue support for Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: detect NIC type early (Gatis Peisenieks) [task:222007]
  - atl1c: show correct link speed on Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: remove redundant assignment to variable tpd_req (Colin Ian King) [task:222007]
  - net/atheros: Clean atheros code from driver version (Leon Romanovsky) [task:222007]
  - atl1c: improve performance by avoiding unnecessary pcie writes on xmit (Gatis Peisenieks) [task:222007]
  - net: core: add __netdev_sent_queue as variant of __netdev_tx_sent_queue (Heiner Kallweit) [task:222007]
  - atl1c: prepare for multiple rx queues (Gatis Peisenieks) [task:222007]
  - atl1c: move tx napi into tpd_ring (Gatis Peisenieks) [task:222007]
  - atl1c: move tx cleanup processing out of interrupt (Gatis Peisenieks) [task:222007]
  - net: export dev_set_threaded symbol (Lorenzo Bianconi) [task:222007]
  - atl1c: switch to napi_gro_receive (Sieng Piaw Liew) [task:222007]
  - atl1c: use napi_alloc_skb (Sieng Piaw Liew) [task:222007]
  - erofs: fix pcluster use-after-free on UP platforms (Gao Xiang) [task:217577] {CVE-2022-48674}
  - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error (Norihiko Hama) [task:217593] {CVE-2024-26996}
  - netfilter: nft_compat: remove flush counter optimization (Florian Westphal) [task:221983]
  - netfilter: complete validation of user input (Eric Dumazet) [task:221923]
  - netfilter: nf_tables: flush pending destroy work before exit_net release (Pablo Neira Ayuso) [task:221983] {CVE-2024-35899}
  - netfilter: nft_compat: make sure xtables destructors have run (Florian Westphal) [task:221983]
  - ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup (Feng Zhou) [task:221949] {CVE-2021-47399}
  - netfilter: validate user input for expected length (Eric Dumazet) [task:221923] {CVE-2024-35896}
  - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() (Valentine Fatiev) [task:223066]
  - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path (Valentine Fatiev) [task:223066] {CVE-2021-47438}
  - security/kysec: fix image sign err (penghuaihe) [task:226800]
  - net: atlantic: eliminate double free in error handling logic (Igor Russkikh) [task:220884] {CVE-2023-52664}
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Fedor Pchelkin) [task:217545] {CVE-2024-26961}
  - NTB: fix possible name leak in ntb_register_device() (Yang Yingliang) [task:217598] {CVE-2023-52652}
  - soc: fsl: qbman: Use raw spinlock for cgr_lock (Sean Anderson) [task:223104] {CVE-2024-35819}
  - soc: fsl: qbman: Add helper for sanity checking cgr ops (Sean Anderson) [task:223104]
  - soc: fsl: qbman: Add CGR update function (Sean Anderson) [task:223104]
  - KVM: x86: Handle SRCU initialization failure during page track init (Haimin Zhang) [task:221891] {CVE-2021-47407}
  - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Oliver Upton) [task:224206] {CVE-2024-36953}
  - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Marc Zyngier) [task:224206]
  - ipv4: Fix uninit-value access in __ip_make_skb() (Shigeru Yoshida) [task:224214] {CVE-2024-36927}
  - can: j1939: fix Use-after-Free, hold skb ref while in use (Oleksij Rempel) [task:225604] {CVE-2021-47232}
  - can: j1939: transport: add j1939_session_skb_find_by_offset() function (Oleksij Rempel) [task:225604]
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou) [task:225600] {CVE-2024-27398}
  - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc (Norbert Zulinski) [task:225576] {CVE-2021-47501}
  - i40e: Fix sparse error: uninitialized symbol 'ring' (Arkadiusz Kubalewski) [task:225576]
  - i40e: introduce new dump desc XDP command (Ciara Loftus) [task:225576]
  - tcp: do not accept ACK of bytes we never sent (Eric Dumazet) [task:225596] {CVE-2023-52881}
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou) [task:225580] {CVE-2024-27399}
  - net/mlx5e: Fix page reclaim for dead peer hairpin (Dima Chumak) [task:225574] {CVE-2021-47246}
  - clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (Jernej Skrabec) [task:225550] {CVE-2023-52882}
  - drm/arm/malidp: fix a possible null pointer dereference (Huai-Yuan Liu) [task:225554] {CVE-2024-36014}
  - ppdev: Add an error check in register_device (Huai-Yuan Liu) [task:225556] {CVE-2024-36015}
  - ppdev: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET) [task:225556]
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats) [task:225558] {CVE-2024-36017}
  - firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos) [task:225560] {CVE-2024-27401}
  - mmc: mmc_spi: fix error handling in mmc_spi_probe() (Yang Yingliang) [task:225564] {CVE-2023-52708}
  - mmc: mmc_spi: Indentation fixes (Andy Shevchenko) [task:225564]
  - mmc: spi: Convert to use GPIO descriptors (Linus Walleij) [task:225564]
  - phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init() (Tiezhu Yang) [task:225568] {CVE-2021-47234}
  - drm/client: Fully protect modes[] with dev->mode_config.mutex (Ville Syrjälä) [task:221977] {CVE-2024-35950}
  - s390/dasd: fix double module refcount decrement (Miroslav Franc) [task:217574] {CVE-2024-27054}
  - mm/filemap: avoid buffered read/write race to read inconsistent data (Baokun Li) [task:225198]
  - drm/virtio: fix memory leak of vbuf (liweishi) [task:205462]
  - blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling (zhengbin) [task:225157]
  - REDHAT: mm/memcg: Fix mem_cgroup_id_get_online() underflow problem (lihongfu) [task:193929]
  - REDHAT: mm/memcg: Free percpu stats memory of dying memcg's (lihongfu) [task:193929]
  - nfs: Handle error of rpc_proc_register() in nfs_net_init(). (Kuniyuki Iwashima) [task:224227] {CVE-2024-36939}
  - overflow: Include header file with SIZE_MAX declaration (Leon Romanovsky) [task:158034]
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap) [task:224219] {CVE-2024-36919}
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Kuniyuki Iwashima) [task:224221] {CVE-2024-36904}
  - tipc: fix UAF in error path (Paolo Abeni) [task:224223] {CVE-2024-36886}
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Eric Dumazet) [task:224225] {CVE-2024-36902}
  - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (Wesley Cheng) [task:224213] {CVE-2024-36894}
  - usb: gadget: f_fs: use io_data->status consistently (John Keeping) [task:224213]
  - pinctrl: core: delete incorrect free in pinctrl_enable() (Dan Carpenter) [task:224212] {CVE-2024-36940}
  - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) [task:221819] {CVE-2021-47386}
  - hwmon: (w83791d) convert to use devm_i2c_new_dummy_device (Wolfram Sang) [task:221819]
  - net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo) [task:224208] {CVE-2024-36883}
  - tcp: properly terminate timers for kernel sockets (Eric Dumazet) [task:223109] {CVE-2024-35910}
  - mptcp: add sk_stop_timer_sync helper (Geliang Tang) [task:223109]
  - bonding: stop the device in bond_setup_by_slave() (Eric Dumazet) [task:223073] {CVE-2023-52784}
  - bonding: reset bond's flags when down link is P2P device (Hangbin Liu) [task:223073]
  - wifi: nl80211: don't free NULL coalescing rule (Johannes Berg) [task:224195] {CVE-2024-36941}
  - Julia Lawall reported this null pointer dereference, this should fix it. (Mike Marshall) [task:224194] {CVE-2024-36023}
  - orangefs: Fix sb refcount leak when allocate sb info failed. (Chenyuan Mi) [task:224194]
  - orangefs: set up and use backing_dev_info (Martin Brandenburg) [task:224194]
  - dyndbg: fix old BUG_ON in >control parser (Jim Cromie) [task:223134] {CVE-2024-35947}
  - btrfs: send: handle path ref underflow in header iterate_inode_ref() (David Sterba) [task:223135] {CVE-2024-35935}
  - drm/amd/display: Avoid NULL dereference of timing generator (Wayne Lin) [task:222113] {CVE-2023-52753}
  - ax25: fix use-after-free bugs caused by ax25_ds_del_timer (Duoming Zhou) [task:222117] {CVE-2024-35887}
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Harshit Mogalapalli) [task:223052] {CVE-2024-35944}
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (Wenchao Hao) [task:223057] {CVE-2023-52809}
  - pwm: Fix double shift bug (Dan Carpenter) [task:223061] {CVE-2023-52756}
  - mm, slub: fix potential memoryleak in kmem_cache_open() (Miaohe Lin) [task:223062] {CVE-2021-47466}
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (Jia-Ju Bai) [task:223064] {CVE-2023-52855}
  - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (Ziyang Xuan) [task:223071] {CVE-2021-47459}
  - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Ping-Ke Shih) [task:223076] {CVE-2023-52832}
  - media: bttv: fix use after free error due to btv->timeout timer (Zheng Wang) [task:223078] {CVE-2023-52847}
  - thermal: core: prevent potential string overflow (Dan Carpenter) [task:223081] {CVE-2023-52868}
  - usb: udc: remove warning when queue disabled ep (yuan linyu) [task:223085] {CVE-2024-35822}
  - Bluetooth: btintel: Fixe build regression (Luiz Augusto von Dentz) [task:223087]
  - Bluetooth: btintel: Fix null ptr deref in btintel_read_version (Edward Adam Davis) [task:223087] {CVE-2024-35933}
  - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Shigeru Yoshida) [task:223088] {CVE-2023-52845}
  - jfs: fix array-index-out-of-bounds in dbFindLeaf (Manas Ghandat) [task:223091] {CVE-2023-52799}
  - dma-debug: prevent an error message from causing runtime problems (Hamza Mahfooz) [task:223100] {CVE-2021-47374}
  - dma-debug: report -EEXIST errors in add_dma_entry (Hamza Mahfooz) [task:223100]
  - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) [task:223098] {CVE-2021-47385}
  - hwmon: (w83792d) convert to use devm_i2c_new_dummy_device (Wolfram Sang) [task:223098]
  - net/mlx5e: fix a double-free in arfs_create_groups (Zhipeng Lu) [task:223101] {CVE-2024-35835}
  - net/mlx5: Use kfree(ft->g) in arfs_create_groups() (Denis Efremov) [task:223101]
  - ubifs: Set page uptodate in the correct place (Matthew Wilcox (Oracle)) [task:223108] {CVE-2024-35821}
  - hid: cp2112: Fix duplicate workqueue initialization (Danny Kaehn) [task:223106] {CVE-2023-52853}
  - HID: cp2112: Use irqchip template (Linus Walleij) [task:223106]
  - soc: fsl: qbman: Always disable interrupts when taking cgr_lock (Sean Anderson) [task:223111] {CVE-2024-35806}
  - raid1: fix use-after-free for original bio in raid1_write_request() (Yu Kuai) [task:223112] {CVE-2024-35979}
  - md/raid1: free the r1bio before waiting for blocked rdev (Xueshi Hu) [task:223112]
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Felix Fietkau) [task:223119] {CVE-2024-35789}
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Justin Tee) [task:223120] {CVE-2024-35930}
  - PCI/PM: Drain runtime-idle callbacks before driver removal (Rafael J. Wysocki) [task:223117] {CVE-2024-35809}
  - PCI: Drop pci_device_remove() test of pci_dev->driver (Uwe Kleine-König) [task:223117]
  - net/sched: act_skbmod: prevent kernel-infoleak (Eric Dumazet) [task:223125] {CVE-2024-35893}
  - irqchip/gic-v3-its: Prevent double free on error (Guanrui Huang) [task:222083] {CVE-2024-35847}
  - Fix page corruption caused by racy check in __free_pages (David Chen) [task:222097] {CVE-2023-52739}
  - ext4: fix corruption during on-line resize (Maximilian Heyne) [task:222107] {CVE-2024-35807}
  - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Kemeng Shi) [task:222107]
  - block: prevent division by zero in blk_rq_stat_sum() (Roman Smirnov) [task:222081] {CVE-2024-35925}
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale) [task:222091] {CVE-2024-36004}
  - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) [task:222075] {CVE-2021-47384}
  - hwmon: (w83793d) convert to use devm_i2c_new_dummy_device (Wolfram Sang) [task:222075]
  - i2c: add newly exported functions to the header, too (Wolfram Sang) [task:222075]
  - i2c: core: add device-managed version of i2c_new_dummy (Heiner Kallweit) [task:222075]
  - i2c: core: improve return value handling of i2c_new_device and i2c_new_dummy (Heiner Kallweit) [task:222075]
  - vt: fix unicode buffer corruption when deleting characters (Nicolas Pitre) [task:222055] {CVE-2024-35823}
  - platform/x86: wmi: Fix opening of char device (Armin Wolf) [task:222045] {CVE-2023-52864}
  - platform/x86: wmi: remove unnecessary initializations (Barnabás Pőcze) [task:222045]
  - ALSA: hda: Fix possible null-ptr-deref when assigning a stream (Cezary Rojewski) [task:222049] {CVE-2023-52806}
  - cifs: Fix use-after-free in rdata->read_into_pages() (ZhaoLong Wang) [task:222065] {CVE-2023-52741}
  - s390/dasd: protect device queue against concurrent access (Jan Höppner) [task:222069] {CVE-2023-52774}
  - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() (Zhipeng Lu) [task:222033] {CVE-2024-35828}
  - tty: vcc: Add check for kstrdup() in vcc_probe() (Yi Yang) [task:222029] {CVE-2023-52789}
  - x86/mm/pat: fix VM_PAT handling in COW mappings (David Hildenbrand) [task:222013] {CVE-2024-35877}
  - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ido Schimmel) [task:219462] {CVE-2024-26586}
  - perf/core: Bail out early if the request AUX area is out of bound (Shuai Xue) [task:222041] {CVE-2023-52835}
  - arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer (Nathan Chancellor) [task:222027] {CVE-2023-52750}
  - arm64: Make CPU_BIG_ENDIAN depend on ld.bfd or ld.lld 13.0.0+ (Nathan Chancellor) [task:222027]
  - arm64: Kconfig: add a choice for endianness (Anders Roxell) [task:222027]
  - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (Dan Carpenter) [task:222005] {CVE-2023-52840}
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (Jiasheng Jiang) [task:222009] {CVE-2023-52865}
  - Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov) [task:222003] {CVE-2024-35978}
  - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() (Dominique Martinet) [task:222001]
  - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (David Sterba) [task:222001] {CVE-2024-35936}
  - erspan: make sure erspan_base_hdr is present in skb->head (Eric Dumazet) [task:221973] {CVE-2024-35888}
  - ip_gre: do not report erspan version on GRE interface (Hangbin Liu) [task:221973]
  - erspan: Check IFLA_GRE_ERSPAN_VER is set. (William Tu) [task:221973]
  - erspan: Add type I version 0 support. (William Tu) [task:221973]
  - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (Ryosuke Yasuoka) [task:221993]
  - nfc: nci: Fix uninit-value in nci_rx_work (Ryosuke Yasuoka) [task:221993]
  - nfc: nci: Fix kcov check in nci_rx_work() (Tetsuo Handa) [task:221993]
  - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (Ryosuke Yasuoka) [task:221993] {CVE-2024-35915}
  - jfs: fix array-index-out-of-bounds in diAlloc (Manas Ghandat) [task:221969] {CVE-2023-52805}
  - media: tc358743: register v4l2 async device only after successful setup (Alexander Stein) [task:221967] {CVE-2024-35830}
  - md/raid5: fix atomicity violation in raid5_cache_count (Gui-Dong Han) [task:212055] {CVE-2024-23307}
  - dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock (Sergey Senozhatsky) [task:205035] {CVE-2023-52516}
  - dma-debug: make __dma_entry_alloc_check_leak() static (Jason Yan) [task:205035]
  - dma-debug: Make leak-like behaviour apparent (Robin Murphy) [task:205035]
  - dma-debug: Dynamically expand the dma_debug_entry pool (Robin Murphy) [task:205035]
  - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (Johannes Thumshirn) [task:221877] {CVE-2024-35849}
  - bpf: Add oversize check before call kvcalloc() (Bixuan Cui) [task:221879] {CVE-2021-47376}
  - fbmon: prevent division by zero in fb_videomode_from_videomode() (Roman Smirnov) [task:221889] {CVE-2024-35922}
  - ipv6: Fix infinite recursion in fib6_dump_done(). (Kuniyuki Iwashima) [task:221895] {CVE-2024-35886}
  - net/mlx5: Properly link new fs rules into the tree (Cosmin Ratiu) [task:221917] {CVE-2024-35960}
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Rajeshwar R Shinde) [task:221919] {CVE-2023-52764}
  - llc: verify mac len before reading mac header (Willem de Bruijn) [task:221933] {CVE-2023-52843}
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [task:221945] {CVE-2024-35969}
  - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (Mario Limonciello) [task:221901] {CVE-2023-52818}
  - ACPI / processor: fix cpufreq_get_max_state(cpu) for loongarch (Li ZhiGang) [bug:225708]
  - drm/radeon: possible buffer overflow (Konstantin Meskhidze) [task:221865] {CVE-2023-52867}
  - fs/jfs: Add validity check for db_maxag and db_agpref (Juntong Deng) [task:221861] {CVE-2023-52804}
  - mm: fix use-after-free bug when mm->mmap is reused after being freed (Suren Baghdasaryan) [task:217008]
  - mm: protect free_pgtables with mmap_lock write lock in exit_mmap (Suren Baghdasaryan) [task:217008]
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Ziyang Xuan) [task:221827] {CVE-2024-35898}
  - fs/jfs: Add check for negative db_l2nbperpage (Juntong Deng) [task:221929] {CVE-2023-52810}
  - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (Siddh Raman Pant) [task:221929]
  - fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu) [task:164562]
  - jfs: fix divide error in dbNextAG (Pavel Skripkin) [task:162162]
  - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (Mario Limonciello) [task:221829] {CVE-2023-52819}
  - Bluetooth: Fix double free in hci_conn_cleanup (ZhengHan Wang) [task:221833] {CVE-2023-52830}
  - batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann) [task:221835] {CVE-2024-35982}
  - ALSA: usx2y: Don't call free_pages_exact() with NULL address (Takashi Iwai) [task:221837] {CVE-2021-47332}
  - ALSA: us122l: Use alloc_pages_exact() (Takashi Iwai) [task:221837]
  - net/sched: fix lockdep splat in qdisc_tree_reduce_backlog() (Eric Dumazet) [task:221845] {CVE-2024-35892}
  - locking/ww_mutex/test: Fix potential workqueue corruption (John Stultz) [task:221843] {CVE-2023-52836}
  - gfs2: ignore negated quota changes (Bob Peterson) [task:221849] {CVE-2023-52759}
  - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Alex Deucher) [task:221851]
  - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Qu Huang) [task:221851] {CVE-2023-52817}
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (Jiasheng Jiang) [task:221847] {CVE-2023-52875}
  - kcm: do not sense pfmemalloc status in kcm_sendpage() (Eric Dumazet) [task:217601]
  - net: do not sense pfmemalloc status in skb_append_pagefrags() (Eric Dumazet) [task:217601]
  - tcp: TX zerocopy should not sense pfmemalloc status (Eric Dumazet) [task:217601] {CVE-2022-48689}
  - net: introduce __skb_fill_page_desc_noacc (Pavel Begunkov) [task:217601]
  - net: zerocopy: combine pages in zerocopy_sg_from_iter() (Eric Dumazet) [task:217601]
  - netrom: Fix a data-race around sysctl_netrom_link_fails_count (Jason Xing) [task:220900] {CVE-2024-27420}
  - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay (Jason Xing) [task:220866] {CVE-2024-27424}
  - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Kunwu Chan) [task:220898] {CVE-2023-52675}
  - rpmsg: virtio: Free driver_override when rpmsg_remove() (Xiaolei Wang) [task:220897] {CVE-2023-52670}
  - ACPI: video: check for error while searching for backlight device parent (Nikita Kiryushin) [task:220896] {CVE-2023-52693}
  - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (Sergey Shtylyov) [task:220894] {CVE-2023-52685}
  - ACPI: LPIT: Avoid u32 multiplication overflow (Nikita Kiryushin) [task:220888] {CVE-2023-52683}
  - calipso: fix memory leak in netlbl_calipso_add_pass() (Gavrilov Ilia) [task:220887] {CVE-2023-52698}
  - netlabel: remove unused parameter in netlbl_netlink_auditinfo() (Zheng Yejian) [task:220887]
  - net: netlabel: Fix kerneldoc warnings (Andrew Lunn) [task:220887]
  - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries (Jason Xing) [task:220882] {CVE-2024-27426}
  - netfilter: nft_limit: reject configurations that cause integer overflow (Florian Westphal) [task:209247] {CVE-2024-26668}
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found. (Johan Carlsson) [task:220883] {CVE-2024-27436}
  - drm/amd/pm: fix a double-free in si_dpm_init (Zhipeng Lu) [task:220893] {CVE-2023-52691}
  - netrom: Fix a data-race around sysctl_netrom_routing_control (Jason Xing) [task:220890] {CVE-2024-27421}
  - usb: gadget: ncm: Fix handling of zero block length packets (Krishna Kurapati) [task:220889]
  - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs (Krishna Kurapati) [task:220889] {CVE-2024-27405}
  - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (Krishna Kurapati) [task:220889]
  - USB: gadget: f_ncm: Fix NDP16 datagram validation (Bryan O'Donoghue) [task:157172]
  - USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() (Brooke Basile) [task:157172]
  - powerpc/powernv: Add a null pointer check in opal_event_init() (Kunwu Chan) [task:220885] {CVE-2023-52686}
  - netrom: Fix data-races around sysctl_net_busy_read (Jason Xing) [task:220863] {CVE-2024-27419}
  - wifi: nl80211: reject iftype change with mesh ID change (Johannes Berg) [task:220865] {CVE-2024-27410}
  - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay (Jason Xing) [task:220871] {CVE-2024-27425}
  - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser (Jason Xing) [task:220876] {CVE-2024-27428}
  - efi/capsule-loader: fix incorrect allocation size (Arnd Bergmann) [task:220877] {CVE-2024-27413}
  - netrom: Fix a data-race around sysctl_netrom_transport_timeout (Jason Xing) [task:220880] {CVE-2024-27427}
  - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout (Jason Xing) [task:220881] {CVE-2024-27422}
  - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size (Jason Xing) [task:220881]
  - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser (Jason Xing) [task:220878] {CVE-2024-27429}
  - netrom: Fix a data-race around sysctl_netrom_default_path_quality (Jason Xing) [task:220874] {CVE-2024-27430}
  - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() (Eric Dumazet) [task:220862] {CVE-2024-27417}
  - dma: fix kabi broken for introduce dma_max_mapping_size() (leixiang) [task:226458]
  - virtio-blk: fix implicit overflow on virtio_max_dma_size (zhenwei pi) [task:221853] {CVE-2023-52762}
  - virtio-blk: support per-device queue depth (Joseph Qi) [task:221853]
  - virtio-blk: Consider virtio_max_dma_size() for maximum segment size (Joerg Roedel) [task:176679]
  - virtio: Introduce virtio_max_dma_size() (Joerg Roedel) [task:176679]
  - dma: Introduce dma_max_mapping_size() (Joerg Roedel) [task:176679]
  - swiotlb: Add is_swiotlb_active() function (Joerg Roedel) [task:176679]
  - swiotlb: Introduce swiotlb_max_mapping_size() (Joerg Roedel) [task:176679]
  - bpf: fix kabi broken in struct bpf_func_info_aux (chenyuan) [task:219647]
  - bpf: Clear subreg_def for global function return values (Ilya Leoshkevich) [task:219647]
  - bpf: Fix error path under memory pressure (Alexei Starovoitov) [task:219647]
  - bpf: Introduce function-by-function verification (Alexei Starovoitov) [task:219647]
  - sched/fair: Fix wrong cpu selecting from isolated domain (Bing Huang) [bug:225308]
  - selinux: avoid dereference of garbage after mount failure (Christian Göttsche) [task:221817] {CVE-2024-35904}
  - selinux: mark some global variables __ro_after_init (Ondrej Mosnacek) [task:221817]
  - selinux: make selinuxfs_mount static (Ondrej Mosnacek) [task:221817]
  - loongson: ACPI: Fix unmet direct dependencies detected for ACPI_PPTT (Tiezhu Yang) [task:331741]
  - LoongArch: Fix kernel boot failure with CONFIG_KASAN (Tiezhu Yang) [task:331741]
  - vfs: vfs_clone_file_prep_inodes should return EINVAL for a clone from beyond EOF (Darrick J. Wong) [task:204423, task:327911]
  - bpf: pull before calling skb_postpull_rcsum() (Jakub Kicinski) [task:329163]
  - inet: inet_defrag: prevent sk release while still in use (Florian Westphal) [task:213813] {CVE-2024-26921}
  - inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [task:213813]
  - skb_expand_head() adjust skb->truesize incorrectly (Vasily Averin) [task:213813]
  - skbuff: introduce skb_expand_head() (Vasily Averin) [task:213813]
  - ipv6: prevent NULL dereference in ip6_output() (Eric Dumazet) [task:226456]
  - ipv6: annotate data-races around cnf.disable_ipv6 (Eric Dumazet) [task:226456]
  - netfilter: conntrack: serialize hash resizes and cleanups (Eric Dumazet) [task:226456] {CVE-2021-47408}
  - tls: fix race between tx work scheduling and socket close (Jakub Kicinski) [task:219458] {CVE-2024-26585}
  - spec: enable kabi check (Zhengyuan Liu) [task:224852]


author: Xiangqian Zhang <zhangxiangqian@kylinos.cn> - 4.19.90-52.23.v2207.gfb13
changelog:
  - Update kernel version to 4.19.90-52.23.v2207.gfb13 (huzhiwei) [task:337941]
  - sdei_watchdog: NMI watchdong is limited to Hisilicon platform (Zheng Tan) [task:159823]
  - amba/pl011: Use uart-pl011 driver on more platforms (丁成山) [task:412087]
  - fio test,x100 usb controller die. (huzhiwei)
  - Fix PCIE bridge driver enable_device error in CET-54 Institute. (huzhiwei)
  - PHYTIUM: drm/phytium: Add driver version information (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Add PWM backlight control for pe220x eDP (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Change the drm driver name for pe220x (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Add dc patch for BMC (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Modify driver to adapt to ARM and X86_64 compiles (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Mask the hdcp timer irq (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Mask the AUX reply error interrupt (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Adjust log printing level (WangHao) [task:346055]
  - PHYTIUM: drm/phytium: Replace default EFI fb0 with DC FB (WangHao) [task:346055]
  - PHYTIUM: drm/phytium: Fixed dp codec id (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Get edid audio capability (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Bugfix Xorg startup for ps23xx when using pe2201 bmc card (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Cursor hot support negative numbers (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Enable gamma features (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Add capability of tile mode (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Limit the TU to a maximum of 63 (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Sync patches from 4.19.y-dev oss branch (Wang Yinfeng) [task:346055]
  - Revert "arm64: fix phytium gpu black screen" (huzhiwei)
  - Revert "drm/phytium: support device type for vram" (huzhiwei)
  - Revert "drm/phytium: Bugfix Xorg startup for ps23xx when using pe2201 bmc card" (huzhiwei)
  - Revert "arm64: fix phytium bmc black screen" (huzhiwei)
  - Update kernel version to 4.19.90-52.23.v2207.gfb12 (huzhiwei) [task:337941]
  - x86/config : Enable CONFIG_IDE_TASK_IOCTL (huzhiwei)
  - Update kernel version to 4.19.90-52.23.v2207.gfb11 (huzhiwei) [task:337941]
  - Disable CONFIG_GPU_INSPUR (huzhiwei)
  - ACPI/IORT: Do not blindly trust DMA masks from firmware (Moritz Fischer)
  - Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support" (yuyang) [task:354327]
  - Remove the fortest flag (huzhiwei)
  - Update kernel version to 4.19.90-52.23.v2207.gfb10 (huzhiwei) [task:337941]
  - Revert "serial: amba-pl011: add RS485 support" (huzhiwei)
  - Revert "tty: make tty_get_{char,frame}_size available" (huzhiwei)
  - Revert "serial: ar933x_uart: add RS485 support" (huzhiwei)
  - Revert "serial: 8250: Support rs485 devicetree properties" (huzhiwei)
  - Revert "serial: Allow uart_get_rs485_mode() to return errno" (huzhiwei)
  - Revert "stmmac: Fix network transmission queue timeout." (Xiangqian Zhang) [task:349993]
  - mwv207: update version to 1.5.4 (huzhiwei)
  - enable CONFIG_PHYTIUM_2000PLUS_CPUFREQ (huzhiwei)
  - serial: Allow uart_get_rs485_mode() to return errno (huzhiwei)
  - serial: 8250: Support rs485 devicetree properties (Lukas Wunner)
  - serial: ar933x_uart: add RS485 support (Daniel Golle)
  - tty: make tty_get_{char,frame}_size available (Jiri Slaby)
  - serial: amba-pl011: add RS485 support (huzhiwei)
  - mm/khugepaged: add switch for reserved memory feature (wolfgang huang) [task:167156]
  - mm/khugepaged: reserved memory higher (wolfgang huang) [task:167156]
  - mm/khugepaged: reseved memory adaptively (wolfgang huang) [task:167156]
  - mm: khugepaged: recalculate min_free_kbytes after stopping khugepaged (Liangcai Fan) [task:163804]
  - mm/page_alloc: use clamp() to simplify code (Wang ShaoBo) [task:163804]
  - mm/page_alloc: increase default min_free_kbytes bound (Joel Savitz) [task:163804]
  - rpmbuild: delete all generated files before rebuilding kernel (Jiangshan Yi) [task:186229, bug:205986]
  - sched/debug: Make sd->flags sysctl read-only (Valentin Schneider) [task:151434]
  - sched/numa: Remove unused numa_stats::nr_running field (Vincent Guittot) [task:151434]
  - sched/numa: Remove unused code from update_numa_stats() (Vincent Guittot) [task:151434]
  - arm64: configs: enalbe CONFIG_ARCH_GET_PREFERRED_SIBLING_CPUMASK and CONFIG_BLK_BIO_DISPATCH_ASYNC (huhai) [task:126721]
  - arm64/topology: getting preferred sibling's cpumask for s5000c (huhai) [task:126721]
  - EULER: arm64/topology: getting preferred sibling's cpumask supported by platform (Wang ShaoBo) [task:111462]
  - kvm/vgic-sys-reg-v3.c: ignore A3V bit check when vm live migrate (Hao Ge) [task:158563]
  - set CONFIG_I2C_PHYTIUM_PLATFORM = y (zhangruiqiong) [task:333992]
  - i2c/phytium: Change the adap->nr to -1 (Riwen Lu) [task:126708]
  - i2c: i2c add acpi support (zhangruiqiong) [task:333992]
  - i2c: phytium: Add platform support for Phytium I2C controller (zhangruiqiong) [task:333992]
  - config: CONFIG_IDE_TASK_IOCTL=y (huzhiwei) [task:192130]
  - Revert "arm64/ras: support sea error recovery" (Zheng Tan) [task:150631]
  - Revert "GHES: add a notify chain for process memory section" (Zheng Tan) [task:150631]
  - Revert "arm64/ras: save error address from memory section for recovery" (Zheng Tan) [task:150631]
  - Revert "arm64/ras: use %pK to print address" (Zheng Tan) [task:150631]
  - OPENEULER: ACPI/APEI: Add SEI notification type support for ARMv8 (Dongjiu Geng) [task:180700]
  - OPENEULER: RAS: Report ARM processor information to userspace (Shengwei Luo) [task:150631]
  - mm/memory-failure: Add memory_failure_queue_kick() (James Morse) [task:150625]
  - ACPI: APEI: do not add task_work to kernel thread to avoid memory leak (Shuai Xue) [task:150625]
  - ACPI: APEI: fix synchronous external aborts in user-mode (Xiaofei Tan) [task:150625]
  - ACPI: APEI: Kick the memory_failure() queue for synchronous errors (James Morse) [task:150625]
  - PHYTIUM: arm/SDEI: add SDEI support for S2500. (Wang Yinfeng) [task:105471]
  - arm64: acpi: fix DAIF manipulation with pNMI (Mark Rutland) [task:105471]
  - ACPI / APEI: Add support for the SDEI GHES Notification type (James Morse) [task:105471]
  - firmware: arm_sdei: Add ACPI GHES registration helper (James Morse) [task:105471]
  - ACPI / APEI: Use separate fixmap pages for arm64 NMI-like notifications (James Morse) [task:105471]
  - ACPI / APEI: Only use queued estatus entry during in_nmi_queue_one_entry() (James Morse) [task:105471]
  - ACPI / APEI: Split ghes_read_estatus() to allow a peek at the CPER length (James Morse) [task:105471]
  - ACPI / APEI: Make GHES estatus header validation more user friendly (James Morse) [task:105471]
  - ACPI / APEI: Pass ghes and estatus separately to avoid a later copy (James Morse) [task:105471]
  - ACPI / APEI: Let the notification helper specify the fixmap slot (James Morse) [task:105471]
  - ACPI / APEI: Move locking to the notification helper (James Morse) [task:105471]
  - arm64: KVM/mm: Move SEA handling behind a single 'claim' interface (James Morse) [task:105471]
  - KVM: arm/arm64: Add kvm_ras.h to collect kvm specific RAS plumbing (James Morse) [task:105471]
  - ACPI / APEI: Switch NOTIFY_SEA to use the estatus queue (James Morse) [task:105471]
  - ACPI / APEI: Move NOTIFY_SEA between the estatus-queue and NOTIFY_NMI (James Morse) [task:105471]
  - ACPI / APEI: Don't allow ghes_ack_error() to mask earlier errors (James Morse) [task:105471]
  - ACPI / APEI: Generalise the estatus queue's notify code (James Morse) [task:105471]
  - ACPI / APEI: Don't update struct ghes' flags in read/clear estatus (James Morse) [task:105471]
  - ACPI / APEI: Remove spurious GHES_TO_CLEAR check (James Morse) [task:105471]
  - ACPI / APEI: Don't store CPER records physical address in struct ghes (James Morse) [task:105471]
  - ACPI / APEI: Make estatus pool allocation a static size (James Morse) [task:105471]
  - ACPI / APEI: Make hest.c manage the estatus memory pool (James Morse) [task:105471]
  - ACPI / APEI: Remove silent flag from ghes_read_estatus() (James Morse) [task:105471]
  - ACPI: APEI: EINJ: Use DEFINE_DEBUGFS_ATTRIBUTE for debugfs files (YueHaibing) [task:105471]
  - ACPI / APEI: Fix parsing HEST that includes Deferred Machine Check subtable (Yazen Ghannam) [task:105471]
  - APEI / ERST: Switch to use new generic UUID API (Andy Shevchenko) [task:105471]
  - nic/sssnic: fix build some error (丁成山)
  - raid/ssraid: update kmod src 1.0.6.2 (丁成山)
  - 3snic/sssraid: Add support for 3s580 raid card on arm64 (tanze) [task:167388]
  - 3snic: Fix Platform compilation error (luoqing) [task:185097]
  - SSSNIC: Support 3snic 3s9xx network card 3snic (“luoqing”) [task:177721]
  - 3snic/sssraid: Fix some formatting issues (tanze) [task:167388]
  - 3SNIC: sssraid: Provide driver support for 3S580 raid card (tanze) [task:167388]
  - 3rd/inspur: update inspur driver to v1.3 (luyuantao) [task:333977]
  - 3rd/inspur: update inspur driver to v0.2 (Shixiong Ou) [task:173411]
  - arm64: add interface to get cpu type for phytium D3000 (cuiguoqi) [task:233225]
  - ARM64/cpuinfo: update cpu descriptor for c_show (Riwen Lu) [task:177455, bug:210941]
  - x86/config: Disable CONFIG__GPU_709_LJMCORE and enable CONFIG_SCSI_HISI_RAID (huzhiwei) [task:207968]
  - 3rd/ljmcore: Update 2.2.4.11 ljmcore driver (huzhiwei) [task:193958]
  - i40e: add DISABLE_PACKET_SPLIT from i40e-2.24.6 (Xiangqian Zhang) [task:195520]
  - rnpm: update rnpm-0.2.1-8747fea version (Xiangqian Zhang) [task:195520]
  - txgbe: add DISABLE_PACKET_SPLIT (Xiangqian Zhang) [task:195520]
  - arm64/configs: enable CONFIG_ARM64_LSE_ATOMICS (丁成山) [bug:217693]
  - arm64/bmc: fix ast2500 black screen (丁成山) [task:213143]
  - debug: make debug info output to console while watchdog soft lockup and rcu stall occurs (wangxuanfu)
  - stmmac: Fix network transmission queue timeout. (zhangxiangqian)
  - arm64/config: add CONFIG_GPU_JJW_MWV207 to m (huzhiwei) [task:193901, task:194129]
  - jjw/mwv207: fix Fix incorrect use of fallthrough (Jackie Liu)
  - 3rd/mwv207: add JM9200 support. (huzhiwei) [task:193901, task:194129]
  - config: generic defconfig adds LJM GPU driver (huzhiwei) [task:193958, task:194129]
  - 3rd/ljmcore: add 2.2.4.1 ljmcore driver (pengfuyuan) [task:171485, task:159113]
  - arm64: fix phytium bmc black screen (luyuantao) [task:194129]
  - drm/phytium: Bugfix Xorg startup for ps23xx when using pe2201 bmc card (luyuantao) [task:194129]
  - drm/phytium: support device type for vram (luyuantao) [task:178774]
  - arm64: fix phytium gpu black screen (丁成山) [task:174284]
  - Revert "mlx5: set irq's cpumask for S5000C" (丁成山) [bug:206430]
  - PHYTIUM: drm/phytium: save vram by dma (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: skip less than 640x480 mode (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: adjust e2000 phy parameters (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: disable pixel clock before dc reset (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: support for linux-5.10.0 (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: Remove reset before close pixel clock (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: Read EDID when getting mode (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: Add E2000 Display Engine support (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: update phytium x100 dc driver before support e2000 (oushixiong) [task:110384]
  - PCI/MSI: Set device flag indicating only 32-bit MSI support (Vidya Sagar) [task:156767]
  - PCI/MSI: Move MSI/MSI-X init to msi.c (Bjorn Helgaas) [task:156767]
  - once: implement DO_ONCE_LITE for non-fast-path "do once" functionality (Tanner Love) [task:156640]
  - net: update netdev_rx_csum_fault() print dump only once (Tanner Love) [task:156640]
  - arm64: cputype: Add MIDR values for Phytium S5000C (huhai) [task:158187]
  - i40e: misalignment of irq's cpumask for S5000C (xiaolinkui) [task:160286]
  - mlx5: set irq's cpumask for S5000C (xiaolinkui) [task:161774]
  - arm64: Introduce is_ft5000c() (huhai) [task:161070]
  - net: bonding: avoid use-after-free with tx_hashtbl/rx_hashtbl (sujing)
  - solve zx200 ehci. (“zhanqiufang”)
  - HIBMC-DRM driver conflicts with JM7000 series graphics card driver (huzhiwei) [task:144506]
  - stmmac: set GMII mode (huzhiwei)
  - arm64/configs: sync phytium x100 config options (huzhiwei)
  - x100/dp: get the number of dp links from acpi table (songxiebing) [task:54046]
  - x100/dp: modify the name of the dp reported jack and card (songxiebing) [task:54046]
  - x100/I2S : Modified to mfd driver to support three-way dp (huzhiwei)
  - x100:i2s solve voice abnormal when using aplay and other audio software (songxiebing)
  - x100: fix NULL pointer err when using dp driver in x100 (songxiebing)
  - x100:i2s add dp audio driver (huzhiwei)
  - ASoC: hdmi-codec: Add an op to set callback function for plug event (Cheng-Yi Chiang)
  - X100:I2S: Separately close different streams (songxiebing)
  - ASoc: phytium: Add phytium I2S support over PCI bus (Zhang Yiqun)
  - x100/tty: add phytium x100 pci tty driver support (Riwen Lu)
  - spi/spi-phytium: fix spi-phytium Null pointer when suspend (Riwen Lu) [task:62728]
  - x100/spi: add phytium x100 spi driver support 集成飞腾平台 SPI 驱动 (huzhiwei) [task:144506]
  - mci: phytium: Add support for the Phytium MMC (huzhiwei) [task:144506]
  - spi: spi-phytium: Add GPIO cs setting support using ACPI binding (huanglei) [task:39323]
  - spi: add spi controller driver for phytium2000a4. (huzhiwei) [task:144506]
  - x100/ps2: add phytium x100 ps2 driver support (Riwen Lu)
  - x100/i2c: Add phytium x100 i2c pci driver support 集成飞腾平台i2c pci驱动 (huzhiwei) [task:144506]
  - gpio/phytium: solve can't detect the gpio rising edge interrupt (songxiebing)
  - gpio/phytium: Support for Phytium GPIO controller behind PCI (Riwen Lu)
  - pyhtium_can: Repair probe error when read the clock frequency (lingfuyi) [task:64572]
  - can: add new phytium can driver to support X100 chipset (luyun) [task:61226]


author: huzhiwei <huzhiwei@kylinos.cn> - 4.19.90-52.23.v2207.gfb14
changelog:
  - Type : bugfix/update
  - Desc : 添加内核版本更新工具，修复CONFIG_ARCH_PHYTIUM的拼写错误，修复设置no_64bit_msi时使用msi-x中断可能出现的错误，更改rapidio驱动编译为ko。
  - Merge "config: x86/arm64:Change CONFIG_RAPIDIO to M" into GJB04-GFKS2407 (huzhiwei)
  - config: x86/arm64:Change CONFIG_RAPIDIO to M (huzhiwei) [task:454526]
  - ARM64/include: fix PHYTIUM spell mistake (yuyang) [task:445312]
  - PCI/MSI: make msi-x dont care about no_64bit_msi flag. (yuyang) [task:354327]
  - Merge "Revert "Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support""" into GJB04-GFKS2407 (张向前)
  - Revert "Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"" (yuyang) [task:354327]
  - release-stable-kernel-gfb: update release-stable-kernel-gfb tool v0.0.1 (Xiangqian Zhang) [task:442530]
  - release-stable-kernel-gfb: add release-stable-kernel-gfb tool (Xiangqian Zhang) [task:442530]


author: 张向前 <zhangxiangqian@kylinos.cn> - 4.19.90-52.40.v2207.gfb14
changelog:
  - Type : bugfix/update
  - Desc : 删除和替换内核源码包内的敏感词。
  - Delete and replace sensitive words. (liyongda) [task:373693]


author: huzhiwei <huzhiwei@kylinos.cn> - 4.19.90-52.40.v2207.gfb14a
changelog:
  - Type : bugfix/update
  - Desc : 修复安全模块selinux引发的内核崩溃问题
  - Update kernel version to 4.19.90-52.40.v2207.gfb14a (huzhiwei) [bug:378299]
  - security/selinux: Fixed crash caused by selinux (mengdehui) [bug:258979]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-43.0.v2207
changelog:
  - KYLIN: selftests/net: enable lo.accept_local in psock_snd (luyun) [task:84718]
  - selftests/net: improve descriptions for XFAIL cases in psock_snd.sh (Po-Hsu Lin) [task:84718]
  - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE (Jann Horn) [bug:120181] {CVE-2022-30594}
  - net/sched: cls_u32: fix netns refcount changes in u32_change() (Eric Dumazet) [bug:120187] {CVE-2022-29581}
  - NFC: netlink: fix sleep in atomic bug when firmware download timeout (Duoming Zhou)
  - nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs (Duoming Zhou) [bug:120196] {CVE-2022-1734}
  - nfc: replace improper check device_is_registered() in netlink related functions (Duoming Zhou)
  - KYLIN: 3rd/sietium: sietium driver update (yangdeyi)
  - pwm:loongson: Perfect pwm-ls driver (lvyanbing)
  - ls2k1000: pwm: build as module support (suijingfeng)
  - pwm:loongson: fix up variable overflow (Yangyinglu)
  - Loongson2K: pwm: Pass PWM controller clock-frequency through device tree. (Ming Wang)
  - LoongArch: Set CONFIG_MEGARAID_SAS to m by default (Tianli Xiong)
  - gmac:The initial value of rx_watchdog is reduced to 5 (zhangtianyang)
  - LoongArch: LSVZ: fix pmu function (zhaotianrui)
  - LoongArch: module: Add plt section support (liweihao)
  - Revert "LoongArch: LSVZ: handle irq directly in kvm exception context" (王建兴)
  - LoongArch: Add vbios passed through ACPI table (liuyun)
  - LoongArch: Add gop support (liuyun)
  - LoongArch: Fix the usage of the suspend address (yangqiming)
  - Loongarch: fixup gcsr (Wang liupu)
  - loongarch: configs: make r8111G nic use r8168 driver use by default (Yinbo Zhu)
  - LoongArch: kprobe: Rewrite kprobe_handler implementation (Qing Zhang)
  - LoongArch: Remove relocations of REL type (Youling Tang)
  - objtool: LoongArch: Remove unused macro definitions (Youling Tang)
  - pci/quirks: ls7a2000: fix pm transition of devices under pcie port (Jianmin Lv)
  - KYLIN: config: Supports KAE engine drivers (pengcan) [bug:119799]
  - selftests/seccomp: allow clock_nanosleep instead of nanosleep (Thadeu Lima de Souza Cascardo) [task:69904]
  - KYLIN: arm64: use correct format characters (huhai)
  - KYLIN: Revert "optee: add ACPI support for Phytium" (huanfuxi) [task:84829]
  - net: phy: improve phy_init_hw (Heiner Kallweit) [bug:118542]
  - KYLIN: found-commit-all-deps: tips max_level correct (Jackie Liu)
  - KYLIN: config: enable kfence for x86 and arm64 (Jackie Liu) [task:68770]
  - KYLIN: mm/kfence: print disabling or re-enabling message (Jackie Liu)
  - kfence: allow use of a deferrable timer (Marco Elver) [task:68770]
  - kfence: test: try to avoid test_gfpzero trigger rcu_stall (Peng Liu) [task:68770]
  - kunit: make kunit_test_timeout compatible with comment (Peng Liu) [task:68770]
  - kunit: fix UAF when run kfence test case test_gfpzero (Peng Liu) [task:68770]
  - kfence: alloc kfence_pool after system startup (Tianchen Ding) [task:68770]
  - kfence: allow re-enabling KFENCE after system startup (Tianchen Ding) [task:68770]
  - mm/kfence: remove unnecessary CONFIG_KFENCE option (tangmeng) [task:68770]
  - net: preserve skb_end_offset() in skb_unclone_keeptruesize() (Eric Dumazet) [task:68770]
  - net: add skb_set_end_offset() helper (Eric Dumazet) [task:68770]
  - kfence: make test case compatible with run time set sample interval (Peng Liu) [task:68770]
  - kfence: fix memory leak when cat kfence objects (Baokun Li) [task:68770]
  - kfence: default to dynamic branch instead of static keys mode (Marco Elver) [task:68770]
  - kfence: always use static branches to guard kfence_alloc() (Marco Elver) [task:68770]
  - kfence: shorten critical sections of alloc/free (Marco Elver) [task:68770]
  - kfence: add note to documentation about skipping covered allocations (Marco Elver) [task:68770]
  - kfence: limit currently covered allocations when pool nearly full (Marco Elver) [task:68770]
  - kfence: move saving stack trace of allocations into __kfence_alloc() (Marco Elver) [task:68770]
  - kfence: count unexpectedly skipped allocations (Marco Elver) [task:68770]
  - net: add and use skb_unclone_keeptruesize() helper (Eric Dumazet) [task:68770]
  - kfence: test: fail fast if disabled at boot (Marco Elver) [task:68770]
  - kfence: show cpu and timestamp in alloc/free info (Marco Elver) [task:68770]
  - kfence: fix is_kfence_address() for addresses below KFENCE_POOL_SIZE (Marco Elver) [task:68770]
  - kfence, x86: only define helpers if !MODULE (Marco Elver) [task:68770]
  - kfence: skip all GFP_ZONEMASK allocations (Alexander Potapenko) [task:68770]
  - kfence: move the size check to the beginning of __kfence_alloc() (Alexander Potapenko) [task:68770]
  - kfence: defer kfence_test_init to ensure that kunit debugfs is created (Weizhao Ouyang) [task:68770]
  - kfence: unconditionally use unbound work queue (Marco Elver) [task:68770]
  - kfence: use TASK_IDLE when awaiting allocation (Marco Elver) [task:68770]
  - kfence: use power-efficient work queue to run delayed work (Marco Elver) [task:68770]
  - kfence: maximize allocation wait timeout duration (Marco Elver) [task:68770]
  - kfence: await for allocation using wait_event (Marco Elver) [task:68770]
  - kfence: zero guard page after out-of-bounds access (Marco Elver) [task:68770]
  - kfence, x86: fix preemptible warning on KPTI-enabled systems (Marco Elver) [task:68770]
  - kfence: make compatible with kmemleak (Marco Elver) [task:68770]
  - kfence, slab: fix cache_alloc_debugcheck_after() for bulk allocations (Marco Elver) [task:68770]
  - kfence: add test suite (Marco Elver) [task:68770]
  - kfence, Documentation: add KFENCE documentation (Marco Elver) [task:68770]
  - mm, kfence: insert KFENCE hooks for SLUB (Alexander Potapenko) [task:68770]
  - mm, kfence: insert KFENCE hooks for SLAB (Alexander Potapenko) [task:68770]
  - kfence: use pt_regs to generate stack trace on faults (Marco Elver) [task:68770]
  - arm64, kfence: enable KFENCE for ARM64 (Marco Elver) [task:68770]
  - x86, kfence: enable KFENCE for x86 (Alexander Potapenko) [task:68770]
  - mm: add Kernel Electric-Fence infrastructure (Alexander Potapenko) [task:68770]
  - kunit: Don't fail test suites if one of them is empty (Andy Shevchenko)
  - kunit: remove timeout dependence on sysctl_hung_task_timeout_seconds (Alan Maguire) [task:68770]
  - kunit: allow kunit tests to be loaded as a module (Alan Maguire)
  - kunit: hide unexported try-catch interface in try-catch-impl.h (Alan Maguire)
  - kunit: move string-stream.h to lib/kunit (Alan Maguire)
  - kunit: fix failure to build without printk (Brendan Higgins)
  - MAINTAINERS: add entry for KUnit the unit testing framework (Brendan Higgins)
  - Documentation: kunit: add documentation for KUnit (Brendan Higgins)
  - kunit: defconfig: add defconfigs for building KUnit tests (Brendan Higgins)
  - kunit: tool: add Python wrappers for running KUnit tests (Felix Guo)
  - kunit: test: add tests for KUnit managed resources (Avinash Kondareddy)
  - kunit: test: add the concept of assertions (Brendan Higgins)
  - kunit: test: add tests for kunit test abort (Brendan Higgins)
  - kunit: test: add support for test abort (Brendan Higgins)
  - objtool: add kunit_try_catch_throw to the noreturn list (Brendan Higgins)
  - kunit: test: add initial tests (Brendan Higgins)
  - lib: enable building KUnit in lib/ (Brendan Higgins)
  - kunit: test: add the concept of expectations (Brendan Higgins)
  - kunit: test: add assertion printing library (Brendan Higgins)
  - kunit: test: add string_stream a std::stream like string builder (Brendan Higgins)
  - kunit: test: add test resource management API (Brendan Higgins)
  - kunit: test: add KUnit test runner core (Brendan Higgins)
  - include/linux/slab.h: fix sparse warning in kmalloc_type() (Vlastimil Babka)
  - string.h: Add str_has_prefix() helper function (Steven Rostedt (VMware))
  - mm/vmalloc.c: improve vfree() kerneldoc (Andrey Ryabinin)
  - mm, slab: shorten kmalloc cache names for large sizes (Vlastimil Babka)
  - mm, proc: add KReclaimable to /proc/meminfo (Vlastimil Babka)
  - mm: rename and change semantics of nr_indirectly_reclaimable_bytes (Vlastimil Babka)
  - dcache: allocate external names from reclaimable kmalloc caches (Vlastimil Babka)
  - mm, slab/slub: introduce kmalloc-reclaimable caches (Vlastimil Babka)
  - mm, slab: combine kmalloc_caches and kmalloc_dma_caches (Vlastimil Babka)
  - mm/slub.c: switch to bitmap_zalloc() (Andy Shevchenko)
  - selftests: gpio: restructure Makefile (Fathi Boudra) [task:83556]
  - KYLIN: ACPI: Limit max_cstate to 1 on Hygon platforms (huhai)
  - KYLIN: Revert "KYLIN: x86/hygon: use IDLE_POLL to disable c-state and idle routine" (huhai)
  - KYLIN: Revert "KYLIN: x86/hygon: Can not use IDLE_POLL in hyper" (huhai)
  - KYLIN: config: add support for test_bpf (xiaolinkui) [task:84711]
  - selftests/tls: Add MSG_WAITALL in recv() syscall (Vakul Garg) [task:84719]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-44.0.v2207
changelog:
  - selftest: txtimestamp: fix net ns entry logic (Paolo Pisati) [task:88343]
  - selftests: timestamping: Fix SIOCGSTAMP undeclared build failure (Shuah Khan) [task:88343]
  - selftests: fix timestamping Makefile (Deepa Dinamani) [task:88343]
  - selftests: add missing include unistd (Deepa Dinamani) [task:88343]
  - selftests/txtimestamp: Fix an equals vs assign bug (Dan Carpenter) [task:88343]
  - selftests: add txtimestamp kselftest (Willem de Bruijn) [task:88343]
  - selftests: expand txtimestamp with ipv6 dgram + raw and pf_packet (Willem de Bruijn) [task:88343]
  - selftests: expand txtimestamp with cmsg support (Willem de Bruijn) [task:88343]
  - KYLIN: fs/pipe: Solve the problem of LTP smoketest failure (yijiangshan) [bug:120350]
  - hsr: use netdev_err() instead of WARN_ONCE() (Taehee Yoo)
  - crypto: api - Check spawn->alg under lock in crypto_drop_spawn (Herbert Xu)
  - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [bug:121496] {CVE-2022-1729}
  - floppy: disable FDRAWCMD by default (Willy Tarreau) [bug:121514] {CVE-2022-1836}
  - KYLIN: configs: disable ser_gigaset & gigaset (Jackie Liu)
  - KYLIN: security/kysec: fix code style issue (huanfuxi)
  - KYLIN: sync-stable: discard unwanted newlines (Jackie Liu)
  - Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (Linus Torvalds) [bug:112032] {CVE-2022-0854}
  - swiotlb: fix info leak with DMA_FROM_DEVICE (Halil Pasic) [bug:112032] {CVE-2022-0854}
  - KYLIN: configs: disable CMA all platform default (Jackie Liu) [task:87802]
  - scsi: iscsi: Fix unbound endpoint error handling (Mike Christie) [task:84035]
  - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart (Mike Christie) [task:84035]
  - scsi: iscsi: Fix endpoint reuse regression (Mike Christie) [task:84035]
  - scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Mike Christie) [task:84035]
  - scsi: iscsi: Move iscsi_ep_disconnect() (Mike Christie) [task:84035]
  - scsi: iscsi: Drop temp workq_name (Mike Christie) [task:84035]
  - scsi: iscsi: Use the session workqueue for recovery (Mike Christie) [task:84035]
  - scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding (Mike Christie) [task:84035]
  - scsi: iscsi: Remove iscsi_scan_finished() (Mike Christie) [task:84035]
  - scsi: iscsi: Speed up session unblocking and removal (Mike Christie) [task:84035]
  - scsi: iscsi: Fix recovery and unblocking race (Mike Christie) [task:84035]
  - scsi: iscsi: Fix set_param() handling (Mike Christie) [task:84035]
  - scsi: iscsi: Flush block work before unblock (Mike Christie) [task:84035]
  - scsi: iscsi: Fix in-kernel conn failure handling (Mike Christie) [task:84035]
  - scsi: iscsi: Rel ref after iscsi_lookup_endpoint() (Mike Christie) [task:84035]
  - scsi: iscsi: Force immediate failure during shutdown (Mike Christie) [task:84035]
  - scsi: iscsi: Stop queueing during ep_disconnect (Mike Christie) [task:84035]
  - scsi: iscsi: Fix iSCSI cls conn state (Mike Christie) [task:84035]
  - scsi: iscsi: Fix race condition between login and sync thread (Gulam Mohamed) [task:84035]
  - scsi: iscsi: Optimize work queue flush use (Mike Christie) [task:84035]
  - scsi: iscsi: Change iSCSI workqueue max_active back to 1 (Bob Liu) [task:84035]
  - scsi: iscsi: Fix deadlock on recovery path during GFP_IO reclaim (Gabriel Krisman Bertazi) [task:84035]
  - scsi: iscsi: Register sysfs for iscsi workqueue (Bob Liu) [task:84035]
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi) [task:84035]
  - scsi: iscsi: Perform connection failure entirely in kernel space (Bharath Ravi) [task:84035]
  - kselftest: Minimise dependency of get_size on C library interfaces (Siddhesh Poyarekar)
  - arm64: Make debug exception handlers visible from RCU (Masami Hiramatsu) [task:87978]
  - KYLIN: xfs: fix xfs shutdown filesystem by security_inode_alloc failed (Jackie Liu) [task:85662]
  - KYLIN: Revert "signal: fix kabi changes in struct task_struct" (Jackie Liu)
  - KYLIN: Revert "futex: sched: fix kabi broken in task_struct" (Jackie Liu)
  - KYLIN: Revert "futex: sched: fix UAF when free futex_exit_mutex in free_task()" (Jackie Liu)
  - KYLIN: Revert "pid: fix imbalanced calling of cgroup_threadgroup_change_begin/end()" (Jackie Liu)
  - KYLIN: Revert "pid: fix return value when copy_process() failed" (Jackie Liu)
  - KYLIN: gitmessage: drop branch name in patchs comment (Jackie Liu)
  - KYLIN: tools/test: fix arm64 rtnetlink.sh fail. (zhaochenguang) [task:84712]
  - KYLIN: selftesting: update kylinos generic defcfg (zhaochenguang) [task:84712]
  - KYLIN: Revert "bpf, tests: Add tail call test suite" (xiaolinkui) [task:84711]
  - KYLIN: Revert "bpf/tests: Fix error in tail call limit tests" (xiaolinkui) [task:84711]
  - KYLIN: x86: config: add support for test_bpf (xiaolinkui) [task:84711]
  - bpf: test_bpf: add init_net to dev for flow_dissector (Song Liu) [task:84711]
  - UBUNTU: SAUCE: selftests: net: fix "from" match test in fib_rule_tests.sh (Marcelo Henrique Cerri) [task:84716]
  - KYLIN: x86/configs: Align default configuration options based on CentOS and openEuler (leixiang) [task:64045]
  - selftests: Update fib_tests to handle missing ping6 (David Ahern)
  - fib_tests: Add tests for invalid metric on route (David Ahern) [task:84713]
  - fib_tests: Add tests for metrics on routes (David Ahern) [task:84713]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-45.0.v2207
changelog:
  - KYLIN: sync-stable: support setting level (Jackie Liu)
  - tcp: resalt the secret every 10 seconds (Eric Dumazet)
  - Bluetooth: hci_h5: fix memory leak in h5_close (Anant Thazhemadam)
  - Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (Peilin Ye) [task:91469]
  - Bluetooth: Fix null pointer dereference in hci_event_packet() (Anmol Karn)
  - KYLIN: arm64: Add kernel parameter for CPU0 hotplug and remove config switch (yijiangshan) [bug:122008]
  - KYLIN: ngbe: Make use of cpumask_local_spread to improve RSS locality (xiaolinkui)
  - KYLIN: ngbe: enable cpumask for wangxun (xiaolinkui)
  - crypto: arm64/ghash-neon - bump priority to 150 (Ard Biesheuvel)
  - crypto: xts - simplify error handling in ->create() (Eric Biggers) [task:90975]
  - crypto: lrw - simplify error handling in create() (Eric Biggers) [task:90975]
  - crypto: arm64/gcm-ce - implement 4 way interleave (Ard Biesheuvel) [task:91194]
  - crypto: aes-generic - drop key expansion routine in favor of library version (Ard Biesheuvel)
  - KYLIN: crypto: zhaoxin-aes - switch to library version of key expansion routine (Jackie Liu)
  - crypto: arm64/aes-ce - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: arm64/aes-neonbs - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: arm64/aes-ccm - switch to AES library (Ard Biesheuvel)
  - crypto: arm/aes-neonbs - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: arm64/ghash - switch to AES library (Ard Biesheuvel) [task:91194]
  - crypto: safexcel/aes - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: cesa/aes - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: padlock/aes - switch to library version of key expansion routine (Ard Biesheuvel)
  - crypto: x86/aes - drop scalar assembler implementations (Ard Biesheuvel)
  - crypto: x86/aes-ni - switch to generic for fallback and key routines (Ard Biesheuvel)
  - crypto: aes - create AES library based on the fixed time AES code (Ard Biesheuvel)
  - crypto: aes/fixed-time - align key schedule with other implementations (Ard Biesheuvel)
  - crypto: aes - rename local routines to prevent future clashes (Ard Biesheuvel)
  - crypto: arm/aes-ce - cosmetic/whitespace cleanup (Ard Biesheuvel)
  - crypto: arm64/ghash - register PMULL variants as separate algos (Ard Biesheuvel) [task:91194]
  - tcp: increase source port perturb table to 2^16 (Willy Tarreau) [bug:123678] {CVE-2022-32296}
  - netfilter: nf_tables: disallow non-stateful expression in sets earlier (Pablo Neira Ayuso) [bug:123674] {CVE-2022-1966}
  - KYLIN: loongarch/config: enable some filesystem for loongarch (wangxuewen) [bug:122374]
  - KYLIN: include: Added an arm64 macro to limit the cacheline (pengcan) [task:85182]
  - KYLIN: scripts: add a script to compile and check kabi automatically (Zhengyuan Liu)
  - KYLIN: lib/raid: check recv algo performance for test (Zhengyuan Liu) [task:90865]
  - lib/raid6: Include <asm/ppc-opcode.h> for VPERMXOR (Paul Menzel) [task:90865]
  - lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 (Paul Menzel) [task:90865]
  - lib/raid6/test: fix multiple definition linking error (Dirk Müller) [task:90865]
  - lib/raid6: Use strict priority ranking for pq gen() benchmarking (Dirk Müller) [task:90865]
  - lib/raid6: skip benchmark of non-chosen xor_syndrome functions (Dirk Müller) [task:90865]
  - lib/raid6: Let $(UNROLL) rules work with macOS userland (John Millikin) [task:90865]
  - lib/raid6/test: fix build on distros whose /bin/sh is not bash (Masahiro Yamada) [task:90865]
  - md/raid6: fix algorithm choice under larger PAGE_SIZE (Zhengyuan Liu) [task:90865]
  - raid6/test: fix a compilation warning (Zhengyuan Liu) [task:90865]
  - lib/raid6: fix unnecessary rebuild of vpermxor*.c (Masahiro Yamada) [task:90865]
  - lib/raid6: refactor unroll rules with pattern rules (Masahiro Yamada) [task:90865]
  - kbuild: remove redundant target cleaning on failure (Masahiro Yamada) [task:90865]
  - lib/raid6: remove duplicated CFLAGS_REMOVE_altivec8.o (Masahiro Yamada) [task:90865]
  - RAID/s390: remove invalid 'r' inline asm operand modifier (Vasily Gorbik) [task:90865]
  - lib/raid6: arm: optimize away a mask operation in NEON recovery routine (Ard Biesheuvel) [task:90865]
  - lib/raid6: use vdupq_n_u8 to avoid endianness warnings (ndesaulniers@google.com) [task:90865]
  - lib/raid6: add option to skip algo benchmarking (Daniel Verkamp) [task:90865]
  - lib/raid6: sort algos in rough performance order (Daniel Verkamp) [task:90865]
  - lib/raid6: check for assembler SSSE3 support (Daniel Verkamp) [task:90865]
  - lib/raid6: avoid __attribute_const__ redefinition (Daniel Verkamp) [task:90865]
  - lib/raid6: add missing include for raid6test (Daniel Verkamp) [task:90865]
  - Revert "md/raid6: fix algorithm choice under larger PAGE_SIZE" (Zhengyuan Liu) [task:90865]
  - crypto: algapi - make crypto_drop_spawn() a no-op on uninitialized spawns (Eric Biggers) [task:90975]
  - dm: do not use waitqueue for request-based DM (Ming Lei) [task:88844]
  - blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() (Ming Lei) [task:88844]
  - dm mpath: pass IO start time to path selector (Gabriel Krisman Bertazi) [task:88844]
  - dm rq: remove unused arguments from rq_completed() (Mike Snitzer) [task:88844]
  - blk-mq: change blk_mq_queue_busy() to blk_mq_queue_inflight() (Jens Axboe) [task:88844]
  - KYLIN: Revert "KYLIN: kabi: fix kabi for part->in_flight" (zhanggenjian) [task:88844]
  - net: virtio_net_hdr_to_skb: count transport header in UFO (Jonathan Davies) [task:84718]
  - selftests/net: remove min gso test in packet_snd (Dust Li) [task:84718]
  - net: be more gentle about silly gso requests coming from user (Eric Dumazet) [task:84718]
  - Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid (Luiz Augusto von Dentz)
  - Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails (Wang Hai)
  - Bluetooth: Fix use after free in hci_send_acl (Luiz Augusto von Dentz)
  - net/qrtr: fix __netdev_alloc_skb call (Pavel Skripkin)
  - Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data (Gopal Tiwari) [bug:122252]
  - KYLIN: Optimized unixbench tests of Kunpeng 920 (pengcan) [task:85182]
  - KYLIN: security/kysec: optimize process path getting in ppro monitor (yangzhao)
  - KYLIN: security/kysec: remove script checking in kysec_task_kill() (yangzhao) [bug:119471]
  - KYLIN: KYLIN-MAINTAINER: add kylinos maintainer map (Jackie Liu)
  - KYLIN: optee: add ACPI support for Phytium (huanfuxi) [task:84829]
  - KYLIN: sort-commit-by-upstream: fix output patch's format (Jackie Liu)
  - KYLIN: security/kysec: allow killed by itself in kysec_task_kill() (yangzhao)
  - KYLIN: Revert "KYLIN: security/kysec: fix can kill protect task" (yangzhao) [bug:119840]
  - KYLIN: security/kysec: optimize kysec module code (yangzhao) [task:83026]
  - KYLIN: security/kysec: modify inode security mutex to spinlock (yangzhao) [task:83026]
  - KYLIN: security/kysec: implementation of exectl func in bprm_check hook (yangzhao) [task:83026]
  - KYLIN: Loongarch/pci: Set default vga boot device (Zhenneng Li) [task:88294, bug:120253]
  - KYLIN: vga: move fixup_vga to common code (Zhenneng Li)
  - HYGON: newfeature: crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp. (Yabin Li) [task:84397]
  - HYGON: bugfix: crypto: ccp: It prompt failed when encrypted size is 64KB. (Yabin Li) [task:84397]
  - HYGON: newfeature: crypto: ccp: Process multiple VQ commands once for SM3 ccp. (Yabin Li) [task:84397]
  - HYGON: newfeature: crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192. (Yabin Li) [task:84397]
  - HYGON: bugfix: crypto: ccp: Only handle interrupts by completion, eliminating by empty queue. (Yabin Li) [task:84397]
  - HYGON: bugfix: crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP. (Yabin Li) [task:84397]
  - HYGON: newfeature: Crypto: ccp: Optimize the exchanging context data between crypto and driver. (Yabin Li) [task:84397]
  - KYLIN: sync-stable: add feature find fix commit (Jackie Liu)
  - KYLIN: found-commit-all-deps: Prevent circular lookup dependencies (Jackie Liu)
  - KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID (Paolo Bonzini) [bug:121506] {CVE-2022-1789}


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-46.0.v2207
changelog:
  - LOONGSON: drm/loongson: Resolve 7A2000 vbltest and pageflip errors (liweitao) [task:90934]
  - LOONGSON: drm/loongson: Fixed 7A1000 fbcon screen failure (liweitao) [task:90934]
  - LOONGSON: drm/loongson: loongson_fbdev_init() should called after hotplug works (Sui Jingfeng) [task:90934]
  - LOONGSON: drm/loongson: fix black screen on netboot install of loongnix (Sui Jingfeng) [task:90934]
  - bpf: Add BTF_KIND_FLOAT to uapi (Ilya Leoshkevich) [task:91016]
  - libbpf: Fix type compatibility check copy-paste error (Andrii Nakryiko) [task:91016]
  - libbpf: Implement enum value-based CO-RE relocations (Andrii Nakryiko) [task:91016]
  - libbpf: Implement type-based CO-RE relocations support (Andrii Nakryiko) [task:91016]
  - libbpf: Improve relocation ambiguity detection (Andrii Nakryiko) [task:91016]
  - libbpf: Clean up and improve CO-RE reloc logging (Andrii Nakryiko) [task:91016]
  - libbpf: Improve error logging for mismatched BTF kind cases (Andrii Nakryiko) [task:91016]
  - libbpf: Disable -Wswitch-enum compiler warning (Andrii Nakryiko) [task:91016]
  - libbpf: Ignore incompatible types with matching name during CO-RE relocation (Andrii Nakryiko) [task:91016]
  - libbpf: Fix realloc usage in bpf_core_find_cands (Andrii Nakryiko) [task:91016]
  - libbpf: Improve handling of failed CO-RE relocations (Andrii Nakryiko) [task:91016]
  - libbpf: Support CO-RE relocations for LDX/ST/STX instructions (Andrii Nakryiko) [task:91016]
  - libbpf: Support flexible arrays in CO-RE (Andrii Nakryiko)
  - KYLIN: security/kysec: remove unused variables in kysec_task_kill() (yangzhao)
  - KYLIN: security/kysec: fix bug with .viminfo is set to readonly label (yangzhao) [bug:120931]
  - xfs: Fix false positive lockdep warning with sb_internal & fs_reclaim (Waiman Long) [bug:120083]
  - xfs: rename the speculative block allocation reclaim toggle functions (Darrick J. Wong) [bug:120083]
  - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (Haimin Zhang) [bug:112037] {CVE-2022-0494}
  - KYLIN: sync-stable: force reset author every time (Jackie Liu)


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-47.0.v2207
changelog:
  - afs: Fix infinite loop found by xfstest generic/676 (David Howells)
  - sctp: use call_rcu to free endpoint (Xin Long) [bug:124648] {CVE-2022-20154}
  - mmc: block: fix read single on recovery logic (Christian Löhle) [bug:124636] {CVE-2022-20008}
  - io_uring: clean up ->files grabbing (Pavel Begunkov) [task:91386]
  - io_uring: don't rely on weak ->files references (Jens Axboe) [task:91386]
  - io_uring: enable task/files specific overflow flushing (Jens Axboe) [task:91386]
  - io_uring: return cancelation status from poll/timeout/files handlers (Jens Axboe) [task:91386]
  - io_uring: unconditionally grab req->task (Jens Axboe) [task:91386]
  - io_uring: move dropping of files into separate helper (Jens Axboe) [task:91386]
  - io_uring: allow timeout/poll/files killing to take task into account (Jens Axboe) [task:91386]
  - KYLIN: security/kysec: fix panic when 3adm opened and kysec disabled (yangzhao) [bug:124729]
  - KYLIN: security: fix soft lockup bug in security_socket_getpeersec_stream() when security closed (yangzhao) [bug:124559]
  - KYLIN: security/kysec: remove set default rule in module (huanfuxi) [task:91912, bug:124516, bug:109500]
  - KYLIN: Revert "KYLIN: fs/proc: add PKS marking into /proc/osinfo" (huanfuxi)
  - dma-direct: Force unencrypted DMA under SME for certain DMA masks (Tom Lendacky) [bug:122774]
  - dma-direct: Make DIRECT_MAPPING_ERROR viable for SWIOTLB (Robin Murphy) [bug:122774]
  - MIPS: Fix `dma_alloc_coherent' returning a non-coherent allocation (Maciej W. Rozycki) [bug:122774]
  - swiotlb: don't dip into swiotlb pool for coherent allocations (Christoph Hellwig) [bug:122774]
  - swiotlb: refactor swiotlb_map_page (Christoph Hellwig) [bug:122774]
  - swiotlb: use swiotlb_map_page in swiotlb_map_sg_attrs (Christoph Hellwig) [bug:122774]
  - swiotlb: merge swiotlb_unmap_page and unmap_single (Christoph Hellwig) [bug:122774]
  - swiotlb: remove the overflow buffer (Christoph Hellwig) [bug:122774]
  - dma-mapping: merge direct and noncoherent ops (Christoph Hellwig) [bug:122774]
  - dma-mapping: move the dma_coherent flag to struct device (Christoph Hellwig) [bug:122774]
  - KYLIN: osinfo: show working platform (Jackie Liu)
  - ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (Eric Dumazet)


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-48.0.v2207
changelog:
  - KYLIN: config: set yutai phy driver config to M. (zhaochenguang) [task:94950]
  - KYLIN: security/kysec: allow record audit log when kysec enabled (yangzhao)
  - faddr2line: Fix overlapping text section failures, the sequel (Josh Poimboeuf)
  - scripts/faddr2line: Fix overlapping text section failures (Josh Poimboeuf)
  - KYLIN: kysec: fix potential out-of-bounds access issues of name (Jackie Liu)
  - KYLIN: kysec: Use pr_debug instead of manual implementation (Jackie Liu)
  - KYLIN: kysec: Remove unnecessary zeroing (Jackie Liu)
  - KYLIN: kysec: use pr_fmt auto generate prefix (Jackie Liu)
  - KYLIN: kysec: adjust kysec disabled state of hooks (Jackie Liu)
  - KYLIN: kysec: exit the thread when kysec is closed (Jackie Liu)
  - KYLIN: osinfo: make uptime pretty for human beings (Jackie Liu)
  - x86/speculation/mmio: Print SMT warning (Josh Poimboeuf) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - KVM: x86/speculation: Disable Fill buffer clear within guests (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/srbds: Update SRBDS mitigation selection (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation: Add a common function for MD_CLEAR mitigation update (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - Documentation: Add documentation for Processor MMIO Stale Data (Pawan Gupta) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/cpu: Add another Alder Lake CPU to the Intel family (Gayatri Kammela) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (Tony Luck) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - cpu/speculation: Add prototype for cpu_show_srbds() (Guenter Roeck) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - KVM: VMX: Mark RCX, RDX and RSI as clobbered in vmx_vcpu_run()'s asm blob (Sean Christopherson) [bug:125047]
  - KVM: VMX: fix crash cleanup when KVM wasn't used (Vitaly Kuznetsov) [bug:125047]
  - KVM: s390: vsie: Fix delivery of addressing exceptions (David Hildenbrand) [bug:125047]
  - KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks (David Hildenbrand) [bug:125047]
  - KVM: VMX: Always VMCLEAR in-use VMCSes during crash with kexec support (Sean Christopherson) [bug:125047]
  - KVM: nVMX: Properly handle userspace interrupt window request (Sean Christopherson) [bug:125047]
  - KVM: x86: Gracefully handle __vmalloc() failure during VM allocation (Sean Christopherson) [bug:125047]
  - KVM: x86: Allocate new rmap and large page tracking when moving memslot (Sean Christopherson) [bug:125047]
  - x86/cpu: Add Jasper Lake to Intel family (Zhang Rui) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - x86/cpu: Add Elkhart Lake to Intel family (Gayatri Kammela) [bug:125047] {CVE-2022-21125, CVE-2022-21123, CVE-2022-21166}
  - KVM: VMX: Explicitly reference RCX as the vmx_vcpu pointer in asm blobs (Sean Christopherson) [bug:125047]
  - KVM: VMX: Zero out *all* general purpose registers after VM-Exit (Sean Christopherson) [bug:125047]
  - KYLIN: phy:fix fiber and utp can't up at the same time (zhaochenguang) [task:69009]
  - KYLIN: crypto: add sm2 module (yushanshan) [bug:125310]
  - KYLIN: config: enable logitech wheels configuration and force feedback support (Jackie Liu) [task:94256]
  - KYLIN: kernel.spec: fix upgrade from SP1 to SP3 (Jackie Liu) [bug:124466]
  - xfs: cover the log during log quiesce (Brian Foster) [task:82242]
  - xfs: sync lazy sb accounting on quiesce of read-only mounts (Brian Foster) [task:82242]
  - xfs: make use of the l_targ field in struct xlog (Christoph Hellwig) [task:82242]
  - xfs: separate log cleaning from log quiesce (Brian Foster) [task:82242]
  - xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster) [task:82242]
  - xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster) [task:82242]
  - xfs: ratelimit unmount time per-buffer I/O error alert (Brian Foster) [task:82242]
  - KYLIN: mod-blacklist.sh: drop blacklist of nft_chain_*.ko (Jackie Liu)
  - KYLIN: backport-tools: add convert-to-lts tool (Jackie Liu)
  - powerpc/32: Fix overread/overwrite of thread_struct via ptrace (Michael Ellerman) [bug:124640] {CVE-2022-32981}
  - libbpf: Avoid false unuinitialized variable warning in bpf_core_apply_relo (Andrii Nakryiko) [task:93705]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-49.0.v2207
changelog:
  - fs: sysfs_emit: Remove PAGE_SIZE alignment check (Lucas Wei)
  - workqueue: Add RCU annotation for pwq list walk (Sebastian Andrzej Siewior)
  - xfs: fix unused log variable in xfs_log_cover() (Brian Foster)
  - netfilter: nf_tables: do not leave dangling pointer in nf_tables_set_alloc_name (Eric Dumazet) [task:95868]
  - netfilter: nf_tables: silence a RCU-list warning in nft_table_lookup() (Qian Cai) [task:95868]
  - netfilter: nf_tables: fix infinite loop when expr is not available (Florian Westphal) [task:95868]
  - netfilter: nf_tables: autoload modules from the abort path (Pablo Neira Ayuso) [task:95868]
  - netfilter: ecache: don't look for ecache extension on dying/unconfirmed conntracks (Florian Westphal) [task:95868]
  - rcu: Add support for consolidated-RCU reader checking (Joel Fernandes (Google))
  - rcu: Remove redundant debug_locks check in rcu_read_lock_sched_held() (Joel Fernandes (Google))
  - treewide: Rename rcu_dereference_raw_notrace() to _check() (Joel Fernandes (Google))
  - netfilter: nft_meta: skip EAGAIN if nft_meta_bridge is not a module (Pablo Neira Ayuso)
  - netfilter: nf_tables: force module load in case select_ops() returns -EAGAIN (Pablo Neira Ayuso)
  - netfilter: nf_tables: add nft_expr_type_request_module() (Pablo Neira Ayuso)
  - ftrace: Create new ftrace_internal.h header (Steven Rostedt (VMware))
  - KYLIN: sched: Improve spawn test of UnixBench (liwanwu) [bug:119995]
  - KYLIN: net: socket server performance optimization (luoqing) [bug:120014]
  - KYLIN: security/kysec: reduce repeated judgments in kysec_get_status() (yangzhao)
  - KYLIN: fs: Optimize unixbench's file copy test (pengcan) [bug:121719]
  - KYLIN: usb: Improves USB2.0 write performance for External HDD device(0x0b05:0x1932) (Hu Xiaoying) [task:89793]
  - sched/fair: Add document for burstable CFS bandwidth (Huaixin Chang) [task:94280]
  - sched/fair: Add cfs bandwidth burst statistics (Huaixin Chang) [task:94280]
  - sched/fair: Introduce the burstable CFS controller (Huaixin Chang) [task:94280]
  - sched: Defend cfs and rt bandwidth quota against overflow (Huaixin Chang) [task:94280]
  - KYLIN: add linux_headers_install.sh script to build out of tree modules (George Guo) [task:94951]
  - KYLIN: loongarch/config: support parport as module (wangxuewen) [task:95203]
  - KYLIN: io_uring: fix missing remove ITER_KVEC (Jackie Liu) [task:96351]
  - KYLIN: ft-hda: solve ft-hda losing when reboot (songxiebing) [task:93001]
  - hwmon: (scpi-hwmon) shows the negative temperature properly (Riwen Lu) [bug:56117]
  - io_uring: fix ignoring xa_store errors (Pavel Begunkov) [task:95530]
  - io_uring: Fix XArray usage in io_uring_add_task_file (Matthew Wilcox (Oracle)) [task:95530]
  - io_uring: don't run task work on an exiting task (Jens Axboe) [task:95530]
  - task_work: only grab task signal lock when needed (Jens Axboe) [task:95530]
  - io_uring: no need to call xa_destroy() on empty xarray (Jens Axboe) [task:96230]
  - tc-tests: test denial of 'goto chain' for exceed traffic in police.json (Davide Caratti)
  - xfs: don't reserve per-AG space for an internal log (Darrick J. Wong) [task:82242]
  - KYLIN: Revert "KYLIN: logo: Change YHKYLIN logo to KYLINSOFT." (Jackie Liu) [task:74569]
  - KYLIN: kysec: Optimize the operation of kysec under file paths (Jackie Liu)
  - KYLIN: kysec: Use static_key instead of unlikely to further optimize efficiency (Jackie Liu)
  - KYLIN: loongarch/config: Add support for two filesystems on loongarch (wangxuewen) [bug:122374]
  - xhci: Keep interrupt disabled in initialization until host is running. (Hongyu Xie) [task:95460]
  - KYLIN: kysec: Fix kysec crash due to kysec_is_disabled bug (Jackie Liu) [task:95345]
  - KYLIN: kysec: Optimize kysec_is_disabled branch prediction (Jackie Liu)


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-50.0.v2207
changelog:
  - KYLIN: fix errors when run ./linux-headers-$version.sh (George Guo) [task:94951]
  - KYLIN: net: replace cpumask_equal with cpumask_subset (xiaolinkui) [task:97876]
  - KYLIN: loongarch: fix io_uring series system call exception (Enze Li) [bug:124889]
  - selftests/x86/mov_ss_trap: Fix the SYSENTER test (Andy Lutomirski)
  - KYLIN: x86: debug_defconfig: more netfilter test module (Jackie Liu)
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (huhai) [task:94748]
  - io_uring: Convert advanced XArray uses to the normal API (Matthew Wilcox (Oracle)) [task:98126]
  - exec: Move io_uring_task_cancel after the point of no return (Eric W. Biederman) [task:97817]
  - futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI (Thomas Gleixner) [task:87159]
  - clocksource/drivers/arm_arch_timer: Use stable count reader in erratum sne (Keqian Zhu) [task:87159]
  - futex: Adjust absolute futex timeouts with per time namespace offset (Andrei Vagin) [task:87159]
  - arm64: vdso32: make vdso32 install conditional (Frank van der Linden) [task:87159]
  - ARM64: vdso32: Install vdso32 from vdso_install (Stephen Boyd) [task:87159]
  - vdso/treewide: Add vdso_data pointer argument to __arch_get_hw_counter() (Thomas Gleixner) [task:87159]
  - timekeeping/vsyscall: Provide vdso_update_begin/end() (Thomas Gleixner) [task:87159]
  - lib/vdso: Allow to add architecture-specific vdso data (Sven Schnelle) [task:87159]
  - arm64: enable time namespace support (Andrei Vagin) [task:87159]
  - arm64/vdso: Restrict splitting VVAR VMA (Andrei Vagin) [task:87159]
  - arm64/vdso: Handle faults on timens page (Andrei Vagin) [task:87159]
  - arm64/vdso: Add time namespace page (Andrei Vagin) [task:87159]
  - arm64/vdso: Zap vvar pages when switching to a time namespace (Andrei Vagin) [task:87159]
  - arm64/vdso: use the fault callback to map vvar pages (Andrei Vagin) [task:87159]
  - futex: Remove unused or redundant includes (André Almeida) [task:87159]
  - arm64: compat: Allow 32-bit vdso and sigpage to co-exist (Will Deacon) [task:87159]
  - mmap locking API: initial implementation as rwsem wrappers (Michel Lespinasse) [task:87159]
  - x86/vdso: Unbreak paravirt VDSO clocks (Thomas Gleixner) [task:87159]
  - lib/vdso: Provide sanity check for cycles (again) (Thomas Gleixner) [task:87159]
  - clocksource: Remove obsolete ifdef (Thomas Gleixner) [task:87159]
  - selftests/timens: handle a case when alarm clocks are not supported (Andrei Vagin) [task:87159]
  - arm64: vdso: Add --eh-frame-hdr to ldflags (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Add -fasynchronous-unwind-tables to cflags (Vincenzo Frascino) [task:87159]
  - arm64: vdso: use consistent 'map' nomenclature (Mark Rutland) [task:87159]
  - arm64: vdso: use consistent 'abi' nomenclature (Mark Rutland) [task:87159]
  - arm64: vdso: simplify arch_vdso_type ifdeffery (Mark Rutland) [task:87159]
  - arm64: vdso: remove aarch32_vdso_pages[] (Mark Rutland) [task:87159]
  - arm64: vdso: Add '-Bsymbolic' to ldflags (Vincenzo Frascino) [task:87159]
  - kbuild: fix DT binding schema rule again to avoid needless rebuilds (Masahiro Yamada) [task:87159]
  - x86/vdso/vdso2c: Convert iterators to unsigned (Dmitry Safonov) [task:87159]
  - x86/vdso/vdso2c: Correct error messages on file open (Dmitry Safonov) [task:87159]
  - vdso/datapage: Use correct clock mode name in comment (Christian Brauner) [task:87159]
  - proc, time/namespace: Show clock symbolic names in /proc/pid/timens_offsets (Andrei Vagin) [task:87159]
  - arm64: vdso: don't free unallocated pages (Mark Rutland) [task:87159]
  - time/namespace: Add max_time_namespaces ucount (Dmitry Safonov) [task:87159]
  - time/namespace: Fix time_for_children symlink (Michael Kerrisk (man-pages)) [task:87159]
  - um: Fix header inclusion (Vincenzo Frascino) [task:87159]
  - lib/vdso: Enable common headers (Vincenzo Frascino) [task:87159]
  - x86/vdso: Enable x86 to use common headers (Vincenzo Frascino) [task:87159]
  - arm64: vdso32: Include common headers in the vdso library (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Include common headers in the vdso library (Vincenzo Frascino) [task:87159]
  - arm64: Introduce asm/vdso/processor.h (Vincenzo Frascino) [task:87159]
  - arm64: vdso32: Code clean up (Vincenzo Frascino) [task:87159]
  - linux/elfnote.h: Replace elf.h with UAPI equivalent (Vincenzo Frascino) [task:87159]
  - common: Introduce processor.h (Vincenzo Frascino) [task:87159]
  - linux/ktime.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/jiffies.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/time64.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/time32.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/time.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/math64.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/clocksource.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - arm64: Introduce asm/vdso/clocksource.h (Vincenzo Frascino) [task:87159]
  - x86: Introduce asm/vdso/clocksource.h (Vincenzo Frascino) [task:87159]
  - linux/limits.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/bits.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - linux/const.h: Extract common header for vDSO (Vincenzo Frascino) [task:87159]
  - arm64: compat: Fix syscall number of compat_clock_getres (Vincenzo Frascino) [task:87159]
  - selftests/timens: Remove duplicated include <time.h> (YueHaibing) [task:87159]
  - sys/sysinfo: Respect boottime inside time namespace (Cyril Hrubis) [task:87159]
  - kbuild: fix DT binding schema rule to detect command line changes (Masahiro Yamada) [task:87159]
  - clocksource/drivers/arm_arch_timer: Fix vDSO clockmode when vDSO disabled (Vincenzo Frascino) [task:87159]
  - lib/vdso: Allow architectures to provide the vdso data pointer (Christophe Leroy) [task:87159]
  - lib/vdso: Allow architectures to override the ns shift operation (Christophe Leroy) [task:87159]
  - lib/vdso: Allow fixed clock mode (Christophe Leroy) [task:87159]
  - lib/vdso: Move VCLOCK_TIMENS to vdso_clock_modes (Thomas Gleixner) [task:87159]
  - lib/vdso: Avoid highres update if clocksource is not VDSO capable (Thomas Gleixner) [task:87159]
  - lib/vdso: Cleanup clock mode storage leftovers (Thomas Gleixner) [task:87159]
  - ARM/arm64: vdso: Use common vdso clock mode storage (Thomas Gleixner) [task:87159]
  - x86/vdso: Use generic VDSO clock mode storage (Thomas Gleixner) [task:87159]
  - clocksource: Add common vdso clock mode storage (Thomas Gleixner) [task:87159]
  - x86/vdso: Move VDSO clocksource state tracking to callback (Thomas Gleixner) [task:87159]
  - clocksource: Cleanup struct clocksource and documentation (Thomas Gleixner) [task:87159]
  - lib/vdso: Allow the high resolution parts to be compiled out (Thomas Gleixner) [task:87159]
  - x86/vdso: Mark the TSC clocksource path likely (Thomas Gleixner) [task:87159]
  - selftests: use LDLIBS for libraries instead of LDFLAGS (Dmitry Safonov)
  - KVM: x86: reorganize pvclock_gtod_data members (Paolo Bonzini) [task:87159]
  - MAINTAINERS: Correct path to time namespace source file (Dmitry Safonov) [task:87159]
  - MIPS: syscalls: fix indentation of the 'SYSNR' message (Alexander Lobakin) [task:87159]
  - lib/vdso: Update coarse timekeeper unconditionally (Thomas Gleixner) [task:87159]
  - lib/vdso: Make __arch_update_vdso_data() logic understandable (Thomas Gleixner) [task:87159]
  - lib/vdso: Only read hrtimer_res when needed in __cvdso_clock_getres() (Christophe Leroy) [task:87159]
  - selftests/timens: Check for right timens offsets after fork and exec (Andrei Vagin) [task:87159]
  - selftests/timens: Add a simple perf test for clock_gettime() (Andrei Vagin) [task:87159]
  - selftests/timens: Add timer offsets test (Andrei Vagin) [task:87159]
  - selftests/timens: Add procfs selftest (Dmitry Safonov) [task:87159]
  - selftests/timens: Add a test for clock_nanosleep() (Andrei Vagin) [task:87159]
  - selftests/timens: Add a test for timerfd (Andrei Vagin) [task:87159]
  - selftests/timens: Add Time Namespace test for supported clocks (Dmitry Safonov) [task:87159]
  - fs/proc: Introduce /proc/pid/timens_offsets (Andrei Vagin) [task:87159]
  - x86/vdso: Zap vvar pages when switching to a time namespace (Dmitry Safonov) [task:87159]
  - x86/vdso: On timens page fault prefault also VVAR page (Dmitry Safonov) [task:87159]
  - x86/vdso: Handle faults on timens page (Dmitry Safonov) [task:87159]
  - time: Allocate per-timens vvar page (Dmitry Safonov) [task:87159]
  - x86/vdso: Add time napespace page (Dmitry Safonov) [task:87159]
  - x86/vdso: Provide vdso_data offset on vvar_page (Dmitry Safonov) [task:87159]
  - lib/vdso: Prepare for time namespace support (Thomas Gleixner) [task:87159]
  - x86/vdso: Restrict splitting VVAR VMA (Dmitry Safonov) [task:87159]
  - fs/proc: Respect boottime inside time namespace for /proc/uptime (Dmitry Safonov) [task:87159]
  - posix-timers: Make clock_nanosleep() time namespace aware (Andrei Vagin) [task:87159]
  - hrtimers: Prepare hrtimer_nanosleep() for time namespaces (Andrei Vagin) [task:87159]
  - alarmtimer: Make nanosleep() time namespace aware (Andrei Vagin) [task:87159]
  - posix-timers: Make timer_settime() time namespace aware (Andrei Vagin) [task:87159]
  - timerfd: Make timerfd_settime() time namespace aware (Andrei Vagin) [task:87159]
  - time: Add do_timens_ktime_to_host() helper (Andrei Vagin) [task:87159]
  - posix-clocks: Wire up clock_gettime() with timens offsets (Andrei Vagin) [task:87159]
  - posix-timers: Use clock_get_ktime() in common_timer_get() (Andrei Vagin) [task:87159]
  - posix-clocks: Introduce clock_get_ktime() callback (Andrei Vagin) [task:87159]
  - alarmtimer: Provide get_timespec() callback (Andrei Vagin) [task:87159]
  - alarmtimer: Rename gettime() callback to get_ktime() (Andrei Vagin) [task:87159]
  - posix-clocks: Rename .clock_get_timespec() callbacks accordingly (Andrei Vagin) [task:87159]
  - posix-clocks: Rename the clock_get() callback to clock_get_timespec() (Andrei Vagin) [task:87159]
  - time: Add timens_offsets to be used for tasks in time namespace (Andrei Vagin) [task:87159]
  - ns: Introduce Time Namespace (Andrei Vagin) [task:87159]
  - lib/vdso: Mark do_hres() and do_coarse() as __always_inline (Andrei Vagin) [task:87159]
  - lib/vdso: Avoid duplication in __cvdso_clock_getres() (Christophe Leroy) [task:87159]
  - lib/vdso: Add unlikely() hint into vdso_read_begin() (Andrei Vagin) [task:87159]
  - lib/vdso: Let do_coarse() return 0 to simplify the callsite (Christophe Leroy) [task:87159]
  - x86/vdso: Remove unused VDSO_HAS_32BIT_FALLBACK (Vincenzo Frascino) [task:87159]
  - arm64: compat: vdso: Remove unused VDSO_HAS_32BIT_FALLBACK (Vincenzo Frascino) [task:87159]
  - lib/vdso: Remove checks on return value for 32 bit vDSO (Vincenzo Frascino) [task:87159]
  - lib/vdso: Remove VDSO_HAS_32BIT_FALLBACK (Vincenzo Frascino) [task:87159]
  - lib/vdso: Build 32 bit specific functions in the right context (Vincenzo Frascino) [task:87159]
  - arm64: compat: vdso: Expose BUILD_VDSO32 (Vincenzo Frascino) [task:87159]
  - raid6/test: fix a compilation error (Zhengyuan Liu) [task:87159]
  - lib/vdso: Make __cvdso_clock_getres() static (Vincenzo Frascino) [task:87159]
  - y2038: vdso: change time_t to __kernel_old_time_t (Arnd Bergmann) [task:87159]
  - y2038: add __kernel_old_timespec and __kernel_old_time_t (Arnd Bergmann) [task:87159]
  - selftests: gen_kselftest_tar.sh: Do not clobber kselftest/ (Kees Cook) [task:87159]
  - selftests: breakpoints: Fix a typo of function name (Masami Hiramatsu) [task:87159]
  - timekeeping/vsyscall: Update VDSO data unconditionally (Huacai Chen) [task:87159]
  - KVM: x86: switch KVMCLOCK base to monotonic raw clock (Marcelo Tosatti) [task:87159]
  - lib/vdso: Make clock_getres() POSIX compliant again (Thomas Gleixner) [task:87159]
  - selftests: Add kselftest-all and kselftest-install targets (Shuah Khan) [task:87159]
  - um: Fix VDSO compiler warning (Johannes Berg) [task:87159]
  - ipc: fix sparc64 ipc() wrapper (Arnd Bergmann) [task:87159]
  - timekeeping/vsyscall: Prevent math overflow in BOOTTIME update (Thomas Gleixner) [task:87159]
  - selftests: use "$(MAKE)" instead of "make" (Ilya Leoshkevich) [task:87159]
  - arm64: compat: vdso: Use legacy syscalls as fallback (Thomas Gleixner) [task:87159]
  - x86/vdso/32: Use 32bit syscall fallback (Thomas Gleixner) [task:87159]
  - lib/vdso/32: Provide legacy syscall fallbacks (Thomas Gleixner) [task:87159]
  - lib/vdso: Move fallback invocation to the callers (Thomas Gleixner) [task:87159]
  - lib/vdso/32: Remove inconsistent NULL pointer checks (Thomas Gleixner) [task:87159]
  - kselftest: save-and-restore errno to allow for %m formatting (Aleksa Sarai)
  - arm64: vdso: Cleanup Makefiles (Vincenzo Frascino) [task:87159]
  - arm64: vdso: fix flip/flop vdso build bug (Naohiro Aota) [task:87159]
  - linux/bits.h: make BIT(), GENMASK(), and friends available in assembly (Masahiro Yamada) [task:87159]
  - x86/vdso: Fix flip/flop vdso build bug (Naohiro Aota) [task:87159]
  - timekeeping/vsyscall: Use __iter_div_u64_rem() (Arnd Bergmann) [task:87159]
  - arm64: compat: Fix __arch_get_hw_counter() implementation (Vincenzo Frascino) [task:87159]
  - arm64: Fix __arch_get_hw_counter() implementation (Vincenzo Frascino) [task:87159]
  - lib/vdso: Make delta calculation work correctly (Thomas Gleixner) [task:87159]
  - arm64: compat: No need for pre-ARMv7 barriers on an ARMv8 system (Catalin Marinas) [task:87159]
  - arm64: vdso: Remove unnecessary asm-offsets.c definitions (Catalin Marinas) [task:87159]
  - vdso: Remove superfluous #ifdef __KERNEL__ in vdso/datapage.h (Catalin Marinas) [task:87159]
  - x86/vdso: Add clock_gettime64() entry point (Vincenzo Frascino) [task:87159]
  - x86/vdso: Add clock_getres() entry point (Vincenzo Frascino) [task:87159]
  - x86/vdso: Switch to generic vDSO implementation (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Enable vDSO compat support (Vincenzo Frascino) [task:87159]
  - arm64: compat: Get sigreturn trampolines from vDSO (Vincenzo Frascino) [task:87159]
  - arm64: elf: VDSO code page discovery (Vincenzo Frascino) [task:87159]
  - arm64: compat: VDSO setup for compat layer (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Refactor vDSO code (Vincenzo Frascino) [task:87159]
  - arm64: compat: Add vDSO (Vincenzo Frascino) [task:87159]
  - arm64: compat: Generate asm offsets for signals (Vincenzo Frascino) [task:87159]
  - arm64: compat: Expose signal related structures (Vincenzo Frascino) [task:87159]
  - arm64: compat: Add missing syscall numbers (Vincenzo Frascino) [task:87159]
  - arm64: vdso: Build vDSO with -ffixed-x18 (Peter Collingbourne) [task:87159]
  - arm64: vdso: Substitute gettimeofday() with C implementation (Vincenzo Frascino) [task:87159]
  - timekeeping: Provide a generic update_vsyscall() implementation (Vincenzo Frascino) [task:87159]
  - lib/vdso: Add compat support (Vincenzo Frascino) [task:87159]
  - lib/vdso: Provide generic VDSO implementation (Vincenzo Frascino) [task:87159]
  - vdso: Define standardized vdso_datapage (Vincenzo Frascino) [task:87159]
  - hrtimer: Split out hrtimer defines into separate header (Vincenzo Frascino) [task:87159]
  - clocksource/drivers/arm_arch_timer: Don't trace count reader functions (Julien Thierry) [task:87159]
  - selftests: vm: Fix test build failure when built by itself (Shuah Khan) [task:87159]
  - tests: fix pidfd-test compilation (Christian Brauner) [task:87159]
  - arm64: arch_timer: mark functions as __always_inline (Anders Roxell) [task:87159]
  - treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 223 (Thomas Gleixner) [task:87159]
  - selftests: Remove forced unbuffering for test running (Kees Cook) [task:87159]
  - arm64: vdso: Explicitly add build-id option (Laura Abbott) [task:87159]
  - selftests: fix bpf build/test workflow regression when KBUILD_OUTPUT is set (Shuah Khan) [task:87159]
  - selftests: fix install target to use default install path (Shuah Khan) [task:87159]
  - x86/vdso: Remove hpet_page from vDSO (Jia Zhang) [task:87159]
  - clocksource/arm_arch_timer: Use arch_timer_read_counter to access stable counters (Marc Zyngier) [task:87159]
  - clocksource/arm_arch_timer: Remove use of workaround static key (Marc Zyngier) [task:87159]
  - clocksource/arm_arch_timer: Drop use of static key in arch_timer_reg_read_stable (Marc Zyngier) [task:87159]
  - clocksource/arm_arch_timer: Direcly assign set_next_event workaround (Marc Zyngier) [task:87159]
  - arm64: Use arch_timer_read_counter instead of arch_counter_get_cntvct (Marc Zyngier) [task:87159]
  - watchdog/sbsa: Use arch_timer_read_counter instead of arch_counter_get_cntvct (Marc Zyngier) [task:87159]
  - arm64: arch_timer: Ensure counter register reads occur with seqlock held (Will Deacon) [task:87159]
  - selftests: Add test plan API to kselftest.h and adjust callers (Kees Cook)
  - selftests: Move test output to diagnostic lines (Kees Cook)
  - selftests: Distinguish between missing and non-executable (Kees Cook)
  - selftests: Add plan line and fix result line syntax (Kees Cook)
  - selftests: Extract logic for multiple test runs (Kees Cook)
  - selftests: Use runner.sh for emit targets (Kees Cook)
  - selftests: Extract single-test shell logic from lib.mk (Kees Cook)
  - arm64: compat: Add KUSER_HELPERS config option (Vincenzo Frascino) [task:87159]
  - arm64: compat: Refactor aarch32_alloc_vdso_pages() (Vincenzo Frascino) [task:87159]
  - arm64: compat: Split kuser32 (Vincenzo Frascino) [task:87159]
  - arm64: compat: Alloc separate pages for vectors and sigpage (Vincenzo Frascino) [task:87159]
  - selftests: fix headers_install circular dependency (Shuah Khan) [task:87159]
  - x86/vdso: Rename variable to fix -Wshadow warning (Leonardo Brás) [task:87159]
  - arm64: vdso: Fix clock_getres() for CLOCK_REALTIME (Vincenzo Frascino) [task:87159]
  - arch: add pidfd and io_uring syscalls everywhere (Arnd Bergmann)
  - arm64: vdso: use $(LD) instead of $(CC) to link VDSO (Masahiro Yamada) [task:87159]
  - arm64: vdso: fix and clean-up Makefile (Masahiro Yamada) [task:87159]
  - perf tools: Update x86's syscall_64.tbl, no change in tools/perf behaviour (Arnaldo Carvalho de Melo) [task:87159]
  - linux/kernel.h: split *_MAX and *_MIN macros into <linux/limits.h> (Masahiro Yamada) [task:87159]
  - linux/kernel.h: use 'short' to define USHRT_MAX, SHRT_MAX, SHRT_MIN (Masahiro Yamada) [task:87159]
  - selftests: add tests for pidfd_send_signal() (Christian Brauner)
  - checksyscalls: fix up mq_timedreceive and stat exceptions (Arnd Bergmann) [task:87159]
  - time: Add time_types.h (Deepa Dinamani) [task:87159]
  - sh: fix build error for invisible CONFIG_BUILTIN_DTB_SOURCE (Masahiro Yamada) [task:87159]
  - y2038: add 64-bit time_t syscalls to all 32-bit architectures (Arnd Bergmann)
  - socket: Add struct __kernel_sock_timeval (Deepa Dinamani) [task:87159]
  - arch: sparc: Override struct __kernel_old_timeval (Deepa Dinamani) [task:87159]
  - kbuild: add real-prereqs shorthand for $(filter-out FORCE,$^) (Masahiro Yamada) [task:87159]
  - kbuild: simplify rules of data compression with size appending (Masahiro Yamada) [task:87159]
  - alpha: add generic get{eg,eu,g,p,u,pp}id() syscalls (Arnd Bergmann)
  - alpha: add standard statfs64/fstatfs64 syscalls (Arnd Bergmann)
  - sparc64: fix sparc_ipc type conversion (Arnd Bergmann)
  - sh: remove duplicate unistd_32.h file (Arnd Bergmann)
  - arch: add pkey and rseq syscall numbers everywhere (Arnd Bergmann)
  - ipc: rename old-style shmctl/semctl/msgctl syscalls (Arnd Bergmann)
  - arch: add split IPC system calls where needed (Arnd Bergmann)
  - sh: add statx system call (Arnd Bergmann)
  - m68k: assign syscall number for seccomp (Arnd Bergmann)
  - ARM: add kexec_file_load system call number (Arnd Bergmann)
  - ARM: add migrate_pages() system call (Arnd Bergmann)
  - alpha: wire up io_pgetevents system call (Arnd Bergmann)
  - ia64: assign syscall numbers for perf and seccomp (Arnd Bergmann)
  - ia64: add statx and io_pgetevents syscalls (Arnd Bergmann)
  - alpha: update syscall macro definitions (Arnd Bergmann)
  - s390: fix system call tracing (Heiko Carstens) [task:87159]
  - arm64: asm-offsets: remove unused offsets (Andrew Murray) [task:87159]
  - s390: remove compat_wrapper.c (Arnd Bergmann)
  - s390: autogenerate compat syscall wrappers (Arnd Bergmann)
  - s390: use generic UID16 implementation (Arnd Bergmann)
  - ipc: introduce ksys_ipc()/compat_ksys_ipc() for s390 (Arnd Bergmann)
  - s390: open-code s390_personality syscall (Arnd Bergmann)
  - kbuild: remove unused baseprereq (Masahiro Yamada) [task:87159]
  - kbuild: clean up rule_dtc_dt_yaml (Masahiro Yamada) [task:87159]
  - tools headers uapi: Sync copy of asm-generic/unistd.h with the kernel sources (Arnaldo Carvalho de Melo) [task:87159]
  - arm64: compat: Hook up io_pgetevents() for 32-bit tasks (Will Deacon)
  - arm64: replace arm64-obj-* in Makefile with obj-* (Masahiro Yamada) [task:87159]
  - alpha: generate uapi header and syscall table header files (Firoz Khan)
  - alpha: add system call table generation support (Firoz Khan)
  - alpha: add __NR_syscalls along with NR_SYSCALLS (Firoz Khan)
  - alpha: remove CONFIG_OSF4_COMPAT flag from syscall table (Firoz Khan)
  - alpha: move __IGNORE* entries to non uapi header (Firoz Khan)
  - powerpc: add system call table generation support (Firoz Khan)
  - sh: add system call table generation support (Firoz Khan)
  - sh: add __NR_syscalls along with NR_syscalls (Firoz Khan)
  - mips: add system call table generation support (Firoz Khan)
  - seccomp, s390: fix build for syscall type change (Tycho Andersen)
  - kbuild: Add support for DT binding schema checks (Rob Herring) [task:87159]
  - parisc: add system call table generation support (Firoz Khan)
  - parisc: move __IGNORE* entries to non uapi header (Firoz Khan)
  - asm-generic: add kexec_file_load system call to unistd.h (AKASHI Takahiro)
  - x86/vdso: Remove obsolete "fake section table" reservation (Sean Christopherson) [task:87159]
  - m68k: Add system call table generation support (Firoz Khan)
  - xtensa: add system call table generation support (Firoz Khan)
  - riscv: add asm/unistd.h UAPI header (David Abdurachmanov) [task:87159]
  - sparc: add system call table generation support (Firoz Khan)
  - sparc: move __IGNORE* entries to non uapi header (Firoz Khan)
  - microblaze: add system call table generation support (Firoz Khan)
  - ia64: add system call table generation support (Firoz Khan)
  - builddeb: Fix inclusion of dtbs in debian package (Rob Herring) [task:87159]
  - tools arch uapi: Update asm-generic/unistd.h and arm64 unistd.h copies (Arnaldo Carvalho de Melo) [task:87159]
  - x86: convert vdso to use vm_fault_t (Matthew Wilcox) [task:87159]
  - mm: introduce vmf_insert_pfn_prot() (Matthew Wilcox) [task:87978]
  - mm: remove vm_insert_mixed() (Matthew Wilcox) [task:87978]
  - cramfs: convert to use vmf_insert_mixed (Nicolas Pitre) [task:87978]
  - mm: convert to use vm_fault_t (Souptick Joarder) [task:87978]
  - kbuild: remove unneeded link_multi_deps (Masahiro Yamada) [task:87159]
  - x86/vdso: Initialize the CPU/node NR segment descriptor earlier (Chang S. Bae) [task:87159]
  - x86/vdso: Introduce helper functions for CPU and node number (Chang S. Bae) [task:87159]
  - x86/segments/64: Rename the GDT PER_CPU entry to CPU_NUMBER (Chang S. Bae) [task:87159]
  - x86/vdso: Rearrange do_hres() to improve code generation (Andy Lutomirski) [task:87159]
  - x86/vdso: Document vgtod_ts better (Andy Lutomirski) [task:87159]
  - x86/vdso: Remove "memory" clobbers in the vDSO syscall fallbacks (Andy Lutomirski) [task:87159]
  - x66/vdso: Add CLOCK_TAI support (Thomas Gleixner) [task:87159]
  - x86/vdso: Move cycle_last handling into the caller (Thomas Gleixner) [task:87159]
  - x86/vdso: Simplify the invalid vclock case (Thomas Gleixner) [task:87159]
  - x86/vdso: Replace the clockid switch case (Thomas Gleixner) [task:87159]
  - x86/vdso: Collapse coarse functions (Thomas Gleixner) [task:87159]
  - x86/vdso: Collapse high resolution functions (Thomas Gleixner) [task:87159]
  - x86/vdso: Introduce and use vgtod_ts (Thomas Gleixner) [task:87159]
  - x86/vdso: Use unsigned int consistently for vsyscall_gtod_data:: Seq (Thomas Gleixner) [task:87159]
  - x86/vdso: Enforce 64bit clocksource (Thomas Gleixner) [task:87159]
  - x86/time: Implement clocksource_arch_init() (Thomas Gleixner) [task:87159]
  - clocksource: Provide clocksource_arch_init() (Thomas Gleixner) [task:87159]
  - kbuild: consolidate Devicetree dtb build rules (Rob Herring) [task:87159]
  - nios2: use common rules to build built-in dtb (Rob Herring) [task:87159]
  - powerpc: build .dtb files in dts directory (Rob Herring) [task:87159]
  - nios2: build .dtb files in dts directory (Rob Herring) [task:87159]
  - scripts/dtc: Update to upstream version v1.4.7-14-gc86da84d30e4 (Rob Herring) [task:87159]
  - RISC-V: Request newstat syscalls (Guenter Roeck) [task:87159]
  - y2038: socket: Change recvmmsg to use __kernel_timespec (Arnd Bergmann) [task:87159]
  - y2038: Remove newstat family from default syscall set (Arnd Bergmann)
  - y2038: globally rename compat_time to old_time32 (Arnd Bergmann) [task:87978]
  - alpha: use alpha_ni_syscall only for syscall zero (Al Viro)
  - KYLIN: Revert "arm64: arch_timer: Disable CNTVCT_EL0 trap if workaround is enabled" (Jackie Liu)
  - KYLIN: Revert "arm64:vdso: Rewrite gettimeofday into C." (Jackie Liu)
  - KYLIN: Revert "arm64: arch_timer: Ensure counter register reads occur with seqlock held" (Jackie Liu)
  - KYLIN: Revert "arm64: vdso: Fix clock_getres() for CLOCK_REALTIME" (Jackie Liu)
  - KYLIN: Revert "arm64: vdso: do cntvct workaround in the VDSO" (Jackie Liu)
  - KYLIN: Revert "arm64: vdso: move vdso_fix into struct vdso_data" (Jackie Liu)
  - KYLIN: Revert "arm64: arch_timer: only do cntvct workaround on VDSO path on D05" (Jackie Liu)
  - KYLIN: Revert "KYLIN: arm/arch_timer: fix build missing CONFIG_HISILICON_ERRATUM_161010101" (Jackie Liu)
  - KYLIN: Revert "clocksource/drivers/arch_timer: Fix vdso_fix compile error for arm32" (Jackie Liu)
  - KYLIN: Revert "arm64:ilp32: add vdso-ilp32 and use for signal return" (Jackie Liu)
  - netfilter: ip6tables: Add a .pre_exit hook in all ip6table_foo.c. (David Wilder) [task:95566]
  - netfilter: ip6tables: Split ip6t_unregister_table() into pre_exit and exit helpers. (David Wilder) [task:95566]
  - netfilter: iptables: Add a .pre_exit hook in all iptable_foo.c. (David Wilder) [task:95566]
  - netfilter: iptables: Split ipt_unregister_table() into pre_exit and exit helpers. (David Wilder) [task:95566]
  - netns: restore ops before calling ops_exit_list (Li RongQing) [task:95566]
  - netns: add pre_exit method to struct pernet_operations (Eric Dumazet) [task:95566]
  - KYLIN: scsi: Add SCSI_DH* config for loongarch. (cuitao) [task:92151]
  - KYLIN: security/kysec: update kysec_mempro module (huanfuxi) [bug:128578]
  - drm/ast: Create the driver for ASPEED proprietory Display-Port (KuoHsiang Chou) [task:94616]
  - drm/ast: Create threshold values for AST2600 (KuoHsiang Chou) [task:94616]
  - drm/ast: Enable the supporting of wide screen on AST2600 (KuoHsiang Chou) [task:94616]
  - drm/ast: Create chip AST2600 (KuoHsiang Chou) [task:94616]
  - NETSWIFT :txgbe: update the driver to 1.3.2 (luoqing) [task:92912]
  - NETSWIFT :txgbe: FIX : fix compile in linux 3.10 (mengyuanlou) [task:92912]
  - NETSWIFT :txgbe: ADD : add flash unlock when upgrade image (mengyuanlou) [task:92912]
  - NETSWIFT :txgbe: FIX : fix some kr flow (mengyuanlou) [task:92912]
  - NETSWIFT :txgbe: fix bug when 1820 is in 1G sfp speed mode, link partner (linglingzhang) [task:92912]
  - NETSWIFT :txgbe: add support for oem ssid and svid (linglingzhang) [task:92912]
  - NETSWIFT :txgbe: add pcie recover switch (zhengzhenpeng) [task:92912]
  - NETSWIFT :txgbe: fix pcie recover bugs (zhengzhenpeng) [task:92912]
  - NETSWIFT :txgbe: FIX : fix vxlan/geneve port not set to hardware (mengyuanlou) [task:92912]
  - NETSWIFT: ngbe: update the driver to 1.2.2 (luoqing) [task:92912]
  - NETSWIFT :ngbe: ADD : add yt 101 mode support (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: FIX : fix compile in ubuntu 21.10 (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: busfix linkspeed setup failed when link is down (zhengzhenpeng) [task:92912]
  - NETSWIFT :ngbe: ADD-add-link-retry-switch-to-configure (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: add support for oem ssid and svid (linglingzhang) [task:92912]
  - NETSWIFT :ngbe: ADD : add yt8531s id support (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: read flash from flash only in phy init (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: ADD : add retry use an err bit (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: CH : use sw configure efuse (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: add pcie recover switch (zhengzhenpeng) [task:92912]
  - NETSWIFT :ngbe: fix pcie recover bugs (zhengzhenpeng) [task:92912]
  - NETSWIFT :ngbe: fix phy set to force 100M autoneg off with partner (zhengzhenpeng) [task:92912]
  - WIREGUARD-LINUX-COMPAT: net: WireGuard secure network tunnel (Jason A. Donenfeld) [task:90253]
  - vt: drop old FONT ioctls (Jiri Slaby) [bug:128721] {CVE-2021-33656}
  - KYLIN: debug_defconfig: enable CONFIG_UBSAN (Jackie Liu)
  - KYLIN: sync-stable: fix wrong exit status when failed (Jackie Liu)
  - crypto: hisilicon delete invlaid api and config (Yu'an Wang) [bug:122239]
  - crypto: hisilicon - add CRYPTO_TFM_REQ_MAY_BACKLOG flag judge in sec_process() (Yu'an Wang) [bug:122239]
  - uacce: misc fixes (Yu'an Wang) [bug:122239]
  - misc/uacce: fixup out-of-bounds array write (Yu'an Wang) [bug:122239]
  - crypto/sec: add aead support for user-side (Yu'an Wang) [bug:122239]
  - UACCE: backport from mainline (Yu'an Wang) [bug:122239]
  - crypto: hisilicon-Cap block size at 2^31 (Yu'an Wang) [bug:122239]
  - crypto: hisilicon-hpre add req check when callback (Yu'an Wang) [bug:122239]
  - crypto: hisilicon- count send_ref when sending bd (Yu'an Wang) [bug:122239]
  - crypto: hisilicon-enhancement of qm DFX (Yu'an Wang) [bug:122239]
  - crypto: hisilicon-memory management optimization (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fix packet loss for acc (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/sec: modify driver to adapt dm-crypt (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: reinforce reset failure scene (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/zip: fix decompress a empty file (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/hpre: dfx for IO operation and delay (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/sec: Overall optimization of sec code (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: optimize the maximum number of VF and delete invalid addr (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: optimize set hw_reset flag logic for user (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fixup the problem of wrong judgement of used (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: Move all the same logic functions of hisilicon crypto to qm (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fix the way judge whether q stop in user space (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fixup compilation dependency (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/rde: optimize debug regs clear logic (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/sec: change sec_control reg config (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/hpre: add likely and unlikey in result judgement (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/hpre: optimize key process before free (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: remove invalid addr print (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/zip: use offset fields in sqe to avoid SG_SPLIT (Yu'an Wang) [bug:122239]
  - crypto/hisilicon/qm: fix wrong number of sg elements after dma map (Yu'an Wang) [bug:122239]
  - uacce: Remove uacce mode 1 relatives (Yu'an Wang) [bug:122239]
  - drivers/crypto/hisilicon: Remove uacce mode 1 logic below hisilicon (Yu'an Wang) [bug:122239]
  - drivers/crypto/hisilicon/sec2: add initial configuration in sec_engine_init (Yu'an Wang) [bug:122239]
  - KYLIN:crypto/hisilicon: The driver version is aligned to the Euler kernel (liyouhong) [bug:122239]
  - EULER: memcg: update the child's qos_level synchronously in memcg_qos_write() (Jing Xiangfeng) [task:85149]
  - EULER: memcg: Add static key for memcg priority (Jing Xiangfeng) [task:85149]
  - EULER: memcg: fix kabi broken when enable CONFIG_MEMCG_QOS (Jing Xiangfeng) [task:85149]
  - EULER: memcg: support priority for oom (Jing Xiangfeng) [task:85149]
  - selftest: kvm: Reorder vcpu_load_state steps for AMX (gehao) [task:88336]
  - selftests: kvm: Fix set_regs fail (gehao) [task:88363]
  - selftests: kvm/evmcs_test: complete I/O before migrating guest state (gehao) [task:88363]
  - KVM: selftests: complete IO before migrating guest state (gehao) [task:88336]
  - KVM: selftests: disable stack protector for all KVM tests (Sean Christopherson) [task:88336]
  - KVM: selftests: explicitly disable PIE for tests (Sean Christopherson) [task:88336]
  - KVM: arm64: vgic-its: Change default outer cacheability for {PEND, PROP}BASER (Alexander Graf) [task:97316]
  - Bluetooth: stop proccessing malicious adv data (Pavel Skripkin) [task:97308]
  - io_uring: Fix use of XArray in __io_uring_files_cancel (Matthew Wilcox (Oracle))
  - Bluetooth: hci_event: Fix checking for invalid handle on error status (Luiz Augusto von Dentz) [task:96848]
  - Bluetooth: hci_event: Ignore multiple conn complete events (Soenke Huster) [task:96848]
  - KYLIN: arm64: debug_defconfig: disable debug kobject (Jackie Liu)
  - KYLIN: debug_defconfig: make kmemleak off default (Jackie Liu)
  - KYLIN: net: genric phy driver 'ethtool -i' display error. (zhaochenguang) [task:90223]
  - KYLIN: net: loongson gmac add 'ethtool -i' info. (zhaochenguang) [bug:120208]
  - KYLIN: sound/soc: add the CJC8988 driver provided by loongson (Yongzhen Zhang) [task:91306]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-51.0.v2207
changelog:
  - KYLIN: sched: reserve some field for sched_statistics (Zhengyuan Liu)
  - ext4: make variable "count" signed (Ding Xiang)
  - xen/arm: Fix race in RB-tree based P2M accounting (Oleksandr Tyshchenko) [bug:129870] {CVE-2022-33744}
  - xen/blkfront: force data bouncing when backend is untrusted (Roger Pau Monne) [bug:129843] {CVE-2022-33742}
  - xen/netfront: force data bouncing when backend is untrusted (Roger Pau Monne) [bug:129847] {CVE-2022-33741}
  - xen/netfront: fix leaking data in shared pages (Roger Pau Monne) [bug:129851] {CVE-2022-33740}
  - xen/blkfront: fix leaking data in shared pages (Roger Pau Monne) [bug:129856] {CVE-2022-26365}
  - net: rose: fix UAF bugs caused by timer handler (Duoming Zhou) [bug:129862] {CVE-2022-2318}
  - ext4: avoid cycles in directory h-tree (Jan Kara) [bug:129812] {CVE-2022-1184}
  - ext4: verify dir block before splitting it (Jan Kara) [bug:129812] {CVE-2022-1184}
  - floppy: use a statically allocated error counter (Willy Tarreau) [bug:129818] {CVE-2022-1652}
  - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - ALSA: pcm: Fix races among concurrent prealloc proc writes (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - ALSA: pcm: Fix races among concurrent read/write and buffer changes (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls (Takashi Iwai) [bug:129791] {CVE-2022-1048}
  - xen/pvcalls: use alloc/free_pages_exact() (Juergen Gross) [bug:129775] {CVE-2022-23041}
  - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() (Juergen Gross) [bug:129758] {CVE-2022-23042}
  - xen/9p: use alloc/free_pages_exact() (Juergen Gross) [bug:129775] {CVE-2022-23041}
  - xen/gnttab: fix gnttab_end_foreign_access() without page specified (Juergen Gross) [bug:129775] {CVE-2022-23041}
  - xen: remove gnttab_query_foreign_access() (Juergen Gross)
  - xen/gntalloc: don't use gnttab_query_foreign_access() (Juergen Gross) [bug:129771] {CVE-2022-23039}
  - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross) [bug:129767] {CVE-2022-23036}
  - xen/grant-table: add gnttab_try_end_foreign_access() (Juergen Gross) [bug:129783, bug:129767] {CVE-2022-23036, CVE-2022-23038}
  - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case (Juergen Gross) [bug:129763] {CVE-2022-23040}
  - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross) [bug:129783] {CVE-2022-23038}
  - xen/netfront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross) [bug:129779] {CVE-2022-23037}
  - video: fbdev: sm712fb: Fix crash in smtcfb_read() (Helge Deller) [bug:129866] {CVE-2022-2380}
  - HID: holtek: fix mouse probing (Benjamin Tissoires)
  - hamradio: improve the incomplete fix to avoid NPD (Lin Ma) [bug:129795] {CVE-2022-1195}
  - HID: google: add eel USB id (xiazhengqiao) [bug:129822] {CVE-2022-20132}
  - HID: add USB_HID dependancy to hid-prodikeys (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: add USB_HID dependancy to hid-chicony (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: add USB_HID dependancy on some USB HID drivers (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: check for valid USB device for many HID drivers (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: wacom: fix problems when device is not a valid USB device (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - HID: add hid_is_usb() function to make it simpler for USB detection (Greg Kroah-Hartman) [bug:129822] {CVE-2022-20132}
  - hamradio: remove needs_free_netdev to avoid UAF (Lin Ma) [bug:129795] {CVE-2022-1195}
  - hamradio: defer 6pack kfree after unregister_netdev (Lin Ma) [bug:129795] {CVE-2022-1195}
  - hamradio: defer ax25 kfree after unregister_netdev (Lin Ma) [bug:129795] {CVE-2022-1195}
  - net: hamradio: fix memory leak in mkiss_close (Pavel Skripkin) [bug:129795] {CVE-2022-1195}
  - HID: google: add don USB id (Shou-Chieh Hsu) [bug:129822] {CVE-2022-20132}
  - xen/xenbus: Fix granting of vmalloc'd memory (Simon Leiner)
  - xen-netfront: fix potential deadlock in xennet_remove() (Andrea Righi)
  - HID: google: add moonball USB id (Chen-Tsung Hsieh) [bug:129822] {CVE-2022-20132}
  - net_sched: fix a crash in tc_new_tfilter() (Cong Wang) [bug:129750] {CVE-2021-39713}
  - net: sched: make function qdisc_free_cb() static (Wei Yongjun)
  - net: sched: use Qdisc rcu API instead of relying on rtnl lock (Vlad Buslov) [bug:129750] {CVE-2021-39713}
  - net: sched: add helper function to take reference to Qdisc (Vlad Buslov)
  - net: sched: extend Qdisc with rcu (Vlad Buslov)
  - net: sched: rename qdisc_destroy() to qdisc_put() (Vlad Buslov)
  - net: core: netlink: add helper refcount dec and lock function (Vlad Buslov)
  - netlink: fix doc about nlmsg_parse/nla_validate (Nicolas Dichtel) [task:96091]
  - netlink: Fix nlmsg_parse as a wrapper for strict message parsing (David Ahern) [task:96091]
  - bpf: Add classid helper only based on skb->sk (Daniel Borkmann) [task:96091]
  - bpf: Allow to retrieve cgroup v1 classid from v2 hooks (Daniel Borkmann) [task:96091]
  - tcp_cubic: refactor code to perform a divide only when needed (Eric Dumazet) [task:96091]
  - tcp_cubic: make Hystart aware of pacing (Eric Dumazet) [task:96091]
  - tcp_cubic: tweak Hystart detection for short RTT flows (Eric Dumazet) [task:96091]
  - tcp_cubic: switch bictcp_clock() to usec resolution (Eric Dumazet) [task:96091]
  - tcp_cubic: remove one conditional from hystart_update() (Eric Dumazet) [task:96091]
  - tcp_cubic: optimize hystart_update() (Eric Dumazet) [task:96091]
  - net: relax SO_TXTIME CAP_NET_ADMIN check (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: do not call fq_peek() twice per packet (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: add horizon attribute (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: enable use of hrtimer slack (Eric Dumazet) [task:96091]
  - net_sched: do not reprogram a timer about to expire (Eric Dumazet) [task:96091]
  - net_sched: add qdisc_watchdog_schedule_range_ns() (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: properly set sk->sk_pacing_status (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: remove one obsolete check in fq_dequeue() (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: handle non connected flows (Eric Dumazet) [task:96091]
  - net_sched: sch_fq: do not assume EDT packets are ordered (Eric Dumazet) [task:96091]
  - netlink: add strict parsing for future attributes (Johannes Berg) [task:96091]
  - netlink: re-add parse/validate functions in strict mode (Johannes Berg) [task:96091]
  - netlink: make validation more configurable for future strictness (Johannes Berg) [task:96091]
  - netlink: add NLA_MIN_LEN (Johannes Berg) [task:96091]
  - netlink: add validation function to policy (Johannes Berg) [task:96091]
  - netlink: add attribute range validation to policy (Johannes Berg) [task:96091]
  - net_sched: sch_fq: avoid calling ktime_get_ns() if not needed (Eric Dumazet) [task:96091]
  - bpf: make bpf_skb_ecn_set_ce callable from BPF_PROG_TYPE_SCHED_ACT (Peter Oskolkov) [task:96091]
  - bpf: sync bpf.h to tools and update bpf_helpers.h (brakmo) [task:96091]
  - net_sched: sch_fq: add dctcp-like marking (Eric Dumazet) [task:96091]
  - tcp: tsq: no longer use limit_output_bytes for paced flows (Eric Dumazet) [task:96091]
  - tcp: get rid of tcp_tso_should_defer() dependency on HZ/jiffies (Eric Dumazet) [task:96091]
  - net: support 64bit rates for getsockopt(SO_MAX_PACING_RATE) (Eric Dumazet) [task:96091]
  - tcp: cdg: use tcp high resolution clock cache (Eric Dumazet) [task:96091]
  - KYLIN: LoongArch/spiflash: fix ls_spiflash initialization code error (wangxuewen) [bug:120279]
  - KYLIN: x86/config: enable QOS_SCHED and QOS_SCHED_SMT_EXPELLER (Zhengyuan Liu) [task:97062]
  - KYLIN: arm64/config: enable QOS_SCHED (Zhengyuan Liu) [task:97062]
  - EULER: sched: Add tracepoint for qos smt expeller (Guan Jing) [task:97063]
  - EULER: sched: Add statistics for qos smt expeller (Guan Jing) [task:97063]
  - EULER: sched: Implement the function of qos smt expeller (Guan Jing) [task:97063]
  - EULER: sched: Introduce qos smt expeller for co-location (Guan Jing) [task:97063]
  - EULER: sched/qos: Add qos_tg_{throttle,unthrottle}_{up,down} (Zhang Qiao) [task:85149]
  - EULER: sched: Throttle offline task at tracehook_notify_resume() (Zhang Qiao) [task:85149]
  - EULER: sched/qos: Remove dependency CONFIG_x86 (Zhang Qiao) [task:85149]
  - EULER: sched/fair: Add qos_throttle_list node in struct cfs_rq (Zhang Qiao) [task:85149]
  - EULER: sched: Introduce handle priority reversion mechanism (Zheng Zucheng) [task:85149]
  - unicore32: Fix __ARCH_WANT_STAT64 definition (Arnd Bergmann) [task:98950]
  - asm-generic: unistd.h: fixup broken macro include. (Guo Ren) [task:98950]
  - ntp/y2038: Remove incorrect time_t truncation (Arnd Bergmann) [task:98950]
  - ipc: fix semtimedop for generic 32-bit architectures (Arnd Bergmann) [task:98950]
  - asm-generic: Make time32 syscall numbers optional (Arnd Bergmann) [task:98950]
  - asm-generic: Drop getrlimit and setrlimit syscalls from default list (Yury Norov) [task:98950]
  - csky: System Call (Guo Ren) [task:98950]
  - compat ABI: use non-compat openat and open_by_handle_at variants (Yury Norov) [task:98950]
  - y2038: rename old time and utime syscalls (Arnd Bergmann) [task:98950]
  - y2038: remove struct definition redirects (Arnd Bergmann) [task:98950]
  - y2038: use time32 syscall names on 32-bit (Arnd Bergmann) [task:98950]
  - vfs: replace current_kernel_time64 with ktime equivalent (Arnd Bergmann) [task:98950]
  - y2038: syscalls: rename y2038 compat syscalls (Arnd Bergmann) [task:98950]
  - y2038: socket: Add compat_sys_recvmmsg_time64 (Arnd Bergmann) [task:98950]
  - y2038: futex: Add support for __kernel_timespec (Arnd Bergmann) [task:98950]
  - y2038: signal: Add compat_sys_rt_sigtimedwait_time64 (Arnd Bergmann) [task:98950]
  - x86/x32: use time64 versions of sigtimedwait and recvmmsg (Arnd Bergmann) [task:98950]
  - timex: change syscalls to use struct __kernel_timex (Deepa Dinamani) [task:98950]
  - timex: use __kernel_timex internally (Deepa Dinamani) [task:98950]
  - sparc64: add custom adjtimex/clock_adjtime functions (Arnd Bergmann) [task:98950]
  - time: fix sys_timer_settime prototype (Arnd Bergmann) [task:98950]
  - time: Add struct __kernel_timex (Deepa Dinamani) [task:98950]
  - time: make adjtime compat handling available for 32 bit (Arnd Bergmann) [task:98950]
  - y2038: signal: Change rt_sigtimedwait to use __kernel_timespec (Arnd Bergmann) [task:98950]
  - y2038: sched: Change sched_rr_get_interval to use __kernel_timespec (Arnd Bergmann) [task:98950]
  - y2038: utimes: Rework #ifdef guards for compat syscalls (Arnd Bergmann) [task:98950]
  - y2038: Compile utimes()/futimesat() conditionally (Arnd Bergmann) [task:98950]
  - y2038: Change sys_utimensat() to use __kernel_timespec (Arnd Bergmann) [task:98950]
  - asm-generic: Remove empty asm/unistd.h (Arnd Bergmann) [task:98950]
  - asm-generic: Remove unneeded __ARCH_WANT_SYS_LLSEEK macro (Arnd Bergmann) [task:98950]
  - y2038: Remove stat64 family from default syscall set (Arnd Bergmann) [task:98950]
  - y2038: __get_old_timespec32() can be static (kbuild test robot) [task:98950]
  - KYLIN: x86: debug_defconfig: more kselftest modules (Jackie Liu)
  - KYLIN: x86: debug_defconfig: more test modules for debug kernel (Jackie Liu)
  - KYLIN: arm64: debug_defconfig: more test modules for debug kernel (Jackie Liu)
  - KYLIN: mm: fix free_pages_bootmem bug in loongarch when system booting (husong)
  - GNET: change gnet_speed_flg priv to fix problem when rebind gnet. (liusicong) [task:96195]
  - LoongArch: Add generic efi stub support (liuyun) [task:96195]
  - efi/libstub: Move the function prototypes to header file (Atish Patra) [task:96195]
  - efi/libstub: Move arm-stub to a common file (Atish Patra) [task:96195]
  - LoongArch: adjust memory space for module load (liweihao) [task:96195]
  - LoongArch:LSVZ: disable pv timer when vcpu is reset (Mao Bibo) [task:96195]
  - LoongArch: LSVZ: redefine hypercall service return code (Jianxing Wang) [task:96195]
  - LoongArch: LSVZ: import no_pvipi and no_pvtime setup param (Jianxing Wang) [task:96195]
  - fdt: Update CRC check for rng-seed (Hsin-Yi Wang) [task:97875]
  - include/uapi/linux/swab.h: fix userspace breakage, use __BITS_PER_LONG for swap (Christian Borntraeger) [task:97875]
  - random: quiet urandom warning ratelimit suppression message (Jason A. Donenfeld) [task:97875]
  - random: schedule mix_interrupt_randomness() less often (Jason A. Donenfeld) [task:97875]
  - random: credit cpu and bootloader seeds by default (Jason A. Donenfeld) [task:97875]
  - random: account for arch randomness in bits (Jason A. Donenfeld) [task:97875]
  - random: mark bootloader randomness code as __init (Jason A. Donenfeld) [task:97875]
  - random: avoid checking crng_ready() twice in random_init() (Jason A. Donenfeld) [task:97875]
  - crypto: drbg - make reseeding from get_random_bytes() synchronous (Nicolai Stange) [task:97875]
  - crypto: drbg - always try to free Jitter RNG instance (Stephan Müller) [task:97875]
  - crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() (Nicolai Stange) [task:97875]
  - crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() (Nicolai Stange) [task:97875]
  - crypto: drbg - prepare for more fine-grained tracking of seeding state (Nicolai Stange) [task:97875]
  - crypto: drbg - always seeded with SP800-90B compliant noise source (Stephan Müller) [task:97875]
  - crypto: drbg - add FIPS 140-2 CTRNG for noise source (Stephan Mueller) [task:97875]
  - Revert "random: use static branch for crng_ready()" (Jason A. Donenfeld) [task:97875]
  - random: check for signals after page of pool writes (Jason A. Donenfeld) [task:97875]
  - random: wire up fops->splice_{read,write}_iter() (Jens Axboe) [task:97875]
  - random: convert to using fops->write_iter() (Jens Axboe) [task:97875]
  - random: move randomize_page() into mm where it belongs (Jason A. Donenfeld) [task:97875]
  - random: move initialization functions out of hot pages (Jason A. Donenfeld) [task:97875]
  - random: use proper return types on get_random_{int,long}_wait() (Jason A. Donenfeld) [task:97875]
  - random: remove extern from functions in header (Jason A. Donenfeld) [task:97875]
  - random: use static branch for crng_ready() (Jason A. Donenfeld) [task:97875]
  - random: credit architectural init the exact amount (Jason A. Donenfeld) [task:97875]
  - random: handle latent entropy and command line from random_init() (Jason A. Donenfeld) [task:97875]
  - random: use proper jiffies comparison macro (Jason A. Donenfeld) [task:97875]
  - random: remove ratelimiting for in-kernel unseeded randomness (Jason A. Donenfeld) [task:97875]
  - random: avoid initializing twice in credit race (Jason A. Donenfeld) [task:97875]
  - random: use symbolic constants for crng_init states (Jason A. Donenfeld) [task:97875]
  - siphash: use one source of truth for siphash permutations (Jason A. Donenfeld) [task:97875]
  - random: help compiler out with fast_mix() by using simpler arguments (Jason A. Donenfeld) [task:97875]
  - random: do not use input pool from hard IRQs (Jason A. Donenfeld) [task:97875]
  - random: order timer entropy functions below interrupt functions (Jason A. Donenfeld) [task:97875]
  - random: do not pretend to handle premature next security model (Jason A. Donenfeld) [task:97875]
  - random: do not use batches when !crng_ready() (Jason A. Donenfeld) [task:97875]
  - random: insist on random_get_entropy() existing in order to simplify (Jason A. Donenfeld) [task:97875]
  - xtensa: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - sparc: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - um: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - x86/tsc: Use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - nios2: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - arm: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - mips: use fallback for random_get_entropy() instead of just c0 random (Jason A. Donenfeld) [task:97875]
  - m68k: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld) [task:97875]
  - timekeeping: Add raw clock fallback for random_get_entropy() (Jason A. Donenfeld) [task:97875]
  - powerpc: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - alpha: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - parisc: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - s390: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - ia64: define get_cycles macro for arch-override (Jason A. Donenfeld) [task:97875]
  - init: call time_init() before rand_initialize() (Jason A. Donenfeld) [task:97875]
  - random: fix sysctl documentation nits (Jason A. Donenfeld) [task:97875]
  - random: document crng_fast_key_erasure() destination possibility (Jason A. Donenfeld) [task:97875]
  - random: make random_get_entropy() return an unsigned long (Jason A. Donenfeld) [task:97875]
  - random: check for signals every PAGE_SIZE chunk of /dev/[u]random (Jason A. Donenfeld) [task:97875]
  - random: check for signal_pending() outside of need_resched() check (Jann Horn) [task:97875]
  - random: do not allow user to keep crng key around on stack (Jason A. Donenfeld) [task:97875]
  - random: do not split fast init input in add_hwgenerator_randomness() (Jan Varho) [task:97875]
  - random: mix build-time latent entropy into pool at init (Jason A. Donenfeld) [task:97875]
  - random: re-add removed comment about get_random_{u32,u64} reseeding (Jason A. Donenfeld) [task:97875]
  - random: treat bootloader trust toggle the same way as cpu trust toggle (Jason A. Donenfeld) [task:97875]
  - random: skip fast_init if hwrng provides large chunk of entropy (Jason A. Donenfeld) [task:97875]
  - random: check for signal and try earlier when generating entropy (Jason A. Donenfeld) [task:97875]
  - random: reseed more often immediately after booting (Jason A. Donenfeld) [task:97875]
  - random: make consistent usage of crng_ready() (Jason A. Donenfeld) [task:97875]
  - random: use SipHash as interrupt entropy accumulator (Jason A. Donenfeld) [task:97875]
  - random: replace custom notifier chain with standard one (Jason A. Donenfeld) [task:97875]
  - random: don't let 644 read-only sysctls be written to (Jason A. Donenfeld) [task:97875]
  - random: give sysctl_random_min_urandom_seed a more sensible value (Jason A. Donenfeld) [task:97875]
  - random: do crng pre-init loading in worker rather than irq (Jason A. Donenfeld) [task:97875]
  - random: unify cycles_t and jiffies usage and types (Jason A. Donenfeld) [task:97875]
  - random: cleanup UUID handling (Jason A. Donenfeld) [task:97875]
  - random: only wake up writers after zap if threshold was passed (Jason A. Donenfeld) [task:97875]
  - random: round-robin registers as ulong, not u32 (Jason A. Donenfeld) [task:97875]
  - random: clear fast pool, crng, and batches in cpuhp bring up (Jason A. Donenfeld) [task:97875]
  - random: pull add_hwgenerator_randomness() declaration into random.h (Jason A. Donenfeld) [task:97875]
  - random: check for crng_init == 0 in add_device_randomness() (Jason A. Donenfeld) [task:97875]
  - random: unify early init crng load accounting (Jason A. Donenfeld) [task:97875]
  - random: do not take pool spinlock at boot (Jason A. Donenfeld) [task:97875]
  - random: defer fast pool mixing to worker (Jason A. Donenfeld) [task:97875]
  - random: rewrite header introductory comment (Jason A. Donenfeld) [task:97875]
  - random: group sysctl functions (Jason A. Donenfeld) [task:97875]
  - random: group userspace read/write functions (Jason A. Donenfeld) [task:97875]
  - random: group entropy collection functions (Jason A. Donenfeld) [task:97875]
  - random: group entropy extraction functions (Jason A. Donenfeld) [task:97875]
  - random: group initialization wait functions (Jason A. Donenfeld) [task:97875]
  - random: remove whitespace and reorder includes (Jason A. Donenfeld) [task:97875]
  - random: remove useless header comment (Jason A. Donenfeld) [task:97875]
  - random: introduce drain_entropy() helper to declutter crng_reseed() (Jason A. Donenfeld) [task:97875]
  - random: deobfuscate irq u32/u64 contributions (Jason A. Donenfeld) [task:97875]
  - random: add proper SPDX header (Jason A. Donenfeld) [task:97875]
  - random: remove unused tracepoints (Jason A. Donenfeld) [task:97875]
  - random: remove ifdef'd out interrupt bench (Jason A. Donenfeld) [task:97875]
  - random: tie batched entropy generation to base_crng generation (Jason A. Donenfeld) [task:97875]
  - random: zero buffer after reading entropy from userspace (Jason A. Donenfeld) [task:97875]
  - random: remove outdated INT_MAX >> 6 check in urandom_read() (Jason A. Donenfeld) [task:97875]
  - random: use hash function for crng_slow_load() (Jason A. Donenfeld) [task:97875]
  - random: absorb fast pool into input pool after fast load (Jason A. Donenfeld) [task:97875]
  - random: do not xor RDRAND when writing into /dev/random (Jason A. Donenfeld) [task:97875]
  - random: ensure early RDSEED goes through mixer on init (Jason A. Donenfeld) [task:97875]
  - random: inline leaves of rand_initialize() (Jason A. Donenfeld) [task:97875]
  - random: use RDSEED instead of RDRAND in entropy extraction (Jason A. Donenfeld) [task:97875]
  - random: fix locking in crng_fast_load() (Dominik Brodowski) [task:97875]
  - random: remove batched entropy locking (Jason A. Donenfeld) [task:97875]
  - random: remove use_input_pool parameter from crng_reseed() (Eric Biggers) [task:97875]
  - random: make credit_entropy_bits() always safe (Jason A. Donenfeld) [task:97875]
  - random: always wake up entropy writers after extraction (Jason A. Donenfeld) [task:97875]
  - random: use linear min-entropy accumulation crediting (Jason A. Donenfeld) [task:97875]
  - random: simplify entropy debiting (Jason A. Donenfeld) [task:97875]
  - random: use computational hash for entropy extraction (Jason A. Donenfeld) [task:97875]
  - random: only call crng_finalize_init() for primary_crng (Dominik Brodowski) [task:97875]
  - random: access primary_pool directly rather than through pointer (Dominik Brodowski) [task:97875]
  - random: continually use hwgenerator randomness (Dominik Brodowski) [task:97875]
  - random: simplify arithmetic function flow in account() (Jason A. Donenfeld) [task:97875]
  - random: access input_pool_data directly rather than through pointer (Jason A. Donenfeld) [task:97875]
  - random: cleanup fractional entropy shift constants (Jason A. Donenfeld) [task:97875]
  - random: prepend remaining pool constants with POOL_ (Jason A. Donenfeld) [task:97875]
  - random: de-duplicate INPUT_POOL constants (Jason A. Donenfeld) [task:97875]
  - random: remove unused OUTPUT_POOL constants (Jason A. Donenfeld) [task:97875]
  - random: rather than entropy_store abstraction, use global (Jason A. Donenfeld) [task:97875]
  - random: remove unused extract_entropy() reserved argument (Jason A. Donenfeld) [task:97875]
  - random: remove incomplete last_data logic (Jason A. Donenfeld) [task:97875]
  - random: cleanup integer types (Jason A. Donenfeld) [task:97875]
  - random: cleanup poolinfo abstraction (Jason A. Donenfeld) [task:97875]
  - random: fix typo in comments (Schspa Shi) [task:97875]
  - random: don't reset crng_init_cnt on urandom_read() (Jann Horn) [task:97875]
  - random: avoid superfluous call to RDRAND in CRNG extraction (Jason A. Donenfeld) [task:97875]
  - random: early initialization of ChaCha constants (Dominik Brodowski) [task:97875]
  - random: initialize ChaCha20 constants with correct endianness (Eric Biggers) [task:97875]
  - random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs (Jason A. Donenfeld) [task:97875]
  - random: harmonize "crng init done" messages (Dominik Brodowski) [task:97875]
  - random: mix bootloader randomness into pool (Jason A. Donenfeld) [task:97875]
  - random: do not re-init if crng_reseed completes before primary init (Jason A. Donenfeld) [task:97875]
  - random: do not sign extend bytes for rotation when mixing (Jason A. Donenfeld) [task:97875]
  - random: use BLAKE2s instead of SHA1 in extraction (Jason A. Donenfeld) [task:97875]
  - random: remove unused irq_flags argument from add_interrupt_randomness() (Sebastian Andrzej Siewior) [task:97875]
  - random: document add_hwgenerator_randomness() with other input functions (Mark Brown) [task:97875]
  - crypto: blake2s - adjust include guard naming (Eric Biggers) [task:97875]
  - crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h> (Eric Biggers) [task:97875]
  - MAINTAINERS: co-maintain random.c (Jason A. Donenfeld) [task:97875]
  - random: remove dead code left over from blocking pool (Eric Biggers) [task:97875]
  - random: avoid arch_get_random_seed_long() when collecting IRQ randomness (Ard Biesheuvel) [task:97875]
  - random: add arch_get_random_*long_early() (Mark Rutland) [task:97875]
  - powerpc: Use bool in archrandom.h (Richard Henderson) [task:97875]
  - linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check (Richard Henderson) [task:97875]
  - linux/random.h: Use false with bool (Richard Henderson) [task:97875]
  - linux/random.h: Remove arch_has_random, arch_has_random_seed (Richard Henderson) [task:97875]
  - s390: Remove arch_has_random, arch_has_random_seed (Richard Henderson) [task:97875]
  - powerpc: Remove arch_has_random, arch_has_random_seed (Richard Henderson) [task:97875]
  - x86: Remove arch_has_random, arch_has_random_seed (Richard Henderson) [task:97875]
  - random: avoid warnings for !CONFIG_NUMA builds (Mark Rutland) [task:97875]
  - random: split primary/secondary crng init paths (Mark Rutland) [task:97875]
  - random: remove some dead code of poolinfo (Yangtao Li) [task:97875]
  - random: fix typo in add_timer_randomness() (Yangtao Li) [task:97875]
  - random: Add and use pr_fmt() (Yangtao Li) [task:97875]
  - random: convert to ENTROPY_BITS for better code readability (Yangtao Li) [task:97875]
  - random: remove unnecessary unlikely() (Yangtao Li) [task:97875]
  - random: remove kernel.random.read_wakeup_threshold (Andy Lutomirski) [task:97875]
  - random: delete code to pull data into pools (Andy Lutomirski) [task:97875]
  - random: remove the blocking pool (Andy Lutomirski) [task:97875]
  - random: fix crash on multiple early calls to add_bootloader_randomness() (Dominik Brodowski) [task:97875]
  - char/random: silence a lockdep splat with printk() (Sergey Senozhatsky) [task:97875]
  - random: make /dev/random be almost like /dev/urandom (Andy Lutomirski) [task:97875]
  - random: ignore GRND_RANDOM in getentropy(2) (Andy Lutomirski) [task:97875]
  - random: add GRND_INSECURE to return best-effort non-cryptographic bytes (Andy Lutomirski) [task:97875]
  - random: Add a urandom_read_nowait() for random APIs that don't warn (Andy Lutomirski) [task:97875]
  - random: Don't wake crng_init_wait when crng_init == 1 (Andy Lutomirski) [task:97875]
  - lib/crypto: sha1: re-roll loops to reduce code size (Jason A. Donenfeld) [task:97875]
  - lib/crypto: blake2s: move hmac construction into wireguard (Jason A. Donenfeld) [task:97875]
  - crypto: blake2s - generic C library implementation and selftest (Jason A. Donenfeld) [task:97875]
  - Revert "hwrng: core - Freeze khwrng thread during suspend" (Herbert Xu) [task:97875]
  - char/random: Add a newline at the end of the file (Borislav Petkov) [task:97875]
  - random: Use wait_event_freezable() in add_hwgenerator_randomness() (Stephen Boyd) [task:97875]
  - fdt: add support for rng-seed (Hsin-Yi Wang) [task:97875]
  - random: Support freezable kthreads in add_hwgenerator_randomness() (Stephen Boyd) [task:97875]
  - random: fix soft lockup when trying to read from an uninitialized blocking pool (Theodore Ts'o) [task:97875]
  - latent_entropy: avoid build error when plugin cflags are not set (Vasily Gorbik) [task:97875]
  - random: document get_random_int() family (George Spelvin) [task:97875]
  - random: move rand_initialize() earlier (Kees Cook) [task:97875]
  - random: only read from /dev/random after its pool has received 128 bits (Theodore Ts'o) [task:97875]
  - drivers/char/random.c: make primary_crng static (Rasmus Villemoes) [task:97875]
  - drivers/char/random.c: remove unused stuct poolinfo::poolbits (Rasmus Villemoes) [task:97875]
  - drivers/char/random.c: constify poolinfo_table (Rasmus Villemoes) [task:97875]
  - random: fix data race on crng init time (Eric Biggers) [task:97875]
  - random: fix data race on crng_node_pool (Eric Biggers) [task:97875]
  - char/random: silence a lockdep splat with printk() (Sergey Senozhatsky) [task:97875]
  - char/random: silence a lockdep splat with printk() (Sergey Senozhatsky) [task:97875]
  - random: try to actively add entropy rather than passively wait for it (Linus Torvalds) [task:97875]
  - Revert "alinux: random: speed up the initialization of module" (huhai) [task:97875]
  - Revert "random: only read from /dev/random after its pool has received 128 bits" (huhai) [task:97875]
  - Revert "random: fix soft lockup when trying to read from an uninitialized blocking pool" (huhai) [task:97875]
  - uapi: rename ext2_swab() to swab() and share globally in swab.h (Yury Norov) [task:97875]
  - KYLIN: xhci: fix Etron controller reset device problem (xuping) [bug:123907]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-52.0.v2207
changelog:
  - KYLIN: kabi_whitelist: remove the indentation in front of each item (Zhengyuan Liu) [task:74080]
  - KYLIN: scripts/make-kabi: support items in whitelist begin with indentation (Zhengyuan Liu) [task:74080]
  - KYLIN: Module.kabi: update Module.kabi based on the new whitelist (Zhengyuan Liu) [task:74080]
  - KYLIN: kabi_whitelist: append redhat8's kabi items (Zhengyuan Liu) [task:74080]
  - KYLIN: x86/paravirt: fix build if !CONFIG_PARAVIRT_SPINLOCKS & CONFIG_PARAVIRT (Jackie Liu) [task:101368, task:101367]
  - sched/core: Convert vcpu_is_preempted() from macro to an inline function (Qian Cai) [task:101368, task:101367]
  - KYLIN: kabi_whitelist: append HuaWei's ultrapath symbol to whitelist (Zhengyuan Liu) [task:74080]
  - KYLIN: kabi_whitelist: append TianGou's symbol to whitelist (Zhengyuan Liu) [task:90224]
  - KYLIN: kabi_whitelist: simplify current whitelist (Zhengyuan Liu) [task:74080]
  - KYLIN: kabi_whitelist: sort the kabi whitelist (Zhengyuan Liu) [task:74080]
  - net: sched: don't set tunnel for decap action (Vlad Buslov) [bug:128966]
  - net: sched: flower: only return error from hw offload if skip_sw (Vlad Buslov) [bug:128966]
  - xsk: Fix xsk_umem_xdp_frame_sz() (Björn Töpel) [bug:128966]
  - xdp: For Intel AF_XDP drivers add XDP frame_s (Jesper Dangaard Brouer) [bug:128966]
  - cls_api: add translator to flow_action representation (Pablo Neira Ayuso) [bug:128966]
  - net: sched: sample: allow accessing psample_group with rtnl (Vlad Buslov) [bug:128966]
  - net/sched: add police action to the hardware intermediate representation (Pieter Jansen van Vuuren) [bug:128966]
  - net/sched: add sample action to the hardware intermediate representation (Pieter Jansen van Vuuren) [bug:128966]
  - flow_offload: add wake-up-on-lan and queue to flow_action (Pablo Neira Ayuso) [bug:128966]
  - net/flow_dissector: add connection tracking dissection (Paul Blakey) [bug:128966]
  - KYLIN: fbdev/efifb: enable efifb for inno card by default (yangdeyi) [task:88651]
  - tcp: use alloc_large_system_hash() to allocate table_perturb (Muchun Song)
  - xhci: turn off port power in shutdown (Mathias Nyman) [task:99634]
  - xhci: stop polling roothubs after shutdown (Henry Lin) [task:99634]
  - xhci: make xhci_handshake timeout for xhci_reset() adjustable (Mathias Nyman) [task:99634]
  - xhci: bail out early if driver can't accress host in resume (Mathias Nyman) [task:99634]
  - tcp: drop the hash_32() part from the index calculation (Willy Tarreau) [task:99634]
  - tcp: dynamically allocate the perturb table used by source ports (Willy Tarreau) [task:99634]
  - tcp: add small random increments to the source port (Willy Tarreau) [task:99634]
  - tcp: use different parts of the port_offset for index and offset (Willy Tarreau) [task:99634]
  - tcp: add some entropy in __inet_hash_connect() (Eric Dumazet) [task:99634]
  - swiotlb: skip swiotlb_bounce when orig_addr is zero (Liu Shixin) [task:99634]
  - KYLIN: add graphics card priority for x86 (yangdeyi) [task:88651]
  - KYLIN: vga: add inno graphics card priority (yangdeyi) [task:88651]
  - KYLIN: 3rd/inno: add inno driver support (yangdeyi) [task:88651]
  - i40iw: Remove setting of VMA private data and use rdma_user_mmap_io (Shiraz Saleem) [bug:130467]
  - KYLIN: x86/paravirt: useless assignment instructions cause Unixbench full core performance degradation (chenke) [task:99415]
  - x86/module: Fix the paravirt vs alternative order (Peter Zijlstra) [task:99415]
  - x86/paravirt: Add new features for paravirt patching (Juergen Gross) [task:99415]
  - crypto: drbg - fix error return code in drbg_alloc_state() (Wei Yongjun) [task:101008]
  - lib: vdso: Remove CROSS_COMPILE_COMPAT_VDSO (Vincenzo Frascino)
  - arm64: vdso32: Remove jump label config option in Makefile (Vincenzo Frascino)
  - arm64: vdso32: Detect binutils support for dmb ishld (Vincenzo Frascino)
  - arm64: vdso: Remove stale files from old assembly implementation (Vincenzo Frascino)
  - arm64: vdso32: Fix broken compat vDSO build warnings (Vincenzo Frascino)
  - arm64: vdso: Fix Makefile regression (Vincenzo Frascino)
  - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Pavel Skripkin) [bug:120191] {CVE-2022-1679}
  - drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions (Joe Perches) [bug:124652] {CVE-2022-20166}
  - drivers/base/cpu: Simplify s*nprintf() usages (Takashi Iwai)
  - xfs: don't set bmapi total block req where minleft is (Brian Foster) [bug:128797]
  - netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso) [bug:129113] {CVE-2022-34918}
  - f2fs: fix to do sanity check on segment/section count (Chao Yu) [task:98376] {CVE-2019-19449}
  - f2fs: fix wrong total_sections check and fsmeta check (Wang Xiaojun) [task:98376] {CVE-2019-19449}
  - btrfs: only search for left_info if there is no right_info in try_merge_free_space (Josef Bacik) [task:98376] {CVE-2019-19448}
  - KYLIN: box: Fix Use-After-Free caused by parallel access (Jackie Liu) [task:98126, task:99088, task:99013]
  - KYLIN: sw64: fix incompatible pointer of __kernel_timex (Jackie Liu) [task:99336, task:99333]
  - mips: generate uapi header and system call table files (Firoz Khan) [task:99337, task:99334]
  - mips: remove unused macros (Firoz Khan) [task:99337, task:99334]
  - mips: add +1 to __NR_syscalls in uapi header (Firoz Khan) [task:99337, task:99334]
  - mips: rename scall64-64.S to scall64-n64.S (Firoz Khan) [task:99337, task:99334]
  - mips: add __NR_syscalls along with __NR_Linux_syscalls (Firoz Khan) [task:99334, task:99337]
  - mips: remove syscall table entries (Firoz Khan) [task:99337, task:99334]
  - io_uring: drop 'ctx' ref on task work cancelation (Jens Axboe)


author: xinghe <xinghe2@h-partners.com> - 1.16.1-7
changelog:
  - Type:cves
  - CVE:CVE-2023-31130 CVE-2023-31124 CVE-2023-31147
  - SUG:NA
  - DESC:fix CVE-2023-31130 CVE-2023-31124 CVE-2023-31147


author: Cao Keqian <caokeqian@kylinos.cn> 01.12.7-1kord0k233.p28.gfb01
changelog:
  - Type:fixbug
  - ID  :[bug#173433;bug#172623]
  - SUG :NA
  - DESC: Regenerate some patches from 355 version to synchronize base code. 
  	patch33: regen-20200821-icon-size.patch	修改桌面图标大小溢出问题
  	patch34: regen-resolve_after_manual_sort_overlapping_icons.patch 解决手动排序后图标重叠的问题
  	patch35: regen-resolve_my_computer_interface_icon_overlapping.patch 解决gparted关闭后，我的电脑界面设备之间图标遮盖的问题
  	patch36: regen-resolve_smallest_two_zoom_out_icon_no_change.patch 解决最小的两次缩放图标没变化的问题 
  	patch37: regen-resolve_after_manual_sort_icons_overlap.patch 解决手动排序时，创建文件后图标重叠的问题
  	patch38: regen-resolve_file_can_not_drag_in_extended_screen_mode.patch 解决扩展模式下，无法将文件/文件夹拖到扩展屏上的问题 
  	patch39: regen-resolve_after_change_resolution_desktop_icon_covered.patch 解决调整分辨率后，桌面图标被任务栏遮住的问题 
  	patch40: regen-resolve_external_mode_modify_low_monitor_desktop_icon_error.patch 解决扩展屏下，从最高分辨率调到最低分辨率后，桌面图标乱序的问题
  	patch41: regen-resolve_after_modify_monitor_resolution_desktop_icon_covered.patch 解决修改分辨率后桌面图标被遮住的问题
  	patch42: regen-resolve_desktop_icon_covered_by_panel.patch 解决修改分辨率，任务栏重启后，桌面图标被任务栏遮住的问题 
  	patch43: regen-add_fix_chandao14422_HDMI-sort.patch 移动补丁fix_chandao14422.patch，repair-HDMI-sort.patch（导致编译不过的问题）


author: chenyun <chenyun@kylinos.cn> - 1.12.7-1kord0k233.p28.gfb03
changelog:
  - ID  : Task 416201
  - DESC: 本地磁盘挂载被识别为移动设备修改
  - ADDS: caja-1.12.7-kylin-change-removable-to-loacl-disk.patch


author: yinhao <yinhao@kylinos.cn> - 1.12.7-1kord0k233.p28.gfb04
changelog:
  - Type: NA
  - ID: BUG#255753
  - SUG: NA
  - DESC: 修复图标重叠的问题
  - Add Patche: caja-1.12.7-fix-icon-overlap.patch


author: chenyun <chenyun@kylinos.cn> - 1.12.7-1kord0k233.p28.gfb05
changelog:
  - Type: bugfix
  - ID: [BUG#337426]
  - SUG: NA
  - DESC: 修复磁盘信息显示不全的问题
  - Add Patche: caja-1.12.7-device-display-incomplete.patch


author: chenyun <chenyun@kylinos.cn> - 1.12.7-1kord0k233.p28.gfb06
changelog:
  - Type: bugfix
  - ID: [BUG#361923、381803]
  - SUG: NA
  - DESC: 修复切换分辨率，桌面图标移位
  - Add Patche: caja-1.12.7-desktop-icon-overflow.patch


author: chenshengdong <chenshengdong@kylinos.cn> - 1.12.7-1kord0k233.p28.gfb07
changelog:
  - Type: bugfix
  - ID: [BUG#384783]
  - SUG: NA
  - DESC: NA
  - Add fixbug-384783-caja-memory-leaks.patch
    fixbug-384783-caja-memory-leaks_1.patch


author: dingcaokai <dingcaokai@kylinos.cn> - 1:12.2.8-8.p08.gfb02
changelog:
  - Type:bugfix
  - ID:392113 【扩展盘】【Ext04_RC2】扩展盘未集成python2-werkzeug和python2-prettytable，ceph --version存在报错
  - SUG:NA
  - DESC: 将python-prettytable改成和python2-prettytable。
  - 编译和安装依赖都是使用是python3-prettytable，因此ceph运行不成功。


author: zhangyu <zhangyu@kylinos.cn> - 33.1.0_0-3.gfb01
changelog:
  - Type: bugfix
  - ID:[bug#306451]
  - SUG: NA
  - DESC: fix sensitive issues
  - ADD: cldr-emoji-annotation-33.1.0_0-Fix_sensitive_issues.patch


author: <majian@kylinos.cn> - 2.28-88.p12
changelog:
  - Type: cves
  - ID:   [TASK#180596]
  - SUG:  NA
  - DESC: fix CVE-2023-4806 CVE-2023-5156 CVE-2023-4813 .


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.28-88.p14
changelog:
  - Type:cves
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: pengxu <pengxu@kylinos.cn> - 2.28-88.p16
changelog:
  - Type: bugfix
  - ID: [BUG#280777]
  - SUG:  NA
  - DESC:  fix pthread_once hangs when init routine throws an exception


author: kongdelin <kongdelin@kylinos.cn> -2.28-88.p18.gfb01
changelog:
  - Type: update
  - ID:   [TASK#166557]
  - SUG:  NA
  - DESC: 1. rebuild 同步到民口版本  2.  2.28-88-p06版本删除了三个api(9001-kylin-glibc-add-mesa_func-in-midr-way.patch),会影响兼容性，现在恢复回来


author: Xiao Zai<xiaozai@kylinos.cn> - 8.32-5.p04
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: backport three patches: backport-ls-fix-crash-printing-SELinux-context-for-unstatable.patch,backport-tr-fix-crash-validating-c-with-some-case-char-classe.patch,backport-timeout-ensure-foreground-k-exits-with-status-137.patch


author: chenshengdong<chenshengdong@kylinos.cn> - 8.32-5.p04.gfb01
changelog:
  - Type:NA
  - ID:[BUG200707]
  - SUG:NA
  - DESC: fixbug-200707_partition_mounted_lsblk_and_df_Th_inconsistency.patch


author: kongdelin<kongdelin@kylinos.cn> - 8.32-5.p04.gfb02
changelog:
  - Type:bugfix
  - ID:[BUG#217426]、[BUG#199873]
  - SUG:NA
  - DESC: 合并民口patch：
      1. add fix-typo-in-zh_CN.patch,修复汉化问题(199873)
      2. add compile-expr-sort-to-static.patch,修复性能问题(217426)


author: xinghe <xinghe2@h-partners.com> - 4.11.12-31
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: xingwei <xingwei14@h-partners.com> - 7.71.1-23
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dynbuf: provide curlx_ names for reuse by the curl tool
         curl: use curlx_dynbuf for realloc when loading config files
         curl: make file2string use dynbuf
         paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: liyanan <liyanan32@huawei.com> - 2.1.27-13
changelog:
  - Split cyrus-sasl-ldap cyrus-sasl-gs2 cyrus-sasl-scram cyrus-sasl-gssapi
    cyrus-sasl-md5 cyrus-sasl-ntlm cyrus-sasl-plain sub-package


author: kongdelin <kongdelin@kylinos.cn> - 68-2.gfb01
changelog:
  - Type: bugfix
  - ID:[BUG#361703]
  - SUG:NA
  - DESC: 修改dracut-nvdimm-security.conf配置文件，添加rapidio nvme，解决initramfs无nvme、rapidIO相关ko文件


author: zhaoqingyou<zhaoqingyou@kylinos.com> - 1:1.12.16-19.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#85132]
  - SUG:NA
  - DESC: Add Patch7000:dbus-fix-security-label-trailing-comma.patch to remove trailing comma of security-label.


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-10
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: renmingshuai <renmingshuai@huawei.com> - 2.82-14
changelog:
  - Type:bugfix
  - Id:
  - SUG:NA
  - DESC:Reduce code duplication, reuse existing functions
         Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lvxiangcong <lvxiangcong@kylinos.cn> - 18.09.0-206.p12
changelog:
  - Type: TASK
  - ID:   [TASK#206575]
  - SUG:  NA
  - DESC: rebuild for containerd fix cve-2023-39325 and cve-2022-41723


author: weiyuan <weiyuan@kylinos.cn> - 18.09.0-206.p14.03
changelog:
  - Type: CVE
  - ID: CVE-2021-41091
        CVE-2024-29018
        CVE-2024-24557
        CVE-2021-41092
        CVE-2021-41089
  - SUG: NA
  - DESC: backport fix cve CVE-2021-41091 CVE-2024-29018 CVE-2024-24557 CVE-2021-41092 CVE-2021-41089


author: weiyucheng <weiyucheng@kylinos.cn> - 18.09.0-206.p15.03
changelog:
  - Type: cves
  - ID: CVE-2024-36623
        CVE-2022-24769
        CVE-2022-36109
        CVE-2024-36621
  - SUG: NA
  - DESC: backport fix cve CVE-2024-36623 CVE-2022-24769 CVE-2022-36109 CVE-2024-36621


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.05.gfb02
changelog:
  - Type: bugfix
  - ID:[BUG#181704][BUG#181362]
  - SUG:NA
  - DESC: 修复因为国防新功能核心组件保护导致初始化白名单失败的问题
  -	  add patch: dracut-050-fix-init-whlist-failed-for-gf-sw.patch


author: Yinhao <yinhao@kylinos.cn - 050-5.se.05.gfb03
changelog:
  - Type:update
  - ID:[task#357639]
  - SUG:NA
  - DESC: 驱动仓库解耦，initrd额外驱动加载
    add Patch9016 dracut-050-add-modules-with-other-disk.patch


author: kongdelin <kongdelin@kylinos.cn> - 050-5.se.05.gfb04
changelog:
  - Type: bugfix
  - ID:[bug#204271]、[bug#204191]
  - SUG:NA
  - DESC: 合并民口patch及方式修复bug204271、bug204191
      1. modify spec, support kylin
  -   2. add kernel/kylin in 90kernel-modules-extra/module-setup.sh, support kylin kernel
  -     add patch: dracut-050-support-kylin-kernel.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 050-5.se.06.gfb04
changelog:
  - Type: bugfix
  - ID:[bug#334423]
  - SUG:NA
  - DESC: 解决系统启动时,界面有安全组件相关的错误信息提示
  -   add patch: dracut-050-fix-some-error-log-when-system-startup.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 050-5.se.07.gfb04
changelog:
  - Type: bugfix
  - ID:[bug#343309]
  - SUG:NA
  - DESC: 解决切换strict模式后,重启查看selinux类型为targeted问题
  -   add patch: dracut-050-fix-strict-mode-selinux-is-targeted-type.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 050-5.se.07.gfb06
changelog:
  - Type: bugfix
  - ID:[bug#382271]
  - SUG:NA
  - DESC: 解决当selinux关闭时,boot日志中存项相关错误信息
  -   add patch: dracut-050-fix-boot-exists-error-log-when-selinux-is-disabled.patch


author: leechm <liqimei@kylinos.cn> - 1.45.6-11.gfb01
changelog:
  - add kylin-e2fsprogs-add-kylin-lockf.patch [from lxd]
  - Modify the file filtering function to remove excess output information [from lxd]


author: dingcaokai <dingcaokai@kylinos.cn> - 1.45.6-11.gfb02
changelog:
  - Type: task
  - ID: [task#454494]
  - SUG: N/A
  - DESC: add e2fsprogs-1.45.6-add-kylin-tpplf-to-BlackDefaultBuf.patch


author: yinhao <yinhao@kylinos.cn> - 1:4.11-4.gfb01
changelog:
  - Type: NA
  - ID: BUG#194297
  - SUG: NA
  - DESC: eclipse打开失败，提示“The Eclipse execute launcher is configured to not...”
  	change specs: sed -i '1i-protect\nroot' eclipse.ini


author: weishaokun<weishaokun@kylinos.cn> - 202011-11.p03
changelog:
  - Type: update
  - ID:   84913
  - SUG:  NA
  - DESC: KYLIN, ArmVirtPkg, add Kylin-Support-virtual-AHCI-and-NVMe-drives.patch


author: wangguochun <wangguochun@kylinos.cn> - 202011-11.p07
changelog:
  - Type Update
  - ID: [TASK#204644]
  - SUG: NA
  - DESC: fix CVE-2023-0464/CVE-2023-0465/CVE-2023-0466/CVE-2023-2650/CVE-2023-3446/CVE-2023-3817
  -           CVE-2024-0727/CVE-2022-36763/CVE-2022-36764/CVE-2022-36765
  -           CVE-2023-45229/CVE-2023-45230/CVE-2023-45231/CVE-2023-45232/CVE-2023-45233/CVE-2023-45234/CVE-2023-45235


author: xiaoyuliang <xiaoyuliang@kylinos.cn> -202011-11.p09
changelog:
  - Type: Update
  - ID:   [TASK#363445]
  - SUG:  NA
  - DESC: fix CVE-2024-1298/CVE-2024-5535/CVE-2021-3712/CVE-2022-0778


author: lijunwei <lijunwei@kylinos.cn> - 202011-11.p10
changelog:
  - Type: Update
  - ID:   [TASK#388581]
  - SUG:  NA
  - DESC: Fix CVE-2024-38796/CVE-2023-45236/CVE-2023-45237


author: kongdelin <kongdelin@kylinos.cn> - 0.180-15.gfb01
changelog:
  - TYPE: update
  - ID  : [task#495129]
  - SUG : NA
  - DESC: 修改spec文件，detach subpackages elfutils-libs, elfutils-libelf,
    elfutils-libelf-devel, elfutils-default-yama-scope，与已发布版本(0.180-3)保持一致


author: leechm <liqimei@kylinos.cn> - 0.180-15.gfb02
changelog:
  - backport-CVE-2025-1352.patch
  - backport-CVE-2025-1372.patch
  - backport-CVE-2025-1376.patch
  - backport-CVE-2025-1377.patch


author: gaoyukun <gaoyukun@kylinos.com> - 1:27.1-15.p01
changelog:
  - type: bugfix 
  - ID: NA
  - DESC: add patch:kylin-change-translation-emacs.patch, add translate bug add modify spec and add config.guess and config.sub in build dir for compile.


author: houhongxun <houhongxun@kylinos.cn> - 1.12.2-2kord7.p04
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-eom-add-some-missing-traditional-translations-for-HK.patch


author: xiaojiantao <xiaojiantao1@h-partners.com> - 2:5.15-3
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:add support to set or get rx buf len and tx push by ethtool


author: chenshengdong <chenshengdong@kylinos.cn> 2.31.0-4.01.gfb02
changelog:
  -Type: bugfix
  - ID  : [BUG#279803]
  - SUG : NA
  - DESC: add fixbug-279803-resolve_issue_of_duplicate_icons_in_kylin_menu.patch


author: dillon chen <dillon.chen@gmail.com> - 2.4.5-5
changelog:
  - CVE-2020-18651,CVE-2020-18652
  - CVE-2021-36048,CVE-2021-39847,CVE-2021-42530,CVE-2021-36046,CVE-2021-36055
  - CVE-2021-40716,CVE-2018-12648,CVE-2021-36054,CVE-2021-36047,CVE-2021-36052
  - CVE-2021-36058,CVE-2021-36045,CVE-2021-42531,CVE-2021-36064,CVE-2021-42529
  - CVE-2021-42528,CVE-2021-36050,CVE-2021-40732
  - CVE-2021-36056,CVE-2021-42532,CVE-2021-36053,CVE-2021-36051


author: lilu <lilu@kylinos.cn> - 1.0-1.p01
changelog:
  - Type: bugfix
  - ID: [Task#164565]
  - SUG: NA
  - DESC: Modified abnormal display and get info thread errors


author: wuzhaomin <wuzhaomin@kylinos.cn> - 1.0-2
changelog:
  - Type: bugfix
  - ID: [Task#129614]
  - SUG: NA
  - DESC: Code optimization and fix get top memory total and other errors


author: wuzhaomin <wuzhaomin@kylinos.cn> - 1.1.0-0
changelog:
  - Type: bugfix
  - ID: [Task#205345]
  - SUG: NA
  - DESC: Optimize code and resolve issues such as flame graph display errors


author: dongjiao <dongjiao@kylinos.cn> - 1.2.2-2
changelog:
  - Type: update 
  - ID: [Task#213115]
  - SUG: NA
  - DESC: Upgrade version to 1.2.2-2
  	Add depend-v10 to add module whl file


author: cuiyudong <cuiyudong@kylinos.cn> - 4.2.9.1.p04
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add support gb18030-patch ; add gd18030 conf and so  
          add page size-patch ; modify size to 16
          add modify patch ; delete 9 coding for gb18030


author: chenyun <chenyun@kylinos.cn> - 4.2.9.1.p04.gfb03
changelog:
  - Type: bugfix
  - ID:   [BUG#204834、215529]
  - SUG:  NA
  - DESC: 同步民口bug#204834、bug#215529 
  - Add Patches:fcitx-update-translations-for-hk-and-tw.patch
  	0001-fcitx-correct-some-traditional-chinese-translations.patch


author: lipengyu <lipengyu@kylinos.cn> - 79.0-7.p16
changelog:
  - Type: bugfix
  - ID: [BUG#231659]
  - SUG: NA
  - DESC:Change the default search engine in Firefox to Baidu


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p17
changelog:
  - Type: cves
  - ID: CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946 CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406 CVE-2020-15675  
        CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998 CVE-2022-29912
  - SUG: restart
  - DESC: fix CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946  CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406   
              CVE-2020-15675  CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998 CVE-2022-29912


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p19
changelog:
  - Type: cves
  - ID:CVE-2021-29970.patch  CVE-2021-43539.patch  CVE-2023-1945.patch
  - SUG: restart
  - DESC: patch  CVE-2021-29970.patch  CVE-2021-43539.patch  CVE-2023-1945.patch


author: chenyun <chenyun@kylinos.cn> - 1.99.1-20.p00.gfb01
changelog:
  - Type:bugfix
  - ID:[bug#360015]
  - SUG:NA
  - DESC:change Source1: kernelnewbies-fortunes.tar.gz to sensitive


author: liujingyuan <liujingyuan@kylinos.cn> - 2.10.2-6.gfb01
changelog:
  - Type: bugfix
  - ID  : [bug#368397]
  - SUG : NA
  - DESC: add freetype-473283.patch  freetype-2.10.2-fixbug-368397.patch 修复敏感词


author: liujingyuan <liujingyuan@kylinos.cn> - 2.2.4-7.gfb05
changelog:
  - Resolve sensitive characters. datum_shift.csv gcs.csv gdal_datum.csv gt_datum.csv ozi_datum.csv pci_datum.txt pcs.csv s57agencies.csv s57expectedinput.csv vertcs.csv gcs.csv gdal_datum.csv geoccs.csv gt_datum.csv ozi_datum.csv pci_datum.txt projop_wparm.csv s57agencies.csv Hong Kong Taiwan is modified to China/Hong KoNG China/Taiwan


author: <majian@kylinos.cn> - 9.2-7.p01
changelog:
  - Type: update
  - ID: [TASK#186426]
  - SUG: NA
  - DESC: Init package for Kylin V10 sp4 and add Kylin patches.
  - [BUG#112827] fix replace manufacturer string from openEuler to KylinOS in version info.
  - [BUG#199946] fix gdb hangup crash issue when attach running process debug.


author: majian <majian@kylinos.cn> - 9.2-7.p02
changelog:
  - Type: bugfix
  - ID: [BUG#218056]
  - SUG: NA
  - DESC: Add 0002-Set-entry-point-when-text-segment-is.patch.


author: gaoyukun <gaoyukun@kylinos.cn> - 9.52-20.p03
changelog:
  - Type:cves
  - ID:CVE-2025-27832, CVE-2025-27835, CVE-2025-27836 CVE-2025-27837 CVE-2023-52722
  - SUG:NA
  - DESC:fix CVE-2025-27832, CVE-2025-27835, CVE-2025-27836 CVE-2025-27837, CVE-2023-52722


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.27.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.27.0-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.27.0-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.27.0-19
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fandeyuan <fandeyuan@kylinos.cn> - 2.66.8-12.p03
changelog:
  - Type: Bugfix
  - ID: [TASK#200965]
  - SUG: NA
  - DESC: add change-g_error-terminate-signal-to-abort.patch


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.66.8-12.p04
changelog:
  - Type: cve fix
  - ID: NA
  - SUG: NA
  - DESC: add backport-glocalfilemonitor-Avoid-file-monitor-destruction-from-event-thread.patch
   backport-CVE-2024-34397.patch backport-gdbusconnection-Allow-name-owners-to-have-the-syntax-of-a-well-known-name.patch


author: wuxiaolei <wuxiaolei@kylinos.cn> - 2.66.8-12.p08
changelog:
  - Type:cves
  - ID: CVE-2025-3360  CVE-2025-4373
  - SUG:NA
  - DESC: fix CVE-2025-3360, fix CVE-2025-4373


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 7.0-10.p03
changelog:
  - Type:cves
  - ID:CVE-2022-48340
  - SUG:NA
  - DESC:Backport v10-sp3-updates-sc p02 patch to fix CVE-2022-48340


author: kongdelin <kongdelin@kylinos.cn> - 3.6.14-16.p02.gfb01
changelog:
  - Type:update
  - ID:[Task#471801]
  - SUG:NA
  - DESC: 同步民口漏洞成果，并把gfb改动合进来(task#85463 Add gnutls-dane and gnutls-3.6.14-check-init_fds.patch to fix check failed)


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-43.p02
changelog:
  - Type:update
  - ID:[TASK#213363]
  - SUG:NA
  - DESC:Add Patch9901-9902, modify spec, support mips64el and loongarch64
  -      Add Patch9903, support loong64 mips64el for CVE-2023-29403


author: gaoxiang <gaoxiang@kylinos.cn> - 1.15.7-48.p02
changelog:
  - Type:CVE
  - CVE:CVE-2024-45341, CVE-CVE-2024-45336
  - SUG:NA
  - DESC:fix CVE-2024-45341, CVE-CVE-2024-45336


author: houhongxun <houhongxun@kylinos.cn> - 20200916-3.p02
changelog:
  - Type: update
  - ID:   [TASK#327639]
  - SUG:  NA
  - DESC: rebuild to remove sensitive information for sp1、sp2、sp3、sp4


author: yueyuankun<yueyuankun@kylinos.cn> - 2.04-21.se.01.p06
changelog:
  - Type:update
  - ID:bug#127107
  - SUG:NA
  - DESC:add PATCH0371, loongArch64 solve "out of memory" during PXE installation


author: kangyu<kangyu@kylinos.cn> - 2.04-21.se.01.p07
changelog:
  - Type:update
  - ID:bug#128022
  - SUG:NA
  - DESC:Remove the not find kyee prompt
         add press y to enter the system


author: Xiao Zai <xiaozai@kylinos.cn> - 2.04-21.se.01.p08
changelog:
  - Type:NA
  - ID:bug#134276
  - SUG:NA
  - DESC: remove executable permission bits for grub-boot-indeterminate.service


author: kangyu <kangyu@kylinos.cn> - 2.04-21.se.03.p08
changelog:
  - Type:NA
  - ID:bug#144461
  - SUG:NA
  - DESC: measurefile.mod failed to load after x86qcow start message was displayed


author: Xiao Zai <xiaozai@kylinos.cn> - 2.04-21.se.03.p09
changelog:
  - Type:bugfix
  - ID:task#143178
  - SUG:NA
  - DESC: move the password from spec file into 00_header.in file


author: kangyu <kangyu@kylinos.cn> - 2.04-21.se.04.p09
changelog:
  - Type:bugfix
  - ID:task#148830
  - SUG:NA
  - DESC: Troubleshoot the nested virtualization installation exception


author: yinhao <yinhao@kylinos.cn> - 2.04-21.se.04.p10
changelog:
  - Type:bugfix
  - ID:task#192661
  - SUG:NA
  - DESC: Delete Patch:0001-add-default-password-into-00_header.in.patch


author: chenshengdong <chenshengdong@kylinos.cn> - 2.04-21.se.04.p10.gfb02
changelog:
  - Type:bugfix
  - ID:task#205993
  - SUG:NA
  - DESC: Add fixbug-205993-solve_exit_stuck_in_grub_command_line.patch


author: liuyang <liuyang01@kylinos.cn> - 2.04-21.se.04.p18
changelog:
  - Type:CVE
  - ID:task#338411
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity


author: andy <liuyang01@kylinos.cn> - 2.04-21.se.04.p20
changelog:
  - Type:CVE
  - ID:task#381521
  - CVE:CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2021-3981 CVE-2022-2601 CVE-2022-28733 CVE-2022-28734 CVE-2022-28736 CVE-2022-3775
  - SUG:NA
  - DESC:CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2021-3981 CVE-2022-2601 CVE-2022-28733 CVE-2022-28734 CVE-2022-28736 CVE-2022-3775


author: andy <liuyang01@kylinos.cn> - 2.04-21.se.04.p21
changelog:
  - Type:CVE
  - ID:task#441494
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-2024-45774,
        CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-2025-1118,
        CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025-0678,CVE-2025-1125
  - SUG:NA
  - DESC:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-2024-45774,
        CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-2025-1118,
        CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025-0678,CVE-2025-1125


author: yinhao <yinhao@kylinos.cn> - 2.04-21.se.04.p21.gfb01
changelog:
  - sync from gfb
  - add fixbug-205993-solve_exit_stuck_in_grub_command_line.patch
  - delete Patch:0001-add-default-password-into-00_header.in.patch


author: Funda Wang <fundawang@yeah.net> - 1.16.2-6
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: peijiankang <peijiankang@kylinos.cn> 2.24.32-11.p01
changelog:
  - Type: cves
  - ID:   [TASK#356995]
  - SUG:  NA
  - DESC: modify spec file enable_immodules_package 1  build gtk2-immodules packages
          add file gtk+-2.24.32-kylin-13336.patch
          add patch 0001-fix-chandao-bug47120.patch
          add patch:0001-add-some-translate.patch
          sync from 2.24.32-7.p03


author: peijiankang <peijiankang@kylinos.cn> - 3.24.21-6.p01
changelog:
  - Type: cves
  - ID:   [TASK#356907]
  - SUG:  NA
  - DESC: add gtk3-update-translations-for-hk.patch
          Handle the mouse block problem of virt-manager virtual machine
          modify gtk3 spec file enable_immodules_package 1
          sync from 3.24.21-1.p03


author: leechm <liqimei@kylinos.cn> - 3.24.21-6.p01.gfb01
changelog:
  - 添加code-optimaization-0001.patch，解决和gtk3-3.24.1-4.p01.ky10版本(2204)兼容性问题
  - 改动地方：把结构体中间新增的成员变量放到结构体末尾(smoothed_frame_time、synthesized_crossing_event_id、synthesized_crossing_event_id) [from kdl]


author: xinghe <xinghe2@h-partners.com> - 2.2.16-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-20
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-21
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:NA
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.4.43-23.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.


author: zhangyulong <zhangyulong@kylinos.com> - 2.4.43-23.p02
changelog:
  - Type:TASK
  - ID:195905
  - SUG:NA
  - DESC:add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: leechm <liqimei@kylinos.cn> - 2.4.43-23.p02.gfb01
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream
  - ref httpd-2.4.43-24.oe1


author: chenzhitao <chenzhitao8@huawei.com> - 2.4.43-16
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-28614 CVE-2022-26377 CVE-2022-30522 CVE-2022-28615  CVE-2022-31813


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:restart
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.43-24
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-25
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.4.43-25.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.
          add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: caokeqian<caokeqian@kylinos.cn> - 0.337-1.p01.gfb01
changelog:
  - Type:enhancement
  - BUGID: 170150
  - DESC: add Patch9003 支持沐创网卡

   Wed Mar 25 2021 hanshuang <hanshuang@kylinos.cn> - 0.337-1.p01
  - Add upgrade_pci.ids.patch  update to v2.2 pci.ids


author: kongdelin<kongdelin@kylinos.cn> - 0.337-1.p01.gfb03
changelog:
  - Type:update
  - ID:[TASK#404285]
  - SUG:NA
  - DESC: add 001-hwdata-fix-sensitive-information-fields.patch, 修复敏感字段："Hong Kong" -> "Hong Kong,China", "Taipei" -> "Taipei,China"等


author: chenyun <chenyun@kylinos.cn> - 0.337-1.p01.gfb05
changelog:
  - Type:bugfix
  - ID:[bug#369011]
  - SUG:NA
  - DESC:change patch9006:hwdata-0.337-change-sensitive.patch


author: chenyun <chenyun@kylinos.cn> - 0.337-1.p01.gfb06
changelog:
  - Type:update
  - ID:[task#496229]
  - SUG:NA
  - DESC:change patch9006:hwdata-0.337-change-sensitive-1.patch


author: kongdelin <kongdlein@kylinos.cn> - 0.337-1.p01.gfb07
changelog:
  - Type:bugfix
  - ID:[bug#334392]
  - SUG:NA
  - DESC:change patch9007:hwdata-0.337-change-sensitive-2.patch


author: yinhao<yinhao@kylinos.cn> - 0.3.82-1.p04
changelog:
  - Type:bugfix
  - ID:bug#221535
  - SUG:NA
  - DESC:Add initial-setup-0.3.82-kylin-set-the-default-display-as-clone-screen.patch


author: liujingyuan<liujingyuan@kylinos.cn> - 0.3.82-1.p05
changelog:
  - Type:bugfix
  - ID:bug#283461
  - SUG:NA
  - DESC:Add to spec file  check_system=`systemctl list-units --type=service --all | grep -E 'initial-setup-graphical|initial-setup-text'`,Check if the initial setup granular and initial setup text services exist


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: liujingyuan <liujingyuan@kylinos.cn> - 4.5.0-1.p03.gfb01
changelog:
  - add Modify_sensitive_characters_HongKongTaiwan.patch 修改敏感字符，Tiwan HongKong 为 Tiwan，China HongKong，China


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC:	1.JDK8u432 GA release
  	2.Default parameter updates for x86
  	3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
  	4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.432.b06-2
changelog:
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8253072-XERCES-version-is-displayed-incorrect.patch
  - add 8159461-8288556-getComponentType.patch
  - add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
  - add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.442.b06-0.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-1.8.0.442.b06 GA release with kylin support:
          1.Support Hygon, Zhaoxin, Atomic operation
          2.Default parameter updates for x86


author: Jackie Liu <liuyun01@kylinos.cn> - 1.0-1
changelog:
  - inject: add missing -h args
  - filesnoop: fix crash when -o OPEN
  - Add dbstat support
  - Add ustat support
  - Add inject support
  - tcplinks: fix typo for helps
  - Add icstat support
  - memleak: Tiny fixes
  - memleak: Fix memory leak
  - Fix memory leak when using getline()
  - dbslower: Fixes build errors caused by uninitialized variables in bpf program
  - Add dbslower support
  - Add ugc support
  - Add mysqld-qslower support
  - javagc: fix some attach errors
  - Add uflow support
  - ucalls: Correct 'phpccalls' to 'phpcalls'
  - Add cachetop support
  - biotop/filetop: Fix 'count' print count
  - Add get_uid_name() implementation
  - Add trace support
  - Display UID in username format
  - libbpf-tools: update arm vmlinux with missing perf_event, BPF_PROG_TYPE_PERF_EVENT
  - setuids: rename UID to SU_UID
  - filegone: convert errno to error string
  - filegone: Increase the buffer for filename
  - filegone: Add return code support
  - Expand the print width of pid
  - libbpf-tools/filelife: Check btf struct field for CO-RE
  - tplist: Use tracefs_path()
  - Add reset-trace support
  - Tiny fixes
  - libbpf-tools/tcprtt: use the same options to filter IPv4 and IPv6 addresses
  - tools, libpf-tools: increase IPv6 address width to 39 characters
  - Fix memory leak in capable.c
  - libbpf-tools/execsnoop: fix ret type of bpf_probe_read_user*.
  - libbpf-tools: add block_io_{start,done} tracepoints support to bio tools
  - libbpf-tools: fix tcppktlat show wrong ports
  - Tiny fix we meet
  - funcslower/profile/stackcount: Add folded format output
  - filegone: rewrite filegone base on unlinksnoop
  - offwaketime/wakeuptime: Add folded format output
  - offcputime: Add folded format output
  - Add offwaketime support
  - offcputime: Change the tracepoint mode to kprobe to repair the calltrace display
  - ketones: reword new software tagline
  - dcstat: fix macro err defined
  - Add uthreads support
  - Fix potential double fclose warning
  - Use bpf_core_filed_exist for bpf_ringbuf exist
  - Fix allocating and freeing memory in {probe,free}_usdt_notes
  - Add shmsnoop support
  - uobjnew: Adjust this program to better match the BCC version
  - Add uobjnew support
  - Add tplist support
  - package: Prompt for compilation dependencies
  - Add unlinksnoop support
  - Add dcstat support
  - core_fixes: Fix __builtin_preserve_enum_value not defined issue
  - libbpf-tools: Allow tcppktlat to run on old kernels
  - libbpf-tools: Add support for IPv6 to tcprtt.
  - libbpf-tools: fallback to tracefs mount point if debugfs is not mounted
  - libbpf-tools: add filter for biosnoop
  - cpufreq: read initial freqs only of valid links
  - libbpf-tools: Avoid virtual memory area [uprobes] warning
  - statsnoop: print parent pid
  - opensnoop: print parent pid
  - filesnoop: drop opensnoop and statsnoop in filesnoop
  - Revert "statsnoop: Remove specially designed statsnoop"
  - filesnoop: extend parent pid
  - debian rules to package ketones
  - prepare for make project
  - statsnoop: Remove specially designed statsnoop
  - libbpf: Support POSIX regular expressions for multi kprobe
  - Add tcprst support
  - Add ucalls support
  - uprobe_helpers: Fix path acquisition function
  - libbpf-tools: syscount: Add syscall lookup table for arm64 and riscv
  - Add profile support
  - Add tcpdrop support
  - tcplinks: use ncurses for draw UI
  - libbpf: tiny fixup of libbpf
  - Add tcpsubnet support
  - Add tcplinks support
  - libbpf: don't attach to non-attachable kprobes
  - Add stackcount support
  - libbpf: don't need zero res in exit path
  - libbpf: available_filter_functions_addrs for filter functions
  - Fix the function to get the sk_protocol
  - tcpaccept: Delete redundant code to make more compact
  - tcp: Delete unnecessary parameters
  - Add zfsslower support
  - Add zfsdist support
  - Add funcslower support
  - signal: fix undefined behavior of signal handler
  - commons: Simplified time_since_start function
  - Add tcpaccept support
  - Makefile: fix compile error for bpflist
  - Add tcpretrans support
  - ttysnoop: Implement new way for CO-RE
  - libbpf: rewrite kprobe.multi filter with available_filter_functions
  - Add funccount support
  - Resolve compilation errors on loongarch
  - libbpf: support record count of functions has been traced
  - Makefile: bpflist: remove unnecessary compilation dependencies
  - libbpf: filter by available functions
  - Add vfscount support and cleanup unused variable
  - Add README
  - Add filesnoop support
  - Add bpflist support
  - Add stacksnoop support
  - Add writeback support
  - vfsstat: fix exit value when SIGINT
  - Add threadsnoop support
  - trace_helpers: fix proc maps with [uprobes] entry
  - Add syncsnoop support
  - Cleanup vmlinux and others
  - loads: register perf event on all cpus
  - klockstat: fix running on un-implement down_read_interruptible kernel
  - loads: Remove unnecessary assign 0 operations
  - readahead: fix CO-RE on running without fentry
  - memleak: fix kmalloc and kmalloc_node's hook running on old kernel
  - Makefile: fix foo.bpf.o build without foo.h
  - libbpf-tools: Add loongarch support
  - libbpf-tools: use fentry in funclatency
  - libbpf-tools: Filter with kprobe blacklist for kprobe_exists() api.
  - libbpf-tools/memleak: support ksyms and syms_cache
  - libbpf-tools/memleak: make it run on old kernel
  - change storage type of helper err to int
  - libbpf-tools/memleak: remove unused arg "PERCPU"
  - libbpf-tools/memleak: fix 'show allocs'
  - Makefile: fix binary depends on includes file update
  - ttysnoop: fix co-re on struct iov_iter hasn't ubuf
  - loads: sample_period works on ns, convert to second
  - Add setuids support
  - Sync upstream bpftool libbpf blazesym without submodules
  - Redefine the global name of the project and its representative meanings
  - Add ttysnoop support
  - Move various tracing programs to his directory
  - Move binary to ./bin directory
  - Spit includes and libs into directory
  - Add pidpersec support
  - Add naptime support
  - Add cpuwalk support
  - Add dcsnoop support
  - Add loads support
  - Add swapin support
  - Add tcppktlat support
  - Add javagc support
  - Add tcpstates support
  - Add tcprtt support
  - Add tcplife support
  - tcpconnect: Drop unused ts_us
  - Add tcpconnect support
  - Fix some string features must be done in _GNU_SOURCE
  - Fix potential early exit of the program
  - Add tcpsynbl support
  - Add tcptop support
  - Add tcptracer support
  - Use strftime_now for cleanup
  - Add vfsstat support
  - Use BPF_CORE_READ_STR_INTO to instead of bpf_probe_read_kernel_str
  - Add syscount support
  - Merge changes If1eb510b,I220234bb
  - tcpconnlat: Remove entries from map in all cases
  - execsnoop: add execveat support
  - Fix load of ringbuffer is not support
  - Add tcpconnlat support
  - Add statsnoop support
  - Add solisten support
  - Add support slabratetop
  - Add sigsnoop support
  - Add support readahead
  - Add opensnoop support
  - update submodules url into gitee.com
  - Add support oomkill
  - Add support mountsnoop
  - Use argp_parse_pid and do_process_running wrapper for cleanup
  - memleak: use blazesym for show symbols
  - Add support blazesym
  - Makefile: Generate a symlink for different ebpf programs
  - Add support memleak
  - Add support mdflush
  - Update submodules
  - Add support llcstat
  - Add support ksnoop
  - rename bpf_map_lookup_and_delete to bpf_map_lookup_and_delete_elem
  - Add support klockstat
  - biostacks: fix wrong function name of __blk_account_io_start
  - biosnoop.bpf: fix run by inline functions
  - cpufreq: fix typo from raw_btf to raw_tp
  - biostacks: support run on kernel without btf
  - offcputime: work on kernel without btf
  - fsdist: fix crash on kernel without bss support
  - cpufreq: work on kernel without btf
  - bitesize: fix run on kernel without btf
  - biosnoop: support kernel without fentry
  - numamove: fix initial of num and latency
  - Add fsslower support
  - Drop libbpf_set_strict_mode() calls
  - Add support fsdist
  - bitesize: add missing partitions__load
  - Add support filetop
  - Use bpf_get_current_ns_pid_tgid for WSL or container
  - Add support filelife
  - Add support exitsnoop
  - Add drsnoop support
  - Add support capable
  - Add support cachestat
  - Add support bitesize
  - Add support biostacks
  - Add support biosnoop
  - Add support biopattern
  - Add support biolatency
  - Add support bindsnoop
  - Add support cpufreq
  - Add biotop support
  - Add support funclatency
  - Add gethostlatency support
  - Add bash readline support
  - numamove: only work for numa node > 1
  - runqlen: Add run queue length support
  - execsnoop: convert to use bpf_core_read_xxx
  - Add numasched support
  - execsnoop: works on !(tracepoint/syscalls)
  - numamove: fixes BPF_KRETPROBE for kretprobe
  - update vmlinux.h
  - Add numamove support
  - Fix wrong patch of uapi/linux/bpf.h
  - Add wakeuptime support
  - Add execsnoop support
  - Add support offcputime
  - Add support cpudist
  - Add support runqueue-latency
  - Add support hardirqs
  - use warning instead of fprintf stderr
  - Add softirqs support
  - runqslower support thread id
  - Add .gitreview for git-review
  - Add README.md for build binary
  - Add runqslower tools
  - Init submodules
  - Initial LICENSE


author: Youling Tang <tangyouling@kylinos.cn> - 1.0-2
changelog:
  - softirqs: Fix the naming error
  - Revert "ksnoop: use bpf_get_func_ip() where helper is available"
  - Add criticalstat support
  - ttysnoop: fix iov_iter.ubuf CO-RE mismatch
  - libbpf-tools/gethostlatency: Resolve the path of libc for different namespaces
  - libbpf-tools: Fix misaligned pointer accesses in exitsnoop
  - libbpf-tools/filelife: Fix error tracking caused by failed unlink
  - Added support for f2fs to fsdist and fsslower tools.
  - libbpf-tools: Check biolatency tracepoints using BTF
  - libbpf-tools: Add s390x support
  - libbpf-tools: Fix bindsnoop types usage
  - libbpf-tools: Fix -Wformat errors for 32bit systems
  - ksnoop: use bpf_get_func_ip() where helper is available
  - use tid instead of tgid
  - Add sofdsnoop support
  - spec: mark ketones need clang >= 10
  - package ketones for RPM


author: Youling Tang <tangyouling@kylinos.cn> - 1.0-3
changelog:
  - Add adaptive readahead support
  - Add wqlat support
  - libbpf-tools: fix syscall tracepoints
  - Fix bashreadline
  - libbpf-tools/offcputime, futexctn: Fix incorrect DSO information in stacktrace
  - libbpf-tools/memleak: Add verbose option
  - libbpf: Some advanced features customized for ketones
  - Update libbpf to 1.4.0
  - Add netqtop support
  - Add kvmexit support
  - Add dddos support
  - cpuunclaimed: Add cpuunclaimed support
  - libbpf-tools/ksnoop: perf buffer fix unnecessary junk bits output
  - libbpf-tools: Fix bindsnoop for kernel v6.6+
  - libbpf-tools: Fix trace_helper symbol search bug
  - libbpf-tools/biotop: Add PID filter support
  - libbpf-tools: Fix misaligned pointer accesses in drsnoop
  - libbpf-tools: Fix misaligned pointer accesses in tcptracer
  - libbpf-tools: Fix misaligned pointer accesses in tcpstates
  - libbpf-tools: Fix misaligned pointer accesses in filegone
  - libbpf-tools: Fix misaligned pointer accesses in tcplife
  - libbpf-tools: Fix misaligned pointer accesses in tcpconnect
  - libbpf-tools: Fix misaligned pointer accesses in statsnoop
  - libbpf-tools: Fix misaligned pointer accesses in runqslower
  - libbpf-tools: Fix misaligned pointer accesses in opensnoop
  - libbpf-tools: Fix misaligned pointer accesses in gethostlatency
  - libbpf-tools: Fix misaligned pointer accesses in fsslower
  - libbpf-tools: Fix misaligned pointer accesses in filelife
  - libbpf-tools: Fix misaligned pointer accesses in biosnoop
  - Add futexctn support
  - libbpf-tools/memleak: correct key size of memptrs
  - Sync ketones.spec to v1.0-2


author: chenshengdong <chenshengdong@kylinos.cn> - 1.0-3.gfb01
changelog:
  - Type: task
  - ID  : [TASK#341359]
  - SUG : NA
  - DESC: Delete some commands due to kernel version issues.


author: chenshengdong <chenshengdong@kylinos.cn> - 1.0-3.gfb02
changelog:
  - Type: task
  - ID  : [TASK#282439]
  - SUG : NA
  - DESC: Add fixbug-fsslower_suppoerts_output_to_csv_file.patch


author: chenshengdong <chenshengdong@kylinos.cn> - 1.0-3.gfb03
changelog:
  - Type: bug
  - ID  : [BUG#282079]
  - SUG : NA
  - DESC: Add fixbug-282079-solve_cachetop_title_alignment_problem.patch


author: chenshengdong <chenshengdong@kylinos.cn> - 1.0-3.gfb04
changelog:
  - Type: bug
  - ID  : [BUG#282481]
  - SUG : NA
  - DESC: Modify spec and delete commands outside of requirements.


author: chenshengdong <chenshengdong@kylinos.cn> - 1.0-3.gfb06
changelog:
  - Type: bug
  - ID  : [BUG#282427]
  - SUG : NA
  - DESC: Add fixbug-282427-solve_the_issue_of_grabled_text_in_file.patch


author: chenyun <chenyun@kylinos.cn> - 2.0.20-16.p01.gfb01
changelog:
  - Type:bugfix
  - ID:203894、204836、194811
  - SUG:NA
  - DESC: 同步民口补丁：modify  dracut-kdump.sh in dump_ssh() add delay to solve sshd failed
  	modify kdump.sysconfig.aarch64,olved the problem of not being able to generate vmcore when swiotlb is 0


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1.0.1-3.p01
changelog:
  - Type:update
  - ID:[TASK#162318]
  - SUG:NA
  - DESC:Add BuildRequires/Requires and fix compilation error with mock


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1.0.1-3.p02
changelog:
  - Type:update
  - ID:[TASK#162318]
  - SUG:NA
  - DESC:Remove kernel version from package name and rebuild with kernel-4.19.90-82.0.v2307.ky10


author: maqiting <maqiting@kylinos.cn> - 1.0.1-5kord.se.24.gfb01
changelog:
  - Type:bugfix
  - ID:[BUG#361809]
  - SUG:NA
  - DESC:
  - add "glib2-devel qt5-qtbase-private-devel" for Build Requires
  - fix bug #361809 install error message: no such file or directory


author: huchao <huchao01@kylinos.cn> - 1.3.2-1.p33.05.gfb01
changelog:
  - Type:update
  - ID: TASK#454509
  - SUG:NA
  - DESC:增加质保服务期延长机制
  - Add Patche：kylin-activation-1.3.10-5.p33.05.gfb01-update-service-extend-mechanism.patch


author: huchao <huchao01@kylinos.cn> - 1.3.2-1.p33.05.gfb02
changelog:
  - Type: bugfix
  - ID:[bug#350359]
  - SUG: NA
  - DESC: 修复【第二批次补丁】【LA】3D5000服务器上，不匹配的授权文件可用海泰/龙脉Ukey成功激活的问题
  - kylin_activation_fix_bug_350359.patch


author: huchao <huchao01@kylinos.cn> - 1.3.2-1.p33.05.gfb03
changelog:
  - Type: bugfix
  - ID:[bug#357337][bug#357351][bug#357359][bug#357653][bug#358409][bug#358623][bug#358985]
  - SUG: NA
  - DESC: fix-bug：357337、357351、357359、357653、358409、358623、358985
  - kylin-activation-fix-bug-357337-357351-357359-357653-358409-358623-358985.patch


author: huchao <huchao01@kylinos.cn> - 1.3.2-1.p33.05.gfb04
changelog:
  - Type: bugfix
  - ID:[bug#356747][bug#356735][bug#350359]
  - SUG: NA
  - DESC: fix-bug：356747、356735、350359_window_stuck
  - kylin-activation-fix-bug-356747-356735-350359_window_stuck.patch


author: huchao <huchao01@kylinos.cn> - 1.3.2-1.p33.05.gfb06
changelog:
  - Type: bugfix
  - ID:[bug#361859]
  - SUG: NA
  - DESC: fix-bug：361859
  - kylin-activation-fix-bug-361859.patch


author: huchao <huchao01@kylinos.cn> - 1.3.2-1.p33.05.gfb07
changelog:
  - Type: bugfix
  - ID:[bug#366173]
  - SUG: NA
  - DESC: fix-bug：366173
  - kylin-activation-fix-bug-366173.patch


author: kongdelin <kongdelin@kylinos.cn> - 1.3.2-1.p33.05.gfb09
changelog:
  - Type: bugfix
  - ID:[bug#371791]
  - SUG: NA
  - DESC: add kylin-activation-bugfix-371791.patch,修复激活信息提醒不正确问题


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p31
changelog:
  - Type:bugfix
  - ID:[BUG#178000] [TASK#176779] [TASK#179475]
  - SUG:NA
  - DESC: add get trial date fuction for dbus
  - DESC: open auto activation for kms privatization
  - DESC: add ipv6 support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p33.02
changelog:
  - Type: bugfix
  - ID:[bug#216077]
  - SUG: NA
  - DESC: add tips when inputed activation code is too short


author: zhangyu <zhangyu@kylinos.cn> -p64.gfb02
changelog:
  - add kylin-control-center-3.9.5-setLockScreenBackgroundDefaultImage.patch
  - set Lock Screen Background Default Image


author: dingcaokai <dingcaokai@kylinos.cn> - 1.0.0.gfb07
changelog:
  - Type: bugfix
  - ID:   374729 【扩展盘】全选安装有失败但最终显示安装成功
  - DESC: add patch kylin-extrapackages-install-app-progress1.patch


author: dingcaokai <dingcaokai@kylinos.cn> - 1.0.0.gfb08
changelog:
  - Type: bugfix
  - ID: 382431 【扩展盘】安装brasero软件包，进度条提示部分失败
  - DESC: kylin-extrapackages-install-app-fix-ok-but-hint-fail.patch


author: dingcaokai <dingcaokai@kylinos.cn> - 1.0.0.gfb09
changelog:
  - Type: bugfix
  - ID:   382695 【扩展盘】安装全部软件包，遇到失败项进度条会卡住且不继续安装其他软件包
  - DESC: kylin-extrapackages-install-fix-progress-issues.patch


author: dingcaokai<dingcaokai@kylinos.cn> - 1.0.0.gfb10
changelog:
  - Type:bug
  - ID:[bug#382455] 安装结果弹窗中，“所有的包都已安装成功”描述不明确
  - SUG:NA
  - DESC：add kylin-extrapackages-install-finish-hint.patch


author: dingcaokai<dingcaokai@kylinos.cn> - 1.0.0.gfb11
changelog:
  - Type:bug
  - ID:[bug] 修复中断安装弹框问题
  - SUG:NA
  - DESC：add kylin-extrapackages-install-quit-pop-dialog.patch


author: dingcaokai<dingcaokai@kylinos.cn> - 1.0.0.gfb12
changelog:
  - Type:bug
  - ID:[bug391855] 扩展盘未集成mysql-server及其依赖
  - SUG:NA
  - DESC：add kylin-extrapackages-install-add-mysqlserver.patch


author: dingcaokai<dingcaokai@kylinos.cn> - 1.0.0.gfb13
changelog:
  - Type:bug
  - ID:[bug392073] 【扩展盘】【Ext04_RC2】扩展盘未集成postgresql-server及其依赖，无法初始化并启动postgresql
  - SUG:NA
  - DESC：add kylin-extrapackages-install-add-postgresqlerver.patch


author: dingcaokai<dingcaokai@kylinos.cn> - 1.0.0.gfb14
changelog:
  - Type:bug
  - ID:392519 【扩展盘】【Ext04_RC2】麒麟扩展软件安装工具的图形化界面和终端界面可同时运行
  - SUG:NA
  - DESC：add kylin-extrapackages-install-check-app-conflict.patch


author: dingcaokai<dingcaokai@kylinos.cn> - 1.0.0.gfb15
changelog:
  - Type:task
  - ID:【扩展盘】修改扩展盘中的软件种类
  - SUG:NA
  - DESC：add kylin-extrapackages-install-change-software.patch


author: dingcaokai<dingcaokai@kylinos.cn> - 1.0.0.gfb16
changelog:
  - Type:task
  - ID:【扩展盘】修改扩展盘中的软件种类
  - SUG:NA
  - DESC：add kylin-extrapackages-install-add-new-packages.patch


author: dingcaokai<dingcaokai@kylinos.cn> - 1.0.0-0.gfb05
changelog:
  - Type: bugfix
  - ID: 416379 【外网源】【30.1.3】yum 安装kylin-extrapackages-install-tui报错，无法安装
  - SUG: NA
  - DESC:删除spec文件中的翻译文件


author: dingcaokai <dingcaokai@kylinos.cn> - 1.0.0 gfb03
changelog:
  - Type: bugfix
  - ID: 373887【扩展盘】开始菜单有多余图标
  - DESC: add patch kylin-extrapackages-service-rm-startup.patch


author: dingcaokai <dingcaokai@kylinos.cn> - 1.0.0 gfb05
changelog:
  - Type:bug 392483 【扩展盘】【Ext04_RC2】物理机在登录界面时接入扩展盘，会弹出麒麟扩展软件安装工具
  - Type:bug 391777 【扩展盘】【Ext04_RC2】虚拟机添加物理机扩展盘设备后开机，登录界面显示为扩展盘工具界面
  - DESC: add patch kylin-extrapackages-service-show-after-login.patch


author: zhangyu <zhangyu@kylinos.cn>.p05.gfb01
changelog:
  - Change LANCE to GFB For lsb_release file
  - Add Patches:kylin-settings-14.10.63-Change_LANCEtoGFB.patch


author: zhangyu <zhangyu@kylinos.cn>.p05.gfb02
changelog:
  - Type:bugfix
  - ID:[BUG#229495]
  - SUG:NA
  - DESC:set default lockscreen
  - Add Patches:kylin-settings_set_default_lockscreen.patch


author: chenyun <chenyun@kylinos.cn>.p05.gfb03
changelog:
  - Type:bugfix
  - ID:[BUG#203894]
  - SUG:NA
  - DESC:同步民口补丁：bug#203894
  - Add Patches:modify-kylin.conf-comment-two-parameters.patch


author: baiguo <baiguo@kylinos.cn> - 1.2-11
changelog:
  - update to 1.2-11
  - DESC: add memory leak monitor and net monitor(send aspect), fix kylin-sysassist-monitor.service 644


author: chenshengdong<chenshengdong@kylinos.cn> - 1.3-1.gfb01
changelog:
  - Type: task
  - ID  : [TASK#341361]
  - SUG : NA
  - DESC: Delete functions that depend on the database and delete the db generation in the spec.
          Add Temporarily-remove-some-database-dependent-functions.patch


author: chenshengdong<chenshengdong@kylinos.cn> - 1.3-1.gfb02
changelog:
  - Type: bugfix
  - ID  : [BUG#282147]
  - SUG : NA
  - DESC: Add fixbug-solve_problem_of_crash_when_collecting_system_logs.patch


author: chenshengdong<chenshengdong@kylinos.cn> - 1.3-1.gfb03
changelog:
  - Type: bugfix
  - ID  : [BUG#282035]
  - SUG : NA
  - DESC: Add fixbug-282035-solve_issue_of_incorrect_system_activation_logs.patch


author: liujingyuan <liujingyuan@kylinos.cn> - 1.1.0-17
changelog:
  - Type: update
  - ID  : [tasnk#454503]
  - SUG : NA
  - DESC: add kylin-tpplf-ProtectedFiles.patch /etc/.unetdns_control /usr/lib/systemd/system/unetdns-system.service 防篡改


author: chenyushan <chenyushan@kylinos.cn> - 3.2.10-4.p28.gbf02
changelog:
  - Type:TASK
  - ID:[TASK#165427]
  - SUG:NA
  - DESC: Update system installation manual and system administrator manual


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.01
changelog:
  - 新增无事务数据加载接口
  -   add patch: kysec-common-add-without-transaction-retrieve-interface-for-sqlite.patch
  - 修复调用path_is_mount_bind接口失败的bug
  -   add patch: kysec-common-fix-bug-of-call-path_is_mount_bind.patch
  - Bug:  #66918
  - 参数为空时日志为none
  -   add patch: kysec-common-update-unknown-to-none.patch
  - Bug:  #69396 #70642
  - 二进制程序覆盖python脚本，python脚本状态变成“已损坏”
  - 安全中心打印kysec.log日志的时间格式，以/etc/default/locale中的语言环境为准
  -   add patch: kysec-common-optimize-script-file-parse-move-to-end.patch
  - Bug:  #80484
  - 语言环境变量错误，导致英文模式下，执行控制弹框为中文
  -   add patch: kysec-common-fix-other-app-lang-env-error-caused-by-time.patch
  - kysec日志添加日志轮询功能
  -   add patch: kysec-common-add-logrotate-for-kysec-log.patch
  - 应用桌面补丁到：1.0.1-21kylin


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.03
changelog:
  - Type: update 
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -         add patch: kysec-common-fix-fortify.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.04
changelog:
  - Type: bugfix
  - ID:[BUG#141967]
  - SUG:NA
  - DESC: 修复无效日志数据导致kyseclogd崩溃问题
  -         add patch: kysec-common-fix-kyseclogd-coredump-caused-by-invalid-msg.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.05
changelog:
  - Type: bugfix
  - ID:[BUG#143870]
  - SUG:NA
  - DESC: 修改kysec_logd服务的监听ip为127.0.0.1
  -         add patch: kysec-common-modify-kysec-log-server-listen-ip.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.06
changelog:
  - Type: bugfix
  - ID:[BUG#165526]
  - SUG:NA
  - DESC: 解决获取所有进程防杀死列表不全的问题
  -         add patch: kysec-common-fix-get-ppro-list-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.07
changelog:
  - Type: bugfix
  - ID:[BUG#184694]
  - SUG:NA
  - DESC: 修复secadm用户获取进程防杀死信息失败的问题
  -	  add patch: kysec-common-fix-secadm-ppro-get-pid-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.08
changelog:
  - Type: bugfix
  - ID:[BUG#184694]
  - SUG:NA
  - DESC: 修复secadm用户无法通过pid获取进程管控状态的问题
  -	  add patch: kysec-common-fix-secadm-can-not-get-ppro-by-pid.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.09
changelog:
  - Type: update
  - ID:[任务#189436]
  - SUG:NA
  - DESC: 修改解压xz文件的方式,提高解析文件类型的速度,修改spec文件，添加xz依赖
  -	  add patch: kysec-common-modify-decompress-xz-file.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.10
changelog:
  - Type: bugfix
  - ID:[BUG#184694]
  - SUG:NA
  - DESC: 修复当secadm使用kysec_get查询指定路径的ppro状态时,若selinux拦截
  -	了pid的查询,获取的pid会是kysec_get进程的pid的问题
  -	  add patch: kysec-common-fix-get-pid-error-when-selinux-prevent.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.11
changelog:
  - Type: bugfix
  - ID: [Bug#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: kysec-daemon-fix-not-set-status-when-close-3adm.patch 
  - Type: update
  - ID: [TASK#111368]
  - SUG:NA
  - DESC: 为security-switch加入回滚机制
  -       add patch: kysec-daemon-security-switch-add-rollback.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.12
changelog:
  - Type: bugfix
  - ID: [Bug#144683]
  - SUG:NA
  - DESC: 修复在strict模式下，关闭box重启后security-switch和getstatus失败的问题
  -         add patch: kysec-daemon-fix-security-switch-get-error-when-set-box-disable.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.13
changelog:
  - Type: bugfix
  - ID: [Bug#144594]
  - SUG:NA
  - DESC: 修复安全优先模式切换其他模式，未重启前模式显示错误的问题
  -         add patch: kysec-daemon-fix-security-switch-get-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.14
changelog:
  - Type: update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: kysec-daemon-netctl-set-off.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#157216]
  - SUG:NA
  - DESC: 解决添加白名单后whlist.db文件无法关闭的问题
  -         add patch: kysec-daemon-fix-whlist-db-close-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#161996]
  - SUG:NA
  - DESC: 修复执行控制白名单和文件防篡改列表为空的问题
  -         add patch: kysec-daemon-fix-whlist-init-failed.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 1.0.3-36.se.17
changelog:
  - Type: bugfix
  - ID: [BUG#151059]
  - SUG:NA
  - DESC: 切换selinux的permissive及enforcing模式实时生效
  -         add patch: kysec-daemon-fix-selinux-status-changenow.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.18
changelog:
  - Type: update
  - ID: [任务#137354]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -         add patch: kysec-daemon-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.20
changelog:
  - Type: bugfix
  - ID: [BUG#205663][BUG#206934]
  - SUG:NA
  - DESC: 修复security-switch --set strict设置三元密码时，dbus通信超时导致密码设置失败的问题[BUG#205663]
  -	  add patch: kysec-daemon-fix-set-passwd-dbus-timeout-failed.patch
  -	修复三员用户家目录删除后,stirct模式仍然可以成功切换,但无法登录的问题[BUG#206934]
  -	  add patch: kysec-daemon-fix-login-failed-when-del-3adm-home-dir.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.3-36.se.21
changelog:
  - Type: bugfix
  - ID: [BUG#220612]
  - SUG:NA
  - DESC: 【kysec】kysec状态关闭再打开后，重启系统后可以修改或删除受保护文件.
  -	  add patch:  kysec-daemon-fix-readonly-tag-loss-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.22
changelog:
  - Type: bugfix
  - ID: [BUG#190352]
  - SUG:NA
  - DESC: 修复kysec设置disable后，提示重启生效的问题
  -	  add patch: kysec-utils-fix-kysec-set-disable-tips-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.23
changelog:
  - Type: update
  - ID: [任务#180316]
  - SUG:NA
  - DESC: 将load_policy命令加入到secadm_list文件中
  -	  add patch: kysec-utils-load_policy-add-secadm_list-file.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.24
changelog:
  - Type: bugfix
  - ID: [BUG#200000]
  - SUG:NA
  - DESC: 修改切换状态时提示kill用法错误
  -	  add patch: kysec-utils-fix-setstatus-tips-kill-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.25
changelog:
  - Type: bugfix
  - ID: [BUG#184694]
  - SUG:NA
  - DESC: 修复secadm用户无法通过pid获取进程管控状态的问题
  -	  add patch: kysec-utils-fix-secadm-can-not-get-ppro-by-pid.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.26
changelog:
  - Type: bugfix
  - ID: [BUG#206934]
  - SUG:NA
  - DESC: 修复三员用户家目录删除后,stirct模式仍然可以成功切换,但无法登录的问题
  -	  add patch: kysec-utils-fix-login-failed-when-del-3adm-home-dir.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.3.6-33.se.27
changelog:
  - Type: bugfix
  - ID: [BUG#215075]
  - SUG:NA
  - DESC: 【授权管控】【S2500】系统安全切换至strict或者default模式后，切换tty后未显示授权管控提示语句
  -	  add patch: kysec-utils-fix-unetdns-service-start-failed.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.3.6-33.se.28
changelog:
  - Type: bugfix
  - ID: [BUG#218250]
  - SUG:NA
  - DESC:  【52.36】【访问控制】【白名单访问控制】kysec配置-进程保护标签列表查看
  -         回退由国防bug引入的改动.
  -	  add patch: kysec-utils-fix-ppro-get-not-running-process-info.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.3.6-33.se.28.gfb01
changelog:
  - Type: bugfix
  - ID: [BUG#215075]
  - SUG:NA
  - DESC: 切换至strict或default模式，tty不显示授权管控提示
  -         add patch: kysec-utils-fix-missing-authorize-status-hint.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.3.6-33.se.29.gfb01
changelog:
  - Type: bugfix
  - ID: [BUG#217723]
  - SUG:NA
  - DESC: 同步[BUG#220613 SP3补丁] 解决insmod 被篡改的ko模块没有kysec 拒绝日志.
  -         add patch: kysec-utils-fix-no-kysec-deny-logs-when-insmod-hash-not-verified-ko.patch


author: yinhao <yinhao@kylinos.cn> - 0.0.51-1.p08
changelog:
  - Type:NA
  - ID:TASK#222109
  - SUG:NA
  - DESC:Patch7:langtable-0.0.51-kylin-change-Macau-to-Macao.patch


author: chenshengdong <chenshengdong@kylinos.cn> - 0.0.51-1.p08.gfb01
changelog:
  - Type:NA
  - ID:TASK#212189
  - SUG:NA
  - DESC:Patch8:langtable-0.0.51-kylin-change-Macau-to-Macao_1.patch


author: chenyun <chenyun@kylinos.cn> - 0.0.51-1.p08.gfb03
changelog:
  - Type:NA
  - ID:TASK#404285,BUG:306573
  - SUG:NA
  - DESC:Patch10:langtable-0.0.51-Fix_Sensitive_Issues_1.patch


author: xiaohong li <lixiaohong@kylinos.cn> -1.7.5-1.gfb02
changelog:
  - fix-memory-leak-from-upstream.patch
  - allow_XIfEvent_to_reenter_libx11_from_upstream.patch
  - fix-CVE-2023-43785-from-upstream.patch
  - fix-CVE-2023-43786-from-upstream.patch
  - fix-heap-overflow-from-upstream.patch


author: liujingyuan <liujingyuan@kylinos.cn> - 1.7.5-1.gfb12
changelog:
  - Type:bugfix
  - ID:[bug#373567;369017]
  - SUG:NA
  - DESC: Rename libX11-1.7.5-369017.patch to libX11-1.7.5-change-sensitive-2.patch


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 2.35.2-10.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add patch 9100,9300, Fix hwclock wrong time in aarch64 when reboot 200 times


author: wanfeng <wanfeng@kylinos.cn> - 2.35.2-10.p05
changelog:
  - Type:bugfix
  - ID:[BUG#153935]
  - SUG:NA
  - DESC:add patch:9400 for supporting utf-8 to fix problematic output when
  -      executing below commands at /dev/ttyN(N>1):
  -      systemctl restart rescue.service
  -      systemctl set-default rescue.target and reboot


author: zhangzikang <zhangzikang@kylinos.cn> - 2.35.2-10.p09
changelog:
  - Type:update
  - ID:[TASK#209796]
  - SUG:NA
  - DESC: Remove ft_part S5000C, CPU model name obtained from the kernel
          remove patch 0001-lscpu-add-ft_part-S5000C.patch
                       0002-lscpu-fix-ft_part-S5000C.patch


author: leechm <liqimei@kylinos.cn> - 2.35.2-10.p10.gfb01
changelog:
  - 0001-lscpu-add-ft_part-S5000C.patch
  - util-linux-2.35.2-D2000_show_modle_name_error.patch
  - util-linux-2.35.2-strcpy_change_PointerAssignment.patch


author: zhangmingyi<zhangmingyi5@huawei.com> - 2:0.8.1-3
changelog:
  -- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                  backport-libbpf-Fix-the-name-of-a-reused-map.patch
                  backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch


author: JofDiamonds <kwb0523@163.com> -2:0.8.1-4
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
    backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
    backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
    backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
    backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
    backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
    backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch


author: SuperCharge <xiesongyang@huawei.com> -2:0.8.1-6
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch


author: zhangmingyi <zhangmingyi5@huawei.com> -2:0.8.1-8
changelog:
  - backport patches from upstream:
    backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
    backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
    backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch


author: Qingqing Li <liqingqing3@huawei.com> -2:0.8.1-10
changelog:
  - backport patch from openEuler kernel repo:
    backport-sync-the-newly-added-helper-functions-from-kernel.patch


author: jinzhiguang <jinzhiguang@kylinos.cn> - 2:0.8.1-10.p01
changelog:
  - Type: update
  - ID:   TASK#183701
  - SUG:  NA
  - DESC: rebuild and addpatch:
  	0001-export-bpf_program__pin_instance.patch
  	0001-libbpf-Avoid-enum-forward-declarations-in-public-API.patch
  	move_btf_ext_header_for_bcc_make.patch
  	0001-export-bpf_object__variable_offset-and-bpf_object__s.patch
  	0001-export-libbpf__bpf_prog_load.patch


author: kongdelin <kongdelin@kylinos.cn> - 1.0-3.se.07.gfb01
changelog:
  - Type: bugfix
  - ID: [bug#384283]
  - DESC: add libchkuid-bugfix-384283.patch，把文件/etc/chkuid_state的值state修改为on，解决用户UID唯一性问题


author: kongdelin<kongdelin@kylinos.cn> - 1.4.0-15.gfb01
changelog:
  - Type:update
  - ID:[TASK#404285]
  - SUG:NA
  - DESC: add 001-libgeotiff-fix-sensitive-information-fields.patch, 修复敏感字段


author: huchao <huchao01@kylinos.cn> - 3.0.64.p68.gfb03
changelog:
  - Type:update
  - ID:[Task#454509]
  - SUG:NA
  - DESC:增加质保服务期延长机制
  - libkylin-activation-update-service-extension-mechanism.patch


author: huchao <huchao01@kylinos.cn> - 3.0.64.p68.gfb04
changelog:
  - Type:bugfix
  - ID:[bug#357253][bug#358817]
  - SUG:NA
  - DESC: 修复bug357253、bug358817
  - libkylin-activation-fix-bug-357253-358817.patch


author: huchao <huchao01@kylinos.cn> - 3.0.64.p68.gfb05
changelog:
  - Type:bugfix
  - ID:[bug#351858]
  - SUG:NA
  - DESC: fix bug 351858
  - libkylin-activation-fix-bug-351858.patch


author: huchao <huchao01@kylinos.cn> - 3.0.64.p68.gfb06
changelog:
  - Type:bugfix
  - ID:[bug#360115][bug#360157]
  - SUG:NA
  - DESC: fix bug:360115、360157
  - libkylin-activation-fix-bug-360115-360157.patch


author: huchao <huchao01@kylinos.cn> - 3.0.64.p68.gfb07
changelog:
  - Type:bugfix
  - ID:[bug#361859]
  - SUG:NA
  - DESC: fix bug:361859
  - libkylin-activation-fix-bug-361859.patch


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p49
changelog:
  - Type:bugfix
  - ID:[BUG#166387]
  - SUG:NA
  - DESC:add buildrequires and requires  version of paho-c in spec


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p51
changelog:
  - Type: bugfix
  - ID:[BUG#178000]
  - SUG:NA
  - DESC: fix get expiration time error and add get trial time fuction


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p52
changelog:
  - Type: upadate
  - ID:[TASK#153883]
  - SUG:NA
  - DESC: change service enable way in postinstall and posttrans


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p53
changelog:
  - Type: upadate
  - ID:[TASK#163840]
  - SUG:NA
  - DESC: add longmai and haitaifangyuan ukey driver support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p64
changelog:
  - Type: Task
  - ID:[TASK#188185]
  - SUG: NA
  - DESC: add debuginfo and delete useless code file
  - DESC: merge main branch to this


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p65
changelog:
  - Type: bugfix
  - ID:[BUG#211902][BUG#212682]
  - SUG: NA
  - DESC: gather together kms cmd
  - DESC: add writable port and decoupling echoip from kms server


author: chenshengdong <chenshengdong@kylinos.cn> - 2.1.1.0-1.gfb01
changelog:
  - Type: fixbug
  - ID:   [Bug#357321]
  - SUG:  NA
  - DESC: Add fixbug-357321-close_button_disappearance.patch


author: kongdelin<kongdelin@kylinos.cn> - 1.18.22-4.p10.gfb21
changelog:
  - add network-manager-applet-1.8.22-opitimization-0001.patch
  - 1. 修复"配置ip点击保存按钮，出现两次已连接提醒"
  - 2. 只重启对应的网络配置


author: kongdelin<kongdelin@kylinos.cn> - 1.18.22-4.p10.gfb22
changelog:
  - add network-manager-applet-1.8.22-opitimization-0002.patch
  - 修复ip冲突提示语句，"IP地址改变，检测IP地址冲突"改为"正在检测IP地址是否存在冲突..."


author: liujingyuan<liujingyuan@kylinos.cn> - 1.18.22-4.p10.gfb23
changelog:
  -fix bug 275599 275569 275091 275087 275081,添加fix-bug-275599-275569-275091-275087-275081.patch
  -修复拔掉网线再接入另一个网口，配置IP后网络不连通
  -修复网络已连接情况下，IPv4设置切换为自动再切换为手动，无IP冲突提示
  -修复更换冲突IP，多次点击保存按钮，配置成功保存，网络连接成功
  -修复IP冲突检测提示多个共存，可占满桌面右侧
  -修复更换冲突IP地址无“正在检测IP地址是否存在冲突


author: kongdelin<kongdelin@kylinos.cn> - 1.18.22-4.p10.gfb25
changelog:
  - 1. add nma-task-412015.patch，修复连接信息界面bond不显示速率问题
  - 2. add nma-bugfix-275087.patch ,修复检测弹窗闪的太快看不清提示信息


author: kongdelin<kongdelin@kylinos.cn> 1.18.22-4.p10.gfb28
changelog:
  - Type: bugfix
  - ID  : [BUG#210682]
  - SUG : NA
  - DESC: 合并民口patch，add 0001-Traditional-Chinese-translation-of-the-network.patch
      修复bug210682 安装界面繁体字汉化不彻底问题


author: kongdelin<kongdelin@kylinos.cn> 1.18.22-4.p10.gfb29
changelog:
  - Type: bugfix
  - ID  : [BUG#334510]
  - SUG : NA
  - DESC: add nma-fix-334510.patch，修复右下角网络图形界面没有显示bond连接


author: liujingyuan<liujingyuan@kylinos.cn> 1.18.22-4.p10.gfb30
changelog:
  - Type: bugfix
  - ID  : [BUG#334510]
  - SUG : NA
  - DESC: add fixbug-334510.patch network-manager-applet-addbondactive.patch,添加连接信息中显示活跃网卡，组成bond的连接是否活跃


author: liujingyuan<liujingyuan@kylinos.cn> 1.18.22-4.p10.gfb31
changelog:
  - Type: bugfix
  - ID  : [BUG#354675;354663]
  - SUG : NA
  - DESC: add network-manager-applet-fixbug-354675.patch  network-manager-applet-fixbug-354663.patch


author: kongdelin<kongdelin@kylinos.cn> 1.18.22-4.p10.gfb33
changelog:
  - Type: bugfix
  - ID  : [BUG#373473]
  - SUG : NA
  - DESC: add network-manager-applet-bugfix-373473.patch，修复组bong模式选择网口之后保存，直接退出无法实际未生效


author: kongdelin<kongdelin@kylinos.cn> 1.18.22-4.p10.gfb34
changelog:
  - Type: bugfix
  - ID  : [BUG#378397]
  - SUG : NA
  - DESC: add network-manager-applet-bugfix-378397.patch，修复切换bond模式后，从机全部断且不会自动连接


author: kongdelin<kongdelin@kylinos.cn> - 1.18.22-4.p10.gfb35
changelog:
  - Type: bugfix
  - ID: [bug#356407]
  - SUG: NA
  - DESC: add patch:nma-bugfix-356407.patch, 拔掉所有网线，网络图标仍是已连接状态


author: peijiankang <peijiankang@kylinos.cn> - 2.50.5-2.p01
changelog:
  - Type: update
  - ID:   [Task#171031]
  - SUG:  NA
  - DESC: add loongarch support patch in vendor libc (sync from  2.50.5-1.p01)


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 3.1-3
changelog:
  - fix heap-use-after-free in cil_yy_switch_to_buffer
  - fix heap-use-after-free in __class_reset_perm_values()
  - fix heap-buffer-overflow in cil_print_recursive_blockinherit


author: kongdlin <kongdelin@kylinos.cn> - 0.7.14-6.gfb01
changelog:
  - Type:bugfix
  - ID:Bug#314959
  - SUG:NA
  - DESC: add libsolv-fix-314959.patch, 修改版本比较逻辑，版本号默认带gfb(国防特色)的包版本高


author: renmingshuai <renmingshuai@huawei.com> - 0.9.4-9
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: kongdelin<kongdelin@kylinos.cn> - 0.9.4-9.gfb01
changelog:
  - Tpye: update
  - Id: [task#471801]
  - SUG: NA
  - DESC: 同步民口漏洞成果，并把gfb优化合并过来，代码内容：
  - 改变结构体变量位置 把结构体ssh_crypto_struc成员变量session_id_len放到结构体末尾，修复兼容性问题(对比版本0.9.4-1.ky10和0.9.4-5.gfb01.ky10)


author: gaoyukun <gaoyukun@kylinos.cn> - 4.16.0-3.p01
changelog:
  - Type:compile
  - ID:TASK#414527
  - SUG:NA
  - DESC:Add 'BuildRequires gtk-doc',repair compilation failure.


author: chenyun <chenyun@kylinos.cn> - 0.4.5.1-6.p03.gfb02
changelog:
  - Type:bugfix
  - ID:[bug#360015]
  - SUG:NA
  - DESC:timezonemap-0.4.5.1-change-sensitive-character-1.patch


author: chenyun <chenyun@kylinos.cn> - 0.4.5.1-6.p03.gfb03
changelog:
  - Type:bugfix
  - ID:[bug#369219]
  - SUG:NA
  - DESC:timezonemap-0.4.5.1-change-sensitive-character-2.patch


author: chenyun <chenyun@kylinos.cn> - 0.4.5.1-6.p03.gfb04
changelog:
  - Type:update
  - ID:[task#496229]
  - SUG:NA
  - DESC:timezonemap-0.4.5.1-change-sensitive-character-3.patch


author: yinhao <yinhao@kylinos.cn> - 0.4.5.1-6.p03.gfb05
changelog:
  - Type:bugfix
  - ID:[bug#373639]
  - SUG:NA
  - DESC:timezonemap-0.4.5.1-change-sensitive-character-4.patch


author: guojunding <guojunding@kylinos.cn> - 0.4.5.1-6.p01
changelog:
  - Type:compile
  - ID:task#161693
  - SUG:NA
  - DESC:replace time_zones_countryInfo-orig.svg to remove the national border


author: yinhao <yinhao@kylinos.cn> - 0.4.5.1-6.p02
changelog:
  - Type:bugfix
  - ID:bug#217389
  - SUG:修改乌鲁木齐信息，确保安装时坐标正确
  - DESC:Add Patch: timezonemap-0.4.5.1-Urumqi-error.patch


author: yinhao <yinhao@kylinos.cn> - 0.4.5.1-6.p03
changelog:
  - Type:bugfix
  - ID:bug#217389
  - SUG: 将中国除了上海以外的大部分城市时区改为北京时区
  - DESC:Add Patch: timezonemap-0.4.5.1-change-Shanghai-to-Beijing.patch


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p12
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: backport from 7.1.0, fix CVE-2021-3975
  -       0001-qemu-Fix-potential-crash-during-driver-cleanup.patch


author: lizhanchun <lizhanchun@kylinos.cn> - 6.2.0-16.p13
changelog:
  - Type:	update
  - ID:	NA
  - SUG:	NA
  - DESC: Backport from libvirt-6.6.0. 
  -		Use g_autoptr() on pointers and remove the unneeded 'cleanup' label.


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p16
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: Backport: libvirt daemon finish all threads before exiting.


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p18
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: Backport: virnetdaemon: Wait for "daemon-stop" thread to finish before quitting 
  - revert Backport: virnetdaemon: Wait for "daemon-stop" thread to finish before quitting
  - no optimization


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p19
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: clean all old nwfilter before apply new nwfilter when start libvirtd


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p20
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: remote_daemon: Set shutdown callbacks only after init is done


author: wangdi <wangdi@kylinos.cn> - 6.2.0-16.p21
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - DESC: fix double free of cfg->firmwares when use qemu firmware metadata file


author: lilong <lilong@kylinos.cn> - 6.2.0-16.p23
changelog:
  - Type: Update
  - ID:   [TASK#211377]
  - SUG:  NA
  - DESC: fix CVE-2024-1441,CVE-2024-2494,CVE-2024-2496


author: chenshengdong <chenshengdong@kylinos.cn> 2.31.0-1.p01.gfb01
changelog:
  -Type: bugfix
  - ID  : [BUG#232649]
  - SUG : NA
  - DESC: add fix-bug232649-leaks_caused_by_high-frequency_clicks.patch


author: Funda Wang <fundawang@yeah.net> - 2.9.10-43
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: panzhe <panzhe@kylinos.cn> - 2.9.10-43.p04
changelog:
  - Type:CVE
  - CVE:CVE-2025-32415
  - CVE:CVE-2025-32414
  - SUG:NA
  - DESC: fix CVE-2025-32415, CVE-2025-32414


author: zhangyu <zhangyu@kylinos.cn> - 1.12.1-1kord32.p09.gfb04
changelog:
  -add patch mate-desktop-1.12.1-ChangeInfoForTaskView17503.patch
  -Change InfoFormation Task-View-17503


author: zhangyu <zhangyu@kylinos.cn> - 1.12.1-1kord32.p09.gfb05
changelog:
  -add patch mate-desktop-1.12.1-changeToMateAboutBuildInfo.patch 
  -Change InfoFormation Mate about for Build info


author: chenshengdong <chenshengdong@kylinos.cn> - 1.12.1-1kord32.p09.gfb06
changelog:
  - Type: bugfix
  - ID  : [BUG#211927]
  - SUG : NA
  - DESC: synchronize patch
      add 0001-mate-desktop-fix-memory-leak-problem.patch


author: huayadong <huayadong@kylinos.cn> -20150918kord0ukui58-10.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#104488]
  - SUG : NA
  - DESC: change %build for add debuginfo,rebuild for loongarch64.


author: chenshengdong<chenshengdong@kylinos.cn> -20150918kord0ukui58-10.p09.gfb06
changelog:
  - Type: bugfix
  - ID  : [BUG#213576]
  - SUG : NA
  - DESC: 1. the calendar in the lower right corner of the desktop is implemented using gcalendar instead, and
             the webkit dependency is removed.
          2. indicator-desktop removes the libwnck dependent library and uses x11 to implement the corresponding fuctions.
          3. the time display format is changed to the monitoring key value change method.
          4. add fixbug-213576-solve_the_problem_of_memory_leak_caused_by_calendar_display.patch


author: chenshengdong<chenshengdong@kylinos.cn> -20150918kord0ukui58-10.p09.gfb08
changelog:
  - Type: bugfix
  - ID  : [TASK#212260]
  - SUG : NA
  - DESC: 1. synchronize some modifications of version 95.
          2. add fix-task212260-high-memory-usage.patch


author: CJ<caojian@kylinos.cn> - p03.gfb02
changelog:
  - add patch: mate-settings-daemon-fix-after-50days-cause-blackscreen.patch
  - 修复32位时间戳溢出导致的50天插拔显示器黑屏问题.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#117285]
  - SUG : NA
  - DESC: add Patch07 mate-system-monitor-1.24.0-kylin-adaptive-kysec-process-anti-unloading.patch
          适配kysec进程防杀死机制.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#93745]
  - SUG : NA
  - DESC: add Patch08 mate-system-monitor-1.24.0-fix-bug-93745.patch
          当三权分立开启，非超级用户不可操作系统监视器.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#117553]
  - SUG : NA
  - DESC: add Patch09 mate-system-monitor-1.24.0-fix-firefox-79.0-process-name-as-MainThread.patch
          修复firefox-79.0版本进程名称显示为MainThread.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#75897]
  - SUG : NA
  - DESC: add Patch10 mate-system-monitor-1.24.0-fix-unable-to-internationalize.patch
          修复系统监视器无法国际化问题.


author: chenshengdong<chenshengdong@kylinos.cn> 1.24.0-1.p10.gfb02
changelog:
  - Type: bugfix
  - ID:   [BUG#221501]
  - SUB:  NA
  - DESC: Add fixbug-221501-solve_inconsistency_between_memory_usage_and_command.patch


author: chenshengdong<chenshengdong@kylinos.cn> 1.24.0-1.p10.gfb03
changelog:
  - Type: bugfix
  - ID:   [BUG#241170]
  - SUB:  NA
  - DESC: Delete fixbug-221501-solve_inconsistency_between_memory_usage_and_command.patch
          ZF's LTP stress test looks at the memory used by the system monitor. As a result,the memory stress test
          percentage does not meet the standard.if it is restored to the previous version,the memory will be consistent
          with the ratio of top memory used. the used memory calculation of the previous version is total-available,which is co          nsistent with the calculation method of top's used ratio.


author: chenshengdong <chenshengdong@kylinos.cn> - 1.4.7-6.gfb02
changelog:
  - Type: bug
  - ID  : [BUG#306365]
  - SUG : NA
  - DESC: Add installation dependdency:accountsservice-libs


author: dingcaokai <dingcaokai@kylinos.cn> - 1.18.0-8.gfb01
changelog:
  - Type: bugfix
  - ID: 404123 【扩展盘】【Ext04_RC3】mupdf界面标题的中文显示乱码
  - ID: 404117 【扩展盘】【Ext04_RC3】mupdf未在开始菜单中的“办公”中
  - SUG: NA
  - Add Patches: chinese_title_fix.patch


author: dingcaokai <dingcaokai@kylinos.cn> - 1.18.0-8.gfb02
changelog:
  - Type: bugfix
  - ID: 404141 【扩展盘】【Ext04_RC3】mupdf无法使用滚轮切换页面，只能通过“页数+G”切换，建议增加用户手册
  - SUG: mupdf-1.18.0-add-CN-manual.patch


author: leechm <liqimei@kylinos.cn> - 8.0.28-4.gfb01
changelog:
  - add MYSQL_OPT_USE_EMBEDDED_CONNECTION [from qianjie]
  - ID  : [bug#404285]
  - DESC: Fix  Sensitive Issues [from leechm]
  - ID  : [bug#338426]
  - SUG: NA
  - DESC: 修改依赖为mysql-config而非my.cnf [from yinhao]


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: Like <like@kylinos.cn> - 3.6-5.p02
changelog:
  - Type:CVE
  - ID:CVE-2021-20305 and CVE-2021-3580
  - SUG:NA
  - DESC:Fix CVE-2021-20305 and CVE-2021-3580


author: liyunqing <liyunqing@kylinos.cn> - 1.2.6-1.p02
changelog:
  - Type:bugfix
  - Id:[BUG#198569、198327]
  - SUG:NA
  - DESC:add patch 002 to fix segment fault when traversal ctx_hash 
         add patch 003 to delete unsupport kprobe ping_lookup in aarch64


author: songjuntao <songjuntao@kylinos.cn> - 3.54.0-8.p04
changelog:
  - Type:update
  - ID:TASK#181401
  - SUG:NA
  - DESC:add smx algorithm support and fix import pkcs12 file error


author: houzhiwei<houzhiwei@kylinos.cn>- 3.54.0-10.p07
changelog:
  - Type:update
  - ID:TASK#其它
  - SUG:NA
  - DESC: Add PK11_Pub{Wrap, Unwrap}SymkeyWithMechanism r=mt,rrelyea Summary


author: wanfeng<wanfeng@kylinos.cn> - 4.2.8p14-8.p01
changelog:
  - Type:bugfix
  - ID:task#180465
  - SUG:NA
  - DESC:add script of post, make sure sntp/kod  for sntp service


author: changtao <changtao@kylinos.cn> - 2.3.1-15.p01
changelog:
  - Type: complie
  - CVE: NA
  - SUG: NA
  - DESC:fix openjpeg2-help noarch package built differently on different architectures


author: WangShuo <wangshuo@kylinos.cn> - 8.2P1-16.p05
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Kylin delete configure "--with-sandbox=seccomp_filter" support loongarch64


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p09
changelog:
  - Type:update
  - ID: TASK#184873
  - SUG: NA
  - DESC: fix ssh-agent coredump when ssh-add exec add library


author: yuejiayuan <yuejiayuan@kylinos.cn> - 8.2P1-16.p10
changelog:
  - Type:update
  - ID: TASK#189950
  - SUG: NA
  - DESC: fix CVE-2023-51385
  	add backport-CVE-2023-51385-upstream-ban-user-hostnames-with-most-shell-metachar.patch


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p12
changelog:
  - Type:update
  - ID:TASK#193814
  - SUG:NA
  - DESC:support sm3 hmac feature, update ssh change mode script and 
         and fix memory leak


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p16
changelog:
  - Type: bugfix
  - ID:[BUG#294265]
  - SUG:NA
  - DESC:fix login error after use the qingyun special config


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1f-15.p12
changelog:
  - Type: update
  - ID: [TASK#167670]
  - SUG: NA
  - DSEC: add Patch108, add TLCP support
  -       add Patch109, add GDCA gm cert verification support
  -       add Patch110, add sm2 encryptedkey(password) support
  -       add Patch111, bugfix null-pointer in ec_pmeth
  -       add Patch112, add comment for ec_pkey_meth
  -       add Patch113, update certs for TLCP testcases
  -       add Patch114, set TLCP interface version


author: bianxiuning <bianxiuning@kylinos.cn> - 1:1.1.1f-15.p14
changelog:
  - Type: update
  - ID: [TASK#172146]
  - SUG: NA
  - DESC: add Patch117, add zhao-xin gmi suport for sm3 sm4 and random


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-15.p21
changelog:
  - Type: update
  - ID: TASK#193265
  - SUG: NA
  - DESC: port sm2utl command tool code , support default user id, 
  	and optimize the return code, optimize dgst keyform for PEM,
  	support pkeyutl verify function for sm2 cert.


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1f-15.p22
changelog:
  - Type: update
  - ID: TASK#198465
  - SUG: NA
  - DESC: Fix CVE-2024-0727 PKCS12 Decoding crashes
  	add backport-CVE-2024-0727-fix-pkcs12-decoding-crashes.patch


author: anyunhao<anyunhao@kylinos.cn> - 1.4.0-8.p04.se05
changelog:
  - Type:update
  - ID:[Bug#189847]
  - SUG:NA
  - DESC: add patch: 0001-Kylin-fix-bug163994-and-bug26337.patch


author: hanzhengyun <hanzhengyun@kylinos.cn> - 1.4.0-8.p04.se06
changelog:
  - Type:update
  - ID:[Bug#203691]
  - SUG:NA
  - DESC: 使用开源sm3算法
          delete patch: KYLIN-add-sm3-hash-function-for-passwd-cmd.patch


author: liyue <liyue01@kylinos.cn> - 1.4.0-8.p05.se06
changelog:
  - Type:update
  - ID:[Task#185449]
  - SUG:NA
  - DESC:   add patch: pam-1.4.0-kylin-modify-zh-HK-po.patch


author: zhangyu <zhangyu@kylinos.cn> - 1.2.3-18.p01.gfb01
changelog:
  - Type: bugfix
  - ID:[bug#306479]
  - SUG: NA
  - ADD:  phpldapadmin-1.2.3-Fix_Sensitive_Issues.patch
  - DESC: Fix Sensitive Issues


author: songliyang <songliyang@kylinos.cn> - 2.0.0-2.p01
changelog:
  - Type: TASK
  - ID: 163327
  - SUG: NA
  - DESC: add Patch0 Patch1 Source4 Source5 Source6 to support loongarch, modify spec file to generate pingtrace sub package, remove some unnecessary dependencies.


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-4
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: xiongyi <xiongyi@uniontech.com> - 0.90.0-6
changelog:
  - fix CVE-2020-36023
  - fix infinite looping in cvtGlyph with broken files
  - patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013


author: lichenguang <lichenguang@kylinos.cn> - 0.90.0-6.p01
changelog:
  - Type:cves
  - ID:CVE-2024-4141 CVE-2024-56378 CVE-2025-32364 CVE-2025-32365
  - SUG:NA
  - DESC:fix CVE-2024-4141 CVE-2024-56378 CVE-2025-32364 CVE-2025-32365


author: chengzeruizhi <chengzeruizhi@huawei.com> - 3.14.0-7
changelog:
  - Type:enhancement
  - ID:NA                  
  - SUG:NA                                                             
  - DESC: add compile option for coverage


author: chenyun <chenyun@kylinos.cn> - 20200718-1.gfb01
changelog:
  - Type:bugfix
  - ID:[bug#360015]
  - SUG:NA
  - DESC: change SOURCES/public_suffix_list.dat to fix sensitive issues


author: wangsudong <wangsudong@kylinos.cn> - 0.1.0-1
changelog:
  - Initial release of PXE setting tool
  - Support for HTTP/FTP/NFS deployment methods
  - Graphical user interface
  - Service atomic operations


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.04
changelog:
  - Type: update
  - ID:[Task#84294]
  - SUG:NA
  - DESC: 修复python2加-c或者-m参数时kysec无法管控的问题
  -         add patch: python2-fix-parameter-c-or-m-kysec-exectl.patch


author: wanghao <wanghao2@kylinos.cn> - 2.7.18-1.se.05.p01
changelog:
  - Type: bugfix
  - ID:[BUG#162241]
  - SUG:NA
  - DESC: -c命令行参数加入exectl状态检查
  -         add patch: python2-parameter-c-add-exectl-status-check.patch


author: wanfeng <wanfeng@kylinos.cn> - 4.15.1-37.p02.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#118520]
  - SUG:NA
  - DESC: Fix install of block and character FIFO special files
  -       add patches backport-Fix-install-of-block-and-character-special-files-219.patch
  -                   backport-Use-fd-based-ops-for-metadata-in-FA_TOUCH-mode-too-w.patch
  -                   backport-Add-a-test-for-special-device-node-installation.patch


author: leechm <liqimei@kylinos.cn> - 4.15.1-37.p02.se.01.gfb01
changelog:
  - kylin-rpm-redundant-prompts-appear.patch [from lxd]
  - kylin-rpm-Add-whitelist-parameter-processing.patch [from lxd]
  - kylin-rpm-add-tamper-resistance.patch [from lxd]


author: kongdlin <kongdelin@kylinos.cn> - 4.15.1-37.p02.se.01.gfb03
changelog:
  - Type:task
  - ID:taskid#354997
  - SUG:NA
  - DESC: add rpm-fixbug-354997.patch, 把kernel添加到白名单，安装/升级非麒麟签名的kernel时进行风险提示


author: kongdlin <kongdelin@kylinos.cn> - 4.15.1-37.p02.se.01.gfb04
changelog:
  - Type:bugfix
  - ID:Bug#314959
  - SUG:NA
  - DESC: add rpm-fix-314959.patch, 修改版本比较逻辑，版本号带gfb(国防特色)的包版本高


author: dingcaokai <dingcaokai@kylinos.cn> - 4.15.1-37.p02.se.01.gfb05
changelog:
  - Type: task
  - ID: [task#454494]
  - SUG: N/A
  - DESC: add rpm-4.15.1-add-kylin-tpplf-protected_rpms.patch


author: jiangjixiang <jiangjixiang@kylinos.cn> - 2.2.2-10.p02
changelog:
  - Type:Bugfix
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add Patch6 to fix the error in closing the application program's
         fd by SSSD during PID rewind.


author: jiangjixiang <jiangjixiang@kylinos.cn> - 2.2.2-10.p03
changelog:
  - Type:update
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add a version number to be homologous with loongarch.


author: GuoCe <guoce@kylinos.cn> - 3.7.9-37
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Modify the spec file to synchronize the version information of
         CHANGLOG and VERSION.


author: GuoCe <guoce@kylinos.cn> - 3.7.9-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: add loongarch64 support and disable valgrind-devel for loongarch64


author: GuoCe <guoce@kylinos.cn> - 3.7.9-39.se.01
changelog:
  - Type: bugfix
  - ID: [BUG#193772]
  - SUG: NA
  - DESC: From: @wanghao
          移植kysec执行控制检查补丁
          add patch: python3-7.9-add-kysec-exectl-check.patch


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-40.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2007-4559
  - SUG:NA
  - DESC:Add Patch9007-9008, fix CVE-2007-4559
  -      Add Patch9009, fix test_xml_etree error with expat versions that fix CVE-2023-52425


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-41.se.01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patches
  -      gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler
  -      gh-99889: Fix directory traversal security flaw in uu.decode()


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-43.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
  -      gh-124651: Quote template strings in `venv` activation scripts


author: weishaokun <weishaokun@kylinos.cn> - 2:4.1.0-63.p34
changelog:
  - Type: Update
  - ID:   [TASK#219131]
  - SUG:  NA
  - DESC: fix CVE-2023-0330 CVE-2024-3446 CVE-2024-3447


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-63.p36
changelog:
  - Type: Update
  - ID:   [TASK#352309]
  - SUG:  NA
  - DESC: fix CVE-2024-4467 CVE-2024-7409 CVE-2023-5088


author: lijunwei <lijunwei@kylinos.cn> - 2:4.1.0-63.p39
changelog:
  - Type: Update
  - ID:   [BUG#310535]
  - SUG:  NA
  - DECS: Update requires nettle version to latest version(p04) due to 
          function calls in qemu which realized in TASK#349341


author: wanglixing <wanglixing@kylinos.cn> - 1:4.8.7-47.p08
changelog:
  - Type:cves
  - ID:CVE-2023-34410,CVE-2023-38197,CVE-2023-37369,CVE-2023-43114
  - SUG:NA
  - DESC:add patch6016,patch6017,patch6018,patch6019.skip the release p07 due to an occupation


author: huayadong <huayadong@kylinos.cn> - 1:4.8.7-47.p11
changelog:
  - Type: bugfix
  - ID:   [TASK#220326]
  - SUG:  NA
  - DESC: add patch45: fix-that-filediolog-cannot-use-input-methods.patch


author: liwenchong <liwenchong@kylinos.cn> - 4.9.2-4.p02
changelog:
  - Type:bugfix
  - ID:BUG#131963
  - SUG:NA
  - DESC:fix bug#131963 rebuild in tag v10-sp3;
  -      add llvm version differentit for make error.


author: dingcaokai <dingcaokai@kylinos.cn> - 4.9.2-4.p03.gfb03
changelog:
  - Add qt-creator_empty_project.patch to fix the bug that
    when the project is empty, it hints that the project already exists


author: dingcaokai <dingcaokai@kylinos.cn> - 4.9.2-4.p03.gfb04
changelog:
  - Add always_autotect_qt_versions.patch fix_qt_version_autodetection.patch 
    add_path_for_qt_version_autodetection.patch to fix the bug that kit can
    not auto detect the qmake


author: kongdelin <kongdelin@kylinos.cn> - 4.9.2-4.p03.gfb08
changelog:
  - Type:bugfix
  - ID:BUG#229435
  - SUG:NA
  - DESC:add qt-creator-bugfix-229435.patch, fix bug#229435 rebuild in tag v10-sp3-gfb-031;
  -      Replaced xterm with mate-terminal as default terminal


author: leechm <liqimei@kylinos.cn> - 5.12.8-1.gfb02
changelog:
  - CVE-2023-32762  CVE-2023-24607 CVE-2023-32763 CVE-2023-37369
  - cve from qt5-qtbase-5.11.1-16.p01.ky10.src.rpm


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: Chen Yushan <chenyushan@kylinos.cn> - 8.2006.0-7.p02.gfb01
changelog:
  - Add patch rsyslog-8.2006.0-omfile-strm-log.patch (from zhaodong)
  - Fix logfile cannot record log problem when logfile is deleted or changed.
  - Move SOURCE 8 cron.hourly/logrotate to logrotate-3.16.0-3.gfb01.


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.16
changelog:
  - Type:update
  - ID:[bug#144372] 
  - SUG:NA
  - DESC: 144372 【selinux-ukmcs】执行#chpolicy ukmls切换模式重启异常
  - add Patch7001: selinux-policy-setstatus.patch
  - DESC: 142670 【安全模块状态设置】strict模式运行chpolicy命令失败
  - DESC: 142637 【安全模块状态设置】strict模式下，开启box失败
  - DESC: 142633 【安全模式切换】【终端命令】strict模式下关闭kysec失败
  - DESC: 142631 【安全模式切换】【终端命令】strict模式下关闭selinux失败
  - DESC: 135572 【管理员分权】secadm-kysec状态切换失败


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.17
changelog:
  - Type:update
  - ID:[bug#142670] 
  - SUG:NA
  - DESC: 142670 【安全模块状态设置】strict模式运行chpolicy命令失败
  - add Patch7002: selinux-policy-chp-telnet-reinforce.patch
  - DESC: 145902 【网络服务】服务端default,strict模式下，客户端telnet远程登录失败
  - DESC: 135942 【安全加固】【潜在风险】strict模式下，潜在危险文件加固失败
  - DESC: 139752 【升级测试】升级后的系统切换default模式，开始菜单无日志
  - DESC: 146714 【模式切换】仅开启selinux，在安全中心开启联网控制、应用保护，界面提示异常


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.18
changelog:
  - Type:update
  - ID:[BUG#147575] 
  - SUG:NA
  - DESC: 147575 【模式切换】strcit模式下，使用setstatus开启网络控制，无法管控
  - add Patch7003: selinux-policy-loongson-netctl.patch


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.19
changelog:
  - Type:update
  - ID:[BUG#150987#151320] 
  - SUG:NA
  - add Patch7004: selinux-policy-ksc.patch
  - DESC: 150987 【管理员分权】PKS开启selinux后，安全中心可信度量模块被隐藏
  - DESC: 151320 【安全中心】【安全内存】PKS三权模式下，无法获取安全内存详细信息


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.20
changelog:
  - Type:update
  - ID:[BUG#163701][BUG#164167][BUG#164345][BUG#151074][BUG#161242][BUG#144179]
  - SUG:NA
  - add Patch7005: selinux-policy-vnc-deploy.patch
  - DESC: 163701 【SM】【selinux】开启selinux,vnc客户端无法连接远程桌面
  - DESC: 164167 【SM】系统开启selinux后一键部署报错
  - DESC: 164345 【SM】【selinux】开启selinux,使用iso virt-install创建/安装虚拟机报错
  - DESC: 151074 【安全模式切换】【前端设置】安全优先切换其他模式时，ARM架构服务器重启失败

  - add Patch7006: security-reinforce-CAD-Screen.patch
  - DESC:bug[161242]【安全加固】使用前端界面进行一键加固时进度卡住不动 
  - DESC:bug[144179]【安全加固】【系统设置】strict模式和custom模式系统ctrl+alt+del组合键禁用，加固失败


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.21
changelog:
  - Type:update
  - ID:[BUG#165348]
  - SUG:NA
  - add Patch7007: selinux-policy-audit.patch
  - DESC:165348 【20230328内网源测试】开启selinux模式后无法安装audit软件包


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.22
changelog:
  - Type:update
  - ID:[BUG#170799]
  - SUG:NA
  - add Patch7008: selinux-policy-reboot.patch
  - DESC:170799 [SP3]开启selinux模式target后重启系统异常


author: hanhuijie<hanhuijie@kylinos.cn> - 3.14.2-76.se.23
changelog:
  - Type:update
  - ID:[BUG#169925][BUG#169921] [BUG#169400]
  - SUG:NA
  - add Patch7009: kysec-adapter-SXF.patch
  - DESC:bug[169925]【安全模式】strict模式下第一次开启exectl报错	深信服源码授权	    
  -      bug[169921]【访问控制】【白名单访问控制】【strict模式】系统初始化白名单后，/etc/kysec/db/whlist.db文件的relabel_status表rebabel字段的值为0
  -      bug[169400]【安全模式切换】【前端设置】安全中心设置中安全优先模式切换成关闭，secadm用户点击重启后未重启


author: zhaoqingyou<zhaoqingyou@kylinos.cn> - 3.14.2-76.se.24
changelog:
  - Type:update
  - ID:[BUG#183181]
  - SUG:NA
  - add Patch7010: selinux-policy-rpm-decode.patch
  - DESC:183181 【通用安全】【ARM&X86】开启strict模式后，rpm包无法升级


author: tiandongdong<tiandongdong@kylinos.cn> - 3.14.2-76.se.26
changelog:
  - Type:update
  - ID:[BUG#215075][BUG#215052]
  - SUG:NA
  - add Patch7011: selinux-policy-add-unetdns-module.patch
  - DESC: [BUG#215075] 【授权管控】【S2500】系统安全切换至strict或者default模式后，切换tty后未显示授权管控提示语句
  -       [BUG#215052] 【S2500】切换至strict模式后，鼠标右击我的电脑，选择属性会直接闪退


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.8.1-10.se.01
changelog:
  - Type:update
  - ID:[Task#185579]
  - SUG:NA
  - DESC: shadow-utils修复无效路经的问题
  -         add patch: shadow-utils-fix-invalid-path.patch
  -       加入kysec和user检查
  -         add patch: shadow-4.7-kysec-and-user-check.patch
  -       恢复-o命令选项
  -         add patch: shadow-recover-o-option-and-move-real-operate.patch
  -       修复newuid不能加入uid_list的问题
  -         add patch: shadow-fix-newuid-not-into-uid_list.patch
  -       修正了参数u不使用时的唯一uid
  -         add patch: shadow-fix-unique-uid-when-arg-u-not-used.patch
  -       chpasswd使用pam
  -         add patch: shadow-chpasswd-use-pam.patch
  -       修复添加用户错误和uid_list重复的问题
  -         add patch: shadow-4.7-fix-mock-add-user-err-fix-uid_list-duplication.patch
  -       修复使用pam引发的问题
  -         add patch: shadow-fix-use-pam-patch.patch
  -       超过1000，不检查uid
  -         add patch: shadow-change-do-not-check-uid-if-bigger-than-1000.patch
  -       添加登录检查相同UID的功能
  -         add patch: shadow-login-check-same-uid.patch
  -       修复bug#71437：security-switch切换模式，default模式切换到strict模式，报错的问题
  -         add patch: shadow-reserved-admin-uids.patch
  -       useradd中将uid>1000的判断改为>=1000,否则创建uid为1000的用户不会写入uid_list中
  -         add patch: shadow-useradd-modify-uid-great-than-or-equal-to-1000.patch
  -       off状态,-u参数默认getpwuid; on状态,-u使用uid_used
  -          add patch: shadow-chkuid-off-oflg-pwuid.patch
  -         add patch: shadow-get-chkuid-state.patch


author: chenyun <chenyun@kylinos.cn> 2:4.8.1-10.se.01.gfb01
changelog:
  - Type:bugufix
  - ID:[bugid#379265]
  - SUG:NA
  - DESC:限制创建数字开头的用户名
  	add patch:shadow-4.8.1-change-user-name.patch


author: songjuntao <songjuntao@kylinos.cn> - 15-23.p03
changelog:
  - Type:update
  - ID:NA
  - ID:NA
  - DESC: add 0001-shim-Properly-generate-absolute-paths-from-relative-.patch and
          0002-shim-Prevent-shim-to-set-itself-as-a-second-stage-lo.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 15-23.p06
changelog:
  - Types:CVE
  - ID:TASK#207009
  - SUG:NA
  - DESC:fix CVE-2023-0464 CVE-2023-3817
         CVE-2023-40547 CVE-2023-40551
         CVE-2023-3446 CVE-2023-0465 CVE-2023-2650


author: lingsheng <lingsheng1@h-partners.com> - 6.04-16
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: jinzhiguang <jinzhiguang@kylinos.cn> - 12.2.1-7.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: 同步民口补丁：bug#211702 
  - Add Patches 0001-Workaround-for-iowait-being-decremented.patch


author: Cao Keqian <caokeqian@kylinos.cn> - 243-55.p01.se.01.gfb03
changelog:
  - Type:update
  - ID:[Task#141805]
  - SUG:NA
  - DESC: 添加第二张盘时自动构建本地yum源
    add Patch10006 systemd-add-automount-sdk-iso-rules-script.patch


author: Cao keqian <caokeqian@kylinos.cn> - 243-55.p01.se.01.gfb05
changelog:
  - DESC: 最小安装，基础服务器安装支持自动挂载功能，需要安装udisks2相关的包。
  - add Patch10008 support_minimum_install_automount.patch


author: Cao keqian <caokeqian@kylinos.cn - 243-55.p01.se.01.gfb06
changelog:
  - Type:update
  - ID:[-]
  - SUG:NA
  - DESC: 更新99-sdk-automount.rules中ID_FS_LABEL识别字段为：KY10-S-EXT
    add Patch10009 change-id_fs_label-to-KY10-S-EXT.patch


author: Yinhao <yinhao@kylinos.cn - 243-55.p01.se.01.gfb07
changelog:
  - Type:update
  - ID:[task#355021]
  - SUG:NA
  - DESC: 插入sdk盘后清理缓存
    add Patch10010 systemd-243-sdk-clean-yum-cache.patch


author: chenyun <chenyun@kylinos.cn - 243-55.p01.se.01.gfb10
changelog:
  - Type:update
  - ID:[task#280699]
  - SUG:NA
  - DESC: 扩展盘源地址中添加麒麟标签检测
    add Patch10012 systemd-243-add-sdk-mount-gpgkey.patch


author: kongdelin <kongdelin@kylinos.cn - 243-55.p01.se.01.gfb11
changelog:
  - Type:bugfix
  - ID:[Bug#220276]
  - SUG:NA
  - DESC: Add backport-core-add-possibility-to-not-track-certain-unit-types.patch
          Sync upstream community patches , optimization user login time for too long in some case


author: Chen Yushan <chenyushan@kylinos.cn> - 243-55.p01.se.01.gfb13
changelog:
  - Type:cve
  - ID:[Task#471777] CVE-2023-26604 CVE-2022-3821
  - SUG:NA
  - DESC:Fix CVE-2023-26604 CVE-2022-3821


author: dingcaokai<dingcaokai@kylinos.cn> - 243-55.p01.se.01.gfb18
changelog:
  - Type:bug
  - ID:解决重启时服务没有起来的问题；解决盘还没有挂载就执行yum的问题
  - SUG:NA
  - DESC:systemd-243-always-launch-extrapackages-service.patch


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: xingwei <xingwei14@h-partners.com> - 14:4.99.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Set SA_RESTART on non-lethal signals (REQ_INFO, FLUSH_PCAP) to avoid corrupting binary pcap output


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.65-2
changelog:
  - Cleaning up some unused deps and system properties
  - Conditionally remove some classes that are not provided by the bnd
    version shipped in el8


author: wjw <wengjiawei@kylinos.cn> - 1:9.0.65-2.gfb01
changelog:
  - copy from 98 koji
  - add patch: stopCompilerOptions12_13_14_15.patch
  - stopCompilerOptions12 13  14  15


author: yuejiayuan<yuejiayuan@kylinos.cn> - 3.0.3-2.p01
changelog:
  - Type:update
  - ID:TASK#175727
  - SUG:NA
  - DESC:add 0001-newfeature-tpm-Add-gm-support.patch provided by HYGON


author: Liu Chao <liuchao173@huawei.com> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)


author: xiejing <xiejing@kylinos.cn> - 2.24.1-1.p01
changelog:
  - Type: update
  - ID: [Task#418871]
  - SUG: NA
  - DESC: Migrate patches corresponding to task#153403,task#186385,bug#217426,bug#217442 in v10:
        - split package tuned-utils-systemtap, reduce main package installation dependencies
        - add the tuned profile sbm-performance, optimize filesystem and network performance
        - add disk IO optimization to sbm-performance profile, optimize disk IO performance
        - add jvm flag UseNUMA, optimize jvm performance
        - split sbm-performance mode to sbm and sbm-performance mode
        - improve disk IO and exec performance


author: caokeqian<caokeqian@kylinos.cn> -p26.gfb01
changelog:
  - Type: bugfix
  - IDi : [Task#144157]
  - SUG : NA
  - DESC: add ukui-greeter-login-clone-mode.patch
  	之前在登录界面默认为扩展模式，现在将其修改为复制屏，即多个屏幕同步显示登录界面


author: chenyun<chenyun@kylinos.cn> -p26.gfb02
changelog:
  - Type: bugfix
  - IDi : [Bug#174967]
  - SUG : NA
  - DESC: add ukui-greeter-1.2.1-gfb-password-button.patch
  	非root用户，睁眼图标：显示密码；闭眼图标：显示“.”


author: chenyun<chenyun@kylinos.cn> -p26.gfb03
changelog:
  - Type: bugfix
  - IDi : [Task#156638]
  - SUG : NA
  - DESC: add ukui-greeter-1.2.1-delete-sessionButton.patch
  	登陆界面右上角的“选择桌面环境”按钮去除


author: chenyun<chenyun@kylinos.cn> -p26.gfb04
changelog:
  - Type: bugfix
  - IDi : [Bug#173635]
  - SUG : NA
  - DESC: add ukui-greeter-1.2.1-gfb-enter-password-display.patch
          密码登陆界面，不输入密码直接回车有密码错误显示
          修改changelog


author: chenyun<chenyun@kylinos.cn> -p26.gfb06
changelog:
  - Type: bugfix
  - ID : [Bug#174967]
  - SUG : NA
  - DESC: add ukui-greeter-1.2.1-kylin-the-eye-on-the-right-side-of-the-password-input-box-disappears-when-logging-in-to-the-system.patch
          登陆界面从root用户切换到普通用户，再切回root用户后无密码眼睛图标问题


author: caokeqian <caokeqian@kylinos.cn> - p26.gfb07
changelog:
  - Type:bugfix
  - ID:[Bug#200423]
  - SUG:NA
  - DESC: add patch31:fix-greeter-page-capslock-reverse.patch
  	修复问题：登录界面打开大写，返回用户界面关闭大写，再进入登录界面大写锁定标记
  	仍然打开，与实际输入大小写相反。


author: yinhao <yinhao@kylinos.cn> - p26.gfb08
changelog:
  - Type:bugfix
  - ID:[Bug#187873]
  - SUG:NA
  - DESC: 登录界面，限制用户名输入框，不允许输入非法字符
  - Add Patches: add patch31:ukui-greeter-1.2.1-login-characters.patch


author: chenyun <chenyun@kylinos.cn> - p26.gfb09
changelog:
  - Type:bugfix
  - ID:[Bug#211908]
  - SUG:NA
  - DESC: 登录界面，扩大信息显示框
  - Add Patches: add patch32:ukui-greeter-1.2.1-expand-display-message-box.patch


author: dingcaokai <dingcaokai@kylinos.cn> - p26.gfb10
changelog:
  - Type:bugfix
  - ID:[Bug#221538]
  - SUG:NA
  - DESC: 登录界面，扩大信息显示框
  - Add Patches: ukui-greeter-1.2.1-always-clone-mode-with-more-than-two-screens.patch


author: zhangyu <zhangyu@kylinos.cn> - p26.gfb11
changelog:
  - Type:bugfix
  - ID:[Task#339343]
  - SUG:NA
  - DESC: 系统登录用户名不能为空
  - Add Patches: ukui-greeter-1.2.1-Do_not_react_to_empty_input_fields.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 2:9.0-14.p01
changelog:
  - Type:update
  - ID:[BUG#101652]
  - SUG:NA
  - DESC:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题
  -      Task 152726: 升级vim版本至9.0-14后，合入安全部门修改，from wanghao2


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2:9.0-19.p05
changelog:
  - Type:cves
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802
  - SUG:NA
  - DESC:Fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802


author: liujingyuan <liujingyuan@kylinos.cn> - 2:9.0-19.p09.gfb05
changelog:
  - Type:fixbug
  - ID:[bug#385579]
  - SUG:NA
  - DESC:Handling-sensitive-keywords-fixbug-385579_1.patch 修复敏感词


author: leechm <liqimei@kylinos.cn> -2.2.1-2.16.gfb03
changelog:
  - add 0001-delete-distro-for-cdrom-remote-connection.patch
  - add 0001-delete-ui-storage-diskpool-create.patch


author: leechm <liqimei@kylinos.cn> -2.2.1-2.16.gfb05
changelog:
  - bug https://172.17.50.104/bug-view-174473.html
  - add 0001-delete-process-bar-when-virt-clone.patch


author: caokeqian <caokeqian@kylinos.cn> - 2.2.1-2.16.gfb07
changelog:
  - Type:bugfix
  - ID:175884
  - SUG:NA
  - DESC: Lack of add-memory-balloon-function.patch will lead to the v4
  -	vm machine's lightdm.service failed problem.
  -	Regenerated it from gfb01.


author: chenyun<chenyun@kylinos.cn> -0:2.7.1-39.gfb01
changelog:
  - Type: TASK
  - ID: [TASK#404285]
  - SUG: NA
  - DESC: add patch2:xalan-j2-change-sensitive-characters.patch


author: peijiankang<peijiankang@kylinos.cn> - 2.30-2.p02
changelog:
  - Type: update
  - ID  : [Task#165843]
  - SUG : NA
  - DESC: add patch:xkeyboard-config-2.30-kylin-delete-sensitive-words.patch


author: chenyun<chenyun@kylinos.cn> - 2.30-2.p02.gfb01
changelog:
  - Type: update
  - ID  : [Task#404285]
  - SUG : NA
  - DESC: add patch:xkeyboard-config-2.30-kylin-delete-sensitive-words-1.patch


author: Like<like@kylinos.cn> - 1.51.06-2.p01
changelog:
  - Type:NA
  - Id:NA
  - SUG:NA
  - DESC: Reference  1.51.06-1.p01 modify, splits sub packages client,c++,client++,apps


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 1.51.06-2.p04
changelog:
  - Type:cves
  - Id:TASK#480193
  - SUG:NA
  - DESC:backport CVE-2024-8176 patch and sync v11 modify to remove duplicate man file in xml-rpc-c-apps packages


author: Zhenneng Li <lizhenneng@kylinos.cn> - 1.20.8-10.p06
changelog:
  - Type: update
  - ID:   [TASK#105748]
  - SUG:  NA
  - DESC: Delete -D__KYLIN_FT1500A_DISPLAY__ for CFLAGS/CXXFLAGS


author: xurui <xurui@kylinos.cn> - 1.20.8-3.p04
changelog:
  - Id:CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344
  - SUG:NA
  - DESC:fix CVE-2022-2319,CVE-2022-2320,CVE-2022-3551,CVE-2022-3553,CVE-2022-4283,CVE-2022-46340,CVE-2022-46341,CVE-2022-46342,CVE-2022-46343,CVE-2022-46344


author: Chen Yushan <chenyushan@kylinos.cn> - 1.20.8-3.p09.gfb01
changelog:
  - Type: update
  - ID:   [TASK#193779]
  - DESC: add 0004-xorg-server-1.20.8-e2000.patch
  - to fix the black screen issue in e2000(Provided by phytium)
  - add 0005-KYLIN-add-ljmcore-driver-support.patch


author: Chen Yushan <chenyushan@kylinos.cn> - 1.20.8-3.p09.gfb02
changelog:
  - Type: update
  - ID:   [TASK#213143]
  - DESC: del 0004-xorg-server-1.20.8-e2000.patch,
  - add 0006-xorg-ast-ft-bmc-5000c.patch to
  - fix the black screen issue in e2000 or ast(Provided by phytium)


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-10.p10
changelog:
  - Type:CVE
  - Id:CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478
  - SUG:NA
  - DESC:fix CVE-2023-5367,CVE-2023-5380,CVE-2023-6377,CVE-2023-6478


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-10.p11
changelog:
  - Type:CVE
  - Id:CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886
  - SUG:NA
  - DESC:fix CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886


author: leechm <liqimei@kylinos.cn> - 1.20.8-10.p12.gfb01
changelog:
  - 0005-KYLIN-add-ljmcore-driver-support.patch [from chenyushan]
  - 0006-xorg-ast-ft-bmc-5000c.patch [from chenyushan]
  - 0001-KYLIN-add-mwv207-driver-support.patch [from zhaodong]
  - 0001-KYLIN-Add-support-for-musa.patch [from zhaodong]
  - 同步1.20.8-3.p09.gfb04的补丁


author: leechm <liqimei@kylinos.cn> - 1.20.8-10.p12.gfb02
changelog:
  - backport-CVE-2025-26594.patch
  - backport-CVE-2025-26595.patch
  - backport-CVE-2025-26596.patch
  - backport-CVE-2025-26597.patch
  - backport-CVE-2025-26598.patch
  - backport-CVE-2025-26599.patch
  - backport-CVE-2025-26600.patch
  - backport-CVE-2025-26601.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}12
changelog:
  - Type:bugfix
  - ID  :[bug#117856]
  - SUG :NA
  - DESC:add Patch:0001-yhkylin-backup-auto-and-backup-auto-efi-add-help.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}13
changelog:
  - Type:bugfix
  - ID  :[bug#117776]
  - SUG :fix bakcup-daemon no help 
  - DESC:add Patch:0001-fix-backup-daemon-help.patch


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}14
changelog:
  - Type:bugfix
  - ID  :[bug#134599]
  - SUG :add patch 0001-remove-space-fix-134599.patch
  - DESC:fix Click "Backup Management" to exit automatically


author: lvfei <lvfei@kylinos.cn> - 4.0.12kord1{?ns_dist}15
changelog:
  - Type:bugfix
  - ID  :153868
  - SUG :NA
  - DESC:remove 0001-remove-debian-directory.patch and repach tar.gz
               add patch:0001-kylin-remove-some-annotating-code.patch


author: yinhao <yinhao@kylinos.cn> - 4.0.12kord1{?ns_dist}16
changelog:
  - Type:bugfix
  - ID  :[bug#]173512
  - SUG :add patch yhkylin-backup-tools-4.0.12-fix-error-size.patch
  - DESC:fix <0.01GB problem


author: yinhao <yinhao@kylinos.cn> - 4.0.12kord1{?ns_dist}17
changelog:
  - Type:bugfix
  - ID  :[bug#]212049
  - SUG :add patch yhkylin-backup-tools-4.0.12-mount-backup.patch
  - DESC:自动挂载backup分区


author: chenshengdong <chenshengdong@kylinos.cn> - 4.1.0.1.0k1.gfb06
changelog:
  - Type: bugfix
  - ID: [bug#343418,346606,343400,344025]
  - SUG: NA
  - DESC: 
      Add fixbug-343418-the_custom_directory_dialog_button_being_in_en.patch
      fixbug-346606-unify_tool_name.patch
      fixbug-343400-hide_help_button.patch
      fixbug-344025-backup_progress_is_inconsistent_with_the_actual_progress.patch
      fixbug-343656-systemback_log_is_reporting_an_error.patch
      fixbug-343743-failed_to_create_ghost_under_removeable_path.patch
      fixbug-343904-the_size_of_custom_path_backup_file_is_inconsistent_with_the_file_browser.patch


author: chenshengdong <chenshengdong@kylinos.cn> - 4.1.0.1.0k1.gfb07
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: add install dependency pkg:libkysdk-qtwidgets,libkysdk-appcommon,kf5-kwindowsystem,kf5-filesystem.


author: chenshengdong <chenshengdong@kylinos.cn> - 4.1.0.1.0k1.gfb08
changelog:
  - Type: bugfix
  - ID: [bug#352985,353481,353309,352978,354620,357309,355955,358353,358469,362447,358093]
  - SUG: NA
  - DESC: 
      Add fixbug-352985-ukey_activation_prompts_unable_to_retrieve_hardware_information.patch
      fixbug-353481-empty_backup_name_cannot_be_created.patch
      fixbug-354730-incorrect_image_name.patch
      fixbug-355781-systembackup_contains_files_in_ghost_dir.patch
      fixbug-354620-select_vfat_partition_for_custom_path.patch
      fixbug-357417-unified_ghost_name.patch
      fixbug-357813-progress_bar_display_issue.patch
      fixbug-357309-clear_caches.patch
      fixbug-355955-unable_to_create_image_at_default_path_after_initial_creation.patch
      fixbug-358353-incorrect_image_modification_time.patch
      fixbug-358469-enhance_the_logging_for_image_generation.patch
      fixbug-358093-name_inconsistency_in_image_creation_process.patch


author: chenshengdong <chenshengdong@kylinos.cn> - 4.1.0.1.0k1.gfb09
changelog:
  - Type: bugfix
  - ID: [bug#353470,362505]
  - SUG: NA
  - DESC: Add fixbug-353470-prompt_in_english.patch
          fixbug-362505-backup_tools_failed_to_create_and_delete_ghost_directory.patch


author: chenshengdong <chenshengdong@kylinos.cn> - 4.1.0.1.0k1.gfb10
changelog:
  - Type: bugfix
  - ID: [bug#354620]
  - SUG: NA
  - DESC: Add fixbug-354620-select_vfat_partition_for_custom_path_1.patch
          fixbug-369227-systembackp_prompt_interface_exception.patch


author: chenshengdong <chenshengdong@kylinos.cn> - 4.1.0.1.0k1.gfb11
changelog:
  - Type: bugfix
  - ID: [bug#370325,378865]
  - SUG: NA
  - DESC: Add fixbug-370325-progress_bar_flashing_issue.patch
          fixbug-378865-directory_not_updating_in_real_time.patch
          fixbug-357209-window_border_issues.patch
          fixbug-353470-prompt_English_issue.patch


author: lixiaohong <lixiaohong@kylinos.cn> - 4.1.0.1.0k1.gfb13
changelog:
  - Type: bugfix
  - ID: [bug#358693]
  - SUG: fix the problem that the prompt isn't centered.
  - DESC: Add fixbug-358693-prompt_centered_display.patch


