# changelog

author: maminjie <maminjie1@huawei.com> - 1.3.30-8
changelog:
  - fix some CVEs: CVE-2018-18544 CVE-2019-7397 CVE-2019-11005 CVE-2019-11006
    CVE-2019-11010 CVE-2019-12921 CVE-2020-10938 CVE-2020-12672


author: wangxiao <wangxiao65@huawei.com> - 6.9.10.67-19
changelog:
  - Fix CVE-2020-25676 CVE-2020-27757 CVE-2020-27758 CVE-2020-27771
    CVE-2020-27772 CVE-2020-27774 CVE-2020-27775 CVE-2020-27751


author: lvfei <lvfei@kylinos.cn> -1.16.0-7.p05
changelog:
  - update version disable patch9004
  - fix-unconnect-due-to-no-carrier.patch
  - fix chandao bug 40186 40172 40164


author: lifeifei <lifeifei@kylinos.cn> -1.16.0-7.p09
changelog:
  - Type:Task
  - ID:327510
  - SUG:NA
  - DESC:add patch9010:revert-the-code-to-version-p07
         add patch9011:bugfix-NetworkManager-mangling-static-IPv6-routes.patch:
  	   TaskID:171955:fix mangling static IPv6 routes in nm_ip6_config_merge_setting()


author: zhanghua <zhanghua40@huawei.com> - 2.2.0-18
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DESC:fix CVE-2017-9110 CVE-2017-9111 CVE-2017-9112 CVE-2017-9113
    CVE-2017-9114 CVE-2017-9115 CVE-2017-9116 CVE-2017-12596


author: Tom Callaway <spot@fedoraproject.org> - 3.6.2-4
changelog:
  - fix conditionals so that Fedora builds against system openblas for lapack/blas
    and we only generate the R lapack/blas libs on RHEL 5-6-7 (where system lapack/openblas
    is not reliable). Thanks to Dirk Eddelbuettel for pointing out the error.


author: houhongxun <houhongxun@kylinos.cn> - 0.6.55-2.p01
changelog:
  - Type:update
  - ID:Task#171032
  - SUG:NA
  - DESC:sync kylin modification: fix user display problem in control center or when login
  	add patch: accountsservice-0.6.54-kylin-1000-users-issue.patch(liujilin)


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-25.20140228gitc2f5d13
changelog:
  - improve python bindings build patch based on upstream PR
  - fix infinite loop for certain regexps (upstream issue #50)
  - switch to python3 (#1634955)


author: openEuler Buildteam <buildteam@openeuler.org> - 0.16-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: change file from /etc/logrotate.d/aide/aide.logrotate to /etc/logrotate.d/aide


author: Li Xiaoyong<lixiaoyong@kylinos.cn> 29.24.7-28.16.p20
changelog:
  - Add Patch17033: Fix displaying "Red Hat Enterprice..." Linux distribution when 
  	excuting custom disk partition, change the display to "Kylin Linux..."


author: Xiao Zai<xiaozai@kylinos.cn> 29.24.7-28.16.p24
changelog:
  - Add Patch17037: anaconda-29.24.7-kylin-fix-translation-in-zh_HK.patch
  - fix the translation function in welcome interface
  - fix the translation in zh_HK by modifying zh_HK.po,it is actually copying from zh_TW.po to zh_HK.po


author: Xiao Zai<xiaozai@kylinos.cn> 29.24.7-28.16.p25
changelog:
  - Add Patch17038: anaconda-29.24.7-kylin-modify-message-values.patch
  - unimportant modification for zh_HK.po


author: Xiao Zai<xiaozai@kylinos.cn> 29.24.7-28.16.p26
changelog:
  - add Patch17039:  anaconda-29.24.7-kylin-do-not-translate-prompt-keys.patch
  - fix Bug#58461
  - Don't translate prompt keys. Translated prompt keys are not supported by the simpleline library, so
  anaconda shouldn't translate them neither. Use constants when possible.


author: Shi Jingying <shijingying@kylinos.cn> 29.24.7-28.16.p27
changelog:
  - add patch: anaconda-29.24.7-kylin-synchronous-u-boot-to-ks-file.patch
  - synchronous u-boot to ks file, add log files


author: Xiao Zai<xiaozai@kylinos.cn> 29.24.7-28.16.p28
changelog:
  - add Patch17041: anaconda-29.24.7-kylin-fix-translation-for-password-require-tips.patch
  - fix Bug#64618, fix the translation for tips of password-require in user spoke interface


author: Yue Yuankun<yueyuankun@kylinos.cn> 29.24.7-28.16.p29
changelog:
  - add Patch17042: anaconda-29.24.7-kylin-add-megaraid-for-mips.patch
  - add "megaraid_sas.msix_disable=1" in grub for mips


author: Xiao Zai<xiaozai@kylinos.cn> 29.24.7-28.16.p30
changelog:
  - add Patch17043: anaconda-29.24.7-kylin-set-defaultfs-to-ext4-for-mips.patch
  - delete the codes which rename file from more_os_name.py to kylin.py from this spec file and move this logic into a patch file
  - set the default fs from xfs to ext4 for mips arch


author: Yue Yuankun<yueyuankun@kylinos.cn> 29.24.7-28.16.p31
changelog:
  - add Patch17044: anaconda-29.24.7-kylin-fixbug2926-restart-failed-service.patch
  - add the codes to restart service which the first start failed, for bug#2926
  - add Patch17045: anaconda-29.24.7-kylin-fixbug69254-for-quitbutton-without-rebooting.patch
  - start initial-setup.service, click the quit button without rebooting, for bug#69254


author: yueyuankun <yueyuankun@kylinos.cn> 29.24.7-28.16.p33
changelog:
  - Type:bugfix
  - ID:[TASK#334079]
  - SUG:NA
  - DESC:fix(bootloader.py): remove grub2-efi in x86_64 legacy BIOS firmware


author: huangwenhua <huangwenhua@kylinos.cn> - 9100h-39.p01
changelog:
  - Type: update
  - ID: [Task#165758]
  - SUG: NA
  - DESC: revise the expression of sensitive words
  	fix regenerate dict.args.in


author: tanyulong <tanyulong@kylinos.cn>-1.17.0-3.p09
changelog:
  - Type:bugfix
  - ID:[BUG#115244]
  - SUG:NA
  - DESC:fix document viewer crashes when clicking to present
  - Add Patches:atril-1.17.0-kylin-fix-bug-115244.patch


author: douyan <douyan@kylinos.cn> - 1.17.0-3.p10
changelog:
  - Type: update
  - ID:   [TASK#187126]
  - SUG:  NA
  - DESC: add atril-1.17.0-kylin-add-zh_HK-translation.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0-5.se.10
changelog:
  - Type: bugfix
  - ID:[Bug#113316]
  - SUG:NA
  - DESC: 将audit.log文件权限改为600，pidfild文件权限改为644
  -         add patch: audit-3.0-modify-logfile-and-pidfile-permissions.patch


author: sunjin <sunjin@kylinos.cn> - 3.0-5.se.11
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:
  -     解决ausyscall --dump看不到系统符号问题
  -     添加补丁audit-3.0-fix-syscall-error.patch


author: xuyujun <xuyujun@kylinos.cn> - 3.0-5.se.12
changelog:
  - Type:bugfix
  - ID: [Bug#146654]
  - SUG:NA
  - DESC:
  - 		mips服务器audit服务日志显示unknown
  - 		添加补丁 audit-3.0-fix-unkonw-machine-type-error.patch


author: Shi Jingying <shijingying@kylinos.cn> - 1:6.0.6.1-13.p01
changelog:
  - Modify spec file
  - Change hyphen-en to hyphen-devel
  - Change gstreamer1(element-gtksink)()(64bit) to gstreamer1-plugins-good-gtk


author: Shi Jingying <shijingying@kylinos.cn> - 5.0-14.se.01.p02
changelog:
  - Type: update
  - ID: [Task#101668]
  - SUG: NA
  - DESC: recover the `history -c` operation of the non root user 
          add patch1002 bash-5.0-recover-non-root-user-to-clear-history.patch


author: wanfeng <wanfeng@kylinos.cn> - 5.0-14.se.01.p03
changelog:
  - Type: update
  - ID: [Task#172337]
  - SUG: NA
  - DESC: modify spec, config /etc/skel/.*, Duplicate files


author: zhangzikang <zhangzikang@kylinos.cn> - 0.15.0-1.p02
changelog:
  - Type:update
  - ID:TASK#169384
  - SUG:NA
  - DESC: add loongarch support
          0001-kylin-bcc-add-loongarch-support.patch
          0002-kylin-bcc_fix_conv_regs_issue.patch
          0003-kylin-bcc_fix_uprobe_libc_so.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 0.15.0-1.p03
changelog:
  -Type:bugfix
  -ID:Bug#194974
  -SUG:NA
  -DESC:Fix identifier BPF_PSEUDO_FUNC undeclared error
        add BTF_KIND_DATASEC for libbpf.h btf_is_datase when make bcc


author: huangyu <huangyu106@huawei.com> - 32:9.11.21-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: huangyu <huangyu106@huawei.com> - 32:9.11.21-15
changelog:
  - Type:CVE
  - ID:CVE-2022-2906 CVE-2022-2881 CVE-2022-2795 CVE-2022-38178 CVE-2022-38177
  - SUG:NA
  - DESC:fix CVE-2022-2906 CVE-2022-2881 CVE-2022-2795 CVE-2022-38178 CVE-2022-38177


author: huangyu <huangyu106@huawei.com> - 32:9.11.21-14
changelog:
  - Type:CVE
  - ID:CVE-2022-2906 CVE-2022-38177 CVE-2022-38178 CVE-2022-2795 CVE-2022-2881
  - SUG:NA
  - DESC:FIX CVE-2022-2906CVE-2022-38177CVE-2022-38178CVE-2022-2795CVE-2022-2881


author: yuanxin <yuanxin21@huawei.com> - 9.11.21-2
changelog:
  - Type:CVE
  - ID:CVE-2020-8622.patch  CVE-2020-8623.patch  CVE-2020-8624.patch
  - SUG:NA
  - DESC:fix CVE-2020-8622.patch  CVE-2020-8623.patch  CVE-2020-8624.patch


author: hanzhijun <hanzhijun1@huawei.com> - 9.11.21-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix the difference at the macro definition using clock gettime instead of gettimeofda


author: lunankun <lunankun@huawei.com> - 9.11.21-2
changelog:
  - Type:CVE
  - ID:CVE-2020-8622CVE-2020-8623 CVE-2020-8624
  - SUG:NA
  - DESC:fix CVE-2020-8622 CVE-2020-8623 CVE-2020-8624


author: gaihuiying <gaihuiying1@huawei.com> - 9.11.21-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix output unexpected information when install bind-sdb or bind-sdb-chroot


author: zoulin <zoulin13@huawei.com> - 2.34-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:Fix a memory leak in the testcase fuzz_readelf
        Fix use-of-uninitialized-value in print_insn_mwtag
        Fix use-of-ninitialized-value in _bfd_xcoff_slurp_armap


author: zoulin <zoulin13@huawei.com> - 2.34-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:Fix a potential use-of-an-uninitialised-value in the print_insn_ns32k of fuzz_disassemble


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.34-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix static library file conflicts when install both binutils and binutils-devel


author: yangyan <yangyan@kylinos.cn> -2.34-13.p01
changelog:
  - Type:CVE
  - ID:TASK#172088
  - SUG:NA
  - DESC: Fix CVE-2022-47008 CVE-2022-47011 CVE-2022-47696 CVE-2021-46174 CVE-2022-48064


author: shuihengcheng <shuihengcheng@kylinos.cn> - 3.0.13-3.se.01
changelog:
  - add box-manager-fix-help-not-open-Manual.patch
  - spec BuildRequires add libkylinos-type-devel, nss
  - add box-manager-3.0.6kord-modify-nologin.patch
  - add box-manager-modify-rename-auth-passwd-error.patch


author: caoshuhao <caoshuhao@kylinos.cn> - 3.0.13-3.se.04
changelog:
  - Add patch:box-manager-change-box-icon.patch
    Fix bug 48921: The Start Menu icon of Kylin Box is different from that in the taskbar.


author: haomeici <haomeici@kylinos.cn> - 3.1.5-1.se.02
changelog:
  - add desktop patch
    fix-owner-of-files-after-sharing
    chown-owner-of-normal-files
    fix-some-bugs
    only-allow-create-encrypt-box.patch
    add-mkdir-for-copy_files
    restrict-perm-for-share
    add-notification-for-gui-tools
    fix-some-bugs-2021-01-14
    check_old_password_logic
    ownername-error-tips
    add-chinesization
    adjust_chinesization_function


author: qinzheng <qinzheng@kylinos.cn> - 3.1.5-1.se.04
changelog:
  - Type:bugfix
  - ID:[BUG#146979]
  - SUG:NA
  - DESC:
  -       1.add fix-the-bug-about-verify-password-for-delete-the-box.patch
  -       2.add fix-dangrous-functions-and-coredump-problem.patch
  -       3.add box-utils-delete-len-bigger-than-6.patch
  -       4.add box-utils-fix-boxadm-l-data-error-bug.patch
  -       5.add box-utils-add-compile-options-of-security-program-fix-some-fortify-risk.patch


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.18.1.el8_2]
changelog:
  - [security] selinux: allow reading labels before policy is loaded (Ondrej Mosnacek) [1861721 1839819]
  - [security] selinux: allow labeling before policy is loaded (Ondrej Mosnacek) [1861722 1777525]
  - [mm] mm/memory_hotplug.c: only respect mem= parameter during boot stage (Baoquan He) [1854207 1838809]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.19.1.el8_2]
changelog:
  - [net] tcp: add sanity tests in tcp_add_backlog() (Guillaume Nault) [1861378 1790843]
  - [net] tcp: implement coalescing on backlog queue (Guillaume Nault) [1861378 1790843]
  - [include] tcp: make tcp_space() aware of socket backlog (Guillaume Nault) [1861378 1790843]
  - [net] tcp: take care of compressed acks in tcp_add_reno_sack() (Guillaume Nault) [1861378 1790843]
  - [include] tcp: hint compiler about sack flows (Guillaume Nault) [1861378 1790843]
  - [net] tcp: drop dst in tcp_add_backlog() (Guillaume Nault) [1861378 1790843]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-22.rc3
changelog:
  - [5e9d848edb99]
  - [0c34479715f6]
  - [84d4b61f9694]
  - [570f098d34ad]
  - [d9415c3d024c]
  - [61396c262e91]
  - [0c887f55ba42]
  - [1ea3bd1923d4]
  - [2498458b0b5b]
  - [5cfec83a1b1c]
  - [bed3ae75f3be]
  - [7474a61d5ab3]
  - [cc1e9b271f98]
  - [093d0fc5d68b]
  - [7063ad54fd3d]
  - [46428a3cf05b]
  - [9c625eb07160]
  - [f333176bc82a]
  - [f0d26ed899e2]
  - [3d4b752e6eb3]
  - [98ef56590b35]
  - [ba08524d1395]
  - [8680ebdcb91b]
  - [88577cbb69ad]
  - [66fa8b4a6d77]
  - [51fae5342ef5]
  - [3d6a8408b74b]
  - [522f30d1b4bc]
  - [f8caa302debf]
  - [6a06e53d694c]
  - [d6c1607941de]
  - [e1a7b7b229ef]
  - [c6943947ba69]
  - [98db7efb289a]
  - [80d48123aa91]
  - [db22945ef03b]
  - [bd9c9081f5dd]
  - [87c44385d7ed]
  - [c43b124ddf8e]
  - [c4c6f692e338]
  - [eb0aac755009]
  - [6fc7ce1dabd7]
  - [87ba3e795e07]
  - [5f7943589b7f]
  - [04373c80b249]
  - [80a827ba5545]
  - [2b8400401b11]
  - [0f1c2e59ef32]
  - [c3691363c3e7]
  - [c1dd0483a08e]
  - [86bdf2ba6d5a]
  - [4820ac95a98e]
  - [84703c80c192]
  - [8d571acc3a18]
  - [e9c4efa1b22e]
  - [9be22c06095b]
  - [3ba575148a67]
  - [234bc2180718]
  - [c67b0710414d]
  - [d986786de2d5]
  - [91df701fa50d]
  - [e68674e8ea54]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-22.pre
changelog:
  - [dde9f84d0c6f]
  - [b543a1a1264d]
  - [f5dd4d95c412]
  - [caf2555a63fd]
  - [03e0968760bc]
  - [4338d5c3f278]
  - [5db3ff0ac834]
  - [923fe02e3f3d]
  - [791c6f7416fc]
  - [f35492f30fe2]
  - [02c2ef394060]
  - [ce0dcf7f2fa7]
  - [6f27d4373603]
  - [841f9929da68]
  - [4484f8311578]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-22.0
changelog:
  - [0734bc7736af]
  - [6727e8670c63]
  - [fa741e85cc71]
  - [70b545c400e1]
  - [98c8978239e6]
  - [46fd8bb9d53d]
  - [a2e3081cc070]
  - [1303ab478f0c]
  - [acae74578fc6]
  - [eaa0e159b1d9]
  - [66023acf78ff]
  - [b678dad91a42]
  - [a8abb079a24e]
  - [d43b33767627]
  - [1c88114d9ecf]
  - [f8597736dca4]
  - [704c017edc67]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-v2101.23.rc2
changelog:
  - [8be15142485f]
  - [5810c4eaed11]
  - [cd2f633d8fcb]
  - [5c15284600b6]
  - [a55487edf375]
  - [0d0779b429ef]
  - [bdbcf9da3315]
  - [4c19b3d8c572]
  - [4db07a03e9ab]
  - [6d7d99906e83]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-v2101.23.0
changelog:
  - [c5e900bb19d0]
  - [9a813c1e106b]
  - [18441b5c5bdb]
  - [c6c0d2c083f1]
  - [5a859cc22cfe]
  - [181281a45860]
  - [031da147ccc2]
  - [737ac272489a]
  - [35888626bdc0]
  - [5fde0a57a076]
  - [0aef697139ab]
  - [aeba010f8f0f]
  - [e83f06fea08a]
  - [31c5f73421d2]
  - [3ace3fe8530a]
  - [07de12e57414]
  - [c67ab2470fa9]
  - [dcadc5735e13]
  - [4e2dce6d17ea]
  - [e0c3145ce749]
  - [52f6c43c17ef]
  - [fdc124e5bad6]
  - [510a61778413]
  - [5ee1bd20b829]
  - [920fabe0d2d9]
  - [e46cc965010d]
  - [af80c9893173]
  - [0fe14cba5188]
  - [4c0d5af02334]
  - [721fa69a5933]
  - [446f7247bd5c]
  - [7fc82a5299a5]
  - [183aea9a1bca]
  - [2335c33efc32]
  - [a50858f99545]
  - [6e9575b846ab]
  - [64b4fe61e54c]
  - [6195638dc862]
  - [6cb63cead3d2]
  - [d7a7376a7aeb]
  - [64c851cb405e]
  - [9d1356264e1b]
  - [52f9787140bc]
  - [f571602e566d]
  - [2c2ed3ca9e7a]
  - [71006da859c1]
  - [80f6c5498a60]
  - [36367919b713]
  - [fe4c1ec362d8]
  - [ca20d12f5cfd]
  - [ba1a5a2a99a0]
  - [22c75092cc0b]
  - [6ae85f75fcc2]
  - [2f70509cf17a]
  - [d25e9c96311f]
  - [bcd1c2215fc9]
  - [f4f72f22efab]
  - [8cd7cc0269cc]
  - [ea675c810c14]
  - [f96168ac7172]
  - [905358e23152]
  - [404eced48435]
  - [9dd811064938]
  - [4bf21b6eded9]
  - [21e0e737c0a8]
  - [615c8f57147c]
  - [aaadaeb13256]
  - [92bf458031c9]
  - [f32e64cc482e]
  - [3b1578e22a3a]
  - [e2282b3b0dc8]
  - [c74aa33bdd2b]
  - [036948a0174d]
  - [afdcac0eb777]
  - [95b2917263fa]
  - [cbe262cd4bc0]
  - [38f72e2712a8]
  - [07a7d7eac23c]
  - [41db63cfa4fe]
  - [065b90c58c7e]
  - [5b78dfbde4c6]
  - [22f11dabae0a]
  - [73c0ddf9ac4d]
  - [f8bb8793ddd7]
  - [4de8f98572fc]
  - [3d543539b3d1]
  - [1736524f62ec]
  - [ae25e2b5a74e]
  - [bc2e6effe374]
  - [7ad7cd45c8b2]
  - [93e002cbd35f]
  - [323a056ea74e]
  - [c32b6758f29b]
  - [3c6216b444ec]
  - [51b8878278f3]
  - [eef84b53387c]
  - [2fbea29546c0]
  - [bb10cdaeb091]
  - [f0528e331fb0]
  - [dbd2faf82ea0]
  - [a1ef619e68a9]
  - [847314d0a45f]
  - [67a4db697e04]
  - [9453a849d260]
  - [895c45fdc22f]
  - [11d94a5cdae4]
  - [b26a7913a05a]
  - [d35bb1695539]
  - [63002dab8e39]
  - [ac5c3bffd419]
  - [08a065719890]
  - [b90652ec2296]
  - [9493d89f62cd]
  - [28d93a1bddcf]
  - [09df9faaa51d]
  - [63fc2969db4c]
  - [60b2f3cc3b04]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-v2101.23.1
changelog:
  - [16682b40483f]
  - [8b006aa00d50]
  - [77bcc68a42ef]
  - [429f6b75c2fb]
  - [da71b70ea16b]
  - [3efd99e2b18b]
  - [2bfd7dc22f40]
  - [392e3834ce51]
  - [d6c2a08a37c0]
  - [2b413ca3dd94]
  - [5f20f35e28ba]
  - [a81dc787d3e0]
  - [9765bb600d2f]
  - [30b92d17011e]
  - [688f92e3950f]
  - [a9d2c788b45b]
  - [8d6eaff70bf5]
  - [e33e027a75b7]
  - [03ec92482e2c]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.31.v2101
changelog:
  - mm: fix a race during THP splitting (Huang Ying) [bug:156904]
  - NETSWIFT: txgbe: update the driver to 1.3.2 (luoqing) [task:92912]
  - NETSWIFT: txgbe: fix compile in linux 3.10 (mengyuanlou) [task:92912]
  - NETSWIFT: txgbe: ADD: add flash unlock when upgrade image (mengyuanlou) [task:92912]
  - NETSWIFT: txgbe: FIX: fix some kr flow (mengyuanlou) [task:92912]
  - NETSWIFT: txgbe: fix bug when 1820 is in 1G sfp speed mode, link partner (linglingzhang) [task:92912]
  - NETSWIFT: txgbe: add support for oem ssid and svid (linglingzhang) [task:92912]
  - NETSWIFT: txgbe: add pcie recover switch (zhengzhenpeng) [task:92912]
  - NETSWIFT: txgbe: fix pcie recover bugs (zhengzhenpeng) [task:92912]
  - NETSWIFT: ngbe: update the driver to 1.2.2 (luoqing) [task:92912]
  - NETSWIFT :ngbe: ADD : add yt 101 mode support (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: FIX : fix compile in ubuntu 21.10 (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: busfix linkspeed setup failed when link is down (zhengzhenpeng) [task:92912]
  - NETSWIFT :ngbe: ADD-add-link-retry-switch-to-configure (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: add support for oem ssid and svid (linglingzhang) [task:92912]
  - NETSWIFT :ngbe: ADD : add yt8531s id support (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: read flash from flash only in phy init (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: ADD : add retry use an err bit (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: CH : use sw configure efuse (mengyuanlou) [task:92912]
  - NETSWIFT :ngbe: add pcie recover switch (zhengzhenpeng) [task:92912]
  - NETSWIFT :ngbe: fix pcie recover bugs (zhengzhenpeng) [task:92912]
  - NETSWIFT :ngbe: fix phy set to force 100M autoneg off with partner (zhengzhenpeng) [task:92912]
  - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (Szymon Heidrich) [bug:157174] {CVE-2023-23559}
  - security/kysec: fix possible memory leak in kysec_hash_sha256() (yangzhao) [task:126288]
  - security/kysec: fix possible NULL pointer in kysec_get_real_task() (yangzhao) [task:126285]
  - security/kysec: fix unnecessary inspection in kysec_hash_sync_label_unknown() (yangzhao) [task:126286]
  - security/kysec: fix possible NULL pointer in auth_func() (yangzhao) [task:126284]
  - security/kysec: fix possible NULL pointer in SM3_final() (yangzhao) [task:126283]
  - security/kysec: fix bug with can't get the command real uid in overlay env (yangzhao) [bug:149033]
  - security/kysec: optimize kysec thread waiting mode by wait_event (yangzhao) [task:110527]
  - security/kysec: fix undefined-behaviour in SM3_CF (zhubing) [bug:124049]
  - security/kysec: use msleep_interruptible() instead of msleep() (yangzhao) [task:131471]
  - kysec: fix potential out-of-bounds access issues of name (Jackie Liu) [task:94933]
  - kysec: Remove unnecessary zeroing (Jackie Liu) [task:94933]
  - kysec: exit the thread when kysec is closed (Jackie Liu) [task:94933]
  - security/kysec: fix panic when 3adm opened and kysec disabled (yangzhao) [bug:124729]
  - security/kysec: remove unused variables in kysec_task_kill() (yangzhao) [task:94083]
  - security/kysec: fix bug with .viminfo is set to readonly label (yangzhao) [bug:120931]
  - security/kysec: allow rsync to inherit trusted lable (huanfuxi) [bug:113477]
  - security/kysec: optimize kysec module code (yangzhao) [task:83026]
  - security/kysec: modify inode security mutex to spinlock (yangzhao) [task:83026]
  - security/kysec: implementation of exectl func in bprm_check hook (yangzhao) [task:83026]
  - security/kysec: allow killed by itself in kysec_task_kill() (yangzhao)
  - security/kysec: remove script checking in kysec_task_kill() (yangzhao) [bug:119471]
  - security/kysec: fix bug with can't notify user when the protected file renamed (yangzhao) [bug:69309]
  - security/kysec: solve the problem of multiple bullet frame authentication for the same program networking (yangzhao) [bug:94015]
  - security/kysec: fix bug with ppro status got error when kysec disabled (yangzhao) [bug:99704]
  - security/kysec: Directory recursive traversal is adjusted to a non-recursive traversal (chengang) [bug:151725]
  - MUCSE: PCI: Add ACS quirk for Mucse N10 series (Yibo Dong) [task:121494]
  - md-raid10: fix KASAN warning (Mikulas Patocka) [task:128226]
  - md/raid10: Remove unnecessary rcu_dereference in raid10_handle_discard (Xiao Ni) [task:128226]
  - md/raid10: improve discard request for far layout (Xiao Ni) [task:128226]
  - md/raid10: improve raid10 discard request (Xiao Ni) [task:128226]
  - md/raid10: pull the code that wait for blocked dev into one function (Xiao Ni) [task:128226]
  - md/raid10: extend r10bio devs to raid disks (Xiao Ni) [task:128226]
  - md: add md_submit_discard_bio() for submitting discard bio (Xiao Ni) [task:128226]
  - net: ieee802154: handle iftypes as u32 (Alexander Aring) [task:131823]
  - netfilter: remove BUG_ON() after skb_header_pointer() (Pablo Neira Ayuso) [bug:153351]
  - skbuff: micro-optimize {,__}skb_header_pointer() (Alexander Lobakin) [bug:153351]
  - skbuff: make __skb_header_pointer()'s data argument const (Alexander Lobakin) [bug:153351]
  - net: bonding: Add support for IPV6 ns/na to balance-alb/balance-tlb mode (Sun Shouxin) [task:131515]
  - net: sched: disallow noqueue for qdisc classes (Frederick Lawler) {CVE-2022-47929}
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu) {CVE-2023-0394}
  - net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim) {CVE-2023-23454}
  - net: sched: atm: dont intepret cls results when asked to drop (Jamal Hadi Salim) {CVE-2023-23455}
  - fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers)
  - writeback: Drop I_DIRTY_TIME_EXPIRE (Jan Kara)
  - NETSWIFT: txgbe: Fix skb list corruption on Power systems (mengyuanlou) [task:50860]
  - xfs: move XFS_AG_BTREE_CMP_FORMAT_STR mappings to libxfs (Darrick J. Wong) [task:82242]
  - xfs: fix symbolic enum printing in ftrace output (Darrick J. Wong) [task:82242]
  - xfs: bulkstat should copy lastip whenever userspace supplies one (Darrick J. Wong) [task:82242]
  - xfs: fix super block buf log item UAF during force shutdown (Guo Xuenan) [task:124686]
  - swiotlb: skip swiotlb_bounce when orig_addr is zero (Liu Shixin) [task:99634, task:155312]
  - Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (Linus Torvalds) [bug:112032] {CVE-2022-0854}
  - swiotlb: fix info leak with DMA_FROM_DEVICE (Halil Pasic) [bug:112032] {CVE-2022-0854}
  - Bluetooth: check for zapped sk before connecting (Archie Pusaka) [task:129604]
  - security/kysec: fix bug with NULL pointer in kysec_free_sb (yangzhao) [task:131145]
  - xfs: don't set bmapi total block req where minleft is (Brian Foster) [bug:128797]
  - xfs: use a struct iomap in xfs_writepage_ctx (Christoph Hellwig) [task:57649]
  - xfs: remove the truncate short cut in xfs_map_blocks (Christoph Hellwig) [task:57649]
  - xfs: make xfs_bmbt_to_iomap more useful (Christoph Hellwig) [task:57649]
  - xfs: simplify xfs_chain_bio (Christoph Hellwig) [task:57649]
  - xfs: also truncate holes covered by COW blocks (Christoph Hellwig) [task:57649]
  - xfs: move xfs_iomap_write_allocate to xfs_aops.c (Christoph Hellwig) [task:57649]
  - xfs: move stat accounting to xfs_bmapi_convert_delalloc (Christoph Hellwig) [task:57649]
  - xfs: remove the io_type field from the writeback context and ioend (Christoph Hellwig) [task:57649]
  - xfs: remove superfluous writeback mapping eof trimming (Brian Foster) [task:57649]
  - xfs: remove XFS_IO_INVALID (Christoph Hellwig) [task:57649]
  - xfs: move transaction handling to xfs_bmapi_convert_delalloc (Christoph Hellwig) [task:57649]
  - xfs: split XFS_BMAPI_DELALLOC handling from xfs_bmapi_write (Christoph Hellwig) [task:57649]
  - xfs: factor out two helpers from xfs_bmapi_write (Christoph Hellwig) [task:57649]
  - xfs: simplify the xfs_bmap_btree_to_extents calling conventions (Christoph Hellwig) [task:57649]
  - nl80211: validate key indexes for cfg80211_registered_device (Anant Thazhemadam) [task:128929]
  - drm/vmwgfx: Validate the box size for the snooped cursor (Zack Rusin) [bug:155757] {CVE-2022-36280}
  - binder: validate alloc->mm in ->mmap() handler (Carlos Llamas) [bug:155767]
  - binder: fix alloc->vma_vm_mm null-ptr dereference (Carlos Llamas) [bug:155767]
  - android: binder: fix lockdep check on clearing vma (Liam Howlett) [bug:155767]
  - binder_alloc: add missing mmap_lock calls when using the VMA (Liam Howlett) [bug:155767]
  - android: binder: stop saving a pointer to the VMA (Liam R. Howlett) [bug:155767] {CVE-2023-20928}
  - mm: add vma_lookup(), update find_vma_intersection() comments (Liam Howlett) [bug:155767]
  - i915_vma: Rename vma_lookup to i915_vma_lookup (Liam Howlett) [bug:155767]
  - drm/nouveau/mmu: add more general vmm free/node handling functions (Ben Skeggs) [bug:155765] {CVE-2023-0030}
  - mm, oom: do not trigger out_of_memory from the #PF (Michal Hocko) [bug:155771] {CVE-2023-0047}
  - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Vasily Averin) [bug:155771]
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang) [bug:153851] {CVE-2022-3424}
  - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock (Jakub Sitnicki) [bug:153856] {CVE-2022-4129}
  - l2tp: Serialize access to sk_user_data with sk_callback_lock (Jakub Sitnicki) [bug:153856] {CVE-2022-4129}
  - net: fix a concurrency bug in l2tp_tunnel_register() (Gong, Sishuai) [bug:153856]
  - nvmet: use IOCB_NOWAIT only if the filesystem supports it (Maurizio Lombardi) [task:82241, task:127939]
  - nvmet: fix building bvec from sg list (Ming Lei) [task:82241, task:127939]
  - nvmet: use IOCB_NOWAIT for file-ns buffered I/O (Chaitanya Kulkarni) [task:82241, task:127939]
  - xen/netback: don't call kfree_skb() with interrupts disabled (Juergen Gross) {CVE-2022-42328, CVE-2022-42329}
  - hv_netvsc: Add check for kvmalloc_array (Jiasheng Jiang) {CVE-2022-3107}
  - drm/amdkfd: Check for null pointer after calling kmemdup (Jiasheng Jiang) {CVE-2022-3108}
  - power: supply: wm8350-power: Add missing free in free_charger_irq (Jiasheng Jiang) {CVE-2022-3111}
  - drm: mali-dp: potential dereference of null pointer (Jiasheng Jiang) {CVE-2022-3115}
  - drm/mali: Convert to using __drm_atomic_helper_crtc_reset() for reset. (Maarten Lankhorst)
  - RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver (Xi Wang) [task:127086]
  - RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver (Xi Wang) [task:127086]
  - net/packet: rx_owner_map depends on pg_vec (Willem de Bruijn) [task:126791]
  - xfs: properly serialise fallocate against AIO+DIO (Dave Chinner) [task:82242]
  - iomap: Fix negative assignment to unsigned sis->pages in iomap_swapfile_activate (Ritesh Harjani) [task:82242]
  - mm/swap: consider max pages in iomap_swapfile_add_extent (Xu Yu) [task:82242]
  - xen/netback: fix build warning (Juergen Gross) [bug:152391]
  - xen/netback: Ensure protocol headers don't fall in the non-linear area (Ross Lagerwall) [bug:152391] {CVE-2022-3643}
  - config: remove pks and tos configuartion files (huanfuxi) [task:126572]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.32.v2101
changelog:
  - Revert "txgbe: bulk free SKBs during TX completion cleanup cycle" (Zhengyuan Liu)
  - Revert "x86/bugs: Flush IBP in ib_prctl_set()" (Zhengyuan Liu)
  - Revert "net: sched: fix race condition in qdisc_graft()" (Zhengyuan Liu)
  - md/raid10: initialize r10_bio->read_slot before use. (Kevin Vigor) [task:136746]
  - net: sched: fix race condition in qdisc_graft() (Eric Dumazet) [bug:157192] {CVE-2023-0590}
  - x86/bugs: Flush IBP in ib_prctl_set() (Rodrigo Branco) {CVE-2023-0045}
  - txgbe: bulk free SKBs during TX completion cleanup cycle (weirongguang) [task:50860]
  - compile-and-chkabi.sh: fix the calculation of ncpus (Shida Zhang) [task:129759]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.33.v2101
changelog:
  - security/selinux: fix bounded_transition failed problem (mengdehui) [bug:161836]
  - inotify: show inotify mask flags in proc fdinfo (Amir Goldstein) [bug:157782]
  - block: adjust the position of the code section (zhanggenjian) [task:122387]
  - Revert "Revert "txgbe: bulk free SKBs during TX completion cleanup cycle"" (Jiangshan Yi)
  - Revert "Revert "x86/bugs: Flush IBP in ib_prctl_set()"" (Jiangshan Yi)
  - Revert "Revert "net: sched: fix race condition in qdisc_graft()"" (Jiangshan Yi)
  - crypto: ccp - Change a message to reflect status instead of failure (Hook, Gary) [task:136929]
  - x86/cpufreq: add CONFIG_CPU_FREQ_GOV_SCHEDUTIL (tianyu) [bug:161979]
  - sched/rt: pick_next_rt_entity(): check list_entry (Pietro Borrello) [bug:161115] {CVE-2023-1077}
  - sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity() (Dietmar Eggemann) [bug:161115]
  - net/ulp: prevent ULP without clone op from entering the LISTEN status (Paolo Abeni) [bug:161093] {CVE-2023-0461}
  - HID: asus: use spinlock to safely schedule workers (Pietro Borrello) [task:138519, bug:161140] {CVE-2023-1079}
  - HID: asus: use spinlock to protect concurrent accesses (Pietro Borrello) [task:138519, bug:161140]
  - HID: asus: Remove check for same LED brightness on set (Luke D. Jones) [task:138519, bug:161140]
  - net: mpls: fix stale pointer if allocation fails during device rename (Jakub Kicinski) [bug:161097] {CVE-2023-26545}
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (Duoming Zhou) [bug:161144] {CVE-2023-1118}
  - tap: tap_open(): correctly initialize socket uid (Pietro Borrello) [bug:161111] {CVE-2023-1076}
  - tun: tun_chr_open(): correctly initialize socket uid (Pietro Borrello) [bug:161111] {CVE-2023-1076}
  - net: add sock_init_data_uid() (Pietro Borrello) [bug:161111]
  - sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner) [bug:161106] {CVE-2023-1074}
  - HID: check empty report_list in hid_validate_values() (Pietro Borrello) [bug:161102] {CVE-2023-1073}
  - nvme-fcloop: refactor to enable target to host LS (James Smart) [task:62595, task:133366]
  - nvme-fc and nvmet-fc: revise LLDD api for LS reception and LS request (James Smart) [task:62595, task:133366]
  - nvmet-fc: add transport discovery change event callback support (James Smart) [task:62595, task:133366]
  - nvmet: add transport discovery change op (James Smart) [task:62595, task:133366]
  - nvmet: protect discovery change log event list iteration (Sagi Grimberg) [task:62595, task:133366]
  - nvmet: enable Discovery Controller AENs (Jay Sternberg) [task:62595, task:133366]
  - nvmet: allow host connect even if no allowed subsystems are exported (Sagi Grimberg) [task:62595, task:133366]
  - nvmet: add defines for discovery change async events (Jay Sternberg) [task:62595, task:133366]
  - nvmet: change aen mask functions to use bit numbers (Jay Sternberg) [task:62595, task:133366]
  - nvmet: provide aen bit functions for multiple controller types (Jay Sternberg) [task:62595, task:133366]
  - nvmet_fc: support target port removal with nvmet layer (James Smart) [task:62595, task:133366]
  - security: solve slab-out-of-bounds problem when registering lsm in modules (yangzhao) [task:136417]
  - OPENEULER: blk-throtl: fix race in io dispatching (Yu Kuai) [task:133418]
  - NETSWIFT: txgbe: set release version 1.3.3 (Juxia He) [task:130764]
  - NETSWIFT: txgbe: UP update compile in linux 5.18.1 (mengyuanlou) [task:130764]
  - NETSWIFT: txgbe: Fix: fix compile error in loongson(mips64) (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: Fix: fix bug that vf promisc not right (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: add lanrst to tx timeout / clean tx irq flow (zhenpengzheng) [task:130764]
  - NETSWIFT: txgbe: MODIFY: vf do not make its own receice-hash rules (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: Fix: fix the bug that ip link set vf status not right (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: FIX: fix the bug that vf receice hash rule not work (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: Remove: remove VF packets count in PF (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: ADD: add the interface to show and set the vf link state (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: 1.Fix ethtool intr_test trigger interrupt failed 2.Fix ethtool diag_test run loopback test failed after disabling sriov (wenduanqiang) [task:130764]
  - NETSWIFT: txgbe: add print aer status to disable pcie master flow (zhenpengzheng) [task:130764]
  - NETSWIFT: txgbe: remove INT_ERR from pcie recover flow (zhenpengzheng) [task:130764]
  - NETSWIFT: txgbe: FIX: ethtool -s 1000M autoneg in 1G sfp and del repeated multicast (linyuexie) [task:130764]
  - NETSWIFT: txgbe: FIX: ethtool -s speed 1000 autoneg on/off (linyuexie) [task:130764]
  - NETSWIFT: txgbe: fix aer status not print out when TXGBE_RECOVER_CHECK set (zhenpengzheng) [task:130764]
  - NETSWIFT: txgbe: FIX: fix echo 1 num_sriovs cause pending (Mengyuan Lou) [task:130764]
  - NETSWIFT: txgbe: Fix: do not clear vxlan port reg when set rx_csum off (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: FIX: make kylin not to close flow dir (Mengyuan Lou) [task:130764]
  - NETSWIFT: txgbe: ADD: add tx_ring check in txgbe_xmit_frame() (Mengyuan Lou) [task:130764]
  - NETSWIFT: txgbe: ADD:add ethtool -S get tx multicast braoadcast count (linyuexie) [task:130764]
  - NETSWIFT: txgbe: ADD: ethtool set autoneg on/off in 1000M speed (linyuexie) [task:130764]
  - NETSWIFT: txgbe: add pcie aer status print and regroup TXGBE_PCIE_RECOVER macro (zhenpengzheng) [task:130764]
  - NETSWIFT: txgbe: FIX: fix the bug that The number of RSS can exceed the number of cpus (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: ADD: ethtool show and set lldp (linyuexie) [task:130764]
  - NETSWIFT: txgbe: add TXGBE_RECOVER_CHECK and TXGBE_DIS_COMP_TIMEOUT (zhenpengzheng) [task:130764]
  - NETSWIFT: txgbe: sync maco from configure to kcompat.h (mengyuanlou) [task:130764]
  - NETSWIFT: txgbe: FIX: get lldp status issue (linyuexie) [task:130764]
  - NETSWIFT: txgbe: ADD: ethtool --show-priv-flags show lldp status (linyuexie) [task:130764]
  - NETSWIFT: txgbe: sync maco from configure to kcompat.h (Mengyuan Lou) [task:130764]
  - NETSWIFT: txgbe: FIX warning:Delete two unused variables (root) [task:130764]
  - NETSWIFT: txgbe: Fix: fix fiber to copper sfp module always link up bug that actually been down (wenduanqiang) [task:130764]
  - NETSWIFT: txgbe: FIX: ethtool -f xxx only support upgrade once (zhongxiangji) [task:130764]
  - NETSWIFT: txgbe: FIX：VT mode must be set before sriov enable (mengyuanlou) [task:130764]
  - NETSWIFT: txgbe: FIX: fix open/close notify sleep to long and read wrong buffer (mengyuanlou) [task:130764]
  - NETSWIFT: txgbe: add inspur oem ssid 0x0085/0x0075/0x0084 support for led control (wenduanqiang) [task:130764]
  - NETSWIFT: txgbe: FIX: fix ethtool link mode isn't correct in fiber mode (wenduanqiang) [task:130764]
  - NETSWIFT: txgbe: FIX: fix compile when DISABLE_PACKET_SPLIT open (mengyuanlou) [task:130764]
  - NETSWIFT: txgbe: RM: remove DEBUGFUNC (mengyuanlou) [task:130764]
  - NETSWIFT: txgbe: RM: remove SIMULATION_DEBUG (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: update release note for ngbe-1.2.3 (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: UP update compile in linux 5.18.1 (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: add NGBE_RECOVER_CHECK and NGBE_DIS_COMP_TIMEOUT (zhenpengzheng) [task:130764]
  - NETSWIFT: ngbe: FIX fix ethtool f upgrade image not to check chip ve (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: Fix: compile err about ethtool marco in some OS (wenduanqiang) [task:130764]
  - NETSWIFT: ngbe: FIX: ethtool -f xxx only support upgrade once (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: Fix: ubuntu 16.10 compile error, fiber linkdown advertise mode err (wenduanqiang) [task:130764]
  - NETSWIFT: ngbe: FIX: fix ethtool link mode isn't correct in fiber mode (wenduanqiang) [task:130764]
  - NETSWIFT: ngbe: FIX: probe print_info all ports display "eth0" (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: add pcie aer configuration space print info before pcie recovery (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: FIX: unload/load no wait , lan0 internal phy may hw reset failed (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: modify some code to obey Linux C-coding style (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: add spinlock protection on yt phy ext registers accessing (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: FIX: fix ngbe_gphy_wait_mdio_on return (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: FIX: fix add yt phy sgmii2rgmii mode (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: reset ethtool_get_setting back to previous version (wenduanqiang) [task:130764]
  - NETSWIFT: ngbe: ADD: add yt phy support sgmii2rgmii mode (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: turn off fiber auto sensing and set 1000BX manually to avoid link to 100M occationally in yt8521/8531 fiber mode (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: add support for switching speed mode between autoneg and force 1G in marvell88e1512/yt8521/yt8531 phy sfi mode by using ethtool (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: FIX: fix ethtool link mode isn't correct when using fiber mode (wenduanqiang) [task:130764]
  - NETSWIFT: ngbe: FIX: fix marverll copper change speed has not ints again (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: add support on marvell/yt8521 1000base-x mode autoneg (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: if marvell mix mode, driver will read phy mode from flash instead of register to workaround pxe driver override phy mode problem (linglingzhang) [task:130764]
  - NETSWIFT: ngbe: RM: remove some unuse log (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: RM: remove zte phy code (mengyuanlou) [task:130764]
  - NETSWIFT: ngbe: FIX: fix marverll copper change speed has not ints (mengyuanlou) [task:130764]
  - net: xdp: allow generic and driver XDP on one interface (Jakub Kicinski) [bug:156630]
  - xdp: Provide extack messages when prog attachment failed (Maciej Fijalkowski) [bug:156630]
  - blk-mq: remove WARN_ON(!q->elevator) from blk_mq_sched_free_requests (Ming Lei) [task:122387]
  - xfs: remove the XFS_IOC_{ALLOC,FREE}SP* definitions (Darrick J. Wong) [task:128735]
  - xfs: kill the XFS_IOC_{ALLOC,FREE}SP* ioctls (Darrick J. Wong) [task:128735]
  - fs: add generic UNRESVSP and ZERO_RANGE ioctl handlers (Christoph Hellwig) [task:128735]
  - xfs: don't implement XFS_IOC_RESVSP / XFS_IOC_RESVSP64 (Christoph Hellwig) [task:128735]
  - block: free sched's request pool in blk_cleanup_queue (Ming Lei) [task:122387] {CVE-2019-25044}
  - block: move blk_exit_queue into __blk_release_queue (Ming Lei) [task:122387] {CVE-2019-25044}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.34.v2101
changelog:
  - rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer() (Paul E. McKenney)
  - PCI: pciehp: Fix the slot in BLINKINGON_STATE when Presence Detect Changed event occurred (weirongguang) [task:127145]
  - net: sch_generic: fix the missing new qdisc assignment bug (Yunsheng Lin) [task:145134]
  - x86/cpu: Load microcode during restore_processor_state() (Borislav Petkov) [bug:166218]
  - x86/speculation: Restore speculation related MSRs during S3 resume (Pawan Gupta) [bug:166218] {CVE-2023-1637}
  - RDMA/core: Don't infoleak GRH fields (Leon Romanovsky) [bug:166212] {CVE-2021-3923}
  - kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman) [bug:166205] {CVE-2023-1513}
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong) [bug:166188] {CVE-2023-28328}
  - tipc: set con sock in tipc_conn_alloc (Xin Long) [bug:166175] {CVE-2023-1382}
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (Zheng Wang) [bug:166225] {CVE-2023-1670}
  - ovl: fix use after free in struct ovl_aio_req (yangerkun) {CVE-2023-1252}
  - seq_buf: Fix overflow in seq_buf_putmem_hex() (Yun Zhou) [bug:166201] {CVE-2023-28772}
  - net/sched: tcindex: update imperfect hash filters respecting rcu (Pedro Tammela) [bug:164964] {CVE-2023-1281}
  - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() (Hangyu Hua) [task:142966] {CVE-2023-28466}
  - PCI: Equalize hotplug memory and io for occupied and empty slots (Jon Derrick) [task:134263]
  - tipc: fix NULL deref in tipc_link_xmit() (Hoang Le) [bug:166183] {CVE-2023-1390}
  - media: dvb-core: Fix UAF due to refcount races at releasing (Takashi Iwai) [bug:164041] {CVE-2022-41218}
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry (Zheng Wang) [bug:164044] {CVE-2022-3707}
  - ntfs: fix out-of-bounds read in ntfs_attr_find() (Hawkins Jiawei) [bug:164058] {CVE-2023-26607}
  - ntfs: fix use-after-free in ntfs_ucsncmp() (ChenXiaoSong) [bug:164058]
  - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function (Miaoqian Lin) [bug:164062] {CVE-2023-23000}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.35.v2101
changelog:
  - ext4: fix use-after-free in ext4_xattr_set_entry (Baokun Li) [bug:172373] {CVE-2023-2513}
  - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (Baokun Li) [bug:172373]
  - REDHAT: mm/memcg: Free percpu stats memory of dying memcg's (Waiman Long) [bug:158690, task:139197]
  - xfs: verify buffer contents when we skip log replay (Darrick J. Wong) [bug:170280] {CVE-2023-2124}
  - Revert "blk-mq-sched: Fix blk_mq_sched_free_tags() build warning" (zhanggenjian) [task:151750]
  - security/selinux: use LSM stack API in setsecurity (penghuaihe) [task:151838]
  - netfilter: nf_tables: deactivate anonymous set from preparation phase (Pablo Neira Ayuso) [task:152325] {CVE-2023-32233}
  - osinfo: Converting memory size to GB from KB (Jackie Liu)
  - netrom: Fix use-after-free caused by accept on already connected socket (Hyunwoo Kim) [bug:172362] {CVE-2023-32269}
  - net: qcom/emac: Fix use after free bug in emac_remove due to race condition (Zheng Wang) [bug:172377, bug:172369] {CVE-2023-33203, CVE-2023-2483}
  - sctp: leave the err path free in sctp_stream_init to sctp_stream_free (Xin Long) [bug:170287] {CVE-2023-2177}
  - sctp: fix err handling of stream initialization (Marcelo Ricardo Leitner) [bug:170287]
  - sctp: fix memleak on err handling of stream initialization (Marcelo Ricardo Leitner) [bug:170287]
  - net: sctp: Fix negotiation of the number of data streams. (David Laight) [bug:170287]
  - sctp: convert to genradix (Kent Overstreet) [bug:170287]
  - generic radix trees (Kent Overstreet) [bug:170287]
  - OPENEULER: Revert "ipvlan: Modify the value of ipvlan modes" (Lu Wei) [task:151834]
  - scsi: dpt_i2o: Remove obsolete driver (Arnd Bergmann) [bug:170296] {CVE-2023-2007}
  - modify the changelog in CHANGELOG.md (Jiangshan Yi)
  - bpf: fix build without barrier_nospec (Jackie Liu) [task:151751, task:151749, task:151304]
  - blk-mq-sched: Fix blk_mq_sched_free_tags() build warning (zhanggenjian) [task:122387]
  - rpmbuild: delete meaningless changelog in kernel.spec (Jiangshan Yi) [task:150163]
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung) [bug:170041] {CVE-2023-2248}
  - tun: avoid double free in tun_free_netdev (George Kennedy) [task:147853] {CVE-2022-4744}
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang) [bug:170253] {CVE-2023-1989}
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang) [bug:170231] {CVE-2023-1380}
  - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (Zheng Wang) [bug:170241] {CVE-2023-1855}
  - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition (Zheng Wang) [bug:170245] {CVE-2023-1859}
  - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (Zheng Wang) [bug:170258] {CVE-2023-1990}
  - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (Zheng Wang) [bug:170264] {CVE-2023-30772}
  - bluetooth: Perform careful capability checks in hci_sock_ioctl() (Ruihan Li) [bug:170267] {CVE-2023-2002}
  - uaccess: Add speculation barrier to copy_from_user() (Dave Hansen) [bug:170275] {CVE-2023-0459}
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (Wei Chen) [bug:170291] {CVE-2023-2194}
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer) [bug:170300] {CVE-2023-2269}
  - prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman) [bug:170304] {CVE-2023-0458}
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Mike Christie) [bug:170271] {CVE-2023-2162}
  - Makefile: Use .sourceversion to generate SOURCE_VERSION (Jackie Liu)
  - sched/fair: Sanitize vruntime of entity being migrated (Vincent Guittot) [task:147537]
  - sched/fair: sanitize vruntime of entity being placed (Zhang Qiao) [task:147537]
  - kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai) [task:147538]
  - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Clement Lecigne) [task:147853] {CVE-2023-0266}
  - arm64: Do not forget syscall when starting a new thread. (Francis Laniel) [task:148824]
  - btrfs: fix race between quota disable and quota assign ioctls (Filipe Manana) [task:147853] {CVE-2023-1611}
  - btrfs: qgroup: remove one-time use variables for quota_root checks (Marcos Paulo de Souza) [task:147853]
  - Fix double fget() in vhost_net_set_backend() (Al Viro) [task:147853] {CVE-2023-1838}
  - binder: Address corner cases in deferred copy and fixup (Alessandro Astone) [bug:161123] {CVE-2023-20938}
  - binder: fix pointer cast warning (Arnd Bergmann) [bug:161123] {CVE-2023-20938}
  - binder: defer copies of pre-patched txn data (Todd Kjos) [bug:161123] {CVE-2023-20938}
  - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 (Alessandro Astone) [bug:161123] {CVE-2023-20938}
  - binder: read pre-translated fds from sender buffer (Todd Kjos) [bug:161123] {CVE-2023-20938}
  - binder: avoid potential data leakage when copying txn (Todd Kjos) [bug:161123] {CVE-2023-20938}
  - ANDROID: binder: sync binder driver with android-q-release (Jackie Liu)
  - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Salvatore Bonaccorso) [bug:161148] {CVE-2022-27672}
  - x86/speculation: Identify processors vulnerable to SMT RSB predictions (Tom Lendacky) [bug:161148] {CVE-2022-27672}
  - x86/bugs: Report AMD retbleed vulnerability (Alexandre Chartre) [bug:161148] {CVE-2022-27672}
  - usb: musb: Fix musb_gadget.c rxstate overflow bug (Robin Guo)
  - staging: vt6655: fix potential memory leak (Nam Cao)
  - scsi: ses: Handle enclosure with just a primary component gracefully (Jiri Kosina) [task:147721]
  - scsi: ses: Don't attach if enclosure has no components (James Bottomley) [task:147721]
  - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (Tomas Henzl) [task:147721]
  - scsi: ses: Fix possible desc_ptr out-of-bounds accesses (Tomas Henzl) [task:147721]
  - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (Tomas Henzl) [task:147721]
  - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (Tomas Henzl) [task:147721]
  - Revert "scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process" (Jackie Liu) [task:147721]
  - Revert "scsi: ses: Fix crash caused by kfree an invalid pointer" (Jackie Liu) [task:147721]
  - fs: move S_ISGID stripping into the vfs_*() helpers (Yang Xu) [task:141950]
  - fs: Add missing umask strip in vfs_tmpfile (Yang Xu) [task:141950]
  - fs: add mode_strip_sgid() helper (Yang Xu) [task:141950]
  - net/sched: Retire tcindex classifier (Jamal Hadi Salim) [bug:167507] {CVE-2023-1829}
  - xfs: don't expose internal symlink metadata buffers to the vfs (Darrick J. Wong) [bug:160702]
  - xfs: report corruption only as a regular error (Darrick J. Wong) [bug:160702]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.36.v2101
changelog:
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo) [bug:182682] {CVE-2023-35001}
  - ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) {CVE-2023-0386}
  - neighbour: delete neigh_lookup_nodev as not used (Leon Romanovsky) [bug:182698]
  - Remove DECnet support from kernel (Leon Romanovsky) [bug:182698] {CVE-2023-3338}
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng) [bug:181310] {CVE-2023-3090}
  - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition (Zheng Wang) [bug:179181] {CVE-2023-33288}
  - gfs2: Don't deref jdesc in evict (Bob Peterson) [bug:179231] {CVE-2023-3212}
  - swap: fix do_swap_page() race with swapoff (Miaohe Lin) [task:160285]
  - security/box: add check inode point when check box dir (mengdehui) [bug:179672]
  - config: remove CONFIG_SECURITY_BOX_ENABLED_ALWAYS (mengdehui) [bug:179672]
  - security/box: set BOX_ENABLED_ALWAYS default n (mengdehui) [bug:179672]
  - ixgbe: initialize the LED link active for LED blink support (Li ZhiGang) [task:146678]
  - PCI: pciehp: Cancel bringup sequence if card is not present (Rongguang Wei) [task:127145]
  - Revert pciehp driver patch added before to fix PDC event (weirongguang) [task:127145]
  - arm64/config: CONFIG_ARM_SPE_PMU=m (Jackie Liu)
  - can: j1939: j1939_session_destroy(): fix memory leak of skbs (Fedor Pchelkin) {CVE-2022-3633}
  - media: vivid: dev->bitmap_cap wasn't freed in all cases (Hans Verkuil) {CVE-2023-0615}
  - arm64/config: compile nvme and nvme_core as module (zhanggenjian) [task:136928]
  - rds: rds_rm_zerocopy_callback() use list_first_entry() (Pietro Borrello) [bug:164070] {CVE-2023-1078}
  - selinux: properly handle multiple messages in selinux_netlink_send() (Paul Moore) [task:119087] {CVE-2020-10751}
  - vc_screen: modify vcs_size() handling in vcs_read() (George Kennedy) [bug:182724]
  - vc_screen: don't clobber return value in vcs_read (Thomas Weißschuh) [bug:182724]
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (George Kennedy) [bug:182724] {CVE-2023-3567}
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai) {CVE-2023-31084}
  - NETSWIFT: txgbe: FIX: fix error when start and stop SRIOV (zhongxiangji) [task:160962]
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus) [bug:179189] {CVE-2023-34256}
  - fs: hfsplus: fix UAF issue in hfsplus_put_super (Dongliang Mu) [bug:179193] {CVE-2023-2985}
  - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (Zixuan Fu) [bug:179197] {CVE-2023-3111}
  - btrfs: check return value of btrfs_commit_transaction in relocation (Josef Bacik) [bug:179197]
  - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang) [bug:179202] {CVE-2023-3141}
  - fbcon: Check font dimension limits (Samuel Thibault) [bug:179208] {CVE-2023-3161}
  - firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye) [bug:179212] {CVE-2023-3159}
  - relayfs: fix out-of-bounds access in relay_file_read (Zhang Zhengming) [bug:179216] {CVE-2023-3268}
  - kernel/relay.c: fix read_pos error when multiple readers (Pengcheng Yang) [bug:179216]
  - media: saa7134: fix use after free bug in saa7134_finidev due to race condition (Zheng Wang) [bug:179219] {CVE-2023-35823}
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang) [bug:179223] {CVE-2023-35824}
  - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (Zheng Wang) [bug:179226] {CVE-2023-35828}
  - drm/msm/dpu: Add check for pstates (Jiasheng Jiang) [bug:179237] {CVE-2023-3220}
  - HID: intel_ish-hid: Add check for ishtp_dma_tx_map (Jiasheng Jiang) [bug:179240] {CVE-2023-3358}
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Hangyu Hua) [task:178770] {CVE-2023-35788}
  - RDMA/cma: Do not change route.addr.src_addr.ss_family (Jason Gunthorpe) [bug:170284] {CVE-2023-2176}
  - RDMA/core: Refactor rdma_bind_addr (Patrisious Haddad) [bug:170284] {CVE-2023-2176}
  - RDMA/cma: Do not change route.addr.src_addr outside state checks (Jason Gunthorpe) [bug:170284] {CVE-2023-2176}
  - RDMA/cma: Make the locking for automatic state transition more clear (Jason Gunthorpe) [bug:170284] {CVE-2023-2176}
  - Revert "RDMA/cma: Simplify rdma_resolve_addr() error flow" (Parav Pandit) [bug:170284] {CVE-2023-2176}
  - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests (Jason Gunthorpe) [bug:170284] {CVE-2023-2176}
  - nvme: force set affinity for nvme when config use_interrupt_adaptation (huhai) [task:155820]
  - genirq: Introduce irq_set_affinity_force() to force set interrupt affinity to CPUs (huhai) [task:155820]
  - fs/proc: task_mmu.c: don't read mapcount for migration entry (Yang Shi) [bug:166215] {CVE-2023-1582}
  - Makefile: Ignore debian and rpmbuild directory (Jackie Liu)
  - xfs: fix reflink source file racing with directio writes (Darrick J. Wong) [task:57649]
  - xfs: force writes to delalloc regions to unwritten (Darrick J. Wong) [task:57649]
  - cifs: improve read performance for page size 64KB & cache=strict & vers=2.1+ (Jones Syue) [bug:175721]
  - mips/config: enable support profiling (husong) [bug:136883]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.37.v2101
changelog:
  - ext4: Fix rec_len verify error (Shida Zhang) [task:165596]
  - ext4: fix potential htree corruption when growing large_dir directories (Theodore Ts'o)
  - ext4: fix potential htree index checksum corruption (Theodore Ts'o)


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.38.v2101
changelog:
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela) [bug:185228] {CVE-2023-3611}
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan) [bug:185232] {CVE-2023-3776}
  - net/sched: cls_u32: Fix reference counter leak leading to overflow (Lee Jones) [bug:185223] {CVE-2023-3609}
  - net: sched: remove NET_CLS_IND config option (Jiri Pirko) [bug:185223]
  - irqchip/gic-v3-its: Enable RESEND_WHEN_IN_PROGRESS for LPIs (James Gowans) [bug:184935]
  - genirq: Allow fasteoi handler to resend interrupts on concurrent handling (James Gowans) [bug:184935]
  - genirq: Expand doc for PENDING and REPLAY flags (James Gowans) [bug:184935]
  - genirq/PM: Introduce IRQCHIP_ENABLE_WAKEUP_ON_SUSPEND flag (Maulik Shah) [bug:184935]
  - genirq: Provide interrupt injection mechanism (Thomas Gleixner) [bug:184935]
  - arm64: Fix race condition on PG_dcache_clean in __sync_icache_dcache() (Catalin Marinas) [task:167147]
  - bpf, cpumap: Make sure kthread is running before map update returns (Hou Tao) [task:166213]
  - bpf: cpumap: Fix memory leak in cpu_map_update_elem (Pu Lehui) [task:166213]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.39.v2101
changelog:
  - resolve compiling error for previous rcu patches (lifangxu) [task:174840]
  - x86/cpu: Avoid cpuinfo-induced IPIing of idle CPUs (Paul E. McKenney) [bug:190769]
  - x86/cpu: Avoid cpuinfo-induced IPI pileups (Paul E. McKenney) [bug:190769]
  - x86/cpu: Disable frequency requests via aperfmperf IPI for nohz_full CPUs (Konstantin Khlebnikov) [bug:190769]
  - rcu: Provide rcu_irq_exit_check_preempt() (Thomas Gleixner) [bug:190769]
  - rcu: Provide rcu_irq_exit_preempt() (Thomas Gleixner) [bug:190769]
  - btrfs: don't use global reserve for chunk allocation (Josef Bacik) [task:169240]
  - btrfs: add new flushing states for the delayed refs rsv (Josef Bacik) [task:169240]
  - PCI: Allow VPD access for QLogic ISP2722 (Arun Easi) [bug:187138]
  - netfilter: nft_dynset: disallow object maps (Pablo Neira Ayuso) [bug:192894] {CVE-2023-4563}
  - mips/config: remove CONFIG_HZ_256 and keep default Timer frequency (wangxuewen) [bug:188806]
  - Loongson-3: Fix up loongson memcpy problem (liweihao) [bug:188804]
  - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() (Zixuan Fu) [task:162162] {CVE-2023-4459}
  - ext4: add check to prevent attempting to resize an fs with sparse_super2 (Josh Triplett) [task:171003, bug:190516]
  - vfs: check fd has read access in kernel_read_file_from_fd() (Matthew Wilcox (Oracle)) [bug:188663]
  - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long)
  - btrfs: allow btrfs_truncate_block() to fallback to nocow for data space reservation (Qu Wenruo) [bug:188623]
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim) [bug:189761] {CVE-2023-40283}
  - ext4: add reserved GDT blocks check (Zhang Yi) [bug:190521, task:171003]
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis) [bug:192919] {CVE-2023-4921}
  - dm: don't stop request queue after the dm device is suspended (Ming Lei) [task:172151]
  - dm rq: don't queue request to blk-mq during DM suspend (Ming Lei) [task:172151]
  - mm/memconrtol: Revert "REDHAT: mm/memcg: Free percpu stats memory of dying memcg's" (Jiangshan Yi) [bug:191720]
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic) [bug:192910] {CVE-2023-4623}
  - config/x86: add debug config support for xfstest (Shida Zhang) [bug:189811]
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis) [bug:189757] {CVE-2023-4128}
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis) [bug:189757] {CVE-2023-4128}
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis) [bug:189757] {CVE-2023-4128}
  - x86/tsc: Extend watchdog check exemption to 4-Sockets platform (Feng Tang) [task:188913]
  - x86/tsc: Disable clocksource watchdog for TSC on qualified platorms (Feng Tang) [task:188913]
  - x86/tsc: Add a timer to make sure TSC_adjust is always checked (Feng Tang) [task:188913]
  - x86/hpet: Use another crystalball to evaluate HPET usability (Thomas Gleixner) [task:188913]
  - x86/tsc: Add option to disable tsc clocksource watchdog (Juri Lelli) [task:188913]
  - x86/tsc: Respect tsc command line paraemeter for clocksource_tsc_early (Michael Zhivich)
  - selftests: forwarding: tc_actions: Use ncat instead of nc (Ido Schimmel) [task:166265]
  - act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [task:166265] {CVE-2022-4269}
  - net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [task:166265]
  - net/sched: act_mirred: refactor the handle of xmit (wenxu) [task:166265]
  - net: sched: don't expose action qstats to skb_tc_reinsert() (Vlad Buslov) [task:166265]
  - net: sched: extract qstats update code into functions (Vlad Buslov) [task:166265]
  - net: sched: protect against stack overflow in TC act_mirred (John Hurley) [task:166265]
  - net: sched: refactor reinsert action (John Hurley) [task:166265]
  - sched: fix warning of rq_cputimes (Jackie Liu)
  - x86/config: enable CONFIG_TCM_QLA2XXX=y (liubaolin) [task:173621]
  - net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan) [bug:186702] {CVE-2023-3812}
  - tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (Yunjian Wang) [task:122626]
  - mm/munlock: delete munlock_vma_pages_all(), allow oomreap (Hugh Dickins) [bug:163612, bug:188493, bug:188513]
  - ext4: fix bug_on ext4_mb_use_inode_pa (Baokun Li) [task:167485, task:162162]
  - backport-tools: add release-stable-kernel tool for SP1/SP2 (Jackie Liu)
  - package: Complete the changelog details of the SP1 kernel package (Jiangshan Yi) [task:165835, bug:186495]
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (Pablo Neira Ayuso) [bug:186690] {CVE-2023-3117}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.40.v2101
changelog:
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [task:177236] {CVE-2023-42753}
  - x86/KVM: Clean up host's steal time structure (Boris Ostrovsky) [task:68771]
  - x86/KVM: Make sure KVM_VCPU_FLUSH_TLB flag is not missed (Boris Ostrovsky) [task:68771]
  - xfs: check sb_meta_uuid for dabuf buffer recovery (Dave Chinner) [bug:194635]
  - Revert "NFS: Don't call generic_error_remove_page() while holding locks" (wolfgang huang) [bug:194658]
  - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma) [bug:189726] {CVE-2023-3772}
  - squashfs: fix xattr id and id lookup sanity checks (Phillip Lougher) [task:158827, bug:195777]
  - squashfs: add more sanity checks in id lookup (Phillip Lougher) [task:158034, bug:195777]
  - squashfs: add more sanity checks in xattr id lookup (Phillip Lougher) [task:158034, bug:195777]
  - squashfs: fix inode lookup sanity checks (Sean Nyekjaer) [task:158827, bug:195777]
  - squashfs: add more sanity checks in inode lookup (Phillip Lougher) [task:158034, bug:195777]
  - sched/rt: Optimize checking group RT scheduler constraints (Konstantin Khlebnikov) [task:173985]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.41.v2101
changelog:
  - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (xiaolinkui) [bug:195544]
  - Revert "block: move blk_exit_queue into __blk_release_queue" (zhanggenjian) [task:177423]
  - Revert "block: free sched's request pool in blk_cleanup_queue" (zhanggenjian) [task:177423]
  - Revert "blk-mq: remove WARN_ON(!q->elevator) from blk_mq_sched_free_requests" (zhanggenjian) [task:177423]
  - Revert "block: adjust the position of the code section" (zhanggenjian) [task:177423]
  - tpm: add TCM2.0 support in tpm_tis_spi (Li ZhiGang) [task:175234]
  - ipv6: do not leave garbage in rt->fib6_metrics (Eric Dumazet) [task:178045]
  - fs: jfs: fix possible NULL pointer dereference in dbFree() (Zixuan Fu) [bug:189765] {CVE-2023-4385}
  - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (Zixuan Fu) [bug:189769] {CVE-2023-4387}
  - cec-api: prevent leaking memory through hole in structure (Hans Verkuil) [task:157172, bug:197484] {CVE-2020-36766}
  - xfs: drop submit side trans alloc for append ioends (Brian Foster) [task:168909]
  - xfs: turn io_append_trans into an io_private void pointer (Christoph Hellwig) [task:168909]
  - xfs: refactor the ioend merging code (Christoph Hellwig) [task:168909]
  - xfs: simplify xfs_ioend_can_merge (Christoph Hellwig) [task:168909]
  - xfs: allow merging ioends over append boundaries (Christoph Hellwig) [task:168909]
  - xfs: merge adjacent io completions of the same type (Darrick J. Wong) [task:168909]
  - xfs: remove unused m_data_workqueue (Darrick J. Wong) [task:168909]
  - xfs: implement per-inode writeback completion queues (Darrick J. Wong) [task:168909]
  - netfilter: xt_u32: validate user space input (Wander Lairson Costa) [bug:197488] {CVE-2023-39192}
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [bug:197492] {CVE-2023-39193}
  - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma) [bug:197496] {CVE-2023-39194}
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) [bug:196022] {CVE-2023-4622}
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet) [bug:196026] {CVE-2023-42752}
  - net/sched: Retire rsvp classifier (Jamal Hadi Salim) [bug:196033] {CVE-2023-42755}
  - ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng) [task:177575] {CVE-2023-42754}
  - gmjstcm: delete SMO0768 from TCM1 spi device id (Li ZhiGang) [task:175749]
  - netfilter: nft_exthdr: Search chunks in SCTP packets only (Phil Sutter) [bug:192914]
  - netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian (Stephen Suryaputra) [bug:192914]
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) [bug:192914] {CVE-2023-4881}
  - netfilter: nft_exthdr: Fix for unsafe packet data read (Phil Sutter) [bug:192914]
  - netfilter: nft_exthdr: Support SCTP chunks (Phil Sutter) [bug:192914]
  - netfilter: nf_tables: add support for matching IPv4 options (Stephen Suryaputra) [bug:192914]
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Hyunwoo Kim) [task:176709] {CVE-2022-45887}
  - ext4: prevent partial update of the extent blocks (Zhang Yi) [task:167485]
  - ext4: check for inconsistent extents between index and leaf block (Zhang Yi) [task:167485]
  - ext4: check for out-of-order index extents in ext4_valid_extent_entries() (Zhang Yi) [task:167485]
  - ext4: flush s_error_work before journal destroy in ext4_fill_super (yangerkun) [task:167485]
  - ext4: fix e2fsprogs checksum failure for mounted filesystem (Jan Kara) [task:167485]
  - ext4: always panic when errors=panic is specified (Ye Bin) [task:167485]
  - ext4: fix ext4_error_err save negative errno into superblock (Ye Bin) [task:167485]
  - ext4: fix timer use-after-free on failed mount (Jan Kara) [task:167485]
  - ext4: remove set but not used variable 'es' in ext4_jbd2.c (Jason Yan) [task:167485]
  - ext4: remove set but not used variable 'es' (Jason Yan) [task:167485]
  - ext4: don't try to processed freed blocks until mballoc is initialized (Theodore Ts'o) [task:167485]
  - ext4: drop ext4_handle_dirty_super() (Jan Kara) [task:167485]
  - ext4: use sbi instead of EXT4_SB(sb) in ext4_update_super() (Jan Kara) [task:167485]
  - ext4: save error info to sb through journal if available (Jan Kara) [task:167485]
  - ext4: protect superblock modifications with a buffer lock (Jan Kara) [task:167485]
  - ext4: drop sync argument of ext4_commit_super() (Jan Kara) [task:167485]
  - ext4: combine ext4_handle_error() and save_error_info() (Jan Kara) [task:167485]
  - ext4: defer saving error info from atomic context (Jan Kara) [task:167485]
  - ext4: simplify ext4 error translation (Jan Kara) [task:167485]
  - ext4: move functions in super.c (Jan Kara) [task:167485]
  - ext4: make ext4_abort() use __ext4_error() (Jan Kara) [task:167485]
  - ext4: standardize error message in ext4_protect_reserved_inode() (Jan Kara) [task:167485]
  - ext4: save all error info in save_error_info() and drop ext4_set_errno() (Theodore Ts'o) [task:167485]
  - ext4: save the error code which triggered an ext4_error() in the superblock (Theodore Ts'o) [task:167485]
  - ext4: remove redundant sb checksum recomputation (Jan Kara) [task:167485]
  - ext4: add ext3 report error to userspace by netlink (lijinlin) [task:167485]
  - ext4: Fix not report exception message when mount with errors=continue (Ye Bin) [task:167485]
  - ext4: don't remount read-only with errors=continue on reboot (Jan Kara) [task:167485]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.42.v2101
changelog:
  - iommu/dma: Fix MSI reservation allocation (Marc Zyngier) [task:183064]
  - ipv6: Fix use of anycast address with loopback (David Ahern) [task:99622, task:183477]
  - ipv6: Create init helper for fib6_nh (user) [task:99622, task:183477]
  - of: overlay: kmemleak in dup_and_fixup_symbol_prop() (Frank Rowand) [task:183064]
  - kallsyms: fix KYLIN_UNEXPORT_SYMBOLS logic error in kallsyms_on_each_symbol (xuping) [task:121424]
  - ext4: fix check to prevent false positive report of incorrect used inodes (Zhang Yi) [bug:198263, bug:197767]
  - virtio_net: enable napi_tx by default (Willem de Bruijn) [task:180349]
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local (Lin Ma) [task:179856] {CVE-2023-3863}
  - nfc: llcp: simplify llcp_sock_connect() error paths (Krzysztof Kozlowski) [task:179856]
  - nfc: llcp: nullify llcp_sock->dev on connect() error paths (Krzysztof Kozlowski) [task:179856]
  - nfc: Fix to check for kmemdup failure (Aditya Pakki) [task:179856]
  - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE (Sean Christopherson) [task:182171]
  - KVM: fix overflow of zero page refcount with ksm running (Zhuang Yanying) [task:157172]
  - ravb: Fix use-after-free issue in ravb_tx_timeout_work() (Yoshihiro Shimoda) [task:181443] {CVE-2023-35827}
  - Revert "NFS: Don't interrupt file writeout due to fatal errors" (ChenXiaoSong) [task:198290]
  - char: pcmcia: remove all the drivers (Jiri Slaby) [task:177573] {CVE-2022-44033}
  - nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect (Krzysztof Kozlowski) [task:179318] {CVE-2021-38208}
  - media: mceusb: Use USB_DIR_IN in read request (Hongyu Xie) [task:179257] {CVE-2022-3903}
  - media: mceusb: fix control-message timeouts (Johan Hovold) [bug:150405]
  - iomap: Set all uptodate bits for an Uptodate page (Matthew Wilcox (Oracle)) [bug:197566]
  - iomap: Use kzalloc to allocate iomap_page (Matthew Wilcox (Oracle)) [bug:197566]
  - igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl) {CVE-2023-45871}
  - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) {CVE-2023-39189}
  - Revert "USB: core: Don't hold device lock while reading the "descriptors" sysfs file" (Hongyu Xie) [task:179861] {CVE-2023-37453}
  - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Hyunwoo Kim) [task:179858] {CVE-2022-45919}
  - x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD)) [task:179857] {CVE-2023-20593}
  - KVM: nVMX: add missing consistency checks for CR0 and CR4 (Paolo Bonzini) [task:179282] {CVE-2023-30456}
  - remove the lightnvm subsystem (Christoph Hellwig) [task:179254] {CVE-2022-2991}
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net (Hyunwoo Kim) [task:179859] {CVE-2022-45886}
  - ipv4: avoid using shared IP generator for connected sockets (Eric Dumazet) [task:179316, task:160493] {CVE-2020-36516}
  - USB: ene_usb6250: Allocate enough memory for full object (Kees Cook) [task:179903, task:166857] {CVE-2023-45862}
  - kabi_whitelist: remove fuse_xxx related symbol (Zhengyuan Liu) [task:179296, task:98376]
  - fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi) [task:179296, bug:112028] {CVE-2022-1011}
  - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng) {CVE-2023-31085}
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO (Lee, Chun-Yi) {CVE-2023-31083}
  - tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith) {CVE-2023-1206}
  - xen/netback: Fix buffer overrun triggered by unusual packet (Ross Lagerwall) {CVE-2023-34319}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.43.v2101
changelog:
  - net: sched: fix NULL pointer dereference in mq_attach (Zhengchao Shao) [task:183053]
  - objtool: Don't fail on missing symbol table (Josh Poimboeuf) [task:185741]
  - ext4: fix leaking sysfs kobject after failed mount (Eric Biggers)
  - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys (Dheeraj Kumar Srivastava) [task:166857, task:182934]
  - sch_netem: fix issues in netem_change() vs get_dist_table() (Eric Dumazet) [task:182934]
  - sch_netem: acquire qdisc lock in netem_change() (Eric Dumazet) [task:166857, task:182934]
  - netem: fix zero division in tabledist (Aleksandr Nogikh)
  - cgroup: Do not corrupt task iteration when rebinding subsystem (Xiu Jianfeng) [task:166857, task:182934]
  - cgroup: Make rebind_subsystems() disable v2 controllers all at once (Waiman Long)
  - OPENEULER: irqchip: gic-v3: Collection table support muti pages (wangwudi) [task:183007]
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (Yi Yang) [task:182946]
  - perf/core: Fix cgroup event list management (Namhyung Kim) [task:184204]
  - perf/core: Optimize perf_install_in_event() (Peter Zijlstra) [task:184204]
  - perf: Rework perf_event_exit_event() (Peter Zijlstra) [task:184204]
  - EULER: perf: Revert "perf: Paper over the hw.target problems" (Yang Jihong) [task:184204]
  - perf: Fix function pointer case (Peter Zijlstra) [task:184204]
  - perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong) [task:184204]
  - perf/core: Fix the same task check in perf_event_set_output (Kan Liang) [task:184204]
  - perf: Fix possible memleak in pmu_dev_alloc() (Chen Zhongjin) [task:184204]
  - perf/core: Fix address filter parser for multiple filters (Adrian Hunter) [task:184204]
  - perf: Fix list corruption in perf_cgroup_switch() (Song Liu) [task:184204]
  - perf/core: Avoid put_page() when GUP fails (Greg Thelen) [task:184204]
  - events: Reuse value read using READ_ONCE instead of re-reading it (Baptiste Lepers) [task:184204]
  - perf: Fix data race between pin_count increment/decrement (Marco Elver) [task:184204]
  - perf/core: Disable page faults when getting phys address (Jiri Olsa) [task:184204]
  - perf/ioctl: Add check for the sample_period value (Ravi Bangoria) [task:184204]
  - ipv6: Fix use of anycast address with loopback (David Ahern) [task:184541, task:183477]
  - ipv6: Create init helper for fib6_nh (David Ahern) [task:184541, task:183477]
  - net/ipv6: Do not reset nl_net in ip6_route_info_create (David Ahern) [task:184541, task:183477]
  - ipv6: Move setting default metric for routes (David Ahern) [task:184541, task:183477]
  - net: rtmsg_to_fib6_config() - use new style struct initializer instead of memset (Maciej Żenczykowski) [task:184541, task:183477]
  - Revert "ipv6: Create init helper for fib6_nh" (luoqing) [task:183477]
  - Revert "ipv6: Fix use of anycast address with loopback" (luoqing) [task:183477]
  - random: fix data race on crng_node_pool (Eric Biggers) [task:97875]
  - OPENEULER: xhci: fix USB xhci controller issue (Longfang Liu) [task:182993]
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (huhai) [task:184636]
  - xen/events: replace evtchn_rwlock with RCU (Juergen Gross) {CVE-2023-34324}
  - xen/events: don't unmask an event channel when an eoi is pending (Juergen Gross) [task:158827]
  - xen/events: don't use chip_data for legacy IRQs (Juergen Gross)
  - XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information. (Thomas Gleixner) [task:157358]
  - scsi: hisi_sas: Fix normally completed I/O analysed as failed (Xingui Yang) [task:182978]
  - drm/atomic-helper: Bump vblank timeout to 100 ms (Linus Walleij) [task:182959]
  - mm: disable kernelcore=mirror when no mirror memory (Ma Wupeng) [task:182939]
  - bpf: modify the limitation of BPF JIT programs from 128M to 1G (xiaolinkui) [bug:187461]
  - bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Lorenz Bauer)
  - arm64/bpf: don't allocate BPF JIT programs in module memory (Ard Biesheuvel)
  - mm, sl[aou]b: guarantee natural alignment for kmalloc(power-of-two) (Vlastimil Babka) [task:182892]
  - lib/stackdepot.c: fix global out-of-bounds in stack_slabs (Alexander Potapenko) [task:155707, task:183063]
  - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled (Zhipeng Xie) [task:104354]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.44.v2101
changelog:
  - net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues(). (Kuniyuki Iwashima) [task:188413]
  - config/mips: support zswap function (mengfanhui) [bug:210119]
  - security/selinux: Add selinux process security attributes (chengang) [task:192443]
  - KVM: arm64: Fix clean dcache when vcpu is 0 (zhanghao1) [task:186056]
  - config/zhaoxin: add features for ZHAOXIN KH40000 (lifangxu) [task:188929]
  - ZHAOXIN: Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform (leoliu-oc) [task:194099]
  - ZHAOXIN: Add support for Zhaoxin USB4 (leoliu-oc) [task:194098]
  - KVM: x86: Fix APIC page invalidation race (Eiichi Tsukata) [task:194096]
  - ZHAOXIN: Add support Zhaoxin GPIO pinctrl (leoliu-oc) [task:194094]
  - ZHAOXIN: crypto: x86/sm2 -add Zhaoxin SM2 algorithm implementation (leoliu-oc) [task:194093]
  - ZHAOXIN: cpufreq: ACPI: add ITMT support when CPPC enabled (leoliu-oc) [task:194092]
  - ZHAOXIN: Update Zhaoxin core temperature monitoring driver (leoliu-oc) [task:194091]
  - ZHAOXIN: Update Zhaoxin GMI SM4 Block Cipher algorithm driver (leoliu-oc) [task:194090]
  - ZHAOXIN: Update Zhaoxin GMI SM3 Secure Hash algorithm driver (leoliu-oc) [task:194090]
  - ZHAOXIN: drm/qxl: remove men_bus_offset set to 0 in qxl_ttm_io_mem_reserve (leoliu-oc) [task:194089]
  - xhci: guard accesses to ep_state in xhci_endpoint_reset() (Jonathan Bell) [task:194088]
  - ZHAOXIN: Log for Driver for Zhaoxin SM3 and SM4 algorithm (leoliu-oc) [task:194087]
  - ZHAOXIN: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm (leoliu-oc) [task:194087]
  - ZHAOXIN: Add support for Zhaoxin GMI SM3 Secure Hash algorithm (leoliu-oc) [task:194087]
  - ZHAOXIN: Fix coherent DMA writes disorder issue for Zhaoxin KH-40000 platform (leoliu-oc) [task:194086]
  - ZHAOXIN: Fix streaming DMA writes disorder issue for Zhaoxin KH-40000 platform (leoliu-oc) [task:194086]
  - sched/topology: fix the issue groups don't span domain->span for NUMA diameter > 2 (Barry Song) [task:194085]
  - ZHAOXIN: Add support for Zhaoxin I2C controller (leoliu-oc) [task:194083]
  - ZHAOXIN: Add MWAIT Cx support for Zhaoxin CPUs (leoliu-oc) [task:194079]
  - USB: Fix xhci event ring dequeue pointer ERDP update issue (Weitao Wang) [task:194078]
  - usb: host: xhci: Support running urb giveback in tasklet context (Suwan Kim) [task:194078]
  - usb: host: xhci: update event ring dequeue pointer on purpose (Peter Chen) [task:194078]
  - ZHAOXIN: Turning off Zhaoxin ahci controller runtime pm from sysfs (leoliu-oc) [task:194076]
  - cpufreq: ACPI: Add Zhaoxin/Centaur turbo boost control interface support (Tony W Wang-oc) [task:194075]
  - ZHAOXIN: HDAC: Update support for Zhaoxin NB HDAC codec (leoliu-oc) [task:194074]
  - ZHAOXIN: HDAC: Update support for Zhaoxin NB HDAC (leoliu-oc) [task:194074]
  - ZHAOXIN: x86/tsc: Make cur->adjusted values in package#1 to be the same (leoliu-oc) [task:194073]
  - ZHAOXIN: x86/perf: Update performance events support for more Zhaoxin CPU (leoliu-oc) [task:194072]
  - ZHAOXIN: ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability (leoliu-oc) [task:194071]
  - ata: libata: disallow dev-initiated LPM transitions to unsupported states (Niklas Cassel) [task:194071]
  - USB: Fix ehci infinite suspend-resume loop issue in zhaoxin (Weitao Wango) [task:194070]
  - xhci: avoid race between disable slot command and host runtime suspend (Mathias Nyman) [task:194069]
  - ZHAOXIN: rtc: Fix set RTC time delay 500ms on some Zhaoxin SOCs (leoliu-oc) [task:194068]
  - x86/perf/Add stepping check for ZXC (silviazhao) [task:194067]
  - ZHAOXIN: crypto: x86/crc32c-intel Exclude low performance CRC32C instruction CPUs (leoliu-oc) [task:194066]
  - ZHAOXIN: x86/cpu: Set low performance CRC32C flag on some Zhaoxin CPUs (LeoLiu-oc) [task:194066]
  - ZHAOXIN: x86/cpufeatures: Add low performance CRC32C instruction CPU feature (leoliu-oc) [task:194066]
  - ZHAOXIN: USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci (leoliu-oc) [task:194065]
  - x86/apic: Mask IOAPIC entries when disabling the local APIC (Tony W Wang-oc) [task:194064]
  - ZHAOXIN: Add support for Zhaoxin Serial ATA IDE. (leoliu-oc) [task:194063]
  - USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (Weitao Wang) [task:194062]
  - ZHAOXIN: Log for Add support for Zhaoxin HDAC and codec (leoliu-oc) [task:194061]
  - ALSA: hda: Add support of Zhaoxin controller (Tony W Wang-oc) [task:194061]
  - xhci: Add ZHAOXIN xHCI host U1/U2 feature support (Weitao Wang) [task:194060]
  - xhci: Show ZHAOXIN xHCI root hub speed correctly (Weitao Wang) [task:194059]
  - xhci: Fix TRB prefetch issue of ZHAOXIN hosts (Weitao Wang) [task:194058]
  - xhci: Fix resume issue of some ZHAOXIN hosts (Weitao Wang) [task:194057]
  - PCI: Add ACS quirk for Zhaoxin multi-function devices (Raymond Pang) [task:194056]
  - PCI: Add Zhaoxin Vendor ID (Raymond Pang) [task:194056]
  - x86/Kconfig: Drop vendor dependency for X86_UMIP (Tony W Wang-oc) [task:194055]
  - x86/Kconfig: Rename UMIP config parameter (Babu Moger) [task:194055]
  - x86/speculation/swapgs: Exclude Zhaoxin CPUs from SWAPGS vulnerability (Tony W Wang-oc) [task:194054]
  - x86/acpi/cstate: Optimize ARB_DISABLE on Centaur CPUs (Tony W Wang-oc) [task:194053]
  - x86/acpi/cstate: Add Zhaoxin processors support for cache flush policy in C3 (Tony W Wang-oc) [task:194053]
  - x86/power: Optimize C3 entry on Centaur CPUs (David Wang) [task:194053]
  - ACPI, x86: Improve Zhaoxin processors support for NONSTOP TSC (Tony W Wang-oc) [task:194052]
  - ACPI, x86: Add Zhaoxin processors support for NONSTOP TSC (Tony W Wang-oc) [task:194052]
  - ZHAOXIN: Log for Add support for Zhaoxin Processors (leoliu-oc) [task:194051]
  - x86/cpu/centaur: Add Centaur family >=7 CPUs initialization support (Tony W Wang-oc) [task:194051]
  - x86/cpu/centaur: Replace two-condition switch-case with an if statement (Tony W Wang-oc) [task:194051]
  - Input: add bounds checking to input_set_capability() (Jeff LaBundy) [task:162162] {CVE-2022-48619}
  - signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal (Eric W. Biederman)
  - vhost: use kzalloc() instead of kmalloc() followed by memset() (Prathu Baronia) [task:193171] {CVE-2024-0340}
  - iommu/vt-d: Fix agaw for a supported 48 bit guest address width (Saeed Mirzamohammadi) [task:194968]
  - smb: client: fix OOB in smbCalcSize() (Paulo Alcantara) [task:193171] {CVE-2023-6606}
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao) [task:193171] {CVE-2023-6932}
  - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg (Hyunwoo Kim) [task:193171] {CVE-2023-51779}
  - net/rose: Fix Use-After-Free in rose_ioctl (Hyunwoo Kim) [task:193171] {CVE-2023-51782}
  - appletalk: Fix Use-After-Free in atalk_ioctl (Hyunwoo Kim) [task:193171] {CVE-2023-51781}
  - atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim) [task:193171] {CVE-2023-51780}
  - crypto: cryptd - Protect per-CPU resource by disabling BH. (Sebastian Andrzej Siewior) [task:184972]
  - ext4: turning quotas off if mount failed after enable quotas (Baokun Li) [task:184977]
  - OPENEULER: x86/kprobes: Fix the error judgment for debug exceptions (Li Huafei) [task:184976]
  - ipmi_si: fix a memleak in try_smi_init() (Yi Yang) [task:184979]
  - quota: simplify drop_dquot_ref() (Baokun Li) [task:184966]
  - quota: fix dqput() to follow the guarantees dquot_srcu should provide (Baokun Li) [task:184966]
  - quota: add new helper dquot_active() (Baokun Li) [task:184966]
  - quota: rename dquot_active() to inode_quota_active() (Baokun Li) [task:184966]
  - quota: factor out dquot_write_dquot() (Baokun Li) [task:184966]
  - quota: add dqi_dirty_list description to comment of Dquot List Management (Chengguang Xu) [task:184966]
  - quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list (Chengguang Xu) [task:184966]
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua) [task:193171] {CVE-2023-7192}
  - sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa() (Dietmar Eggemann) [task:192348]
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan) [task:188430]
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Linus Torvalds)
  - blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" (Ming Lei)
  - net: add vlan_get_protocol_and_depth() helper (Eric Dumazet) [task:182970]
  - net: tap: check vlan with eth_type_vlan() method (Menglong Dong) [task:182970]
  - ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg) [task:188435]
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Järvinen) [task:188423]
  - loop: loop_set_status_from_info() check before assignment (Zhong Jinghua) [task:182968]
  - loop: Check for overflow while configuring loop (Siddh Raman Pant) [task:162162]
  - nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust) [task:184474]
  - nfsd4: kill warnings on testing stateids with mismatched clientids (J. Bruce Fields) [task:184474]
  - jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (Zhihao Cheng) [task:187896]
  - EULER: net: hns: fix wrong head when modify the tx feature when sending packets (Yonglong Liu) [task:182947]
  - net/packet: convert po->auxdata to an atomic flag (Eric Dumazet) [task:188433]
  - net/packet: convert po->origdev to an atomic flag (Eric Dumazet) [task:188434]
  - of: Fix modalias string generation (Miquel Raynal) [task:188428]
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima) [task:188425]
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Järvinen) [task:188424]
  - nvmet: nul-terminate the NQNs passed in the connect command (Christoph Hellwig) [task:189180] {CVE-2023-6121}
  - ipmi: fix SSIF not responding under certain cond. (Zhang Yuchen) [task:188418]
  - ipmi_ssif: Rename idle state and check (Corey Minyard) [task:188419]
  - sctp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima) [task:188412]
  - dccp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima) [task:188412]
  - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). (Kuniyuki Iwashima) [task:188412]
  - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). (Kuniyuki Iwashima) [task:188412]
  - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. (Kuniyuki Iwashima) [task:188414]
  - dm thin metadata: check fail_io before using data_sm (Li Lingfeng) [task:182982]
  - dm space maps: improve performance with inc/dec on ranges of blocks (Joe Thornber) [task:182982]
  - dm: don't lock fs when the map is NULL during suspend or resume (Li Lingfeng) [task:182983]
  - dm: don't lock fs when the map is NULL in process of resume (Li Lingfeng) [task:182983]
  - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (Jie Wang) [task:182948]
  - drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer (Lu Yao) [task:184449]
  - ext4: forbid commit inconsistent quota data when errors=remount-ro (Ye Bin) [task:183005]
  - quota: fixup *_write_file_info() to return proper error code (Yangtao Li) [task:183005]
  - dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client (Li Lingfeng) [task:183052]
  - dm bufio: do buffer cleanup from a workqueue (Mikulas Patocka) [task:183052]
  - dm bufio: introduce a global cache replacement (Mikulas Patocka) [task:183052]
  - dm bufio: introduce a global queue (Mikulas Patocka) [task:183052]
  - dm bufio: refactor adjust_total_allocated (Mikulas Patocka) [task:183052]
  - dm bufio: call adjust_total_allocated from __link_buffer and __unlink_buffer (Mikulas Patocka) [task:183052]
  - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (Zhihao Cheng) [task:183052]
  - dm thin metadata: add wrappers for managing write locking of metadata (Mike Snitzer) [task:183052]
  - dm: add disk before alloc dax (Li Lingfeng) [task:183060]
  - sched/topology: Make sched_init_numa() use a set for the deduplicating sort (Valentin Schneider) [bug:188813]
  - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Jozsef Kadlecsik) [bug:195544]
  - Revert "netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test" (xiaolinkui) [bug:195544]
  - config: disable unprivileged eBPF by default (chenyuan) [task:178019, task:186859]
  - NFS: make sure open context mode have FMODE_EXEC when file open for exec (ChenXiaoSong) [task:187717] {CVE-2022-24448}
  - NFSv4: fix open failure with O_ACCMODE flag (ChenXiaoSong) [task:187717] {CVE-2022-24448}
  - Revert "NFSv4: Handle the special Linux file open access mode" (ChenXiaoSong) [task:187717] {CVE-2022-24448}
  - ovl: adhere to the vfs_ vs. ovl_do_ conventions for xattrs (Miklos Szeredi) [task:186656] {CVE-2023-32629}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.45.v2101
changelog:
  - perf: Fix perf_event_validate_size() (Peter Zijlstra) [task:199635] {CVE-2023-6931}
  - netfilter: nf_tables: Reject tables of unsupported family (Phil Sutter) [task:196095] {CVE-2023-6040}
  - USB: serial: pl2303: fix line-speed handling on newer chips (Johan Hovold) [bug:211186]
  - USB: serial: pl2303: add support for PL2303HXN (Charles Yeh) [bug:211186]
  - USB: serial: pl2303: fix tranceiver suspend mode (Johan Hovold) [bug:211186]
  - USB: serial: pl2303: fix non-supported xon/xoff (Johan Hovold) [bug:211186]
  - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (Sharath Srinivasan) [task:198453] {CVE-2024-23849}
  - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() (Tuo Li) [task:198457] {CVE-2024-24855}
  - dm: limit the number of targets and parameter size area (Mikulas Patocka) [task:198455] {CVE-2023-52429}
  - dm ioctl: log an error if the ioctl structure is corrupted (Mikulas Patocka) [task:198455]
  - jfs: fix log->bdev_handle null ptr deref in lbmStartIO (Lizhi Xu) [task:196809]
  - scsi: fcoe: pass in fcoe_rport structure instead of fc_rport_priv (Hannes Reinecke) [task:197881]
  - scsi: libfc: Whitespace cleanup in libfc.h (Hannes Reinecke) [task:197881]
  - scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs (Yihang Li) [task:196398]
  - drm/atomic: Fix potential use-after-free in nonblocking commits (Daniel Vetter) [task:196093] {CVE-2023-51043}
  - drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig) [task:196092] {CVE-2023-51042}
  - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (Krzysztof Kozlowski) [task:196011] {CVE-2023-46343}
  - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (Dan Carpenter) [task:196363] {CVE-2024-0607}
  - block: fix NULL pointer dereference in account statistics with IDE (Logan Gunthorpe) [task:196111]
  - block: account statistics for passthrough requests (Logan Gunthorpe) [task:196111]
  - machine_t: Limit specific architecture judgment functions (Jackie Liu)
  - net: hns3: fix reset delay time to avoid configuration timeout (Jie Wang) [task:182918]
  - stmmac: remove is_ft_mcu_ready when getting mac addr from nvmem (luyun) [task:18023, bug:210342]
  - tty: fix hang on tty device with no_room set (Hui Li) [task:190651]
  - smb: client: fix potential OOB in smb2_dump_detail() (Paulo Alcantara) [task:195442] {CVE-2023-6610}
  - smb: client: fix OOB in receive_encrypted_standard() (Paulo Alcantara) [task:196094] {CVE-2024-0565}
  - media: v4l2-mem2mem: fix epoll() by calling poll_wait first (Hans Verkuil) [task:193171]
  - net/sched: cbs: Fix not adding cbs instance to list (Vinicius Costa Gomes) [task:193171]
  - sctp: fix potential deadlock on &net->sctp.addr_wq_lock (Chengfeng Ye) [task:196364] {CVE-2024-0639}
  - kernel.spec: redefine the base address of the mips kdump kernel (JiangXiujie)
  - rpmbuild: add kdump support for mips platform (JiangXiujie)
  - mips/kdump: Increase high-end reserved memory to 512M or 1G (JiangXiujie) [bug:210121]
  - MIPS: kdump: Increase high-end reserved memory to 256M (Youling Tang) [bug:210121]
  - MIPS: kdump: Fix reserver memory (Youling Tang) [bug:210121]
  - MIPS: relocatable: Provide kaslr_offset() to get the kernel offset (Jinyang He) [bug:210121]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.46.v2101
changelog:
  - ACPI: tables: Simplify PPTT leaf node detection (Jeremy Linton) [task:207620]
  - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (Sean Christopherson) [task:206928] {CVE-2021-47061}
  - KVM: use struct_size() and flex_array_size() helpers in kvm_io_bus_unregister_dev() (Rustam Kovhaev) [task:206928]
  - overflow.h: Add flex_array_size() helper (Gustavo A. R. Silva) [task:162874, task:161899]
  - jfs: fix uaf in jfs_evict_inode (Edward Adam Davis) [task:207381] {CVE-2023-52600}
  - tipc: wait and exit until all work queues are done (Xin Long) [task:207225] {CVE-2021-47163}
  - team: fix null-ptr-deref when team device type is changed (Ziyang Xuan) [task:207278] {CVE-2023-52574}
  - perf/x86/lbr: Filter vsyscall addresses (JP Kobryn) [task:205164] {CVE-2023-52476}
  - UBSAN: array-index-out-of-bounds in dtSplitRoot (Osama Muhammad) [task:207406] {CVE-2023-52603}
  - s390/ptrace: handle setting of fpc register correctly (Heiko Carstens) [task:207408] {CVE-2023-52598}
  - KVM: s390: fix setting of fpc register (Heiko Carstens) [task:207400] {CVE-2023-52597}
  - PCI: switchtec: Fix stdev_release() crash after surprise hot remove (Daniel Stodden) [task:207403] {CVE-2023-52617}
  - switchtec: Add MRPC DMA mode support (Wesley Sheng) [task:207403]
  - can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer() (Oleksij Rempel) [task:205575]
  - ceph: fix deadlock or deadcode of misusing dget() (Xiubo Li) [task:207229] {CVE-2023-52583}
  - IB/ipoib: Fix mcast list locking (Daniel Vacek) [task:207280] {CVE-2023-52587}
  - RDMA/IPoIB: Fix error code return in ipoib_mcast_join (Jack Wang) [task:207280]
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Minsuk Kang) [task:207380] {CVE-2023-52594}
  - jfs: fix array-index-out-of-bounds in diNewExt (Edward Adam Davis) [task:207379] {CVE-2023-52599}
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree (Osama Muhammad) [task:207384] {CVE-2023-52604}
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Herbert Xu) [task:207385] {CVE-2023-52615}
  - powerpc/lib: Validate size for vector operations (Naveen N Rao) [task:207386] {CVE-2023-52606}
  - ocfs2: Avoid touching renamed directory if parent does not change (Jan Kara) [task:207378] {CVE-2023-52590}
  - fs: ocfs2: check status values (Artem Chernyshev) [task:207378]
  - pstore/ram: Fix crash when setting number of cpus to an odd number (Weichen Chen) [task:207388] {CVE-2023-52619}
  - SUNRPC: Fix a suspicious RCU usage warning (Anna Schumaker) [task:207390] {CVE-2023-52623}
  - jfs: fix slab-out-of-bounds Read in dtSearch (Manas Ghandat) [task:207383] {CVE-2023-52602}
  - crypto: scomp - fix req->dst buffer overflow (Chengming Zhou) [task:207387] {CVE-2023-52612}
  - crypto: scompress - initialize per-CPU variables on each CPU (Sebastian Andrzej Siewior) [task:207387]
  - crypto: scompress - Use per-CPU struct instead multiple variables (Sebastian Andrzej Siewior) [task:207387]
  - crypto: scompress - return proper error code for allocation failure (Sebastian Andrzej Siewior) [task:207387]
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian) [task:207228] {CVE-2023-52566}
  - nvme-loop: fix memory leak in nvme_loop_create_ctrl() (Wu Bo) [task:206937] {CVE-2021-47074}
  - nvme-loop: don't put ctrl on nvme_init_ctrl error (Chaitanya Kulkarni) [task:206937]
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso) [task:206383] {CVE-2024-26642}
  - llc: make llc_ui_sendmsg() more robust against bonding changes (Eric Dumazet) [task:206384] {CVE-2024-26636}
  - cve-cal.sh: distinguish task and bug (Zhengyuan Liu)
  - Fix blk_mq_tags struct lock kabi issue (wolfgang huang) [task:206478]
  - mm: fix race between MADV_FREE reclaim and blkdev direct IO read (Mauricio Faria de Oliveira) [task:162162, task:204700]
  - ring-buffer: Have saved event hold the entire event (Steven Rostedt (Google)) [task:205154]
  - ring-buffer: Do not attempt to read past "commit" (Steven Rostedt (Google)) [task:205154] {CVE-2023-52501}
  - ring-buffer: Have rb_iter_head_event() handle concurrent writer (Steven Rostedt (VMware)) [task:205154]
  - ring-buffer: Add page_stamp to iterator for synchronization (Steven Rostedt (VMware)) [task:205154]
  - ring-buffer: Have ring_buffer_empty() not depend on tracing stopped (Steven Rostedt (VMware)) [task:205154]
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value (Cyril Hrubis) [task:205110]
  - sched/rt: Disallow writing invalid values to sched_rt_period_us (Cyril Hrubis) [task:205110]
  - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset (Cyril Hrubis) [task:205110]
  - net: rds: acquire refcount on TCP sockets (Tetsuo Handa) [task:205876]
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Eric Dumazet) [task:205232] {CVE-2023-52502}
  - nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski) [task:205232]
  - drm: Don't unref the same fb many times by mistake due to deadlock handling (Ville Syrjälä) [task:205231] {CVE-2023-52486}
  - ipv6: init the accept_queue's spinlocks in inet6_create (Zhengchao Shao) [task:205163]
  - tcp: make sure init the accept_queue's spinlocks once (Zhengchao Shao) [task:205163] {CVE-2024-26614}
  - l2tp: pass correct message length to ip6_append_data (Tom Parkin) [task:205227]
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells) [task:205227] {CVE-2023-52527}
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu) [task:205220] {CVE-2023-52510}
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Wen Gu) [task:205222] {CVE-2024-26615}
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida) [task:205218] {CVE-2023-52528}
  - tomoyo: fix UAF write bug in tomoyo_write_control() (Tetsuo Handa) [task:205063] {CVE-2024-26622}
  - net: nfc: llcp: Add lock when modifying device list (Jeremy Cline) [task:205036] {CVE-2023-52524}
  - nfc: nci: assert requested protocol is valid (Jeremy Cline) [task:205032] {CVE-2023-52507}
  - Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco) [task:204918] {CVE-2023-52475}
  - llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima) [task:204916] {CVE-2024-26635}
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (Eric Dumazet) [task:204917] {CVE-2024-26633}
  - ax25: Fix ax25 session cleanup problems (Duoming Zhou) [task:203789]
  - mm: slab: fix kmem_cache_create failed when sysfs node not destroyed (Nanyong Sun) [task:203804]
  - nfsd: fix use-after-free due to delegation race (J. Bruce Fields) [task:160493]
  - tty: n_gsm: check error while registering tty devices (Hillf Danton)
  - tty: n_gsm: add helpers to convert mux-num to/from tty-base (Martin Hundebøll)
  - USB: gadget: dummy-hcd: Fix errors in port-reset handling (Alan Stern)
  - bfs: extra sanity checking and static inode bitmap (Tigran Aivazian)
  - USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug (Alan Stern)
  - i2c: cadence: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201795] {CVE-2020-36784}
  - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201797] {CVE-2020-36783}
  - i2c: sprd: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201796] {CVE-2020-36780}
  - PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter (Zhang Qilong) [task:201796] {CVE-2020-36780}
  - llc: call sock_orphan() at release time (Eric Dumazet) [task:203087] {CVE-2024-26625}
  - af_unix: fix lockdep positive in sk_diag_dump_icons() (Eric Dumazet) [task:203085] {CVE-2024-26624}
  - xen-netback: don't produce zero-size SKB frags (Jan Beulich) [task:203084] {CVE-2023-46838}
  - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201794] {CVE-2020-36782}
  - net: sched: sch_teql: fix null-pointer dereference (Pavel Tikhomirov) [bug:215813]
  - rpmbuild: support srpm when need (Jackie Liu) [task:201386]
  - blk-mq: fix is_flush_rq (Ming Lei) [task:199095]
  - blk-mq: fix kernel panic during iterating over flush request (Ming Lei) [task:199095]
  - block: factor out a new helper from blk_rq_init() (Yu Kuai) [task:199095]
  - blk-mq: don't grab rq's refcount in blk_mq_check_expired() (Ming Lei) [task:199095]
  - blk-mq: clearing flush request reference in tags->rqs[] (Ming Lei) [task:199095]
  - blk-mq: clear stale request in tags->rq[] before freeing one request pool (Ming Lei) [task:199095]
  - blk-mq: grab rq->refcount before calling ->fn in blk_mq_tagset_busy_iter (Ming Lei) [task:199095]
  - loop: loop_set_status_from_info() check before assignment (Zhong Jinghua) [task:192988]
  - loop: Check for overflow while configuring loop (Siddh Raman Pant) [task:192988]
  - loop: Factor out configuring loop from status (Martijn Coenen) [task:192988]
  - Revert "loop: Check for overflow while configuring loop" (zhanggenjian) [task:192988]
  - loop: properly observe rotational flag of underlying device (Holger Hoffstätte) [task:192988]
  - loop: Refactor loop_set_status() size calculation (Martijn Coenen) [task:192988]
  - loop: Factor out setting loop device size (Martijn Coenen) [task:192988]
  - loop: Remove sector_t truncation checks (Martijn Coenen) [task:192988]
  - loop: Call loop_config_discard() only after new config is applied (Martijn Coenen) [task:192988]
  - Revert "loop: loop_set_status_from_info() check before assignment" (zhanggenjian) [task:192988]
  - KVM: arm64: pmu: Reset sample period on overflow handling (Marc Zyngier) [task:197911]
  - KVM: arm/arm64: Remove pmc->bitmask (Andrew Murray) [task:197911]
  - kylin/gmjstcm:Adapting TCM1.0 to x86 (wudandan) [task:195669]
  - netfilter: nf_tables: don't skip expired elements during walk (Florian Westphal) [task:179882] {CVE-2023-4244}
  - netfilter: nft_set_rbtree: Add missing expired checks (Phil Sutter) [task:179882]
  - EDAC/thunderx: Fix possible out-of-bounds string access (Arnd Bergmann) [task:200669] {CVE-2023-52464}
  - blk-mq: fix IO hang from sbitmap wakeup race (Ming Lei)
  - Makefile: add mips and loongarch SRCARCH (Li ZhiGang) [task:199827]
  - f2fs: explicitly null-terminate the xattr list (Eric Biggers) [task:200626] {CVE-2023-52436}
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Zhipeng Lu) [task:200671] {CVE-2023-52469}
  - net: qualcomm: rmnet: fix global oob in rmnet_policy (Lin Ma) [task:200745] {CVE-2024-26597}
  - sched/membarrier: reduce the ability to hammer on sys_membarrier (Linus Torvalds) [task:200749] {CVE-2024-26602}
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Tony Lindgren) [task:200752] {CVE-2024-26600}
  - binder: signal epoll threads of self-work (Carlos Llamas) [task:200750] {CVE-2024-26606}
  - CIFS: Fix retry mid list corruption on reconnects (Pavel Shilovsky) [task:197803]
  - Bluetooth: Fix atomicity violation in {min,max}_key_size_set (Gui-Dong Han) [task:199813] {CVE-2024-24860}
  - Bluetooth: Move {min,max}_key_size debugfs into hci_debugfs_create_le (Marcel Holtmann) [task:199813]
  - Bluetooth: Add support for LE ping feature (Spoorthi Ravishankar Koppad) [task:199813]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.47.v2101
changelog:
  - drm/amdgpu: validate the parameters of bo mapping operations more clearly (xinhui pan) [task:220691] {CVE-2024-26922}
  - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu) [task:220691]
  - drm/amdgpu: check alignment on CPU page for bo map (Xℹ Ruoyao) [task:220691]
  - drm/amdgpu: Reset IH OVERFLOW_CLEAR bit (Friedrich Vock) [task:220691] {CVE-2024-26915}
  - LOONGSON: rtc-ls2x: fix a ls3a4000 rtc update trouble (zhangtianyang) [task:147526]
  - media: edia: dvbdev: fix a use-after-free (Zhipeng Lu) [task:220692] {CVE-2024-27043}
  - media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Hyunwoo Kim) [task:220692] {CVE-2022-45884}
  - media: dvbdev: fix error logic at dvb_register_device() (Mauro Carvalho Chehab) [task:220692]
  - media: dvbdev: Fix memleak in dvb_register_device (Dinghao Liu) [task:220692]
  - media: media/dvb: Use kmemdup rather than duplicating its implementation (Fuqian Huang) [task:220692]
  - media: dvbdev: remove double-unlock (Mauro Carvalho Chehab) [task:220692]
  - media: dvbdev: fix refcnt bug (Lin Ma) [task:220692]
  - media: dvbdev: adopts refcnt to avoid UAF (Lin Ma) [task:220692]
  - media: dvbdev: Fix memory leak in dvb_media_device_free() (Peilin Ye) [task:220692]
  - media: dvb-core: Fix double free in dvb_register_device() (Keita Suzuki) [task:220692]
  - mm: swap: fix race between free_swap_and_cache() and swapoff() (Ryan Roberts) [task:220694] {CVE-2024-26960}
  - swap: comments get_swap_device() with usage rule (Huang Ying) [task:220694]
  - iavf: free q_vectors before queues in iavf_disable_vf (Nicholas Nunley) [task:212529] {CVE-2021-47201}
  - uio: Fix use-after-free in uio_open (Guanghui Feng) [task:209257] {CVE-2023-52439}
  - net/smc: Fix possible access to freed memory in link clear (Yacan Liu) [task:219443] {CVE-2022-48673}
  - scsi: sd: Fix sd_do_mode_sense() buffer length handling (Damien Le Moal) [task:213954] {CVE-2021-47182}
  - scsi: core: Fix scsi_mode_sense() buffer length handling (Damien Le Moal) [task:213954] {CVE-2021-47182}
  - scsi: core: Reshuffle response handling in scsi_mode_sense() (Hannes Reinecke) [task:213954] {CVE-2021-47182}
  - scsi: core: Fixup calling convention for scsi_mode_sense() (Hannes Reinecke) [task:213954] {CVE-2021-47182}
  - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [task:217548] {CVE-2024-26982}
  - clk: zynq: Prevent null pointer dereference caused by kmalloc failure (Duoming Zhou) [task:217565] {CVE-2024-27037}
  - sysv: don't call sb_bread() with pointers_lock held (Tetsuo Handa) [task:219573]
  - afs: Increase buffer size in afs_update_volume_status() (Daniil Dulov) [task:210635] {CVE-2024-26736}
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Bart Van Assche) [task:210640]
  - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio (Bart Van Assche) [task:210640] {CVE-2024-26764}
  - Bluetooth: af_bluetooth: Fix deadlock (Luiz Augusto von Dentz) [task:214134] {CVE-2024-26886}
  - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Ziyang Xuan) [task:217550] {CVE-2024-27019}
  - net/mlx5e: Prevent deadlock while disabling aRFS (Carolina Jubran) [task:217553] {CVE-2024-27014}
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier (ZhaoLong Wang) [task:219460] {CVE-2023-52449}
  - speakup: Avoid crash on very long word (Samuel Thibault) [task:219451] {CVE-2024-26994}
  - f2fs: fix to avoid dirent corruption (Chao Yu) [task:219461] {CVE-2023-52444}
  - apparmor: avoid crash when parsed profile name is empty (Fedor Pchelkin) [task:219459] {CVE-2023-52443}
  - powerpc/pseries/memhp: Fix access beyond end of drmem array (Nathan Lynch) [task:219457] {CVE-2023-52451}
  - powerpc/pseries/memhotplug: Quieten some DLPAR operations (Laurent Dufour) [task:219457]
  - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (Hyunwoo Kim) [task:219456] {CVE-2024-27395}
  - net: openvswitch: ovs_ct_exit to be done under ovs_lock (Tonghao Zhang) [task:219456]
  - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value (Anastasia Belova) [task:219454] {CVE-2024-27051}
  - net: gtp: Fix Use-After-Free in gtp_dellink (Hyunwoo Kim) [task:219455] {CVE-2024-27396}
  - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays (Gabor Juhos) [task:219452] {CVE-2024-26966}
  - crypto: qat - resolve race condition during AER recovery (Damian Muszynski) [task:219450] {CVE-2024-26974}
  - crypto: qat - fix double free during reset (Svyatoslav Pankratov) [task:219450]
  - txgbe: Fix handling of NAPI budget when multiple queues are enabled per vector (xiaolinkui) [task:217379]
  - ngbe: Fix handling of NAPI budget when multiple queues are enabled per vector (xiaolinkui) [task:217379]
  - printk: disable optimistic spin during panic (Stephen Brennan) [task:217379]
  - printk: Add panic_in_progress helper (Stephen Brennan) [task:217379]
  - s390/zcrypt: fix reference counting on zcrypt card objects (Harald Freudenberger) [task:219444] {CVE-2024-26957}
  - xfs: wake commit waiters on CIL abort before log item abort (Brian Foster) [task:217956]
  - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays (Gabor Juhos) [task:219446] {CVE-2024-26969}
  - vfio/platform: Create persistent IRQ handlers (Alex Williamson) [task:210628] {CVE-2024-26813}
  - vfio/platform: Disable virqfds on cleanup (Alex Williamson) [task:210628]
  - dm: call the resume method on internal suspend (Mikulas Patocka) [task:214159] {CVE-2024-26880}
  - quota: Fix potential NULL pointer dereference (Wang Jianjian) [task:214158] {CVE-2024-26878}
  - quota: check time limit when back out space/inode change (Chengguang Xu) [task:214158]
  - quota: code cleanup for __dquot_alloc_space() (Chengguang Xu) [task:214158]
  - jfs: fix array-index-out-of-bounds in dbAdjTree (Manas Ghandat) [task:207401] {CVE-2023-52601}
  - x86/xen: Add some null pointer checking to smp.c (Kunwu Chan) [task:214160] {CVE-2024-26908}
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Xiu Jianfeng) [task:164562]
  - xen/events: only register debug interrupt for 2-level events (Juergen Gross) [task:164562]
  - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled (Rahul Rameshbabu) [task:214161] {CVE-2023-52644}
  - b43: dma: Fix use true/false for bool type variable (Saurav Girepunje) [task:214161]
  - i40e: Fix VF MAC filter removal (Ivan Vecera) [task:214154]
  - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [task:214154] {CVE-2024-26830}
  - i40e: Add ensurance of MacVlan resources for every trusted VF (Karen Sornek) [task:214154]
  - i40e: Fix MAC address setting for a VF via Host/VM (Slawomir Laba) [task:214154]
  - i40e: Refactoring VF MAC filters counting to make more reliable (Aleksandr Loktionov) [task:62834]
  - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip (Hsin-Yi Wang) [task:214148] {CVE-2024-26874}
  - net: Set true network header for ECN decapsulation (Gilad Naaman) [task:214149]
  - net/bnx2x: Prevent access to a freed page in page_pool (Thinh Tran) [task:214143] {CVE-2024-26859}
  - vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang) [task:205064] {CVE-2022-48627}
  - ext4: avoid online resizing failures due to oversized flex bg (Baokun Li) [task:207394] {CVE-2023-52622}
  - ext4: unify the type of flexbg_size to unsigned int (Baokun Li) [task:207394] {CVE-2023-52622}
  - ext4: remove unnecessary check from alloc_flex_gd() (Baokun Li) [task:207394] {CVE-2023-52622}
  - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Oleg Nesterov) [task:210335] {CVE-2024-26686}
  - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Oleg Nesterov) [task:210335]
  - fs/proc: do_task_stat: use __for_each_thread() (Oleg Nesterov) [task:210335]
  - exit: Use the correct exit_code in /proc/<pid>/stat (Eric W. Biederman) [task:210335]
  - RDMA/rxe: Return CQE error if invalid lkey was supplied (Leon Romanovsky) [task:206932] {CVE-2021-47076}
  - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Lena Wang) [task:214040] {CVE-2024-26851}
  - IB/hfi1: Fix a memleak in init_credit_return (Zhipeng Lu) [task:214039] {CVE-2024-26839}
  - nfc: nci: free rx_data_reassembly skb on NCI device cleanup (Fedor Pchelkin) [task:213955] {CVE-2024-26825}
  - NFC: nci: fix memory leak in nci_allocate_device (Dongliang Mu) [task:158827]
  - hsr: Fix uninit-value access in hsr_get_node() (Shigeru Yoshida) [task:214042] {CVE-2024-26863}
  - net: hsr: fix placement of logical operator in a multi-line statement (Murali Karicheri) [task:214042]
  - amdkfd: use calloc instead of kzalloc to avoid integer overflow (Dave Airlie) [task:214061] {CVE-2024-26817}
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Nikita Zhandarovich) [task:214102] {CVE-2024-26901}
  - media: pvrusb2: fix uaf in pvr2_context_set_notify (Edward Adam Davis) [task:214062] {CVE-2024-26875}
  - media: pvrusb2: fix use after free on context disconnection (Ricardo B. Marliere) [task:214062]
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Armin Wolf) [task:214136] {CVE-2024-26894}
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Eric Dumazet) [task:214130] {CVE-2024-26852}
  - bpf: Fix hashtab overflow check on 32-bit arches (Toke Høiland-Jørgensen) [task:214132] {CVE-2024-26884}
  - scsi: target: core: Add TMF to tmr_list handling (Dmitry Bogdanov) [task:214137] {CVE-2024-26845}
  - arp: Prevent overflow in arp_req_get(). (Kuniyuki Iwashima) [task:210302] {CVE-2024-26733}
  - drm: bridge/panel: Cleanup connector on bridge detach (Paul Cercueil) [task:206930] {CVE-2021-47063}
  - sched: disabled sysctl_sched_optimize_enabled by default (liwanwu) [task:217846]
  - security/box: fix bug with can't get dir contents (yangzhao) [task:211220]
  - net: Prevent infinite while loop in skb_tx_hash() (Michael Chan) [task:218258]
  - mm/swap: fix race when skipping swapcache (Kairui Song) [task:210472] {CVE-2024-26759}
  - USB: core: Fix deadlock in usb_deauthorize_interface() (Alan Stern) [task:217563] {CVE-2024-26934}
  - usb: roles: fix NULL pointer issue when put module's reference (Xu Yang) [task:210461] {CVE-2024-26747}
  - media: rc: bpf attach/detach requires write permission (Sean Young) [task:214138] {CVE-2023-52642}
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Alan Stern) [task:217585] {CVE-2024-26993}
  - btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve (Filipe Manana) [task:214141] {CVE-2024-26904}
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern) [task:217587] {CVE-2024-27059}
  - nilfs2: prevent kernel bug at submit_bh_wbc() (Ryusuke Konishi) [task:217584] {CVE-2024-26955}
  - nilfs2: use a more common logging style (Joe Perches) [task:217584]
  - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays (Gabor Juhos) [task:217583] {CVE-2024-26965}
  - scsi: qla2xxx: Fix command flush on cable pull (Quinn Tran) [task:217582] {CVE-2024-26931}
  - nilfs2: fix failure to detect DAT corruption in btree and direct mappings (Ryusuke Konishi) [task:217589] {CVE-2024-26956}
  - media: go7007: fix a memleak in go7007_load_encoder (Zhipeng Lu) [task:217575] {CVE-2024-27074}
  - media: v4l2-tpg: fix some memleaks in tpg_alloc (Zhipeng Lu) [task:217576] {CVE-2024-27078}
  - SUNRPC: fix some memleaks in gssx_dec_option_array (Zhipeng Lu) [task:217578] {CVE-2024-27388}
  - drm/tegra: dsi: Add missing check for of_find_device_by_node (Chen Ni) [task:217580] {CVE-2023-52650}
  - mm/swapfile.c: __swap_entry_free() always free 1 entry (Wei Yang) [task:217590]
  - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Huang Ying) [task:217590]
  - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Huang Ying) [task:217590]
  - serial: mxs-auart: add spinlock around changing cts state (Emil Kronborg) [task:217594] {CVE-2024-27000}
  - nouveau: fix instmem race condition around ptr stores (Dave Airlie) [task:217591] {CVE-2024-26984}
  - net/rds: fix possible cp null dereference (Mahmoud Adam) [task:217596]
  - net/rds: fix WARNING in rds_conn_connect_if_down (Edward Adam Davis) [task:217596] {CVE-2024-27024}
  - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler (Fei Shao) [task:217571] {CVE-2024-27028}
  - scsi: ufs: core: Improve SCSI abort handling (Bart Van Assche) [task:212521] {CVE-2021-47188}
  - nfp: flower: handle acti_netdevs allocation failure (Duoming Zhou) [task:217573] {CVE-2024-27046}
  - nilfs2: fix OOB in nilfs_set_de_type (Jeongjun Park) [task:217541] {CVE-2024-26981}
  - fat: fix uninitialized field in nostale filehandles (Jan Kara) [task:217540] {CVE-2024-26973}
  - tun: limit printing rate when illegal packet received by tun dev (Lei Chen) [task:217543] {CVE-2024-27013}
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan) [task:217564] {CVE-2024-27020}
  - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Pablo Neira Ayuso) [task:217564]
  - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [task:217566] {CVE-2024-26976}
  - drm: nv04: Fix out of bounds access (Mikhail Kobuk) [task:217570] {CVE-2024-27008}
  - vfio/pci: Create persistent INTx handler (Alex Williamson) [task:210644] {CVE-2024-26812}
  - vfio: Introduce interface to flush virqfd inject workqueue (Alex Williamson) [task:210644]
  - media: dvb-frontends: avoid stack overflow warnings with clang (Arnd Bergmann) [task:217558] {CVE-2024-27075}
  - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity (Zhipeng Lu) [task:217549] {CVE-2024-27077}
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Rand Deeb) [task:214041] {CVE-2024-26855}
  - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi) [task:210638] {CVE-2024-26696}
  - binder: check offset alignment in binder_get_object() (Carlos Llamas) [task:216630] {CVE-2024-26926}
  - xen/events: close evtchn after mapping cleanup (Maximilian Heyne) [task:210357] {CVE-2024-26687}
  - wifi: mac80211: fix potential key use-after-free (Johannes Berg) [task:205233] {CVE-2023-52530}
  - xfs: check free AG space when making per-AG reservations (Darrick J. Wong) [task:215506]
  - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (Luís Henriques) [task:216634] {CVE-2022-48631}
  - media: xc4000: Fix atomicity violation in xc4000_get_frequency (Gui-Dong Han) [task:216633] {CVE-2024-24861}
  - RDMA/srpt: Do not register event handler until srpt device is fully setup (William Kucharski) [task:213762] {CVE-2024-26872}
  - btrfs: fix hang during unmount when stopping a space reclaim worker (Filipe Manana) [task:216635] {CVE-2022-48664}
  - Btrfs: fix crash during unmount due to race with delayed inode workers (Filipe Manana) [task:155707]
  - xhci: handle isoc Babble and Buffer Overrun events properly (Michal Pecio) [task:209228] {CVE-2024-26659}
  - xhci: process isoc TD properly when there was a transaction error mid TD. (Mathias Nyman) [task:209228]
  - xhci: Fix incorrect tracking of free space on transfer rings (Mathias Nyman) [task:209228]
  - xhci: store TD status in the td struct instead of passing it along (Mathias Nyman) [task:209228]
  - xhci: remove extra loop in interrupt context (Mathias Nyman) [task:209228]
  - xhci: get isochronous ring directly from endpoint structure (Mathias Nyman) [task:209228]
  - compiler_attributes.h: Add 'fallthrough' pseudo keyword for switch/case use (Joe Perches)
  - drm/amdgpu: restrict bo mapping within gpu address limits (Rajneesh Bhardwaj) [task:216641]
  - clk: Use parent node pointer during registration if necessary (Stephen Boyd) [task:215336]
  - driver core: Let dev_of_node() accept a NULL dev (Stephen Boyd) [task:215336]
  - clk: sunxi-ng: Unregister clocks/resets when unbinding (Samuel Holland) [task:212525, task:215462] {CVE-2021-47205}
  - Revert "clk: sunxi-ng: add support for the Allwinner A100 CCU" (Jiangshan Yi) [task:215462]
  - Revert "clk: sunxi-ng: Add support for the Allwinner H616 CCU" (Jiangshan Yi) [task:215462]
  - Revert "clk: sunxi-ng: Unregister clocks/resets when unbinding" (Jiangshan Yi) [task:215462]
  - clk: Add of_clk_hw_register() API for early clk drivers (Stephen Boyd) [task:212789, task:215462]
  - clk: Prepare for clk registration API that uses DT nodes (Stephen Boyd) [task:212789, task:215462]
  - securirty/kysec: fix dentry info mem leak (mengdehui) [bug:217795]
  - security/kysec: Add mount_lock when traversing mnt list (mengdehui) [bug:217795]
  - security/kysec: Add fault tolerance when sb_sec is NULL (mengdehui) [bug:217795]
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Duoming Zhou) [task:209227, task:214895] {CVE-2024-26654}
  - ALSA: sh: Fix compile warning wrt const (Takashi Iwai) [task:155707, task:214895]
  - ALSA: aica: Fix a long-time build breakage (Takashi Iwai) [task:153627, task:214895]
  - OPENEULER: SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers (zhanglei) [task:205210]
  - scsi: qedf: Add pointer checks in qedf_update_link_speed() (Javed Hasan) [task:206931] {CVE-2021-47077}
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (Chun-Yi Lee) [task:194976] {CVE-2023-6270}
  - thermal: Fix NULL pointer dereferences in of_thermal_ functions (Subbaraman Narayanamurthy) [task:212533] {CVE-2021-47202}
  - tracing/trigger: Fix to return error if failed to alloc snapshot (Masami Hiramatsu (Google)) [task:212517] {CVE-2024-26920}
  - x86, relocs: Ignore relocations in .notes section (Kees Cook) [task:212412] {CVE-2024-26816}
  - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume (Omar Sandoval) [task:209259] {CVE-2024-26644}
  - PM / devfreq: Synchronize devfreq_monitor_[start/stop] (Mukesh Ojha) [task:209249] {CVE-2023-52635}
  - nilfs2: fix potential bug in end_buffer_async_write (Ryusuke Konishi) [task:210283] {CVE-2024-26685}
  - aoe: avoid potential deadlock at set_capacity (Maksim Kiselev) [task:210627] {CVE-2024-26775}
  - clk: sunxi-ng: Unregister clocks/resets when unbinding (Samuel Holland) [task:212525] {CVE-2021-47205}
  - clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock (Icenowy Zheng) [task:155707]
  - clk: sunxi-ng: Add support for the Allwinner H616 CCU (Andre Przywara) [task:212525]
  - clk: sunxi-ng: add support for the Allwinner A100 CCU (Yangtao Li) [task:212525]
  - clk: sunxi: Don't call clk_hw_get_name() on a hw that isn't registered (Stephen Boyd) [task:212525]
  - clk: sunxi-ng: v3s: add Allwinner V3 support (Icenowy Zheng) [task:212525]
  - clk: sunxi-ng: v3s: add the missing PLL_DDR1 (Icenowy Zheng) [task:153627]
  - clk: sunxi-ng: v3s: Use local parent references for CLK_FIXED_FACTOR (Chen-Yu Tsai) [task:212525]
  - clk: sunxi-ng: switch to of_clk_hw_register() for registering clks (Chen-Yu Tsai) [task:212525]
  - clk: sunxi-ng: h6: Preset hdmi-cec clock parent (Jernej Skrabec) [task:212525]
  - clk: sunxi-ng: f1c100s: fix USB PHY gate bit offset (Icenowy Zheng) [task:212525]
  - clk: sunxi-ng: add support for suniv F1C100s SoC (Mesih Kilinc) [task:212525]
  - x86/alternatives: Disable KASAN in apply_alternatives() (Kirill A. Shutemov) [task:205153] {CVE-2023-52504}
  - binder: fix race between mmput() and do_exit() (Carlos Llamas) [task:207402] {CVE-2023-52609}
  - reiserfs: Avoid touching renamed directory if parent does not change (Jan Kara) [task:207282] {CVE-2023-52591}
  - bnxt_en: Fix RX consumer index logic in the error path. (Michael Chan) [task:206925] {CVE-2021-47015}
  - bnxt_en: Reduce unnecessary message log during RX errors. (Michael Chan) [task:206925]
  - md: don't clear MD_RECOVERY_FROZEN for new dm-raid until resume (Yu Kuai) [task:210625]
  - md: Don't ignore suspended array in md_check_recovery() (Yu Kuai) [task:210625] {CVE-2024-26758}
  - vfio/pci: Lock external INTx masking ops (Alex Williamson) [task:210634] {CVE-2024-26810}
  - rt2x00: initialize last_reset (Stanislaw Gruszka) [task:207285]
  - rt2x00: clear IV's on start to fix AP mode regression (Stanislaw Gruszka) [task:207285] {CVE-2023-52595}
  - rt2x00: add restart hw (Stanislaw Gruszka) [task:207285]
  - rt2800: add pre_reset_hw callback (Stanislaw Gruszka) [task:207285]
  - rt2800: initial watchdog implementation (Stanislaw Gruszka) [task:207285]
  - rt2800: add helpers for reading dma done index (Stanislaw Gruszka) [task:207285]
  - rt2x00: allow to specify watchdog interval (Stanislaw Gruszka) [task:207285]
  - rt2x00: use different txstatus timeouts when flushing (Stanislaw Gruszka) [task:207285]
  - rt2x00: do not check for txstatus timeout every time on tasklet (Stanislaw Gruszka) [task:207285]
  - rt2800mmio: use txdone/txstatus routines from lib (Stanislaw Gruszka) [task:207285]
  - rt2800: move usb specific txdone/txstatus routines to rt2800lib (Stanislaw Gruszka) [task:207285]
  - net/smc: remove device from smcd_dev_list after failed device_add() (Julian Wiedmann) [task:207216] {CVE-2021-47143}
  - KVM: Destroy target device if coalesced MMIO unregistration fails (Sean Christopherson) [task:206929] {CVE-2021-47060}
  - KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (Kefeng Wang) [task:206929] {CVE-2021-47060}
  - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed (Sean Christopherson) [task:206929] {CVE-2021-47060}
  - ubi: Check for too small LEB size in VTBL code (Richard Weinberger) [task:212058] {CVE-2024-25739}
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation (Bastien Nocera) [task:212057] {CVE-2024-24859}
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (Yuxuan Hu) [task:212059] {CVE-2024-22099}
  - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (Ziqi Zhao) [task:210651] {CVE-2023-52638}
  - net: rds: use maybe_get_net() when acquiring refcount on TCP sockets (Tetsuo Handa) [task:209413]
  - asix: fix wrong return value in asix_check_host_enable() (Pavel Skripkin) [task:206939]
  - asix: fix uninit-value in asix_mdio_read() (Pavel Skripkin) [task:206939] {CVE-2021-47101}
  - net: asix: fix uninit value bugs (Pavel Skripkin) [task:206939]
  - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command (Michal Grzedzicki) [task:205228] {CVE-2023-52500}
  - tcp: fix race condition when creating child sockets from syncookies (Ricardo Dias) [task:162162]
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Kunwu Chan) [task:207382] {CVE-2023-52607}
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Xingyuan Mo) [task:210392] {CVE-2023-7042}
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Baokun Li) [task:210360] {CVE-2024-26773}
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Baokun Li) [task:210642] {CVE-2024-26772}
  - ext4: fix double-free of blocks due to wrong extents moved_len (Baokun Li) [task:210641] {CVE-2024-26704}
  - RDMA/srpt: Support specifying the srpt_service_guid parameter (Bart Van Assche) [task:210645] {CVE-2024-26744}
  - net: ip_tunnel: prevent perpetual headroom growth (Florian Westphal) [task:210646] {CVE-2024-26804}
  - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (Oleksij Rempel) [task:210648] {CVE-2023-52637}
  - can: j1939: j1939_sk_init(): set SOCK_RCU_FREE to call sk_destruct() after RCU is done (Oleksij Rempel) [task:210648]
  - fbdev: savage: Error out if pixclock equals zero (Fullway Wang) [task:210633] {CVE-2024-26778}
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Zach O'Keefe) [task:210632] {CVE-2024-26720}
  - wifi: mac80211: fix race condition on enabling fast-xmit (Felix Fietkau) [task:210626] {CVE-2024-26779}
  - dmaengine: ti: edma: Add some null pointer checks to the edma_probe (Kunwu Chan) [task:210482] {CVE-2024-26771}
  - btrfs: dev-replace: properly validate device names (David Sterba) [task:210624] {CVE-2024-26791}
  - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (Ryosuke Yasuoka) [task:210464] {CVE-2024-26805}
  - fbdev: sis: Error out if pixclock equals zero (Fullway Wang) [task:210465] {CVE-2024-26777}
  - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [task:210432] {CVE-2024-26743}
  - Bluetooth: Avoid potential use-after-free in hci_error_reset (Ying Hsu) [task:210462] {CVE-2024-26801}
  - ipv6: sr: fix possible use-after-free and null-ptr-deref (Vasiliy Kovalev) [task:210463] {CVE-2024-26735}
  - gtp: fix use-after-free and null-ptr-deref in gtp_newlink() (Alexander Ofitserov) [task:210471] {CVE-2024-26793}
  - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() (Vasiliy Kovalev) [task:210471]
  - ARM: ep93xx: Add terminator to gpiod_lookup_table (Nikita Shubin) [task:210473] {CVE-2024-26751}
  - dm-crypt: don't modify the data when using authenticated encryption (Mikulas Patocka) [task:210478] {CVE-2024-26763}
  - nilfs2: fix data corruption in dsync block recovery for small block sizes (Ryusuke Konishi) [task:210301] {CVE-2024-26697}
  - usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Cañuelo) [task:205167] {CVE-2023-52477}
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (Hans de Goede) [task:205219] {CVE-2023-52478}
  - NFS: Fix an Oopsable condition in __nfs_pageio_add_request() (Trond Myklebust) [task:207226] {CVE-2021-47167}
  - ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao) [task:205581]
  - ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao) [task:205581]
  - xfrm: fix slab-use-after-free in decode_session6 (Zhengchao Shao) [task:205581]
  - media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run (Zheng Wang) [task:204919] {CVE-2023-52491}
  - media: platform: Add mechanism to handle jpeg hardware's locking up (Xia Jiang) [task:204919]
  - media: platform: Improve power on and power off flow (Xia Jiang) [task:204919]
  - vfio/pci: Disable auto-enable of exclusive INTx IRQ (Alex Williamson) {CVE-2024-27437}
  - genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() (Barry Song)
  - media: vimc: stream: fix build by missing dev (Jackie Liu) [task:209415]
  - virtio-blk: remove VIRTIO_BLK_F_SCSI support (Christoph Hellwig) [task:209004]
  - net: prevent mss overflow in skb_segment() (Eric Dumazet) [task:209255] {CVE-2023-52435}
  - media: vimc: streamer: if kthread_stop fails, ignore the error (Dafna Hirschfeld) [task:209314]
  - tracing: Ensure visibility when inserting an element into tracing_map (Petr Pavlu) [task:209253] {CVE-2024-26645}
  - efi/arm: Show SMBIOS bank/device location in CPER and GHES error logs (Marcin Benka) [bug:218049]
  - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (Shigeru Yoshida) [task:209216] {CVE-2024-26663}
  - sr9800: Add check for usbnet_get_endpoints (Chen Ni) [task:209210] {CVE-2024-26651}
  - inet: read sk->sk_family once in inet_recv_error() (Eric Dumazet) [task:209235] {CVE-2024-26679}
  - ppp_async: limit MRU to 64K (Eric Dumazet) [task:209233] {CVE-2024-26675}
  - netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso) [task:207391] {CVE-2023-52620}
  - swapfile: fix soft lockup in scan_swap_map_slots (Chen Wandun) [task:183285]
  - Revert "i40e: The state of phy may not be correct during power-on" (xiaolinkui) [task:210775]
  - net: openvswitch: fix race on port output (Felix Huettner) [task:202729]
  - x86/kvm: Do not try to disable kvmclock if it was not enabled (Kirill A. Shutemov) [task:207214]
  - x86/kvm: Disable kvmclock on all CPUs on shutdown (Vitaly Kuznetsov) [task:207214] {CVE-2021-47110}
  - x86/kvm: Teardown PV features on boot CPU as well (Vitaly Kuznetsov) [task:206940] {CVE-2021-47112}
  - nvmet: set loop queue's segment boundary mask as PAGE_SIZE - 1 (pengcan) [task:174281, task:175051, task:175046, task:210749, bug:195690, bug:195682, bug:195676]
  - Revert "nvmet: fix building bvec from sg list" (pengcan) [task:174281, task:175051, task:175046, task:210749, bug:195690, bug:195682, bug:195676]
  - arm64/config: CONFIG_PHYTIUM_MBOX=m (chizhiling) [bug:221940]
  - OPENEULER: mailbox: add phytium mailbox driver (Chen Ziqiang) [bug:221940]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.48.v2101
changelog:
  - KVM: SVM: Add 5-level page table support for SVM (Wei Huang) [bug:197000]
  - net/mlx5: No command allowed when command interface is not ready (Huy Nguyen) [task:224111]
  - PHYTIUM: KVM: arm64: Move the clean of dcache to the map handler (zhanghao1) [task:218131]
  - stop_machine: Provide RCU quiescent state in multi_cpu_stop() (Paul E. McKenney) [task:221168]
  - nvmet: fix setting ns queue's segment boundary (pengcan) [task:219876]
  - Revert "Revert "nvmet: fix building bvec from sg list"" (pengcan) [task:219876]
  - kabi_whitelist: remove (un)register_ip_vs_scheduler symbol (chenyuan) [task:193083]
  - ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1 (Andrew Sy Kim) [task:193083]
  - ipvs: avoid expiring many connections from timer (Julian Anastasov) [task:193083]
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [task:198456] {CVE-2024-1086}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.49.v2101
changelog:
  - dma: fix kabi broken for introduce dma_max_mapping_size() (leixiang) [task:226458]
  - REDHAT: mm/memcg: Fix mem_cgroup_id_get_online() underflow problem (lihongfu) [task:193929]
  - REDHAT: mm/memcg: Free percpu stats memory of dying memcg's (Waiman Long) [task:193929]
  - mm: list_lru: set shrinker map bit when child nr_items is not zero (Yang Shi) [task:226549]
  - ext4: fix bug for rename with RENAME_WHITEOUT (yangerkun) [task:328134]
  - virtio-blk: fix implicit overflow on virtio_max_dma_size (zhenwei pi) [task:221853] {CVE-2023-52762}
  - virtio-blk: support per-device queue depth (Joseph Qi) [task:221853]
  - virtio-blk: Consider virtio_max_dma_size() for maximum segment size (Joerg Roedel) [task:176679]
  - virtio: Introduce virtio_max_dma_size() (Joerg Roedel) [task:176679]
  - dma: Introduce dma_max_mapping_size() (Joerg Roedel) [task:176679]
  - swiotlb: Add is_swiotlb_active() function (Joerg Roedel) [task:176679]
  - swiotlb: Introduce swiotlb_max_mapping_size() (Joerg Roedel) [task:176679]
  - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() (Valentine Fatiev) [task:223066]
  - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path (Valentine Fatiev) [task:223066] {CVE-2021-47438}
  - net/mlx5: Fix mlx5_core_destroy_cq() error flow (Yishai Hadas) [task:223066]
  - spec: enable kabi check (Zhengyuan Liu) [task:224852]
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap) [task:224219] {CVE-2024-36919}
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Kuniyuki Iwashima) [task:224221] {CVE-2024-36904}
  - tipc: fix UAF in error path (Paolo Abeni) [task:224223] {CVE-2024-36886}
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Eric Dumazet) [task:224225] {CVE-2024-36902}
  - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (Wesley Cheng) [task:224213] {CVE-2024-36894}
  - usb: gadget: f_fs: use io_data->status consistently (John Keeping) [task:224213]
  - pinctrl: core: delete incorrect free in pinctrl_enable() (Dan Carpenter) [task:224212] {CVE-2024-36940}
  - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) [task:221819] {CVE-2021-47386}
  - hwmon: (w83791d) convert to use devm_i2c_new_dummy_device (Wolfram Sang) [task:221819]
  - net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo) [task:224208] {CVE-2024-36883}
  - tcp: properly terminate timers for kernel sockets (Eric Dumazet) [task:223109] {CVE-2024-35910}
  - mptcp: add sk_stop_timer_sync helper (Geliang Tang) [task:223109]
  - bonding: stop the device in bond_setup_by_slave() (Eric Dumazet) [task:223073] {CVE-2023-52784}
  - bonding: reset bond's flags when down link is P2P device (Hangbin Liu) [task:223073]
  - wifi: nl80211: don't free NULL coalescing rule (Johannes Berg) [task:224195] {CVE-2024-36941}
  - Julia Lawall reported this null pointer dereference, this should fix it. (Mike Marshall) [task:224194] {CVE-2024-36023}
  - orangefs: Fix sb refcount leak when allocate sb info failed. (Chenyuan Mi) [task:224194]
  - orangefs: set up and use backing_dev_info (Martin Brandenburg) [task:224194]
  - dyndbg: fix old BUG_ON in >control parser (Jim Cromie) [task:223134] {CVE-2024-35947}
  - btrfs: send: handle path ref underflow in header iterate_inode_ref() (David Sterba) [task:223135] {CVE-2024-35935}
  - drm/amd/display: Avoid NULL dereference of timing generator (Wayne Lin) [task:222113] {CVE-2023-52753}
  - ax25: fix use-after-free bugs caused by ax25_ds_del_timer (Duoming Zhou) [task:222117] {CVE-2024-35887}
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Harshit Mogalapalli) [task:223052] {CVE-2024-35944}
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (Wenchao Hao) [task:223057] {CVE-2023-52809}
  - pwm: Fix double shift bug (Dan Carpenter) [task:223061] {CVE-2023-52756}
  - mm, slub: fix potential memoryleak in kmem_cache_open() (Miaohe Lin) [task:223062] {CVE-2021-47466}
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (Jia-Ju Bai) [task:223064] {CVE-2023-52855}
  - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (Ziyang Xuan) [task:223071] {CVE-2021-47459}
  - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Ping-Ke Shih) [task:223076] {CVE-2023-52832}
  - media: bttv: fix use after free error due to btv->timeout timer (Zheng Wang) [task:223078] {CVE-2023-52847}
  - thermal: core: prevent potential string overflow (Dan Carpenter) [task:223081] {CVE-2023-52868}
  - usb: udc: remove warning when queue disabled ep (yuan linyu) [task:223085] {CVE-2024-35822}
  - Bluetooth: btintel: Fixe build regression (Luiz Augusto von Dentz) [task:223087]
  - Bluetooth: btintel: Fix null ptr deref in btintel_read_version (Edward Adam Davis) [task:223087] {CVE-2024-35933}
  - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Shigeru Yoshida) [task:223088] {CVE-2023-52845}
  - jfs: fix array-index-out-of-bounds in dbFindLeaf (Manas Ghandat) [task:223091] {CVE-2023-52799}
  - dma-debug: prevent an error message from causing runtime problems (Hamza Mahfooz) [task:223100] {CVE-2021-47374}
  - dma-debug: report -EEXIST errors in add_dma_entry (Hamza Mahfooz) [task:223100]
  - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) [task:223098] {CVE-2021-47385}
  - hwmon: (w83792d) convert to use devm_i2c_new_dummy_device (Wolfram Sang) [task:223098]
  - net/mlx5e: fix a double-free in arfs_create_groups (Zhipeng Lu) [task:223101] {CVE-2024-35835}
  - net/mlx5: Use kfree(ft->g) in arfs_create_groups() (Denis Efremov) [task:223101]
  - ubifs: Set page uptodate in the correct place (Matthew Wilcox (Oracle)) [task:223108] {CVE-2024-35821}
  - hid: cp2112: Fix duplicate workqueue initialization (Danny Kaehn) [task:223106] {CVE-2023-52853}
  - HID: cp2112: Use irqchip template (Linus Walleij) [task:223106]
  - soc: fsl: qbman: Always disable interrupts when taking cgr_lock (Sean Anderson) [task:223111] {CVE-2024-35806}
  - raid1: fix use-after-free for original bio in raid1_write_request() (Yu Kuai) [task:223112] {CVE-2024-35979}
  - md/raid1: free the r1bio before waiting for blocked rdev (Xueshi Hu) [task:223112]
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Felix Fietkau) [task:223119] {CVE-2024-35789}
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Justin Tee) [task:223120] {CVE-2024-35930}
  - PCI/PM: Drain runtime-idle callbacks before driver removal (Rafael J. Wysocki) [task:223117] {CVE-2024-35809}
  - PCI: Drop pci_device_remove() test of pci_dev->driver (Uwe Kleine-König) [task:223117]
  - net/sched: act_skbmod: prevent kernel-infoleak (Eric Dumazet) [task:223125] {CVE-2024-35893}
  - irqchip/gic-v3-its: Prevent double free on error (Guanrui Huang) [task:222083] {CVE-2024-35847}
  - irqchip/gic-v3-its: Fix potential VPE leak on error (Kaige Fu)
  - ext4: fix corruption during on-line resize (Maximilian Heyne) [task:222107] {CVE-2024-35807}
  - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Kemeng Shi) [task:222107]
  - block: prevent division by zero in blk_rq_stat_sum() (Roman Smirnov) [task:222081] {CVE-2024-35925}
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale) [task:222091] {CVE-2024-36004}
  - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova) [task:222075] {CVE-2021-47384}
  - hwmon: (w83793d) convert to use devm_i2c_new_dummy_device (Wolfram Sang) [task:222075]
  - i2c: add newly exported functions to the header, too (Wolfram Sang) [task:222075]
  - i2c: core: add device-managed version of i2c_new_dummy (Heiner Kallweit) [task:222075]
  - i2c: core: improve return value handling of i2c_new_device and i2c_new_dummy (Heiner Kallweit) [task:222075]
  - vt: fix unicode buffer corruption when deleting characters (Nicolas Pitre) [task:222055] {CVE-2024-35823}
  - platform/x86: wmi: Fix opening of char device (Armin Wolf) [task:222045] {CVE-2023-52864}
  - platform/x86: wmi: remove unnecessary initializations (Barnabás Pőcze) [task:222045]
  - ALSA: hda: Fix possible null-ptr-deref when assigning a stream (Cezary Rojewski) [task:222049] {CVE-2023-52806}
  - cifs: Fix use-after-free in rdata->read_into_pages() (ZhaoLong Wang) [task:222065] {CVE-2023-52741}
  - s390/dasd: protect device queue against concurrent access (Jan Höppner) [task:222069] {CVE-2023-52774}
  - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() (Zhipeng Lu) [task:222033] {CVE-2024-35828}
  - tty: vcc: Add check for kstrdup() in vcc_probe() (Yi Yang) [task:222029] {CVE-2023-52789}
  - x86/mm/pat: fix VM_PAT handling in COW mappings (David Hildenbrand) [task:222013] {CVE-2024-35877}
  - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ido Schimmel) [task:219462] {CVE-2024-26586}
  - perf/core: Bail out early if the request AUX area is out of bound (Shuai Xue) [task:222041] {CVE-2023-52835}
  - arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer (Nathan Chancellor) [task:222027] {CVE-2023-52750}
  - arm64: Make CPU_BIG_ENDIAN depend on ld.bfd or ld.lld 13.0.0+ (Nathan Chancellor) [task:222027]
  - arm64: Kconfig: add a choice for endianness (Anders Roxell) [task:222027]
  - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (Dan Carpenter) [task:222005] {CVE-2023-52840}
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (Jiasheng Jiang) [task:222009] {CVE-2023-52865}
  - Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov) [task:222003] {CVE-2024-35978}
  - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() (Dominique Martinet) [task:222001]
  - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (David Sterba) [task:222001] {CVE-2024-35936}
  - erspan: make sure erspan_base_hdr is present in skb->head (Eric Dumazet) [task:221973] {CVE-2024-35888}
  - ip_gre: do not report erspan version on GRE interface (Hangbin Liu) [task:221973]
  - erspan: Check IFLA_GRE_ERSPAN_VER is set. (William Tu) [task:221973]
  - erspan: Add type I version 0 support. (William Tu) [task:221973]
  - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (Ryosuke Yasuoka) [task:221993]
  - nfc: nci: Fix uninit-value in nci_rx_work (Ryosuke Yasuoka) [task:221993]
  - nfc: nci: Fix kcov check in nci_rx_work() (Tetsuo Handa) [task:221993]
  - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (Ryosuke Yasuoka) [task:221993] {CVE-2024-35915}
  - jfs: fix array-index-out-of-bounds in diAlloc (Manas Ghandat) [task:221969] {CVE-2023-52805}
  - media: tc358743: register v4l2 async device only after successful setup (Alexander Stein) [task:221967] {CVE-2024-35830}
  - md/raid5: fix atomicity violation in raid5_cache_count (Gui-Dong Han) [task:212055] {CVE-2024-23307}
  - dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock (Sergey Senozhatsky) [task:205035] {CVE-2023-52516}
  - dma-debug: make __dma_entry_alloc_check_leak() static (Jason Yan) [task:205035]
  - dma-debug: Make leak-like behaviour apparent (Robin Murphy) [task:205035]
  - dma-debug: Dynamically expand the dma_debug_entry pool (Robin Murphy) [task:205035]
  - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (Johannes Thumshirn) [task:221877] {CVE-2024-35849}
  - fbmon: prevent division by zero in fb_videomode_from_videomode() (Roman Smirnov) [task:221889] {CVE-2024-35922}
  - ipv6: Fix infinite recursion in fib6_dump_done(). (Kuniyuki Iwashima) [task:221895] {CVE-2024-35886}
  - net/mlx5: Properly link new fs rules into the tree (Cosmin Ratiu) [task:221917] {CVE-2024-35960}
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Rajeshwar R Shinde) [task:221919] {CVE-2023-52764}
  - llc: verify mac len before reading mac header (Willem de Bruijn) [task:221933] {CVE-2023-52843}
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [task:221945] {CVE-2024-35969}
  - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (Mario Limonciello) [task:221901] {CVE-2023-52818}
  - drm/radeon: possible buffer overflow (Konstantin Meskhidze) [task:221865] {CVE-2023-52867}
  - fs/jfs: Add validity check for db_maxag and db_agpref (Juntong Deng) [task:221861] {CVE-2023-52804}
  - mm: fix use-after-free bug when mm->mmap is reused after being freed (Suren Baghdasaryan) [task:217008]
  - mm: protect free_pgtables with mmap_lock write lock in exit_mmap (Suren Baghdasaryan) [task:217008]
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Ziyang Xuan) [task:221827] {CVE-2024-35898}
  - fs/jfs: Add check for negative db_l2nbperpage (Juntong Deng) [task:221929] {CVE-2023-52810}
  - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (Siddh Raman Pant) [task:221929]
  - fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu) [task:164562]
  - jfs: fix divide error in dbNextAG (Pavel Skripkin) [task:162162]
  - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (Mario Limonciello) [task:221829] {CVE-2023-52819}
  - Bluetooth: Fix double free in hci_conn_cleanup (ZhengHan Wang) [task:221833] {CVE-2023-52830}
  - batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann) [task:221835] {CVE-2024-35982}
  - ALSA: usx2y: Don't call free_pages_exact() with NULL address (Takashi Iwai) [task:221837] {CVE-2021-47332}
  - ALSA: us122l: Use alloc_pages_exact() (Takashi Iwai) [task:221837]
  - net/sched: fix lockdep splat in qdisc_tree_reduce_backlog() (Eric Dumazet) [task:221845] {CVE-2024-35892}
  - locking/ww_mutex/test: Fix potential workqueue corruption (John Stultz) [task:221843] {CVE-2023-52836}
  - gfs2: ignore negated quota changes (Bob Peterson) [task:221849] {CVE-2023-52759}
  - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Alex Deucher) [task:221851]
  - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Qu Huang) [task:221851] {CVE-2023-52817}
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (Jiasheng Jiang) [task:221847] {CVE-2023-52875}
  - netrom: Fix a data-race around sysctl_netrom_link_fails_count (Jason Xing) [task:220900] {CVE-2024-27420}
  - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay (Jason Xing) [task:220866] {CVE-2024-27424}
  - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Kunwu Chan) [task:220898] {CVE-2023-52675}
  - rpmsg: virtio: Free driver_override when rpmsg_remove() (Xiaolei Wang) [task:220897] {CVE-2023-52670}
  - ACPI: video: check for error while searching for backlight device parent (Nikita Kiryushin) [task:220896] {CVE-2023-52693}
  - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (Sergey Shtylyov) [task:220894] {CVE-2023-52685}
  - ACPI: LPIT: Avoid u32 multiplication overflow (Nikita Kiryushin) [task:220888] {CVE-2023-52683}
  - calipso: fix memory leak in netlbl_calipso_add_pass() (Gavrilov Ilia) [task:220887] {CVE-2023-52698}
  - netlabel: remove unused parameter in netlbl_netlink_auditinfo() (Zheng Yejian) [task:220887]
  - net: netlabel: Fix kerneldoc warnings (Andrew Lunn) [task:220887]
  - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries (Jason Xing) [task:220882] {CVE-2024-27426}
  - netfilter: nft_limit: reject configurations that cause integer overflow (Florian Westphal) [task:209247] {CVE-2024-26668}
  - netfilter: nft_limit: avoid possible divide error in nft_limit_init (Eric Dumazet)
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found. (Johan Carlsson) [task:220883] {CVE-2024-27436}
  - drm/amd/pm: fix a double-free in si_dpm_init (Zhipeng Lu) [task:220893] {CVE-2023-52691}
  - netrom: Fix a data-race around sysctl_netrom_routing_control (Jason Xing) [task:220890] {CVE-2024-27421}
  - usb: gadget: ncm: Fix handling of zero block length packets (Krishna Kurapati) [task:220889]
  - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs (Krishna Kurapati) [task:220889] {CVE-2024-27405}
  - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (Krishna Kurapati) [task:220889]
  - USB: gadget: f_ncm: Fix NDP16 datagram validation (Bryan O'Donoghue) [task:157172]
  - USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() (Brooke Basile) [task:157172]
  - powerpc/powernv: Add a null pointer check in opal_event_init() (Kunwu Chan) [task:220885] {CVE-2023-52686}
  - netrom: Fix data-races around sysctl_net_busy_read (Jason Xing) [task:220863] {CVE-2024-27419}
  - wifi: nl80211: reject iftype change with mesh ID change (Johannes Berg) [task:220865] {CVE-2024-27410}
  - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay (Jason Xing) [task:220871] {CVE-2024-27425}
  - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser (Jason Xing) [task:220876] {CVE-2024-27428}
  - efi/capsule-loader: fix incorrect allocation size (Arnd Bergmann) [task:220877] {CVE-2024-27413}
  - netrom: Fix a data-race around sysctl_netrom_transport_timeout (Jason Xing) [task:220880] {CVE-2024-27427}
  - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout (Jason Xing) [task:220881] {CVE-2024-27422}
  - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size (Jason Xing) [task:220881]
  - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser (Jason Xing) [task:220878] {CVE-2024-27429}
  - netrom: Fix a data-race around sysctl_netrom_default_path_quality (Jason Xing) [task:220874] {CVE-2024-27430}


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.50.v2101
changelog:
  - virtio_net: Add XDP frame size in two code paths (Jesper Dangaard Brouer) [bug:252011]
  - xdp: fix kabi broken of xdp_do_redirect (lingfuyi) [bug:252011]
  - xdp: Add frame size to xdp_buff (Jesper Dangaard Brouer) [bug:252011]
  - ext4: fix overflow in ext4_iomap_alloc() (Jan Kara) [task:343103]
  - ext4: Fix occasional generic/418 failure (Jan Kara) [task:343103]
  - ext4: do not block RWF_NOWAIT dio write on unallocated space (Jan Kara) [task:343103]
  - ext4: dio take shared inode lock when overwriting preallocated blocks (Zhang Yi) [task:343103]
  - ext4: optimize file overwrites (Ritesh Harjani) [task:343103]
  - ext4: Optimize ext4 DIO overwrites (Jan Kara) [task:343103]
  - ext4: Move to shared i_rwsem even without dioread_nolock mount opt (Ritesh Harjani) [task:343103]
  - ext4: Start with shared i_rwsem in case of DIO instead of exclusive (Ritesh Harjani) [task:343103]
  - ext4: introduce direct I/O write using iomap infrastructure (Matthew Bobrowski) [task:343103]
  - Revert "Revert "ext4: remove EXT4_STATE_DIOREAD_LOCK flag"" (Zhang Xiaoxu) [task:343103]
  - vfs: introduce file_modified() helper (Amir Goldstein) [task:343103]
  - ext4: remove unnecessary error check (Shi Siyuan) [task:343103]
  - ext4: update ext4_sync_file() to not use __generic_file_fsync() (Matthew Bobrowski) [task:343103]
  - ext4: move inode extension check out from ext4_iomap_alloc() (Matthew Bobrowski) [task:343103]
  - ext4: move inode extension/truncate code out from ->iomap_end() callback (Matthew Bobrowski) [task:343103]
  - ext4: introduce direct I/O read using iomap infrastructure (Matthew Bobrowski) [task:343103]
  - ext4: introduce new callback for IOMAP_REPORT (Matthew Bobrowski) [task:343103]
  - ext4: split IOMAP_WRITE branch in ext4_iomap_begin() into helper (Matthew Bobrowski) [task:343103]
  - ext4: move set iomap routines into a separate helper ext4_set_iomap() (Matthew Bobrowski) [task:343103]
  - ext4: update direct I/O read lock pattern for IOCB_NOWAIT (Matthew Bobrowski) [task:343103]
  - ext4: reorder map.m_flags checks within ext4_iomap_begin() (Matthew Bobrowski) [task:343103]
  - iomap: Allow forcing of waiting for running DIO in iomap_dio_rw() (Jan Kara) [task:343103]
  - iomap: move the iomap_dio_rw ->end_io callback into a structure (Christoph Hellwig) [task:343103]
  - iomap: split size and error for iomap_dio_rw ->end_io (Matthew Bobrowski) [task:343103]
  - Revert "Revert "ext4: Allow parallel DIO reads"" (Shida Zhang) [task:343103]
  - ipvlan: add ipvlan_route_v6_outbound() helper (Eric Dumazet) [task:223092] {CVE-2023-52796}
  - tipc: fix kernel warning when sending SYN message (Tung Nguyen) [task:225562] {CVE-2023-52700}
  - tipc: fix implicit-connect for SYN+ (Xin Long) [task:225562]
  - net: annotate data-race in neigh_output() (Eric Dumazet) [task:205566]
  - neighbor: Add skip_cache argument to neigh_output (David Ahern) [task:205566]
  - fanotify: Avoid softlockups when reading many events (Jan Kara) [task:340889]
  - xfs: fix inode allocation block res calculation precedence (Brian Foster) [task:334329]
  - nilfs2: fix potential kernel bug due to lack of writeback flag waiting (Ryusuke Konishi) [task:332240] {CVE-2024-37078}
  - OPENEULER: tcp/dccp: Add another way to allocate local ports in connect() (xiaolinkui) [task:336487]
  - net/tls: Fix flipped sign in tls_err_abort() calls (Daniel Jordan) [task:223103] {CVE-2021-47496}
  - tls: Fix socket mem accounting error under async encryption (Vakul Garg) [task:82911]
  - net/tls: Add support for async decryption of tls records (Vakul Garg) [task:82911]
  - net/tls: Add support for async encryption of records for performance (Vakul Garg) [task:82911]
  - block: recalculate segment count for multi-segment discards correctly (David Jeffery) [task:327413]
  - OPENEULER: iomap: add support to track dirty state of sub pages (Shida Zhang) [task:192649]
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima) [task:328482] {CVE-2024-36933}
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen) [task:166857]
  - net/mlx5e: Fix page reclaim for dead peer hairpin (Dima Chumak) [task:225574] {CVE-2021-47246}
  - ipvlan: properly track tx_errors (Eric Dumazet) [task:223092]
  - net: add DEV_STATS_READ() helper (Eric Dumazet) [task:223092]
  - macsec: use DEV_STATS_INC() (Eric Dumazet) [task:223092]
  - macsec: Fix traffic counters/statistics (Clayton Yager) [task:223092]
  - macsec: avoid use-after-free in macsec_handle_frame() (Eric Dumazet) [task:158034]
  - net: fix kabi broken in struct net_device_stats (taowei) [task:204908]
  - net: add atomic_long_t to net_device_stats fields (Eric Dumazet) [task:204908]
  - jdb2: Don't refuse invalidation of already invalidated buffers (Jan Kara) [task:226534]
  - netfilter: conntrack: serialize hash resizes and cleanups (Eric Dumazet) [task:226456] {CVE-2021-47408}
  - ipv6: prevent NULL dereference in ip6_output() (Eric Dumazet) [task:226456]
  - ipv6: annotate data-races around cnf.disable_ipv6 (Eric Dumazet) [task:226456]
  - net: fix __dst_negative_advice() race (Eric Dumazet) [task:328468] {CVE-2024-36971}
  - net: annotate data-races around sk->sk_dst_pending_confirm (Eric Dumazet) [task:328468]
  - ext4: fix underflow in ext4_max_bitmap_size() (Zhang Yi) [bug:233580]
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Yue Haibing) [task:330556] {CVE-2024-33621}
  - usb: cdc-wdm: close race between read and workqueue (Oliver Neukum) [task:327804] {CVE-2024-35812}
  - wifi: iwlwifi: read txq->read_ptr under lock (Johannes Berg) [task:224209] {CVE-2024-36922}
  - tcp: fix page frag corruption on page fault (Paolo Abeni) [task:225588] {CVE-2021-47544}
  - s390/ap: Fix crash in AP internal function modify_bitmap() (Harald Freudenberger) [task:332252] {CVE-2024-38661}
  - media: lgdt3306a: Add a check against null-pointer-def (Zheyu Ma) [task:332251] {CVE-2022-48772}
  - media: dvb-frontends: Use kmemdup instead of duplicating its function (zhong jiang) [task:332251]
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Baokun Li) [task:332253] {CVE-2024-39276}
  - Input: cyapa - add missing input core locking to suspend/resume functions (Marek Szyprowski) [task:332207] {CVE-2023-52884}
  - net/9p: fix uninit-value in p9_client_rpc() (Nikita Zhandarovich) [task:332238] {CVE-2024-39301}
  - of: module: add buffer overflow check in of_modalias() (Sergey Shtylyov) [task:330476] {CVE-2024-38541}
  - mlxsw: core_thermal: Fix fan speed in maximum cooling state (Ido Schimmel) [task:223114]
  - mlxsw: thermal: Fix out-of-bounds memory accesses (Ido Schimmel) [task:223114] {CVE-2021-47441}
  - mlxsw: core: Extend cooling device with cooling levels (Vadim Pasternak) [task:223114]
  - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [task:223105] {CVE-2021-47307}
  - usb-storage: alauda: Check whether the media is initialized (Shichao Lai) [task:330542] {CVE-2024-38619}
  - drm/mediatek: Add 0 size check to mtk_drm_gem_obj (Justin Green) [task:330472] {CVE-2024-38549}
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jiri Pirko) [task:330562] {CVE-2024-37353}
  - ipv6: sr: fix invalid unregister error path (Hangbin Liu) [task:330500] {CVE-2024-38612}
  - wifi: carl9170: add a proper sanity check for endpoints (Nikita Zhandarovich) [task:330490] {CVE-2024-38567}
  - usb: xhci-plat: fix crash when suspend if remote wake enable (Frank Li) [task:330356] {CVE-2022-48761}
  - usb: host: xhci-plat: add .suspend_quirk for struct xhci_plat_priv (Peter Chen) [task:330356]
  - of: module: prevent NULL pointer dereference in vsnprintf() (Sergey Shtylyov) [task:327802] {CVE-2024-35878}
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (Dongli Zhang) [task:330555] {CVE-2024-31076}
  - inet_diag: fix kernel-infoleak for UDP sockets (Eric Dumazet) [task:330553] {CVE-2021-47597}
  - inet_diag: use jiffies_delta_to_msecs() (Eric Dumazet) [task:330553]
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Eric Dumazet) [task:330559] {CVE-2024-36286}
  - media: stk1160: fix bounds checking in stk1160_copy_video() (Dan Carpenter) [task:330567] {CVE-2024-38621}
  - serial: max3100: Update uart_driver_registered on driver removal (Andy Shevchenko) [task:330568] {CVE-2024-38633}
  - greybus: lights: check return of get_channel_from_mode (Rui Miguel Silva) [task:330569] {CVE-2024-38637}
  - nilfs2: fix potential hang in nilfs_detach_log_writer() (Ryusuke Konishi) [task:330571] {CVE-2024-38582}
  - nilfs2: fix unexpected freezing of nilfs_segctor_sync() (Ryusuke Konishi) [task:330571]
  - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger (Duoming Zhou) [task:330572] {CVE-2024-38630}
  - serial: max3100: Lock port->lock when calling uart_handle_cts_change() (Andy Shevchenko) [task:330573] {CVE-2024-38634}
  - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (Tetsuo Handa) [task:330574] {CVE-2024-38780}
  - stm class: Fix a double free in stm_register_device() (Dan Carpenter) [task:330576] {CVE-2024-38627}
  - enic: Validate length of nl attributes in enic_set_vf_port (Roded Zats) [task:330578] {CVE-2024-38659}
  - scsi: qedf: Ensure the copied buf is NUL terminated (Bui Quang Minh) [task:330528] {CVE-2024-38559}
  - speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter) [task:330524] {CVE-2024-38587}
  - crypto: bcm - Fix pointer arithmetic (Aleksandr Mishin) [task:330302] {CVE-2024-38579}
  - jffs2: prevent xattr node from overflowing the eraseblock (Ilya Denisyev) [task:330534] {CVE-2024-38599}
  - ALSA: timer: Set lower bound of start tick time (Takashi Iwai) [task:330536] {CVE-2024-38618}
  - wifi: ar5523: enable proper endpoint verification (Nikita Zhandarovich) [task:330532] {CVE-2024-38565}
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Breno Leitao) [task:330510] {CVE-2024-38596}
  - drm/amd/display: Fix potential index out of bounds in color transformation function (Srinivasan Shanmugam) [task:330516] {CVE-2024-38552}
  - virtio-net: Add validation for used length (Xie Yongji) [task:221959] {CVE-2021-47352}
  - PM / devfreq: Fix buffer overflow in trans_stat_show (Christian Marangi) [task:207389] {CVE-2023-52614}
  - btrfs: don't drop extent_map for free space inode on write error (Josef Bacik) [task:210433] {CVE-2024-26726}
  - fs/9p: fix uninitialized values during inode evict (Eric Van Hensbergen) [task:224205] {CVE-2024-36923}
  - x86/signal: Detect and prevent an alternate signal stack overflow (Chang S. Bae) [task:223059] {CVE-2021-47326}
  - net/smc: fix compile error in smc_vlan_by_tcpsk function (weirongguang) [task:329030]
  - drm_lease.c: copy user-array safely (Philipp Stanner) [task:223074] {CVE-2023-52820}
  - drm/panel: fix a possible null pointer dereference (Ma Ke) [task:222109] {CVE-2023-52821}
  - drm/amdgpu: fix gart.bo pin_count leak (Leslie Shi) [task:222035] {CVE-2021-47431}
  - lib/generic-radix-tree.c: Don't overflow in peek() (Kent Overstreet) [task:221979] {CVE-2021-47432}
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo) [task:225616] {CVE-2023-52880}
  - phonet/pep: fix racy skb_queue_empty() use (Rémi Denis-Courmont) [task:220864] {CVE-2024-27402}
  - i2c: smbus: fix NULL function pointer dereference (Wolfram Sang) [task:223077] {CVE-2024-35984}
  - i2c: core: remove level of indentation in i2c_transfer (Wolfram Sang) [task:223077]
  - i2c: core: remove outdated DEBUG output (Wolfram Sang) [task:223077]
  - usb: gadget: f_fs: change ep->status safe in ffs_epfile_io() (Linyu Yuan) [task:225394]
  - drm/sched: Avoid data corruptions (Andrey Grodzovsky) [task:223136] {CVE-2021-47354}
  - cpu/hotplug: Don't offline the last non-isolated CPU (Ran Xiaokai) [task:223118] {CVE-2023-52831}
  - cpu/hotplug: Prevent self deadlock on CPU hot-unplug (Thomas Gleixner) [task:223118] {CVE-2023-52831}
  - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Borislav Petkov (AMD)) [task:223094] {CVE-2024-35876}
  - iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() (Zhang Shurong) [task:223123] {CVE-2023-52802}
  - staging: rtl8712: fix use-after-free in rtl8712_dl_fw (Pavel Skripkin) [task:222111] {CVE-2021-47479}
  - phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet) [task:328460] {CVE-2024-36946}
  - net: sched: sch: Bounds check priority (Kees Cook) [task:222057] {CVE-2023-52734}
  - htb: use anonymous union for simplicity (Cong Wang) [task:222057]
  - media: imon: fix access to invalid resource for the second interface (Takashi Iwai) [task:222087] {CVE-2023-52754}
  - block: fix overflow in blk_ioctl_discard() (Li Nan) [task:328466] {CVE-2024-36917}
  - bna: ensure the copied buf is NUL terminated (Bui Quang Minh) [task:328454] {CVE-2024-36934}
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman) [task:328462] {CVE-2024-36950}
  - fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt) [task:328470] {CVE-2024-36964}
  - drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin) [task:328443] {CVE-2024-36960}
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet) [task:224189] {CVE-2024-36905}
  - tcp: remove redundant check on tskb (Colin Ian King) [task:224189]
  - .gitignore: Add compilation database file (Toru Komatsu)
  - of: unittest: Fix compile in the non-dynamic case (Christian A. Ehrhardt) [task:220891]
  - of: unittest: Fix of_count_phandle_with_args() expected value message (Geert Uytterhoeven) [task:220891]
  - of: Fix double free in of_parse_phandle_with_args_map (Christian A. Ehrhardt) [task:220891] {CVE-2023-52679}
  - of: unittest: fix EXPECT text for gpio hog errors (Frank Rowand) [task:220891]
  - of: gpio unittest kfree() wrong object (Frank Rowand) [task:220891]
  - of: unittest: make gpio overlay test dependent on CONFIG_OF_GPIO (Frank Rowand) [task:220891]
  - of: unittest: add overlay gpio test to catch gpio hog problem (Frank Rowand) [task:220891]
  - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (Eric Dumazet) [task:223050] {CVE-2024-35976}
  - net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() (Karsten Graul) [task:225614] {CVE-2021-47559}
  - powerpc/mm: Fix lockup on kernel exec fault (Christophe Leroy) [task:222047] {CVE-2021-47350}
  - soc: qcom: llcc: Handle a second device without data corruption (Uwe Kleine-König) [task:222019] {CVE-2023-52871}
  - i2c: dev: copy userspace array safely (Philipp Stanner) [task:223063] {CVE-2023-52758}
  - string.h: add array-wrappers for (v)memdup_user() (Philipp Stanner) [task:223063] {CVE-2023-52758}
  - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao) [task:221811] {CVE-2024-35997}
  - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (felix) [task:221821] {CVE-2023-52803}
  - f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances (Chao Yu) [task:221841] {CVE-2021-47335}
  - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Hans Verkuil) [task:227331] {CVE-2024-23848}
  - erofs: fix pcluster use-after-free on UP platforms (Gao Xiang) [task:217577] {CVE-2022-48674}
  - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error (Norihiko Hama) [task:217593] {CVE-2024-26996}
  - netfilter: complete validation of user input (Eric Dumazet) [task:221923]
  - netfilter: validate user input for expected length (Eric Dumazet) [task:221923] {CVE-2024-35896}
  - net: atlantic: eliminate double free in error handling logic (Igor Russkikh) [task:220884] {CVE-2023-52664}
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Fedor Pchelkin) [task:217545] {CVE-2024-26961}
  - NTB: fix possible name leak in ntb_register_device() (Yang Yingliang) [task:217598] {CVE-2023-52652}
  - soc: fsl: qbman: Use raw spinlock for cgr_lock (Sean Anderson) [task:223104] {CVE-2024-35819}
  - soc: fsl: qbman: Add helper for sanity checking cgr ops (Sean Anderson) [task:223104]
  - soc: fsl: qbman: Add CGR update function (Sean Anderson) [task:223104]
  - KVM: x86: Handle SRCU initialization failure during page track init (Haimin Zhang) [task:221891] {CVE-2021-47407}
  - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Oliver Upton) [task:224206] {CVE-2024-36953}
  - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Marc Zyngier) [task:224206]
  - ipv4: Fix uninit-value access in __ip_make_skb() (Shigeru Yoshida) [task:224214] {CVE-2024-36927}
  - can: j1939: fix Use-after-Free, hold skb ref while in use (Oleksij Rempel) [task:225604] {CVE-2021-47232}
  - can: j1939: transport: add j1939_session_skb_find_by_offset() function (Oleksij Rempel) [task:225604]
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou) [task:225600] {CVE-2024-27398}
  - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc (Norbert Zulinski) [task:225576] {CVE-2021-47501}
  - i40e: Fix sparse error: uninitialized symbol 'ring' (Arkadiusz Kubalewski) [task:225576]
  - i40e: introduce new dump desc XDP command (Ciara Loftus) [task:225576]
  - tcp: do not accept ACK of bytes we never sent (Eric Dumazet) [task:225596] {CVE-2023-52881}
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou) [task:225580] {CVE-2024-27399}
  - clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (Jernej Skrabec) [task:225550] {CVE-2023-52882}
  - drm/arm/malidp: fix a possible null pointer dereference (Huai-Yuan Liu) [task:225554] {CVE-2024-36014}
  - ppdev: Add an error check in register_device (Huai-Yuan Liu) [task:225556] {CVE-2024-36015}
  - ppdev: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET) [task:225556]
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats) [task:225558] {CVE-2024-36017}
  - firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos) [task:225560] {CVE-2024-27401}
  - mmc: mmc_spi: fix error handling in mmc_spi_probe() (Yang Yingliang) [task:225564] {CVE-2023-52708}
  - mmc: mmc_spi: Indentation fixes (Andy Shevchenko) [task:225564]
  - mmc: spi: Convert to use GPIO descriptors (Linus Walleij) [task:225564]
  - phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init() (Tiezhu Yang) [task:225568] {CVE-2021-47234}
  - drm/client: Fully protect modes[] with dev->mode_config.mutex (Ville Syrjälä) [task:221977] {CVE-2024-35950}
  - s390/dasd: fix double module refcount decrement (Miroslav Franc) [task:217574] {CVE-2024-27054}
  - mm/filemap: avoid buffered read/write race to read inconsistent data (Baokun Li) [task:225198]
  - drm/virtio: fix memory leak of vbuf (liweishi) [task:205462]
  - blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling (zhengbin) [task:225157]
  - nfs: Handle error of rpc_proc_register() in nfs_net_init(). (Kuniyuki Iwashima) [task:224227] {CVE-2024-36939}
  - overflow: Include header file with SIZE_MAX declaration (Leon Romanovsky) [task:158034]
  - linux/kernel.h: split *_MAX and *_MIN macros into <linux/limits.h> (Masahiro Yamada) [task:87159]
  - linux/kernel.h: use 'short' to define USHRT_MAX, SHRT_MAX, SHRT_MIN (Masahiro Yamada) [task:87159]
  - atl1c: fix tx timeout after link flap on Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: Work around the DMA RX overflow issue (Sieng-Piaw Liew) [task:222007] {CVE-2023-52834}
  - atl1c: add 4 RX/TX queue support for Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: detect NIC type early (Gatis Peisenieks) [task:222007]
  - atl1c: show correct link speed on Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: remove redundant assignment to variable tpd_req (Colin Ian King) [task:222007]
  - net/atheros: Clean atheros code from driver version (Leon Romanovsky) [task:222007]
  - atl1c: improve performance by avoiding unnecessary pcie writes on xmit (Gatis Peisenieks) [task:222007]
  - net: core: add __netdev_sent_queue as variant of __netdev_tx_sent_queue (Heiner Kallweit) [task:222007]
  - net: bql: add __netdev_tx_sent_queue() (Eric Dumazet) [task:68842]
  - atl1c: prepare for multiple rx queues (Gatis Peisenieks) [task:222007]
  - atl1c: move tx napi into tpd_ring (Gatis Peisenieks) [task:222007]
  - atl1c: move tx cleanup processing out of interrupt (Gatis Peisenieks) [task:222007]
  - atl1c: switch to napi_gro_receive (Sieng Piaw Liew) [task:222007]
  - atl1c: use napi_alloc_skb (Sieng Piaw Liew) [task:222007]
  - PCI: Add ACS quirk for Wangxun NICs (Mengyuan Lou) [task:335407]
  - PCI: Unify ACS quirk desired vs provided checking (Bjorn Helgaas) [task:335407]
  - PCI: Add ACS quirk for iProc PAXB (Abhinav Ratna) [task:335407]
  - PCI: Make ACS quirk implementations more uniform (Bjorn Helgaas) [task:335407]
  - OPENEULER: svm: Delete unused ioctl command (Jiangshan Yi) [task:180214] {CVE-2021-33639}
  - bpf: pull before calling skb_postpull_rcsum() (Jakub Kicinski) [task:329163]
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima) [task:216629]
  - ARM: 9170/1: fix panic when kasan and kprobe are enabled (sparkhuang) [task:330279] {CVE-2021-47618}
  - cifs: fix underflow in parse_server_interfaces() (Dan Carpenter) [task:214157] {CVE-2024-26828}
  - af_unix: Fix garbage collector racing against connect() (Michal Luczaj) [task:216629] {CVE-2024-26923}
  - af_unix: Do not use atomic ops for unix_sk(sk)->inflight. (Kuniyuki Iwashima) [task:216629]
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Daniel Starke) [task:224203] {CVE-2024-36016}
  - um: Add winch to winch_handlers before registering winch IRQ (Roberto Sassu) {CVE-2024-39292}
  - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (Eric Dumazet)
  - sched/fair: Fix wrong cpu selecting from isolated domain (Bing Huang) [bug:225308]
  - selinux: avoid dereference of garbage after mount failure (Christian Göttsche) [task:221817] {CVE-2024-35904}
  - selinux: mark some global variables __ro_after_init (Ondrej Mosnacek) [task:221817]
  - selinux: make selinuxfs_mount static (Ondrej Mosnacek) [task:221817]
  - vfs: vfs_clone_file_prep_inodes should return EINVAL for a clone from beyond EOF (Darrick J. Wong) [task:204423, task:327911]
  - inet: inet_defrag: prevent sk release while still in use (Florian Westphal) [task:213813] {CVE-2024-26921}
  - inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [task:213813]
  - skb_expand_head() adjust skb->truesize incorrectly (Vasily Averin) [task:213813]
  - skbuff: introduce skb_expand_head() (Vasily Averin) [task:213813]
  - sched/fair: Fix enqueue_task_fair() warning some more (Phil Auld) [task:116750]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.51.v2101
changelog:
  - crypto: aead,cipher - zeroize key buffer after use (Hailey Mothershead) [task:346415] {CVE-2024-42229}
  - crypto: ecdh - explicitly zeroize private_key (Joachim Vandersmissen) [task:345795] {CVE-2024-42098}
  - gpio: fix compile error (zhouyuhang) [task:347327]
  - nvme: avoid double free special payload (Chunguang Xu) [task:347137] {CVE-2024-41073}
  - ASoC: topology: Fix references to freed memory (Amadeusz Sławiński) [task:346623] {CVE-2024-41069}
  - ila: block BH in ila_output() (Eric Dumazet) [task:346669] {CVE-2024-41081}
  - serial: imx: Introduce timeout when waiting on transmitter empty (Esben Haabendal) [task:345715] {CVE-2024-40967}
  - fou: remove warn in gue_gro_receive on unsupported protocol (Willem de Bruijn) [task:352275] {CVE-2024-44940}
  - media: venus: fix use after free in vdec_close (Dikshita Agarwal) [task:352227] {CVE-2024-42313}
  - dev/parport: fix the array out-of-bounds risk (tuhaowen) [task:352211] {CVE-2024-42301}
  - driver core: Fix uevent_show() vs driver detach race (Dan Williams) [task:345303]
  - drivers: core: synchronize really_probe() and dev_uevent() (Dirk Behme) [task:345303] {CVE-2024-39501}
  - ipvs: properly dereference pe in ip_vs_add_service (Chen Hanxiao) [task:352245] {CVE-2024-42322}
  - nilfs2: fix kernel bug on rename operation of broken directory (Ryusuke Konishi) [task:347001] {CVE-2024-41034}
  - ceph: prevent use-after-free in encode_cap_msg() (Rishabh Dave) [task:210332] {CVE-2024-26689}
  - kvm: s390: Reject memory region operations for ucontrol VMs (Christoph Schlameuss) [task:352663] {CVE-2024-43819}
  - md/dm-raid: don't call md_reap_sync_thread() directly (Yu Kuai) [task:221813] {CVE-2024-35808}
  - md: fix kabi broken in struct mddev (zhouyuhang) [task:183151]
  - OPENEULER: md: use interruptible apis in idle/frozen_sync_thread (Yu Kuai) [task:183151]
  - md: wake up 'resync_wait' at last in md_reap_sync_thread() (Yu Kuai) [task:183151]
  - md: refactor idle/frozen_sync_thread() to fix deadlock (Yu Kuai) [task:183151]
  - md: add a mutex to synchronize idle and frozen in action_store() (Yu Kuai) [task:183151]
  - md: refactor action_store() for 'idle' and 'frozen' (Yu Kuai) [task:183151]
  - md-cluster/raid10: call update_size in md_reap_sync_thread (Guoqing Jiang) [task:128226]
  - closures: Change BUG_ON() to WARN_ON() (Kent Overstreet) [task:345719] {CVE-2024-42252}
  - drm/nouveau: prime: fix refcount underflow (Danilo Krummrich) [task:351447] {CVE-2024-43867}
  - Bluetooth: Fix usage of __hci_cmd_sync_status (Luiz Augusto von Dentz) [task:346425]
  - Bluetooth: L2CAP: Fix deadlock (Luiz Augusto von Dentz) [task:346425]
  - Bluetooth: hci_sync: Fix Opcode prints in bt_dev_dbg/err (Marcel Ziswiler) [task:346425]
  - Bluetooth: Fix race condition in hci_cmd_sync_clear (Min Li) [task:346425]
  - Bluetooth: hci_sync: Fix not processing all entries on cmd_sync_work (Luiz Augusto von Dentz) [task:346425]
  - Bluetooth: Add helper for serialized HCI command execution (Marcel Holtmann) [task:346425]
  - Bluetooth: Add support hdev to allocate private data (Tedd Ho-Jeong An) [task:346425]
  - bluetooth/l2cap: sync sock recv cb and release (Edward Adam Davis) [task:346425] {CVE-2024-41062}
  - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Marc Kleine-Budde) [task:223130] {CVE-2023-52878}
  - btrfs: fix use-after-free after failure to create a snapshot (Filipe Manana) [task:330299] {CVE-2022-48733}
  - media: mediatek: vcodec: Handle invalid decoder vsi (Irui Wang) [task:352191] {CVE-2024-43831}
  - tracing: Fix overflow in get_free_elt() (Tze-nan Wu) [task:352671] {CVE-2024-43890}
  - fpga: region: add owner module and take its refcount (Marco Pagani) [task:330557] {CVE-2024-35247}
  - f2fs: fix to don't dirty inode for readonly filesystem (Chao Yu) [task:352639] {CVE-2024-42297}
  - ext4: check dot and dotdot of dx_root before making dir indexed (Baokun Li) [task:352649] {CVE-2024-42305}
  - s390/pkey: Wipe copies of protected- and secure-keys (Holger Dengler) [task:346923] {CVE-2024-42155}
  - scsi: qla2xxx: Fix for possible memory corruption (Shreyas Deodhar) [task:352643] {CVE-2024-42288}
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (Alexey Kodanev) [task:352637] {CVE-2024-43839}
  - gpio: davinci: Validate the obtained number of IRQs (Aleksandr Mishin) [task:345785] {CVE-2024-42092}
  - Revert "drm/vc4: hdmi: Unregister codec device on unbind" (李豪杰) [task:344615, task:351057]
  - ext4: make sure the first directory block is not a hole (Baokun Li) [task:352077] {CVE-2024-42304}
  - ext4: fix file system corrupted when rmdir non empty directory with IO error (Ye Bin)
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Shigeru Yoshida) [task:352297] {CVE-2024-42284}
  - leds: trigger: Unregister sysfs attributes before calling deactivate() (Hans de Goede) [task:352209] {CVE-2024-43830}
  - dma: fix call order in dmam_free_coherent (Lance Richardson) [task:352215] {CVE-2024-43856}
  - drm/amd/display: Check for NULL pointer (Sung Joon Kim) [task:352265] {CVE-2024-42308}
  - drm/amd/display: Set flip pending for pipe split (Wesley Chalmers) [task:352265]
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (Ma Ke) [task:352277] {CVE-2024-42310}
  - serial: core: check uartclk for zero to avoid divide by zero (George Kennedy) [task:352289] {CVE-2024-43893}
  - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (Ma Ke) [task:352293] {CVE-2024-42309}
  - mISDN: Fix a use after free in hfcmulti_tx() (Dan Carpenter) [task:352165] {CVE-2024-42280}
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling (Yu Kuai) [task:352173] {CVE-2024-43914}
  - Bluetooth: MGMT: Add error handling to pair_device() (Griffin Kroah-Hartman) [task:352185] {CVE-2024-43884}
  - net/iucv: fix use after free in iucv_sock_close() (Alexandra Winter) [task:352285] {CVE-2024-42271}
  - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (Niklas Neronin) [task:346971] {CVE-2024-42226}
  - remoteproc: imx_rproc: Skip over memory region when node value is NULL (Aleksandr Mishin) [task:352177] {CVE-2024-43860}
  - remoteproc: imx_rproc: Fix ignoring mapping vdev regions (Dong Aisheng) [task:352177]
  - remoteproc: imx_rproc: ignore mapping vdev regions (Peng Fan) [task:352177]
  - scsi: qla2xxx: During vport delete send async logout explicitly (Manish Rangankar) [task:352283] {CVE-2024-42289}
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (Chao Yu) [task:352271] {CVE-2024-42311}
  - jfs: fix null ptr deref in dtInsertEntry (Edward Adam Davis) [task:352249] {CVE-2024-44939}
  - filelock: Fix fcntl/close race recovery compat path (Jann Horn) [task:347167] {CVE-2024-41020}
  - file: Factor files_lookup_fd_locked out of fcheck_files (Eric W. Biederman) [task:347167]
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Bart Van Assche) [task:352669] {CVE-2024-42285}
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block() (Ryusuke Konishi) [task:352291] {CVE-2024-42295}
  - net: ax25: Fix a compilation error (xiaolinkui) [task:351959]
  - kobject_uevent: Fix OOB access within zap_modalias_env() (Zijun Hu) [task:352127] {CVE-2024-42292}
  - jfs: Fix shift-out-of-bounds in dbDiscardAG (Pei Li) [task:352157] {CVE-2024-44938}
  - fs/jfs: fix potential integer overflow on shift of a int (Colin Ian King) [task:158034]
  - ALSA: hda: Do not unset preset when cleaning up codec (Cezary Rojewski) [task:222115] {CVE-2023-52736}
  - leds: mlxreg: Use devm_mutex_init() for mutex initialization (George Stark) [task:345699] {CVE-2024-42129}
  - locking/mutex: Introduce devm_mutex_init() (George Stark) [task:345699] {CVE-2024-42129}
  - exec: Fix ToCToU between perm check and set-uid/gid usage (Kees Cook) [task:351435] {CVE-2024-43882}
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Baochen Qiang) [task:351227] {CVE-2024-43879}
  - net: dsa: mv88e6xxx: fix use-after-free in mv88e6xxx_mdios_unregister (Vladimir Oltean) [task:346697]
  - net: dsa: mv88e6xxx: don't use devres for mdiobus (Vladimir Oltean) [task:346697] {CVE-2022-48818}
  - net: ipv6: ensure we call ipv6_mc_down() at most once (j.nixdorf@avm.de) [task:351441] {CVE-2022-48910}
  - ipv6/addrconf: use a boolean to choose between UNREGISTER/DOWN (Florent Fourcot) [task:351441]
  - ipv6/addrconf: call addrconf_ifdown with consistent values (Florent Fourcot) [task:351441]
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (Breno Leitao) [task:346411] {CVE-2024-40953}
  - net: usb: qmi_wwan: fix memory leak for not ip packets (Daniele Palmas) [task:351501] {CVE-2024-43861}
  - drm/amd/display: Check pipe offset before setting vblank (Alex Hung) [task:345701] {CVE-2024-42120}
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (Zijun Hu) [task:351331] {CVE-2024-43871}
  - driver core: Cast to (void *) with __force for __percpu pointer (Andy Shevchenko) [task:351331]
  - usb: vhci-hcd: Do not drop references before new references are gained (Oliver Neukum) [task:351507] {CVE-2024-43883}
  - drm/radeon: check bo_va->bo is non-NULL before using it (Pierre-Eric Pelloux-Prayer) [task:346959] {CVE-2024-41060}
  - greybus: Fix use-after-free bug in gb_interface_release due to race condition. (Sicong Huang) [task:347127] {CVE-2024-39495}
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (Miri Korenblit) [task:346187] {CVE-2024-40929}
  - ocfs2: fix unexpected zeroing of virtual disk (Chi Zhiling) [task:335993]
  - net/sched: initialize noop_qdisc owner (Johannes Berg) [task:217588]
  - net/sched: fix kabi change in struct Qdisc (Zhengchao Shao) [task:217588] {CVE-2024-27010, CVE-2024-27010}
  - net/sched: Fix mirred deadlock on device recursion (Eric Dumazet) [task:217588] {CVE-2024-27010}
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (Breno Leitao) [task:344437] {CVE-2024-40901}
  - scsi: mpt3sas: Gracefully handle online firmware update (Suganath Prabu) [task:344437] {CVE-2024-40901}
  - scsi: mpt3sas: Add ioc_<level> logging macros (Joe Perches) [task:344437] {CVE-2024-40901}
  - f2fs: Add inline to f2fs_build_fault_attr() stub (Nathan Chancellor) [task:346823] {CVE-2024-42160}
  - f2fs: check validation of fault attrs in f2fs_build_fault_attr() (Chao Yu) [task:346823] {CVE-2024-42160}
  - MIPS: Octeron: remove source file executable bit (Dominique Martinet) [task:347107]
  - MIPS: Octeon: Add PCIe link status check (Songyang Li) [task:347107] {CVE-2024-40968}
  - nvme-fabrics: use reserved tag for reg read/write command (Chunguang Xu) [task:345283] {CVE-2024-41082}
  - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info (Miaoqian Lin) [task:347101] {CVE-2022-48856}
  - net: inetdevice: provide replacement iterators for in_ifaddr walk (Florian Westphal) [task:352595]
  - security/selinux: Fixed crash caused by selinux (mengdehui) [bug:258979]
  - security/kysec: Fix crash when kysec from enable to disable (mengdehui@kylinos.cn) [bug:168035]
  - Revert "loop: Remove sector_t truncation checks" (Ben Hutchings)
  - net: hns3: fix kernel crash problem in concurrent scenario (Yonglong Liu) [task:351743] {CVE-2024-39507}
  - netpoll: Fix race condition in netpoll_owner_active (Breno Leitao) [task:351743]
  - net: make sure napi_list is safe for RCU traversal (Jakub Kicinski) [task:351743]
  - mmc: sdhci: Add sd host v4 mode (Chunyan Zhang) [task:350435]
  - mmc: sdhci: Add version V4 definition (Chunyan Zhang) [task:350435]
  - mmc: sdhci: Let a vendor driver supply and update ADMA descriptor size (Veerabhadrarao Badiganti) [task:350435]
  - mmc: sdhci: Add ADMA2 64-bit addressing support for V4 mode (Chunyan Zhang) [task:350435]
  - mmc: sdhci: add adma_table_cnt member to struct sdhci_host (Jisheng Zhang) [task:350435]
  - KVM: x86/mmu: make apf token non-zero to fix bug (Liang Zhang) [task:351445] {CVE-2022-48943}
  - irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses (Barry Song) [task:336421]
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Jesse Zhang) [task:346955] {CVE-2024-42228}
  - scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (John Garry) [task:346675] {CVE-2022-48792}
  - can: j1939: prevent deadlock by moving j1939_sk_errqueue() (Oleksij Rempel) [task:341503]
  - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new (Oleksij Rempel) [task:341503] {CVE-2023-52887}
  - can: j1939: extend UAPI to notify about RX status (Oleksij Rempel) [task:341503]
  - can: j1939: rename J1939_ERRQUEUE_* to J1939_ERRQUEUE_TX_* (Oleksij Rempel) [task:341503]
  - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [task:345299] {CVE-2024-39494}
  - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (Ferry Meng) [task:345115] {CVE-2024-41016}
  - ocfs2: add bounds checking to ocfs2_xattr_find_entry() (Ferry Meng) [task:345115] {CVE-2024-41016}
  - smb: client: fix potential UAF in cifs_stats_proc_write() (Paulo Alcantara) [task:221999] {CVE-2024-35868}
  - smb: client: fix potential UAF in smb2_is_valid_oplock_break() (Paulo Alcantara) [task:221987] {CVE-2024-35865}
  - smb: client: fix potential UAF in is_valid_oplock_break() (Paulo Alcantara) [task:327836] {CVE-2024-35863}
  - scsi: pm8001: Fix use-after-free for aborted TMF sas_task (John Garry) [task:346413] {CVE-2022-48791}
  - scsi: pm80xx: Fix TMF task completion race condition (Igor Pylypiv) [task:346413] {CVE-2022-48791}
  - mmc: davinci: Don't strip remove function when driver is builtin (Uwe Kleine-König) [task:347147] {CVE-2024-39484}
  - mmc: davinci_mmc: Convert to platform remove callback returning void (Yangtao Li) [task:347147]
  - jffs2: Fix potential illegal address access in jffs2_free_inode (Wang Yong) [task:347055] {CVE-2024-42115}
  - media: dvb-frontends: tda10048: Fix integer overflow (Ricardo Ribalda) [task:347059] {CVE-2024-42223}
  - ext4: do not create EA inode under buffer lock (Jan Kara) [task:347085] {CVE-2024-40972}
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Jan Kara) [task:347085]
  - ext4: check the return value of ext4_xattr_inode_dec_ref() (Li Zhong) [task:347085]
  - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Ritesh Harjani) [task:166857]
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (Hagar Hemdan) [task:347093] {CVE-2024-42090}
  - usb: usbtmc: Fix bug in pipe direction for control transfers (Alan Stern) [task:347095] {CVE-2022-48834}
  - usb: usbtmc: Fix memory leak in usbtmc_ioctl_request (Guido Kiener) [task:347095]
  - usb: usbtmc: Add ioctl for generic requests on control (Guido Kiener) [task:347095]
  - xfs: add bounds checking to xlog_recover_process_data (lei lu) [task:347089] {CVE-2024-41014}
  - kdb: Fix buffer overflow during tab-complete (Daniel Thompson) [task:347091] {CVE-2024-39480}
  - scsi: qedf: Fix refcount issue when LOGO is received during TMF (Saurav Kashyap) [task:347117] {CVE-2022-48823}
  - scsi: qedf: Modify flush routine to handle all I/Os and TMF (Shyam Sundar) [task:347117]
  - ocfs2: add bounds checking to ocfs2_check_dir_entry() (lei lu) [task:347123] {CVE-2024-41015}
  - nilfs2: fix inode number range checks (Ryusuke Konishi) [task:347125] {CVE-2024-42105}
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (Nikita Zhandarovich) [task:347131] {CVE-2024-41097}
  - ipv6: prevent possible NULL deref in fib6_nh_init() (Eric Dumazet) [task:347135] {CVE-2024-40961}
  - IB/core: Implement a limit on UMAD receive List (Michael Guralnik) [task:346963] {CVE-2024-42145}
  - mm: avoid overflows in dirty throttling logic (Jan Kara) [task:346909] {CVE-2024-42131}
  - libceph: fix race between delayed_work() and ceph_monc_stop() (Ilya Dryomov) [task:346915] {CVE-2024-42232}
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds (Ghadi Elie Rahme) [task:344619] {CVE-2024-42148}
  - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (Aleksandr Mishin) [task:345121] {CVE-2024-39506}
  - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep (Laurent Pinchart) [task:344571] {CVE-2024-42087}
  - jfs: xattr: fix buffer overflow for invalid xattr (Greg Kroah-Hartman) [task:344449] {CVE-2024-40902}
  - orangefs: fix out-of-bounds fsid access (Mike Marshall) [task:345297] {CVE-2024-42143}
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (Jiangfeng Xiao) [task:345307] {CVE-2024-39488}
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Dmitry Antipov) [task:345309] {CVE-2024-41072}
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (Eric Dumazet) [task:345313] {CVE-2024-40959}
  - ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu) [task:345315] {CVE-2024-39489}
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (Remi Pommarel) [task:345317] {CVE-2024-40912}
  - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (Lee Jones) [task:345415] {CVE-2024-42236}
  - hfsplus: fix uninit-value in copy_name (Edward Adam Davis) [task:345669] {CVE-2024-41059}
  - iio: chemical: bme680: Fix overflows in compensate() functions (Vasileios Amoiridis) [task:345679] {CVE-2024-42086}
  - HID: core: remove unnecessary WARN_ON() in implement() (Nikita Zhandarovich) [task:345675] {CVE-2024-39509}
  - drm/amdgpu: fix UBSAN warning in kv_dpm.c (Alex Deucher) [task:345695] {CVE-2024-40987}
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (Sam Sun) [task:345697] {CVE-2024-39487}
  - tcp_metrics: validate source addr length (Jakub Kicinski) [task:345703] {CVE-2024-42154}
  - net: can: j1939: Initialize unused data in j1939_send_one() (Shigeru Yoshida) [task:345711] {CVE-2024-42076}
  - net/iucv: Avoid explicit cpumask var allocation on stack (Dawei Li) [task:345717] {CVE-2024-42094}
  - jfs: don't walk off the end of ealist (lei lu) [task:345721] {CVE-2024-41017}
  - gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (Ian Ray) [task:345787] {CVE-2024-42253}
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (Ma Ke) [task:346897] {CVE-2024-41095}
  - nilfs2: add missing check for inode numbers on directory entries (Ryusuke Konishi) [task:345765] {CVE-2024-42104}
  - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (Ma Ke) [task:345779] {CVE-2024-42101}
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (Raju Rangoju) [task:345789] {CVE-2024-40984}
  - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [task:345799] {CVE-2024-42124}
  - scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (Saurav Kashyap) [task:345799]
  - drm/radeon: fix UBSAN warning in kv_dpm.c (Alex Deucher) [task:345729] {CVE-2024-40988}
  - inet_diag: Initialize pad field in struct inet_diag_req_v2 (Shigeru Yoshida) [task:345321] {CVE-2024-42106}
  - ax25: Fix refcount imbalance on inbound connections (Lars Kellogg-Stedman) [task:346363] {CVE-2024-40910}
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Herbert Xu) [task:346361] {CVE-2024-39493}
  - ASoC: fsl-asoc-card: set priv->pdev before using it (Elinor Montmasson) [task:346375] {CVE-2024-42089}
  - ata: libata-core: Fix null pointer dereference on error (Niklas Cassel) [task:346377] {CVE-2024-41098}
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (Alan Stern) [task:346373] {CVE-2024-40904}
  - ocfs2: fix races between hole punching and AIO+DIO (Su Yue) [task:345287] {CVE-2024-40943}
  - s390/pkey: Wipe sensitive data on failure (Holger Dengler) [task:346395] {CVE-2024-42157}
  - ipv6: prevent possible NULL dereference in rt6_probe() (Eric Dumazet) [task:346387] {CVE-2024-40960}
  - drm/exynos/vidi: fix memory leak in .get_modes() (Jani Nikula) [task:346391] {CVE-2024-40932}
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (Emmanuel Grumbach) [task:346417] {CVE-2024-40941}
  - ata: libata-core: Fix double free on error (Niklas Cassel) [task:346673] {CVE-2024-41087}
  - net: ethernet: lantiq_etop: fix double free in detach (Aleksander Jan Bajkowski) [task:346393] {CVE-2024-41046}
  - net: lantiq_etop: add blank line after declaration (Aleksander Jan Bajkowski) [task:346393]
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (Ma Ke) [task:346905] {CVE-2024-41089}
  - i2c: lpi2c: Avoid calling clk_get_rate during transfer (Alexander Stein) [task:346895] {CVE-2024-40965}
  - i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work (Carlos Song) [task:346895]
  - i2c: imx-lpi2c: use bulk clk API (Peng Fan) [task:346895]
  - tipc: fix kernel panic when enabling bearer (Tung Nguyen) [task:346901] {CVE-2022-48865}
  - tipc: fix NULL pointer dereference in tipc_disc_rcv() (Tuong Lien) [task:346901]
  - tipc: add reference counter to bearer (Tuong Lien) [task:346901]
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref() (Eric Dumazet) [task:346925] {CVE-2024-40981}
  - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr (Piotr Wojtaszczyk) [task:346937] {CVE-2024-42153}
  - fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen) [task:346943] {CVE-2024-39475}
  - drm/vc4: Fix deadlock on DSI device attach error (Padmanabha Srinivasaiah) [task:346939] {CVE-2022-48826}
  - drm/vc4: dsi: Only register our component once a DSI device is attached (Maxime Ripard) [task:346939]
  - drm/amd/display: Skip finding free audio for unknown engine_id (Alex Hung) [task:346961] {CVE-2024-42119}
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Jan Kara) [task:346949] {CVE-2024-42102}
  - net: dsa: mv88e6xxx: Correct check for empty list (Simon Horman) [task:346967] {CVE-2024-42224}
  - ocfs2: fix DIO failure due to insufficient transaction credits (Jan Kara) [task:346985] {CVE-2024-42077}
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Sagi Grimberg) [task:346989] {CVE-2024-42152}
  - nvmet: update AEN list and array at one place (Daniel Wagner) [task:346989]
  - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects (Nicolas Escande) [task:346993] {CVE-2024-40942}
  - ftruncate: pass a signed offset (Arnd Bergmann) [task:346997] {CVE-2024-42084}
  - vmci: prevent speculation leaks by sanitizing event in event_deliver() (Hagar Gamal Halim Hemdan) [task:347011] {CVE-2024-39499}
  - ppp: reject claimed-as-LCP but actually malformed packets (Dmitry Antipov) [task:347013] {CVE-2024-41044}
  - ppp: ensure minimum packet size in ppp_write() (Eric Dumazet) [task:160493]
  - s390/sclp: Fix sclp_init() cleanup on failure (Heiko Carstens) [task:347023] {CVE-2024-41068}
  - scsi: qedi: Fix crash while reading debugfs attribute (Manish Rangankar) [task:347025] {CVE-2024-40978}
  - mISDN: Fix memory leak in dsp_pipeline_build() (Alexey Khoroshilov) [task:347035] {CVE-2022-48863}
  - mISDN: Remove obsolete PIPELINE_DEBUG debugging information (Zhen Lei) [task:347035]
  - ALSA: emux: improve patch ioctl data validation (Oswald Buddenhagen) [task:347041] {CVE-2024-42097}
  - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (Ryusuke Konishi) [task:347027] {CVE-2024-39469}
  - nilfs2: return the mapped address from nilfs_get_page() (Matthew Wilcox (Oracle)) [task:347027]
  - nilfs2: Remove check for PageError (Matthew Wilcox (Oracle)) [task:347027]
  - ftrace: Fix possible use-after-free issue in ftrace_location() (Zheng Yejian) [task:330288] {CVE-2024-38588}
  - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (Zheng Yejian) [task:330288]
  - sysctl: add proc interface to set page cache limit (Chen Wandun)
  - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (Alan Stern) [task:345741] {CVE-2024-41035}
  - USB: core: add endpoint-blacklist quirk (Johan Hovold) [task:345741] {CVE-2024-41035}
  - usb: core: config: using bit mask instead of individual bits (Pavel Hofman) [task:345741] {CVE-2024-41035}
  - usb: core: config: fix validation of wMaxPacketValue entries (Pavel Hofman) [task:345741] {CVE-2024-41035}
  - USB: Fix: Don't skip endpoint descriptors with maxpacket=0 (Alan Stern) [task:345741] {CVE-2024-41035}
  - drm/vc4: hdmi: Unregister codec device on unbind (Maxime Ripard) [task:344615] {CVE-2022-48852}
  - tcp: Fix listen() regression in 4.19.270 (Kuniyuki Iwashima) [task:166857, bug:253275]
  - net: fix kabi broken in struct dst_ops (taowei) [task:200581]
  - ipv6: remove max_size check inline with ipv4 (Jon Maxwell) [task:200581] {CVE-2023-52340}
  - net/dst: use a smaller percpu_counter batch for dst entries accounting (Eric Dumazet) [task:200581] {CVE-2023-52340}
  - net: add a route cache full diagnostic message (Peter Oskolkov) [task:200581] {CVE-2023-52340}
  - net: fix kabi broken in struct netns_ipv6 (taowei) [task:200581]
  - ipv6: make ip6_rt_gc_expire an atomic_t (Eric Dumazet) [task:200581] {CVE-2023-52340}
  - net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov) [task:330544] {CVE-2024-38538}
  - net_sched: walk through all child classes in tc_bind_tclass() (Cong Wang) [task:218825]
  - netfilter: tproxy: bail out if IP has been disabled on the device (Florian Westphal) [task:330558] {CVE-2024-36270}
  - netfilter: use in_dev_for_each_ifa_rcu (Florian Westphal) [task:330558]
  - ACPI: CPPC: Fix access width used for PCC registers (Vanshidhar Konda) [task:223069]
  - ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro (Jarred White) [task:223069]
  - ACPI: CPPC: Use access_width over bit_width for system memory accesses (Jarred White) [task:223069] {CVE-2024-35995}
  - ACPI: CPPC: Drop redundant local variable from cpc_read() (Rafael J. Wysocki) [task:223069]
  - ACPI: CPPC: fix some coding style issues (Xiaofei Tan) [task:223069]
  - ACPI: CPPC: Fix up I/O port access in cpc_read() (Rafael J. Wysocki) [task:223069]
  - ACPI: CPPC: Implement support for SystemIO registers (Steven Noonan) [task:223069]
  - ACPI: CPPC: initialise vaddr pointers to NULL (Ionela Voinescu) [task:223069]
  - net: relax socket state check at accept time. (Paolo Abeni) [task:341253] {CVE-2024-36484}
  - jfs: Fix array-index-out-of-bounds in diFree (Jeongjun Park)
  - nfsd: Fix races between nfsd4_cb_release() and nfsd4_shutdown_callback() (Trond Myklebust) [task:334950]
  - nfsd: minor 4.1 callback cleanup (Trond Myklebust) [task:334950]
  - Bluetooth: Fix slab-out-of-bounds Read in hci_le_ext_adv_report_evt (luoxuanqiang) [task:218812]
  - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Ding Hui) [task:337725] {CVE-2023-52885}
  - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [task:222101] {CVE-2023-52752}
  - crypto: af_alg - get rid of alg_memory_allocated (Eric Dumazet) [task:341427] {CVE-2022-48781}
  - epoll: be better about file lifetimes (Linus Torvalds) [task:330566] {CVE-2024-38580}
  - i2c: acpi: Unbind mux adapters before delete (Hamish Martin) [task:332220] {CVE-2024-39362}
  - i2c: add fwnode APIs (Russell King (Oracle)) [task:332220]
  - btrfs: fix race between quota rescan and disable leading to NULL pointer deref (Filipe Manana) [task:330358] {CVE-2022-48734}
  - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (Nikolay Borisov) [task:330358] {CVE-2022-48734}
  - btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (Filipe Manana) [task:158034]
  - btrfs: fix lockdep splat when reading qgroup config on mount (Filipe Manana) [task:158034]
  - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup (Sidong Yang) [task:330358] {CVE-2022-48734}
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" (Finn Thain) [task:330496] {CVE-2024-38607}
  - ALSA: Fix deadlocks with kctl removals at disconnection (Takashi Iwai) [task:330474] {CVE-2024-38600}
  - btrfs: fix deadlock between quota disable and qgroup rescan worker (Shin'ichiro Kawasaki) [task:330358] {CVE-2022-48734}
  - btrfs: fix lockdep splat when enabling and disabling qgroups (Filipe Manana) [task:330358] {CVE-2022-48734}
  - btrfs: move ulist allocation out of transaction in quota enable (David Sterba) [task:330358] {CVE-2022-48734}
  - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Niklas Neronin) [task:223058] {CVE-2023-52781}
  - media: i2c: et8ek8: Don't strip remove function when driver is builtin (Uwe Kleine-König) [task:330538] {CVE-2024-38611}
  - ax25: Fix reference count leak issue of net_device (Duoming Zhou) [task:330518] {CVE-2024-38554}
  - perf report: Fix memory leaks around perf_tip() (Ian Rogers) [task:225610] {CVE-2021-47543}
  - net: fec: remove .ndo_poll_controller to avoid deadlocks (Wei Fang) [task:330300]
  - wifi: cfg80211: check A-MSDU format more carefully (Johannes Berg) [task:223115] {CVE-2024-35937}
  - vfio/pci: fix potential memory leak in vfio_intx_enable() (Ye Bin) [task:330570] {CVE-2024-38632}
  - ax25: Fix reference count leak issues of ax25_dev (Duoming Zhou) [task:330575] {CVE-2024-38602}
  - ax25: merge repeat codes in ax25_dev_device_down() (Lu Wei) [task:330575] {CVE-2024-38602}
  - eth: sungem: remove .ndo_poll_controller to avoid deadlocks (Jakub Kicinski) [task:330488] {CVE-2024-38597}
  - ptp: fix code indentation issues (Carlos Llamas) [task:222085]
  - ptp: Fix possible memory leak in ptp_clock_register() (Yang Yingliang) [task:222085] {CVE-2021-47455}
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (Kuniyuki Iwashima) [task:330565] {CVE-2024-37356}
  - params: lift param_set_uint_minmax to common code (Sagi Grimberg) [task:330565]
  - ubifs: Fix races between xattr_{set|get} and listxattr operations (Zhihao Cheng) [task:223056] {CVE-2021-47351}
  - ring-buffer: Fix a race between readers and resize checks (Petr Pavlu) [task:330286] {CVE-2024-38601}
  - scsi: bfa: Ensure the copied buf is NUL terminated (Bui Quang Minh) [task:330280] {CVE-2024-38560}
  - drm: vc4: Fix possible null pointer dereference (Aleksandr Mishin) [task:330526] {CVE-2024-38546}
  - mmc: sdhci-msm: pervent access to suspended controller (Mantas Pucka) [task:224217] {CVE-2024-36029}
  - mmc: sdhci-msm: add Inline Crypto Engine support (Eric Biggers) [task:224217]
  - mmc: sdhci-msm: Mark sdhci_msm_cqe_disable static (Stephen Boyd) [task:224217]
  - mmc: sdhci-msm: Add CQHCI support for sdhci-msm (Ritesh Harjani) [task:224217]
  - mmc: sdhci-msm: Use OPP API to set clk/perf state (Rajendra Nayak) [task:224217]
  - mmc: sdhci-msm: Re-initialize DLL if MCLK is gated dynamically (Veerabhadrarao Badiganti) [task:224217]
  - xfs: cap longest free extent to maximum allocatable (Dave Chinner) [task:328072]
  - nilfs2: fix use-after-free of timer for log writer thread (Ryusuke Konishi) [task:330506] {CVE-2024-38583}
  - KVM: LAPIC: Also cancel preemption timer during SET_LAPIC (Wanpeng Li) [task:330470] {CVE-2022-48765}
  - KVM: LAPIC: Write 0 to TMICT should also cancel vmx-preemption timer (Wanpeng Li) [task:330470]
  - KVM: LAPIC: Advancing the timer expiration on guest initiated write (Wanpeng Li) [task:330470]
  - KVM: LAPIC: Also cancel preemption timer when disarm LAPIC timer (Wanpeng Li) [task:330470]
  - ecryptfs: Fix buffer size for tag 66 packet (Brian Kubisiak) [task:330504] {CVE-2024-38578}
  - netrom: fix possible dead-lock in nr_rt_ioctl() (Eric Dumazet) [task:330492] {CVE-2024-38589}
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (Ilya Maximets) [task:330359] {CVE-2024-38558}
  - m68k: Fix spinlock race in kernel thread creation (Michael Schmitz) [task:330486] {CVE-2024-38613}
  - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc (Chengfeng Ye) [task:216643] {CVE-2021-47211}
  - rpmbuild: add --without-kabi-check parameter support (Jiangshan Yi) [task:345291]


author: Zhengyuan Liu <liuzhengyuan@kylinos.cn> - 4.19.90-23.52.v2101
changelog:
  - crash_core, vmcoreinfo: append 'SECTION_SIZE_BITS' to vmcoreinfo (Pingfan Liu) [bug:281263]
  - crash_core, vmcoreinfo: Append 'MAX_PHYSMEM_BITS' to vmcoreinfo (Bhupesh Sharma) [bug:281263]
  - kdump: Document kernel data exported in the vmcoreinfo note (Lianbo Jiang) [bug:281263]
  - xfs: make sure sb_fdblocks is non-negative (Wengang Wang) [task:354053]
  - kernfs: fix potential NULL dereference in __kernfs_remove (Yushan Zhou) [task:352489]
  - kernfs: fix NULL dereferencing in kernfs_remove (Minchan Kim) [task:352489]
  - kernfs: remove redundant kernfs_rwsem declaration. (Imran Khan) [task:352489]
  - kernfs: prevent early freeing of root node (Minchan Kim) [task:352489]
  - kernfs: switch global kernfs_rwsem lock to per-fs lock (Minchan Kim) [task:352489]
  - kernfs: don't create a negative dentry if inactive node exists (Ian Kent) [task:210868]
  - kernfs: also call kernfs_set_rev() for positive dentry (Hou Tao) [task:210868]
  - kernfs: dont call d_splice_alias() under kernfs node lock (Ian Kent) [task:210868]
  - kernfs: use i_lock to protect concurrent inode updates (Ian Kent) [task:210868]
  - kernfs: switch kernfs to use an rwsem (Ian Kent) [task:210868]
  - kernfs: use VFS negative dentry caching (Ian Kent) [task:210868]
  - kernfs: add a revision to identify directory node changes (Ian Kent) [task:210868]
  - fix some dtb compile warnings (zhouyuhang) [task:328882, task:329382]
  - ALSA: line6: Fix racy access to midibuf (Takashi Iwai) [task:364721]
  - tcp_bpf: fix return value of tcp_bpf_sendmsg() (Cong Wang) [task:364047] {CVE-2024-46783}
  - drm/amd/display: Check BIOS images before it is used (Alex Hung) [task:368525] {CVE-2024-46809}
  - drm/amdgpu: Replace one-elements array with flex-array members (Paulo Miguel Almeida) [task:368525]
  - btrfs: clean up our handling of refs == 0 in snapshot delete (Josef Bacik) [task:368305] {CVE-2024-46840}
  - ELF: fix kernel.randomize_va_space double read (Alexey Dobriyan) [task:368307] {CVE-2024-46826}
  - kbuild: Drop -Wdeclaration-after-statement (Jiangshan Yi)
  - drm/amd/display: Check gpio_id before used as array index (Alex Hung) [task:368129] {CVE-2024-46818}
  - drm/amd/display: Check hpd_gpio for NULL before accessing it (Harry Wentland) [task:368129]
  - drm/amd/display: add gpio lock/unlock (Chiawen Huang) [task:368129]
  - drm/amd/display: fix sporadic multiple aux transaction failure (Yogesh Mohan Marimuthu) [task:368129]
  - drm/amd/display: add query HPD interface. (Chiawen Huang) [task:368129]
  - net: dpaa: Pad packets to ETH_ZLEN (Sean Anderson) [task:368157] {CVE-2024-46854}
  - drm/vmwgfx: Fix a deadlock in dma buf fence polling (Zack Rusin) [task:351069] {CVE-2024-43863}
  - drm/vmwgfx/vmwgfx_fence: Add, remove and demote various documentation params/headers (Lee Jones) [task:351069] {CVE-2024-43863}
  - driver: iio: add missing checks on iio_info's callback access (Julien Stephan) [task:363791] {CVE-2024-46715}
  - sched/smt: Fix unbalance sched_smt_present dec/inc (Yang Yingliang) [task:357951] {CVE-2024-44958}
  - xfs: don't account extra agfl blocks as available (Brian Foster) [task:354053]
  - ASoC: topology: Fix route memory corruption (Amadeusz Sławiński) [task:346623] {CVE-2024-41069}
  - gtp: fix a potential NULL pointer dereference (Cong Wang) [task:363647] {CVE-2024-46677}
  - arm64/sparsemem: reduce SECTION_SIZE_BITS (Sudarshan Rajagopalan) [bug:219958]
  - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (Ma Jun) [task:364199] {CVE-2024-46724}
  - drm/amd/pm: fix the Out-of-bounds read warning (Jesse Zhang) [task:363753] {CVE-2024-46731}
  - memcg_write_event_control(): fix a user-triggerable oops (Al Viro) [task:363965] {CVE-2024-45021}
  - pktgen: use cpus_read_lock() in pg_net_init() (Eric Dumazet) [task:363783] {CVE-2024-46681}
  - pktgen: fix misuse of BUG_ON() in pktgen_thread_worker() (Di Zhu) [task:158034]
  - drm/amd/display: Add null checker before passing variables (Alex Hung) [task:352183] {CVE-2024-43902}
  - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Dragos Tatulea) [task:363773] {CVE-2024-44970}
  - ila: call nf_unregister_net_hooks() sooner (Eric Dumazet) [task:364193] {CVE-2024-46782}
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (David Fernandez Gonzalez) [task:364051] {CVE-2024-46738}
  - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:364043] {CVE-2024-46756}
  - scsi: aacraid: Fix double-free on probe failure (Ben Hutchings) [task:363975] {CVE-2024-46673}
  - dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor (Olivier Dautricourt) [task:363973] {CVE-2024-46716}
  - dmaengine: altera-msgdma: Correctly handle descriptor callbacks (Lars-Peter Clausen) [task:363973]
  - hwmon: (lm95234) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:363963] {CVE-2024-46758}
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (Camila Alvarez) [task:364071] {CVE-2024-46747}
  - Squashfs: sanity check symbolic link size (Phillip Lougher) [task:364131] {CVE-2024-46744}
  - mmc: mmc_test: Fix NULL dereference on allocation failure (Dan Carpenter) [task:364203] {CVE-2024-45028}
  - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:364195] {CVE-2024-46757}
  - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (Sascha Hauer) [task:363957] {CVE-2024-46755}
  - apparmor: fix possible NULL pointer dereference (Leesoo Ahn) [task:364181] {CVE-2024-46721}
  - ACPI: extlog: fix NULL pointer dereference check (Prarit Bhargava) [task:364161] {CVE-2023-52605}
  - usb: dwc3: core: Prevent USB core invalid event buffer address access (Selvarasu Ganesan) [task:364045] {CVE-2024-46675}
  - usb: dwc3: core: Skip setting event buffers for host only controllers (Krishna Kurapati) [task:364045]
  - hwmon: (adc128d818) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:363803] {CVE-2024-46759}
  - udf: Avoid excessive partition lengths (Jan Kara) [task:363799] {CVE-2024-46777}
  - udf: Define EFSCORRUPTED error code (Jan Kara) [task:166857]
  - drm/amdgpu: fix ucode out-of-bounds read warning (Tim Huang) [task:364077] {CVE-2024-46723}
  - bpf: Remove tst_run from lwt_seg6local_prog_ops. (Sebastian Andrzej Siewior) [task:364073] {CVE-2024-46754}
  - PCI: Add missing bridge lock to pci_bus_lock() (Dan Williams) [task:364081] {CVE-2024-46750}
  - usb: dwc3: st: fix probed platform device ref count on probe error path (Krzysztof Kozlowski) [task:364169] {CVE-2024-46674}
  - sch/netem: fix use after free in netem_dequeue (Stephen Hemminger) [task:364105] {CVE-2024-46800}
  - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (Krishna Kumar) [task:364063] {CVE-2024-46761}
  - nfc: pn533: Add poll mod list filling check (Aleksandr Mishin) [task:364099] {CVE-2024-46676}
  - nfc: pn533: Add autopoll capability (Lars Poeschel) [task:364099]
  - nfc: pn533: Add dev_up/dev_down hooks to phy_ops (Lars Poeschel) [task:364099]
  - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). (Kuniyuki Iwashima) [task:364095]
  - can: bcm: Remove proc entry when dev is unregistered. (Kuniyuki Iwashima) [task:364095] {CVE-2024-46771}
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk (Stefan Wiehler) [task:364093] {CVE-2024-46743}
  - binder: fix UAF caused by offsets overwrite (Carlos Llamas) [task:364173] {CVE-2024-46740}
  - nilfs2: protect references to superblock parameters exposed in sysfs (Ryusuke Konishi) [task:364057] {CVE-2024-46780}
  - nilfs2: replace snprintf in show functions with sysfs_emit (Qing Wang) [task:364057]
  - btrfs: qgroup: fix quota root leak after quota disable failure (Filipe Manana) [task:347151] {CVE-2024-41078}
  - Revert "btrfs: qgroup: fix quota root leak after quota disable failure" (wangdicheng) [task:347151]
  - pinctrl: single: fix potential NULL dereference in pcs_get_function() (Ma Ke) [task:363769] {CVE-2024-46685}
  - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (Saurabh Sengar) [task:363759] {CVE-2024-46739}
  - drm/amdgpu: fix mc_data out-of-bounds read warning (Tim Huang) [task:363795] {CVE-2024-46722}
  - netem: fix return value if duplicate enqueue fails (Stephen Hemminger) [task:364103] {CVE-2024-45016}
  - net: netem: fix use after free and double free with packet corruption (Jakub Kicinski) [task:364103]
  - Input: uinput - reject requests with unreasonable number of slots (Dmitry Torokhov) [task:364055] {CVE-2024-46745}
  - net: dsa: mv88e6xxx: Fix out-of-bound access (Joseph Huang) [task:358101] {CVE-2024-44988}
  - btrfs: qgroup: fix quota root leak after quota disable failure (Filipe Manana) [task:347151] {CVE-2024-41078}
  - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() (Chao Yu) [task:347103] {CVE-2024-39467}
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show() (Chen Ridong) [task:352627] {CVE-2024-43853}
  - netfilter: ctnetlink: use helper function to calculate expect ID (Pablo Neira Ayuso) [task:357933] {CVE-2024-44944}
  - net: hns3: fix a deadlock problem when config TC during resetting (Jie Wang) [task:358107] {CVE-2024-44995}
  - ssb: Fix potential NULL pointer dereference in ssb_device_uevent() (Rand Deeb) [task:347161] {CVE-2024-40982}
  - fuse: Initialize beyond-EOF page contents before setting uptodate (Jann Horn) [task:358119] {CVE-2024-44947}
  - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (Andi Shyti) [task:351225] {CVE-2024-42259}
  - Input: MT - limit max slots (Tetsuo Handa) [task:357851] {CVE-2024-45008}
  - kcm: Serialise kcm_sendmsg() for the same socket. (Kuniyuki Iwashima) [task:358105] {CVE-2024-44946}
  - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (Dmitry Baryshkov) [task:357971] {CVE-2024-44982}
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (Mathias Nyman) [task:357961] {CVE-2024-45006}
  - s390/sclp: Prevent release of buffer in I/O (Peter Oberparleiter) [task:357955] {CVE-2024-44969}
  - x86/mm: Fix pti_clone_pgtable() alignment assumption (Peter Zijlstra) [task:357895] {CVE-2024-44965}
  - ipv6: prevent UAF in ip6_send_skb() (Eric Dumazet) [task:357925] {CVE-2024-44987}
  - atm: idt77252: prevent use after free in dequeue_rx() (Dan Carpenter) [task:357805] {CVE-2024-44998}
  - wifi: mac80211: sdata can be NULL during AMPDU start (Alexander Wetzel) [task:351523] {CVE-2022-48875}
  - x86/mtrr: Check if fixed MTRRs exist before saving them (Andi Kleen) [task:357771] {CVE-2024-44948}
  - usb: gadget: core: Check for unset descriptor (Chris Wulff) [task:357799] {CVE-2024-44960}
  - media: dvb-usb-v2: af9035: fix missing unlock (Hans Verkuil) [task:357803]
  - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong) [task:357803] {CVE-2023-52915}
  - ibmvnic: Add tx check to prevent skb leak (Nick Child) [task:345709] {CVE-2024-41066}
  - ext4: remove the special buffer dirty handling in do_journal_get_write_access (Shida Zhang) [task:345663]
  - ext4: fix a potential assertion failure due to improperly dirtied buffer (Shida Zhang) [task:345663]
  - ext4: hoist ext4_block_write_begin and replace the __block_write_begin (Shida Zhang) [task:345663]
  - ext4: persist the new uptodate buffers in ext4_journalled_zero_new_buffers (Shida Zhang) [task:345663]
  - drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update (Srinivasan Shanmugam) [task:352661] {CVE-2024-43903}
  - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules (Ma Jun) [task:352181] {CVE-2024-43907}
  - x86: stop playing stack games in profile_pc() (Linus Torvalds) [task:347039] {CVE-2024-42096}
  - NFSD: Fix ia_size underflow (Chuck Lever) [task:347049] {CVE-2022-48828}
  - f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC (Chao Yu) [task:352651] {CVE-2024-44942}
  - null_blk: fix validation of block size (Andreas Hindborg) [task:347007] {CVE-2024-41077}
  - block: Add a helper to validate the block size (Xie Yongji)
  - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (Dave Jiang) [task:346975] {CVE-2024-42110}
  - USB: serial: mos7840: fix crash on resume (Dmitry Smirnov) [task:347175] {CVE-2024-42244}
  - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Kenton Groombridge) [task:346919] {CVE-2024-41071}
  - s390/pkey: Wipe copies of clear-key structures on failure (Holger Dengler) [task:345319] {CVE-2024-42156}
  - ipv6: sr: fix missing sk_buff release in seg6_input_core (Andrea Mayer) [task:347171] {CVE-2024-39490}
  - filelock: Remove locks reliably when fcntl/close race is detected (Jann Horn) [task:346931] {CVE-2024-41012}
  - btrfs: get rid of warning on transaction commit when using flushoncommit (Filipe Manana) [task:351471] {CVE-2022-48920}
  - f2fs: fix return value of f2fs_convert_inline_inode() (Chao Yu) [task:352015] {CVE-2024-42296}
  - f2fs: fix to consider multiple device for readonly check (Chao Yu) [task:352015]
  - perf/x86/intel: Limit the period on Haswell (Kan Liang) {CVE-2024-46848}
  - dma-direct: Leak pages on dma_set_decrypted() failure (Rick Edgecombe) [task:222011] {CVE-2024-35939}
  - OPENEULER: NFS: remove unused check for negative dentry (Benjamin Coddington) [task:361903]
  - OPENEULER: NFSv3: use nfs_add_or_obtain() to create and reference inodes (Benjamin Coddington) [task:361903]
  - OPENEULER: NFS: Refactor nfs_instantiate() for dentry referencing callers (Benjamin Coddington) [task:361903]
  - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 (Marc Zyngier) [task:363883] {CVE-2024-46707}
  - KVM: arm64: Save/restore sp_el0 as part of __guest_enter (Marc Zyngier) [task:351171]
  - arm64: kvm: stop treating register x18 as caller save (Ard Biesheuvel) [task:351171]
  - netlink: fix kabi broken (gonglinkai) [task:360011]
  - drm/msm: another fix for the headless Adreno GPU (Dmitry Baryshkov) [task:351463] {CVE-2023-52911}
  - drm/msm: Make .remove and .shutdown HW shutdown consistent (Javier Martinez Canillas) [task:351463]
  - drm/msm: Fix wrong size calculation (Xianting Tian) [task:160493]
  - drm/msm: fix shutdown hook in case GPU components failed to bind (Dmitry Baryshkov) [task:158827]
  - drm/msm: Call msm_init_vram before binding the gpu (Craig Tatlor) [task:158034]
  - drm/msm: add shutdown support for display platform_driver (Krishna Manikandan) [task:157172]
  - drm/msm: fix leaks if initialization fails (Pavel Machek) [task:157172]
  - drm/msm: Set dma maximum segment size for mdss (Sean Paul) [task:155707]
  - PHYTIUM: drm/phytium: Add driver version information (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Add PWM backlight control for pe220x eDP (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Change the drm driver name for pe220x (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Add dc patch for BMC (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Modify driver to adapt to ARM and X86_64 compiles (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Mask the hdcp timer irq (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Mask the AUX reply error interrupt (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Adjust log printing level (WangHao) [task:346055]
  - PHYTIUM: drm/phytium: Replace default EFI fb0 with DC FB (WangHao) [task:346055]
  - PHYTIUM: drm/phytium: Fixed dp codec id (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Get edid audio capability (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Bugfix Xorg startup for ps23xx when using pe2201 bmc card (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Cursor hot support negative numbers (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Enable gamma features (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Add capability of tile mode (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Limit the TU to a maximum of 63 (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Sync patches from 4.19.y-dev oss branch (Wang Yinfeng) [task:346055]
  - mm/vmscan: Fix hard LOCKUP in function isolate_lru_pages (liuye) [task:334682]
  - tracing: Fix race issue between cpu buffer write and swap (Zheng Yejian)
  - netlink: convert nlk->flags to atomic flags (Eric Dumazet) [task:345975]
  - netlink: Use copy_to_user() for optval in netlink_getsockopt(). (Kuniyuki Iwashima) [task:345975]
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy) [task:119087] {CVE-2022-3564}
  - spi: fix kabi breakage in struct spi_controller (lifangxu) [task:221921]
  - spi: Fix deadlock when adding SPI controllers on SPI buses (Mark Brown) [task:221921] {CVE-2021-47469}
  - sched/core: Further clarify sched_class::set_next_task() (Peter Zijlstra) [task:101857]
  - sched: Fix pick_next_task() vs 'change' pattern race (Peter Zijlstra) [task:101857]
  - sched: Rework pick_next_task() slow-path (Peter Zijlstra) [task:101857]
  - sched: Allow put_prev_task() to drop rq->lock (Peter Zijlstra) [task:101857]
  - sched/fair: Expose newidle_balance() (Peter Zijlstra) [task:101857]
  - sched: Add task_struct pointer to sched_class::set_curr_task (Peter Zijlstra) [task:101857]
  - sched: Rework CPU hotplug task selection (Peter Zijlstra) [task:101857]
  - sched/{rt,deadline}: Fix set_next_task vs pick_next_task (Peter Zijlstra) [task:101857]
  - sched/core: Introduce set_next_task() helper for better code readability (Muchun Song) [task:101857]
  - fpga: region: fix compilation error for commit 7dd30f1e070 (limiao) [task:354605]
  - ASoC: hdmi-codec: Add an op to set callback function for plug event (Cheng-Yi Chiang) [task:110384]
  - PHYTIUM: drm/phytium: save vram by dma (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: skip less than 640x480 mode (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: adjust e2000 phy parameters (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: disable pixel clock before dc reset (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: support for linux-5.10.0 (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: Remove reset before close pixel clock (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: Read EDID when getting mode (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: Add E2000 Display Engine support (Yang Xun) [task:110384]
  - PHYTIUM: drm/phytium: update phytium x100 dc driver before support e2000 (oushixiong) [task:110384]
  - arm64/spinlock: fix a -Wunused-function warning (Qian Cai) [task:351849]
  - locking/osq: Use optimized spinning loop for arm64 (Waiman Long) [task:351849]
  - kylin/gmjstcm: fix compilation warning (Li Jun) [task:352591]
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Daniel Borkmann) [task:347029] {CVE-2024-42246}
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Tetsuo Handa) [task:347077] {CVE-2024-41063}
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (David Ruth) [task:344573] {CVE-2024-40995}
  - fix some compilation warnings (Jiangshan Yi) [task:356221]
  - overflow: Add __must_check attribute to check_*() helpers (Kees Cook) [task:356221]
  - net/mlx5: Add a blank line after declarations (Wenpeng Liang) [task:356221]
  - crypto: ccp - Remove forward declaration (Nathan Chancellor) [task:356221]
  - kprobes: Fix compiler warning for !CONFIG_KPROBES_ON_FTRACE (Muchun Song) [task:356221]
  - ibmvnic: don't release napi in __ibmvnic_open() (Sukadev Bhattiprolu) [task:346945] {CVE-2022-48811}
  - ibmvnic: avoid calling napi_disable() twice (Lijun Pan) [task:158827]
  - powerpc/vnic: Extend "failover pending" window (Sukadev Bhattiprolu) [task:346945]
  - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Eric Dumazet) [task:347083] {CVE-2024-42114}
  - netlink: extend policy range validation (Johannes Berg) [task:347083]
  - xdp: Remove WARN() from __xdp_reg_mem_model() (Daniil Dulov) [task:345323] {CVE-2024-42082}
  - scsi: qla2xxx: validate nvme_local_port correctly (Nilesh Javali) [task:354889] {CVE-2024-42286}
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Pablo Neira Ayuso) [task:346667] {CVE-2024-42070}
  - drop_monitor: replace spin_lock by raw_spin_lock (Wander Lairson Costa) [task:345791] {CVE-2024-40980}
  - bpf: Fix a segment issue when downgrading gso_size (Fred Li) [task:352237] {CVE-2024-42281}
  - bpf: add bpf_skb_adjust_room flag BPF_F_ADJ_ROOM_FIXED_GSO (Willem de Bruijn) [task:352237]
  - bpf: add bpf_skb_adjust_room mode BPF_ADJ_ROOM_MAC (Willem de Bruijn) [task:352237]
  - CDC-NCM: avoid overflow in sanity checking (Oliver Neukum) [task:351493] {CVE-2022-48938}


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-11
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-13
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 CVE-2021-42386


author: liuxu <liuxu156@huawei.com> - 1:1.31.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: lutianxiong<lutianxiong@huawei.com> - 1.16.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix invalid read in ares_parse_soa_reply.c found during fuzzing


author: xinghe <xinghe2@h-partners.com> - 1.16.1-7
changelog:
  - Type:cves
  - CVE:CVE-2023-31130 CVE-2023-31124 CVE-2023-31147
  - SUG:NA
  - DESC:fix CVE-2023-31130 CVE-2023-31124 CVE-2023-31147


author: yanglu <yanglu60@huawei.com> - 1.15.14-5
changelog:
  - Type:cves
  - ID:CVE-2018-19876 CVE-2019-6461 CVE-2019-6462
  - SUG:NA
  - DESC: fix CVE-2018-19876 CVE-2019-6461 CVE-2019-6462


author: gaohaobo <gaohaobo@kylinos.cn>
changelog:
  - add  caja-1.12.7-Kylin-tpm.patch   由<lvfei@kylinos.cn> 提供方案，<guoshengsheng@kylinos.cn> 制作patch. 
    替换 搜索 工具为 mate-search-tool  
  - add  caja-1.12.7-kylin-replace-search-engine.patch 由<baiguanglei@kylinos.cn> 提供方案， <gaohaobo@kylinos.cn>
    制作patch , 使用更为流畅的catfish 作为第三搜索工具。
  - add  caja-1.12.7-kylin-open-searchtools-thread-way.patch
    使用线程运行catfish   by <gaohaobo@kylinos.cn>


author: guoshengsheng <guoshengsheng@kylinos.cn>-1.12.7-1kord0k233.p12
changelog:
  - Add caja-1.12.7-Kylin-hide-three-option-in-trash.patch
  - Delete "Listview New Documents" "cut" "copy" in trash


author: guoshengsheng <guoshengsheng@kylinos.cn>-1.12.7-1kord0k233.p13
changelog:
  - Add caja-1.12.7-Kylin-fix-bug-17932.patch
  - Resolve Changing the resolution will cause the desktop icons to not be adaptively arranged


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p23
changelog:
  - add patch26:0001-fix-chandao-bug-44721-modify-default-newfilename.patch
  - add patch27:0001-Fix-rename-status.patch
  - 同步龙芯补丁。


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p26
changelog:
  - add patch28:caja-1.12.7-kylin-fix-bugzilla-8197-Udisk-file-system-is-inconsistent.patch
  - 修复caja显示U盘文件系统格式与命令行查看不一致问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p27
changelog:
  - Type:bugfix
  - ID  :[bug#8460][bugzilla]
  - SUG :NA
  - DESC:add patch31:caja-1.12.7-kylin-fix-icon-overlap-when-creating-a-new-file.patch
         删除对于桌面图标大小等级SMALLEST,SMALLER的屏蔽，解决等级SMALLEST,SMALLER,SMALL，
         三种模式下新建文件，图标重叠问题.解决缩放图标时，SMALLER,SMALL两个级别形态相
         同问题.修改图标间距，解决SMALLER,SMALL两个级别，桌面图标与标题重叠问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p27
changelog:
  - Type:fixbug
  - ID  :[bug#8460][bugzilla]
  - SUG :NA
  - DESC:add patch31:caja-1.12.7-kylin-fix-icon-overlap-when-creating-a-new-file.patch
         删除对于桌面图标大小等级SMALLEST,SMALLER的屏蔽，解决等级SMALLEST,SMALLER,SMALL，
         三种模式下新建文件，图标重叠问题然.解决缩放图标时，SMALLER,SMALL两个级别形态相
         同问题.修改图标间距，解决SMALLER,SMALL两个级别，桌面图标与标题重叠问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p28
changelog:
  - Type:fixbug
  - ID  :[bug#113327]
  - SUG :NA
  - DESC:add patch32:caja-1.12.7-kylin-fix-Unable-to-remount-after-Udisk-is-unmounted.patch
         修复当U盘没有UUID时，手动卸载，再挂载caja崩溃问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p29
changelog:
  - Type:fixbug
  - ID  :[Task#160363]
  - SUG :NA
  - DESC:add patch33:caja-1.12.7-kylin-change-the-dvd-capacity-display.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p31
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add caja-update-translations-for-hk-and-tw.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p33
changelog:
  - Type: bugfix
  - ID:   [TASK#205172]
  - SUG:  NA
  - DESC: add caja-update-Secure-translations-for-hk-and-tw.patch


author: huayadong <huayadong@kylinos.cn> - 01.12.7-1kord0k233.p35
changelog:
  - Type: bugfix
  - ID:   [BUG#217322]
  - SUG:  NA
  - DESC: delete Requires: redhat-menus ,add Requires: kylin-menu


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p36
changelog:
  - Type: bugfix
  - ID:   [BUG#240575]
  - SUG:  NA
  - DESC: fix an used after free problem which caused disk format failure


author: wanghao <wanghao2@kylinos.com.cn> -1.0.0-3.skl3.se.07
changelog:
  - Type:update
  - ID: [TASK#121480]
  - SUG:NA
  - DESC: 解决chpolicy切换策略，强制重启后，策略切换失败的问题
  -         add patch: chpolicy-fix-selinux-error-after-force-reboot.patch


author: zhangyujing <zhangyujing1@huawei.com> - 6.8-2.1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:setcifsacl: fix adding ACE when owner sid in unexpected location
         cifs.upcall: fix a compiler warning


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-CVE-2021-20208.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/1001-cifs.upcall-update-the-cap-bounding-set-only-when-CA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/1002-mount.cifs-update-the-cap-bounding-set-only-when-CAP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Liang yangang <liangyangang@kylinos.cn> - 196.3-1.01.p01
changelog:
  - add mips64el arch support,
  - add Requires for storaged to support lvm: libblockdev libblockdev-devel libudisks2 udisk2-lvm2


author: zhangbowei <zhangbowei@kylinos.com>
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix install error due to selinux-policy' release lower than 50


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. check task list to avoid unnecessary cleanup.
         2. fix dead loop
         3. cleanup dangling shim by brand new context
         4. fix potential panic for task in unknown state


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-201
changelog:
  - Type:bugfix                                          
  - ID:NA                                                   
  - SUG:NA
  - DESC:reduce permissions for bundle dir to fix CVE-2021-41103


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-202
changelog:
  - Type:bugfix
  - ID:NA 
  - SUG:NA
  - DESC:Use fs.RootPath when mounting volumes for bundle dir to fix CVE-2022-23648


author: lvxiangcong<lvxiangcong@kylinos.cn> - 1.2.0-209.p03
changelog:
  - Type:update
  - ID:[TASK#206575]
  - SUG:NA
  - DESC:fix cve-2023-39325 and cve-2022-41723 skipping p02 due to the presence of koji


author: lijian1 <lijian1@kylinos.cn> - 7.3.0-20190804.h30.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify gcc.spec: Add file libstdc++fs.a to package libstdc++-static
  - DESC: Delete -p option in %postun of sub package libstdc++ and libgomp.
  - DESC: Modify gcc description.


author: zhangqiang <zhangqiang@kylinos.cn> - 7.2.9-2.p03
changelog:
  -Type:bugfix
  -ID:[任务#126238]
  -SUG:NA
  -DESC:join the upstream patch for suppourt arm64 KASAN kernel debug


author: xinghe <xinghe2@h-partners.com> - 4.11.12-31
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: changtao <changtao@kylinos.cn> - 4.11.12-32.p03
changelog:
  - Type:bugfix
  - ID:[BUG#220458]
  - CVE:NA
  - SUG:NA
  - DESC:fix require satisfied libldb version for samba-client


author: yuboyun <yuboyun@huawei.com> - 4.11.6-8
changelog:
  - Type:cves
  - ID:CVE-2020-10730 CVE-2020-10745 CVE-2020-14303 CVE-2020-10760
  - SUG:NA
  - DESC:fix CVE-2020-10730CVE-2020-10745CVE-2020-14303CVE-2020-10760


author: lunankun <lunankun@huawei.com> - 4.11.12-3
changelog:
  - Type:cves
  - ID:CVE-2020-14318 CVE-2020-14323 CVE-2020-14383
  - SUG:NA
  - DESC:fix CVE-2020-14318 CVE-2020-14323 CVE-2020-14383


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-4
changelog:
  - Type:cves
  - ID:CVE-2020-27840 CVE-2021-20277 CVE-2021-20254
  - SUG:NA
  - DESC:fix CVE-2020-27840 CVE-2021-20277 CVE-2021-20254


author: xihaochen <xihaochen@huawei.com> - 4.11.12-6
changelog:
  - Type:cves
  - ID:CVE-2020-25717,CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738
  - SUG:NA
  - DESC:fix CVE-2020-25717,CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-7
changelog:
  - Type:cves
  - ID:CVE-2021-43566
  - SUG:NA
  - DESC:backport patches to fix CVE-2021-43566:
         s3/lib: add parent_smb_fname function
         smbd: use parent_smb_fname in check_parent_access
         smbd: use parent_smb_fname in inherit_new_acl
         s3/VFS: Add SMB_VFS_MKDIRAT
         vfs_full_audit: pass conn to smb_fname_str_do_log
         s3/VFS: change connection_struct cwd_fname to cwd_fsp
         s3/smbd: Change mkdir_internal to call SMB_VFS_MKDIRAT
         smbd: use parent_smb_fname in mkdir_internal
         fix CVE-2021-43566


author: gaoxingwang<gaoxingwang@huawei.com> - 7.71.1-12
changelog:
  - Type:CVE
  - CVE:CVE-2021-22922 CVE-2021-22923
  - SUG:NA
  - DESC:disable metalink to fix CVE-2021-22922 and CVE-2021-22923


author: gaihuiying <eaglegai@163.com> - 7.71.1-13
changelog:
  - Type:cves
  - CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
  - SUG:NA
  - DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776


author: gaihuiying <eaglegai@163.com> - 7.71.1-15
changelog:
  - Type:cves
  - CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
  - SUG:NA
  - DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208


author: yanglu <yanglu72@huawei.com> - 7.71.1-11
changelog:
  - Type:CVE
  - CVE:CVE-2021-22945 CVE-2021-22946 CVE-2021-22947
  - SUG:NA
  - DESC:fix CVE-2021-22945 CVE-2021-22946 CVE-2021-22947


author: gaihuiying <eaglegai@163.com> - 7.71.1-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix build error when add --disable-http-auth configure option


author: xingwei <xingwei14@h-partners.com> - 7.71.1-23
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dynbuf: provide curlx_ names for reuse by the curl tool
         curl: use curlx_dynbuf for realloc when loading config files
         curl: make file2string use dynbuf
         paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: hanhuijie <hanhuijie@kylinos.cn> - 1:1.12.16-16.se.01
changelog:
  - Type:bugfix
  - ID:[TASK#116083]
  - SUG:NA
  - DESC: Add Patch:dbus-fix-security-label-trailing-comma.patch to remove trailing comma of security-label.


author: zhoushuiqing <zhoushuiqing2@huawei.com> - 3.6.2-5
changelog:
  - Type:CVE
  - CVE:CVE-2005-1849,CVE-2016-9840,CVE-2016-9841,CVE-2016-9843,CVE-2018-25032,CVE-2022-37434
  - SUG:NA
  - DESC:backport patchs fix zlib cves: CVE-2005-1849 CVE-2016-9840
         CVE-2016-9841 CVE-2016-9843 CVE-2018-25032 CVE-2022-37434
         backport-fix-CVE-2005-1849.patch
         backport-fix-CVE-2016-9840.patch
         backport-fix-CVE-2016-9841.patch
         backport-fix-CVE-2016-9843.patch
         backport-fix-CVE-2018-25032.patch
         backport-fix-CVE-2022-37434-1.patch
         backport-fix-CVE-2022-37434-2.patch


author: Xiaole He <hexiaole@kylinos.cn> - 8:2.02.181-8.p02
changelog:
  - add Patch:9005-9007 for supporting intel vroc raid
  - only support devices with logical block of 512 bytes, not support devices with logical block of 4k bytes

   Mon Feb 14 2022 liwenchong <liwenchong@kylinos.cn> -> 8:2.02.181-8.p01
  - Tyep:fix bug 163605 
  -vgcreate global /dev/mapper/mpatha --shared --metadatasize 10M
  -The resource is busy. The repair is opened excl in pvcreate and the device is not closed


author: jinzhiguang <jinzhiguang@kylinos.cn> - 8:2.02.181-8.p04
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: 10005-lvmdbusd-Handle-exported-VG-s.patch from higher version: lvm2-2.03.03
  - fix the bug that lvmdbusd keeps printing logs after vgexport


author: baiguo <baiguo@kylinos.cn> - 8:2.02.181-8.p05
changelog:
  - Type: bugfix
  - ID: [Task#346081]
  - SUG: NA
  - DESC: fix an double free in the error path from _stats_creat_group


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-8
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC:Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-9
changelog:
  - Type:cves
  - ID:CVE-2022-2928, CVE-2022-2929
  - SUG:restart
  - DESC:Fix CVE-2022-2928 and CVE-2022-2929


author: yueyuankun <yueyuankun@kylinos.cn> - 4.2.15-7.p03
changelog:
  - Type:bugfix
  - ID:BUG#218133
  - SUG:NA
  - DESC:Fix package dnf obsoletes dnf-data provided by dnf-data


author: yueyuankun <yueyuankun@kylinos.cn> - 4.2.15-7.p04
changelog:
  - Type:bugfix
  - ID:BUG#221805
  - SUG:NA
  - DESC:Fix dnf-help conflicts with dnf-data, dnf-automatic
         Remove /usr/share/man/man5/dnf.conf.5.gz from dnf-data
         Remove /usr/share/man/man8/dnf-automatic.8.gz from dnf-automatic


author: huangwenhua <huangwenhua@kylinos.cn> - 4.2.15-7.p06
changelog:
  - Type:bugfix
  - ID:BUG#231758
  - SUG:NA
  - DESC:Fix yum update ignore gnutls because of Obsoletes without version


author: huangwenhua <huangwenhua@kylinos.cn> - 4.2.15-7.p07
changelog:
  - Type:TASK
  - ID:TASK#340353
  - SUG:NA
  - DESC:Add Ignore rpm < 4.15.1-28 because of Obsoletes without version


author: huangwenhua <huangwenhua@kylinos.cn> - 4.2.15-7.p08
changelog:
  - Type:update
  - ID:TASK#352125
  - SUG:NA
  - DESC:Add Ignore libtirpc-1.2.6-2 because of libtirpc Obsoletes libtirpc-devel < V-R


author: liulong <liulong20@huawei.com> - 2.82-4
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2020-25681 CVE-2020-25682 CVE-2020-25683 CVE-2020-25684 CVE-2020-25685 CVE-2020-25686 CVE-2020-25687


author: zengwefeng <zwfeng@huawei.com> - 2.82-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add missing check for NULL return from allocate_rfd
         Fix DNS reply when asking for DNSSEC and a validated


author: gaihuiying <gaihuiying1@huawei.com> - 2.82-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: Handle caching with EDNS options better
          Fix to 75e2f0aec33e58ef5b8d4d107d821c215a52827c
          Fix for 12af2b171de0d678d98583e2190789e544440e02
          Fix problem with DNS retries in 2.83 2.84 version
          Simplify preceding fix
          Update to new struct frec fields in conntrack code
          Use the values of min port and max port in TCP connection
          Correct occasional bind dynamic synchronization
          Move fd into frec_src fixes 15b60ddf935a531269bb8c68
          fix CVE-2021-3448


author: renmingshuai <renmingshuai@huawei.com> - 2.82-14
changelog:
  - Type:bugfix
  - Id:
  - SUG:NA
  - DESC:Reduce code duplication, reuse existing functions
         Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lvxiangcong<lvxiangcong@kylinos.cn> - 18.09.0-101.p05
changelog:
  - Type:CVE
  - CVE: CVE-2023-25173 && CVE-2023-25153
  - SUG:NA
  - DESC:fix CVE-2023-25173 && CVE-2023-25153 && Rebuild docker-engine


author: lvxiangcong <lvxiangcong@kylinos.cn> - 18.09.0.101.p07
changelog:
  - Type: BUG
  - ID:   [BUG#197029]
  - SUG:  NA
  - DESC: rebuild docker engine for golang update to 1.15.7-32.p01


author: lvxiangcong <lvxiangcong@kylinos.cn> - 18.09.0-101.p10
changelog:
  - Type: TASK
  - ID:   [TASK#206575]
  - SUG:  NA
  - DESC: rebuild for containerd fix cve-2023-39325 and cve-2022-41723


author: weiyucheng <weiyucheng@kylinos.cn> -18.09.0-101.p12
changelog:
  - Type: cves
  - ID: CVE-2021-21284
        CVE-2021-21285
  - SUG: NA
  - DESC: backport fix CVE-2021-21284 and CVE-2021-21285 with patch
          1001-Fix-Access-to-remapped-root-allows-privilege-escalat.patch
          1002-docker-prevent-an-invalid-image-from-crashing-docker.patch


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-102
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fixes config.Namespaces is empty when accessed
         write freezer state after every state check
         may kill other process when container has been stopped
         fix cgroup hugetlb size prefix for kB
         check nil pointers in cgroup manager


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-104
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:don't deny all devices when update cgroup resource
         do not permit /proc mounts to non-directories
         fix permission denied


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. add cpu and memory info when print cgroup info
         2. fix freezing race


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-201
changelog:
  - Type:CVE
  - CVE:CVE-2021-30465
  - SUG:NA
  - DESC:add mount destination validation(fix CVE-2021-30465)


author: huayumeng<huayumeng@kylinos.cn> - 1.0.0.rc3-203.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix connect container failed when reading partially written state.json content


author: likai01 <likai01@kylinos.cn> - 1:2.3.15-3.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:add the dovecot-2.3.10.1-surpport-mips64el.patch[liu feng] to compile smoothly


author: Zhao Penghui <zhaopenghui@kylinos.cn> - 049-8.p04.se.09
changelog:
  - 梳理历史编译记录，重新命名软件包版本为：dracut-049-8.p04.se.09.ky10
    含通用4次修改，安全9次修改
  - import patch from dracut-049-8.p04.ky10
    add Patch9013, kylin fix plymouth and fonts when OS starting


author: li qian <liqian@kylinos.cn> - 049-8.p04.se.10
changelog:
  - Fixed the problem of hardware RNG entropy failure when 
  - PXE was installed with Netcom NIC. The blocking process 
  - caused the problem to be stuck all the time
  - patch9014: 0001-modify-pxe-install-need-input-key.patch


author: wanghao <wanghao2@kylinos.cn> 049-8.p04.se.14
changelog:
  - Type: update
  - ID: [Task#129149]
  - SUG:NA
  - DESC: 添加magic配置文件,修复执行控制白名单初始化时类型判断失败的问题
  -         add patch: dracut-049-add-magic-config-file.patch


author: wanghao<wanghao2@kylinox.cn> - 050-3.se.p04.07
changelog:
  - Type: update
  - ID: [Task#129149]
  - SUG:NA
  - DESC: 添加magic配置文件,修复执行控制白名单初始化时类型判断失败的问题
  -         add patch: dracut-050-add-magic-config-file.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 050-3.se.p05.07
changelog:
  - Type:bugfix
  - ID:[BUG#211690]
  - SUG:NA
  - DESC:add kernel/kylin in 90kernel-modules-extra/module-setup.sh, support kylin kernel
  -      add patch: dracut-050-support-kylin-kernel.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 050-3.se.p05.08
changelog:
  - Type:update
  - ID:[Task#195740]
  - SUG:NA
  - DESC:同步sp4补丁,
  -      [BUG#209238] 【sp4】【管理员分权】自定义增加备份还原分区安装系统，开启strict模式后，secadm和auditadm用户异常
  -      add dracut-fix-mount-home-failed.patch


author: Jinhua Cao <caojinhua1@huawei.com> - 202002-11
changelog:
  - BaseTools: fix ucs-2 lookup on python3.9
  - BaseTools: Work around array.array.tostring() removal in python3.9


author: xiaoyuliang <xiaoyuliang@kylinos.cn> -202011-7.p02
changelog:
  - Type:	Update
  - ID:	[TASK#138646]
  - SUG:	NA
  - Desc:	fix CVE-2022-4450 CVE-2023-0286 CVE-2023-0215 CVE-2023-0401
  	from src-openeuler/edk2 openEuler-22.03-LTS branch.


author: yanjianqing <yanjianqing@kylinos.cn> - 202011-7.p04
changelog:
  - Type: Update
  - ID:   [TASK#163005]
  - SUG:  NA
  - Desc: fix CVE-2022-4304
          from src-openeuler/edk2 openEuler-22.03-LTS branch.


author: lijunwei <lijunwei@kylinos.cn> - 202011-7.p05
changelog:
  - Type: Update
  - ID:   [TASK#204641]
  - SUG:  NA
  - Desc: Add Patch0030~Patch0066 fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、
          CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727、CVE-2022-36763、
          CVE-2022-36764、CVE-2022-36765、CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、
          CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: cuiyudong <cuiyudong@kylinos.cn> - 202011-7.p05
changelog:
  - Type: Update
  - ID:   [TASK#204640]
  - SUG:  NA
  - Desc: fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、
          CVE-2023-3446、CVE-2023-3817、CVE-2024-0727、CVE-2022-36763、
          CVE-2022-36764、CVE-2022-36765、CVE-2023-45229、CVE-2023-45230、
          CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、
          CVE-2023-45235


author: xiaoyuliang <xiaoyuliang@kylinos.cn> -202011-7.p07
changelog:
  - Type: Update
  - ID:   [TASK#363445]
  - SUG:  NA
  - DESC: fix CVE-2024-1298/CVE-2024-5535/CVE-2021-3712/CVE-2022-0778


author: panxiaohe <panxh.life@foxmail.com> - 0.180-9
changelog:
  - change the permission of eu-* to 750
  - add elfutils-extra
  - move eu-objdump, eu-readelf, eu-nm to elfutils-extra


author: fuanan <fuanan3@h-partners.com> - 0.180-11
changelog:
  - Fix "/usr/lib64/libdebuginfod.so.1" not found when uninstall elfutils-debuginfod-client-devel
  - Fix Obsoletes in spec


author: fuanan <fuanan3@h-partners.com> - 0.180-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix segfault in eu-ar -m
         Use upstream patch for Fix error of parsing object file perms


author: wangshuo <wangshuo@kylinos.cn> - 0.180-15.p01
changelog:
  - Type:[update/bugfix]
  - ID:[TASK#186441][BUG#203894]
  - SUG:NA
  - DESC:x86_64/aarch64: The kernel parameter 'kernel.yama.ptrace_scope = 0' has been commented out.
  -      loongarch64: Add Patch1001-1003, support loongarch64


author: wangshuo <wangshuo@kylinos.cn> - 0.180-15.p02
changelog:
  - Type:[update]
  - ID:[TASK#186441]
  - SUG:NA
  - DESC:p01 build already exists at 239 Koji, causing ctdy-build task failure


author: wangqiang <wangqiang1@kylinos.cn> - 0.180-15.p03
changelog:
  - Type:[bugfix]
  - ID:[TASK#351059] 
  - SUG:NA                                                                     
  - DESC:Add buildrequire to support compress


author: yangcheng <yangcheng87@huawei.com> - 1:27.1-6
changelog:
  - fixed the upgrade error caused by the info file in the emacs-common software package being repackaged


author: zhangxiaolu <zhangxiaolu@kylinos.com> - 1:27.1-14.p01
changelog:
  - type bug fix
  - ID bug fix
  - add patch:kylin-change-translation-emacs.patch
  - DESC: add translate bug add modify spec


author: lijiaan <lijiaan@kylinos.cn> - 1.12.0-2kord0k41.04
changelog:
  - Add modified-parameters-appear-at-the-same-time.patch
  - modified limit appear -k --keep-newer-files at the same time
  - 03 version number was occupied by zj


author: GuoCe <guoce@kylinos.cn> - 1.12.0-2kord0k41.05
changelog:
  - Add resolve_position_display_chinese_character_garbled_code.patch
  - 使用归档管理器打开一个压缩文件，点击归档文件-属性，当位置信息有汉字时显示乱码
  - Add fix-just-add-file-without-directory.patch
  - 空文件夹压缩后，使用归档文件器打开再另存为时，提示信息一闪而过且没有保存成功


author: huayadong <huayadong@kylinos.cn> - 1.12.0-2kord0k41.p08
changelog:
  - add patch41, engrampa-1.12.0-kylin-fix-bug-failed-to-save-the-file-with-the-same-name.patch.
  - fix chandao bug 46607.


author: peijiankang <peijiankang@kylinos.cn> - 1.12.0-2kord0k41.p09
changelog:
  - Type: bugfix
  - ID:   [TASK#185071]
  - SUG:  NA
  - DESC: add engrampa-add-translation-for-tw-and-hk.patch


author: douyan <douyan@kylinos.cn> - 1.12.0-2kord0k41.p10
changelog:
  - Type: bugfix
  - ID:   [TASK#187126]
  - SUG:  NA
  - DESC: engrampa-1.12.0-kylin-add-zh_HK-translation.patch


author: huayadong <huayadong@kylinos.cn> - 1.12.2-2kord7.p03
changelog:
  - Type: bugfix
  - ID:   [Bug#156426]
  - SUG:  NA
  - DESC: add Patch2:eom-1.12.2-kylin-Repair-g_object_New-destruction-results-in-core.patch


author: xiehongyu <xiehongyu@kylin.cn> - 3.30.1-4.01
changelog:
  - Add evince-3.30.1-kylin-perfect-Internationalization.patch
  - Fixed BUG #12046, #11966, perfect Internationalization


author: dillon chen <dillon.chen@gmail.com> - 2.4.5-5
changelog:
  - CVE-2020-18651,CVE-2020-18652
  - CVE-2021-36048,CVE-2021-39847,CVE-2021-42530,CVE-2021-36046,CVE-2021-36055
  - CVE-2021-40716,CVE-2018-12648,CVE-2021-36054,CVE-2021-36047,CVE-2021-36052
  - CVE-2021-36058,CVE-2021-36045,CVE-2021-42531,CVE-2021-36064,CVE-2021-42529
  - CVE-2021-42528,CVE-2021-36050,CVE-2021-40732
  - CVE-2021-36056,CVE-2021-42532,CVE-2021-36053,CVE-2021-36051


author: openEuler Buildteam <buildteam@openeuler.org> - 0.26-19
changelog:
  - Type:cves
  - ID:CVE-2019-13109
  - SUG:NA
  - DESC:fix CVE-2019-13109
         fix ICC profile in PNG images


author: wangkerong <wangkerong@huawei.com> - 0.26-25
changelog:
  - Type:cves
  - ID:CVE-2021-29464 CVE-2021-29463 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29464,CVE-2021-29463,CVE-2021-29473


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29463 CVE-2021-29464 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29463,CVE-2021-29464,CVE-2021-29473


author: wangjie <wangjie375@huawei.com> - 2.2.9-4
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.2.9-6
changelog:
  - Type:CVE
  - ID:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: cuiyudong <cuiyudong@kylinos.cn> - 4.2.9.1.p04
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add support gb18030-patch ; add gd18030 conf and so  
          add page size-patch ; modify size to 16
          add modify patch ; delete 9 coding for gb18030


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: lvfei<lvfei@kylinos.cn> - 60.7.0-1.08
changelog:
  - add patch:CVE-2019-11707.patch
  - from https://hg.mozilla.org/releases/mozilla-release/rev/99a829d2a2a7859b10508b6f05e99780c5e2dc68


author: wangxiao <wangxiao65@huawei.com> - 79.0-4
changelog:
  - Fix CVE-2020-15664 CVE-2020-15665 CVE-2020-15666 CVE-2020-15667
    CVE-2020-15668 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p05
changelog:
  - modify firefox-wayland.desktop add NoDisplay=true
  - modify firefox.js modify openeuler to kylinos
  - modify distribution.ini modify openeuler to kylinos


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p06
changelog:
  - modify firefox.js modify http://www.kylinos.cn to https://www.kylinos.cn
  - mofify firefox.js  browser.startup.homepage  http://www.kylinos.cn to file:///usr/share/doc/HTML/index.html
  - add patch:firefox-modify-firsturl-http-to-https.patch


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p09
changelog:
  -  Fix CVE-2020-15969 CVE-2020-15999 CVE-2020-16012 CVE-2020-26951
    CVE-2020-26953 CVE-2020-26956 CVE-2020-26957 CVE-2020-26958
    CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26963
    CVE-2020-26965 CVE-2020-25966 CVE-2020-26967 CVE-2022-25235
    CVE-2022-25236 and CVE-2022-25315 CVE-2022-40674


author: wangwenfeng <wangwenfeng@kylinos.cn> - 79.0-4.p11
changelog:
  - Type:compile
  - ID:[TASK#148328]
  - SUG:NA
  - DESC:Make Firefox dependent on the Freetype package. add dependency.


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p14
changelog:
  - Type:CVE
  - ID:TASK#162235 
  - SUG:NA
  - DESC: Fix fix CVE-2021-45960 CVE-2021-46143
          CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p18
changelog:
  - Type: cves
  - ID: CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946 CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406 CVE-2020-15675      
        CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998
  - SUG: restart
  - DESC: fix CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946  CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406   
              CVE-2020-15675  CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998


author: lvfei <lvfei@kylinos.cn> - 79.0-4.p19
changelog:
  - Type: cves
  - ID: CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946 CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406 CVE-2020-15675      
        CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998 CVE-2022-29912
  - SUG: restart
  - DESC: fix CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946  CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406   
          CVE-2020-15675  CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998 CVE-2022-29912


author: mengchaoming <mengchaoming@kylinos.cn> - 0.6.2-4.p04
changelog:
  - Type: bugfix
  - ID: [TASK#218348]
  - SUG: NA
  - DESC: fix ipset configuration error
  - add patch: firewalld-0.6.2-fix-ipset-configuration-error.patch


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39352
  - Fix CVE-2023-39353
  - Fix CVE-2023-39354
  - Fix CVE-2023-39356
  - Fix CVE-2023-40181
  - Fix CVE-2023-40186
  - Fix CVE-2023-40188
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40589


author: <majian@kylinos.cn> - 9.2-7.p01
changelog:
  - Type: update
  - ID: [TASK#186426]
  - SUG: NA
  - DESC: Init package for Kylin V10 sp4 and add Kylin patches.
  - [BUG#112827] fix replace manufacturer string from openEuler to KylinOS in version info.
  - [BUG#199946] fix gdb hangup crash issue when attach running process debug.


author: majian <majian@kylinos.cn> - 9.2-7.p02
changelog:
  - Type: bugfix
  - ID: [BUG#218056]
  - SUG: NA
  - DESC: Add 0002-Set-entry-point-when-text-segment-is.patch.


author: huayadong <huayadong@kylinos.cn> - 1:3.30.1-10.p01
changelog:
  - Type:	compile
  - ID: 	[TASK#75897]
  - SUG:	NA
  - DESC: add patch7:gdm-3-30-1-kylin-add-pam-config.patch


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p01
changelog:
  - Type: compile
  - ID:   [TASK#75897]
  - SUG:  NA
  - DESC: add patch7:gdm-3-30-1-kylin-add-pam-config.patch


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#75897]
  - SUG:  NA
  - DESC: add patch0:gdm-3-30-1-kylin-add-pam-config.patch


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p02
changelog:
  - Type: cve
  - ID:   [TASK#133075]
  - SUG:  NA
  - DESC: add patch1:gdm-3.38.2.1-kylin-use-autoptr-to-handle-errors-in-look-for-existing-users.patch
  	Fix CVE-2020-16125


author: huayadong <huayadong@kylinos.cn> - 1:3.38.2.1-1.p03
changelog:
  - Type: bugfix
  - ID:   [BUG#160751]
  - SUG:  NA
  - DESC: add patch2:gdm-3.38.2.1-kylin-fix-fix-the-problem-of-failing-to-start.patch


author: huayadong <huayadong@kylinos.com> - 2.5.6-1.p01
changelog:
  - Type:bugfix
  - ID  :[bug#135451]
  - SUG :NA
  - DESC:add patch0: geoclue-2.5.6-kylin-fix-the-problem-that-the-program-does-not-exit-after-the-user-logs-off.patch


author: duyuanzheng <duyuanzheng@kylinos.cn> - 9.27-10.p01
changelog:
  - Type:CVE
  - ID:CVE-2023-43115
  - SUG:NA
  - DESC:fix CVE-2023-43115, fetch SAFER from ghostscript 9.5X


author: panxiaohe <panxiaohe@huawei.com> - 2.27.0-4
changelog:
  - Fix CVE-2021-29468
  - Add gcc and gettext to BuildRequires
    - necessary for building and msgfmt command


author: fuanan <fuanan3@h-partners.com> - 2.27.0-13
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.27.0-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.27.0-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.27.0-16
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: gaihuiying <gaihuiying1@huawei.com> - 2.23.0-16
changelog:
  - Type:cves
  - ID:CVE-2020-11008
  - SUG:NA
  - DESC:fix CVE-2020-11008
         credential: detect unrepresentable values when parsin urls
         fsck: detect gitmodules URLs with embedded newlines


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.27.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolved the problem that a failure message is displayed when the git-daemon package is uninstalled


author: fandeyuan <fandeyuan@kylinos.cn> - 2.62.5-4.p01
changelog:
  - Type: Bugfix
  - ID: [TASK#200965]
  - SUG: NA
  - DESC: add change-g_error-terminate-signal-to-abort.patch


author: liangchangwei<liangchangwei@kylinos.cn> - 2.28-36.p04
changelog:
  - Type:	cves & updates
  - ID:	[TASK#79324]	
  - SUG:	NA
  - DESC: fix cve-2019-25013 & cve-2021-3326
  	fix some functions are deprecated due to the upgrade of
   libselinux package, causing glibc compilation to fail.


author: lijian1 <lijian1@kylinos.cn> - 2.28-36.p06
changelog:
  - Type: cves
  - ID: [TASK#116596]
  - SUG: NA
  - DESC: Fix CVE-2021-35942/CVE-2020-10029, add 3 patches for CVE-2019-25013.
  	https://gitee.com/src-openeuler/glibc/pulls/81/files
  	Fix stack missing in _dl_tlsdesc_dynamic
  	Remove unbounded alloca usage from getmntent [BZ#27083]


author: majian <majian@kylinos.cn> - 2.28-36.1.p07
changelog:
  - Type: cves
  - ID: [TASK#141422]
  - SUG: NA
  - DESC: Fix CVE-2023-0687.
          https://gitee.com/src-openeuler/glibc/pulls/555


author: majian <majian@kylinos.cn> - 2.28-36.1.p09
changelog:
  - Type: bugfix
  - ID: [BUG#188721,188792]
  - SUG: NA
  - DESC: Add Fix_SEM_STAT_ANY_kernel_argument_pass.patch.
          From https://sourceware.org/git/?p=glibc.git;a=commit;h=574500a108be


author: <majian@kylinos.cn> - 2.28-36.1.p12
changelog:
  - Type: update
  - ID:   [TASK#180596]
  - SUG:  NA
  - DESC: fix CVE-2023-4806 CVE-2023-5156 CVE-2023-4813 .


author: <majian@kylinos.cn> - 2.28-36.1.p12
changelog:
  - Type: cves
  - ID:   [TASK#180596]
  - SUG:  NA
  - DESC: fix CVE-2023-4806 CVE-2023-5156 CVE-2023-4813 .


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.28-36.1.p14
changelog:
  - Type:cves
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 1.22.2-4.p01
changelog:
  - Type: bugfix
  - ID: [BUG#240367]
  - SUG:  NA
  - DESC: glibc-debuginfo glibc-debugutils remove the same file


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 7.0-10.p03
changelog:
  - Type:cves
  - ID:CVE-2022-48340
  - SUG:NA
  - DESC:Backport v10-sp3-updates-sc p02 patch to fix CVE-2022-48340


author: mengchaoming<mengchaoming@kylinos.cn>- 3.30.1-2.p03
changelog:
  -add patch:gnome-calculator-3.30.1-kylin-fix-bug.patch
  -输入等于号等同于回车计算结果
  -进制转化的时候置灰不能输入的数字
  -单位转换的时候，对应的标签做相应的变化


author: huayadong <huayadong@kylinos.cn>- 3.30.1-2.p06
changelog:
  - add Patch:gnome-calculator-3.30.1-kylin-numlook-bug.patch
  - add Source1:gnome-calculator.tar.gz  --chengrui


author: liujilin <liujilin@kylinos.cn> - 3.32.1-1.p03
changelog:
  - add patch3:  gnome-logs-3.32.1-kylin-rpm-to-install-logs.patch
  - add polkit policy.
  - change anacpnda logs to rpm logs.


author: liujilin <liujilin@kylinos.cn> - 3.32.1-1.p05
changelog:
  - add patch5:  gnome-logs-3.32.1-kylin-export-logs-display-error.patch
  - export install logs, log file will display error.


author: wanggang <wanggang@kylinos.cn> - 3.32.1-1.p06
changelog:
  - add Patch06:  gnome-logs-3.32.1-kylin-close-keyboard-shortcut.patch
  - close-keyboard-shortcut menu.


author: huayadong<huayadong@kylinos.cn> - 3.32.1-1.p08
changelog:
  - add patch0008:gnome-logs-3.32.1-kylin-fix-bug54920-VNC-is-connected-to-the-server-cannot-be-opened.patch
  - Patch0008:修复vnc连接到服务器日志工具打不开问题.patch


author: wangxiao<wangxia65@huawei.com> -3.30.1-6
changelog:
  - move the libcroco sources directly under src/st
    remove the libcroco dependency from the meson.build files


author: huayadong <huayadong@kylinos.cn> - 3.30.1-10.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#165420]
  - SUG:  NA
  - DESC: add Requires: llvm-libs >= 8.0.1-1.6.p01 only for loongarch64


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-19.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:Remove package:help  BuildArch require
  -      Fix bad /usr/lib/golang}/lib/ macro


author: hanchao<hanchao47@huawei.com> - 1.15.7-21
changelog:
  - Type:CVE
  - CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
  - SUG:NA
  - DESC:fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879


author: hanchao <hanchao47@huawei.com> - 1.15.7-24
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
  - SUG:NA
  - DESC:fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725


author: hanchao <hanchao47@huawei.com> - 1.15.7-25
changelog:
  - Type:CVE
  - CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
  - SUG:NA
  - DESC:fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: hanchao <hanchao63@huawei.com> - 1.15.7-27
changelog:
  - Type:CVE
  - CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
  - SUG:NA
  - DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540


author: hanchao <hanchao63@huawei.com> - 1.15.7-28
changelog:
  - Type:CVE
  - CVE:CVE-2023-29402,CVE-2023-29404,CVE-2023-29405
  - SUG:NA
  - DESC: fix CVE-2023-29402,CVE-2023-29404,CVE-2023-29405


author: zhangbowei <zhangbowei@kylinos.cn> - 1.15.7-32.p01
changelog:
  - Type: BUG
  - ID:   [BUG#197029]
  - SUG:  NA
  - DESC: merge upstream of permit invalid host header for docker


author: luoyujie <luoyujie5@huawei.com> - 1.15.7-34
changelog:
  - Type:CVE
  - CVE:CVE-2023-39318,CVE-2023-39319
  - SUG:NA
  - DESC:fix CVE-2023-39318 and CVE-2023-39319


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-37.p02
changelog:
  - Type:update
  - ID:[TASK#189214]
  - SUG:NA
  - DESC:Add Patch9004, fix test error about mod_insecure_issue63845


author: hanchao <hanchao63@huawei.com> - 1.15.7-39.p01
changelog:
  - Type:CVE
  - CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
  - SUG:NA
  - DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-42.p01
changelog:
  - Type:bugfix
  - ID:[TASK#206034]
  - SUG:NA
  - DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-43.p02
changelog:
  - Type:update
  - ID:[TASK#213363]
  - SUG:NA
  - DESC:Add Patch9901-9902, modify spec, support mips64el and loongarch64
  -      Add Patch9903, support loong64 mips64el for CVE-2023-29403


author: houhongxun <houhongxun@kylinos.cn> - 20200916-3.p02
changelog:
  - Type: update
  - ID:   [TASK#327639]
  - SUG:  NA
  - DESC: rebuild to remove sensitive information for sp1、sp2、sp3、sp4


author: Like <like@kylinos.cn> - 2.44.0-5.p01
changelog:
  - Type: bugfix
  - ID:   NA
  - SUG:  NA
  - DESC: add patch9000: 0001-Support-loongarch64.patch
          sync from 2.44.0-3.p01


author: hanzhijun <hanzhijun1@huawei.com> - 2.02-77
changelog:
  - Type:cves
  - Id:CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15706 CVE-2020-15707
  - SUG:NA
  - DESC:fix CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15706 CVE-2020-15707


author: Xiao Zai <xiaozai@kylinos.cn> - 2.02-77.1.se.04.p02
changelog:
  - Type:bugfix
  - ID:task#143178
  - SUG:NA
  - DESC: move the password from spec file into 00_header.in file


author: guojunding <guojunding@kylinos.cn> - 2.02-77.1.se.04.p04
changelog:
  - Type:bugfix
  - ID:task#147958
  - SUG:NA
  - DESC: add grub2-set-bootflag to grub2-tools of the spec file


author: liuyang <liuyang01@kylinos.cn> - 2.02-77.1.se.04.p06
changelog:
  - Type:CVE
  - ID:TASK#338411
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity
         kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: yueyuankun <yueyuankun@kylinos.cn> - 2.02-77.1.se.04.p07
changelog:
  - Type:update
  - ID:task#361581
  - SUG:NA
  - DESC:add KYLIN_ROOT_USE_UUID, use root=UUID= instead of root=/dev/mapper/


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.3-1
changelog:
  - Upgrade to 1.2.3
  - Update Version, Release, Source0, BuildRequires
  - Update stage 'build', 'install', 'check' and 'files'


author: peijiankang <peijiankang@kylinos.cn> 2.24.32-11.p01
changelog:
  - Type: cves
  - ID:   [TASK#356995]
  - SUG:  NA
  - DESC: modify spec file enable_immodules_package 1  build gtk2-immodules packages
          add file gtk+-2.24.32-kylin-13336.patch
          add patch 0001-fix-chandao-bug47120.patch
          add patch:0001-add-some-translate.patch
          sync from 2.24.32-7.p03


author: lvfei <lvfei@kylinos.cn> - 3.24.1-4.p01
changelog:
  - sync liqian spec modify code 
  - Handle the mouse block problem of virt-manager virtual machine
  - loss buildrequire packages libXcursor-devel 
  - Handle the mouse block problem of virt-manager virtual machine
  - modify gtk3 spec file enable_immodules_package 1


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.4-1
changelog:
  - Upgrade to 1.2.4
  - Update Version, Release, Source0, BuildRequires
  - Delete sed operation which existed in this version
  - Add patch for fix CVE-2021-33516
  - Update stage 'prep', 'build', 'install', 'check', 'files'


author: mengchaoming<mengchaoming@kylinos.cn>-0.5.1-10.60
changelog:
  - add mips Patch56: hardinfo-0.5.1-kylin-scsi-permissions-issue.patch
  - add aarch64 Patch57: hardinfo-0.5.1-kylin-scsi-permissions-issue-and-cpu-info-incorrect.patch
  - add mips Patch58: hardinfo-0.5.1-kylin-mips-cpu-display.patch
  - add aarch64 Patch59: hardinfo-0.5.1-kylin-aarch64-cpu-info.patch
  - modify get_disk_info.sh add access control


author: mengchaoming<mengchaoming@kylinos.cn>-0.5.1-10.61
changelog:
  -add arm patch60:hardinfo-0.5.1-kylin-arm-pci-no-identify.patch
  -add x86 patch61:hardinfo-0.5.1-kylin-x86-pci-no-identify.patch


author: mengchaoming<mengchaoming@kylinos.cn>-0.5.1-10.63
changelog:
  -add patch68:hardinfo-0.5.1-kylin-user-resources-null.patch
  -add x86 patch66:hardinfo-0.5.1-kylin-x86_64-memtotal-not-incorrect.patch --liyunqing
  -add arm patch67:hardinfo-0.5.1-kylin-arm-memtotal-incorrect.patch  --liyunqing
  -add patch64:hardinfo-0.5.1-kylin-disk-name-incomplete.patch
  -add patch65:hardinfo-0.5.1-kylin-arm-device-name-incomplete.patch
  -post execute get_dist_info.sh
  -add patch63:hardinfo-0.5.1-kylin-arm-cpu-null.patch


author: liyunqing <liyunqing@kylinos.cn> - 0.5.1-10.64
changelog:
  - add patch69:hardinfo-0.5.1-kylin-x86-storage-vendor-incorrect.patch
  - add patch70:hardinfo-0.5.1-kylin-arm-storage-vendor-incorrect.patch


author: mengchaoming <mengchaoming@kylinos.cn>- 0.5.1-10.67
changelog:
  - add patch72: hardinfo-0.5.1-kylin-modify-boots-kernel-info.patch
  - add patch73: hardinfo-0.5.1-arm-kylin-modify-boots-kernel-info.patch


author: mengchaoming <mengchaoming@kylinos.cn>- 0.5.1-10.68
changelog:
  -add patch74:hardinfo-0.5.1-kylin-nvme-segmentfault-and-name-null.patch
  -add patch75:hardinfo-0.5.1-kylin-nvme-segmentfault-and-name-null-x86.patch
  -fix external bug5017


author: huayadong <huayadong@kylinos.cn>-0.5.1-10.70
changelog:
  - add Patch77: hardinfo-0.5.1-fix-bug-101193-bug-101305-x86.patch
  - add Patch78: hardinfo-0.5.1-fix-bug-101193-bug-101305-ARM.patch


author: kouwenqi <kouwenqi@kylinos.cn> - 1.9.8-2.p01
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: solve startup failure, fix the issue of "ExecStart" in haveged.service


author: caodongxia <caodongxia@huawei.com> - 1.8.20-12
changelog:
  - add sub packages hdf5-openmpi-static, hdf5-openmpi-devel, hdf5-openmpi,
  - hdf5-mpich-static, hdf5-mpich-devel, hdf5-mpich


author: yaoxin <yaoxin30@h-parters.com> - 1.12.1-1
changelog:
  - Update to 1.12.1 and fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501


author: gaihuiying <eaglegai@163.com> - 2.4.43-14
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934


author: chenzhitao <chenzhitao8@huawei.com> - 2.4.43-16
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-28614 CVE-2022-26377 CVE-2022-30522 CVE-2022-28615  CVE-2022-31813


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: hanjinpeng <liutao1@kylinos.cn> - 2.4.43-20.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-21
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:NA
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: zhangyulong <zhangyulong@kylinos.com> - 2.4.43-23.p02
changelog:
  - Type:TASK
  - ID:195905
  - SUG:NA
  - DESC:add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:restart
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.43-24
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-25
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.4.43-25.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.
          add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: yuboyun <yuboyun@huawei.com> - 2.4.43-3
changelog:
  - Type:cves
  - ID:CVE-2020-9490 CVE-2020-11984 CVE-2020-11993
  - SUG:restart
  - DESC:fix CVE-2020-9490CVE-2020-11984CVE-2020-11993


author: yanglu <yanglu72@huawei.com> - 2.4.43-5
changelog:
  - Type:cves
  - ID:CVE-2020-13950 CVE-2020-35452
  - SUG:restart
  - DESC:fix CVE-2020-13950 CVE-2020-35452


author: lijingyuan <lijingyuan3@huawei.com> - 2.4.43-6
changelog:
  - Type:cves
  - ID:CVE-2021-30641 CVE-2021-26690
  - SUG:restart
  - DESC:fix CVE-2021-30641 CVE-2021-26690


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-7
changelog:
  - Type:cves
  - ID:CVE-2021-34798 CVE-2021-36160 CVE-2021-40438
  - SUG:restart
  - DESC:fix CVE-2021-34798 CVE-2021-36160 CVE-2021-40438


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-8
changelog:
  - Type:cves
  - ID:CVE-2021-40438 CVE-2021-39275
  - SUG:restart
  - DESC:fix CVE-2021-40438 fully and correctly
         fix CVE-2021-39275


author: Like <like@kylinos.cn> - 2.4.43-8.p04
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-28614 CVE-2022-26377 
         CVE-2022-30522 CVE-2022-28615  CVE-2022-31813


author: xuhe <xuhe@kylinos.cn> - 1.7.1-11.p01
changelog:
  - Type: bugfix
  - ID: BUG#131728
  - SUG: NA
  - DESC: Fix yum install fail on x86_64 platform and fix build error due to files missing


author: wangkai <wangkai385@huawei.com> - 8.2.4-9
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 8.2.4-10
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: jiangjixiang <jiangjixiang@kylinos.cn> - 10.01-6.p01
changelog:
  - Type:bugfix
  - ID:[task#150862]
  - SUG:NA
  - DESC:Add patch9009 to resolve the issue of resolv.conf being cleared.
         this issue is introduced by patch6002 and patch9005.


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.332-b09.0
changelog:
  - deleted Support-Git-commit-ID-in-the-SOURCE-field-of-the-release.patch
  - deleted 8167014-jdeps-failed-with-Missing-message-warn-skippen-entry.patch
  - deleted fix-wrong-commitID-in-release-file.patch
  - deleted recreate-.java_pid-file-when-deleted-for-attach-mechanism.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8194154.patch
  - modified add-missing-test-case.patch
  - add fix-make-bugs-when-git-and-hg-not-exist.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.342-b07.0
changelog:
  - del 8168926.patch
  - del 8194154.patch
  - del 8202142-jfr-event-io-TestInstrumentation-is-unstable.patch
  - del 8266187_Memory_leak_in_appendBootClassPath.patch
  - del debuginfo.diz-should-not-contain-the-path-after-unzip.patch
  - del fix-make-bugs-when-git-and-hg-not-exist.patch
  - modified 7092821-java.security.Provider.getService-is-synchro.patch
  - modified 8268819-SA-Remove-libthread_db-dependency-on-Linux.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch


author: fandeyuan <fandeyuan@kylinos.cn> - 1:1.8.0.312-b07.10.p01
changelog:
  - Type:bugfix
  - Id:[TASK#138430]
  - SUG:NA
  - DESC: add 8268361-Fix-the-infinite-loop-in-next_line.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.382-b05.9
changelog:
  - add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
  - add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
  - add Record-the-number-of-processes-to-errlog-file.patch.patch
  - add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
  - add The-OverWriteOldestGCLog-option-is-added-to-control.patch
  - add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
  - add add-make-Appcds-jsa-rw-region-deterministic.patch
  - add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - add add-8198423-Improve-metaspace-chunk-allocation.patch
  - add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
  - add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - add add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - add add-8226530-test-case-fixed.patch
  - add add-8147940-Modify-testcase-this-test-does-not-assum.patch
  - add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
  - add add-Do-not-collect_class-when-DynamicCDS-dump.patch
  - add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
  - add add-Adapting-IOException-of-Zip-to-ZipException.patch
  - add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
  - add add-fix-windows-build-Dynamic-CDS-failure.patch
  - add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.392-b08.0
changelog:
  - add 8308682-Enhance-AES-performance.patch
  - add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
  - add Add-metaspace-memory-allocation-failure-validation.patch
  - add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
  - del 8202952.patch
  - del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
  - modified Dynamic-CDS-Archive.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase1.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - upgrade to jdk8u392-b08


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.2
changelog:
  - remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - remove add-8226530-test-case-fixed.patch
  - remove add-Adapting-IOException-of-Zip-to-ZipException.patch


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 1:1.8.0.392-b08.2.p01
changelog:
  - Type: cves
  - ID: [TASK#183363]
  - SUG: NA
  - fix install fail caused by %pretrans reporting error 
  	add 8268361-Fix-the-infinite-loop-in-next_line.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.402-b06.0
changelog:
  - modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified g1gc-numa-aware-Implementation.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8203699.patch
  - add Add-CaptchaTest-and-fix-KAE-Testcases.patch
  - add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
  - add Add-compiling-option-GS-when-building-windows-JDK.patch
  - add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
  - add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
  - add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
  - add 8057967-CallSite-dependency-tracking-scales-devastat.patch
  - add 8079205-CallSite-dependency-tracking-is-broken-after.patch


author: Benshuai5D <benshuai5d@163.com> - 1:1.8.0.402-b06.4
changelog:
  - add 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - add 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
  - add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
  - add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
  - add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
  - add GCC-12-reports-some-compiler-warnings.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.412-b08.0
changelog:
  - del 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - del 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase2.patch
  - modified support-numactl-for-hadoop-yarn.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.412-b08.3
changelog:
  - add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
  - add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.412-b08.4
changelog:
  - fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
  - fix loongson vendor error


author: Xiang Gao <gaoxiang@kylinos.cn> -1:1.8.0.412-b08.5.p02
changelog:
  - Type:update
  - ID:TASK#205860,TASK#218926
  - SUG:NA
  - DESC:1.Add Hygon dhyana processor support
         2.fix atomic operation issus when cpu scaling
         3.Add Zhaoxin processor support


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.422-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8136577_Make_AbortVMOnException_available_in_product_builds.patch
  - modified Dynamic-CDS-Archive.patch
  - modified add-safe-compilation-flags.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified openjdk-1.8.0.spec
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - Add Backport-6956385-URLConnection.getLastModified-leaks-file-han.patch
  - Add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - Add Backport-8068864-C2-failed-modified-node-is-not-on-IGVN._work.patch
  - Add Backport-8151845-Comment-in-globals.hpp-for-MetaspaceSize-is-.patch
  - Add Backport-8209362-sun-security-ssl-SSLSocketImpl-ReuseAddr.jav.patch
  - Add Backport-8210706-G1-may-deadlock-when-starting-a-concurrent-c.patch
  - Add Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - Add Huawei-Add-Aggressive-CDS.patch
  - Add Huawei-Keep-objects-when-remove-unshareable-info.patch
  - Add Huawei-improve-GCTR-performance.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.3.p01
changelog:
  - Type: update
  - ID:   TASK#337667
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Fix atomic operation issus when cpu scaling
          3.Add Zhaoxin processor support


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.15.10-0
changelog:
  - modified 8231441-3-AArch64-Initial-SVE-backend-support.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.16.8-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
  - modified fast-serializer-jdk11.patch
  - modified dfx-enhancement-of-FastSerializer.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
  - modified add-missing-inline.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix_X509TrustManagerImpl_symantec_distrust.patch
  - add fix_Internal_and_external_code_inconsistency.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.6-0
changelog:
  - update to 11.0.17+5
  - modified NUMA-Aware-Implementation-humongous-region.patch
  - modified Add-KAE-implementation.patch
  - modified fast-serializer-jdk11.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.8-0
changelog:
  - update to 11.0.17+8(GA)
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.21.9-0
changelog:
  - update to 11.0.21+9(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified 8214527-AArch64-ZGC-for-Aarch64.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.22.7-0
changelog:
  - update to 11.0.22+7(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: huangjie <huangjie150@huawei.com> - 1:11.0.23.9-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified delete_expired_certificates.patch


author: songliyang <songliyang@kylinos.cn> - 1.11.0.24.8-3.p01
changelog:
  - Type: update
  - ID:   [TASK#337669]
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Add Zhaoxin processor support


author: like <like@kylinos.cn> - 30-13.p03
changelog:
  - add patch1: rpm-config-mips64el-macros-debugsource-optflags-O2.patch
  --fix macros-debugsource_template and gcc-optflags-O3-to-O2


author: yueyuankun <yueyuankun@kylinos.cn> - 30-13.p06
changelog:
  - Type:bugfix
  - ID:task#200351
  - SUG:NA
  - DESC:fix the issue of missing changelog during compilation


author: openEuler Buildteam <buildteam@openeuler.org> - 2.0-17.12
changelog:
  - add secure compile options and merge bugfix patches from community
    xen: Avoid overlapping segments in low memory
    x86: Check /proc/mounts before mtab for mounts
    x86: Find mounts by FS type, not name
    kexec/kexec.c: Add the missing close() for fd used for kexec_file_load()
    kexec-uImage-arm64.c: Fix return value of uImage_arm64_probe()
    kexec/kexec-zlib.h: Add 'is_zlib_file()' helper function
    kexec/arm64: Add support for handling zlib compressed (Image.gz) image


author: Jialong Chen <chenjialong@huawei.com> - 2.0.17-14
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:modify SECTION_SIZE_BITS to 30 and keep the same as the kernel configuration.
         add executable permissions for kdump-error-handler.sh.


author: openEuler Buildteam <buildteam@openeuler.org> - 2.0.20-13
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:fix kdump service failed on x86 because of KDUMP_FILE_LOAD is set to on


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.0.20-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix issue about iomem file that contains too many contens.As a result,the kdump service failed


author: likai01 <likai01@kylinos.cn> 2.0.20-14.p03
changelog:
  - Type:cves
  - ID:CVE-2021-20269
  - SUG:NA
  - DESC:FIX CVE-2021-20269,modify kdump-lib-initramfs.sh under SOURCES directly


author: litianzhi <litianzhi@kylinos.cn> - 25-6.se.1
changelog:
  - add history security patchs
  - KYLIN: add apis to get kernel module name
  - KYLIN: use no-tmpl flavour for gtk-doc-tools


author: Xinpeng Liu<liuxp11@chinatelecom.cn> -1:0.9.1-14
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:modify the code stype in make_hotpatch and fix compile bug


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-16
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:create-diff-object: error on detect new/changed ALTINSTR_ENTRY_CB


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:kpatch: update sympos for duplicate symbols in vmlinux
         create-diff-object: fix segment fault when sec2->rela is NULL


author: zhangbowei <zhangbowei@kylinos.cn> - 1.15.7-2.p01
changelog:
  - Type:bug
  - ID:[BUG#139325]
  - SUG:NA
  - DESC:remove the "--allow-privileged=true" in patches/orig/kubeadm.conf


author: Jan Chaloupka <jchaloup@redhat.com> - 1.12.5-2
changelog:
  - Allow to install cri-o as alternative to docker
    resolves: #1631053
  - Allow to install moby-engine as alternative to docker
    resolves: #1683154


author: Jan Chaloupka <jchaloup@redhat.com> - 1.13.5-1
changelog:
  - Update to v1.13.5 (CVE-2019-1002101 - Mishandling of symlinks allows for arbitrary file write via `kubectl cp`)
    resolves: #1693884


author: Jan Chaloupka <jchaloup@redhat.com> - 1.15.2-1
changelog:
  - Update to v1.15.2 (CVE-2019-11250 kubernetes: Bearer tokens written to logs at high verbosity levels (>= 7))
    resolves: #1740435


author: lijian <lijian2@kylinos.cn> - 1.15.7-2.p02
changelog:
  - Type:CVE
  - CVE:CVE-2024-3177
  - SUG:NA
  - DESC: Fix CVE-2024-3177, add envFrom to serviceaccount admission plugin


author: lijian <lijian2@kylinos.cn> - 1.15.7-2.p03
changelog:
  - Type:CVE
  - CVE:CVE-2024-8551
  - SUG:NA
  - DESC:Fix CVE-2024-8551, add code to fix kubelet/metrics memory issue


author: zhangdashuang<zhangdashuang@kylinos.cn> - 1.3.10-5.p05
changelog:
  - add patch kylin_activation_fix_76021_76160_76173_75744.patch
  - fix bug76021 bug76160 bug76173 bug75744


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p18
changelog:
  - add patch 18:kylin_activation_fix_103100.patch
  - bug 103100:【济宁市委】ukey激活异常 
  - 本次更新解决激活ukey后会导致断错误,移除了华为可信1.3.10-10到1.3.10-17版本.


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p20
changelog:
  - add patch30 kylin_activation_fix_103100_ukey_activation_error.patch
  - bug 103100 ukey激活异常，优化激活过程。使界面不弹出Marco，系统不卡顿。


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p22
changelog:
  - Type:bugfix&task
  - ID:[BUG#122719] [TASK#88923] 
  - SUG:NA
  - DESC:limit dbus method import_auth_file


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p24
changelog:
  - Type:bugfix
  - ID:[BUG#89131&&BUG128952]
  - SUG:NA
  - DESC:fix show qr code err and import License err


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p25
changelog:
  - Type:update
  - ID:[TASK#105221]
  - SUG:NA
  - DESC:Venue authorization limited time unlimited demand support


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p27
changelog:
  - Type:bugfix
  - ID:[BUG#139688]
  - SUG:NA
  - DESC:fix kms client not show deactivation button while config serverip is url(patch27)


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p31
changelog:
  - Type:bugfix
  - ID:[BUG#178000] [TASK#176779] [TASK#179475]
  - SUG:NA
  - DESC: add get trial date fuction for dbus
  - DESC: open auto activation for kms privatization
  - DESC: add ipv6 support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p33.02
changelog:
  - Type: bugfix
  - ID:[bug#216077]
  - SUG: NA
  - DESC: add tips when inputed activation code is too short


author: liyunqing<liyunqing@kylinos.cn>-3.0.1s1-1.p06
changelog:
  -add patch6:kylin-computer-viewer-3.9.1s1-kylin-meminfo-incorrect.patch
  -add patch5:kylin-computer-viewer-3.9.1s1-kylin-modify-HDD-unit.patch


author: huayadong<huayadong@kylinos.cn>-3.0.1s1-1.p19
changelog:
  - Type: bugfix
  - ID  : [BUG#117856]
  - SUG : NA
  - DESC: add Patch18 kylin-computer-viewer-3.9.1s1-kylin-delete-comment.patch


author: huayadong<huayadong@kylinos.cn>-3.0.1s1-1.p20
changelog:
  - Type: bugfix
  - ID  : [TASK#90519]
  - SUG : NA
  - DESC: add Patch19 kylin-computer-viewer-3.9.1s1-kylin-fix-fortify-3.patch


author: peijiankang <peijiankang@kylinos.cn> -3.0.1s1-1.p22
changelog:
  - Type: bugfix
  - ID:   [TASK#187125]
  - SUG:  NA
  - DESC: kylin-computer-viewer-add-translations-for-hk-and-tw.patch


author: peijiankang <peijiankang@kylinos.cn> -3.0.1s1-1.p24
changelog:
  - Type: bugfix
  - ID:   [TASK#187125]
  - SUG:  NA
  - DESC: add patch:kylin-computer-viewer-3.9.1s1-kylin-update-HK-pdf.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p26
changelog:
  - Type: update
  - ID: [TASK#187798]
  - SUG: NA
  - DESC:add patch:kylin-computer-viewer-3.9.1s1-kylin-change-copyright-for-sp4.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p27
changelog:
  - Type: update
  - ID: [BUG#217688]
  - SUG: NA
  - DESC:kylin-computer-viewer-kylin-Whenthe-activation-is-not-expired-add-the-Extend-Service-button.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p28
changelog:
  - Type: update
  - ID: [BUG#222530]
  - SUG: NA
  - DESC:kylin-computer-viewer-3.9.1s1-kylin-activation-delete-the-Extend-Service-button.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p29
changelog:
  - Type: update
  - ID: [TASK#369205]
  - SUG: NA
  - DESC:kylin-computer-viewer-3.9.1s1-kylin-fix-coredump.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p30
changelog:
  - Type: update
  - ID: [TASK#187789]
  - SUG: NA
  - DESC:kylin-computer-viewer-3.9.1s1-add-get-v10-sp-version.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p31
changelog:
  - Type: bugfix
  - ID: [BUG#281681]
  - SUG: NA
  - DESC:update kylin-computer-viewer-3.9.1s1-add-get-v10-sp-version.patch


author: GuoCe <guoce@kylinos.cn> -p34
changelog:
  - Add patch: 0001-Fix-buf-of-chandao-21150.patch
  - The screen saver option is activated and hidden by default


author: huayadong <huayadong@kylinos.cn> -p41
changelog:
  - add patch:kylin-control-center-3.9.5-Fix-bug-48008-xrandr-resolution-list-inconsistent-with-control-panel.patch


author: mengchaoming<mengchaoming@kylinos.cn> - p46
changelog:
  - add patch45:kylin-control-center-3.9.5-kylin-3adm-adjust-the-display-items.patch
  - fix bug#57147
  - 三权分立下,调整了用户的显示项;
  - 对用户管理部分做了部分调整;
    - 三权后,root不能对auditadm、secadm用户进行修改密码、删除用户、更改头像等操作;
    - 加入用户label、汉化等;


author: huayadong <huayadong@kylinos.cn> -p48
changelog:
  - add Patch47:    0001-fix-chandao-bug-44426.patch
  - add Patch48:    0001-fix-chandao-bug-49137.patch
  - add Patch49:    0001-fix-chandao-bug-58997.patch
  - add Patch50:    0001-fix-chandao-bug-60615.patch
  - add Patch51:    0001-Fix-kylin-chandao-bug-54138.patch
  - add Patch52:    fix-bug-54106.patch
  - 合并龙芯补丁


author: mengchaoming<mengchaoming@kylinos.cn> -p51
changelog:
  - add patch55: kylin-control-center-3.9.5-kylin-fix-chandao-bug-92609.patch
  - root 用户修改自身密码需要输入旧密码，修改其他用户的密码不需要。


author: huayadong <huayadong@kylinos.cn> -p52
changelog:
  - add Patch56: kylin-control-center-3.9.5-kylin-fix-bugzilla-8314.patch
  - 修复把指针移动速度调节至最慢(最左),再次打开控制面板鼠标配置界面,显示指针移动速度跳至最快(最右)问题.


author: huayadong <huayadong@kylinos.cn> -p55
changelog:
  -- Type: bugfix
  -- ID  : [BUG#8485][bugzilla]
  -- SUG : NA
  -- DESC: add Patch58:kylin-control-center-3.9.5-kylin-fix-bugzilla-8485.patch
  	 屏蔽显示1024x768规格以下分辨率


author: huayadong <huayadong@kylinos.cn> -p56
changelog:
  - Type: bugfix
  - ID  : [Task#79301]
  - SUG : NA
  - DESC: add Patch59 kylin-control-center-3.9.5-kylin-Modify-adduser-rule.patch
          统一用户名密码创建规则.


author: huayadong <huayadong@kylinos.cn> -p57
changelog:
  - Type: bugfix
  - ID  : [BUG#110773]
  - SUG : NA
  - DESC: add Patch60 kylin-control-center-3.9.5-kylin-fix-mode-gsetting-change-but-program-interface-unchanged.patch 
          修复gsetting设置屏保模式后，界面未立即更改问题.


author: huayadong <huayadong@kylinos.cn> -p58
changelog:
  - Type: bugfix
  - ID  : [BUG#122968]
  - SUG : NA
  - DESC: add Patch60 kylin-control-center-3.9.5-kylin-fix-the-problem-that-palindrome-detection-does-not-take-efffect.patch
          修复密码回文检测不生效问题.


author: huayadong <huayadong@kylinos.cn> -p58
changelog:
  - Type: bugfix
  - ID  : [BUG#122968]
  - SUG : NA
  - DESC: add Patch61 kylin-control-center-3.9.5-kylin-fix-the-problem-that-palindrome-detection-does-not-take-efffect.patch
          修复密码回文检测不生效问题.


author: huayadong <huayadong@kylinos.cn> -p59
changelog:
  - Type: bugfix
  - ID  : [BUG#122968]
  - SUG : NA
  - DESC: add Patch62 kylin-control-center-3.9.5-kylin-supplementary-password-configuration-rules.patch
          对密码设置增加规制限制.


author: huayadong <huayadong@kylinos.cn> -p60
changelog:
  - Type: bugfix
  - ID  : [BUG#122944]
  - SUG : NA
  - DESC: add Patch63 kylin-control-center-3.9.5-kylin-add-dictionary-detection-function-for-password-modif.patch


author: huayadong <huayadong@kylinos.cn> -p61
changelog:
  - Type: bugfix
  - ID  : [BUG#128211][BUG#136078]
  - SUG : NA
  - DESC: add Patch64 kylin-control-center-3.9.5-kylin-fix-adding-pictures-in-lock-screen-background-without-saving.patch
  	添加密码相似性检查，修复锁屏壁纸不保存问题.


author: huayadong <huayadong@kylinos.cn> -p63
changelog:
  - Type: bugfix
  - ID  : [BUG#144468]
  - SUG : NA
  - DESC: add Patch65 kylin-control-center-3.9.5-kylin-fix-password-verification-problems.patch
          修复root用户密码更新不对原密码进行校验.


author: huayadong <huayadong@kylinos.cn> -p64
changelog:
  - Type: bugfix
  - ID  : [BUG#151189]
  - SUG : NA
  - DESC: add Patch66 kylin-control-center-3.9.5-fix-crash-when-switching-lock-screen-mode.patch 
  	修复切换屏保模式时的崩溃问题。


author: huayadong <huayadong@kylinos.cn> -p65
changelog:
  - Type: bugfix
  - ID  : [Bug#158569]
  - SUG : NA
  - DESC: add Patch67 kylin-control-center-3.9.5-kylin-Merge-display-in-control-panel-for-users-with-the-same-UID.patch
  	为具有相同UID的用户在控制面板合并显示.


author: huayadong <huayadong@kylinos.cn> -p66
changelog:
  - Type: bugfix
  - ID  : [Bug#159672]
  - SUG : NA
  - DESC: add Patch68 kylin-control-center-3.9.5-kylin-fix-the-problem-that-the-screensaver-image-appears-black.patch
  	修复每次打开控制面板屏保预览都是黑色问题.


author: huayadong <huayadong@kylinos.cn> -p67
changelog:
  - Type: bugfix
  - ID  : [Bug#160870]
  - SUG : NA
  - DESC: add Patch69 kylin-control-center-3.9.5-kylin-fix-the-same-uid-user-deletion-problem.patch


author: huayadong <huayadong@kylinos.cn> -p69
changelog:
  - Type: bugfix
  - ID  : [Bug#173828]
  - SUG : NA
  - DESC: add Patch70:kylin-control-center-3.9.5-kylin-network-browser-error-in-default-application.patch


author: huayadong <huayadong@kylinos.cn> -p70
changelog:
  - Type: bugfix
  - ID  : [Bug#173825]
  - SUG : NA
  - DESC: add Patch70:kylin-control-center-3.9.5-kylin-change-gtk-theme-blue-icon-for-kylin-blue-theme.patch


author: peijiankang <peijiankang@kylinos.cn> - p72
changelog:
  - Type: bugfix
  - ID:   [TASK#187125]
  - SUG:  NA
  - DESC: kylin-control-center-update-translations-for-hk-and-tw.patch


author: houhongxun <houhongxun@kylinos.cn> - p73
changelog:
  - Type: bugfix
  - ID:   [BUG#211927]
  - SUG:  NA
  - DESC: add 0001-kylin-control-center-memory-leak-fixs.patch


author: peijiankang <peijiankang@kylinos.cn> - p74
changelog:
  - Type: bugfix
  - ID:   [BUG#231576]
  - SUG:  NA
  - DESC: add kylin-control-center-3.9.5-kylin-fix-coredump-about-memory-leak.patch


author: mengchaoming<mengchaoming@kylinos.cn> - 5.5.9-3.1.p08
changelog:
  - Add Patch6:kylin-menu-5.5.9-kylin-merge-xgs-patch.patch
  - 主要增加了菜单中的分类功能
  - 禁用菜单右键
  - 解决搜索框长按字符输入卡顿问题
  - 用户注销后卸载挂载的设备
  - 对相关应用的权限进行了限制,解决了禅道上一些bug;
  - 解决python-distutils-extra升级后的编译问题


author: liufeng<liufeng@kylinos.cn> - 5.5.9-3.1.p10
changelog:
  - add patch8: kylin-menu-5.5.9-Kylin-fix-click-user-button-no-response.patch
  - fix click user button no response. 
  - fix chandao bug 34693. (liufeng@kylinos.cn)


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p11
changelog:
  - add patch9: kylin-menu-5.5.9-kylin-fix-bug-42668-Unable-to-internationalize.patch
  - fix bug 42668
  - "新增菜单中的分类功能" 在英文模式下会导致应用丢失无法国际化，屏蔽


author: mengchaoming<mengchaoming@kylinos.cn> - 5.5.9-3.1.p12
changelog:
  - add patch10: kylin-menu-5.5.9-kylin-fix-tw-and-hk-chinese.patch  ---xiaozai@kylinos.cn
  - fix bug 47488 
  - "将香港繁体和台湾繁体的开始菜单列表汉化
  - add patch11:kylin-menu-5.5.9-kylin-Solve-traditional-Chinese-and-English.patch
  - spec:注释掉patch9
  - "隐藏磁盘管理"
  - “保证语言在简体中文 繁体中文 英文在安装以及来回切换过程中保持风格一致且显示正常”


author: mengchaoming<mengchaoming@kylinos.cn> - 5.5.9-3.1.p13
changelog:
  -add patch12:kylin-menu-kylin-strict-non-administrators-hide-system-monitor.patch
  -strict 模式下,非root用户 菜单隐藏 mate-system-monitor;fix bug 49504;


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p19
changelog:
  - Type:bugfix
  - ID  :[bug#117856]
  - SUG :NA
  - DESC:add Patch15: kylin-menu-5.5.9-delete-comment.patch


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p20
changelog:
  - Type:bugfix
  - ID  :[bug#138701][bug#123656]
  - SUG :NA
  - DESC:add Patch16: kylin-menu-5.5.9-kylin-non-root-users-hide-shutdown-and-restart-functions.patch


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p22
changelog:
  - Type:bugfix
  - ID  :[bug#139752]
  - SUG :NA
  - DESC:add patch17:kylin-menu-5.5.9-kylin-fix-the-default-mode-The-start-menu-has-no-gnome-logs.patch


author: huayadong<huayadong@kylinos.cn> - 5.5.9-3.1.p24
changelog:
  - Type:bugfix
  - ID  :[bug#169280]
  - SUG :NA
  - DESC:add patch18:kylin-menu-5.5.9-kylin-fix-clicking-on-MyComputer-twice-will-bring-up-three-folders.patch


author: houhongxun <houhongxun@kylinos.cn> - 5.5.9-3.1.p25
changelog:
  -Type:bugfix
  -ID:[BUG#195923]
  -SUG:NA
  -DESC:add patch 0001-fix-the-problem-that-windows-can-t-be-activated-when.patch
        fix the problem that windows can't be activated when start menu open


author: houhongxun <houhongxun@kylinos.cn> - 5.5.9-3.1.p26
changelog:
  -Type:bugfix
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-add-traditional-chinese-translation-for-Logout.patch
        add missing traditional chinese translation for "Logout"


author: peijiankang <peijiankang@kylinos.cn> - 5.5.9-3.1.p27
changelog:
  - Type: bugfix
  - ID:   [TASK#187125]
  - SUG:  NA
  - DESC: update-timing-shutdown.desktop-and-kylinmenu.py-about-ranslations-of-hk-and-tw.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.04
changelog:
  - 修复漏洞：通过dbus查询数据库接口实现SQL注入，修改白名单
  -   add patch: KYLIN-kylin-security-daemon-fix-sql-inject-by-retrieve.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.05
changelog:
  - Type: update
  - ID: [Task#107721]
  - SUG:NA
  - DESC: 修复kysec-sync-notify中的sub_3960函数存在命令注入漏洞
  -         add patch: kylin-security-daemon-fix-fix-notify-get-file-type.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.06
changelog:
  - Type: bugfix 
  - ID: [Task#107721]
  - SUG:NA
  - DESC: 修复已解除执行控制的文件，sh仍可以执行的bug
  -         add patch: kylin-security-daemon-fix-exectl-check-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.08
changelog:
  - Type: bugfix
  - ID: [BUG#147906]
  - SUG:NA
  - DESC: 修复文件保护无法添加含有特殊字符文件名的文件
  -         add patch: kylin-security-daemon-fix-fpro-not-add-special-character-file-name-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.09
changelog:
  - Type: bugfix
  - ID: [BUG#146973]
  - SUG:NA
  - DESC: 修复解析脚本文件类型失败的问题 
  -         add patch: kylin-security-daemon-fix-parse-script-file-type-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.10
changelog:
  - Type: bugfix 
  - ID: [BUG#154600]
  - SUG:NA
  - DESC: 修复设置模块防卸载是提示kmod_whlist不存在的错误
  -         add patch: kylin-security-daemon-fix-kmod-set-protect-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.11
changelog:
  - Type: bugfix 
  - ID: [BUG#157216]
  - SUG:NA
  - DESC: 解决添加白名单后whlist.db文件无法关闭的问题
  -         add patch: kylin-security-daemon-fix-whlist-db-close-failed.patch


author: wanghao <wanghao2@kylinos.cn> 1.0.21-3kord.se.12
changelog:
  - Type: update 
  - ID: [TASK#129149]
  - SUG:NA
  - DESC: 解决在sp2版本中判断.pyc文件错误的问题
  -         add patch: kylin-security-daemon-fix-parse-pyc-file-error-in-sp2-version.patch


author: zhangjun <zhangjun@kylinos.cn> - p10
changelog:
  - Type:task
  - ID:[TASK#89131]
  - SUG:NA
  - DESC:add patch kylin_verify_add_command_help_for_task_89131.patch


author: liwenchong <liwenchong@kylinos.cn> - p11
changelog:
  - Type:task
  - ID:[TASK#90991]
  - SUG:NA
  - DESC:add patch kylin_verify_code_modification_for_fortify_scan.patch


author: yangyan<yangyan@kylinos.cn> -0.1.0-5
changelog:
  - Type:bugfix and task
  - ID:all
  - SUG:Na
  - DESC: The modifications made in the past week have been combined into a patch file


author: yangyan <yangyan@kylinos.cn> -0.1.0-6
changelog:
  - Type:task
  - ID:210047 & 210036
  - SUG:Na
  - DESC: Added archive profile judgment and removed patch_info field check


author: yangyan <yangyan@kylinos.cn> -0.1.0-7
changelog:
  - Type:BUG&Task
  - ID:all
  - SUG:NA
  - DESC:The modifications made in the past week have been combined into a patch file


author: caoshuhao <caoshuhao@kylinos.cn> - 1.0.10kord-se.06
changelog:
  - Add patch 0001-change-version-1.0.10.patch
    This patch only updated the tool's version to 1.0.10 from 1.0.7.


author: huanfuxi <huanfuxi@kylinos.cn> - 3.2.21kord-se
changelog:
  - pass the check to execute permission when file does not exist
  - determine whether the kysec status is softmode before obtaining file label


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.09
changelog:
  - Type: update
  - ID: [Task#104022]
  - SUG:NA
  - DESC: 修复kysec_get和kysec_set通过rpm查询命令注入的漏洞
  -         add patch: kysec-utils-fix-kysec-rpm-query-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.10
changelog:
  - Type: bugfix 
  - ID: [BUG#138162]
  - SUG:NA
  - DESC: dnf和dnf-3添加kysoft的执行标记
  -         add patch: kysec-utils-exectl-dnf-add-kysoft-label.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.11
changelog:
  - Type: bugfix 
  - ID: [BUG#127829]
  - SUG:NA
  - DESC: 修复模块标签是unknown是可以insmod的bug
  -       修复sh执行脚本，无法执行修改后还原的脚本
  -       修复已解除执行控制的文件，sh仍可以执行的bug
  -         add patch: kysec-utils-fix-exectl-check-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.12
changelog:
  - Type: bugfix 
  - ID: [BUG#128013]
  - SUG:NA
  - DESC: 从audadm_list中删除ausearch程序
  -         add patch: kysec-utils-delete-ausearch-from-audadm-list.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.13
changelog:
  - Type: bugfix 
  - ID: [BUG#146973]
  - SUG:NA
  - DESC: 修复解析脚本文件类型失败的问题
  -         add patch: kysec-utils-fix-parse-script-file-type-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.14
changelog:
  - Type: update
  - ID: [TASK#122582]
  - SUG:NA
  - DESC: 修复arm平台编译错误的问题
  -         add patch: kysec-utils-fix-arm-build-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.23kord-se.15
changelog:
  - Type: update
  - ID: [TASK#129149]
  - SUG:NA
  - DESC: 解决在sp2版本中判断.pyc文件错误的问题
  -         add patch: kysec-uitls-fix-parse-pyc-file-error-in-sp2-version.patch


author: fuanan <fuanan3@huawei.com> - 551-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Minor memory leak.
         Remove unnecessary and incorrectly used variable same_pos_bell.
         Fix erroneous EOF calculation when F command is interrupted.
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: Xiaole He <hexiaole@kylinos.cn> - 2.2-1
changelog:
  - Initial build of libabigail package using source code from git revision
  - 1f51b9e85dc42dc71caf7fe79436d64c6a3d03f3 (Bug 29829 - dwarf-reader: Allow DIEs to be in a lexical block)


author: Xiaole He <hexiaole@kylinos.cn> - 2.2-2
changelog:
  - Initial build of libabigail package using source code from git revision
  - 24a219d905ad61710d2a04a1a5e94bb15d3687dd (fix comparing array subrange DIEs)


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.35.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memleak in fdisk_script_read_file
         Fix heap-buffer-overflow in fdisk_partname
         Fix integer overflow in partno_from_devname


author: wangxiaomeng<wangxiaomeng@kylinos.cn> - 2.35.2-9.p02
changelog:
  - Type:bugfix
  - ID:[TASK#143321]
  - SUG:NA
  - DESC:backport patch to fix rounding in size_to_human_string()


author: wanfeng <wanfeng@kylinos.cn> - 2.35.2-9.p03
changelog:
  - Type:bugfix
  - ID:[BUG#153935]
  - SUG:NA
  - DESC:add patch:9400 for supporting utf-8 to fix problematic output when
  -      executing below commands at /dev/ttyN(N>1):
  -      systemctl restart rescue.service
  -      systemctl set-default rescue.target and reboot


author: huangwenhua <huangwenhuag@kylinos.cn> - 2.35.2-9.p05
changelog:
  - Type:bugfix
  - ID:[TASK#172942]
  - SUG:NA
  - DESC: add patch 0001-fix-soft-link-missing.patch
          fix soft link missing


author: Yu Peng <yupeng@kylinos.cn> - 2.35.2-9.p07
changelog:
  - Type:bugfix
  - ID:[TASK#360847]
  - SUG:NA
  - DESC:sync community patches
         backport-libfdisk-fix-fdisk_reread_changes-for-extended-partitions.patch


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: capsh better error handling for integer parsing
          setcap clean up error handling of the ns rootid argument


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: If needed search PATH for capsh (==) self-execution
          Guarantee sufficient memory for scratch pathname


author: hy <eulerstoragemt@huawei.com> - 1:1.39.8-4
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC:Remove Java bingdings, zz-packages-zfs command and rhsrvany.exe from mingw32-srvany.


author: zhangjun <zhangjun@kylinos.cn> - 3.0.64.p22
changelog:
  - Add patch:libkylin_activation_add_print_expiration_time.patch
  - [TASK#66101]KMS2.2需求实现/新增一个终端命令来查询服务到期时间
  - 本次更新新增终端命令kylin_status_check -t来查询服务到期时间


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p23
changelog:
  - add patch 26 for requirement development
  - taskid 65949: Batch activation and batch recovery are realized through MQTT


author: zhangjun <zhangdashuang@kylinos.cn> - 3.0.64.p24
changelog:
  - add patch 27:libkylin_activation_fix_103100_ukey_actionation_err.patch
  - bug 103100:【济宁市委】ukey激活异常 
  - 本次更新解决激活ukey断错误问题，由于过早的关闭动态库句柄，关闭后有其他函数在用。


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p25
changelog:
  - add patch 28 to solve the bug 104313 104169 104164 103893
  - bugId 104313:日志注册信息中version字段显示与实际版本不符
  - bugId 104169:服务到期时间仍显示2099与实际授权文件定义不符
  - bugId 104164:执行kylin_activation_check -t 不显示服务期限
  - bugId 103893:客户端取消激活失败，提示“Recycling success”


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p39
changelog:
  - Type:update
  - ID:[BUG#122522][BUG#121006]
  - SUG:NA
  - DESC:kylin_activation_check improve permissions


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p43
changelog:
  - Type:update
  - ID:[TASK#102068][BUG#135390][BUG#134276]
  - SUG:NA
  - DESC:add limit time palce authorization (patch45)
         fix bug135390 (patch46)
         fix buf134276 (modify spec file)


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p45
changelog:
  - Type:update
  - ID:[TASK#110237]
  - SUG:NA
  - DESC:Limited time unlimited site authorization activated when booting (patch48)


author: zhangjun <zhangjun@kylinos.cn> - 3.0.64.p46
changelog:
  - Type:bugfix
  - ID:[BUG#137974]
  - SUG:NA
  - DESC:slove when replaceing the authorization file view computer properties then serial number changed (patch49)


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p47
changelog:
  - Type:bugfix
  - ID:[BUG#152498]
  - SUG:NA
  - DESC:slove the problem of check error for private activation ordinary users (patch50)


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p49
changelog:
  - Type:bugfix
  - ID:[BUG#166387]
  - SUG:NA
  - DESC:add buildrequires and requires  version of paho-c in spec


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p51
changelog:
  - Type: bugfix
  - ID:[BUG#178000]
  - SUG:NA
  - DESC: fix get expiration time error and add get trial time fuction


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p52
changelog:
  - Type: upadate
  - ID:[TASK#153883]
  - SUG:NA
  - DESC: change service enable way in postinstall and posttrans


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p58
changelog:
  - Type: update
  - ID:[TASK#176779]
  - SUG:NA
  - DESC: add auto activation for kms privatization and fix bug 199947
  - DESC: cancel read hardinfo from khwid and five m extension


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p61.02
changelog:
  - Type: bugfix
  - ID:[BUG#211902]
  - SUG: NA
  - DESC: gather together kms cmd 
  - DESC: add writable port and decoupling echoip from kms server


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p61.08
changelog:
  - Type: bugfix
  - ID:[BUG#235198][BUG#235203][TASK#336625][TASK#335500][BUG#242309][BUG#241968]
  - SUG: NA
  - DESC: fix translation errors for bug#235198 and bug#235203
  	fix get activation status error  for task#336625
  	fix get sn code error for task#335500
  	fix kylin_kms delay failed for bug#242309
  	fix kylin_kms -c failed for bug#241968


author: Wolfgang Ulbrich <chat-to-me@raveit.de> - 1.7.90-1
changelog:
  - update to 1.7.90 release
  - use --with-gnome --all-name for find locale
  - enable python bindings, add BR pygtk2-devel


author: huayadong <huayadong@kylinos.cn> 1.12.1-1.p01
changelog:
  - Type:fixbug
  - ID  :[bug#204766]
  - SUG :NA
  - DESC:add patch0:libmateweather-1.12.1-kylin-delete-sensitive-information.patch


author: shenyangyang <shenyangyang4@huawei.com> - 1.6.4-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add build requires of gobject-introspection-devel to solve build problem


author: liyunqing <liyunqing@kylinos.cn> - 1.18.22-4.p08.01
changelog:
  - Type:bugfix
  - ID:task#156283
  - SUG:NA
  - DESC: only display provider's name when country_code is none


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.0-3
changelog:
  - Use C.UTF-8 locale
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Mosaab Alzoubi <moceap@hotmail.com> - 0.7.0-4
changelog:
  - First build on EPEL8
  - Use one branch to build on Fedora and EPEL
  - Use python3 as BR except EPEL7
  - Use LC_ALL=en_US.UTF-8 in EPEL7


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 5.0-1
changelog:
  - New upstream release, migrated to python
  - Turn off automatic python byte-compilation and use py_byte_compile for the
    extension files


author: zhangjun <zhangjun@kylinos.cn> 1.0-1.11.1.p01
changelog:
  - update spec:Install libRockeyARM.s0.0.3 library to /usr/lib/xxx-linux-gnu directory
  - bug102904平安银行定制iso授权Key激活失败
  - 本次更新修复将动态库安装到对应架构指定目录


author: wanghao <wanghao2@kylinos.cn> - 1.0-8kord.se.01
changelog:
  - Type:update
  - ID: [TASK#116058]
  - SUG:NA
  - DESC: 修复函数会覆盖errno问题
  -         add patch: libsecurity1-fix-errno-will-be-overwritten.patch


author: Meng Dehui <mengdehui@kylinos.cn> - 2.9-se.06
changelog:
  - AddPatch:libselinux-fix-ston-wrong.patch
  - Author:Meng Dehui
  - resume USER_AVC checks

  - RemovePatch:libselinux-20200326.patch
  - Author:Jiang Xingsong
  - fix user_avc wrong, Audit cannot be controlled by policy.


author: hanhuijie <hanhuijie@kylinos.cn> - 2.9-se.07
changelog:
  - Add patch:fix-auditd-avc-t.patch  -caoshuhao
  - Remove patch:libselinux-20200326.patch
    移除libselinux-20200326.patch(这个patch放开了所有USER_AVC的判断),增加fix-auditd-avc-t.patch(这个patch单独放开了auditadm_t到auditd_unit_file_t)
    本次更新修改了auditd服务用户权限的问题，使auditadm用户有权限控制auditd服务，其他用户没有权限控制auditd服务
  - add patch Fix-import-error-in-python2-package.patch --hanhuijie
  - Fix-import-error-in-python2-package.patch


author: gaoyusong<gaoyusong1@huawei.com> - 3.1-1.se.01
changelog:
  - Patch1: libselinux-20200318.patch
  - Patch2: add-selinux_restorecon.patch
  - Patch3: libselinux-20200326.patch
  - Patch4: libselinux-20200427.patch


author: caoshuhao<caoshuhao@kylinos.com> - 3.1-1.se.04
changelog:
  - Add patch: libselinux-fix-ston-wrong.patch
  - Author: Meng Dehui
  - Resume USER_AVC checks

  - Remove patch: libselinux-20200326.patch
  - Author: Jiang Xingsong
  - Fix user_avc wrong: Audit cannot be controlled by policy.


author: hanhuijie <hanhuijie@kylinos.com> - 2.9-4.se.02
changelog:
  - Type:update
  - ID:[任务#195738]同步libsemanage的补丁到sp1-libsemanage
  - SUG:NA
  - DESC:
  - [BUG#209238]【管理员分权】自定义增加备份还原分区安装系统，开启strict模式后，secadm和auditadm用户异常
  - add patch: libsemanage-homedircon.patch
  - desc:secadm和auditadm不存在,genhomedircon生成adm_home_t的定义。


author: xingxing <xingxing9@h-partners.com> - 0.7.14-5
changelog:
  - Type:cves
  - CVE:CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-2021-44576-CVE-2021-44577
  - SUG:NA
  - DESC:fix CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-2021-44576-CVE-2021-44577


author: gaihuiying <eaglegai@163.com> - 0.9.4-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport upstream patches:
         add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: renmingshuai <renmingshuai@huawei.com> - 0.9.4-9
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: yuboyun<yuboyun@huawei.com> - 1.9.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix heap-buffer-overflow in _libssh2_ntohu32 and wild-addr-read in _libssh2_ntohu32


author: wangye <wangye70@huawei.com> - 4.1.0-2
changelog:
  - Type:cves
  - ID:CVE-2020-35521 CVE-2020-35522 CVE-2020-35523 CVE-2020-35524
  - SUG:NA
  - DESC: fix CVE-2020-35521 CVE-2020-35522 CVE-2020-35523 CVE-2020-35524


author: Like <like@kylinos.cn> - 4.1.0-5.p01
changelog:
  - Type:cves
  - ID:CVE-2022-0908 and CVE-2022-0891
  - SUG:NA
  - DESC:fix CVE-2022-0908 and CVE-2022-0891


author: sunjialin <sunjialin@kylinos.cn> - 4.1.0-5.p02
changelog:
  - Type:cves
  - ID:CVE-2022-0907 CVE-2022-0909 CVE-2022-0924 CVE-2022-0865
  - SUG:NA
  - DESC:fix CVE-2022-0907 CVE-2022-0909 CVE-2022-0924 CVE-2022-0865


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-9
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: guojunding <guojunding@kylinos.cn> - 0.4.5.1-6.p01
changelog:
  - Type:compile
  - ID:task#161693
  - SUG:NA
  - DESC:replace time_zones_countryInfo-orig.svg to remove the national border


author: wanfeng <wanfeng@kylinos.cn> - 1.2.6-2.p01
changelog:
  - Type:BUGFIX
  - ID:Task#145401
  - SUG:NA
  - DESC:add 0001-__rpc_dtbsize-rlim_cur-instead-of-rlim_max.patch
         add 0003-libtirpc-replace-array-with-list-for-per-fd-locks.patch
         fix oom bug


author: Like <like@kylinos.cn> - 1.2.6-4.p01
changelog:
  - Type:BUGFIX
  - ID:Task#150867,Task#145401
  - SUG:NA
  - DESC:Updated to the latest upstream release
  -- add 0001-__rpc_dtbsize-rlim_cur-instead-of-rlim_max.patch
     add 0003-libtirpc-replace-array-with-list-for-per-fd-locks.patch
     fix oom bug


author: openEuler Buildteam <buildteam@openeuler.org> - 2.8.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revise the bogus date in changelog and delete the unnecessary subpackage "udisks2-iscsi"


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0 for fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 5.5.0-6.p01
changelog:
  - Type: bugfix
  - ID: [bug#77920]
  - SUG: NA
  - DESC: With this update, `libvirt` no longer attempts to disable the `pconfig` CPU feature which is not supported by QEMU.
  -       Fix bug that can not create a virtual machine on a host using the 10th generation Intel Core processor (also known as Icelake-Server)
  -       Replace the deprecated 'security_context_t'' in the libvirt source code with 'char *'


author: Xu Yandong <xuyandong2@huawei.com> - 6.2.0-4
changelog:
  - Fix virdaemon waiting for child processes return code error.
  - Fix virsh dump and migrate return code error.


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - rpc: gendispatch: handle empty flags
  - rpc: add support for filtering @acls by uint params
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses
  - qemu: agent: set ifname to NULL after freeing


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - util: Move virIsDevMapperDevice() to virdevmapper.c
  - virdevmapper: Don't use libdevmapper to obtain dependencies


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  - security: fix SELinux label generation logic


author: Lizhanchun <lizhanchun@kylinos.cn>
changelog:
  - add phytium support host-model on aarch64
  - Kunpeng-920 skip virQEMUCapsInitCPUModel() for host-model functional.


author: wangdi <wangdi@kylinos.cn> - 6.2.0-11.p03
changelog:
  - Type: bugfix
  - ID:   [BUG#216112]
  - SUG:  NA
  - DESC: fix failing to start vm without device-mapper support


author: lilong <lilong@kylinos.cn> - 6.2.0-11.p04
changelog:
  - Type: Update
  - ID:   [TASK#211377]
  - SUG:  NA
  - DESC: fix CVE-2024-1441,CVE-2024-2494,CVE-2024-2496


author: Cai Yinan <caiyinan@kylinos.cn> - 1.7.0-10.p01
changelog:
  - Type:update
  - ID:[task#186399]
  - SUG:NA
  - DESC: mv /usr/bin/tools/tiny_ssim to /usr/bin/tiny_ssim required by FHS standard


author: fuanan <fuanan3@h-partners.com> - 2.9.10-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: fuanan <fuanan3@h-partners.com> - 2.9.10-28
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: huayadong <huayadong@kylinos.cn> - 1.30.0-8.p05
changelog:
  - Type: bugfix
  - ID  : [Bug#162010]
  - SUG : NA
  - DESC: add Patch5:lightdm-1.30.0-kylin-fix-create-a-user-with-the-same-name-after-deleting-the-user,-and-the-login-will-flash-back.patch


author: wuzhaomin <wuzhaomin@kylinos.cn> - 1.8.0-5.p02
changelog:
  - Type:NA
  - ID:Task#168994
  - SUG:NA
  - DESC:Modify sensitive words.
  - Because p01 is occupied by s5000c, set the patch to p02.


author: shixuantong <shixuantong@huawei.com> - 2.1.49-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:move mime.types to mailcap rpm and change mime.types to mime_mailcap.types


author: huayadong <huayadong@kylin.cn> - 1.16.1-4
changelog:
  - add Patch2:marco-kylin-Fix-bug-60212-the-interface-of-Firefox-browser-and-drag-shadow-appears.patch


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.16.0-2
changelog:
  - fix for https://github.com/mate-desktop/marco/issues/251
  - https://bugzilla.redhat.com/show_bug.cgi?id=1419634


author: huayadong <huayadong@kylinos.cn>- 1.16.1-4.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#224312]
  - SUG:  NA
  - DESC: add patch3:marco-1.16.1-kylin-Add-the-_NET_WM_WINDOW_OPACITY-attribute-to-the-root-window.patch


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.34-1
changelog:
  - Bump version to latest 10.3.34 version
  - For resolving the CVEs, which includes:
  - CVE-2021-46659
  - CVE-2021-46664
  - CVE-2021-46665
  - CVE-2021-46663
  - CVE-2021-46662
  - CVE-2021-46666
  - CVE-2021-46667
  - CVE-2021-46661
  - CVE-2021-46669
  - CVE-2021-46657
  - Above all CVEs needs to bump to the latest version for resolve.
  - Refresh all patches relies on the latest tar package.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 3:10.3.35-1
changelog:
  - Bump version to 10.3.35 for resolving CVEs as below
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387


author: sunjialin <sunjialin@kylinos.cn> - 3:10.3.39-1.p01
changelog:
  - Type: bugfix
  - ID: BUG#208296
  - SUG: NA
  - DESC: Modify the epoch version to fix the upgrade failure


author: zhangjun <zhangjun@kylinos.cn> - 1.12.1-1kord32.p08
changelog:
  - Add patch: mate-desktop-1.12.1-del-service-time.patch
  - TASK#66061 子 KMS2.2需求实现 /授权激活后界面上的支持服务时间隐藏
  - 本次更新在关于界面隐藏支持服务时间


author: huayadong <huayadong@kylinos.cn> - 1.12.1-1kord32.p09
changelog:
  - Add patch: mate-desktop-kylin-fix-bug-68049-translation-of-tchinese.patch -  wangqiang <wangqiang1@kylinos.cn>
  - 合并龙芯补丁


author: huayadong<huayadong@kylinos.cn> - 1.12.1-1kord32.p13
changelog:
  - Type:bugfix
  - ID  :[Bug#166650]
  - SUG :NA
  - DESC:add Patch6:mate-desktop-1.12.1-kylin-update-copyright-time-for-sp3.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.12.1-1kord32.p16
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-mate-desktop-add-some-missing-traditional-chinese-tr.patch


author: houhongxun<houhongxun@kylinos.cn> - 1.12.1-1kord32.p17
changelog:
  - Type:update
  - ID  :[Task#187074]
  - SUG :NA
  - DESC:add Patch8:0001-add-sp4-support-for-copy-right.patch


author: houhongxun<houhongxun@kylinos.cn> - 1.12.1-1kord32.p18
changelog:
  - Type:bugfix
  - ID  :[Bug#211927]
  - SUG :NA
  - DESC:add Patch9:0001-mate-desktop-fix-memory-leak-problem.patch


author: huayadong<huayadong@kylinos.cn> - 1.12.1-1kord32.p19
changelog:
  - Type:bugfix
  - ID  :[Bug#216068]
  - SUG :NA
  - DESC:add Patch10:mate-desktop-1.12.1-kylin-fix-authorization-expiration-without-prompt.patch


author: Zhao Penghui <zhaopenghui@kylinos.cn> - 20150918kord0ukui58.xgs.09
changelog:
  - Add Patch9: 修复服务器日志中dpkg报错的问题，添加服务器和桌面的判断.
    Modify the SPEC, add BuildRequires: libkylinos-type-devel;Requires: libkylinos-type


author: jianghong <jianghong@kylinos.cn> 1.12.1-1kord30~rc3
changelog:
  - mate-power-manager (1.12.1-1kord30~rc3) juniper; urgency=medium
  - power mode selection for longson computer.


author: huayadong <huayadong@kylinos.cn> 1.12.1-1kord30~rc3.p02
changelog:
  - Type: bugfix
  - ID  : [任务#75897]
  - SUG : NA
  - DESC: add %post:glib-compile-schemas /usr/share/glib-2.0/schemas 解决首次安装post脚本报错.


author: huayadong <huayadong@kylinos.cn> - 1.16.1-1.p02
changelog:
  - Type: bugfix
  - ID:   [BUG#217322]
  - SUG:  NA
  - DESC: delete Requires: redhat-menus, add  Requires: kylin-menu


author: gaohaobo <gaohaobo@kylinos.cn> - 1.12.2-1kord13.p01
changelog:
  - add patch0 to  remove Hibernate&Suspend feature form  logout dialog ,cause we don't need it on server version


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#115969]
  - SUG : NA
  - DESC: add Patch60 mate-session-manager-1.12.2-kylin-non-root-user-prompts-shutdown-to-prompt-logout.patch 
          非root用户提示关机改为提示注销.


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#115969]
  - SUG : NA
  - DESC: add Patch2 mate-session-manager-1.12.2-kylin-non-root-user-prompts-shutdown-to-prompt-logout.patch 
          非root用户提示关机改为提示注销.


author: huayadong <huayadong@kylinos.cn>- 1.12.2-1kord13.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#135451]
  - SUG : NA
  - DESC: add Patch3 mate-session-manager-1.12.2-kylin-fix-reboot-prompt-root-user-is-still-logged-in.patch
  	修复注销用户后session不退出问题.


author: peijiankang <peijiankang@kylinos.cn>- 1.12.2-1kord13.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#194919]
  - SUG : NA
  - DESC: add Patch4 mate-session-manager-1.12.2-kylin-add-min-and-max-for-idle-delay.patch


author: houhongxun <houhongxun@kylinos.cn>- 1.12.2-1kord13.p07
changelog:
  -Type:bugfix
  -ID:[BUG#203419]
  -SUG:NA
  -DESC:add patch 0001-mate-session-manager-add-missing-translations-for-zh.patch


author: douyan <douyan@kylinos.cn>- 1.12.2-1kord13.p08
changelog:
  -Type:bugfix
  -ID:[BUG#205945]
  -SUG:NA
  -DESC:add patch mate-session-manager-1.12.2-kylin-fix-autostart-process-no-quit-when-loggingout.patch


author: mengchaoming<mengchaoming@kylinos.cn> 1.24.0-1.p01
changelog:
  --add patch:mate-system-monitor-1.24.0-kylin-del-help.patch
  --add patch:mate-system-monitor-1.24.0-kylin-adjust-proc-spacing.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#117285]
  - SUG : NA
  - DESC: add Patch07 mate-system-monitor-1.24.0-kylin-adaptive-kysec-process-anti-unloading.patch
          适配kysec进程防杀死机制.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#93745]
  - SUG : NA
  - DESC: add Patch08 mate-system-monitor-1.24.0-fix-bug-93745.patch
          当三权分立开启，非超级用户不可操作系统监视器.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#117553]
  - SUG : NA
  - DESC: add Patch09 mate-system-monitor-1.24.0-fix-firefox-79.0-process-name-as-MainThread.patch
          修复firefox-79.0版本进程名称显示为MainThread.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#75897]
  - SUG : NA
  - DESC: add Patch10 mate-system-monitor-1.24.0-fix-unable-to-internationalize.patch
          修复系统监视器无法国际化问题.


author: HouHongxun <houhongxun@kylinos.cn> 1.24.0-1.p11
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-modify-traditional-chinese-translation-for-HK-and-TW.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p12
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC:add patch12: mate-system-monitor-1.24.0-kylin-HK-po-update.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p13
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch13: mate-system-monitor-1.24.0-kylin-update-zh-HK-po.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p14
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch14: mate-system-monitor-1.24.0-kylin-change-translate-seat.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p15
changelog:
  - Type: update
  - ID: [TASK#201339]
  - SUG: NA
  - DESC:add patch15: 0001-fix-mate-system-monitor-memory-leaks.patch
         sync mips64el chandao116445:add mate-system-monitor-1.24.0-kylin-fix-stop-process.patch


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add ConditionPathExists in mdmonitor.service for resolving service failure during system startup


author: hy <eulerstoragemt@huawei.com> - 4.1-rc2.0.9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add a configuration file in /usr/lib/tmpfiles.d for creating the /run/mdadm directory during the boot process.


author: Uri Lublin <uril@redhat.com> - 2.30-2
changelog:
  - Remove PROVIDE() qualifiers from definition of __CTOR_LIST__ and __DTOR_LIST__
    Resolves: rhbz#1846152


author: huayadong <huayadong@kylinos.cn> - 1.1.6-0.4.gitfb4118d.13
changelog:
  - Type: bugfix
  - ID  : [BUG#264497]
  - SUG : NA
  - DESC: add patch8:linuxmint-mintlocale-fb4118d-fix-sensitive-flags.patch


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.20070926-18
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Caolán McNamara <caolanm@redhat.com> - 3.0-22
changelog:
  - Related: rhbz#1604911 convert python2 to python3, verified
    that output th_en_US_v2.dat and th_en_US_v2.idx are identical
    before and after


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: openEuler Buildteam <buildteam@openeuler.org> - 6.1-12
changelog:
  - Type:cves
  - ID:CVE-2019-17594  CVE-2019-17595
  - SUG:NA
  - DESC:fix CVE-2019-17594 and CVE-2019-17595


author: likai01 <likai01@kylinos.cn> - 5.8-8.p01
changelog:
  - Type:CVE
  - CVE:CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810
  - SUG:NA
  - DESC:fix CVE-2022-24805 CVE-2022-24806 CVE-2022-24807
             CVE-2022-24808 CVE-2022-24809 CVE-2022-24810


author: baiguo <baiguo@kylinos.cn> - 5.8-7.p05
changelog:
  -Type:bugfix
  -ID:[Task#164834]
  -SUG:NA
  -DESC:fix create snmp user unusual when encryption key is nul


author: Shao Jiansong <shaojiansong@kylinos.cn> - 5.8-7.p09
changelog:
  - Type:bugfix
  - ID:[Task#197896]
  - SUG:NA
  - DESC:fix double free when use snmpbulkget or snmpbulkwalk with special params.


author: Shao Jiansong <shaojiansong@kylinos.cn> - 5.8-7.p10
changelog:
  - Type:bugfix
  - ID:[Task#197896]
  - SUG:NA
  - DESC:add kylin-backport-net-snmp-5.8-v3-forward.patch and fix error when truncate msg.


author: Like <like@kylinos.cn> - 3.6-5.p02
changelog:
  - Type:CVE
  - ID:CVE-2021-20305 and CVE-2021-3580
  - SUG:NA
  - DESC:Fix CVE-2021-20305 and CVE-2021-3580


author: openEuler Buildteam <buildteam@openeuler.org> - 2.4.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:stop the var-lib-nfs-rpc_pipefs.mount before remove the package


author: yuxiangyang <yuxiangyang4@huawei.com> - 1:1.16.1-2
changelog:
  - delete http_stub_status_module.This configuration creates a simple
    web page with basic status data,but it will affect cpu scale-out because
    it use atomic cas.


author: Like <like@kylinos.cn> - 1:1.16.1-9.p01
changelog:
  -Type:bugfix 
  -ID:BugID#74947
  -DESC:set with_mailcap_mimetypes 1 to fix nginx conflicts with mailcap


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p01
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10sp1 to support loongarch64 platform,
          add patch 0001-node-v12.22.11-add-loong64-support.patch


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p02
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10-2203sp2-hpc to fix sensitive fields,
          add patch Kylin-fix-sensitive-fields-to-prevent-political-ambi.patch


author: likai01 <likai01@kylonos.cn> - 3.54.0-9.p01
changelog:
  - Type: bugfix
  - ID: BUG#126432
  - SUG: NA
  - DESC: fix the bug Untrusted sites cannot be accessed 
  - add Patches:6001 kylinos-nss-fix-chandao-bug-126432.patch


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-7
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p14-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: wanfeng<wanfeng@kylinos.cn> - 4.2.8p14-8.p01
changelog:
  - Type:bugfix
  - ID:task#180465
  - SUG:NA
  - DESC:add script of post, make sure sntp/kod  for sntp service


author: haowenchao <haowenchao@huawei.com> - 2.1.1-8
changelog:
  - backport one patch for solving install problem, sync from branch openEuler-20.09
    which commit id is 81fd136


author: yanshuai <yanshuai01@kylinos.cn> - 2.1.1-11.p03
changelog:
  - Type:bugfix
  - ID:[TASK#337735]
  - SUG:NA
  - DESC: iscsid: stop connection for recovery if error is not timeout in iscsi_login_eh


author: openEuler Buildteam <buildteam@openeuler.org> - 1.5.1-24
changelog:
  - Type:cves
  - ID:CVE-2016-10506 CVE-2016-7445
  - SUG:restart
  - DESC:fix CVE-2018-15173 and CVE-2016-7445


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: liulong <liulong20@huawei.com> - 2.4.50-3
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230


author: wangxiaomeng <wangxiaomeng@kylinos.com> - 2.1.1-18.p03
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix bug#138766, backport upstream patch to solve crash on Hygon


author: juntao<songjuntao@kylinos.cn> - 8.2P1-0.p06
changelog:
  - use international algorithm standards as default config
  - fix keyscan host key
  - add the sm2 host key always ready


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-9.p12
changelog:
  - Type:update
  - ID:TASK#184873
  - SUG:NA
  - DESC:fix ssh-agent core dump when ssh-add exec add library


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-9.p15
changelog:
  - Type:update
  - ID:TASK#193814
  - SUG:NA
  - DESC: support sm3 hmac feature, add ssh change mode script, 
  	enable ssh login without password and fix algo show problem,
          update ssh finger print hash and fix memory leak


author: like <like@kylinos.cn> - 1:1.1.1f-4.p01
changelog:
  - Add kylin patch to fix CVE-2021-3449
  - Add modify the spec file , set sslarch=linux64-mips64el for mips64


author: Like <like@kylinos.cn> - 1:1.1.1f-4.p03
changelog:
  - Type:cves
  - ID:CVE-2021-3711 and CVE-2021-3712
  - SUG:NA
  - DESC:Fix the CVE-2021-3711 and CVE-2021-3712


author: zhangxiaolu <zhangxiaolu@kylinos.cn> - 1:1.1.1f-4.p10
changelog:
  - Type:cves
  - ID:CVE-2022-4450、CVE-2022-4304、CVE-2023-0215、CVE-2023-0286
  - SUG:NA
  - DESC:Fix CVE-2022-4450、CVE-2022-4304、CVE-2023-0215、CVE-2023-0286


author: shaoning <shaoning@kylinos.cn> - 1:1.1.1f-4.p11
changelog:
  - Type:cves
  - ID:CVE-2023-0464、CVE-2023-0466、CVE-2023-0465
  - SUG:NA
  - DESC:Fix CVE-2023-0464、CVE-2023-0466、CVE-2023-0465


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-4.p17
changelog:
  - Type: update
  - ID: TASK#193265
  - SUG: NA
  - DESC: port sm2utl command tool code , support default user id,
          and optimize the return code, optimize dgst keyform for PEM,
          support pkeyutl verify function for sm2 cert.


author: huangwenhua <huangwenhua@kylinos.cn> - 20200203-1.p04
changelog:
  - Type: bugfix
  - ID: [Bug#69916]
  - SUG: NA
  - DESC: add patch:0002-add-eol-date.patch 
  	add eol-date for kylin-10.0.xml


author: Fabiano Fidêncio <fidencio@redhat.com> - 20190504-1
changelog:
  - Update to v20190504 release
  - Resolves: rhbz#1699990 - Rebase to the latest upstream release
  - Resolves: rhbz#1689817 - virt-manager cannot detect operating system name
                             for rhel8.0.0 tree automatically
  - Resolves: rhbz#1703480 - rhel8.0.x is not detected as rhel8.0
  - Resolves: rhbz#1685364 - Add win2019 to libosinfo


author: Fabiano Fidêncio <fidencio@redhat.com> - 20191125-1
changelog:
  - Updated to v20191125 release
  - Resolves: rhbz#1780529 - Update to the latest upstream release
  - Add rhel8.2 & rhel7.8 entries
  - Remove upstream virtio-win / spice-guest-tools drivers


author: jiangping <jiangping@kylinos.cn> - 20200203-1.01
changelog:
  - Add osinfo-db-20200203-neokylin-and-kylin-release.patch 
  - Resolves: kylinbz#12970 - Add to v20200203 release for NeoKylin and Kylin


author: jiangping <jiangping@kylinos.cn> - 20200203-1.02
changelog:
  - Add osinfo-db-20200203-kylin-modify-autodetecting-entry.patch 
  - Resolves: kylinbz#12970 - modify autodetecting entry to v20200203


author: huangwenhua <huangwenhua@kylinos.cn> - 20200203-1.p05
changelog:
  - Type: bugfix
  - ID: [Bug#217996]
  - SUG: NA
  - DESC: add patch:0003-fixbug-virt-manager-min-memory.patch


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p01
changelog:
  - Add patch:Paho-c-add-kylin-env-port-bind.patch 
  - TASK#65925 子 KMS2.2需求实现 / 解决MQTT支持的依赖
  - 本次更新将mqtt本地连接绑定环境变量KY_KMS_PORT的值 之前为随机的端口


author: zhangjun <zhangjun@kylinos.cn> - 1.3.2-1.p02
changelog:
  - Add patch:Paho-c-add-kylin-port-reuse.patch 
  - TASK#66261 子 KMS2.2需求实现 / 解决paho-c 重复端口的使用
  - 本次更新支持多个进程或者线程绑定到同一端口，提高服务器程序的性能


author: guoshengsheng <guoshengsheng@kylinos.cn> -1.3.1=8.p02
changelog:
  - add pam-1.3.1-8-loacal-chinese.patch
  - resolve "Account temporarily locked due to %d failed logins" chinese local


author: GuoCe <guoce@kylinos.cn> -1.3.1-8.p03
changelog:
  - Modify system-auth.pamd to add 'use_first_pass'.
  - Resolve changdao bug-19898, passwd prompt only once.


author: guoshengsheng <guoshengsheng@kylinos.cn> -1.3.1=8.p02
changelog:
  - add pam-1.3.1-8-loacal-chinese.patch	
  - resolve "Account temporarily locked due to %d failed logins" chinese local


author: GuoCe <guoce@kylinos.cn> -1.3.1-8.p03
changelog:
  - Modify system-auth.pamd to add 'use_first_pass'.	
  - Resolve changdao bug-19898, passwd prompt only once.


author: zhangqiang <zhangqiang@kylinos.cn> - 5.6.0-8.p01
changelog:
  -Type:bugfix
  -ID:[任务#117911]
  -SUG:NA
  -DESC:fixup SIGSEGV crash & add kunpeng920 support & add hygon cpu support


author: xuchenchen <xuchenchen@kylinos.cn> - 4.1.3-3.p02
changelog:
  - Type: Bugfix
  - ID: [TASK#161277]
  - SUG: NA
  - DESC: 
  - 修复解析IPI0字段异常引起的coredump问题,以及替换pcp-pmda-bcc的依赖包为python3-bpfcc
  - add 0001-fix-analysis-proc-interrupts-name-error.patch
  - change require python3-bpfcc


author: yangmingtai <yangmingtai@huawei.com> - 10.35-4
changelog:
  - DESC:sync community patches
         backport-jit-fail-early-in-ffcps_-if-subject-shorter-than-off.patch
         backport-jit-fix-pcre2_jit_free_unused_memory-if-sljit-not-us.patch


author: Shen Yangyang <shenyangyang4@huawei.com> - 4:5.28.3-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete provide of perl-macros that actually provided by openEuler-rpm-config


author: liutao <liutao1@kylinos.cn> - 4:5.28.3-3.p01
changelog:
  - Modify spec file for resolving compilation errors:
  	add perl_new_kylin to replace perl_new in checking stage.


author: liutao <liutao1@kylinos.cn> - 4:5.28.3-3.p01
changelog:
  - Modify spec file for resolving compilation errors:
  -	add perl_new_kylin to replace perl_new in checking stage.


author: Paul Howarth <paul@city-fan.org> - 1.9-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Emmanuel Seyman <emmanuel@seyman.fr> - 6.05-1
changelog:
  - Update to 6.05
  - Add %license tag
  - Repllace calls to %{__perl} with /usr/bin/perl
  - Replace call to "make pure_install" with %{make_install}
  - Replace calls to make with %{make_build}


author: Paul Howarth <paul@city-fan.org> - 2.07-30
changelog:
  - Spec tidy-up
    - Classify buildreqs by usage
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Retain timestamp of Jcode/Nihongo.pod when patching


author: liuxiong <liuxiong@kylinos.cn> - 7.2.10-18.p01
changelog:
  - add BuildRequire:libnl3-devel
  - modify  spec  global with_imap
  - add change-stronger-protocol.patch


author: xiehongyu <xiehongyu@kylinos.cn> - 7.2.10-18.p02
changelog:
  - Type:cves
  - ID:CVE-2022-31625 CVE-2022-31626
  - SUG:restart
  - DESC:Fix CVE-2022-31625 CVE-2022-31626


author: Funda Wang <fundawang@yeah.net> - 7.2.34-3
changelog:
  - Fix php BUG#81740 / CVE-2022-31631
  - Fix php BUG#81744 / CVE-2022-0567
  - Fix php BUG#81746 / CVE-2022-0568
  - Fix CVE-2023-0662
  - Fix CVE-2023-3247
  - Fix CVE-2023-3823
  - Fix CVE-2023-3824


author: wangye <wangye70@huawei.com> - 0.67.0-6
changelog:
  - Type:cves
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2018-16646 CVE-2018-18897 CVE-2018-19060 CVE-2018-20481 CVE-2019-14494 CVE-2019-7310


author: wangye <wangye70@huawei.com> - 0.67.0-6
changelog:
  - Type:cves
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2019-10872 CVE-2018-16646 CVE-2018-18897 CVE-2018-19060 CVE-2018-20481 CVE-2019-14494 CVE-2019-7310


author: HouHongxun <houhongxun@kylinos.cn> - 0.67.0-8.p02
changelog:
  - Type:cves
  - ID:CVE-2020-23804 CVE-2022-27337 CVE-2022-37052 CVE-2022-38349
  - SUG:NA
  - DESC:fix CVE-2020-23804 CVE-2022-27337 CVE-2022-37052 CVE-2022-38349


author: xiejing <xiejing@kylinos.cn> - 10.5.12.p01
changelog:
  - Type: bugfix
  - ID: [BUG #265593]
  - SUG: NA
  - DESC: 1)Modify sensitive information
          2)Add BuildRequires: libkysec-devel libsecurity1-devel
            to fix compile error, as python3 library check changed
          3)Add BuildRequires: docbook-style-xsl for compiling


author: Like <like@kylinos.cn> - 10.5-23.p01
changelog:
  - Type: bug fix
  - ID: NA
  - SUG: NA
  - DESC: modify spec according to 239koji:postgresql-10.5-12.p01:
  -- Modify spec file to add --disable-spinlocks


author: Like <like@kylinos.cn> - 10.5-23.p01
changelog:
  - Type: bug fix
  - ID: NA
  - SUG: NA
  - DESC: Modify spec file add %ifarch loongarch64 and --disable-spinlocks


author: Like <like@kylinos.cn> - 10.5-23.p02
changelog:
  - Type: BUG fix 
  - ID: bug#142478
  - SUG: NA
  - DESC: Obsoletes: postgresql-upgrade postgresql-upgrade-devel resolved conflicts


author: wangjia <wangjia55@huawei.com> - 42.2.4-1.h1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:disable the failed tests that caused by BEP to repair binary diffrence


author: gaihuiying <eaglegai@163.com> - 2.4.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:pppd: Negotiate IP address when only peer addresses are provided


author: xuwei<xuwei58@huawei.com> - 3.3.15-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DEC:top: don't mess with groff line length in man document
        top: add another field sanity check in 'config_file()'
        top: prevent buffer overruns in 'inspection_utility()'
        docs: Tidying of ps,kill and skill manpages
        library: avoid problems involving 'supgid' mishandling
        w: Prevent out-of-bounds reads in
        w: Clamp maxcmd to the MIN/MAX_CMD_WIDTH range.
        vmstat: getopt*() returns -1 when done, not EOF.
        vmstat: Replace memcmp() with strncmp().
        vmstat: Check return values of localtime() and
        vmstat: Prevent out-of-bounds writes in new_header()
        top: the '#define PRETEND2_5_X' was found to be broken
        procio: use the user-supplied delimiter to split large
        procio: fix potential out-of-bounds access when write
        sysctl: do not report set key in case `close_stream`


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-11
changelog:
  - Type:upgrade
  - ID:NA
  - SUG:NA
  - DESC: upgrade to version 3.3.16 and delete the patch between
          3.3.15 and 3.3.16.


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:A kernel change means we cannot trust what sysconf(SC_ARG_MAX)
         returns. We clamp it so its more than 4096 and less than 128*1024
         which is what findutils does.


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.2.3-1
changelog:
  - Move test for unsigned packages with pkgset_koji_scratch_tasks to PkgsetPhase
    class. (jkaluza)
  - Allow building compose with scratch builds defined by
    `pkgset_koji_scratch_tasks`. (jkaluza)
  - createrepo: Allow making productid glob stricter (lsedlar)
  - docs: Remove outdated note (lsedlar)
  - createrepo: Add extra modulemd files to the repo (lsedlar)
  - pkgset: handle exception when using dogpile cache (hlin)
  - notification: Add compose_path into the messages (hlin)
  - gather: handle mirrorlist in kickstart (frederic.pierret)
  - Allow only creating unified ISO for specified arch (hlin)
  - docs: update doc for gather_lookaside_repos option (hlin)
  - Include the output of getisoimage in the error message (hlin)
  - tests: Patch time in CTS related tests (lsedlar)
  - Allow using Pungi Koji plugin for ostree phases. (jkaluza)
  - Allow getting the compose id from CTS (Compose Tracking Service). (jkaluza)
  - Fix flake8 issues (lsedlar)
  - Optimize the _link_file function to not call os.stat redundantly. This will
    eliminate 2 calls to os.stat per one invocation of the _link_file function.
    Assuming during the compose build 50000 files are linked, this change will
    eliminate 100000 redundant calls to os.stat. (bkhomuts)
  - doc: explain sigkey behavior (kdreyer)
  - doc: explain tradeoffs with pkgset_allow_reuse (kdreyer)
  - doc: fix grammar for pkgset_allow_reuse setting (kdreyer)
  - Support --skip-branding option in lorax (hlin)
  - docs: Embed phases.svg directly (hlin)
  - Execute image_checksum phase right after the dependent phases (hlin)


author: Xiao Zai<xiaozai@kylinos.cn> - 3.16-2.p01
changelog:
  - add Patch: pykickstart-3.16-kylin-fix-can-not-parse-float-size-for-parttition.patch
  - fix the Bug#3510,  to enable ksparser to parse the float type for partition size from ks file


author: shenyangyang<shenyangyang4@huawei.com> - 1.11.5-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:optimize the method to provide default version of python-name


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 0.6.7-1
changelog:
  - Update to 0.6.7 (#1609253).
  - https://dogpilecache.readthedocs.io/en/latest/changelog.html#change-0.6.7


author: shixuantong<shixuantong@huawei.com> - 5.3.0-6
changelog:
  - Type:cves
  - ID:CVE-2020-10378 CVE-2020-10177 CVE-2020-10994
  - SUG:NA
  - DESC:fix CVE-2020-10378 CVE-2020-10177 CVE-2020-10994


author: shixuantong<shixuantong@huawei.com> - 5.3.0-9
changelog:
  - Type:cves
  - ID:CVE-2019-19911 CVE-2020-5311
  - SUG:NA
  - DESC:fix CVE-2019-19911 and change patch name for CVE-2020-5311


author: shixuantong<shixuantong@huawei.com> - 5.3.0-10
changelog:
  - Type:cves
  - ID:CVE-2020-5310 CVE-2020-5312 CVE-2020-5313
  - SUG:NA
  - DESC:fix CVE-2020-5310 CVE-2020-5312 CVE-2020-5313


author: wangye <wangye70@huawei.com> - 5.3.0-13
changelog:
  - Type:cves
  - ID:CVE-2021-27921 CVE-2021-27922 CVE-2021-27923
  - SUG:NA
  - DESC:fix CVE-2021-27921 CVE-2021-27922 CVE-2021-27923


author: yanglu <yanglu60@huawei.com> - 5.3.0-14
changelog:
  - Type:cves
  - ID:CVE-2021-25290 CVE-2021-25292 CVE-2021-25293
  - SUG:NA
  - DESC:fix CVE-2021-25290 CVE-2021-25292 CVE-2021-25293


author: Like<like@kylinos.cn> - 5.3.0-17.p01
changelog:
  - Type:cves
  - CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
  - SUG:NA
  - DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817


author: liuyumeng <liuyumeng5@huawei.com> -5.3.0-16
changelog:
  - Type:cves
  - ID:CVE-2020-10379 CVE-2021-25287_CVE-25288 CVE-2021-28677 CVE-2021-28676 CVE-2021-28675 CVE-2021-28678 CVE-2021-34552
  - SUG:NA
  - DESC:fix CVE-2020-10379 CVE-2021-25287_CVE-25288 CVE-2021-28677 CVE-2021-28676 CVE-2021-28675 CVE-2021-28678 CVE-2021-34552 open the 1200+ test cacse involved in setup.py


author: shixuantong <shixuantong@huawei.com> - 4.15.1-24
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix data race in packageBinaries() function and prioritize large packages


author: Shi Jingying <shijingying@kylinos.cn> - 4.15.1-28.p01
changelog:
  - Type:bugfix
  - ID:[TASK#118587]
  - SUG:NA
  - DESC:update and modify spec file,delete cron.daily of rpm


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-5.p02
changelog:
  - Type:Bugfix
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add Patch1 to fix the error in closing the application program's
         fd by SSSD during PID rewind.


author: jiangjixiang <jiangjixiang@kylinos.com> - 2.2.2-5.p03
changelog:
  - Type:compile
  - ID:[TASK#146033]
  - SUG:NA
  - DESC:Add support for loongarch64 in spec file to be homologous with loongarch.


author: chenhaixing <chenhaixing@huawei.com> - 1.25.9-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.25.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:modify HOST_PORT_PAT in backport-fixed-issue-with-port-0-returning-None.patch


author: xzf1244 <xzff@hust.edu.cn> - 1.25.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix field NRESERVED_PAT and function _idna_encode that will cause bugs


author: BruceGW<gyl93216@163.com> - 3.7.9-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix _PyEval_FiniThreads
         rewrite _PyObject_IsFreed unit tests
         get test_capi passing with address sanitize
         remove use after free reference in ctypes
         fix memory leak in _asynciomodule.c


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disable profile guided optimizations for x86_64 and i686 architectures


author: shixuantong <shixuantong@h-partners.com> - 3.7.9-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bpo-43124: Fix smtplib multiple CRLF injection
         bpo-12800: tarfile: Restore fix from 011525ee9
         bpo-41815: SQLite: segfault if backup called on closed database
         bpo-42183: Fix a stack overflow error for asyncio Task or Future repr()
         bpo-45001: Make email date parsing more robust against malformed input


author: xuyujun <xuyujun@kylinos.cn> - 3.7.9-20.se.01
changelog:
  - add Python3-judge-python-file-run.patch
  - devel package add require libkysec-devel libsecurity1-devel
  - add buildrequire libsecurity1-devel


author: zhangchaorui <zhangchaorui@kylinos.cn> - 3.7.9-20.se.02
changelog:
  - Type:cves 
  - ID:CVE-2015-20107
  - SUG:NA
  - DESC:Fix CVE-2015-20107 and make test suite support upstream Expat >=2.4.5


author: likai01 <likai01@kylinos.cn> - 3.7.9-20.p04.se
changelog:
  - Type:cves
  - ID:CVE-2020-10735 CVE-2022-45061 CVE-2022-37454
  - SUG:NA
  - DESC:Fix CVE-2020-10735 CVE-2022-45061 CVE-2022-37454


author: liuxiong <liuxiong@kylinos.cn> - 3.7.9-7.p02
changelog:
  - Type:cves
  - ID:CVE-2021-23336
  - SUG:NA
  - DESC:fix CVE-2021-23336 and revert fix a reference leak if a thread is not joined


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.5-13
changelog:
  - Subpackage python2-moksha-common has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: wangkai <13474090681@163.com> - 9.0.1-5
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: Kevin Fenzi <kevin@scrye.com> - 2.0.0-7
changelog:
  - Review fixes: drop python3 dep, Update obsoletes, add python_provide
  - Review fixes: Use pypi_source, fixed files globbing.


author: Anakin Zhang <benjamin93@163.com> - 4.15.1-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use user.digest_list to avoid duplicate processing of the digest lists


author: Roberto Sassu <roberto.sassu@huawei.com> - 4.15.1-22
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: fix digest list plugin and reorder digest lists in RPM headers


author: Roberto Sassu <roberto.sassu@huawei.com> - 4.15.1-23
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: avoid generating digest lists if they are already packaged


author: xiehongyu <xiehongyu@kylinos.cn> - 4.15.1-23.p02
changelog:
  - Type:CVE
  - ID:CVE-2021-3421, CVE-2021-20271,CVE-2021-20266
  - SUG:NA
  - DESC:fix CVE-2021-3421, CVE-2021-20271,CVE-2021-20266.
         CVE-2021-3421补丁与CVE-2021-20271修复补丁相同.


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.1-17
changelog:
  - Subpackage python2-txws has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Carl George <carl@george.computer> - 0.9.1-20
changelog:
  - Include LICENSE file
  - Fix automatic dependency generation
  - Add provides for python-txws
  - Run test suite


author: Miro Hrončok <mhroncok@redhat.com> - 0.8.0-11
changelog:
  - Subpackage python2-txzmq has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Like <like@kylinos.cn> - 1.11.0-2.p04
changelog:
  - Type:cves
  - CVE:CVE-2023-50387 CVE-2023-50868 CVE-2024-1488
  - SUG:NA
  - DESC:add patch10 fix CVE-2023-50387,CVE-2023-50868,CVE-2024-1488
  -- add unbound pid dir to fix unbound.service faild


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - hw/sd: sdhci: Don't transfer any data when command time out
  - hw/sd: sdhci: Don't write to SDHC_SYSAD register when transfer is in progress
  - hw/sd: sdhci: Correctly set the controller status for ADMA
  - hw/sd: sdhci: Limit block size only when SDHC_BLKSIZE register is writable
  - hw/sd: sdhci: Reset the data pointer of s->fifo_buffer[] when a different block size is programmed


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - net: introduce qemu_receive_packet()
  - e1000: switch to use qemu_receive_packet() for loopback
  - dp8393x: switch to use qemu_receive_packet() for loopback packet
  - sungem: switch to use qemu_receive_packet() for loopback
  - tx_pkt: switch to use qemu_receive_packet_iov() for loopback
  - rtl8139: switch to use qemu_receive_packet() for loopback
  - pcnet: switch to use qemu_receive_packet() for loopback
  - cadence_gem: switch to use qemu_receive_packet() for loopback
  - lan9118: switch to use qemu_receive_packet() for loopback


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - hw/pci-host: add pci-intack write method
  - pci-host: add pcie-msi read method
  - vfio: add quirk device write method
  - prep: add ppc-parity write method
  - nvram: add nrf51_soc flash read method
  - spapr_pci: add spapr msi read method
  - tz-ppc: add dummy read/write methods
  - imx7-ccm: add digprog mmio write method


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - vhost-user-gpu: fix resource leak in 'vg_resource_create_2d' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in vg_resource_attach_backing (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak while calling 'vg_resource_unref' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in 'virgl_cmd_resource_unref' (CVE-2021-3544)
  - vhost-user-gpu: fix memory leak in 'virgl_resource_attach_backing' (CVE-2021-3544)
  - vhost-user-gpu: fix memory disclosure in virgl_cmd_get_capset_info (CVE-2021-3545)
  - vhost-user-gpu: fix OOB write in 'virgl_cmd_get_capset' (CVE-2021-3546)


author: Chen Qun <kuhn.chenqun@huawei.com>
changelog:
  - ide: ahci: add check to avoid null dereference (CVE-2019-12067)
  - hw/intc/arm_gic: Fix interrupt ID in GICD_SGIR register
  - usb: limit combined packets to 1 MiB (CVE-2021-3527)


author: wanglixing <wanglixing@kylinos.cn> - 4.1.0-44.p01
changelog:
  - apply Kylin patches to openEuler package ver
  - modified spec for support spice(x86_64).
  - disable check
  - add mips64el


author: zhangzeyang <zhangzeyang@kylinos.cn>
changelog:
  - fix CVE-2021-3682 CVE-2021-3713 CVE-2021-3748 cve-2021-3592 cve-2021-3593 cve-2021-3595 cve-2020-35504 cve-2020-35505 
  - fix CVE-2021-3930 CVE-2021-3582 CVE-2021-3607 CVE-2021-3608
  - fix CVE-2022-26354 CVE-2022-26353 CVE-2021-20196 CVE-2021-4207 CVE-2021-4206


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-44.p05
changelog:
  - fix CVE-2021-20257 CVE-2020-13253 and fix gcc 10.3.1 compile error
  - fix CVE-2022-35414
  - fix CVE-2020-14394
  - fix CVE-2021-3750 and Check that colo-compare is active


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-44.p07
changelog:
  - Type: Update
  - ID:   [TASK#132801]
  - SUG:  NA
  - DESC: fix CVE-2022-0216
  -       hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued
  -       scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216)
  -       scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216)


author: wangdi <wangdi@kylinos.cn> - 4.1.0-44.p08
changelog:
  - Type: bug
  - ID:   [TASK#132773]
  - SUG:  NA
  - DESC: Fix qemu-nbd child daemon connection process wont close stderr file


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-44.p09
changelog:
  - Type: cve
  - ID:   CVE-2022-1050
  - SUG:  NA
  - DESC: hw/pvrdma: Protect against buggy or malicious guest driver (CVE-2022-1050)


author: yanjianqing <yanjianqing@kylinos.cn> - 4.1.0-44.p10
changelog:
  - Type: Update
  - ID: [TASK#166472]
  - SUG: NA
  - DESC: to fix CVE-2023-0664 and CVE-2023-2861
  -       qga/win32: Use rundll for VSS installation(CVE-2023-0664)
  -       qga/win32: Remove change action from MSI installer(CVE-2023-0664)
  -       9pfs: prevent opening special files (CVE-2023-2861)


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-44.p12
changelog:
  - Type: Update
  - ID: [TASK#174977]
  - SUG: NA
  - DESC: to fix CVE-2023-3354 CVE-2020-24165 CVE-2020-13791
  - accel/tcg: fix race in cpu_exec_step_atomic (CVE-2020-24165)
  - pci: assert configuration access is within bounds(CVE-2020-13791)
  - io: remove io watch if TLS channel is closed during handshake(CVE-2023-3354)


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-44.p13
changelog:
  - Type: Bug
  - ID: [BUG#206215]
  - SUG: NA
  - DESC: target/arm: fix typo in cpu.h ID_AA64PFR1 field name
  - 	change "sbss" to "ssbs" to fix this error.


author: weishaokun <weishaokun@kylinos.cn> - 4.1.0-44.p16
changelog:
  - Type: Update
  - ID:   [TASK#219131]
  - SUG:  NA
  - DESC: fix CVE-2023-0330 CVE-2024-3446 CVE-2024-3447


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 4.1.0-44.p17
changelog:
  - Type: Update
  - ID:   [TASK#352309]
  - SUG:  NA
  - DESC: fix CVE-2024-4467 CVE-2024-7409 CVE-2023-5088


author: jilin.liu <jilin.liu@cs2c.com.cn> - 1:4.8.7-47.p02
changelog:
  - add patch 6009: qt4-loongson3a-progressbar-block-issue.patch;
  - loongson 3a3000,(double) 0/0 = 2147483647 issue.


author: xiehongyu <xiehongyu@kylinos.cn> - 1:4.8.7-47.p04
changelog:
  - Type:cves
  - ID:CVE-2020-0570 CVE-2020-17507
  - SUG:restart
  - DESC: fix CVE-2020-0570 CVE-2020-17507


author: wanglixing <wanglixing@kylinos.cn> - 1:4.8.7-47.p08
changelog:
  - Type:cves
  - ID:CVE-2023-34410,CVE-2023-38197,CVE-2023-37369,CVE-2023-43114
  - SUG:NA
  - DESC:add patch6016,patch6017,patch6018,patch6019.skip the release p07 due to an occupation


author: houhongxun <houhongxun@kylinos.cn> - 5.11.1-16.p01
changelog:
  - Type:update
  - ID:Task#171032
  - SUG:NA
  - DESC:add patch to support loongarch64 platform(patch author: guoce@kylinos.cn)


author: lvying<lvying6@huawei.com> - 0.6.3-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix file descriptor leak in ras-report.c:setup_report_socket()


author: zhangxiaolu <zhangxiaolu@kylinos.cn> - 6.2.7-1.p01
changelog:
  - Type:cves
  - Id:CVE-2022-36021 CVE-2022-24834 CVE-2023-28856
  - SUG:NA
  - DESC:回合低版本补丁CVE-2022-36021 CVE-2022-24834 CVE-2023-28856 and fix-building-error-of-malloc.patch
     Fix redis.spec and redis.service


author: wutao <wutao61@huawei.com> - 2.5.8-3
changelog:
  - fix CVE-2020-25613
  - WEBrick,a simple HTTP server bundled with Ruby,had not
  - checked the transfer-encoding header value rigorously.
  - An attacker may potentially exploit this issue to bypass
  - a reverse proxy,which may lead to an HTTP Request Smuggling
  - attack.


author: shixuantong <shixuantong@huawei.com> - 2.5.8-114
changelog:
  - Type:cves
  - ID:CVE-2021-31799 CVE-2021-31810 CVE-2021-32066
  - SUG:NA
  - DESC:fix CVE-2021-31799 CVE-2021-31810 CVE-2021-32066


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-3
changelog:
  - Type:CVES
  - ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
  - SUG:NA
  - DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-4
changelog:
  - Type:CVES
  - ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
  - SUG:NA
  - DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572


author: yueyuankun <yueyuankun@kylinos.cn> - 1.0.28-11.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:Cancel the noarch attribute of "sane backends help" package


author: shenyangyang <shenyangyang4@huawei.com> - 1:4.6.2-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add build requires of texinfo to solve the problem of build


author: sunjin <sunjin@kylinos.cn> - 1.2.4kord-se.05
changelog:
  - Type:update
  - ID:[Bug#145066]
  - SUG:NA
  - DESC:security-switch版本拉齐
  -     【sp1sp2】只开selinux，grub里会多出kysec_3adm=0这个参数


author: mengchaoming<mengchaoming@kylinos.cn>2.0-1.48.4
changelog:
  - update to release 48
  - rm zzz_openEuler_history.sh
  - Move -- befora path
  - Do not set umask to 077 any more
  - Update LICENSE of files
  - Update LICENSE to Mulan PSL v2.0


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.33
changelog:
  - Add patch insmod-ssh-ifconfig-viewfirewall-list-ttylogin.patch
  - Add patch allow-rpm-q-allusers.patch


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.36
changelog:
  - Add patch forbid-root-to-kylin-view-log.patch
    Fix bug No.47665:auditadm can change the audit log.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.37
changelog:
  - Add patch forbid-secadm-log-manage.patch
    Fix bug No.47506:Secadm can search the root homedir.
  - Add patch fix-kylin-user-cannot-open-firefox.patch
    Fix bug :kylin-user cannot open firefox in strict.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.38
changelog:
  - Add patch fix-kylin-user-cannot-open-firefox2.patch
    Fix bug : New user cannot open firefox in strict.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.39
changelog:
  - Add patch fix-login-stuck-after-update-libselinux.patch
    Fix bug : Window get slow after change rpm to libselinux.se.06.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.40
changelog:
  - Add patch fix-login-stuck-targeted.patch
    Fix bug : Window get slow after change rpm to libselinux.se.06 in custom mode.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.42
changelog:
  - Add patch httpd-memcached-service.patch
    Fix bug No.56070:Httpd and memcached service can't restart both in ukmcs and targeted.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.39
changelog:
  - Add patch fix-login-stuck-after-update-libselinux.patch
    Fix bug : Window get slow after change rpm to libselinux.se.06.
    Fix bug 52541:audit service should not be operated by root user.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-56.se.43
changelog:
  - Add patch forbid-fdisk-others.patch
  - Add patch forbid-fdisk-others-2.patch
    Forbid others using fdisk except root.


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-56.se.46
changelog:
  - Type:update
  - ID:[bug#136994]
  - SUG:NA
  - add Patch74: selinux-policy-forbid-systemctl.patch
  - DESC: 136994 【服务管理】除root外，其他用户可以启停服务

  - add Patch73: selinux-policy-hwzs-sudosu-auditctl.patch
  - DESC: TASK#104920 targeted定制策略摸底


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-56.se.47
changelog:
  - Type:update
  - ID:[任务#120597][BUG#128013]
  - SUG:NA
  - add: 
    Patch6001: backport-Add-file-context-for-.config-Yubico.patch
    Patch6002: backport-Change-transitions-for-.config-Yubico.patch
  - DESC: 120597 修复漏洞CVE-2020-24612

  - add Patch75: selinux-policy-eal-seutil.patch
  - DESC: 128013 【用户管理】三权命令集中部分命令与实际不符


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-56.se.48
changelog:
  - Type:update
  - ID:[任务#121415]
  - SUG:NA
  - Add:
    Patch7001: boot-3c5000-targeted.patch:                 Fix 3c5000 system can't boot in targeted mode.
    Patch7002: security-switch-3c5000.patch:               Fix 3c5000 selinux bug.
    Patch7003: passwd-firewall-cmd-logviewer-3c5000.patch: Fix passwd, firewall-cmd, log-viewer bugs in ukmcs.
    Patch7004: sshd-firewall-list.patch:                   Fix root can manage auditd and firewalld-list in ukmcs.
    Patch7005: audit-start-stop.patch:                     Fix root can manage auditd start-stop in ukmcs.
    Patch7006: auditd-ctl-warning.patch:                   Fix root can manage auditd start-stop in ukmcs.
  - DESC: 【sp1】在飞腾、龙芯，arm/x86上同源策略源码


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-56.se.49
changelog:
  - Type:update
  - ID:[BUG#57820]
  - SUG:NA
  - add: Patch7007: selinux-policy-httpd.patch
  - DESC: 57820 用例“05系统安全-02访问控制-02强制访问控制-13semanage-端口管理”失败  来源用例-93751


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 3.14.2-56.se.50
changelog:
  - Type:update
  - ID:[任务#121415]
  - SUG:NA
  - Upgrade releae to 56.se.50 to be compatible with Loongson koji version.
  - DESC: 【sp1】在飞腾、龙芯，arm/x86上同源策略源码


author: tiandongdong <tiandongdong@kylinos.cn> - 3.14.2-56.se.51
changelog:
  - Type:fixbug
  - ID:[BUG#209238]
  - SUG:NA
  - DESC: 由于libsemanage包的改动，需要重新rebuild包，无内容改动，版本号+1.
  - [BUG#209238] 【sp4】【管理员分权】自定义增加备份还原分区安装系统，开启strict模式后，secadm和auditadm用户异常


author: xiaozai <xiaozai@kylinos.cn> - 2.13.3-4.2.p01
changelog:
  - Type:bugfix
  - ID:TASK#147198
  - SUG:NA
  - DESC: add patch 0001-fix-variable-LANG-in-csh.patch, fix the bug that the value of variable LANG in tcsh is 1 or 0


author: zhangzhou<zhangzhou@kylinos.cn> - 2:4.7-8.se.7
changelog:
  - Type:update
  - ID:[Task#152862]
  - SUG:NA
  - DESC: fix CVE-2023-29383
  -     add patch(from cve):backport-Added-control-character-check.patch backport-Overhaul-valid_field.patch
  -     add patch(for compatibility sp1-updates):shadow-selinux-compile-err-for-sp1updates.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.7-8.se.8
changelog:
  - Type:update
  - ID:[Task#176674]
  - SUG:NA
  - DESC: fix CVE-2023-4641
  -     add patch(from cve):shadow-fix-password-leak.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.7-8.se.9
changelog:
  - Type:update
  - ID:[Task#185579]
  - SUG:NA
  - DESC: fix CVE-2013-4235
  -     add patch(from cve):shadow-backport-CVE-2013-4235.patch


author: zhaoyun<zhaoyun@kylinos.cn> - 2:4.7-8.se.10
changelog:
  - Type:bugfix
  - ID:[Bug#212224]
  - SUG:NA
  - DESC: 【20240130update内网源更新测试】SP1arm升级 shadow-4.7-8.se.9.ky10包失败


author: jinlun <jinlun@huawei.com> - 15-23
changelog:
  - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
    CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840
    CVE-2021-23841 CVE-2022-0778


author: wanglixing <wanglixing@kylinos.cn> - 15-23.p01
changelog:
  - Types: update
  - ID:NA
  - SUG:NA
  - DESC:transplant patch from -15-18.p01 - fix bug Bios引入openEuler标签


author: songjuntao <songjuntao@kylinos.cn> - 15-23.p03
changelog:
  - Type:update
  - ID:NA
  - ID:NA
  - DESC: add 0001-shim-Properly-generate-absolute-paths-from-relative-.patch and
          0002-shim-Prevent-shim-to-set-itself-as-a-second-stage-lo.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 15-23.p06
changelog:
  - Types:CVE
  - ID:TASK#207009
  - SUG:NA
  - DESC:fix CVE-2023-0464 CVE-2023-3817
         CVE-2023-40547 CVE-2023-40551
         CVE-2023-3446 CVE-2023-0465 CVE-2023-2650


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: wangdi <wangdi@kylinos.cn> - 0.20.0-2.p01
changelog:
  - Type:bugfix
  - ID:[TASK#327655]
  - SUG:NA
  - DESC:fix spice-vdagent consume too much resource when start vncserver


author: openEuler Buildteam <buildteam@openeuler.org> - 3.24.0-7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Fix CVE-2019-19923 CVE-2019-19924 CVE-2019-19925 CVE-2019-19926 CVE-2019-20218


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-2
changelog:
  - Type:cves
  - ID:CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450
  - SUG:restart
  - DESC:fix CVE-2019-12528 CVE-2020-8517 CVE-2020-8449 CVE-2020-8450


author: openEuler Buildteam <buildteam@openeuler.org> - 4.9-6
changelog:
  - Type:cves
  - ID:CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606
  - SUG:restart
  - DESC:fix CVE-2020-14058,CVE-2020-15049,CVE-2020-15810,CVE-2020-15811,CVE-2020-24606


author: xihaochen<xihaochen@huawei.com> - 4.9-8
changelog:
  - Type:cves
  - ID:CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620
  - SUG:NA
  - DESC:fix CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808 CVE-2021-33620


author: majun<majun65@huawei.com> - 4.2-3
changelog:
  - Type:cves
  - ID:CVE-2019-12525 CVE-2019-12527 CVE-2019-12529 CVE-2019-12854 CVE-2019-13345
  - SUG:restart
  - DESC:fix cves


author: jinzhiguang <jinzhiguang@kylinos.cn> - 12.2.1-6.p02
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add patch 0001-Workaround-for-iowait-being-decremented.patch
          to fix mpstat wrong output when iowait decremented.


author: shenyangyang <shenyangyang4@huawei.com> - 243-29
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:revert don't enable systemd-journald-audit.socket by default
         that may cause reboot problem if update systemd with out dracut -f
         from LTS-20.03


author: Guo Jianxing <guojianxing@kylinoscn> - 243.31.se.p02
changelog:
  - import changes from 17.se.4
  -- add patch9014:systemd-243-kylin-init5-hang.patch
  -- Modify ctrl+alt+F2 switch to init5 stuck problem
  -- Patch9013: 0002-Change-the-NTP-server.patch
  -- Change NTP server.
  -- urnal: fix selinux denied error for systemctl when lsm stacking is enable
  -- change to kylin


author: mengchaoming<mengchaoming@kylinos.cn>243-31.se.p03
changelog:
  -add patch9015:systemd-243-kylin-init1-add-check-console-tty1.patch
  -fix bug 1568:Input init1 in the graphical interface, switching to single user is abnormal, the screen is black, the cursor in the upper left corner flickers, and the graphical interface cannot be switched


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p07
changelog:
  - Type:bugfix
  - ID:rhbz#1819868
  - SUG:NA
  - DESC: fix create pod container fail and systemd timeout (rhbz #1819868)


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p10
changelog:
  - Type:bugfix
  - ID:rhbz#1970945
  - SUG:NA
  - DESC: Fix Systemd memory corruption (rhbz#1970945)
          Fix bunch of memory management bugs uncovered by dfuzzer and UBSAN (rhbz#2047373)


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p12
changelog:
  - Type:compile
  - ID:TASK#142824
  - SUG:NA
  - DESC: Support loongarch64
          fix mips64el build
          Remove gnu-efi check when in loongarch64 and mips64
          support systemd-detect-virt for Loongarch64


author: Shen Zhongwei <shenzhongwei@kylinos.cn> - 243-31.se.p15
changelog:
  - Type:bugfix
  - ID:[TASK#171982]
  - SUG:NA
  - DESC: add patch 0002-rc-local-order-after-network-online.target.patch
          fix rc-local service start failed


author: yinyongkang <yinyongkang@kylinos.cn> - 243-31.se.p17
changelog:
  - Type:bugfix
  - ID:[TASK#192741]
  - SBUG:NA
  - DESC: add patch100719: 0001-network-do-not-drop-foreign-config-if-interface-is-i.patch
          network: do not drop foreign config if interface is in initialized state


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p18
changelog:
  - Type:bugfix
  - ID:[Bug#210134]
  - SBUG:NA
  - DESC: add patch10720: 0001-backport-donot-open-cdrom-use-exclusive-mode.patch
          fix eject cdrom issue


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p19
changelog:
  - Type:bugfix
  - ID:[TASK#205426]
  - SUG:NA
  - DESC: Add backport-core-add-possibility-to-not-track-certain-unit-types.patch
          Sync upstream community patches , optimization user login time for too long in some case


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-31.se.p21
changelog:
  - Type:bugfix
  - ID:[TASK#375571]
  - SUG:NA
  - DESC: Add pid1-set-SYSTEMD_NSS_DYNAMIC_BYPASS-env-var-for-dbus-daemon.patch
          Fix deadlock between pid1 and dbus-daemon


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1:8.6.10-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "no acceptable C compiler found" error message is displayed during compilation.Therefore,add buildrequires gcc.


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p01
changelog:
  - Modify spec to enable disable-luajittex disable-mfluajit
  - add texlive-base-m-tx-0.63a-buffer-overflow.patch
  - disable format-security


author: GuoCe <guoce@kylinos.cn> - 20180414-29.p02
changelog:
  - Type: task
  - ID: 162915
  - SUG: NA
  - DESC: fix CVE-2023-32700: CVE-2023-32700.patch
          sp3 同源处理，删除补丁:
          texlive-base-m-tx-0.63a-buffer-overflow.patch


author: zhangdashuang <zhangdashuang@kylinos.cn> 1.10.1-4
changelog:
  - from 1.10.1-2.p01 transplant
  - add patch 101：tigervnc-1.10.1-kylin-xstart.patch
  - remote link vncserver cannot show desktop, log message error


author: huanghaitao <huanghaitao8@huawei.com> - 1:9.0.10-13
changelog:
  - Type:cves
  - ID: CVE-2019-17563 CVE-2019-12418 CVE-2020-1935 CVE-2020-1938 
  - SUG:restart
  - DESC: fix CVE-2019-17563 CVE-2019-12418CVE-2020-1935 CVE-2020-1938


author: wangxiao <wangxiao65@huawei.com> - 1:9.0.10-14
changelog:
  - Type:cves
  - ID: CVE-2020-9484 CVE-2020-11996 CVE-2020-13934 CVE-2020-13935
  - SUG:restart
  - DESC: fix CVE-2020-9484 CVE-2020-11996 CVE-2020-13934 CVE-2020-13935


author: wangyue <wangyue92@huawei.com> - 1:9.0.10-18
changelog:
  - Type:cve
  - ID: CVE-2021-25122 CVE-2021-25329
  - SUG:restart
  - DESC: fix CVE-2021-25122 CVE-2021-25329


author: cenhuilin<cenhuilin@kylinos.cn> - 2020a-1.p02
changelog:
  - Type:bugfix
  - ID:task#154455
  - SUG:NA
  - DESC:The northern edge of Chihuahua changes to US rules.
  -      Most of Mexico will no longer observe DST.
  -      Treat 1931 changes in Mexico as DST.
  -      update java source 1.5 to 1.6 in line 84 because of buildrequires java-11.


author: mengchaoming<mengchaoming@kylinos.cn>-p13
changelog:
  -add patch11: ukui-greeter-kylin-Solve-bug49330-translation.patch
  -添加的定时器有问题,去掉,使用原有定时器;pam传上来的message,greeter进行翻译;


author: huayadong<huayadong@kylinos.cn>-p14
changelog:
  - add ukui-greeter-kylin-fix-bug-can-not-count-down-normally-after-entering-wrong-password-three-times.patch


author: huayadong<huayadong@kylinos.cn> -p23
changelog:
  - Type: bugfix
  - ID  : [Task#79301]
  - SUG : NA
  - DESC: add Patch22 ukui-greeter-1.2.1-shielded-power-button.patch
          统一用户电源管理规则.


author: huayadong<huayadong@kylinos.cn> -p24
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: add Patch23 ukui-greeter-kylin-1.2.1-automatically-unlock-and-add-syslog-during-login.patch
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> -p23
changelog:
  - Type: bugfix
  - ID  : [Task#79301]
  - SUG : NA
  - DESC: add Patch21 ukui-greeter-1.2.1-shielded-power-button.patch
          统一用户电源管理规则.


author: huayadong<huayadong@kylinos.cn> -p24
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: add Patch22 ukui-greeter-kylin-1.2.1-automatically-unlock-and-add-syslog-during-login.patch
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> -p25
changelog:
  - Type: bugfix
  - ID  : [Bug#128021]
  - SUG : NA
  - DESC: add Patch23 ukui-greeter-1.2.1-kylin-Prevent-failure-to-connect-to-xserver.patch
          修复因无法连接xserver而出现的登录界面键盘输入后闪屏问题.


author: huayadong<huayadong@kylinos.cn> -p26
changelog:
  - Type:bugfix
  - ID  :[Bug#137537]
  - SUG :NA
  - DESC:add patch24:ukui-greeter-1.2.1-kylin-prompt-for-password-expiration.patch


author: huayadong<huayadong@kylinos.cn> -p27
changelog:
  - Type:bugfix
  - ID  :[Bug#158569]
  - SUG :NA
  - DESC:add patch25:ukui-greeter-1.2.1-kylin-Add-login-status-detection-function-for-users-with-the-same-UID.patch
         为具有相同UID的用户添加登录状态检测功能，在用户列表合并显示相同UID用户


author: huayadong<huayadong@kylinos.cn> -p28
changelog:
  - Type:bugfix
  - ID  :[Bug#160870]
  - SUG :NA
  - DESC:add patch26:ukui-greeter-1.2.1-kylin-fix-crash-with-the-same-uid-user.patch


author: huayadong<huayadong@kylinos.cn> -p29
changelog:
  - Type:bugfix
  - ID  :[Bug#160870]
  - SUG :NA
  - DESC:add patch27:ukui-greeter-1.2.1-kylin-fix-the-problem-that-the-users-avatar-of-the-same-uid-is-not-centered.patch


author: huayadong<huayadong@kylinos.cn> -p30
changelog:
  - Type:bugfix
  - ID  :[Bug#164455]
  - SUG :NA
  - DESC:add patch28:ukui-greeter-1.2.1-kylin-increase-name-label-height.patch


author: huayadong<huayadong@kylinos.cn> -p31
changelog:
  - Type:bugfix
  - ID  :[Bug#167602]
  - SUG :NA
  - DESC:add patch29:ukui-greeter-1.2.1-kylin-the-eye-on-the-right-side-of-the-password-input-box-disappears-when-logging-in-to-the-system.patch


author: huayadong<huayadong@kylinos.cn> -p32
changelog:
  - Type: bugfix
  - ID  : [Bug#161924]
  - SUG : NA
  - DESC: add patch14 ukui-greeter-1.2.1-kylin-fix-kyreplace3.0-4-lightdm-unable-to-start.patch


author: houhongxun<houhongxun@kylinos.cn> -p33
changelog:
  -Type:bugfix
  -ID:[BUG#194488]
  -SUG:NA
  -DESC:add patch 0001-don-t-show-locked-user-on-login-window.patch
        don't show locked user on login window


author: huayadong <huayadong@kylinos.cn> -p34
changelog:
  - Type:bugfix
  - ID:[BUG#196489]
  - SUG:NA
  - DESC:add patch:0001-ukui-greeter-1.2.1-kylin-remove-xhost.patch


author: houhongxun<houhongxun@kylinos.cn> -p35
changelog:
  -Type:bugfix
  -ID:[BUG#205127]
  -SUG:NA
  -DESC:add patch 0001-ukui-greeter-adjust-according-to-pam-changes.patch


author: guoce <guoce@kylinos.cn> - 0.3.62-1s2.p02
changelog:
  - add patch: ukui-screensaver-0.3.62-fix-chandao-12928.patch
  - modify system time display coordinates


author: gaohaobo <gaohaobo@kylinos.cn> - 0.3.62-1s2.p04
changelog:
  - add patch: 0002-change-default-picture-folder-to-adjust-control-center-p12.patch  change the default srceensaver lookup directory to adjust kylin-control-center after p12.


author: huayadong <huayadong@kylinos.cn> - 0.3.62-1s2.p17
changelog:
  - Type: bugfix
  - ID  : [TASK#90719]
  - SUG : NA
  - DESC: Patch15:ukui-screensaver-0.3.62-kylin-fix-fortify-problem.patch 
  	修改spec文件增加man文件安装,修复fortify扫描问题.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p18
changelog:
  - Type: bugfix
  - ID  : [Task#91782]
  - SUG : NA
  - DESC: Patch16 ukui-screensaver-0.3.62-kylin-automatically-unlock-and-add-syslog-during-login.patch 
          登录过程中自动解锁添加日志记录.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p19
changelog:
  - Type: bugfix
  - ID  : [Task#135672]
  - SUG : NA
  - DESC: Patch17 ukui-screensaver-0.3.62-kylin-fix-core-dump.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p20
changelog:
  - Type: bugfix
  - ID  : [Task#111645]
  - SUG : NA
  - DESC: Patch18 ukui-screensaver-0.3.62-kylin-Adapt-for-pam-1.4.0-8.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p21
changelog:
  - Type: bugfix
  - ID  : [Bug#160870]
  - SUG : NA
  - DESC: Patch19 ukui-screensaver-0.3.62-kylin-fix-that-the-same-uid-user-has-no-avatar-when-locking-the-screen.patch


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p22
changelog:
  - Type: bugfix
  - ID  : [Bug#165506]
  - SUG : NA
  - DESC: Patch20:ukui-screensaver-0.3.62-kylin-prohibit-startup-in-other-types-of-desktop-environments.patch
          禁止在其他桌面环境启动.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p23
changelog:
  - Type: bugfix
  - ID  : [Bug#169307]
  - SUG : NA
  - DESC: Patch21:ukui-screensaver-0.3.62-kylin-prevent-lock-screen-wallpaper-from-being-deleted.patch
  	防止所有锁屏图片都被删除，出现无图可用的现象.


author: huayadong<huayadong@kylinos.cn> - 0.3.62-1s2.p24
changelog:
  - Type: bugfix
  - ID  : [Task#177133]
  - SUG : NA
  - DESC: Patch22:ukui-screensaver-0.3.62-kylin-abnormal-process-after-VNC-session-ends.patch


author: houhongxun<houhongxun@kylinos.cn> - 0.3.62-1s2.p25
changelog:
  - Type: bugfix
  - ID  : [Bug#203190]
  - SUG : NA
  - DESC: Patch23:0001-re-grab-input-focus-when-got-pam-prompt.patch
  	re grab input focus in case window was deactivated


author: yuanxin<yuanxin24@huawei.com> - 2:8.2-11
changelog:
  - Type:CVE
  - ID:CVE-2021-4166 CVE-2021-4192 CVE-2021-4193
  - SUG:NA
  - DESC:fix CVE-2021-4166 CVE-2021-4192 CVE-2021-4193


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-16
changelog:
  - Type:CVE
  - ID:CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413
  - SUG:NA
  - DESC:fix CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413


author: tianwei <tianwei12@h-partners.com> - 2:8.2-17
changelog:
  - Type:CVE
  - ID:CVE-2022-0443 CVE-2022-0392 CVE-2022-0417
  - SUG:NA
  - DESC:fix CVE-2022-0443 CVE-2022-0392 CVE-2022-0417


author: xiehongyu <xiehongyu@kylinos.cn> - 2:8.2-20.p01
changelog:
  - add fix-evim-error.patch
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: Like <like@kylinos.cn> - 2:8.2-21.p01
changelog:
  - add fix-evim-error.patch from 8.2-20.p01
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: Like <like@kylinos.cn> - 2:8.2-22.p01
changelog:
  - add fix-evim-error.patch from 8.2-20.p01
  - 修改sepc文件，将python相关的编译参数设置为no,
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: Like <like@kylinos.cn> -2:8.2-26.p01
changelog:
  - add fix-evim-error.patch from 8.2-24.p01
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题
  - skip make check


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-27
changelog:
  - Type:CVE
  - ID:CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619
  - SUG:NA
  - DESC:fix CVE-2022-1629 CVE-2022-1620 CVE-2022-1674 CVE-2022-1621 CVE-2022-1619


author: wanglixing <wanglixing@kylinos.cn> - 2:8.2-28.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch from 8.2-24.p01
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题


author: sunjialin <sunjialin@kylinos.cn> - 2:8.2-34.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch
  - 修改sepc文件，将python相关的编译参数设置为no, 
  - 解决vim绕过exectl执行未在白名单内的python脚本的问题


author: shixuantong<shixuantong@h-partners.com> - 2:8.2-42
changelog:
  - Type:CVE
  - ID:CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345
  - SUG:NA
  - DESC:fix CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-43
changelog:
  - Type:CVE
  - ID:CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287
  - SUG:NA
  - DESC:fix CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:8.2-47
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the error of backport-cannot-list-options-one-per-line.patch


author: likai01 <likai01@kylinos.cn> - 2:8.2-50.po1
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch
  - 修改spec文件。将python相关的编译参数设置为no，
  - 解决vim绕过exectl执行未在白名单内的python脚本问题


author: likai01 <likai01@kylinos.cn> - 2:8.2-62.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:add fix-evim-error.patch[补丁创建人-liqimei]
  - 修改spec文件。将python相关的编译参数设置为no，
  - 解决vim绕过exectl执行未在白名单内的python脚本问题


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-6
changelog:
  - Type:CVE
  - ID:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054
  - SUG:NA
  - DESC:CVE-2023-0049 CVE-2023-0051 CVE-2023-0054


author: zhangzhou <zhangzhou@kylinos.cn> - 2:9.0-14.p01
changelog:
  - Type:update
  - ID:[BUG#101652]
  - SUG:NA
  - DESC:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题
  -      Task 152726: 升级vim版本至9.0-14后，合入安全部门修改，from wanghao2


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-17
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: sunjin <sunjin@kylinos.cn> - 2:9.0-19.p01.se.01
changelog:
  - Type: NA
  - ID: [Task#180410]
  - SUG: NA
  - DESC:  AQKK服务器项目重新集成双内核版本移植vim安全补丁
  -   修改sepc文件，将python相关的编译参数设置为no,解决bug#101652:vim绕过exectl执行未在白名单内的python脚本的问题


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2:9.0-19.p03.01.se.01
changelog:
  - Type:cves
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802
  - SUG:NA
  - DESC:Fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237 CVE-2023-48706 CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802


author: lizhanchun <lizhanchun@kylinos.cn> 2.2.1-2.p15
changelog:
  - Type:	update
  - ID:	BUG#114583
  - SUG:	NA
  - DESC:	KYLIN-add-default-device-on-aarch64-when-inst-vm.patch 
  -		add default device on aarch64 when inst vm.


author: wangdi <wangdi@kylinos.cn> - 2.2.1-2.p16
changelog:
  - Type: update
  - ID:   BUG#129269
  - SUG:  NA
  - DESC: KYLIN-fix-virt-install-error-message-zh_CN-translation.patch 
  -               fix redundant characters in virt-install error message zh_CN translation.


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p17
changelog:
  - Type: update
  - ID:   [TASK#159711]
  - SUG:  NA
  - DESC: For homology to merge Loongarch64 patches
  -	Add kylin-virt-manager-2.2.1-4-fix-bug-68049-translation-of-tchinese.patch
  -       Add 0001-Set-minimum-memory-2048M-for-virt-install.patch
  -	Add 0001-Bug-119136-set-default-memory-2048.patch
  -	Add 0001-BUG-102438-Modify-is_loongarch64-to-is_loongarch.patch
  -	Add 0001-add-translations-for-zh_CN.patch
  -	Add 0001-temporarily-modify-version-V10-to-version-10.0.patch
  -	Delete duplicate machine types.
  -	Add mips64 loongarch support


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p18
changelog:
  - Type: update
  - ID:   [BUG#199984] [BUG#200170]
  - SUG:  NA
  - DESC: KYLIN-fix-virt-manager-error-message-zh_CN-translation.patch
  -               Fixed the issue that the virt-manager interface preference menu was displayed in English


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p19
changelog:
  - Type: update
  - ID:   TASK#187051
  - SUG:  NA
  - DESC: Add 0001-add-Chinese-traditional-translation-HK.po.patch
  -               add traditional Chinese translations for the HK versions.


author: lifei <lifei@kylinos.cn> - 2.2.1-2.p21
changelog:
  - Type: update
  - ID:   TASK#187713
  - SUG:  NA
  - DESC: add 0001-fix-cockpit-reboot-error-issue.patch
  -               fix-cockpit-reboot-error-issue.


author: wangzhishun <wangzhishun1@huawei.com> - 5.1.0-11
changelog:
  - Make sure sample rate is specified and non-zero in DFF files
  - Fix potential out-of-bounds heap read


