# changelog

author: zengwefeng <zwfeng@huawei.com> - 1.26.2-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix crash in nm_wildcard_match_check
         fix leak of NMOvsdbPrivate db_uuid


author: gaoxingwang <gaoxingwang@huawei.com> - 1.26.2-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnm: fix leak and return failures from nm_client_load_connections()


author: songliyang <songliyang@kylinos.cn> - 1.26.2-12.p03
changelog:
  - Type:TASK
  - ID:163317
  - SUG:https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commits/main?search=all-mac
  - DESC:add Patch11 to support promisc mode


author: songliyang <songliyang@kylinos.cn> - 1.26.2-12.p05
changelog:
  - Type:TASK
  - ID:[TASK#163317]
  - SUG:NA
  - DESC: fix the date of p03 changelog to solve a problem that don't show earlier changelog on koji
          p04 version is already used by v10-sp3-custom-gazb tag, use p05 instead


author: zhangyulong <zhangyulong@kylinos.com> - 1.26.2-13.p05
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the issue that NetworkManager service does not self-heal when the dbus service is abnormal


author: tenglei <tenglei@kylinos.cn> - 1.26.2-13.p06
changelog:
  - Type:TASK
  - ID:[TASK#375349]
  - SUG:NA
  - DESC:Modify the udev rule to solve the caclico network card hosting problem


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: houhongxun <houhongxun@kylinos.cn> - 0.6.55-2.p01
changelog:
  - Type:update
  - ID:Task#171032
  - SUG:NA
  - DESC:sync kylin modification: fix user display problem in control center or when login
  	add patch: accountsservice-0.6.54-kylin-1000-users-issue.patch(liujilin)


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-31.p23
changelog:
  - Type:bugfix
  - ID:BUG#191289
  - SUG:NA
  - DESC:dracut handle compressed kernel modules
         network use separate main conext for NM-client in threads


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-31.p24
changelog:
  - Type:bugfix
  - ID:BUG#186888
  - SUG:NA
  - DESC:Solve the problem that sometimes the circular loading progress bar does not rotate


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-31.p33
changelog:
  - Type:update
  - ID:task#178419
  - SUG:NA
  - DESC:rename grubloongarch64.efi to BOOTLOONGARCH/BOOTLOONGARCH64.EFI


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-41.p33
changelog:
  - Type:update
  - ID:task#186438
  - SUG:NA
  - DESC:fix empty folder '/usr/bin/liveinst' in arm environmnet
         revert "Set default entry to the BLS id instead of the entry index"
         translate the tips about expected capacity into Chinese
         bugfix change root and storage interface shows
         Don't set LC_ALL for live installations
         Do not crash on network --device link with wireless device
         Do not modify boot order on UEFI if asked


author: Xiao Zai <xiaozai@kylinos.cn> - 33.19-41.p34
changelog:
  - Type:bugfix 
  - ID:BUG#209529,BUG#209613
  - SUG:NA
  - DESC:fixed an issue where the system could be installed in TUI mode without setting an administrator user


author: yueyuankun <yueyuankun@kylinos.cn> - 33.19-41.p36
changelog:
  - Type:update
  - ID:BUG#221252
  - SUG:NA
  - DESC:set the environment to en_US.UTF-8 when falling back to text mode


author: huangwenhua <huangwenhua@kylinos.cn> - 9100h-39.p01
changelog:
  - Type: update
  - ID: [Task#165758]
  - SUG: NA
  - DESC: revise the expression of sensitive words
  	fix regenerate dict.args.in


author: tanyulong <tanyulong@kylinos.cn>-1.17.0-3.p09
changelog:
  - Type:bugfix
  - ID:[BUG#115244]
  - SUG:NA
  - DESC:fix document viewer crashes when clicking to present
  - Add Patches:atril-1.17.0-kylin-fix-bug-115244.patch


author: douyan <douyan@kylinos.cn> - 1.17.0-3.p10
changelog:
  - Type: update
  - ID:   [TASK#187126]
  - SUG:  NA
  - DESC: add atril-1.17.0-kylin-add-zh_HK-translation.patch


author: huangyu <huangyu106@huawei.com> - 32:9.11.21-14
changelog:
  - Type:CVE
  - ID:CVE-2022-2906 CVE-2022-38177 CVE-2022-38178 CVE-2022-2795 CVE-2022-2881
  - SUG:NA
  - DESC:FIX CVE-2022-2906CVE-2022-38177CVE-2022-38178CVE-2022-2795CVE-2022-2881


author: zhanghao <zhanghao383@huawei.com> - 32:9.11.21-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: gaoyukun <gaoyukun@kylinos.cn> - 2.34-33.p02
changelog:
  - Type:update
  - ID:TASK#414527
  - SUG:NA
  - DESC:1.rebuild libbfd.a libiberty.a libopcodes.a with -fPIC for inclusion into shared libraries
         2.merge openEuler aarch64 EFI support and fix the compatibility issues
         3.Patch is different from sp3, so add 1 to the version number


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.4.v2401
changelog:
  - 3rd/ljmcore: update 2.2.4.1 ljmcore driver (v2) (Lu Yao) [task:197912]
  - scsi: megaraid_sas: disabled shared host tagset feature by default (mengfanhui) [bug:204683]
  - USB: serial: pl2303: fix line-speed handling on newer chips (Johan Hovold) [bug:211186]
  - USB: serial: pl2303: add support for PL2303HXN (Charles Yeh) [bug:211186]
  - USB: serial: pl2303: fix tranceiver suspend mode (Johan Hovold) [bug:211186]
  - USB: serial: pl2303: fix non-supported xon/xoff (Johan Hovold) [bug:211186]
  - NETRONOME: NFP: fill version string with VERMAGIC_STRING (Yinjun Zhang) [task:199475]
  - sched: fix failed get node id (liwanwu) [bug:213545]
  - PHYTIUM: drivers/perf: phytium: Bugfix for Phytium ddr/pcie PMU dirvers (Wang Xu) [bug:212814]
  - loop: loop_set_status_from_info() check before assignment (Zhong Jinghua) [task:192988]
  - loop: Check for overflow while configuring loop (Siddh Raman Pant) [task:192988]
  - loop: Factor out configuring loop from status (Martijn Coenen) [task:192988]
  - Revert "loop: Check for overflow while configuring loop" (zhanggenjian) [task:192988]
  - loop: properly observe rotational flag of underlying device (Holger Hoffstätte) [task:192988]
  - loop: Refactor loop_set_status() size calculation (Martijn Coenen) [task:192988]
  - loop: Factor out setting loop device size (Martijn Coenen) [task:192988]
  - loop: Remove sector_t truncation checks (Martijn Coenen) [task:192988]
  - loop: Call loop_config_discard() only after new config is applied (Martijn Coenen) [task:192988]
  - arm64/config: enable CONFIG_GPU_INSPUR (Shixiong Ou) [task:198667]
  - tcm: support tpmrm function of ax99100_spi interface TCM module (jiangxiujie) [task:198010]
  - net: tls, update curr on splice as well (John Fastabend) [task:196365] {CVE-2024-0646}


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.5.v2401
changelog:
  - PHYTIUM: PMU: phytium: update ddr/pcie PMU drivers (liyouhong) [bug:212814]
  - kylin/gmjstcm:Adapting TCM1.0 to x86 (wudandan) [task:195669]
  - x86/alternatives: add missing insn.h include (Dave Hansen) [task:198393]
  - x86/alternatives: Sync bp_patching update for avoiding NULL pointer exception (Masami Hiramatsu) [task:198393]
  - x86/kprobes: Fix ordering while text-patching (Peter Zijlstra) [task:198393]
  - x86/alternatives: Add and use text_gen_insn() helper (Peter Zijlstra) [task:198393]
  - x86/alternatives, jump_label: Provide better text_poke() batching interface (Peter Zijlstra) [task:198393]
  - x86/alternatives: Teach text_poke_bp() to emulate instructions (Peter Zijlstra) [task:198393]
  - x86/jump_label: Make tp_vec_nr static (YueHaibing) [task:198393]
  - x86/jump_label: Batch jump label updates (Daniel Bristot de Oliveira) [task:198393]
  - x86/jump_label: Add a __jump_label_set_jump_code() helper (Daniel Bristot de Oliveira) [task:198393]
  - x86/alternative: Batch of patch operations (Daniel Bristot de Oliveira) [task:198393]
  - x86/kprobes: Prohibit probing on functions before kprobe_int3_handler() (Masami Hiramatsu) [task:198393]
  - rcu: Refactor rcu_{nmi,irq}_{enter,exit}() (Byungchul Park) [task:198393]
  - x86/alternatives: Remove the return value of text_poke_*() (Nadav Amit) [task:198393]
  - x86/jump-label: Remove support for custom text poker (Nadav Amit) [task:198393]
  - x86/jump_label: Use text_poke_early() during early init (Nadav Amit) [task:198393]
  - x86/jump_label: Switch to jump_entry accessors (Ard Biesheuvel) [task:198393]
  - security/ima&evm: fix xattr check error (liuqi) [task:192131]
  - nvmet-tcp: Fix the H2C expected PDU len calculation (Maurizio Lombardi) [task:200668]
  - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length (Maurizio Lombardi) [task:200668] {CVE-2023-52454}
  - nvmet-tcp: fix maxh2cdata icresp parameter (Sagi Grimberg) [task:200668]
  - f2fs: explicitly null-terminate the xattr list (Eric Biggers) [task:200626] {CVE-2023-52436}
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Zhipeng Lu) [task:200671] {CVE-2023-52469}
  - net: qualcomm: rmnet: fix global oob in rmnet_policy (Lin Ma) [task:200745] {CVE-2024-26597}
  - sched/membarrier: reduce the ability to hammer on sys_membarrier (Linus Torvalds) [task:200749] {CVE-2024-26602}
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Tony Lindgren) [task:200752] {CVE-2024-26600}
  - binder: signal epoll threads of self-work (Carlos Llamas) [task:200750] {CVE-2024-26606}
  - CIFS: Fix retry mid list corruption on reconnects (Pavel Shilovsky) [task:197803]
  - net: devlink: skip info_get op call if it is not defined in dumpit (Jiri Pirko) [task:199476]
  - Revert "optimize: rm redundant code in kysec fpro" (penghuaihe) [bug:207104]
  - usb: raw-gadget: return -EINVAL if no proper ep address available (Wei Ming Chen)
  - Bluetooth: Fix atomicity violation in {min,max}_key_size_set (Gui-Dong Han) [task:199813] {CVE-2024-24860}
  - Bluetooth: Move {min,max}_key_size debugfs into hci_debugfs_create_le (Marcel Holtmann) [task:199813]
  - Bluetooth: Add support for LE ping feature (Spoorthi Ravishankar Koppad) [task:199813]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.6.v2401
changelog:
  - i2c: sprd: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201796] {CVE-2020-36780}
  - PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter (Zhang Qilong) [task:201796] {CVE-2020-36780}
  - GRT: net: Change the driver name to grtnic_xgb (xiaolinkui) [task:216498]
  - tpm: fix security module cannot get pcr from tcm1 on ax99100 (lijun) [bug:210498]
  - security/kysec: add kysec_tcm_type boot parameter (huanfuxi) [bug:210498]
  - mm: fix NULL pointer dereference in __do_page_cache_readahead() (Jiangshan Yi) [bug:216363, bug:216348]
  - llc: call sock_orphan() at release time (Eric Dumazet) [task:203087] {CVE-2024-26625}
  - af_unix: fix lockdep positive in sk_diag_dump_icons() (Eric Dumazet) [task:203085] {CVE-2024-26624}
  - xen-netback: don't produce zero-size SKB frags (Jan Beulich) [task:203084] {CVE-2023-46838}
  - net: openvswitch: fix race on port output (Felix Huettner) [task:202729]
  - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201794] {CVE-2020-36782}
  - LoongArch:modify vfat and nls936 config to y (liubaolin) [task:193507]
  - x86/reboot: KVM: Disable SVM during reboot via virt/KVM reboot callback (Sean Christopherson) [task:201922]
  - ipv6: remove max_size check inline with ipv4 (Jon Maxwell) [task:200581] {CVE-2023-52340}
  - net/dst: use a smaller percpu_counter batch for dst entries accounting (Eric Dumazet) [task:200581] {CVE-2023-52340}
  - net: add a route cache full diagnostic message (Peter Oskolkov) [task:200581] {CVE-2023-52340}
  - ipv6: make ip6_rt_gc_expire an atomic_t (Eric Dumazet) [task:200581] {CVE-2023-52340}
  - KVM: arm64: pmu: Reset sample period on overflow handling (Marc Zyngier) [task:197911]
  - KVM: arm/arm64: Remove pmc->bitmask (Andrew Murray) [task:197911]
  - OPENEULER: SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers (zhanglei) [bug:214334]
  - mm: swapoff: shmem_unuse() stop eviction without igrab() (Hugh Dickins) [task:199161]
  - mm: swapoff: take notice of completion sooner (Hugh Dickins) [task:199161]
  - mm: swapoff: remove too limiting SWAP_UNUSE_MAX_TRIES (Hugh Dickins) [task:199161]
  - mm: swapoff: shmem_find_swap_entries() filter out other types (Hugh Dickins) [task:199161]
  - mm: swap: properly update readahead statistics in unuse_pte_range() (Andrea Righi) [task:199161]
  - mm: rid swapoff of quadratic complexity (Vineeth Remanan Pillai) [task:199161]
  - mm: refactor swap-in logic out of shmem_getpage_gfp (Vineeth Remanan Pillai) [task:199161]
  - lwtunnel: ignore any TUNNEL_OPTIONS_PRESENT flags set by users (Xin Long) [task:196541]
  - lwtunnel: change to use nla_put_u8 for LWTUNNEL_IP_OPT_ERSPAN_VER (Xin Long) [task:196541]
  - lwtunnel: get nlsize for erspan options properly (Xin Long) [task:196541]
  - lwtunnel: change to use nla_parse_nested on new options (Xin Long) [task:196541]
  - lwtunnel: add options setting and dumping for erspan (Xin Long) [task:196541]
  - lwtunnel: add options setting and dumping for vxlan (Xin Long) [task:196541]
  - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (Hao Sun) [task:200744] {CVE-2024-26589}
  - crypto: enable SM3_GENERIC configs (chengang) [bug:215175]
  - HYGON/ANOLIS: x86/head/64: Flush caches for .bss..decrypted section after CR3 switches to early_top_pgt (hanliyang) [task:201176]
  - HYGON: drm: Add hydcu-fixup-header drvier to disable PCI RESET, as hydcu not supporting (fangbaoshun) [task:201176]
  - vhost_net: revert upend_idx only on retriable error (Andrey Smetanin) [task:201250]
  - netfilter: nf_tables: don't skip expired elements during walk (Florian Westphal) [task:179882] {CVE-2023-4244}
  - netfilter: nft_set_rbtree: Add missing expired checks (Phil Sutter) [task:179882]
  - EDAC/thunderx: Fix possible out-of-bounds string access (Arnd Bergmann) [task:200669] {CVE-2023-52464}
  - blk-mq: fix IO hang from sbitmap wakeup race (Ming Lei)
  - nvmet-tcp: fix a crash in nvmet_req_complete() (Maurizio Lombardi) {CVE-2023-6536}
  - x86, sched: Treat Intel SNC topology as default, COD as exception (Alison Schofield)
  - Makefile: add mips and loongarch SRCARCH (Li ZhiGang) [task:199827]
  - security/ima&evm: change default hash algorithm to sha256 (liuqi) [task:192131]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.7.v2401
changelog:
  - release 4.19.90-89.7.v2401 (Zhengyuan Liu)
  - Module.kabi: update Module.kabi based on the new whitelist for loongarch64 (jianghaoran) [task:209184]
  - scripts: Add support for loongarch64 in update-kabilist.sh (jianghaoran) [task:209184]
  - kabi: re-update kabi symvers (Zhengyuan Liu)
  - fs/pipe: dont need wake up self in a single process of ub (huangbing) [bug:217416]
  - scripts/cve-cal.sh: add a script to calculate cve and task (Zhengyuan Liu)
  - spec: enable kabi check (Zhengyuan Liu)
  - kabi: update kabi list and symvers (Zhengyuan Liu)
  - update-kabilist.sh: remove the item from kabi list if not existed in Module.symvers (Zhengyuan Liu)
  - compile-and-chkabi.sh: update check-kabi path (Zhengyuan Liu)
  - fs: remove fget_many and fput_many interface (Gou Hao) [bug:217407]
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian) [task:207228] {CVE-2023-52566}
  - security/kysec: fix k tag java hung_task_timeout_secs (mengdehui) [bug:218233]
  - nvme-tcp: can't set sk_user_data without write_lock (Maurizio Lombardi) [task:206926]
  - nvmet-tcp: fix incorrect locking in state_change sk callback (Sagi Grimberg) [task:206926] {CVE-2021-47041}
  - nvme-loop: fix memory leak in nvme_loop_create_ctrl() (Wu Bo) [task:206937] {CVE-2021-47074}
  - nvme-loop: don't put ctrl on nvme_init_ctrl error (Chaitanya Kulkarni) [task:206937]
  - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (Sean Christopherson) [task:206928] {CVE-2021-47061}
  - KVM: use struct_size() and flex_array_size() helpers in kvm_io_bus_unregister_dev() (Rustam Kovhaev) [task:206928]
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso) [task:206383] {CVE-2024-26642}
  - llc: make llc_ui_sendmsg() more robust against bonding changes (Eric Dumazet) [task:206384] {CVE-2024-26636}
  - sched/topology: phytium platform add CLS sd (liwanwu) [task:202344]
  - sched: arm64 add cluster domain (huangbing) [task:202344]
  - sched: multi thread rw optimization (liwanwu) [task:202344]
  - fs/elf: Add loading elf sections helpers (liwanwu) [task:202344]
  - ring-buffer: Have saved event hold the entire event (Steven Rostedt (Google)) [task:205154]
  - ring-buffer: Do not attempt to read past "commit" (Steven Rostedt (Google)) [task:205154] {CVE-2023-52501}
  - ring-buffer: Have rb_iter_head_event() handle concurrent writer (Steven Rostedt (VMware)) [task:205154]
  - ring-buffer: Add page_stamp to iterator for synchronization (Steven Rostedt (VMware)) [task:205154]
  - ring-buffer: Have ring_buffer_empty() not depend on tracing stopped (Steven Rostedt (VMware)) [task:205154]
  - ax25: Fix ax25 session cleanup problems (Duoming Zhou) [task:203789]
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value (Cyril Hrubis) [task:205110]
  - sched/rt: Disallow writing invalid values to sched_rt_period_us (Cyril Hrubis) [task:205110]
  - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset (Cyril Hrubis) [task:205110]
  - net: rds: acquire refcount on TCP sockets (Tetsuo Handa) [task:205876]
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Eric Dumazet) [task:205232] {CVE-2023-52502}
  - nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski) [task:205232]
  - drm: Don't unref the same fb many times by mistake due to deadlock handling (Ville Syrjälä) [task:205231] {CVE-2023-52486}
  - ipv6: init the accept_queue's spinlocks in inet6_create (Zhengchao Shao) [task:205163]
  - tcp: make sure init the accept_queue's spinlocks once (Zhengchao Shao) [task:205163] {CVE-2024-26614}
  - l2tp: pass correct message length to ip6_append_data (Tom Parkin) [task:205227]
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells) [task:205227] {CVE-2023-52527}
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu) [task:205220] {CVE-2023-52510}
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Wen Gu) [task:205222] {CVE-2024-26615}
  - net: fix possible store tearing in neigh_periodic_work() (Eric Dumazet) [task:205221] {CVE-2023-52522}
  - neigh: make sure used and confirmed times are valid (Julian Anastasov) [task:205221]
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida) [task:205218] {CVE-2023-52528}
  - net: nfc: llcp: Add lock when modifying device list (Jeremy Cline) [task:205036] {CVE-2023-52524}
  - nfc: nci: assert requested protocol is valid (Jeremy Cline) [task:205032] {CVE-2023-52507}
  - Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco) [task:204918] {CVE-2023-52475}
  - llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima) [task:204916] {CVE-2024-26635}
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (Eric Dumazet) [task:204917] {CVE-2024-26633}
  - tomoyo: fix UAF write bug in tomoyo_write_control() (Tetsuo Handa) [task:205063] {CVE-2024-26622}
  - KYLIN/arm64: Add `model name` show for HISI_TSV200 (Youling Tang) [bug:217118]
  - arm64/config: CONFIG_IP_DCCP=m (lingfuyi) [bug:217102]
  - net/core: check length before updating Ethertype in skb_mpls_{push,pop} (Guillaume Nault) [task:200588]
  - net: Fixed updating of ethertype in skb_mpls_push() (Martin Varghese) [task:200588]
  - Fixed updating of ethertype in function skb_mpls_pop (Martin Varghese) [task:200588]
  - net/sched: fix corrupted L2 header with MPLS 'push' and 'pop' actions (Davide Caratti) [task:200588]
  - net: openvswitch: ensure LSE is pullable before reading it (Davide Caratti) [task:200588]
  - net: openvswitch: limit the number of recursions from action sets (Aaron Conole) [task:200588] {CVE-2024-1151}
  - Change in Openvswitch to support MPLS label depth of 3 in ingress direction (Martin Varghese) [task:200588]
  - net: core: add MPLS update core helper and use in OvS (John Hurley) [task:200588]
  - net: core: move pop MPLS functionality from OvS to core helper (John Hurley) [task:200588]
  - net: core: move push MPLS functionality from OvS to core helper (John Hurley) [task:200588]
  - tty: n_gsm: check error while registering tty devices (Hillf Danton)
  - tty: n_gsm: add helpers to convert mux-num to/from tty-base (Martin Hundebøll)
  - USB: gadget: dummy-hcd: Fix errors in port-reset handling (Alan Stern)
  - bfs: extra sanity checking and static inode bitmap (Tigran Aivazian)
  - USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug (Alan Stern)
  - i2c: cadence: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201795] {CVE-2020-36784}
  - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao) [task:201797] {CVE-2020-36783}
  - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [task:203086]
  - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [task:203086] {CVE-2024-26627}
  - Revert "ARM64/cpuinfo: Fix ft5000c cpu information display issue" (zhanggenjian) [task:177455, bug:210941]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.8.v2401
changelog:
  - Revert "EULER: LoongArch: kvm: fix bug of kvm's hugepage" (Enze Li) [bug:220929, bug:220376]
  - Revert "EULER: LoongArch: KVM: fix vcpu timer functions" (Enze Li) [bug:220929, bug:220376]
  - efi/arm: Show SMBIOS bank/device location in CPER and GHES error logs (Marcin Benka) [bug:218049]
  - ACPI: tables: Simplify PPTT leaf node detection (Jeremy Linton) [task:207620]
  - fs/pipe: don't wakeup self like unixbech pipe, but can epoll and SIGIO (Bing Huang) [task:209335]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.9.v2401
changelog:
  - fs/pipe: recognize write first read last sequence (Bing Huang) [bug:217416]
  - OPENEULER: mm: fix oom killing for disabled pid (Jing Xiangfeng) [task:210376]
  - LoongArch:adjust the calc method of number of packages. (wanghongliang) [task:209781]
  - LoongArch:irqchip/loongarch-extioi:Fix ext irq route error. (wanghongliang) [task:209781]
  - cpufreq: loongson3-acpi: Initialize the value of policy->cur (mengyingkun) [task:209781]
  - ipmi: ls2k500 kcs ipmi add nolock version support. (Chong Qiao) [task:209781]
  - loongarch/kvm: Fixed a huge page leak on a virtual machine (xianglai li) [task:209781]
  - irqchip/loongarch-extioi: Fix ext irq route fail when some cpus offline (Juxin Gao) [task:209781]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.10.v2401
changelog:
  - crypto/ceu: update phytium ceu driver code (zhubing) [task:209505]
  - security/kysec: fix tcm function name error (huanfuxi) [bug:220431]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.11.v2401
changelog:
  - Revert "fs/pipe: dont need wake up self in a single process of ub" (liyouhong) [bug:223670]
  - Revert "fs/pipe: don't wakeup self like unixbech pipe, but can epoll and SIGIO" (liyouhong) [bug:223670]
  - Revert "OPENEULER: mm: fix oom killing for disabled pid" (liyouhong) [bug:223670]
  - Revert "fs/pipe: recognize write first read last sequence" (liyouhong) [bug:223670]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.12.v2401
changelog:
  - sched: Lack CONFIG_CGROUP_SCHED in smart grid function. (gonglinkai) [task:210377]
  - sched: Modify KABI issue (gonglinkai) [task:210377]
  - sched: smart grid function switch (gonglinkai) [task:210377]
  - sched: Add smart grid function (gonglinkai) [task:210377]
  - sched: affinity function switch (gonglinkai) [task:210377]
  - sched:Add the affinity function (gonglinkai) [task:210377]
  - sched: disabled sysctl_sched_optimize_enabled by default (liwanwu) [task:217846]
  - arm64/config: enable CONFIG_SCHED_CLUSTER=y in the biv configuration file (Peng Can) [task:221113]
  - iavf: free q_vectors before queues in iavf_disable_vf (Nicholas Nunley) [task:212529] {CVE-2021-47201}
  - OPENEULER: iomap: add support to track dirty state of sub pages (Shida Zhang) [task:192649]
  - sched/fair: Use candidate prev/recent_used CPU if scanning failed for cluster wakeup (Yicong Yang) [task:206766]
  - sched/fair: Scan cluster before scanning LLC in wake-up path (Barry Song) [task:206766]
  - sched: Add cpus_share_resources API (Barry Song) [task:206766]
  - arch_topology: Make cluster topology span at least SMT CPUs (Yicong Yang) [task:206766]
  - arch_topology: Limit span of cpu_clustergroup_mask() (Ionela Voinescu) [task:206766]
  - topology/sysfs: export cluster attributes only if an architectures has support (Heiko Carstens) [task:206766]
  - sched/topology: Introduce sched_group::flags (Ricardo Neri) [task:206766]
  - sched/topology, arch/arm64: Rebuild the sched_domain hierarchy when the CPU capacity changes (Morten Rasmussen) [task:206766]
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Kunwu Chan) [task:207382] {CVE-2023-52607}
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Duoming Zhou) [task:209227, task:214895] {CVE-2024-26654}
  - mm/swap: fix race when skipping swapcache (Kairui Song) [task:210472] {CVE-2024-26759}
  - vxlan: do not destroy fdb if register_netdevice() is failed (Taehee Yoo) [task:210575]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.14.v2401
changelog:
  - scsi: core: don't preallocate small SGL in case of NO_SG_CHAIN (Ming Lei) [task:227191]
  - scsi: lib/sg_pool.c: clear 'first_chunk' in case of no preallocation (Ming Lei) [task:227191]
  - scsi: s390: zfcp_fc: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: zfcp: move SG table helper from aux to fc and make them static (Steffen Maier) [task:227191]
  - scsi: mvumi: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: mvumi: switch to generic DMA API (Christoph Hellwig) [task:227191]
  - scsi: NCR5380: use sg helper to iterate over scatterlist (Finn Thain) [task:227191]
  - scsi: wd33c93: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: ppa: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: pcmcia: nsp_cs: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: imm: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: aha152x: use sg helper to iterate over scatterlist (Finn Thain) [task:227191]
  - scsi: staging: unisys: visorhba: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: usb: image: microtek: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: pmcraid: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: ipr: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: advansys: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: vmw_pvscsi: Use true, false for adapter->use_msg (Jason Yan) [task:227191]
  - scsi: vmw_pvscsi: Silence dma mapping errors (Thomas Hellstrom) [task:227191]
  - scsi: vmw_pvscsi: Fix swiotlb operation (Thomas Hellstrom) [task:227191]
  - scsi: vmw_pscsi: use sg helper to iterate over scatterlist (Ming Lei) [task:227191]
  - scsi: vmw_pscsi: switch to generic DMA API (Christoph Hellwig) [task:227191]
  - security/kysec: fix image sign err (penghuaihe) [task:226800]
  - security/ima: allow the root user to read the current policy rules (huanfuxi) [bug:221830]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.15.v2401
changelog:
  - virtio_net: Add XDP frame size in two code paths (Jesper Dangaard Brouer) [task:335781]
  - virtio-net: Add validation for used length (Xie Yongji) [task:221959] {CVE-2021-47352}
  - KVM: x86: Move IA32_XSS-swapping on VM-entry/VM-exit to common x86 code (Aaron Lewis) [task:215599]
  - KVM: x86: Introduce vcpu->arch.xsaves_enabled (Aaron Lewis) [task:215599]
  - kvm: svm: Update svm_xsaves_supported (Aaron Lewis) [task:215599]
  - KVM: x86: Expose XSAVEERPTR to the guest (Sebastian Andrzej Siewior) [task:215599]
  - kvm: x86: Enumerate support for CLZERO instruction (Jim Mattson) [task:215599]
  - kvm: x86: Move IA32_XSS to kvm_{get,set}_msr_common (Aaron Lewis) [task:215599]
  - KVM: x86: Add CPUID support for new instruction WBNOINVD (Robert Hoo) [task:215599]
  - memblock,arm64: expand the static memblock memory table (Zhou Guanghui) [task:331741]
  - LoongArch: Fixup INIT_MEMBLOCK_RESERVED_REGIONS for loongarch (Jun Yi) [task:331741]
  - loongson: pci/quirks: LS7A2000 enble msi (wusheng) [task:331741]
  - LoongArch: Add irq_work support via self IPIs (Yanteng Si) [task:331741]
  - LoongArch: kdump: fix huge memory machine trigger capture kernel failure (Ming Wang) [task:331741]
  - sizes.h: Add entries between SZ_32G and SZ_64T (Matt Coster) [task:331741]
  - sizes.h: Add SZ_1T macro (Christophe Leroy) [task:331741]
  - sizes.h: add SZ_8G/SZ_16G/SZ_32G macros (Huang Shijie) [task:331741]
  - x86/kdump/64: Restrict kdump kernel reservation to <64TB (Baoquan He) [task:331741]
  - x86/kdump: Have crashkernel=X reserve under 4G by default (Dave Young) [task:331741]
  - loongson: spi: fix repeated kfree() (zhaoqunqin) [task:331741]
  - loongson: cpufreq: loongson3-acpi: Fixed the error of assigning the value of Mhz to Khz (Juxin Gao) [task:331741]
  - loongson: pic: update interrupt registration policy (wanghongliang) [task:331741]
  - LoongArch: Fix kernel boot failure with CONFIG_KASAN (Tiezhu Yang) [task:331741]
  - LoongArch: Implement constant timer shutdown interface (Bibo Mao) [task:331741]
  - udp_tunnel: add the ability to hard-code IANA VXLAN (Jakub Kicinski) [task:334943]
  - netfilter: ctnetlink: Fix regression in conntrack entry deletion (Felix Kaechele) [bug:233722]
  - nfp: flower: fix cb_ident duplicate in indirect block register (John Hurley) [task:240857]
  - flow_offload: fix block stats (John Hurley) [task:240857]
  - flow_offload: add statistics retrieval infrastructure and use it (Pablo Neira Ayuso) [bug:240857]
  - net_sched: fold tcf_block_cb_call() into tc_setup_cb_call() (Cong Wang) [bug:240857]
  - net/sched: Remove egdev mechanism (Oz Shlomo) [bug:240857]
  - nfp: flower: remove TC egdev offloads (John Hurley) [bug:240857]
  - nfp: flower: offload tunnel decap rules via indirect TC blocks (John Hurley) [bug:240857]
  - nfp: flower: increase scope of netdev checking functions (John Hurley) [bug:240857]
  - nfp: flower: include geneve as supported offload tunnel type (John Hurley) [bug:240857]
  - nfp: flower: use the common netdev notifier (Jakub Kicinski) [bug:240857]
  - Revert "kbuild: do not create orphan built-in.a or obj-y objects" (taowei) [bug:240857]
  - drm/virtio: fix memory leak of vbuf (liweishi) [task:205462]
  - net: annotate data-race in neigh_output() (Eric Dumazet) [task:205566]
  - mm/swap: Do not abuse the seqcount_t latching API (Ahmed S. Darwish) [task:222964]
  - mm/swap.c: piggyback lru_add_drain_all() calls (Konstantin Khlebnikov) [task:222964]
  - HYGON/ANOLIS: mm: hugetlb: Remove flag __GFP_THISNODE to avoid failures (huhai) [task:222964]
  - HYGON/ANOLIS: x86: kvm: Don't hypercall to enc all usable RAM on CSV platform (yangwencheng) [task:224804]
  - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (Sean Christopherson) [task:224804]
  - kvm: fix wrong exception emulation in check_rdtsc (Hou Wenlong) [task:224804]
  - KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception (Sean Christopherson) [task:224804]
  - KVM: x86: avoid loading a vCPU after .vm_destroy was called (Maxim Levitsky) [task:224804]
  - KVM: Move wiping of the kvm->vcpus array to common code (Marc Zyngier) [task:224804]
  - KVM: SVM: fix panic on out-of-bounds guest IRQ (Yi Wang) [task:224804]
  - crypto: ccp - Failure on re-initialization due to duplicate sysfs filename (Koba Ko) [task:224804]
  - crypto: ccp - Release dma channels before dmaengine unrgister (Koba Ko) [task:224804]
  - KVM: SVM: Zero out GDTR.base and IDTR.base on INIT (Sean Christopherson) [task:224804]
  - KVM: x86: Properly reset MMU context at vCPU RESET/INIT (Sean Christopherson) [task:224804]
  - x86/ioremap: Map EFI-reserved memory as encrypted for SEV (Tom Lendacky) [task:224804]
  - x86/ioremap: Fix CONFIG_EFI=n build (Borislav Petkov) [task:224804]
  - x86/ioremap: Map EFI runtime services data as encrypted for SEV (Tom Lendacky) [task:224804]
  - kvm: svm: de-allocate svm_cpu_data for all cpus in svm_cpu_uninit() (Jacob Xu) [task:224804]
  - efi/x86: Add RNG seed EFI table to unencrypted mapping check (Tom Lendacky) [task:224804]
  - drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [task:224804]
  - x86/crash: Add e820 reserved ranges to kdump kernel's e820 table (Lianbo Jiang) [task:224804]
  - x86/mm: Rework ioremap resource mapping determination (Lianbo Jiang) [task:224804]
  - x86/e820, ioport: Add a new I/O resource descriptor IORES_DESC_RESERVED (Lianbo Jiang) [task:224804]
  - x86/mm: Create a workarea in the kernel for SME early encryption (Thomas Lendacky) [task:224804]
  - HYGON/ANOLIS: arch: x86: mm: support to dec and enc userspace pages (yangwencheng) [task:224804]
  - HYGON/ANOLIS: arch: x86: mm: merge continuous pages into a large range when notifying range enc status changes (eastmoutain) [task:224804]
  - HYGON: kvm/svm/csv: add ioctl API to unpin CSV shared pages (yangwencheng) [task:224804]
  - HYGON: arch/x86/kvm/csv: manage shared pages with rbtree (yangwencheng) [task:224804]
  - HYGON: arch/x86/kvm/csv: assign PFN as HPA for guest mmio GPA's NPT mapping (yangwencheng) [task:224804]
  - HYGON/ANOLIS: crypto: ccp: Check X86_VENDOR_HYGON before CSV3 memory initialization (Xin Jiang) [task:224804]
  - mm: remove lru_add_drain_all in alloc_contig_range (Minchan Kim) [task:224804]
  - HYGON: crypto: ccp: Make the allocation/free code for CSV RING BUFFER queues more readable (hanliyang) [task:224804]
  - KVM: x86: Fix KVM_GET_MSRS stack info leak (Mathias Krause) [task:224804]
  - KVM: clean up the unused argument (Haiwei Li) [task:224804]
  - KVM: x86: use positive error values for msr emulation that causes #GP (Maxim Levitsky) [task:224804]
  - HYGON/ANOLIS: KVM: SVM: Add support for different CSV guests to reuse the same ASID (hanliyang) [task:224804]
  - HYGON/ANOLIS: driver/virt/coco: Only load CSV Guest dirver in CSV guest VM. (hanliyang) [task:224804]
  - HYGON/ANOLIS: driver/virt/coco: Add HYGON CSV Guest dirver. (fangbaoshun) [task:224804]
  - HYGON: newfeature: ccp: ccp-crypto support sm2 on Hygon generation 4th CPU (yangdepei) [task:224804]
  - HYGON: HCT: update hct module to support hct2.0 (yangdepei) [task:224804]
  - Revert "sched: Fix sched_fork() access an invalid sched_task_group" (Bing Huang) [task:224985]
  - xfs: cap longest free extent to maximum allocatable (Dave Chinner) [task:328072]
  - io_uring: drop any code related to SCM_RIGHTS (Jens Axboe) [task:225582] {CVE-2023-52656}
  - svm: Fix compile warning (Zhang Hao) [task:328880]
  - LoongArch: Fixed the virtual block after a long time. (cuitao) [task:333556]
  - Revert "LoongArch:LSVZ: set timer offset at first time once" (lifangxu) [task:331741]
  - atl1c: fix tx timeout after link flap on Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: Work around the DMA RX overflow issue (Sieng-Piaw Liew) [task:222007] {CVE-2023-52834}
  - atl1c: add 4 RX/TX queue support for Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: detect NIC type early (Gatis Peisenieks) [task:222007]
  - atl1c: show correct link speed on Mikrotik 10/25G NIC (Gatis Peisenieks) [task:222007]
  - atl1c: remove redundant assignment to variable tpd_req (Colin Ian King) [task:222007]
  - net/atheros: Clean atheros code from driver version (Leon Romanovsky) [task:222007]
  - atl1c: improve performance by avoiding unnecessary pcie writes on xmit (Gatis Peisenieks) [task:222007]
  - net: core: add __netdev_sent_queue as variant of __netdev_tx_sent_queue (Heiner Kallweit) [task:222007]
  - atl1c: prepare for multiple rx queues (Gatis Peisenieks) [task:222007]
  - atl1c: move tx napi into tpd_ring (Gatis Peisenieks) [task:222007]
  - atl1c: move tx cleanup processing out of interrupt (Gatis Peisenieks) [task:222007]
  - net: export dev_set_threaded symbol (Lorenzo Bianconi) [task:222007]
  - atl1c: switch to napi_gro_receive (Sieng Piaw Liew) [task:222007]
  - atl1c: use napi_alloc_skb (Sieng Piaw Liew) [task:222007]
  - inet: inet_defrag: prevent sk release while still in use (Florian Westphal) [task:213813] {CVE-2024-26921}
  - inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [task:213813]
  - skb_expand_head() adjust skb->truesize incorrectly (Vasily Averin) [task:213813]
  - skbuff: introduce skb_expand_head() (Vasily Averin) [task:213813]
  - scsi: core: Increase max device queue_depth to 20480 (zhanggenjian) [task:332943]
  - scsi: megaraid: Clear READ queue map's nr_queues (Ming Lei) [task:332943]
  - scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real interrupt (Sumit Saxena) [task:332943]
  - scsi: megaraid_sas: mq_poll support (Kashyap Desai) [task:332943]
  - scsi: core: Add mq_poll support to SCSI layer (Kashyap Desai) [task:332943]
  - sched/fair: Fix wrong cpu selecting from isolated domain (Bing Huang) [bug:225308]
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima) [task:216629]
  - ARM: 9170/1: fix panic when kasan and kprobe are enabled (sparkhuang) [task:330279] {CVE-2021-47618}
  - cifs: fix underflow in parse_server_interfaces() (Dan Carpenter) [task:214157] {CVE-2024-26828}
  - af_unix: Fix garbage collector racing against connect() (Michal Luczaj) [task:216629] {CVE-2024-26923}
  - af_unix: Do not use atomic ops for unix_sk(sk)->inflight. (Kuniyuki Iwashima) [task:216629]
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Daniel Starke) [task:224203] {CVE-2024-36016}
  - um: Add winch to winch_handlers before registering winch IRQ (Roberto Sassu) {CVE-2024-39292}
  - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Shigeru Yoshida) [task:328474] {CVE-2024-36903}
  - net: fix __dst_negative_advice() race (Eric Dumazet) [task:328468] {CVE-2024-36971}
  - net: annotate data-races around sk->sk_dst_pending_confirm (Eric Dumazet) [task:328468]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.16.v2401
changelog:
  - scsi: smartpqi: Change driver version to 2.1.24-046 (Don Brace) [bug:245145]
  - scsi: smartpqi: Enhance error messages (Mahesh Rajashekhara) [bug:245145]
  - scsi: smartpqi: Enhance controller offline notification (David Strahan) [bug:245145]
  - scsi: smartpqi: Enhance shutdown notification (David Strahan) [bug:245145]
  - scsi: smartpqi: Simplify lun_number assignment (David Strahan) [bug:245145]
  - scsi: smartpqi: Rename pciinfo to pci_info (Kevin Barnett) [bug:245145]
  - scsi: smartpqi: Rename MACRO to clarify purpose (Kevin Barnett) [bug:245145]
  - scsi: smartpqi: Add abort handler (Kevin Barnett) [bug:245145]
  - scsi: smartpqi: Replace one-element arrays with flexible-array members (Gustavo A. R. Silva) [bug:245145]
  - scsi: smartpqi: Replace all non-returning strlcpy() with strscpy() (Azeem Shaikh) [bug:245145]
  - scsi: smartpqi: Update version to 2.1.22-040 (Don Brace) [bug:245145]
  - scsi: smartpqi: Update copyright to 2023 (Don Brace) [bug:245145]
  - scsi: smartpqi: Add sysfs entry for NUMA node in /sys/block/sdX/device (Don Brace) [bug:245145]
  - scsi: smartpqi: Stop sending driver-initiated TURs (Kevin Barnett) [bug:245145]
  - scsi: smartpqi: Add support for RAID NCQ priority (Gilbert Wu) [bug:245145]
  - scsi: smartpqi: Validate block layer host tag (Murthy Bhat) [bug:245145]
  - scsi: smartpqi: Remove contention for raid_bypass_cnt (Mike McGowen) [bug:245145]
  - scsi: smartpqi: Fix rare SAS transport memory leak (Don Brace) [bug:245145]
  - scsi: smartpqi: Remove NULL pointer check (Kevin Barnett) [bug:245145]
  - scsi: smartpqi: Add new controller PCI IDs (David Strahan) [bug:245145]
  - scsi: smartpqi: Map full length of PCI BAR 0 (Mike McGowen) [bug:245145]
  - tracing: Fix race issue between cpu buffer write and swap (Zheng Yejian)
  - kylin/gmjstcm: fix compilation warning (Li Jun) [task:352591, task:357223]
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Tetsuo Handa) [task:347077] {CVE-2024-41063}
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (David Ruth) [task:344573] {CVE-2024-40995}
  - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Li Qiang) [task:357923]
  - fix a USB crash issue for s5000c with x100 (huhai) [task:355097]
  - fix some compilation warnings (Jiangshan Yi) [task:357223]
  - overflow: Add __must_check attribute to check_*() helpers (Kees Cook) [task:357223]
  - net/mlx5: Add a blank line after declarations (Wenpeng Liang) [task:357223]
  - ext4: remove the special buffer dirty handling in do_journal_get_write_access (Shida Zhang) [task:345663]
  - ext4: fix a potential assertion failure due to improperly dirtied buffer (Shida Zhang) [task:345663]
  - ext4: hoist ext4_block_write_begin and replace the __block_write_begin (Shida Zhang) [task:345663]
  - ext4: persist the new uptodate buffers in ext4_journalled_zero_new_buffers (Shida Zhang) [task:345663]
  - drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update (Srinivasan Shanmugam) [task:352661] {CVE-2024-43903}
  - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules (Ma Jun) [task:352181] {CVE-2024-43907}
  - netlink: convert nlk->flags to atomic flags (Eric Dumazet) [task:345975]
  - x86: stop playing stack games in profile_pc() (Linus Torvalds) [task:347039] {CVE-2024-42096}
  - NFSD: Fix ia_size underflow (Chuck Lever) [task:347049] {CVE-2022-48828}
  - f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC (Chao Yu) [task:352651] {CVE-2024-44942}
  - null_blk: fix validation of block size (Andreas Hindborg) [task:347007] {CVE-2024-41077}
  - wifi: virt_wifi: don't use strlen() in const context (Johannes Berg) [task:352217]
  - wifi: virt_wifi: avoid reporting connection success with wrong SSID (En-Wei Wu) [task:352217] {CVE-2024-43841}
  - virt_wifi: fix error on connect (Matteo Croce) [task:352217]
  - virt_wifi: Return micros for BSS TSF values (A. Cody Schuffelen) [task:352217]
  - virt_wifi: implement ndo_get_iflink (Taehee Yoo) [task:352217]
  - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (Dave Jiang) [task:346975] {CVE-2024-42110}
  - io_uring/io-wq: Use set_bit() and test_bit() at worker->flags (Breno Leitao) [task:347145] {CVE-2024-39508}
  - USB: serial: mos7840: fix crash on resume (Dmitry Smirnov) [task:347175] {CVE-2024-42244}
  - fpga: region: fix compilation error for commit 7dd30f1e070 (limiao) [task:354605]
  - LSM: lsm_hooks.h - fix missing colon in docstring (Ondrej Mosnacek) [bug:258835]
  - kernfs: fix xattr name handling in LSM helpers (Ondrej Mosnacek) [bug:258835]
  - kernfs: initialize security of newly created nodes (Ondrej Mosnacek) [bug:258835]
  - selinux: implement the kernfs_init_security hook (Ondrej Mosnacek) [bug:258835]
  - LSM: add new hook for kernfs node initialization (Ondrej Mosnacek) [bug:258835]
  - kernfs: use simple_xattrs for security attributes (Ondrej Mosnacek) [bug:258835]
  - selinux: try security xattr after genfs for kernfs filesystems (Ondrej Mosnacek) [bug:258835]
  - kernfs: do not alloc iattrs in kernfs_xattr_get (Ondrej Mosnacek) [bug:258835]
  - kernfs: clean up struct kernfs_iattrs (Ondrej Mosnacek) [bug:258835]
  - support compile packages on v7 system (Haoran Jiang) [task:242034]
  - resolve compilation errors on v7 systems (Haoran Jiang) [task:242034]
  - add change boot vga device support (Shixiong Ou) [task:347429]
  - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Kenton Groombridge) [task:346919] {CVE-2024-41071}
  - s390/pkey: Wipe copies of clear-key structures on failure (Holger Dengler) [task:345319] {CVE-2024-42156}
  - ipv6: sr: fix missing sk_buff release in seg6_input_core (Andrea Mayer) [task:347171] {CVE-2024-39490}
  - fbdev: ls2k500sfb fix default video memory size. (Chong Qiao) [task:353249]
  - acpi: mcfg quirk: Increased multi-chip support for the 3C6000, now capable of supporting up to eight chips. (zhenghaowei) [task:353249]
  - irqchip: irq-loongson-pch-msi: Use pch_msi_priv[0] as the default value (zhangtianyang) [task:353249]
  - fbdev: ls2k500sfb update var info according to resolution. (Chong Qiao) [task:353249]
  - filelock: Remove locks reliably when fcntl/close race is detected (Jann Horn) [task:346931] {CVE-2024-41012}
  - btrfs: get rid of warning on transaction commit when using flushoncommit (Filipe Manana) [task:351471] {CVE-2022-48920}
  - f2fs: fix return value of f2fs_convert_inline_inode() (Chao Yu) [task:352015] {CVE-2024-42296}
  - f2fs: fix to consider multiple device for readonly check (Chao Yu) [task:352015]
  - scsi: qla2xxx: validate nvme_local_port correctly (Nilesh Javali) [task:354889] {CVE-2024-42286}
  - xdp: Remove WARN() from __xdp_reg_mem_model() (Daniil Dulov) [task:345323] {CVE-2024-42082}
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Daniel Borkmann) [task:347029] {CVE-2024-42246}
  - crypto: aead,cipher - zeroize key buffer after use (Hailey Mothershead) [task:346415] {CVE-2024-42229}
  - crypto: ecdh - explicitly zeroize private_key (Joachim Vandersmissen) [task:345795] {CVE-2024-42098}
  - gpio: fix compile error (zhouyuhang) [task:347327]
  - nvme: avoid double free special payload (Chunguang Xu) [task:347137] {CVE-2024-41073}
  - ASoC: topology: Fix references to freed memory (Amadeusz Sławiński) [task:346623] {CVE-2024-41069}
  - ila: block BH in ila_output() (Eric Dumazet) [task:346669] {CVE-2024-41081}
  - serial: imx: Introduce timeout when waiting on transmitter empty (Esben Haabendal) [task:345715] {CVE-2024-40967}
  - fou: remove warn in gue_gro_receive on unsupported protocol (Willem de Bruijn) [task:352275] {CVE-2024-44940}
  - media: venus: fix use after free in vdec_close (Dikshita Agarwal) [task:352227] {CVE-2024-42313}
  - dev/parport: fix the array out-of-bounds risk (tuhaowen) [task:352211] {CVE-2024-42301}
  - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Pavel Tikhomirov) [task:221965] {CVE-2024-35839}
  - netfilter: propagate net to nf_bridge_get_physindev (Pavel Tikhomirov) [task:221965]
  - netfilter: nfnetlink_log: use proper helper for fetching physinif (Pavel Tikhomirov) [task:221965]
  - neighbour: annotate lockless accesses to n->nud_state (Eric Dumazet) [task:221965]
  - bpf: bpf_fib_lookup should not return neigh in NUD_FAILED state (Martin KaFai Lau) [task:221965]
  - bpf: Handle ipv6 gateway in bpf_ipv4_fib_lookup (David Ahern) [task:221965]
  - driver core: Fix uevent_show() vs driver detach race (Dan Williams) [task:345303]
  - drivers: core: synchronize really_probe() and dev_uevent() (Dirk Behme) [task:345303] {CVE-2024-39501}
  - security/selinux: Fix SELinux crash issue when disabling stack (chengang) [task:338969]
  - security/selinux: Fix box compile errors when stack disabled (chengang) [task:338969]
  - ipvs: properly dereference pe in ip_vs_add_service (Chen Hanxiao) [task:352245] {CVE-2024-42322}
  - nilfs2: fix kernel bug on rename operation of broken directory (Ryusuke Konishi) [task:347001] {CVE-2024-41034}
  - ceph: prevent use-after-free in encode_cap_msg() (Rishabh Dave) [task:210332] {CVE-2024-26689}
  - kvm: s390: Reject memory region operations for ucontrol VMs (Christoph Schlameuss) [task:352663] {CVE-2024-43819}
  - ice: Don't process extts if PTP is disabled (Jacob Keller) [task:346995] {CVE-2024-42107}
  - closures: Change BUG_ON() to WARN_ON() (Kent Overstreet) [task:345719] {CVE-2024-42252}
  - drm/nouveau: prime: fix refcount underflow (Danilo Krummrich) [task:351447] {CVE-2024-43867}
  - pswiotlb: Fix logical error in setup_p_io_tlb_npages (Jiangshan Yi) [task:353533]
  - Bluetooth: Fix usage of __hci_cmd_sync_status (Luiz Augusto von Dentz) [task:346425]
  - Bluetooth: L2CAP: Fix deadlock (Luiz Augusto von Dentz) [task:346425]
  - Bluetooth: hci_sync: Fix Opcode prints in bt_dev_dbg/err (Marcel Ziswiler) [task:346425]
  - Bluetooth: Fix race condition in hci_cmd_sync_clear (Min Li) [task:346425]
  - Bluetooth: hci_sync: Fix not processing all entries on cmd_sync_work (Luiz Augusto von Dentz) [task:346425]
  - Bluetooth: Add helper for serialized HCI command execution (Marcel Holtmann) [task:346425]
  - Bluetooth: Add support hdev to allocate private data (Tedd Ho-Jeong An) [task:346425]
  - bluetooth/l2cap: sync sock recv cb and release (Edward Adam Davis) [task:346425] {CVE-2024-41062}
  - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Marc Kleine-Budde) [task:223130] {CVE-2023-52878}
  - btrfs: fix use-after-free after failure to create a snapshot (Filipe Manana) [task:330299] {CVE-2022-48733}
  - media: mediatek: vcodec: Handle invalid decoder vsi (Irui Wang) [task:352191] {CVE-2024-43831}
  - tracing: Fix overflow in get_free_elt() (Tze-nan Wu) [task:352671] {CVE-2024-43890}
  - md/dm-raid: don't call md_reap_sync_thread() directly (Yu Kuai) [task:221813] {CVE-2024-35808}
  - fpga: region: add owner module and take its refcount (Marco Pagani) [task:330557] {CVE-2024-35247}
  - f2fs: fix to don't dirty inode for readonly filesystem (Chao Yu) [task:352639] {CVE-2024-42297}
  - ext4: check dot and dotdot of dx_root before making dir indexed (Baokun Li) [task:352649] {CVE-2024-42305}
  - s390/pkey: Wipe copies of protected- and secure-keys (Holger Dengler) [task:346923] {CVE-2024-42155}
  - scsi: qla2xxx: Fix for possible memory corruption (Shreyas Deodhar) [task:352643] {CVE-2024-42288}
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (Alexey Kodanev) [task:352637] {CVE-2024-43839}
  - gpio: davinci: Validate the obtained number of IRQs (Aleksandr Mishin) [task:345785] {CVE-2024-42092}
  - PHYTIUM: drm/phytium: Add driver version information (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Add PWM backlight control for pe220x eDP (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Change the drm driver name for pe220x (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Add dc patch for BMC (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Modify driver to adapt to ARM and X86_64 compiles (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Mask the hdcp timer irq (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Mask the AUX reply error interrupt (YuDa) [task:346055]
  - PHYTIUM: drm/phytium: Adjust log printing level (WangHao) [task:346055]
  - PHYTIUM: drm/phytium: Replace default EFI fb0 with DC FB (WangHao) [task:346055]
  - PHYTIUM: drm/phytium: Fixed dp codec id (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Get edid audio capability (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Bugfix Xorg startup for ps23xx when using pe2201 bmc card (Wang Hao) [task:346055]
  - PHYTIUM: drm/phytium: Cursor hot support negative numbers (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Enable gamma features (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Add capability of tile mode (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Limit the TU to a maximum of 63 (Yang Xun) [task:346055]
  - PHYTIUM: drm/phytium: Sync patches from 4.19.y-dev oss branch (Wang Yinfeng) [task:346055]
  - Revert "drm/vc4: hdmi: Unregister codec device on unbind" (李豪杰) [task:344615, task:351057]
  - ext4: make sure the first directory block is not a hole (Baokun Li) [task:352077] {CVE-2024-42304}
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Shigeru Yoshida) [task:352297] {CVE-2024-42284}
  - leds: trigger: Unregister sysfs attributes before calling deactivate() (Hans de Goede) [task:352209] {CVE-2024-43830}
  - dma: fix call order in dmam_free_coherent (Lance Richardson) [task:352215] {CVE-2024-43856}
  - bpf: Fix a segment issue when downgrading gso_size (Fred Li) [task:352237] {CVE-2024-42281}
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Yu Kuai) [task:345683] {CVE-2024-39476}
  - nvme-fabrics: use reserved tag for reg read/write command (Chunguang Xu) [task:345283] {CVE-2024-41082}
  - drm/amd/display: Check for NULL pointer (Sung Joon Kim) [task:352265] {CVE-2024-42308}
  - drm/amd/display: Set flip pending for pipe split (Wesley Chalmers) [task:352265]
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (Ma Ke) [task:352277] {CVE-2024-42310}
  - serial: core: check uartclk for zero to avoid divide by zero (George Kennedy) [task:352289] {CVE-2024-43893}
  - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (Ma Ke) [task:352293] {CVE-2024-42309}
  - mISDN: Fix a use after free in hfcmulti_tx() (Dan Carpenter) [task:352165] {CVE-2024-42280}
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling (Yu Kuai) [task:352173] {CVE-2024-43914}
  - Bluetooth: MGMT: Add error handling to pair_device() (Griffin Kroah-Hartman) [task:352185] {CVE-2024-43884}
  - net/iucv: fix use after free in iucv_sock_close() (Alexandra Winter) [task:352285] {CVE-2024-42271}
  - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (Niklas Neronin) [task:346971] {CVE-2024-42226}
  - remoteproc: imx_rproc: Skip over memory region when node value is NULL (Aleksandr Mishin) [task:352177] {CVE-2024-43860}
  - remoteproc: imx_rproc: Fix ignoring mapping vdev regions (Dong Aisheng) [task:352177]
  - remoteproc: imx_rproc: ignore mapping vdev regions (Peng Fan) [task:352177]
  - scsi: qla2xxx: Complete command early within lock (Shreyas Deodhar) [task:352295] {CVE-2024-42287}
  - scsi: qla2xxx: During vport delete send async logout explicitly (Manish Rangankar) [task:352283] {CVE-2024-42289}
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (Chao Yu) [task:352271] {CVE-2024-42311}
  - jfs: fix null ptr deref in dtInsertEntry (Edward Adam Davis) [task:352249] {CVE-2024-44939}
  - filelock: Fix fcntl/close race recovery compat path (Jann Horn) [task:347167] {CVE-2024-41020}
  - file: Factor files_lookup_fd_locked out of fcheck_files (Eric W. Biederman) [task:347167]
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Bart Van Assche) [task:352669] {CVE-2024-42285}
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block() (Ryusuke Konishi) [task:352291] {CVE-2024-42295}
  - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Eric Dumazet) [task:347083] {CVE-2024-42114}
  - net: ax25: Fix a compilation error (xiaolinkui) [task:351959]
  - kobject_uevent: Fix OOB access within zap_modalias_env() (Zijun Hu) [task:352127] {CVE-2024-42292}
  - jfs: Fix shift-out-of-bounds in dbDiscardAG (Pei Li) [task:352157] {CVE-2024-44938}
  - bpf: Add enum support to btf_ctx_access() (Martin KaFai Lau) [task:351875]
  - ALSA: hda: Do not unset preset when cleaning up codec (Cezary Rojewski) [task:222115] {CVE-2023-52736}
  - leds: mlxreg: Use devm_mutex_init() for mutex initialization (George Stark) [task:345699] {CVE-2024-42129}
  - locking/mutex: Introduce devm_mutex_init() (George Stark) [task:345699] {CVE-2024-42129}
  - bpf: Fix overrunning reservations in ringbuf (Daniel Borkmann) [task:346969] {CVE-2024-41009}
  - exec: Fix ToCToU between perm check and set-uid/gid usage (Kees Cook) [task:351435] {CVE-2024-43882}
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Baochen Qiang) [task:351227] {CVE-2024-43879}
  - net: dsa: mv88e6xxx: fix use-after-free in mv88e6xxx_mdios_unregister (Vladimir Oltean) [task:346697]
  - net: dsa: mv88e6xxx: don't use devres for mdiobus (Vladimir Oltean) [task:346697] {CVE-2022-48818}
  - net: ipv6: ensure we call ipv6_mc_down() at most once (j.nixdorf@avm.de) [task:351441] {CVE-2022-48910}
  - ipv6/addrconf: use a boolean to choose between UNREGISTER/DOWN (Florent Fourcot) [task:351441]
  - ipv6/addrconf: call addrconf_ifdown with consistent values (Florent Fourcot) [task:351441]
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (Breno Leitao) [task:346411] {CVE-2024-40953}
  - drm/msm: another fix for the headless Adreno GPU (Dmitry Baryshkov) [task:351463] {CVE-2023-52911}
  - drm/msm: Make .remove and .shutdown HW shutdown consistent (Javier Martinez Canillas) [task:351463]
  - CDC-NCM: avoid overflow in sanity checking (Oliver Neukum) [task:351493] {CVE-2022-48938}
  - io_uring: add a schedule point in io_add_buffers() (Eric Dumazet) [task:351479] {CVE-2022-48937}
  - net: usb: qmi_wwan: fix memory leak for not ip packets (Daniele Palmas) [task:351501] {CVE-2024-43861}
  - drm/amd/display: Check pipe offset before setting vblank (Alex Hung) [task:345701] {CVE-2024-42120}
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (Zijun Hu) [task:351331] {CVE-2024-43871}
  - driver core: Cast to (void *) with __force for __percpu pointer (Andy Shevchenko) [task:351331]
  - usb: vhci-hcd: Do not drop references before new references are gained (Oliver Neukum) [task:351507] {CVE-2024-43883}
  - drm/radeon: check bo_va->bo is non-NULL before using it (Pierre-Eric Pelloux-Prayer) [task:346959] {CVE-2024-41060}
  - greybus: Fix use-after-free bug in gb_interface_release due to race condition. (Sicong Huang) [task:347127] {CVE-2024-39495}
  - ixgbe: fix pci device refcount leak (Yang Yingliang) [task:351021] {CVE-2022-48896}
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (Miri Korenblit) [task:346187] {CVE-2024-40929}
  - ocfs2: fix unexpected zeroing of virtual disk (Chi Zhiling) [task:335993]
  - net/sched: initialize noop_qdisc owner (Johannes Berg) [task:217588]
  - net/sched: fix kabi change in struct Qdisc (Zhengchao Shao) [task:217588] {CVE-2024-27010, CVE-2024-27010}
  - net/sched: Fix mirred deadlock on device recursion (Eric Dumazet) [task:217588] {CVE-2024-27010}
  - drop_monitor: replace spin_lock by raw_spin_lock (Wander Lairson Costa) [task:345791] {CVE-2024-40980}
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Pablo Neira Ayuso) [task:346667] {CVE-2024-42070}
  - nvmet: always initialize cqe.result (Daniel Wagner) [task:344611] {CVE-2024-41079}
  - ibmvnic: don't release napi in __ibmvnic_open() (Sukadev Bhattiprolu) [task:346945] {CVE-2022-48811}
  - powerpc/vnic: Extend "failover pending" window (Sukadev Bhattiprolu) [task:346945]
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (Breno Leitao) [task:344437] {CVE-2024-40901}
  - scsi: mpt3sas: Gracefully handle online firmware update (Suganath Prabu) [task:344437] {CVE-2024-40901}
  - scsi: mpt3sas: Add ioc_<level> logging macros (Joe Perches) [task:344437] {CVE-2024-40901}
  - f2fs: Add inline to f2fs_build_fault_attr() stub (Nathan Chancellor) [task:346823] {CVE-2024-42160}
  - f2fs: check validation of fault attrs in f2fs_build_fault_attr() (Chao Yu) [task:346823] {CVE-2024-42160}
  - MIPS: Octeron: remove source file executable bit (Dominique Martinet) [task:347107]
  - MIPS: Octeon: Add PCIe link status check (Songyang Li) [task:347107] {CVE-2024-40968}
  - spi: fix use-after-free of the add_lock mutex (Michael Walle) [task:221921]
  - spi: fix kabi breakage in struct spi_controller (lifangxu) [task:221921]
  - spi: Fix deadlock when adding SPI controllers on SPI buses (Mark Brown) [task:221921] {CVE-2021-47469}
  - KVM: x86/mmu: make apf token non-zero to fix bug (Liang Zhang) [task:351445] {CVE-2022-48943}
  - Revert "bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode" (yangfeng) [task:345763, task:351327]
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Jesse Zhang) [task:346955] {CVE-2024-42228}
  - RDMA/restrack: Fix potential invalid address access (Wenchao Hao) [task:345671] {CVE-2024-42080}
  - scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (John Garry) [task:346675] {CVE-2022-48792}
  - can: j1939: prevent deadlock by moving j1939_sk_errqueue() (Oleksij Rempel) [task:341503]
  - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new (Oleksij Rempel) [task:341503] {CVE-2023-52887}
  - can: j1939: extend UAPI to notify about RX status (Oleksij Rempel) [task:341503]
  - can: j1939: rename J1939_ERRQUEUE_* to J1939_ERRQUEUE_TX_* (Oleksij Rempel) [task:341503]
  - config: CONFIG_I2C_PHYTIUM_PLATFORM=m (zhouyuhang) [task:338015]
  - OPENEULER: i2c: add Phytium i2c driver (Jiakun Shuai) [task:338015]
  - Revert phytium i2c driver (zhouyuhang) [task:338015]
  - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [task:345299] {CVE-2024-39494}
  - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (Ferry Meng) [task:345115] {CVE-2024-41016}
  - ocfs2: add bounds checking to ocfs2_xattr_find_entry() (Ferry Meng) [task:345115] {CVE-2024-41016}
  - ftrace: Fix possible use-after-free issue in ftrace_location() (Zheng Yejian) [task:330288] {CVE-2024-38588}
  - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (Zheng Yejian) [task:330288]
  - smb: client: fix potential UAF in cifs_stats_proc_write() (Paulo Alcantara) [task:221999] {CVE-2024-35868}
  - smb: client: fix potential UAF in smb2_is_valid_oplock_break() (Paulo Alcantara) [task:221987] {CVE-2024-35865}
  - smb: client: fix potential UAF in is_valid_oplock_break() (Paulo Alcantara) [task:327836] {CVE-2024-35863}
  - scsi: pm8001: Fix use-after-free for aborted TMF sas_task (John Garry) [task:346413] {CVE-2022-48791}
  - scsi: pm80xx: Fix TMF task completion race condition (Igor Pylypiv) [task:346413] {CVE-2022-48791}
  - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD (Jose E. Marchesi) [task:345369] {CVE-2024-42161}
  - selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro (Andrii Nakryiko) [task:345369]
  - mmc: davinci: Don't strip remove function when driver is builtin (Uwe Kleine-König) [task:347147] {CVE-2024-39484}
  - mmc: davinci_mmc: Convert to platform remove callback returning void (Yangtao Li) [task:347147]
  - jffs2: Fix potential illegal address access in jffs2_free_inode (Wang Yong) [task:347055] {CVE-2024-42115}
  - media: dvb-frontends: tda10048: Fix integer overflow (Ricardo Ribalda) [task:347059] {CVE-2024-42223}
  - netrom: Fix a memory leak in nr_heartbeat_expiry() (Gavrilov Ilia) [task:347111] {CVE-2024-41006}
  - ext4: do not create EA inode under buffer lock (Jan Kara) [task:347085] {CVE-2024-40972}
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Jan Kara) [task:347085]
  - ext4: check the return value of ext4_xattr_inode_dec_ref() (Li Zhong) [task:347085]
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (Hagar Hemdan) [task:347093] {CVE-2024-42090}
  - usb: usbtmc: Fix bug in pipe direction for control transfers (Alan Stern) [task:347095] {CVE-2022-48834}
  - usb: usbtmc: Fix memory leak in usbtmc_ioctl_request (Guido Kiener) [task:347095]
  - usb: usbtmc: Add ioctl for generic requests on control (Guido Kiener) [task:347095]
  - xfs: add bounds checking to xlog_recover_process_data (lei lu) [task:347089] {CVE-2024-41014}
  - kdb: Fix buffer overflow during tab-complete (Daniel Thompson) [task:347091] {CVE-2024-39480}
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (Kuniyuki Iwashima) [task:347115] {CVE-2024-41041}
  - scsi: qedf: Fix refcount issue when LOGO is received during TMF (Saurav Kashyap) [task:347117] {CVE-2022-48823}
  - scsi: qedf: Modify flush routine to handle all I/Os and TMF (Shyam Sundar) [task:347117]
  - ocfs2: add bounds checking to ocfs2_check_dir_entry() (lei lu) [task:347123] {CVE-2024-41015}
  - nilfs2: fix inode number range checks (Ryusuke Konishi) [task:347125] {CVE-2024-42105}
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (Nikita Zhandarovich) [task:347131] {CVE-2024-41097}
  - ipv6: prevent possible NULL deref in fib6_nh_init() (Eric Dumazet) [task:347135] {CVE-2024-40961}
  - RDMA/mlx5: Add check for srq max_sge attribute (Patrisious Haddad) [task:347141] {CVE-2024-40990}
  - IB/core: Implement a limit on UMAD receive List (Michael Guralnik) [task:346963] {CVE-2024-42145}
  - mm: avoid overflows in dirty throttling logic (Jan Kara) [task:346909] {CVE-2024-42131}
  - libceph: fix race between delayed_work() and ceph_monc_stop() (Ilya Dryomov) [task:346915] {CVE-2024-42232}
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds (Ghadi Elie Rahme) [task:344619] {CVE-2024-42148}
  - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (Aleksandr Mishin) [task:345121] {CVE-2024-39506}
  - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep (Laurent Pinchart) [task:344571] {CVE-2024-42087}
  - sock_map: avoid race between sock_map_close and sk_psock_put (Thadeu Lima de Souza Cascardo) [task:344585] {CVE-2024-39500}
  - jfs: xattr: fix buffer overflow for invalid xattr (Greg Kroah-Hartman) [task:344449] {CVE-2024-40902}
  - orangefs: fix out-of-bounds fsid access (Mike Marshall) [task:345297] {CVE-2024-42143}
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (Jiangfeng Xiao) [task:345307] {CVE-2024-39488}
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Dmitry Antipov) [task:345309] {CVE-2024-41072}
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (Eric Dumazet) [task:345313] {CVE-2024-40959}
  - ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu) [task:345315] {CVE-2024-39489}
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (Remi Pommarel) [task:345317] {CVE-2024-40912}
  - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (Lee Jones) [task:345415] {CVE-2024-42236}
  - hfsplus: fix uninit-value in copy_name (Edward Adam Davis) [task:345669] {CVE-2024-41059}
  - iio: chemical: bme680: Fix overflows in compensate() functions (Vasileios Amoiridis) [task:345679] {CVE-2024-42086}
  - HID: core: remove unnecessary WARN_ON() in implement() (Nikita Zhandarovich) [task:345675] {CVE-2024-39509}
  - net: hns3: fix kernel crash problem in concurrent scenario (Yonglong Liu) [task:345677] {CVE-2024-39507}
  - drm/amdgpu: fix UBSAN warning in kv_dpm.c (Alex Deucher) [task:345695] {CVE-2024-40987}
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (Sam Sun) [task:345697] {CVE-2024-39487}
  - tcp_metrics: validate source addr length (Jakub Kicinski) [task:345703] {CVE-2024-42154}
  - net: can: j1939: Initialize unused data in j1939_send_one() (Shigeru Yoshida) [task:345711] {CVE-2024-42076}
  - net/iucv: Avoid explicit cpumask var allocation on stack (Dawei Li) [task:345717] {CVE-2024-42094}
  - jfs: don't walk off the end of ealist (lei lu) [task:345721] {CVE-2024-41017}
  - scsi: myrs: Fix crash in error case (Tong Zhang) [task:345733] {CVE-2022-48824}
  - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (Alan Stern) [task:345741] {CVE-2024-41035}
  - gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (Ian Ray) [task:345787] {CVE-2024-42253}
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (Ma Ke) [task:346897] {CVE-2024-41095}
  - nilfs2: add missing check for inode numbers on directory entries (Ryusuke Konishi) [task:345765] {CVE-2024-42104}
  - bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode (Martin KaFai Lau) [task:345763] {CVE-2024-42063}
  - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (Ma Ke) [task:345779] {CVE-2024-42101}
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (Raju Rangoju) [task:345789] {CVE-2024-40984}
  - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [task:345799] {CVE-2024-42124}
  - scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (Saurav Kashyap) [task:345799]
  - drm/radeon: fix UBSAN warning in kv_dpm.c (Alex Deucher) [task:345729] {CVE-2024-40988}
  - inet_diag: Initialize pad field in struct inet_diag_req_v2 (Shigeru Yoshida) [task:345321] {CVE-2024-42106}
  - ax25: Fix refcount imbalance on inbound connections (Lars Kellogg-Stedman) [task:346363] {CVE-2024-40910}
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Herbert Xu) [task:346361] {CVE-2024-39493}
  - ASoC: fsl-asoc-card: set priv->pdev before using it (Elinor Montmasson) [task:346375] {CVE-2024-42089}
  - ata: libata-core: Fix null pointer dereference on error (Niklas Cassel) [task:346377] {CVE-2024-41098}
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (Alan Stern) [task:346373] {CVE-2024-40904}
  - ocfs2: fix races between hole punching and AIO+DIO (Su Yue) [task:345287] {CVE-2024-40943}
  - s390/pkey: Wipe sensitive data on failure (Holger Dengler) [task:346395] {CVE-2024-42157}
  - ipv6: prevent possible NULL dereference in rt6_probe() (Eric Dumazet) [task:346387] {CVE-2024-40960}
  - drm/exynos/vidi: fix memory leak in .get_modes() (Jani Nikula) [task:346391] {CVE-2024-40932}
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (Emmanuel Grumbach) [task:346417] {CVE-2024-40941}
  - netpoll: Fix race condition in netpoll_owner_active (Breno Leitao) [task:346665] {CVE-2024-41005}
  - net: make sure napi_list is safe for RCU traversal (Jakub Kicinski) [task:346665]
  - ata: libata-core: Fix double free on error (Niklas Cassel) [task:346673] {CVE-2024-41087}
  - net: ethernet: lantiq_etop: fix double free in detach (Aleksander Jan Bajkowski) [task:346393] {CVE-2024-41046}
  - net: lantiq_etop: add blank line after declaration (Aleksander Jan Bajkowski) [task:346393]
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (Ma Ke) [task:346905] {CVE-2024-41089}
  - i2c: lpi2c: Avoid calling clk_get_rate during transfer (Alexander Stein) [task:346895] {CVE-2024-40965}
  - i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work (Carlos Song) [task:346895]
  - i2c: imx-lpi2c: use bulk clk API (Peng Fan) [task:346895]
  - tipc: fix kernel panic when enabling bearer (Tung Nguyen) [task:346901] {CVE-2022-48865}
  - tipc: fix NULL pointer dereference in tipc_disc_rcv() (Tuong Lien) [task:346901]
  - tipc: add reference counter to bearer (Tuong Lien) [task:346901]
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref() (Eric Dumazet) [task:346925] {CVE-2024-40981}
  - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr (Piotr Wojtaszczyk) [task:346937] {CVE-2024-42153}
  - fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen) [task:346943] {CVE-2024-39475}
  - eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX (Jonas Malaco) [task:346951] {CVE-2022-48806}
  - eeprom: ee1004: Remove not needed debug message (Heiner Kallweit) [task:346951]
  - eeprom: New ee1004 driver for DDR4 memory (Jean Delvare) [task:346951]
  - drm/vc4: Fix deadlock on DSI device attach error (Padmanabha Srinivasaiah) [task:346939] {CVE-2022-48826}
  - drm/vc4: dsi: Only register our component once a DSI device is attached (Maxime Ripard) [task:346939]
  - net: do not leave a dangling sk pointer, when socket creation fails (Ignat Korchagin) [task:346957] {CVE-2024-40954}
  - drm/amd/display: Skip finding free audio for unknown engine_id (Alex Hung) [task:346961] {CVE-2024-42119}
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Jan Kara) [task:346949] {CVE-2024-42102}
  - net: dsa: mv88e6xxx: Correct check for empty list (Simon Horman) [task:346967] {CVE-2024-42224}
  - ocfs2: fix DIO failure due to insufficient transaction credits (Jan Kara) [task:346985] {CVE-2024-42077}
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Sagi Grimberg) [task:346989] {CVE-2024-42152}
  - nvmet: update AEN list and array at one place (Daniel Wagner) [task:346989]
  - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects (Nicolas Escande) [task:346993] {CVE-2024-40942}
  - ftruncate: pass a signed offset (Arnd Bergmann) [task:346997] {CVE-2024-42084}
  - vmci: prevent speculation leaks by sanitizing event in event_deliver() (Hagar Gamal Halim Hemdan) [task:347011] {CVE-2024-39499}
  - ppp: reject claimed-as-LCP but actually malformed packets (Dmitry Antipov) [task:347013] {CVE-2024-41044}
  - s390/sclp: Fix sclp_init() cleanup on failure (Heiko Carstens) [task:347023] {CVE-2024-41068}
  - scsi: qedi: Fix crash while reading debugfs attribute (Manish Rangankar) [task:347025] {CVE-2024-40978}
  - mISDN: Fix memory leak in dsp_pipeline_build() (Alexey Khoroshilov) [task:347035] {CVE-2022-48863}
  - mISDN: Remove obsolete PIPELINE_DEBUG debugging information (Zhen Lei) [task:347035]
  - ALSA: emux: improve patch ioctl data validation (Oswald Buddenhagen) [task:347041] {CVE-2024-42097}
  - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (Ryusuke Konishi) [task:347027] {CVE-2024-39469}
  - nilfs2: return the mapped address from nilfs_get_page() (Matthew Wilcox (Oracle)) [task:347027]
  - nilfs2: Remove check for PageError (Matthew Wilcox (Oracle)) [task:347027]
  - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Tasos Sahanidis) [task:330552]
  - USB: core: Make do_proc_control() and do_proc_bulk() killable (Alan Stern) [task:330552] {CVE-2021-47582}
  - net: relax socket state check at accept time. (Paolo Abeni) [task:341253] {CVE-2024-36484}
  - jfs: Fix array-index-out-of-bounds in diFree (Jeongjun Park)
  - nfsd: Fix races between nfsd4_cb_release() and nfsd4_shutdown_callback() (Trond Myklebust) [task:334950]
  - nfsd: minor 4.1 callback cleanup (Trond Myklebust) [task:334950]
  - drm/vc4: hdmi: Unregister codec device on unbind (Maxime Ripard) [task:344615] {CVE-2022-48852}
  - Bluetooth: Fix slab-out-of-bounds Read in hci_le_ext_adv_report_evt (luoxuanqiang) [task:218812]
  - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Ding Hui) [task:337725] {CVE-2023-52885}
  - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [task:222101] {CVE-2023-52752}
  - crypto: af_alg - get rid of alg_memory_allocated (Eric Dumazet) [task:341427] {CVE-2022-48781}
  - tun: add missing verification for short frame (Dongli Zhang) [task:339091] {CVE-2024-41091, CVE-2024-41091}
  - PCI: pciehp: Reduce noisiness on hot removal (Lukas Wunner) [bug:243223]
  - mm/init: Add quirk for phytium S5000C SoC (Li Qiang) [task:336451]
  - Revert "config: enable CONFIG_RCU_CPU_STALL_CPUTIME and CONFIG_IRQ_TIME_ACCOUNTING" (zhanggenjian) [task:338551]
  - epoll: be better about file lifetimes (Linus Torvalds) [task:330566] {CVE-2024-38580}
  - i2c: acpi: Unbind mux adapters before delete (Hamish Martin) [task:332220] {CVE-2024-39362}
  - i2c: add fwnode APIs (Russell King (Oracle)) [task:332220]
  - powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 (Naveen N. Rao) [task:330290] {CVE-2022-48755}
  - powerpc/ppc-opcode: Fold PPC_INST_* macros into PPC_RAW_* macros (Balamuruhan S) [task:330290]
  - powerpc: sstep: Add tests for addc[.] instruction (Sandipan Das) [task:330290]
  - powerpc: sstep: Add tests for add[.] instruction (Sandipan Das) [task:330290]
  - powerpc: sstep: Add tests for compute type instructions (Sandipan Das) [task:330290]
  - powerpc: sstep: Add support for maddhd, maddhdu, maddld instructions (Sandipan Das) [task:330290]
  - powerpc/ppc-opcode: Consolidate powerpc instructions from bpf_jit.h (Balamuruhan S) [task:330290]
  - powerpc/ppc-opcode: Introduce PPC_RAW_* macros for base instruction encoding (Balamuruhan S) [task:330290]
  - powerpc/signal: Use code patching instead of hardcoding (Christophe Leroy) [task:330290]
  - powerpc/pmem: Add new instructions for persistent storage and sync (Aneesh Kumar K.V) [task:330290]
  - powerpc/64s: Move branch cache flushing bcctr variant to ppc-ops.h (Nicholas Piggin) [task:330290]
  - powerpc/bpf_jit: Reuse instruction macros from ppc-opcode.h (Balamuruhan S) [task:330290]
  - powerpc/bpf: remove unnecessary code-patching (Riwen Lu) [task:330290]
  - ppc: bpf: implement jitting of JMP32 (Jiong Wang) [task:330290]
  - ppc: bpf: implement jitting of BPF_ALU | BPF_ARSH | BPF_* (Jiong Wang) [task:330290]
  - powerpc: bpf: eliminate zero extension code-gen (Jiong Wang) [task:330290]
  - net_sched: walk through all child classes in tc_bind_tclass() (Cong Wang) [task:218825]
  - bpf, sockmap: Fix double bpf_prog_put on error case in map_link (John Fastabend) [task:218786]
  - bpf, sockmap: Attach map progs to psock early for feature probes (John Fastabend) [task:218786]
  - EULER: scheduler: Disable cluster scheduling by default (Yicong Yang) [task:333597]
  - EULER: scheduler: Add boot time enabling/disabling of cluster scheduling (Tim Chen) [task:333597]
  - EULER: scheduler: Add runtime knob sysctl_sched_cluster (Tim Chen) [task:333597]
  - EULER: scheduler: Create SDTL_SKIP flag to skip topology level (Tim Chen) [task:333597]
  - btrfs: fix race between quota rescan and disable leading to NULL pointer deref (Filipe Manana) [task:330358] {CVE-2022-48734}
  - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (Nikolay Borisov) [task:330358] {CVE-2022-48734}
  - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup (Sidong Yang) [task:330358] {CVE-2022-48734}
  - RDMA/hns: Fix UAF for cq async event (Chengchang Tang) [task:330520] {CVE-2024-38545}
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" (Finn Thain) [task:330496] {CVE-2024-38607}
  - ALSA: Fix deadlocks with kctl removals at disconnection (Takashi Iwai) [task:330474] {CVE-2024-38600}
  - btrfs: fix deadlock between quota disable and qgroup rescan worker (Shin'ichiro Kawasaki) [task:330358] {CVE-2022-48734}
  - btrfs: fix lockdep splat when enabling and disabling qgroups (Filipe Manana) [task:330358] {CVE-2022-48734}
  - btrfs: move ulist allocation out of transaction in quota enable (David Sterba) [task:330358] {CVE-2022-48734}
  - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Niklas Neronin) [task:223058] {CVE-2023-52781}
  - netfilter: tproxy: bail out if IP has been disabled on the device (Florian Westphal) [task:330558] {CVE-2024-36270}
  - netfilter: use in_dev_for_each_ifa_rcu (Florian Westphal) [task:330558]
  - net: inetdevice: provide replacement iterators for in_ifaddr walk (Florian Westphal) [task:330558]
  - net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov) [task:330544] {CVE-2024-38538}
  - net: add pskb_may_pull_reason() helper (Eric Dumazet) [task:330544]
  - net: core: change return type of pskb_may_pull to bool (Heiner Kallweit) [task:330544]
  - media: i2c: et8ek8: Don't strip remove function when driver is builtin (Uwe Kleine-König) [task:330538] {CVE-2024-38611}
  - ax25: Fix reference count leak issue of net_device (Duoming Zhou) [task:330518] {CVE-2024-38554}
  - RDMA/hns: Fix deadlock on SRQ async events. (Chengchang Tang) [task:330482] {CVE-2024-38591}
  - perf report: Fix memory leaks around perf_tip() (Ian Rogers) [task:225610] {CVE-2021-47543}
  - net: fec: remove .ndo_poll_controller to avoid deadlocks (Wei Fang) [task:330300]
  - wifi: cfg80211: check A-MSDU format more carefully (Johannes Berg) [task:223115] {CVE-2024-35937}
  - vfio/pci: fix potential memory leak in vfio_intx_enable() (Ye Bin) [task:330570] {CVE-2024-38632}
  - ax25: Fix reference count leak issues of ax25_dev (Duoming Zhou) [task:330575] {CVE-2024-38602}
  - ax25: merge repeat codes in ax25_dev_device_down() (Lu Wei) [task:330575] {CVE-2024-38602}
  - eth: sungem: remove .ndo_poll_controller to avoid deadlocks (Jakub Kicinski) [task:330488] {CVE-2024-38597}
  - ptp: fix code indentation issues (Carlos Llamas) [task:222085]
  - ptp: Fix possible memory leak in ptp_clock_register() (Yang Yingliang) [task:222085] {CVE-2021-47455}
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (Kuniyuki Iwashima) [task:330565] {CVE-2024-37356}
  - params: lift param_set_uint_minmax to common code (Sagi Grimberg) [task:330565]
  - ubifs: Fix races between xattr_{set|get} and listxattr operations (Zhihao Cheng) [task:223056] {CVE-2021-47351}
  - ring-buffer: Fix a race between readers and resize checks (Petr Pavlu) [task:330286] {CVE-2024-38601}
  - scsi: bfa: Ensure the copied buf is NUL terminated (Bui Quang Minh) [task:330280] {CVE-2024-38560}
  - kunit: Fix kthread reference (Mickaël Salaün) [task:330287] {CVE-2024-38561}
  - ACPI: CPPC: Fix access width used for PCC registers (Vanshidhar Konda) [task:223069]
  - ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro (Jarred White) [task:223069]
  - ACPI: CPPC: Use access_width over bit_width for system memory accesses (Jarred White) [task:223069] {CVE-2024-35995}
  - ACPI: CPPC: Drop redundant local variable from cpc_read() (Rafael J. Wysocki) [task:223069]
  - ACPI: CPPC: fix some coding style issues (Xiaofei Tan) [task:223069]
  - ACPI: CPPC: Fix up I/O port access in cpc_read() (Rafael J. Wysocki) [task:223069]
  - ACPI: CPPC: Implement support for SystemIO registers (Steven Noonan) [task:223069]
  - ACPI: CPPC: initialise vaddr pointers to NULL (Ionela Voinescu) [task:223069]
  - drm: vc4: Fix possible null pointer dereference (Aleksandr Mishin) [task:330526] {CVE-2024-38546}
  - mmc: sdhci-msm: pervent access to suspended controller (Mantas Pucka) [task:224217] {CVE-2024-36029}
  - mmc: sdhci-msm: add Inline Crypto Engine support (Eric Biggers) [task:224217]
  - mmc: sdhci-msm: Mark sdhci_msm_cqe_disable static (Stephen Boyd) [task:224217]
  - mmc: sdhci-msm: Add CQHCI support for sdhci-msm (Ritesh Harjani) [task:224217]
  - mmc: sdhci-msm: Use OPP API to set clk/perf state (Rajendra Nayak) [task:224217]
  - mmc: sdhci-msm: Re-initialize DLL if MCLK is gated dynamically (Veerabhadrarao Badiganti) [task:224217]
  - nilfs2: fix use-after-free of timer for log writer thread (Ryusuke Konishi) [task:330506] {CVE-2024-38583}
  - KVM: LAPIC: Also cancel preemption timer during SET_LAPIC (Wanpeng Li) [task:330470] {CVE-2022-48765}
  - KVM: LAPIC: Write 0 to TMICT should also cancel vmx-preemption timer (Wanpeng Li) [task:330470]
  - KVM: LAPIC: Advancing the timer expiration on guest initiated write (Wanpeng Li) [task:330470]
  - KVM: LAPIC: Also cancel preemption timer when disarm LAPIC timer (Wanpeng Li) [task:330470]
  - ecryptfs: Fix buffer size for tag 66 packet (Brian Kubisiak) [task:330504] {CVE-2024-38578}
  - netrom: fix possible dead-lock in nr_rt_ioctl() (Eric Dumazet) [task:330492] {CVE-2024-38589}
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (Ilya Maximets) [task:330359] {CVE-2024-38558}
  - bpf: Use VM_MAP instead of VM_ALLOC for ringbuf (Hou Tao) [task:330480] {CVE-2022-48714}
  - m68k: Fix spinlock race in kernel thread creation (Michael Schmitz) [task:330486] {CVE-2024-38613}
  - find-patch: fix tag missing '.' with stable branch (Jackie Liu)
  - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc (Chengfeng Ye) [task:216643] {CVE-2021-47211}
  - LoongArch: PPTT: Supports SMT when physical cores are discontinuous. (Xiangdong Meng) [task:331741]
  - KABI: resolve KABI conflict caused by pswiotlb patch (liyouhong) [task:201557]
  - arm64/config: Enable CONFIG_PSWIOTLB=y (liyouhong) [task:201557]
  - PHYTIUM: pswiotlb: Basic functions of OS are not affected by devices which are incompatible with pswiotlb (Cui Chao) [task:201557]
  - PHYTIUM: pswiotlb: Add blacklist which are incompatible with pswiotlb temporarily (Cui Chao) [task:201557]
  - PHYTIUM: pswiotlb: Fix abnormal expansion when PAGE_SIZE is 64KB (Cui Chao) [task:201557]
  - PHYTIUM: pswiotlb: Disable PSWIOTLB by default (liyouhong) [task:201557]
  - PHYTIUM: pswiotlb: Adapt for iommu-translated mode (Cui Chao) [task:201557]
  - PHYTIUM: pswiotlb: Adapt for iommu-passthrough mode (Cui Chao) [task:201557]
  - PHYTIUM: pswiotlb: Distribute the traffic to PSWIOTLB or not (Cui Chao) [task:201557]
  - PHYTIUM: pswiotlb: Add PSWIOTLB mechanism to improve DMA performance (Cui Chao) [task:201557]
  - jdb2: Don't refuse invalidation of already invalidated buffers (Jan Kara) [task:226534]
  - tcp/dccp: Improve the method of allocating local ports in connect() (xiaolinkui) [task:336487]
  - fanotify: Avoid softlockups when reading many events (Jan Kara) [task:340889]
  - xfs: fix inode allocation block res calculation precedence (Brian Foster) [task:334329]
  - nilfs2: fix potential kernel bug due to lack of writeback flag waiting (Ryusuke Konishi) [task:332240] {CVE-2024-37078}
  - tipc: fix kernel warning when sending SYN message (Tung Nguyen) [task:225562] {CVE-2023-52700}
  - tipc: fix implicit-connect for SYN+ (Xin Long) [task:225562]
  - ipvlan: add ipvlan_route_v6_outbound() helper (Eric Dumazet) [task:223092] {CVE-2023-52796}
  - ipvlan: properly track tx_errors (Eric Dumazet) [task:223092]
  - net: add DEV_STATS_READ() helper (Eric Dumazet) [task:223092]
  - macsec: use DEV_STATS_INC() (Eric Dumazet) [task:223092]
  - macsec: Fix traffic counters/statistics (Clayton Yager) [task:223092]
  - net: fix kabi broken in struct net_device_stats (taowei) [task:204908]
  - net: add atomic_long_t to net_device_stats fields (Eric Dumazet) [task:204908]
  - irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses (Barry Song) [task:336421]
  - net: Fix race for duplicate reqsk on identical SYN (luoxuanqiang) [task:220628]
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Yue Haibing) [task:330556] {CVE-2024-33621}
  - wifi: iwlwifi: read txq->read_ptr under lock (Johannes Berg) [task:224209] {CVE-2024-36922}
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (Bob Pearson) [task:330478] {CVE-2024-38544}
  - tcp: fix page frag corruption on page fault (Paolo Abeni) [task:225588] {CVE-2021-47544}
  - s390/ap: Fix crash in AP internal function modify_bitmap() (Harald Freudenberger) [task:332252] {CVE-2024-38661}
  - media: lgdt3306a: Add a check against null-pointer-def (Zheyu Ma) [task:332251] {CVE-2022-48772}
  - media: dvb-frontends: Use kmemdup instead of duplicating its function (zhong jiang) [task:332251]
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Baokun Li) [task:332253] {CVE-2024-39276}
  - Input: cyapa - add missing input core locking to suspend/resume functions (Marek Szyprowski) [task:332207] {CVE-2023-52884}
  - net/9p: fix uninit-value in p9_client_rpc() (Nikita Zhandarovich) [task:332238] {CVE-2024-39301}
  - of: module: add buffer overflow check in of_modalias() (Sergey Shtylyov) [task:330476] {CVE-2024-38541}
  - selinux: fix double free of cond_list on error paths (Vratislav Bendel) [task:330355] {CVE-2022-48740}
  - selinux: fix a double free in cond_read_node()/cond_read_list() (Tom Rix) [task:330355]
  - selinux: fix error return code in cond_read_list() (Wei Yongjun) [task:330355]
  - selinux: convert cond_expr to array (Ondrej Mosnacek) [task:330355]
  - selinux: convert cond_av_list to array (Ondrej Mosnacek) [task:330355]
  - selinux: convert cond_list to array (Ondrej Mosnacek) [task:330355]
  - selinux: simplify evaluate_cond_node() (Ondrej Mosnacek) [task:330355]
  - mlxsw: core_thermal: Fix fan speed in maximum cooling state (Ido Schimmel) [task:223114]
  - mlxsw: thermal: Fix out-of-bounds memory accesses (Ido Schimmel) [task:223114] {CVE-2021-47441}
  - mlxsw: core: Extend cooling device with cooling levels (Vadim Pasternak) [task:223114]
  - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [task:223105] {CVE-2021-47307}
  - usb-storage: alauda: Check whether the media is initialized (Shichao Lai) [task:330542] {CVE-2024-38619}
  - drm/mediatek: Add 0 size check to mtk_drm_gem_obj (Justin Green) [task:330472] {CVE-2024-38549}
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jiri Pirko) [task:330562] {CVE-2024-37353}
  - ipv6: sr: fix invalid unregister error path (Hangbin Liu) [task:330500] {CVE-2024-38612}
  - wifi: carl9170: add a proper sanity check for endpoints (Nikita Zhandarovich) [task:330490] {CVE-2024-38567}
  - usb: xhci-plat: fix crash when suspend if remote wake enable (Frank Li) [task:330356] {CVE-2022-48761}
  - usb: host: xhci-plat: add .suspend_quirk for struct xhci_plat_priv (Peter Chen) [task:330356]
  - RDMA/hns: Modify the print level of CQE error (Chengchang Tang) [task:330357] {CVE-2024-38590}
  - usb: cdc-wdm: close race between read and workqueue (Oliver Neukum) [task:327804] {CVE-2024-35812}
  - of: module: prevent NULL pointer dereference in vsnprintf() (Sergey Shtylyov) [task:327802] {CVE-2024-35878}
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (Dongli Zhang) [task:330555] {CVE-2024-31076}
  - inet_diag: fix kernel-infoleak for UDP sockets (Eric Dumazet) [task:330553] {CVE-2021-47597}
  - inet_diag: use jiffies_delta_to_msecs() (Eric Dumazet) [task:330553]
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Eric Dumazet) [task:330559] {CVE-2024-36286}
  - media: stk1160: fix bounds checking in stk1160_copy_video() (Dan Carpenter) [task:330567] {CVE-2024-38621}
  - serial: max3100: Update uart_driver_registered on driver removal (Andy Shevchenko) [task:330568] {CVE-2024-38633}
  - greybus: lights: check return of get_channel_from_mode (Rui Miguel Silva) [task:330569] {CVE-2024-38637}
  - nilfs2: fix potential hang in nilfs_detach_log_writer() (Ryusuke Konishi) [task:330571] {CVE-2024-38582}
  - nilfs2: fix unexpected freezing of nilfs_segctor_sync() (Ryusuke Konishi) [task:330571]
  - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger (Duoming Zhou) [task:330572] {CVE-2024-38630}
  - serial: max3100: Lock port->lock when calling uart_handle_cts_change() (Andy Shevchenko) [task:330573] {CVE-2024-38634}
  - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (Tetsuo Handa) [task:330574] {CVE-2024-38780}
  - stm class: Fix a double free in stm_register_device() (Dan Carpenter) [task:330576] {CVE-2024-38627}
  - enic: Validate length of nl attributes in enic_set_vf_port (Roded Zats) [task:330578] {CVE-2024-38659}
  - scsi: qedf: Ensure the copied buf is NUL terminated (Bui Quang Minh) [task:330528] {CVE-2024-38559}
  - drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group (Junhao He) [task:330522] {CVE-2024-38569}
  - speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter) [task:330524] {CVE-2024-38587}
  - crypto: bcm - Fix pointer arithmetic (Aleksandr Mishin) [task:330302] {CVE-2024-38579}
  - jffs2: prevent xattr node from overflowing the eraseblock (Ilya Denisyev) [task:330534] {CVE-2024-38599}
  - ALSA: timer: Set lower bound of start tick time (Takashi Iwai) [task:330536] {CVE-2024-38618}
  - wifi: ar5523: enable proper endpoint verification (Nikita Zhandarovich) [task:330532] {CVE-2024-38565}
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Breno Leitao) [task:330510] {CVE-2024-38596}
  - net/mlx5: Discard command completions in internal error (Akiva Goldberger) [task:330514] {CVE-2024-38555}
  - drm/amd/display: Fix potential index out of bounds in color transformation function (Srinivasan Shanmugam) [task:330516] {CVE-2024-38552}
  - PM / devfreq: Fix buffer overflow in trans_stat_show (Christian Marangi) [task:207389] {CVE-2023-52614}
  - btrfs: don't drop extent_map for free space inode on write error (Josef Bacik) [task:210433] {CVE-2024-26726}
  - fs/9p: fix uninitialized values during inode evict (Eric Van Hensbergen) [task:224205] {CVE-2024-36923}
  - x86/signal: Detect and prevent an alternate signal stack overflow (Chang S. Bae) [task:223059] {CVE-2021-47326}
  - SUNRPC: fix a memleak in gss_import_v2_context (Zhipeng Lu) [task:217597] {CVE-2023-52653}
  - net/smc: fix compile error in smc_vlan_by_tcpsk function (weirongguang) [task:329030]
  - drm/ast: Fix soft lockup (Jammy Huang) [task:221869] {CVE-2024-35952}
  - drm_lease.c: copy user-array safely (Philipp Stanner) [task:223074] {CVE-2023-52820}
  - drm/panel: fix a possible null pointer dereference (Ma Ke) [task:222109] {CVE-2023-52821}
  - drm/amdgpu: fix gart.bo pin_count leak (Leslie Shi) [task:222035] {CVE-2021-47431}
  - lib/generic-radix-tree.c: Don't overflow in peek() (Kent Overstreet) [task:221979] {CVE-2021-47432}
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo) [task:225616] {CVE-2023-52880}
  - phonet/pep: fix racy skb_queue_empty() use (Rémi Denis-Courmont) [task:220864] {CVE-2024-27402}
  - kprobes: Fix possible use-after-free issue on kprobe registration (Zheng Yejian) [task:223065] {CVE-2024-35955}
  - i2c: smbus: fix NULL function pointer dereference (Wolfram Sang) [task:223077] {CVE-2024-35984}
  - i2c: core: remove level of indentation in i2c_transfer (Wolfram Sang) [task:223077]
  - i2c: core: remove outdated DEBUG output (Wolfram Sang) [task:223077]
  - usb: gadget: f_fs: change ep->status safe in ffs_epfile_io() (Linyu Yuan) [task:225394]
  - drm/sched: Avoid data corruptions (Andrey Grodzovsky) [task:223136] {CVE-2021-47354}
  - cpu/hotplug: Don't offline the last non-isolated CPU (Ran Xiaokai) [task:223118] {CVE-2023-52831}
  - cpu/hotplug: Prevent self deadlock on CPU hot-unplug (Thomas Gleixner) [task:223118] {CVE-2023-52831}
  - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Borislav Petkov (AMD)) [task:223094] {CVE-2024-35876}
  - iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() (Zhang Shurong) [task:223123] {CVE-2023-52802}
  - staging: rtl8712: fix use-after-free in rtl8712_dl_fw (Pavel Skripkin) [task:222111] {CVE-2021-47479}
  - RDMA: Verify port when creating flow rule (Maor Gottlieb) [task:223096] {CVE-2021-47265}
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima) [task:328482] {CVE-2024-36933}
  - phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet) [task:328460] {CVE-2024-36946}
  - tpm: tpm_tis_core: distinguish the dmesg between TCM2.0 and TPM2.0 (wudandan) [task:223563]
  - net: sched: sch: Bounds check priority (Kees Cook) [task:222057] {CVE-2023-52734}
  - htb: use anonymous union for simplicity (Cong Wang) [task:222057]
  - media: imon: fix access to invalid resource for the second interface (Takashi Iwai) [task:222087] {CVE-2023-52754}
  - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Justin Tee) [task:328476] {CVE-2024-36952}
  - block: fix overflow in blk_ioctl_discard() (Li Nan) [task:328466] {CVE-2024-36917}
  - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (Zeng Heng) [task:328464] {CVE-2024-36959}
  - bna: ensure the copied buf is NUL terminated (Bui Quang Minh) [task:328454] {CVE-2024-36934}
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman) [task:328462] {CVE-2024-36950}
  - fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt) [task:328470] {CVE-2024-36964}
  - drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin) [task:328443] {CVE-2024-36960}
  - net/mlx5: Free IRQ rmap and notifier on kernel shutdown (Saeed Mahameed) [task:222795]
  - net/mlx5: Free irqs only on shutdown callback (Shay Drory) [task:222795]
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet) [task:224189] {CVE-2024-36905}
  - tcp: remove redundant check on tskb (Colin Ian King) [task:224189]
  - .gitignore: Add compilation database file (Toru Komatsu)
  - net/tls: Fix flipped sign in tls_err_abort() calls (Daniel Jordan) [task:223103] {CVE-2021-47496}
  - of: unittest: Fix compile in the non-dynamic case (Christian A. Ehrhardt) [task:220891]
  - of: unittest: Fix of_count_phandle_with_args() expected value message (Geert Uytterhoeven) [task:220891]
  - of: Fix double free in of_parse_phandle_with_args_map (Christian A. Ehrhardt) [task:220891] {CVE-2023-52679}
  - of: unittest: fix EXPECT text for gpio hog errors (Frank Rowand) [task:220891]
  - of: gpio unittest kfree() wrong object (Frank Rowand) [task:220891]
  - of: unittest: make gpio overlay test dependent on CONFIG_OF_GPIO (Frank Rowand) [task:220891]
  - of: unittest: add overlay gpio test to catch gpio hog problem (Frank Rowand) [task:220891]
  - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (Eric Dumazet) [task:223050] {CVE-2024-35976}
  - net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() (Karsten Graul) [task:225614] {CVE-2021-47559}
  - powerpc/mm: Fix lockup on kernel exec fault (Christophe Leroy) [task:222047] {CVE-2021-47350}
  - soc: qcom: llcc: Handle a second device without data corruption (Uwe Kleine-König) [task:222019] {CVE-2023-52871}
  - i2c: dev: copy userspace array safely (Philipp Stanner) [task:223063] {CVE-2023-52758}
  - string.h: add array-wrappers for (v)memdup_user() (Philipp Stanner) [task:223063] {CVE-2023-52758}
  - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao) [task:221811] {CVE-2024-35997}
  - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (felix) [task:221821] {CVE-2023-52803}
  - f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances (Chao Yu) [task:221841] {CVE-2021-47335}
  - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Hans Verkuil) [task:227331] {CVE-2024-23848}
  - tpm: tpm_tis: Adapt spi tcm2 card ZIC0603 to x86 (wudandan) [task:220240]
  - rpmbuild: install pem and x509 to kernel-devel (Jiangshan Yi) [task:225263]
  - erofs: fix pcluster use-after-free on UP platforms (Gao Xiang) [task:217577] {CVE-2022-48674}
  - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error (Norihiko Hama) [task:217593] {CVE-2024-26996}
  - bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue (Jason Xing) [task:224201] {CVE-2024-36938}
  - netfilter: nft_compat: remove flush counter optimization (Florian Westphal) [task:221983]
  - netfilter: complete validation of user input (Eric Dumazet) [task:221923]
  - netfilter: nf_tables: flush pending destroy work before exit_net release (Pablo Neira Ayuso) [task:221983] {CVE-2024-35899}
  - netfilter: nft_compat: make sure xtables destructors have run (Florian Westphal) [task:221983]
  - ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup (Feng Zhou) [task:221949] {CVE-2021-47399}
  - netfilter: validate user input for expected length (Eric Dumazet) [task:221923] {CVE-2024-35896}
  - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() (Valentine Fatiev) [task:223066]
  - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path (Valentine Fatiev) [task:223066] {CVE-2021-47438}
  - net: atlantic: eliminate double free in error handling logic (Igor Russkikh) [task:220884] {CVE-2023-52664}
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Fedor Pchelkin) [task:217545] {CVE-2024-26961}
  - NTB: fix possible name leak in ntb_register_device() (Yang Yingliang) [task:217598] {CVE-2023-52652}
  - soc: fsl: qbman: Use raw spinlock for cgr_lock (Sean Anderson) [task:223104] {CVE-2024-35819}
  - soc: fsl: qbman: Add helper for sanity checking cgr ops (Sean Anderson) [task:223104]
  - soc: fsl: qbman: Add CGR update function (Sean Anderson) [task:223104]
  - KVM: x86: Handle SRCU initialization failure during page track init (Haimin Zhang) [task:221891] {CVE-2021-47407}
  - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Oliver Upton) [task:224206] {CVE-2024-36953}
  - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Marc Zyngier) [task:224206]
  - ipv4: Fix uninit-value access in __ip_make_skb() (Shigeru Yoshida) [task:224214] {CVE-2024-36927}
  - can: j1939: fix Use-after-Free, hold skb ref while in use (Oleksij Rempel) [task:225604] {CVE-2021-47232}
  - can: j1939: transport: add j1939_session_skb_find_by_offset() function (Oleksij Rempel) [task:225604]
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou) [task:225600] {CVE-2024-27398}
  - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc (Norbert Zulinski) [task:225576] {CVE-2021-47501}
  - i40e: Fix sparse error: uninitialized symbol 'ring' (Arkadiusz Kubalewski) [task:225576]
  - i40e: introduce new dump desc XDP command (Ciara Loftus) [task:225576]
  - tcp: do not accept ACK of bytes we never sent (Eric Dumazet) [task:225596] {CVE-2023-52881}
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou) [task:225580] {CVE-2024-27399}
  - net/mlx5e: Fix page reclaim for dead peer hairpin (Dima Chumak) [task:225574] {CVE-2021-47246}
  - clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (Jernej Skrabec) [task:225550] {CVE-2023-52882}
  - drm/arm/malidp: fix a possible null pointer dereference (Huai-Yuan Liu) [task:225554] {CVE-2024-36014}
  - ppdev: Add an error check in register_device (Huai-Yuan Liu) [task:225556] {CVE-2024-36015}
  - ppdev: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET) [task:225556]
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats) [task:225558] {CVE-2024-36017}
  - firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos) [task:225560] {CVE-2024-27401}
  - mmc: mmc_spi: fix error handling in mmc_spi_probe() (Yang Yingliang) [task:225564] {CVE-2023-52708}
  - mmc: mmc_spi: Indentation fixes (Andy Shevchenko) [task:225564]
  - mmc: spi: Convert to use GPIO descriptors (Linus Walleij) [task:225564]
  - phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init() (Tiezhu Yang) [task:225568] {CVE-2021-47234}
  - perf/core: Fix potential NULL deref (Peter Zijlstra) [task:213183]
  - drm/client: Fully protect modes[] with dev->mode_config.mutex (Ville Syrjälä) [task:221977] {CVE-2024-35950}
  - s390/dasd: fix double module refcount decrement (Miroslav Franc) [task:217574] {CVE-2024-27054}
  - mm/filemap: avoid buffered read/write race to read inconsistent data (Baokun Li) [task:225198]
  - blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling (zhengbin) [task:225157]
  - i40e: fix vf may be used uninitialized in this function warning (Aleksandr Loktionov) [task:224190] {CVE-2024-36020}
  - nfs: Handle error of rpc_proc_register() in nfs_net_init(). (Kuniyuki Iwashima) [task:224227] {CVE-2024-36939}


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.17.v2401
changelog:
  - HYGON: mm: Fix kabi breakage of pv_ops (hanliyang) [task:332685]
  - drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable() (Abhinav Kumar) [task:363787] {CVE-2024-45015}
  - drm/msm/dpu: remove RM dependency on connector state (Jeykumar Sankaran) [task:363787]
  - net/ncsi: Disable the ncsi work before freeing the associated structure (Eddie James) [task:376379] {CVE-2024-49945}
  - aoe: fix the potential use-after-free problem in more places (Chun-Yi Lee) [task:376351] {CVE-2024-49982}
  - security/kysec: permit task killed by parent (penghuaihe) [bug:272883]
  - OPENEULER: kvm: arm64: make ID registers configurable (Peng Liang) [task:352563]
  - OPENEULER: kvm: arm64: emulate the ID registers (Peng Liang) [task:352563]
  - OPENEULER: arm64: add a helper function to traverse arm64_ftr_regs (Peng Liang) [task:352563]
  - Revert "virt/kvm:phytium kunpeng kvm migration" (Hao Ge) [task:352563]
  - net: ethernet: lantiq_etop: fix memory disclosure (Aleksander Jan Bajkowski) [task:376181] {CVE-2024-49997}
  - usb: hub: avoid warm port reset during USB3 disconnect (dengjie03) [bug:251189]
  - skmsg: Skip zero length skb in sk_msg_recvmsg (Geliang Tang) [task:346383] {CVE-2024-41048}
  - bpf, sockmap: Fix partial copy_page_to_iter so progress can still be made (John Fastabend) [task:352421]
  - sysctl: always initialize i_uid/i_gid (Thomas Weißschuh) [task:352223] {CVE-2024-42312}
  - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Scott Mayhew) [task:363951] {CVE-2024-46695}
  - btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() (Filipe Manana) [task:364083] {CVE-2024-46751}
  - btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info() (Filipe Manana) [task:364083]
  - btrfs: remove superfluous metadata check at btrfs_lookup_extent_info() (Filipe Manana) [task:364083]
  - ice: Add netif_device_attach/detach into PF reset flow (Dawid Osuchowski) [task:363961] {CVE-2024-46770}
  - ACPI: video: Change how we determine if brightness key-presses are handled (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses (Hans de Goede) [task:368343] {CVE-2024-46859}
  - platform/x86: panasonic-laptop: Use acpi_video_get_backlight_type() (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: filter out duplicate volume up/down/mute keypresses (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: don't report duplicate brightness key-presses (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: revert "Resolve hotkey double trigger bug" (Hans de Goede) [task:368343]
  - platform/x86: panasonic-laptop: sort includes alphabetically (Hans de Goede) [task:368343]
  - treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 392 (Thomas Gleixner) [task:368343]
  - platform/x86: panasonic-laptop: de-obfuscate button codes (Stefan Seyfried) [task:368343]
  - platform/x86: panasonic-laptop: Replace snprintf in show functions with sysfs_emit (Qing Wang) [task:368343]
  - platform/x86: panasonic-laptop: remove redundant assignment of variable result (Colin Ian King) [task:368343]
  - platform/x86: panasonic-laptop: Add sysfs attributes for firmware brightness registers (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Add support for battery charging threshold (eco mode) (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Resolve hotkey double trigger bug (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Add write support to mute (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Fix sticky key init bug (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Fix naming of platform files for consistency with other modules (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Split MODULE_AUTHOR() by one author per macro call (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Replace ACPI prints with pr_*() macros (Kenneth Chan) [task:368343]
  - platform/x86: panasonic-laptop: Add support for optical driver power in Y and W series (Kenneth Chan) [task:368343]
  - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (Kishon Vijay Abraham I) [task:372905] {CVE-2024-47667}
  - nfs: fix UAF in direct writes (Josef Bacik) [task:217568] {CVE-2024-26958}
  - scsi: megaraid: Fix up debug message in megaraid_abort_and_reset() (Hannes Reinecke) [bug:260295]
  - scsi: megaraid_sas: Driver version update to 07.727.03.00-rc1 (Chandrakanth patil) [bug:260295]
  - scsi: megaraid_sas: Log message when controller reset is requested but not issued (Chandrakanth patil) [bug:260295]
  - scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers (Chandrakanth patil) [bug:260295]
  - scsi: megaraid_sas: Fix deadlock on firmware crashdump (Junxiao Bi) [bug:260295]
  - scsi: megaraid: Use pci_dev_id() to simplify the code (Jialin Zhang) [bug:260295]
  - scsi: megaraid_sas: Use pci_dev_id() to simplify the code (Jialin Zhang) [bug:260295]
  - scsi: megaraid_sas: Driver version update to 07.725.01.00-rc1 (Chandrakanth Patil) [bug:260295]
  - scsi: megaraid_sas: Add crash dump mode capability bit in MFI capabilities (Chandrakanth Patil) [bug:260295]
  - scsi: megaraid: Convert sysfs snprintf() to sysfs_emit() (Xuezhi Zhang) [bug:260295]
  - scsi: megaraid_sas: Use struct_size() in code related to struct MR_PD_CFG_SEQ_NUM_SYNC (Gustavo A. R. Silva) [bug:260295]
  - scsi: megaraid_sas: Use struct_size() in code related to struct MR_FW_RAID_MAP (Gustavo A. R. Silva) [bug:260295]
  - scsi: megaraid_sas: Replace one-element array with flexible-array member in MR_PD_CFG_SEQ_NUM_SYNC (Gustavo A. R. Silva) [bug:260295]
  - scsi: megaraid_sas: Replace one-element array with flexible-array member in MR_DRV_RAID_MAP (Gustavo A. R. Silva) [bug:260295]
  - scsi: megaraid_sas: Replace one-element array with flexible-array member in MR_FW_RAID_MAP_DYNAMIC (Gustavo A. R. Silva) [bug:260295]
  - scsi: megaraid_sas: Replace one-element array with flexible-array member in MR_FW_RAID_MAP (Gustavo A. R. Silva) [bug:260295]
  - net/mlx5: Fix bridge mode operations when there are no VFs (Benjamin Poirier) [task:368537] {CVE-2024-46857}
  - net/mlx5: E-switch, Introduce flag to indicate if fdb table is created (Chris Mi) [task:368537]
  - PHYTIUM: can: Modify the version management (Wu Jinyong) [task:346059]
  - PHYTIUM: lbc: Add the driver version description (Wang Hanmo) [task:346059]
  - PHYTIUM: can: Add driver version information (Wu Jinyong) [task:346059]
  - PHYTIUM: drivers/perf: Add version information to Phytium SoC PCIE PMU. (huxianghua) [task:346059]
  - PHYTIUM: drivers/perf: Add version information to Phytium SoC DDR PMU. (huxianghua) [task:346059]
  - PHYTIUM: lbc: Fixed the issue that the driver cannot be removed (Wang Hanmo) [task:346059]
  - PHYTIUM: mtd: spi-nor: Add flash support for two new models (Peng Min) [task:346059]
  - PHYTIUM: can: Fix the bug of runtime PM when removing module. (Wu Jinyong) [task:346059]
  - PHYTIUM: lbc: fixed the issue of unexpected exit in compilation (Wang Hanmo) [task:346059]
  - PHYTIUM: lbc: Add uefi mode support for localbus controller driver (Wang Hanmo) [task:346059]
  - PHYTIUM: dt-bindings: lbc: add bindings for localbus controllers (Wang Hanmo) [task:346059]
  - OPENEULER: genirq: introduce handle_fasteoi_edge_irq for phytium (Yipeng Zou) [task:346059]
  - OPENEULER: genirq: introduce handle_fasteoi_edge_irq flow handler (Yipeng Zou) [task:346059]
  - PHYTIUM: i2c: Use msi instead of INTx in i2c_pcie mode (Wu Jinyong) [task:346059]
  - PHYTIUM: PCIe: Disable SRIOV cabability when pe220x work as BMC cards (Xiao Cong) [task:346059]
  - PHYTIUM: can: Optimize the low performance of can communication (Wu Jinyong) [task:346059]
  - ACPI/IORT: Do not blindly trust DMA masks from firmware (Moritz Fischer) [task:346059]
  - PHYTIUM: arm64: dts: Add pd2308 SoC device tree (Zhou Yulin) [task:346059]
  - staging: iio: frequency: ad9834: Validate frequency parameter value (Aleksandr Mishin) [task:372895] {CVE-2024-47663}
  - staging: iio: frequency: ad9833: Load clock using clock framework (Beniamin Bia) [task:372895]
  - staging: iio: frequency: ad9833: Get frequency value statically (Beniamin Bia) [task:372895]
  - nilfs2: fix state management in error path of log writing function (Ryusuke Konishi) [task:372903] {CVE-2024-47669}
  - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead (Emmanuel Grumbach) [task:372897] {CVE-2024-47672}
  - scsi: pm80xx: Set phy->enable_completion only when we wait for it (Igor Pylypiv) [task:372775] {CVE-2024-47666}
  - scsi: pm80xx: Add fatal error checks (Changyuan Lyu) [task:372775]
  - scsi: pm80xx: Fix for phy enable/disable functionality (Deepak Ukey) [task:372775]
  - smack: tcp: ipv4, fix incorrect labeling (Casey Schaufler) [task:372671] {CVE-2024-47659}
  - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Kent Overstreet) [task:372519] {CVE-2024-47668}
  - xfs: make sure sb_fdblocks is non-negative (Wengang Wang) [task:354053]
  - netfilter: nft_socket: fix sk refcount leaks (Florian Westphal) [task:368153] {CVE-2024-46855}
  - ASoC: meson: axg-card: fix 'use-after-free' (Arseniy Krasnov) [task:368151] {CVE-2024-46849}
  - ethtool: check device is present when getting link settings (Jamie Bainbridge) [task:364141] {CVE-2024-46679}
  - net/mlx5: Add a timeout to acquire the command queue semaphore (Akiva Goldberger) [task:350687] {CVE-2024-38556}
  - HYGON: drivers/crypto/ccp: memmove is used instead of memcpy in overlapped memmory for tkm (niuyongwen) [task:362023]
  - HYGON: drivers/crypto/ccp: add ioctl API to pin TKM hugepage (xiongmengbiao) [task:362023]
  - HYGON: drivers/crypto/ccp: fix vtkm without C-bit when host SME deactivate (xiongmengbiao) [task:362023]
  - HYGON: drivers/crypto/ccp: support TKM run on CSV (xiongmengbiao) [task:362023]
  - HYGON: drivers/crypto/ccp: remove multi-level pointers processing for vpsp (xiongmengbiao) [task:362023]
  - HYGON: drivers/crypto/ccp: Eliminate dependence of the kvm module on the ccp module (xiongmengbiao) [task:362023]
  - HYGON: drivers/crypto/ccp: Allow VM without a configured vid to use TKM (xiongmengbiao) [task:362023]
  - HYGON: drivers/crypto/ccp: support tkm key isolation (xiongmengbiao) [task:362023]
  - HYGON: drivers/crypto/ccp: Support tkm virtualization (niuyongwen) [task:362023]
  - HYGON: arch/x86/kvm: Support psp virtualization (niuyongwen) [task:362023]
  - HYGON: crypto: ccp: Don't set secure memory region if CSV3 feature is unsupported (hanliyang) [task:362023]
  - HYGON: x86/cpu: Detect memory encryption features on Hygon CPUs (hanliyang) [task:362023]
  - drm/amd/display: Check BIOS images before it is used (Alex Hung) [task:368525] {CVE-2024-46809}
  - drm/amdgpu: Replace one-elements array with flex-array members (Paulo Miguel Almeida) [task:368525]
  - btrfs: clean up our handling of refs == 0 in snapshot delete (Josef Bacik) [task:368305] {CVE-2024-46840}
  - ELF: fix kernel.randomize_va_space double read (Alexey Dobriyan) [task:368307] {CVE-2024-46826}
  - drm/amd/display: Check gpio_id before used as array index (Alex Hung) [task:368129] {CVE-2024-46818}
  - drm/amd/display: Check hpd_gpio for NULL before accessing it (Harry Wentland) [task:368129]
  - drm/amd/display: add gpio lock/unlock (Chiawen Huang) [task:368129]
  - drm/amd/display: fix sporadic multiple aux transaction failure (Yogesh Mohan Marimuthu) [task:368129]
  - drm/amd/display: add query HPD interface. (Chiawen Huang) [task:368129]
  - net: dpaa: Pad packets to ETH_ZLEN (Sean Anderson) [task:368157] {CVE-2024-46854}
  - drm/vmwgfx: Fix a deadlock in dma buf fence polling (Zack Rusin) [task:351069] {CVE-2024-43863}
  - drm/vmwgfx/vmwgfx_fence: Add, remove and demote various documentation params/headers (Lee Jones) [task:351069] {CVE-2024-43863}
  - perf/x86/intel: Limit the period on Haswell (Kan Liang) {CVE-2024-46848}
  - driver: iio: add missing checks on iio_info's callback access (Julien Stephan) [task:363791] {CVE-2024-46715}
  - sched/smt: Fix unbalance sched_smt_present dec/inc (Yang Yingliang) [task:357951] {CVE-2024-44958}
  - dma-direct: Leak pages on dma_set_decrypted() failure (Rick Edgecombe) [task:222011] {CVE-2024-35939}
  - Revert "net: xdp: pull ethernet header off packet after computing skb->protocol" (David S. Miller) [task:364431]
  - xfs: don't account extra agfl blocks as available (Brian Foster) [task:354053]
  - ASoC: topology: Fix route memory corruption (Amadeusz Sławiński) [task:346623] {CVE-2024-41069}
  - gtp: fix a potential NULL pointer dereference (Cong Wang) [task:363647] {CVE-2024-46677}
  - arm64/sparsemem: reduce SECTION_SIZE_BITS (Sudarshan Rajagopalan) [bug:219958]
  - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (Ma Jun) [task:364199] {CVE-2024-46724}
  - drm/amd/pm: fix the Out-of-bounds read warning (Jesse Zhang) [task:363753] {CVE-2024-46731}
  - memcg_write_event_control(): fix a user-triggerable oops (Al Viro) [task:363965] {CVE-2024-45021}
  - KVM: arm64: Save/restore sp_el0 as part of __guest_enter (Marc Zyngier) [task:351171]
  - arm64: kvm: stop treating register x18 as caller save (Ard Biesheuvel) [task:351171]
  - drm/amd/display: Add null checker before passing variables (Alex Hung) [task:352183] {CVE-2024-43902}
  - nvmet-tcp: fix kernel crash if commands allocation fails (Maurizio Lombardi) [task:363979] {CVE-2024-46737}
  - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Dragos Tatulea) [task:363773] {CVE-2024-44970}
  - ila: call nf_unregister_net_hooks() sooner (Eric Dumazet) [task:364193] {CVE-2024-46782}
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (David Fernandez Gonzalez) [task:364051] {CVE-2024-46738}
  - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:364043] {CVE-2024-46756}
  - scsi: aacraid: Fix double-free on probe failure (Ben Hutchings) [task:363975] {CVE-2024-46673}
  - dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor (Olivier Dautricourt) [task:363973] {CVE-2024-46716}
  - dmaengine: altera-msgdma: Correctly handle descriptor callbacks (Lars-Peter Clausen) [task:363973]
  - hwmon: (lm95234) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:363963] {CVE-2024-46758}
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (Camila Alvarez) [task:364071] {CVE-2024-46747}
  - Squashfs: sanity check symbolic link size (Phillip Lougher) [task:364131] {CVE-2024-46744}
  - mmc: mmc_test: Fix NULL dereference on allocation failure (Dan Carpenter) [task:364203] {CVE-2024-45028}
  - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:364195] {CVE-2024-46757}
  - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (Sascha Hauer) [task:363957] {CVE-2024-46755}
  - apparmor: fix possible NULL pointer dereference (Leesoo Ahn) [task:364181] {CVE-2024-46721}
  - ACPI: extlog: fix NULL pointer dereference check (Prarit Bhargava) [task:364161] {CVE-2023-52605}
  - usb: dwc3: core: Prevent USB core invalid event buffer address access (Selvarasu Ganesan) [task:364045] {CVE-2024-46675}
  - usb: dwc3: core: Skip setting event buffers for host only controllers (Krishna Kurapati) [task:364045]
  - hwmon: (adc128d818) Fix underflows seen when writing limit attributes (Guenter Roeck) [task:363803] {CVE-2024-46759}
  - udf: Avoid excessive partition lengths (Jan Kara) [task:363799] {CVE-2024-46777}
  - drm/amdgpu: fix ucode out-of-bounds read warning (Tim Huang) [task:364077] {CVE-2024-46723}
  - bpf: Remove tst_run from lwt_seg6local_prog_ops. (Sebastian Andrzej Siewior) [task:364073] {CVE-2024-46754}
  - PCI: Add missing bridge lock to pci_bus_lock() (Dan Williams) [task:364081] {CVE-2024-46750}
  - usb: dwc3: st: fix probed platform device ref count on probe error path (Krzysztof Kozlowski) [task:364169] {CVE-2024-46674}
  - sch/netem: fix use after free in netem_dequeue (Stephen Hemminger) [task:364105] {CVE-2024-46800}
  - soc: qcom: cmd-db: Map shared memory as WC, not WB (Volodymyr Babchuk) [task:364171] {CVE-2024-46689}
  - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (Krishna Kumar) [task:364063] {CVE-2024-46761}
  - nfc: pn533: Add poll mod list filling check (Aleksandr Mishin) [task:364099] {CVE-2024-46676}
  - nfc: pn533: Add autopoll capability (Lars Poeschel) [task:364099]
  - nfc: pn533: Add dev_up/dev_down hooks to phy_ops (Lars Poeschel) [task:364099]
  - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). (Kuniyuki Iwashima) [task:364095]
  - can: bcm: Remove proc entry when dev is unregistered. (Kuniyuki Iwashima) [task:364095] {CVE-2024-46771}
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk (Stefan Wiehler) [task:364093] {CVE-2024-46743}
  - binder: fix UAF caused by offsets overwrite (Carlos Llamas) [task:364173] {CVE-2024-46740}
  - nilfs2: protect references to superblock parameters exposed in sysfs (Ryusuke Konishi) [task:364057] {CVE-2024-46780}
  - nilfs2: replace snprintf in show functions with sysfs_emit (Qing Wang) [task:364057]
  - Revert "btrfs: qgroup: fix quota root leak after quota disable failure" (wangdicheng) [task:347151]
  - pinctrl: single: fix potential NULL dereference in pcs_get_function() (Ma Ke) [task:363769] {CVE-2024-46685}
  - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (Saurabh Sengar) [task:363759] {CVE-2024-46739}
  - drm/amdgpu: fix mc_data out-of-bounds read warning (Tim Huang) [task:363795] {CVE-2024-46722}
  - netem: fix return value if duplicate enqueue fails (Stephen Hemminger) [task:364103] {CVE-2024-45016}
  - net: netem: fix use after free and double free with packet corruption (Jakub Kicinski) [task:364103]
  - fix CONFIG_ARCH_PHYITUM spelling mistake (jiangxiujie) [task:364023]
  - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 (Marc Zyngier) [task:363883] {CVE-2024-46707}
  - Input: uinput - reject requests with unreasonable number of slots (Dmitry Torokhov) [task:364055] {CVE-2024-46745}
  - net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE (Pablo Neira Ayuso) [task:352231] {CVE-2024-42321}
  - kbuild: Drop -Wdeclaration-after-statement (Peter Zijlstra) [task:368863]
  - kbuild: delete the remaining -Wdeclaration-after-statement (zhouyuhang) [task:368863]
  - tcp_bpf: fix return value of tcp_bpf_sendmsg() (Cong Wang) [task:364047] {CVE-2024-46783}
  - sched/fair: fix x86_64_defconfig build errors (liwanwu) [task:350325]
  - sched/fair: Fix imbalance overflow (Vincent Guittot) [task:333737]
  - sched/fair: Cleanup newidle_balance (Vincent Guittot) [task:333737]
  - sched/fair: Remove sysctl_sched_migration_cost condition (Vincent Guittot) [task:333737]
  - sched/fair: Wait before decaying max_newidle_lb_cost (Vincent Guittot) [task:333737]
  - sched/fair: Skip update_blocked_averages if we are defering load balance (Vincent Guittot) [task:333737]
  - sched/fair: Account update_blocked_averages in newidle_balance cost (Vincent Guittot) [task:333737]
  - sched/fair: Check for idle core in wake_affine (Julia Lawall) [task:333737]
  - sched/fair: Ensure tasks spreading in LLC during LB (Vincent Guittot) [task:333737]
  - sched/fair: Fix condition of avg_load calculation (Tao Zhou) [task:333737]
  - sched/fair: Fix statistics for find_idlest_group() (Vincent Guittot) [task:333737]
  - sched/fair : Improve update_sd_pick_busiest for spare capacity case (Vincent Guittot) [task:333737]
  - sched/fair: Fix find_idlest_group() to handle CPU affinity (Vincent Guittot) [task:333737]
  - sched/fair: Fix rework of find_idlest_group() (Vincent Guittot) [task:333737]
  - sched/fair: Rework find_idlest_group() (Vincent Guittot) [task:333737]
  - sched/fair: Optimize find_idlest_group() (Vincent Guittot) [task:333737]
  - sched/fair: Use load instead of runnable load in wakeup path (Vincent Guittot) [task:333737]
  - sched/fair: Use utilization to select misfit task (Vincent Guittot) [task:333737]
  - sched/fair: Spread out tasks evenly when not overloaded (Vincent Guittot) [task:333737]
  - sched/fair: Use load instead of runnable load in load_balance() (Vincent Guittot) [task:333737]
  - sched/fair: Use rq->nr_running when balancing load (Vincent Guittot) [task:333737]
  - sched/fair: Rework load_balance() (Vincent Guittot) [task:333737]
  - sched/fair: Remove meaningless imbalance calculation (Vincent Guittot) [task:333737]
  - sched/fair: Rename sg_lb_stats::sum_nr_running to sum_h_nr_running (Vincent Guittot) [task:333737]
  - sched/fair: Clean up asym packing (Vincent Guittot) [task:333737]
  - sched/fair: Rename weighted_cpuload() to cpu_runnable_load() (Dietmar Eggemann) [task:333737]
  - sched/fair: Replace source_load() & target_load() with weighted_cpuload() (Dietmar Eggemann) [task:333737]
  - sched/fair: Remove sgs->sum_weighted_load (Dietmar Eggemann) [task:333737]
  - sched/fair: Fix rounding bug for asym packing (Vincent Guittot) [task:333737]
  - sched/fair: Add lsub_positive() and use it consistently (Patrick Bellasi) [task:333737]
  - sched/fair: Clean-up update_sg_lb_stats parameters (Quentin Perret) [task:333737]
  - sched/fair: Change 'prefer_sibling' type to bool (Valentin Schneider) [task:333737]
  - sched/fair: Wrap rq->rd->overload accesses with READ/WRITE_ONCE() (Valentin Schneider) [task:333737]
  - pktgen: use cpus_read_lock() in pg_net_init() (Eric Dumazet) [task:363783] {CVE-2024-46681}
  - mm/vmscan: Fix hard LOCKUP in function isolate_lru_pages (liuye) [task:334682]
  - fix some dtb compile warnings (zhouyuhang) [task:328882, task:329382]
  - net: dsa: mv88e6xxx: Fix out-of-bound access (Joseph Huang) [task:358101] {CVE-2024-44988}
  - ice: Fix race condition during interface enslave (Ivan Vecera) [task:347097] {CVE-2022-48842}
  - btrfs: qgroup: fix quota root leak after quota disable failure (Filipe Manana) [task:347151] {CVE-2024-41078}
  - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() (Chao Yu) [task:347103] {CVE-2024-39467}
  - memcg: protect concurrent access to mem_cgroup_idr (Shakeel Butt) [task:352017] {CVE-2024-43892}
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show() (Chen Ridong) [task:352627] {CVE-2024-43853}
  - ice: Add a per-VF limit on number of FDIR filters (Ahmed Zaki) [task:352625] {CVE-2024-42291}
  - netfilter: ctnetlink: use helper function to calculate expect ID (Pablo Neira Ayuso) [task:357933] {CVE-2024-44944}
  - net: hns3: fix a deadlock problem when config TC during resetting (Jie Wang) [task:358107] {CVE-2024-44995}
  - ssb: Fix potential NULL pointer dereference in ssb_device_uevent() (Rand Deeb) [task:347161] {CVE-2024-40982}
  - fuse: Initialize beyond-EOF page contents before setting uptodate (Jann Horn) [task:358119] {CVE-2024-44947}
  - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (Andi Shyti) [task:351225] {CVE-2024-42259}
  - Input: MT - limit max slots (Tetsuo Handa) [task:357851] {CVE-2024-45008}
  - kcm: Serialise kcm_sendmsg() for the same socket. (Kuniyuki Iwashima) [task:358105] {CVE-2024-44946}
  - ice: Fix improper extts handling (Milena Olech) [task:345311] {CVE-2024-42139}
  - ice: Add GPIO pin support for E823 products (Karol Kolacinski) [task:345311]
  - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (Dmitry Baryshkov) [task:357971] {CVE-2024-44982}
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (Mathias Nyman) [task:357961] {CVE-2024-45006}
  - ALSA: line6: Fix racy access to midibuf (Takashi Iwai) [task:357917] {CVE-2024-44954}
  - s390/sclp: Prevent release of buffer in I/O (Peter Oberparleiter) [task:357955] {CVE-2024-44969}
  - x86/mm: Fix pti_clone_pgtable() alignment assumption (Peter Zijlstra) [task:357895] {CVE-2024-44965}
  - ipv6: prevent UAF in ip6_send_skb() (Eric Dumazet) [task:357925] {CVE-2024-44987}
  - atm: idt77252: prevent use after free in dequeue_rx() (Dan Carpenter) [task:357805] {CVE-2024-44998}
  - wifi: mac80211: sdata can be NULL during AMPDU start (Alexander Wetzel) [task:351523] {CVE-2022-48875}
  - x86/mtrr: Check if fixed MTRRs exist before saving them (Andi Kleen) [task:357771] {CVE-2024-44948}
  - usb: gadget: core: Check for unset descriptor (Chris Wulff) [task:357799] {CVE-2024-44960}
  - media: dvb-usb-v2: af9035: fix missing unlock (Hans Verkuil) [task:357803]
  - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong) [task:357803] {CVE-2023-52915}
  - ibmvnic: Add tx check to prevent skb leak (Nick Child) [task:345709] {CVE-2024-41066}
  - x86/speculation: Exclude Zhaoxin CPUs from MMIO vulnerability (Enze Li) [task:361049]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.18.v2401
changelog:
  el7.ns7.00.01
  - mm: fix file permission by mistake (Jackie Liu)
  - inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [task:364261]
  - 6lowpan: use rbtree for IP frag queue (Peter Oskolkov) [task:364261]
  - Revert "inet: frags: re-introduce skb coalescing for local delivery" (taowei) [task:364261]
  - kernfs: fix potential NULL dereference in __kernfs_remove (Yushan Zhou) [task:352489]
  - kernfs: fix NULL dereferencing in kernfs_remove (Minchan Kim) [task:352489]
  - kernfs: remove redundant kernfs_rwsem declaration. (Imran Khan) [task:352489]
  - kernfs: prevent early freeing of root node (Minchan Kim) [task:352489]
  - kernfs: switch global kernfs_rwsem lock to per-fs lock (Minchan Kim) [task:352489]
  - icmp: change the order of rate limits (Eric Dumazet) [task:376375] {CVE-2024-47678}
  - REDHAT: mm/memcg: Fix mem_cgroup_id_get_online() underflow problem (lihongfu) [task:391317]
  - REDHAT: mm/memcg: Free percpu stats memory of dying memcg's (lihongfu) [task:391317]
  - x86/microcode/AMD: Fix mixed steppings support (Borislav Petkov (AMD)) [task:383041]
  - security/kysec: fix crash for task kill (mengdehui) [task:390393]
  - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi) [task:371789]
  - virtio-mmio: don't break lifecycle of vm_dev (Wolfram Sang) [task:379857]
  - virtio-mmio: convert to devm_platform_ioremap_resource (Yangtao Li) [task:377245]
  - virtio-mmio: Use to_virtio_mmio_device() to simply code (Tang Bin) [task:379857]
  - slip: make slhc_remember() more robust against malicious packets (Eric Dumazet) [task:376251] {CVE-2024-50033}
  - net: delete "register" keyword (Alexey Dobriyan) [task:376251]
  - config: enable CONFIG_BUG_ON_DATA_CORRUPTION (tanze) [task:354881]
  - usb: typec: altmode should keep reference to parent (Thadeu Lima de Souza Cascardo) [task:387987] {CVE-2024-50150}
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout (Luiz Augusto von Dentz) [task:387967] {CVE-2024-50125}
  - Bluetooth: call sock_hold earlier in sco_conn_del (Desmond Cheong Zhi Xi) [task:387967]
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [task:387575] {CVE-2024-50142}
  - parport: Proper fix for array out-of-bounds access (Takashi Iwai) [task:380221] {CVE-2024-50074}
  - bpf: Use raw_spinlock_t in ringbuf (Wander Lairson Costa) [task:387929] {CVE-2024-50138}
  - nvmet-auth: assign dh_key to NULL after kfree_sensitive (Vitaliy Shevtsov) [task:387435] {CVE-2024-50215}
  - nilfs2: fix kernel bug due to missing clearing of checked flag (Ryusuke Konishi) [task:387405] {CVE-2024-50230}
  - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Eric Dumazet) [task:387901] {CVE-2024-50256}
  - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Simon Horman) [task:387901]
  - ixgbevf: Fix resource leak in ixgbevf_init_module() (Shang XiaoJing) [task:376297] {CVE-2022-49028}
  - sched/pelt: Fix attach_entity_load_avg() corner case (kuyo chang) [task:375977]
  - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Rutland) [task:387961] {CVE-2024-50099}
  - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (Wang Hai) [task:387913] {CVE-2024-50168}
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister (Ye Bin) [task:387981] {CVE-2024-50148}
  - RDMA/mad: Improve handling of timed out WRs of mad agent (Saravanan Vajravel) [task:387985] {CVE-2024-50095}
  - IB/mad: Issue complete whenever decrements agent refcount (Shay Drory) [task:387985]
  - sched/topology: remove phytium platform Manually build CLS sd (liwanwu) [bug:282607]
  - wifi: ath10k: Fix memory leak in management tx (Manikanta Pubbisetty) [task:387963] {CVE-2024-50236}
  - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [task:330540] {CVE-2024-38570}
  - gfs2: simplify gdlm_put_lock with out_free label (Bob Peterson) [task:330540]
  - netfilter: Drop fragmented ndisc packets assembled in netfilter (Georg Kohmann) [bug:277233]
  - be2net: fix potential memory leak in be_xmit() (Wang Hai) [task:387921] {CVE-2024-50167}
  - ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [task:387779] {CVE-2024-50179}
  - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Justin Tee) [task:387983] {CVE-2024-50183}
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (Pablo Neira Ayuso) [task:387917] {CVE-2024-50251}
  - net: explicitly clear the sk pointer, when pf->create fails (Ignat Korchagin) [task:387557] {CVE-2024-50186}
  - nilfs2: fix kernel bug due to missing clearing of buffer delay flag (Ryusuke Konishi) [task:387481] {CVE-2024-50116}
  - drm/vc4: Stop the active perfmon before being destroyed (Maíra Canal) [task:387413] {CVE-2024-50187}
  - rtmutex: Drop rt_mutex::wait_lock before scheduling (Roland Xu) [task:368141] {CVE-2024-46829}
  - x86/ioapic: Handle allocation failures gracefully (Thomas Gleixner) [task:380139] {CVE-2024-49927}
  - net/mlx5e: Fix netif state handling (Shay Drory) [task:330508] {CVE-2024-38608}
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Omar Sandoval) [task:380143] {CVE-2024-50082}
  - list: add "list_del_init_careful()" to go with "list_empty_careful()" (Linus Torvalds) [task:380143]
  - gpiolib: fix memory leak in gpiochip_setup_dev() (Zeng Heng) [task:376237] {CVE-2022-48975}
  - gpiolib: check the 'ngpios' property in core gpiolib code (Bartosz Golaszewski) [task:376237]
  - gpiolib: free device name on error path to fix kmemleak (Quanyang Wang) [task:376237]
  - gpio: gpiolib: Normalize return code variable name (Linus Walleij) [task:376237]
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too (Jiri Slaby (SUSE)) [task:376267] {CVE-2024-50058}
  - tcp: avoid too many retransmit packets (Eric Dumazet) [task:347169] {CVE-2024-41007}
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Eric Dumazet) [task:347169]
  - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Menglong Dong) [task:347169]
  - tcp: refactor tcp_retransmit_timer() (Eric Dumazet) [task:347169]
  - padata: use integer wrap around to prevent deadlock on seq_nr overflow (VanGiang Nguyen) [task:376197] {CVE-2024-47739}
  - net/sched: act_mirred: don't override retval if we already lost the skb (Jakub Kicinski) [task:210475] {CVE-2024-26739}
  - bonding: update port speed when getting bond speed (Hangbin Liu) [task:382011]
  - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache (Oliver Upton) [task:200747] {CVE-2024-26598}
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect (Luiz Augusto von Dentz) [task:375621] {CVE-2024-49950}
  - mm: avoid leaving partial pfn mappings around in error case (Linus Torvalds) [task:372881] {CVE-2024-47674}
  - mm: add remap_pfn_range_notrack (Christoph Hellwig) [task:372881]
  - mm/memory.c: make remap_pfn_range() reject unaligned addr (Alex Zhang) [task:372881]
  - mm: fix ambiguous comments for better code readability (chenqiwu) [task:372881]
  - mm: clarify a confusing comment for remap_pfn_range() (WANG Wenhu) [task:372881]
  - docs/core-api/mm: fix return value descriptions in mm/ (Mike Rapoport) [task:372881]
  - nfsd: map the EBADMSG to nfserr_io to avoid warning (Li Lingfeng) [task:376263] {CVE-2024-49875}
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Steve Wahl) [task:376133] {CVE-2024-50017}
  - drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs (Konrad Dybcio) [task:380141] {CVE-2024-49901}
  - bpf: Fix a sdiv overflow issue (Yonghong Song) [task:376399] {CVE-2024-49888}
  - bpf: Rename fixup_bpf_calls and add some comments (Brendan Jackman) [task:376399]
  - dm snapshot: fix lockup in dm_exception_table_exit (Mikulas Patocka) [task:221943] {CVE-2024-35805}
  - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (Ard Biesheuvel) [task:376275] {CVE-2024-49858}
  - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (Qu Wenruo) [task:376151] {CVE-2024-49868}
  - fsnotify: clear PARENT_WATCHED flags lazily (Amir Goldstein) [task:376261] {CVE-2024-47660}
  - xfs: Reduce unnecessary searches when searching for the best extents (Chi Zhiling) [task:377527]
  - jfs: Fix sanity check in dbMount (Dave Kleikamp) [task:376131]
  - jfs: fix out-of-bounds in dbNextAG() and diAlloc() (Jeongjun Park) [task:376131] {CVE-2024-47723}
  - net/xen-netback: prevent UAF in xenvif_flush_hash() (Jeongjun Park) [task:380461] {CVE-2024-49936}
  - net: xen-netback: hash.c: Use built-in RCU list checking (Madhuparna Bhowmik) [task:380461]
  - LoongArch: drivers/pci: Enables the acs ability of loongson Bridge (jianghaoran) [task:373887]
  - LoongArch: drivers/iommu: Support iommu for 3c6000 (Xianglai Li) [task:373887]
  - LoongArch: Temporary add 3C6000 & 3D6000 support (dongbiao) [task:373887]
  - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (Jinjie Ruan) [task:380455] {CVE-2023-52917}
  - fou: fix initialization of grc (Muhammad Usama Anjum) [task:363977]
  - fou: Fix null-ptr-deref in GRO. (Kuniyuki Iwashima) [task:363977] {CVE-2024-46763}
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers (Eric Dumazet) [task:363977]
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers (Eric Dumazet) [task:363977]
  - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr (Mike Marciniszyn) [task:225598] {CVE-2021-47523}
  - vfs: Don't evict inode under the inode lru traversing context (Zhihao Cheng) [task:358113] {CVE-2024-45003}
  - ACPI: sysfs: validate return type of _STR method (Thomas Weißschuh) [task:380101] {CVE-2024-49860}
  - drm/amdgpu/pm: Fix the null pointer dereference for smu7 (Ma Jun) [task:352623] {CVE-2024-43909}
  - drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (Hersen Wu) [task:368523] {CVE-2024-46816}
  - ext4: no need to continue when the number of entries is 1 (Edward Adam Davis) [task:380197] {CVE-2024-49967}
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (Gustavo A. R. Silva) [task:380459] {CVE-2024-50008}
  - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (Toke Høiland-Jørgensen) [task:379923] {CVE-2024-49938}
  - net: add more sanity checks to qdisc_pkt_len_init() (Eric Dumazet) [task:380237] {CVE-2024-49948}
  - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet) [task:376177] {CVE-2024-47707}
  - drm/msm/dpu: remove LOCK/CLEAR support in RM (Jeykumar Sankaran) [task:379871]
  - drm/msm/dpu: clean up destination scaler residue (Jeykumar Sankaran) [task:379871]
  - SUNRPC: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [bug:263777]
  - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing) [task:378953]
  - netfilter: br_netfilter: fix panic with metadata_dst skb (Andy Roulin) [task:376437] {CVE-2024-50045}
  - drm/amd/pm: ensure the fw_info is not null before using it (Tim Huang) [task:376229] {CVE-2024-49890}
  - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (Lizhi Xu) [task:375655] {CVE-2024-49877}
  - sock_map: Add a cond_resched() in sock_hash_free() (Eric Dumazet) [task:376293] {CVE-2024-47710}
  - tipc: guard against string buffer overrun (Simon Horman) [task:376129] {CVE-2024-49995}
  - ALSA: asihpi: Fix potential OOB array access (Takashi Iwai) [task:376313] {CVE-2024-50007}
  - iavf: Fix error handling in iavf_init_module() (Yuan Can) [task:376061] {CVE-2022-49027}
  - media: pci: cx23885: check cx23885_vdev_init() return (Hans Verkuil) [task:376301] {CVE-2023-52918}
  - spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (Devyn Liu) [task:372557] {CVE-2024-47664}
  - nilfs2: fix missing cleanup on rollforward recovery error (Ryusuke Konishi) [task:363971] {CVE-2024-46781}
  - btrfs: replace BUG_ON() with error handling at update_ref_for_cow() (Filipe Manana) [task:363775] {CVE-2024-46752}
  - ACPI: PAD: fix crash in exit_round_robin() (Seiji Nishikawa) [task:376159] {CVE-2024-49935}
  - ACPI: acpi_pad: add a missed blank line after declarations (Xiaofei Tan) [task:376159]
  - drm: omapdrm: Add missing check for alloc_ordered_workqueue (Ma Ke) [task:376335] {CVE-2024-49879}
  - Bluetooth: hci_core: Fix leaking sent_cmd skb (Luiz Augusto von Dentz) [task:344623] {CVE-2022-48844}
  - net/mlx5: Fix HW spec violation configuring uplink (Eli Cohen) [task:365327]
  - net/mlx5e: Add missing capability check for uplink follow (Aya Levin) [task:365327]
  - net/mlx5: Add ts_cqe_to_dest_cqn related bits (Eran Ben Elisha) [task:365327]
  - bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error (Daniel Borkmann) [task:375653] {CVE-2024-47728}
  - RDMA/cxgb4: Added NULL check for lookup_atid (Mikhail Lobanov) [task:376283] {CVE-2024-47749}
  - tcp: check skb is non-NULL in tcp_rto_delta_us() (Josh Hunt) [task:375609] {CVE-2024-47684}
  - rtc: cmos: Fix wake alarm breakage (Rafael J. Wysocki) [task:375407]
  - rtc: cmos: Fix event handler registration ordering issue (Rafael J. Wysocki) [task:375407] {CVE-2022-48953}
  - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Eric Dumazet) [task:375619] {CVE-2024-49949}
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Zhu Yanjun) [task:375617] {CVE-2024-47696}
  - net/mlx5e: Fix use-after-free when reverting termination table (Roi Dayan) [task:375625] {CVE-2022-49025}
  - block, bfq: fix possible UAF for bfqq->bic with merge chain (Yu Kuai) [task:375629] {CVE-2024-47706}
  - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (Xin Long) [task:375633] {CVE-2024-49944}
  - MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed (Jiaxun Yang) [task:368269] {CVE-2024-46832}
  - ext4: fix i_data_sem unlock order in ext4_ind_migrate() (Artem Sadovnikov) [task:375967] {CVE-2024-50006}
  - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() (Ryusuke Konishi) [task:375969] {CVE-2024-47699}
  - netfilter: nf_tables: prevent nf_skb_duplicated corruption (Eric Dumazet) [task:376057] {CVE-2024-49952}
  - ppp: fix ppp_async_encode() illegal access (Eric Dumazet) [task:375965] {CVE-2024-50035}
  - ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (Kaixin Wang) [task:375963] {CVE-2024-50059}
  - nfsd: call cache_put if xdr_reserve_space returns NULL (Guoqing Jiang) [task:376185] {CVE-2024-47737}
  - ocfs2: remove unreasonable unlock in ocfs2_read_blocks (Lizhi Xu) [task:376163] {CVE-2024-49965}
  - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error (Junlin Li) [task:375615] {CVE-2024-47697}
  - mailbox: bcm2835: Fix timeout during suspend mode (Stefan Wahren) [task:376341] {CVE-2024-49963}
  - nilfs2: fix potential oob read in nilfs_btree_check_delete() (Ryusuke Konishi) [task:376183] {CVE-2024-47757}
  - ext4: aovid use-after-free in ext4_ext_insert_extent() (Baokun Li) [task:376347] {CVE-2024-49883}
  - ocfs2: cancel dqi_sync_work before freeing oinfo (Joseph Qi) [task:376203] {CVE-2024-49966}
  - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (Jonathan Cameron) [task:368125] {CVE-2024-46822}
  - arm64: acpi: Move get_cpu_for_acpi_id() to a header (James Morse) [task:368125]
  - drm/amd/display: added NULL check at start of dc_validate_stream (winstang) [task:375221] {CVE-2024-46802}
  - ocfs2: reserve space for inline xattr before attaching reflink tree (Gautham Ananthakrishna) [task:376165] {CVE-2024-49958}
  - btrfs: wait for fixup workers before stopping cleaner kthread during umount (Filipe Manana) [task:376329] {CVE-2024-49867}
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Eric Dumazet) [task:376333] {CVE-2024-47685}
  - ACPI: battery: Fix possible crash when unregistering a battery hook (Armin Wolf) [task:376339] {CVE-2024-49955}
  - ACPI: battery: Simplify battery hook locking (Armin Wolf) [task:376339]
  - net: ethernet: nixge: fix NULL dereference (Yuri Karpov) [task:376191] {CVE-2022-49019}
  - net: nixge: Address compiler warnings when building for i386 (Moritz Fischer) [task:376191]
  - net: nixge: Add support for 64-bit platforms (Moritz Fischer) [task:376191]
  - ext4: fix double brelse() the buffer of the extents path (Baokun Li) [task:376207] {CVE-2024-49882}
  - vfs: fix race between evice_inodes() and find_inode()&iput() (Julian Sun) [task:376219] {CVE-2024-47679}
  - jfs: check if leafidx greater than num leaves per dmap tree (Edward Adam Davis) [task:376377] {CVE-2024-49902}
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error (Junlin Li) [task:376239] {CVE-2024-47698}
  - net: Fix an unsafe loop on the list (Anastasia Kovaleva) [task:376085] {CVE-2024-50024}
  - xen: use correct end address of kernel for conflict checking (Juergen Gross) [task:376245] {CVE-2024-47722}
  - media: venus: fix use after free bug in venus_remove due to race condition (Zheng Wang) [task:376401] {CVE-2024-49981}
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem (Thadeu Lima de Souza Cascardo) [task:376249] {CVE-2024-47701}
  - ext4: return error on ext4_find_inline_entry (Thadeu Lima de Souza Cascardo) [task:376249]
  - jfs: Fix uninit-value access of new_ea in ea_buffer (Zhao Mengmeng) [task:376257] {CVE-2024-49900}
  - drm/amd/display: Check stream before comparing them (Alex Hung) [task:376409] {CVE-2024-49896}
  - sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop (Xin Long) [task:376417]
  - sctp: fix memory leak in sctp_stream_outq_migrate() (Zhengchao Shao) [task:376417] {CVE-2022-49013}
  - fbdev: pxafb: Fix possible use after free in pxafb_task() (Kaixin Wang) [task:376117] {CVE-2024-49924}
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation (Srinivasan Shanmugam) [task:376113] {CVE-2024-49894}
  - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled (Chengchang Tang) [task:376269] {CVE-2024-47735}
  - ocfs2: fix null-ptr-deref when journal load failed. (Julian Sun) [task:376303] {CVE-2024-49957}
  - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (Luiz Augusto von Dentz) [task:376309] {CVE-2024-50044}
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (Baokun Li) [task:376143] {CVE-2024-49959}
  - jfs: Fix uaf in dbFreeBits (Edward Adam Davis) [task:376153] {CVE-2024-49903}
  - e100: Fix possible use after free in e100_xmit_prepare (Wang Hai) [task:376281] {CVE-2022-49026}
  - e100: switch from 'pci_' to 'dma_' API (Christophe JAILLET) [task:376281]
  - tracing: Free buffers when a used dynamic event is removed (Steven Rostedt (Google)) [task:375645] {CVE-2022-49006}
  - tracing: initialize variable in create_dyn_event() (Frank Rowand) [task:375645]
  - tracing: Add unified dynamic event framework (Masami Hiramatsu) [task:375645]
  - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (Pei Xiao) [task:376385] {CVE-2024-49962}
  - HYGON: Add psp interrupt x86 register on hygon 4G platform (chench) [task:380133]
  - serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain) [task:217562] {CVE-2024-26999}
  - tty: serial: remove set but not used variable 'error' (YueHaibing) [task:217562]
  - drm/msm/dpu: fix compile error (Lu Yao) [task:379873]
  - Fix a redeclaration compile error (luoxuanqiang) [task:380985]
  - btrfs: don't balance btree inode pages from buffered write path (Nikolay Borisov) [task:375983]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.18.v2401
changelog:
  - mm: fix file permission by mistake (Jackie Liu)
  - inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [task:364261]
  - 6lowpan: use rbtree for IP frag queue (Peter Oskolkov) [task:364261]
  - Revert "inet: frags: re-introduce skb coalescing for local delivery" (taowei) [task:364261]
  - kernfs: fix potential NULL dereference in __kernfs_remove (Yushan Zhou) [task:352489]
  - kernfs: fix NULL dereferencing in kernfs_remove (Minchan Kim) [task:352489]
  - kernfs: remove redundant kernfs_rwsem declaration. (Imran Khan) [task:352489]
  - kernfs: prevent early freeing of root node (Minchan Kim) [task:352489]
  - kernfs: switch global kernfs_rwsem lock to per-fs lock (Minchan Kim) [task:352489]
  - icmp: change the order of rate limits (Eric Dumazet) [task:376375] {CVE-2024-47678}
  - REDHAT: mm/memcg: Fix mem_cgroup_id_get_online() underflow problem (lihongfu) [task:391317]
  - REDHAT: mm/memcg: Free percpu stats memory of dying memcg's (lihongfu) [task:391317]
  - x86/microcode/AMD: Fix mixed steppings support (Borislav Petkov (AMD)) [task:383041]
  - security/kysec: fix crash for task kill (mengdehui) [task:390393]
  - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi) [task:371789]
  - virtio-mmio: don't break lifecycle of vm_dev (Wolfram Sang) [task:379857]
  - virtio-mmio: convert to devm_platform_ioremap_resource (Yangtao Li) [task:377245]
  - virtio-mmio: Use to_virtio_mmio_device() to simply code (Tang Bin) [task:379857]
  - slip: make slhc_remember() more robust against malicious packets (Eric Dumazet) [task:376251] {CVE-2024-50033}
  - net: delete "register" keyword (Alexey Dobriyan) [task:376251]
  - config: enable CONFIG_BUG_ON_DATA_CORRUPTION (tanze) [task:354881]
  - usb: typec: altmode should keep reference to parent (Thadeu Lima de Souza Cascardo) [task:387987] {CVE-2024-50150}
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout (Luiz Augusto von Dentz) [task:387967] {CVE-2024-50125}
  - Bluetooth: call sock_hold earlier in sco_conn_del (Desmond Cheong Zhi Xi) [task:387967]
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [task:387575] {CVE-2024-50142}
  - parport: Proper fix for array out-of-bounds access (Takashi Iwai) [task:380221] {CVE-2024-50074}
  - bpf: Use raw_spinlock_t in ringbuf (Wander Lairson Costa) [task:387929] {CVE-2024-50138}
  - nvmet-auth: assign dh_key to NULL after kfree_sensitive (Vitaliy Shevtsov) [task:387435] {CVE-2024-50215}
  - nilfs2: fix kernel bug due to missing clearing of checked flag (Ryusuke Konishi) [task:387405] {CVE-2024-50230}
  - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Eric Dumazet) [task:387901] {CVE-2024-50256}
  - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Simon Horman) [task:387901]
  - ixgbevf: Fix resource leak in ixgbevf_init_module() (Shang XiaoJing) [task:376297] {CVE-2022-49028}
  - sched/pelt: Fix attach_entity_load_avg() corner case (kuyo chang) [task:375977]
  - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Rutland) [task:387961] {CVE-2024-50099}
  - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (Wang Hai) [task:387913] {CVE-2024-50168}
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister (Ye Bin) [task:387981] {CVE-2024-50148}
  - RDMA/mad: Improve handling of timed out WRs of mad agent (Saravanan Vajravel) [task:387985] {CVE-2024-50095}
  - IB/mad: Issue complete whenever decrements agent refcount (Shay Drory) [task:387985]
  - sched/topology: remove phytium platform Manually build CLS sd (liwanwu) [bug:282607]
  - wifi: ath10k: Fix memory leak in management tx (Manikanta Pubbisetty) [task:387963] {CVE-2024-50236}
  - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [task:330540] {CVE-2024-38570}
  - gfs2: simplify gdlm_put_lock with out_free label (Bob Peterson) [task:330540]
  - netfilter: Drop fragmented ndisc packets assembled in netfilter (Georg Kohmann) [bug:277233]
  - be2net: fix potential memory leak in be_xmit() (Wang Hai) [task:387921] {CVE-2024-50167}
  - ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [task:387779] {CVE-2024-50179}
  - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Justin Tee) [task:387983] {CVE-2024-50183}
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (Pablo Neira Ayuso) [task:387917] {CVE-2024-50251}
  - net: explicitly clear the sk pointer, when pf->create fails (Ignat Korchagin) [task:387557] {CVE-2024-50186}
  - nilfs2: fix kernel bug due to missing clearing of buffer delay flag (Ryusuke Konishi) [task:387481] {CVE-2024-50116}
  - drm/vc4: Stop the active perfmon before being destroyed (Maíra Canal) [task:387413] {CVE-2024-50187}
  - rtmutex: Drop rt_mutex::wait_lock before scheduling (Roland Xu) [task:368141] {CVE-2024-46829}
  - x86/ioapic: Handle allocation failures gracefully (Thomas Gleixner) [task:380139] {CVE-2024-49927}
  - net/mlx5e: Fix netif state handling (Shay Drory) [task:330508] {CVE-2024-38608}
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Omar Sandoval) [task:380143] {CVE-2024-50082}
  - list: add "list_del_init_careful()" to go with "list_empty_careful()" (Linus Torvalds) [task:380143]
  - gpiolib: fix memory leak in gpiochip_setup_dev() (Zeng Heng) [task:376237] {CVE-2022-48975}
  - gpiolib: check the 'ngpios' property in core gpiolib code (Bartosz Golaszewski) [task:376237]
  - gpiolib: free device name on error path to fix kmemleak (Quanyang Wang) [task:376237]
  - gpio: gpiolib: Normalize return code variable name (Linus Walleij) [task:376237]
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too (Jiri Slaby (SUSE)) [task:376267] {CVE-2024-50058}
  - tcp: avoid too many retransmit packets (Eric Dumazet) [task:347169] {CVE-2024-41007}
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Eric Dumazet) [task:347169]
  - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Menglong Dong) [task:347169]
  - tcp: refactor tcp_retransmit_timer() (Eric Dumazet) [task:347169]
  - padata: use integer wrap around to prevent deadlock on seq_nr overflow (VanGiang Nguyen) [task:376197] {CVE-2024-47739}
  - net/sched: act_mirred: don't override retval if we already lost the skb (Jakub Kicinski) [task:210475] {CVE-2024-26739}
  - bonding: update port speed when getting bond speed (Hangbin Liu) [task:382011]
  - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache (Oliver Upton) [task:200747] {CVE-2024-26598}
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect (Luiz Augusto von Dentz) [task:375621] {CVE-2024-49950}
  - mm: avoid leaving partial pfn mappings around in error case (Linus Torvalds) [task:372881] {CVE-2024-47674}
  - mm: add remap_pfn_range_notrack (Christoph Hellwig) [task:372881]
  - mm/memory.c: make remap_pfn_range() reject unaligned addr (Alex Zhang) [task:372881]
  - mm: fix ambiguous comments for better code readability (chenqiwu) [task:372881]
  - mm: clarify a confusing comment for remap_pfn_range() (WANG Wenhu) [task:372881]
  - docs/core-api/mm: fix return value descriptions in mm/ (Mike Rapoport) [task:372881]
  - nfsd: map the EBADMSG to nfserr_io to avoid warning (Li Lingfeng) [task:376263] {CVE-2024-49875}
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Steve Wahl) [task:376133] {CVE-2024-50017}
  - drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs (Konrad Dybcio) [task:380141] {CVE-2024-49901}
  - bpf: Fix a sdiv overflow issue (Yonghong Song) [task:376399] {CVE-2024-49888}
  - bpf: Rename fixup_bpf_calls and add some comments (Brendan Jackman) [task:376399]
  - dm snapshot: fix lockup in dm_exception_table_exit (Mikulas Patocka) [task:221943] {CVE-2024-35805}
  - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (Ard Biesheuvel) [task:376275] {CVE-2024-49858}
  - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (Qu Wenruo) [task:376151] {CVE-2024-49868}
  - fsnotify: clear PARENT_WATCHED flags lazily (Amir Goldstein) [task:376261] {CVE-2024-47660}
  - xfs: Reduce unnecessary searches when searching for the best extents (Chi Zhiling) [task:377527]
  - jfs: Fix sanity check in dbMount (Dave Kleikamp) [task:376131]
  - jfs: fix out-of-bounds in dbNextAG() and diAlloc() (Jeongjun Park) [task:376131] {CVE-2024-47723}
  - net/xen-netback: prevent UAF in xenvif_flush_hash() (Jeongjun Park) [task:380461] {CVE-2024-49936}
  - net: xen-netback: hash.c: Use built-in RCU list checking (Madhuparna Bhowmik) [task:380461]
  - LoongArch: drivers/pci: Enables the acs ability of loongson Bridge (jianghaoran) [task:373887]
  - LoongArch: drivers/iommu: Support iommu for 3c6000 (Xianglai Li) [task:373887]
  - LoongArch: Temporary add 3C6000 & 3D6000 support (dongbiao) [task:373887]
  - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (Jinjie Ruan) [task:380455] {CVE-2023-52917}
  - fou: fix initialization of grc (Muhammad Usama Anjum) [task:363977]
  - fou: Fix null-ptr-deref in GRO. (Kuniyuki Iwashima) [task:363977] {CVE-2024-46763}
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers (Eric Dumazet) [task:363977]
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers (Eric Dumazet) [task:363977]
  - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr (Mike Marciniszyn) [task:225598] {CVE-2021-47523}
  - vfs: Don't evict inode under the inode lru traversing context (Zhihao Cheng) [task:358113] {CVE-2024-45003}
  - ACPI: sysfs: validate return type of _STR method (Thomas Weißschuh) [task:380101] {CVE-2024-49860}
  - drm/amdgpu/pm: Fix the null pointer dereference for smu7 (Ma Jun) [task:352623] {CVE-2024-43909}
  - drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (Hersen Wu) [task:368523] {CVE-2024-46816}
  - ext4: no need to continue when the number of entries is 1 (Edward Adam Davis) [task:380197] {CVE-2024-49967}
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (Gustavo A. R. Silva) [task:380459] {CVE-2024-50008}
  - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (Toke Høiland-Jørgensen) [task:379923] {CVE-2024-49938}
  - net: add more sanity checks to qdisc_pkt_len_init() (Eric Dumazet) [task:380237] {CVE-2024-49948}
  - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet) [task:376177] {CVE-2024-47707}
  - drm/msm/dpu: remove LOCK/CLEAR support in RM (Jeykumar Sankaran) [task:379871]
  - drm/msm/dpu: clean up destination scaler residue (Jeykumar Sankaran) [task:379871]
  - SUNRPC: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [bug:263777]
  - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing) [task:378953]
  - netfilter: br_netfilter: fix panic with metadata_dst skb (Andy Roulin) [task:376437] {CVE-2024-50045}
  - drm/amd/pm: ensure the fw_info is not null before using it (Tim Huang) [task:376229] {CVE-2024-49890}
  - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (Lizhi Xu) [task:375655] {CVE-2024-49877}
  - sock_map: Add a cond_resched() in sock_hash_free() (Eric Dumazet) [task:376293] {CVE-2024-47710}
  - tipc: guard against string buffer overrun (Simon Horman) [task:376129] {CVE-2024-49995}
  - ALSA: asihpi: Fix potential OOB array access (Takashi Iwai) [task:376313] {CVE-2024-50007}
  - iavf: Fix error handling in iavf_init_module() (Yuan Can) [task:376061] {CVE-2022-49027}
  - media: pci: cx23885: check cx23885_vdev_init() return (Hans Verkuil) [task:376301] {CVE-2023-52918}
  - spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (Devyn Liu) [task:372557] {CVE-2024-47664}
  - nilfs2: fix missing cleanup on rollforward recovery error (Ryusuke Konishi) [task:363971] {CVE-2024-46781}
  - btrfs: replace BUG_ON() with error handling at update_ref_for_cow() (Filipe Manana) [task:363775] {CVE-2024-46752}
  - ACPI: PAD: fix crash in exit_round_robin() (Seiji Nishikawa) [task:376159] {CVE-2024-49935}
  - ACPI: acpi_pad: add a missed blank line after declarations (Xiaofei Tan) [task:376159]
  - drm: omapdrm: Add missing check for alloc_ordered_workqueue (Ma Ke) [task:376335] {CVE-2024-49879}
  - Bluetooth: hci_core: Fix leaking sent_cmd skb (Luiz Augusto von Dentz) [task:344623] {CVE-2022-48844}
  - net/mlx5: Fix HW spec violation configuring uplink (Eli Cohen) [task:365327]
  - net/mlx5e: Add missing capability check for uplink follow (Aya Levin) [task:365327]
  - net/mlx5: Add ts_cqe_to_dest_cqn related bits (Eran Ben Elisha) [task:365327]
  - bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error (Daniel Borkmann) [task:375653] {CVE-2024-47728}
  - RDMA/cxgb4: Added NULL check for lookup_atid (Mikhail Lobanov) [task:376283] {CVE-2024-47749}
  - tcp: check skb is non-NULL in tcp_rto_delta_us() (Josh Hunt) [task:375609] {CVE-2024-47684}
  - rtc: cmos: Fix wake alarm breakage (Rafael J. Wysocki) [task:375407]
  - rtc: cmos: Fix event handler registration ordering issue (Rafael J. Wysocki) [task:375407] {CVE-2022-48953}
  - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Eric Dumazet) [task:375619] {CVE-2024-49949}
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Zhu Yanjun) [task:375617] {CVE-2024-47696}
  - net/mlx5e: Fix use-after-free when reverting termination table (Roi Dayan) [task:375625] {CVE-2022-49025}
  - block, bfq: fix possible UAF for bfqq->bic with merge chain (Yu Kuai) [task:375629] {CVE-2024-47706}
  - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (Xin Long) [task:375633] {CVE-2024-49944}
  - MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed (Jiaxun Yang) [task:368269] {CVE-2024-46832}
  - ext4: fix i_data_sem unlock order in ext4_ind_migrate() (Artem Sadovnikov) [task:375967] {CVE-2024-50006}
  - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() (Ryusuke Konishi) [task:375969] {CVE-2024-47699}
  - netfilter: nf_tables: prevent nf_skb_duplicated corruption (Eric Dumazet) [task:376057] {CVE-2024-49952}
  - ppp: fix ppp_async_encode() illegal access (Eric Dumazet) [task:375965] {CVE-2024-50035}
  - ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (Kaixin Wang) [task:375963] {CVE-2024-50059}
  - nfsd: call cache_put if xdr_reserve_space returns NULL (Guoqing Jiang) [task:376185] {CVE-2024-47737}
  - ocfs2: remove unreasonable unlock in ocfs2_read_blocks (Lizhi Xu) [task:376163] {CVE-2024-49965}
  - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error (Junlin Li) [task:375615] {CVE-2024-47697}
  - mailbox: bcm2835: Fix timeout during suspend mode (Stefan Wahren) [task:376341] {CVE-2024-49963}
  - nilfs2: fix potential oob read in nilfs_btree_check_delete() (Ryusuke Konishi) [task:376183] {CVE-2024-47757}
  - ext4: aovid use-after-free in ext4_ext_insert_extent() (Baokun Li) [task:376347] {CVE-2024-49883}
  - ocfs2: cancel dqi_sync_work before freeing oinfo (Joseph Qi) [task:376203] {CVE-2024-49966}
  - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (Jonathan Cameron) [task:368125] {CVE-2024-46822}
  - arm64: acpi: Move get_cpu_for_acpi_id() to a header (James Morse) [task:368125]
  - drm/amd/display: added NULL check at start of dc_validate_stream (winstang) [task:375221] {CVE-2024-46802}
  - ocfs2: reserve space for inline xattr before attaching reflink tree (Gautham Ananthakrishna) [task:376165] {CVE-2024-49958}
  - btrfs: wait for fixup workers before stopping cleaner kthread during umount (Filipe Manana) [task:376329] {CVE-2024-49867}
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Eric Dumazet) [task:376333] {CVE-2024-47685}
  - ACPI: battery: Fix possible crash when unregistering a battery hook (Armin Wolf) [task:376339] {CVE-2024-49955}
  - ACPI: battery: Simplify battery hook locking (Armin Wolf) [task:376339]
  - net: ethernet: nixge: fix NULL dereference (Yuri Karpov) [task:376191] {CVE-2022-49019}
  - net: nixge: Address compiler warnings when building for i386 (Moritz Fischer) [task:376191]
  - net: nixge: Add support for 64-bit platforms (Moritz Fischer) [task:376191]
  - ext4: fix double brelse() the buffer of the extents path (Baokun Li) [task:376207] {CVE-2024-49882}
  - vfs: fix race between evice_inodes() and find_inode()&iput() (Julian Sun) [task:376219] {CVE-2024-47679}
  - jfs: check if leafidx greater than num leaves per dmap tree (Edward Adam Davis) [task:376377] {CVE-2024-49902}
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error (Junlin Li) [task:376239] {CVE-2024-47698}
  - net: Fix an unsafe loop on the list (Anastasia Kovaleva) [task:376085] {CVE-2024-50024}
  - xen: use correct end address of kernel for conflict checking (Juergen Gross) [task:376245] {CVE-2024-47722}
  - media: venus: fix use after free bug in venus_remove due to race condition (Zheng Wang) [task:376401] {CVE-2024-49981}
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem (Thadeu Lima de Souza Cascardo) [task:376249] {CVE-2024-47701}
  - ext4: return error on ext4_find_inline_entry (Thadeu Lima de Souza Cascardo) [task:376249]
  - jfs: Fix uninit-value access of new_ea in ea_buffer (Zhao Mengmeng) [task:376257] {CVE-2024-49900}
  - drm/amd/display: Check stream before comparing them (Alex Hung) [task:376409] {CVE-2024-49896}
  - sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop (Xin Long) [task:376417]
  - sctp: fix memory leak in sctp_stream_outq_migrate() (Zhengchao Shao) [task:376417] {CVE-2022-49013}
  - fbdev: pxafb: Fix possible use after free in pxafb_task() (Kaixin Wang) [task:376117] {CVE-2024-49924}
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation (Srinivasan Shanmugam) [task:376113] {CVE-2024-49894}
  - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled (Chengchang Tang) [task:376269] {CVE-2024-47735}
  - ocfs2: fix null-ptr-deref when journal load failed. (Julian Sun) [task:376303] {CVE-2024-49957}
  - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (Luiz Augusto von Dentz) [task:376309] {CVE-2024-50044}
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (Baokun Li) [task:376143] {CVE-2024-49959}
  - jfs: Fix uaf in dbFreeBits (Edward Adam Davis) [task:376153] {CVE-2024-49903}
  - e100: Fix possible use after free in e100_xmit_prepare (Wang Hai) [task:376281] {CVE-2022-49026}
  - e100: switch from 'pci_' to 'dma_' API (Christophe JAILLET) [task:376281]
  - tracing: Free buffers when a used dynamic event is removed (Steven Rostedt (Google)) [task:375645] {CVE-2022-49006}
  - tracing: initialize variable in create_dyn_event() (Frank Rowand) [task:375645]
  - tracing: Add unified dynamic event framework (Masami Hiramatsu) [task:375645]
  - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (Pei Xiao) [task:376385] {CVE-2024-49962}
  - HYGON: Add psp interrupt x86 register on hygon 4G platform (chench) [task:380133]
  - serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain) [task:217562] {CVE-2024-26999}
  - tty: serial: remove set but not used variable 'error' (YueHaibing) [task:217562]
  - drm/msm/dpu: fix compile error (Lu Yao) [task:379873]
  - Fix a redeclaration compile error (luoxuanqiang) [task:380985]
  - btrfs: don't balance btree inode pages from buffered write path (Nikolay Borisov) [task:375983]


author: Jackie Liu <liuyun01@kylinos.cn> - 4.19.90-89.19.v2401
changelog:
  - PHYTIUM: drivers/perf:phytium: Add PCIe PMU Support for PS240XX. (wangsiyu01) [task:409047]
  - PHYTIUM: drivers/perf:phytium: Add DDR PMU Support for PS240XX. (wangsiyu01) [task:409047]
  - mm/shmem: return head page from find_lock_entry (Matthew Wilcox (Oracle)) [task:410009, task:422535]
  - net: hns3: add new 200G link modes for hisilicon device (Hao Lan) [task:411873, task:422535]
  - net: hns3: add some link modes for hisilicon device (Hao Chen) [task:411873, task:422535]
  - net: hns3: make symbol 'hclge_mac_speed_map_to_fw' static (Wei Yongjun) [task:411873, task:422535]
  - net: hns3: refine function hclge_cfg_mac_speed_dup_hw() (Guangbin Huang) [task:411873, task:422535]
  - net: hns3: modify functions of converting speed ability to ethtool link mode (Guangbin Huang) [task:411873, task:422535]
  - net: hns3: add new function hclge_get_speed_bit() (Guangbin Huang) [task:411873, task:422535]
  - net: hns3: add macros for mac speeds of firmware command (Guangbin Huang) [task:411873, task:422535]
  - net: hns3: add support for 200G device (Guangbin Huang) [task:411873, task:422535]
  - net/mlx5: Fix variable not being completed when function returns (Chenguang Zhao) [task:412201, task:422535]
  - REDHAT: rpmspec: amend removal of depmod created files to include modules.builtin.alias.bin (Jiangshan Yi) [task:413827, task:422535]
  - rpmbuild: avoid providing duplicate dtb directory (Jiangshan Yi) [task:413827, task:422535]
  - NETSWIFT: txgbevf: FIX: fix issue in kylin4.19-kernel test (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: set version 1.3.2 (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX:fix compile error in some redhat os (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix compile error on some os (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: fix: fix slt test error log (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix bug that try to free already-free irq (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix bug that slt test failed (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: Modify compile mode (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix bug that vf pcie device not is remove when after rmmod pf driver (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: set version 1.3.2rc0 (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix bug that txgbevf 802.1ad vlan ping fail (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix VF UDP RSS cannot off (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: Revert "FIX: fix VF RSS rules not working" (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: Revert commit b283dc9be78e (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix VF RSS rules not working (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: ADD: add new file Module.supported (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix TXGBE_VXSTATUS_SPEED not right (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix qinq issue in centos: (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: fix: fix vf only supports a maximum of 2 queues (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbevf: Synchronous wangxun txgbevf driver source code (luoqing) [task:226013, task:422535]
  - NETSWIFT: txgbevf: set version to 1.3.1 (Juxia He) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix compile warning on linx 6.0.60.4 and linxos 6.0.60 (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix compile warning on ubuntu 22.10 and 23.04 (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbevf: fix: fix change not mtu work on some os like centos7.7 (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix bug tx/rx count error when down/up while count exceed 0x100000000 (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbevf: Update version to 1.3.1rc0 for test (Juxia He) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix rx/tx count error when down/up (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbevf: ADD: add the interfacce to show fw version on vf (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: FIX bug that set vlan failed but not return error (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: fix vf cannot revice packets after pcie reset (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbevf: FIX: FIX DRV_VERSION not right (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbevf: Modify: modify compile command (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix issue in kernel test (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: add msglvl for kr debug messages (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix bug on vxlan-gpe tunnel packet hw offload (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: ocp ncsi link is down when driver probe (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: feat: add support to desc check (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: txgbe: sp: fix 10kr autoneg to cx4/5 (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: vxlan/geneve ipv6 add/delete port bug (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: feat: force dac cable to kr mode (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: feat: reset flow (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: ipv6 offload (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: update version to 1.3.6.2 (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: tx csum by soft except tcp udp sctp (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: feat: send autoneg setting to firmware (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: set version 1.3.6 in main file (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX:fix loud xsk in some kernel may error (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: fix bug that send packet failed in certain conditions (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX:fix xsk tx may cause kernel crash (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: allow to add nedev_uc_addr over 64 (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix bug that slt test failed (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix 802.1ad rx_csum_offload_errors not increase (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: set version 1.3.6rc1 (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: vlvf value not right (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: feat: sync adaptive rx/rx usecs/tx-frames-irq setting to txgbe (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix the ethtool -t loopback test fails when the multi-speed sfp links to 1000M and veto on (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: delete error code (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: function 1 ethtool -i show firmware err (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: fix some bugs about vf 802.1ad vlan (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: change firmware-version format (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: ethtool support to set multi rss when sriov is enabled (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: review: fix backplane fw ethtool show error (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: fix some problem in code review (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: Fix handling of NAPI budget when multiple queues are enabled per vector (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: add support for set vf mac with zero_ether_addr (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix get lldp flag wrong when probe (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: loopback test may fail when veto on and the rate is set to 1000M and link down (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: set version to 1.3.6rc0 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: sync new kr tarinning flow (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix : remove vf mtu restriction (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix bug that try to handled null pointer (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: feat: Added the function of vf trust (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix to create fdir rule index 0 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: marvell phy nic which not support ocp link speed wrong (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: feat: set flow control xon to default off (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix ether type filter configuration in VT mode (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: add get lldp status by mbx (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: correct ether type in ethtool -n (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix PF RSS when multi_rss is enabled (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix fdir filter action queue info (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix to get info of ether type filter (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: ADD: support to add ether type filter by ethtool (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Revert "MODIFY: vf do not make its own receice-hash" (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: feat: support wol on fun 1 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: remove duplicate pings vf and set vf after ping (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: ethtool set rss indir table (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: ethtool can't take effect for hash key (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Revert "Fix:skip lan_rst after retriggering interrupt" (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Revert "Fix: skip lan reset condition is imperfect" (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: patch-3 vf only supports a maximum of 2 queues JIRA: http://projsw.trustnetic.com/browse/SAP-263 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX:fix compile error when define DISABLE_PACKET_SPLIT (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: fix bug that close rx-vlan-offload not work and rx-vlan-stag-filter can not close (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: ADD: update vpd when use ethtool -f to upgrade (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: patch-v2 vf only supports a maximum of 2 queues (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: ethtool show max_combined wrong when enable sriov (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: fix vf only supports a maximum of 2 queues (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: set mac_sgmii to autoneg off failed (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: fix bug that vf mtu can be larger than pf mtu (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix error print when remove geneve or vxlan (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: ADD: add firmware quirks for WHGX (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: replacing 1G sfp module to dual-speed sfp module, link speed is 1G (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: update kr trainning flow 4 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: update release note to 1.3.5.1 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: feat: add led blink support for oem (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: fix commit 57d2aa3 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: set version to 1.3.5 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: ADD: add support tunnel prot set on kernel over 5.9 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix compile error because not define txgbe_xdp_locking_key (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: SWESMBI Software EEPROM semaphore not granted. (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix in some kernel version, when xdp_redirect tx drop may free page error (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: The xdpring count is now maintained at the cpu core count or maximum xdpring(2) (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: The xdpring count is now maintained at the cpu core count or maximum xdpring (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: ethool -s ethx autoneg on cannot link to 10G (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix when load or unload xdp program, may calltrace. and fix lro may can't set after set lro when xdp load (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix bug that ifconfig down but not disable laser (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: Can't change lro when xdp load and change lro to which before xdp load when unload xdp (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: when load xdp ,turn off lro(2) (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: when load xdp ,turn off lro (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: add free page in head split mode (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: update kr trainning flow (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix when load xdp_pass may oom (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: 64k pagesize memory leak (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Update kr trainning flow 3 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix bug that disable sriov not clear Etype filter (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: ethtool -S not support return EINVAL (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix compile error when define DISABLE_PACKET_SPLIT_2 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: firmware version read from flash instead of shadow ram (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix not to set prbs_en in en_cl72_krtr (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: 1000Base-T sfp module and cable link update error (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix bug that insmod with param max_vfs (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix compile warning on sles 11.3 and 11.4 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix ethtool set coalesce adaptive (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: skip lan reset condition is imperfect (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Revert "Fix: skip lan reset condition is imperfect" (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: skip lan reset condition is imperfect (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix when load xdp_redirect program (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix ethtool -t loopback test failed (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix compile error when define DISABLE PACKET_SPLIT (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: i2c fails trying to read DAC (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Tidy up codes for sonarcloud scanner (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: update kr trainning flow 3 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Update version to 1.3.5rc1 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix call trace when PAGE_SIZE<8k (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Limit change mtu range when xdp loaded (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: ADD: check cpu arch or pcie upstream before bus reset (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: ADD: add macro define in configure (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix bug that mailbox error (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix compile error (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: ADD: add support 802.1ad vlan (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: not do pcie reset when sriov enable (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix compile error (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: remove default fec set (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: software timestamp skbs as late as possible (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix compile error about xdp (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: delete unused declaration (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: strtoul compile error (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: skip lan_rst after retriggering interrupt (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: Limit rss queues when the xdp program loads copper sfp (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix 1G speed autoneg on/off functions (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: set version 1.3.5rc0 for test (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: Limit rss queues (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Add: Tidy up i2c_read 1G copper sfp flow (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: insmod driver and nsci link is down when using copper sfp (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix compile error xdp_rxq_info_reg (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: delete useless debug message (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix compile err when kernel version less than 4.20 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: ADD: add the interfacce to show fw version on vf (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: FIX: fix can't ethtool -t call null point (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: ADD: add support xdp (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: fix bug (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Upgrade kr trainning flow (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Fix: number of descriptor must be multiple of 128 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Delete: delete phy hardware reset in reset_hw for led oem (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Add: display aer error type (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: Add: firmware use i2c to access sfp module (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fit txgbe_is_lldp return flow (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: txgbe: fix: kcompat.h not define some (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbevf: fix issue in kylin4.19-kernel test (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: ngbevf: Synchronous wangxun ngbevf driver source code (luoqing) [task:226013, task:422535]
  - NETSWIFT: ngbevf: set version 1.2.1.1 (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: FIX: fix set vf mtu err (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: FIX: fix handle kernel NULL pointer when add vxlan (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: add release time and modify version to 1.2.2 (Juxia He) [task:226013, task:422535]
  - NETSWIFT: ngbevf: fix: fix bug that error dmesg when add double vlan (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: FIX: fix bug that vf can't ifconfig up (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: FIX: fix compile error (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: Revert "fix : fix bug that vf get ack timeout when pf ifconfig down up" (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: set version 1.2.2rc0 for test (Juxia He) [task:226013, task:422535]
  - NETSWIFT: ngbevf: FIX: fix mailbox error when ifconfig pf down/up (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: fix: fix bug that vf can not link when phy is not internal (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: Fix: fix the bug that ip link set vf state not work (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: FIX: fix bug that try to free already-free irq (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: ADD: add new file Module.supported (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: fix : fix bug that vf get ack timeout when pf ifconfig down up (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: fix: fix bug that pf ping vf but vf not reset (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: FIX: fix bug that txvlan and rxvlan cannot close (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: feat: add the interface to show fw version on vf (luoqing) [task:226013, task:422535]
  - NETSWIFT: ngbevf: FIX: fix bug that 10M link speed error (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbevf: fix: fix change not mtu work on some os like centos7.7 (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX:fix tunnel packets unreachable when enable sriov (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: Fixed resolving ipv6 packet header errors (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: Optimize reset flow when driver is tx hang or timeout (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: ngbe: update version to 1.2.6.3 (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: tx csum by soft except tcp udp sctp (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: update version to 1.2.6.2 (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: add HAVE_NETDEV_XMIT_MORE for kylin os (Linyue Xie) [task:226013, task:422535]
  - NETSWIFT: ngbe: update release notes and version to 1.2.6.1 (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: Fix: Hardware block max request size to 128 (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: Fix: allow to add nedev_uc_addr over 16 (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: Synchronous wangxun ngbe driver source code (luoqing) [task:226013, task:422535]
  - NETSWIFT: ngbe: update release note and version 1.2.6 (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: Revert "FIX: When do ethtool -C, if not change any coalesce parameters supported, will return -EINVAL" (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbe: set version to 1.2.6rc2 (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: Add a delay between pings for slt test (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: Add a delay between pings (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: yt8531s-ca can't generate interrupt in combo mode (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbe: feat: add support for notifying firmware phy link (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: remove vf mtu restriction (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix slt test failed (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix fail to obtain mbx lock when slt test (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: modify version to 1.2.6rc1 for test (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix mailbox error when ifconfig pf down (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix compile error (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: add get lldp status by mbx (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix bug that vf mtu can not be larger than pf mtu (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: code review (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix compile error (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: default to set gpio_0 input direction (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix compile error (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix compile error in kylinos (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: feat: add the interface to set the vf link state (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: modify version to 1.2.6rc0 (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: add mtu change limit and rx buffer 3k for xdp (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: feat: check cpu arch or pcie upstream type to determine whether to do recovery (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: ethtool can't set hash key (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: add print when port down and change lldp (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: Revert "FIX:allow set lldp when nic down" (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix bug that try to handled null pointer (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: feat: add support that set vf vlan type 802.1ad (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: compile warming because unused value (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: allow set lldp when nic down (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix bugs set tx frame irq to 65536 exceed u16 max value (zhenpengzheng) [task:226013, task:422535]
  - NETSWIFT: ngbe: revert: revert tx timeout retrigger irq flow (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix bug that rx multicast count not right (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix bug that failed to receive vlan packets when promisc enable (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix bug that vf can not link when phy is not internal (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: feat: Added the function of vf trust (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: add dynamic itr configurable; (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: yt8531sh-ca phy can't powerdown in mode 2 (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbe: feat: add param for yt phy unidirectional mode (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix bug that vlan filter change but not work (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix bug that some feature that can not change (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix bug that cant set ip vlan when mac vlan is set (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix bug that vf mtu can be larger than pf mtu (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: rtl8211fs and jl2201 some bugs. (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: feat: add the interface to show fw version on vf (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: fix ethtool -S may out of range (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: feat/fix: commit message example (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: yt8531h check phy id failed (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbe: ADD: Synchronize xdp changes off txgbe (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: Fix: fix commit 7a14ec5 (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: ADD: add support for XZP211FS phy (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbe: ADD: add support for new phy JL2201-N048C and rtl8211f (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: ADD: add support for yt phy unidirectional mode (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix bug that mailbox error (zhongxiangji) [task:226013, task:422535]
  - NETSWIFT: ngbe: Fix: Inspur ncsi nic cannot wake on lan. (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: Revert "Fix:wol can't work in inspur ncsi nic" (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: Fix: wol can't work in inspur ncsi nic (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: may calltrace when run loop test because pagecnt_bias err (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix compile error when define DISABLE_PACKET_SPLIT (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix xdp page processing flow (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: ADD: add support for showing AER error type (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: ADD: add support for inspur ncsi card (duanqiangwen) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: When do ethtool -C, if not change any coalesce parameters supported, will return -EINVAL (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix may calltrace due to page_ref count error,and fix calltrace when unload xdp (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: software timestamp skbs as late as possible (Mengyuan Lou) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix when load xdp_redirect program (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix may call trace when xdp redirect load because no XDP_PACKET_HEADROOM (linyuexie) [task:226013, task:422535]
  - NETSWIFT: ngbe: FIX: fix the statistics of queues 4 to 7 are lost after xdp program is loaded (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: update unresolved issues to release notes and set version (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: ADD: update vpd when use ethtool -f to upgrade (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: set version 1.2.5.2 (wenduanqiang) [task:226013, task:422535]
  - NETSWIFT: ngbe: fix: ifconfig down will not powerdown external phy (wenduanqiang) [task:226013, task:422535]
  - bpf, sockmap: Fix race between element replace and close() (Michal Luczaj) [task:410365] {CVE-2024-56664}
  - bpf, sockmap: Fix preempt_rt splat when using raw_spin_lock_t (John Fastabend) [task:410365]
  - bpf, sockhash: Synchronize delete from bucket list on map free (Jakub Sitnicki) [task:333747]
  - bpf, sockhash: Fix memory leak when unlinking sockets in sock_hash_free (Jakub Sitnicki) [task:333747]
  - bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap (Daniel Borkmann) [task:410365]
  - net: Fix icmp host relookup triggering ip_rt_bug (Dong Chenchen) [task:410447] {CVE-2024-56647}
  - bpf: fix OOB devmap writes when deleting elements (Maciej Fijalkowski) [task:410065]
  - xsk: fix OOB map writes when deleting elements (Maciej Fijalkowski) [task:410065] {CVE-2024-56614}
  - config/x86: change TCG_HYGON to y (mengdehui) [task:415311, task:422535]
  - drivers/gmjstcm: import CVE-2011-1160 CVE-2011-1162 fixes to tcm.c (Li ZhiGang) [task:406609] {CVE-2024-24891}
  - drivers/gmjstcm: fix a dev_err() call in spi tcm device probe (Li ZhiGang) [task:406609]
  - bpf: fix recursive lock when verdict program return SK_PASS (Jiayuan Chen) [task:412141] {CVE-2024-56694}
  - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Sidraya Jayagond) [task:410367] {CVE-2024-53210}
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (Ryusuke Konishi) [task:410479] {CVE-2024-56619}
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [task:410395] {CVE-2024-56532}
  - hfsplus: don't query the device logical block size multiple times (Thadeu Lima de Souza Cascardo) [task:410029] {CVE-2024-56548}
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Dan Carpenter) [task:408543] {CVE-2024-53158}
  - NFSD: Prevent a potential integer overflow (Chuck Lever) [task:408541] {CVE-2024-53146}
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Dmitry Antipov) [task:408545] {CVE-2024-53155}
  - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Luo Qiu) [task:408531] {CVE-2024-53157}
  - xen/netfront: fix crash when removing device (Juergen Gross) [task:408535] {CVE-2024-53240}
  - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (Furong Xu) [task:391021] {CVE-2024-53058}
  - kylin_extend: fix kernel NULL pointer dereference (huanfuxi) [task:391387, task:422535]
  - security: fix bug while get path by inode (penghuaihe) [task:387321, task:422535]
  - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (Al Viro) [task:406597] {CVE-2024-42265}
  - drm/amdgpu: change vm->task_info handling (Shashank Sharma) [task:347157] {CVE-2024-41008}
  - LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context (Huacai Chen) [task:387571] {CVE-2024-50111}
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jeongjun Park) [task:408553] {CVE-2024-53156}
  - wifi: iwlegacy: Clear stale interrupts before resuming device (Ville Syrjälä) [task:387911] {CVE-2024-50234}
  - net: do not delay dst_entries_add() in dst_release() (Eric Dumazet) [task:380195] {CVE-2024-50036}
  - f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread() (Chao Yu) [task:376109] {CVE-2024-47691}
  - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (Yi Yang) [task:400455] {CVE-2023-6546}
  - tty: n_gsm: fix restart handling via CLD command (Daniel Starke) [task:400455]
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens) [task:403255] {CVE-2024-53104}
  - HYGON: ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio (Liao Xuan) [task:389315]
  - HYGON: hwmon/k10temp: Add support for Hygon family 18h model 10h (Liao Xuan) [task:389315]
  - HYGON: EDAC/amd64: Add support for Hygon family 18h model 10h (Liao Xuan) [task:389315]
  - HYGON: x86/amd_nb: Add support for Hygon family 18h model 10h (Liao Xuan) [task:389315]
  - HYGON: x86/cpu: Get LLC ID for Hygon family 18h model 10h (Liao Xuan) [task:389315]
  - HYGON: perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h (Liao Xuan) [task:389315]
  - HYGON: EDAC/amd64: Add support for Hygon family 18h model 7h (Liao Xuan) [task:389315]
  - HYGON: x86/amd_nb: Add support for Hygon family 18h model 7h (Liao Xuan) [task:389315]
  - drm/vc4: fix compile error (Lu Yao) [task:397559]
  - HYGON: arch: The Kconfig for enhanced copy capabilities for Hygon processor (Zhiteng Qiu) [task:365605, task:422535]
  - HYGON: arch: Enhanced copy capabilities for Hygon processor (Zhiteng Qiu) [task:365605, task:422535]
  - btrfs: fix the length of reserved qgroup to free (Haisu Wang) [task:364175]
  - btrfs: fix qgroup reserve leaks in cow_file_range (Boris Burkov) [task:364175] {CVE-2024-46733}
  - block: Fix kabi caused by blk.h (Zheng Tan) [task:381405]
  - block: fix kabi broken in stat_group (Zheng Tan) [task:381405]
  - block: support to account io_ticks precisely (Yu Kuai) [task:381405]
  - block: fix the problem of io_ticks becoming smaller (Chunguang Xu) [task:381405]
  - block: account merge of two requests (Konstantin Khlebnikov) [task:381405]
  - block: don't call part_{inc,dec}_in_flight for blk-mq devices (Christoph Hellwig) [task:381405]
  - block: remove the unused q argument to part_in_flight and part_in_flight_rw (Christoph Hellwig) [task:381405]
  - block: move the blk-mq calls out of part_in_flight{,_rw} (Christoph Hellwig) [task:381405]
  - block: avoid double io accounting for flush request (Ming Lei) [task:381405]
  - block/diskstats: accumulate all per-cpu counters in one pass (Konstantin Khlebnikov) [task:381405]
  - block: mark part_in_flight and part_in_flight_rw static (Christoph Hellwig) [task:381405]
  - block: move sysfs methods shared by disks and partitions to genhd.c (Christoph Hellwig) [task:381405]
  - block: add iostat counters for flush requests (Konstantin Khlebnikov) [task:381405]
  - fsl/fman: Fix refcount handling of fman-related devices (Aleksandr Mishin) [task:387475] {CVE-2024-50166}
  - fsl/fman: Save device references taken in mac_probe() (Aleksandr Mishin) [task:387475]
  - net: fman: Use physical address for userspace interfaces (Sean Anderson) [task:387475]
  - net: dpaa: Use mac_dev variable in dpaa_netdev_init (Sean Anderson) [task:387475]
  - net: fman: Clean up error handling (Sean Anderson) [task:387475]
  - net: fman: Map the base address once (Sean Anderson) [task:387475]
  - net: fman: memac: Uninitialized variable on error path (Dan Carpenter) [task:387475]
  - net: fman: Configure fixed link in memac_initialization (Sean Anderson) [task:387475]
  - net: fman: Move struct dev to mac_device (Sean Anderson) [task:387475]
  - net: fman: Get PCS node in per-mac init (Sean Anderson) [task:387475]
  - dpaa_eth: Use random MAC address when none is given (Madalin Bucur) [task:387475]
  - fsl/fman: use resource_size (Julia Lawall) [task:387475]
  - ocfs2: fix a deadlock when commit trans (Joseph Qi) [task:353893]
  - ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna) [task:353893] {CVE-2021-47493}
  - jbd2: export jbd2_journal_[grab|put]_journal_head (Joseph Qi) [task:353893]
  - net: mdio: fix unbalanced fwnode reference count in mdio_device_release() (Zeng Heng) [task:376343] {CVE-2022-48961}
  - net: mdio: use device_set_node() to setup both fwnode and of (Ioana Ciornei) [task:376343]
  - driver core: add a helper to setup both the of_node and fwnode of a device (Ioana Ciornei) [task:376343]
  - media: av7110: fix a spectre vulnerability (Mauro Carvalho Chehab) [task:390755] {CVE-2024-50289}
  - firmware_loader: Block path traversal (Jann Horn) [task:375665] {CVE-2024-47742}
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (Hyunwoo Kim) [task:396803] {CVE-2024-53103}
  - net: fix data-races around sk->sk_forward_alloc (Wang Liang) [task:396799] {CVE-2024-53124}
  - filemap: Fix bounds checking in filemap_read() (Trond Myklebust) [task:390893] {CVE-2024-50272}
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi) [task:398629] {CVE-2024-53130}
  - netlink: terminate outstanding dump on socket close (Jakub Kicinski) [task:398631] {CVE-2024-53140}
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi) [task:398633] {CVE-2024-53131}
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park) [task:398615] {CVE-2024-53141}
  - security/kysec: Call put_cred() before function return (chengang) [task:390393]
  - fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni) [task:396801] {CVE-2024-53101}
  - ocfs2: uncache inode which has failed entering the group (Dmitry Antipov) [task:396817] {CVE-2024-53112}
  - f2fs: Require FMODE_WRITE for atomic write ioctls (Jann Horn) [task:376135] {CVE-2024-47740}
  - mm: split critical region in remap_file_pages() and invoke LSMs in between (Kirill A. Shutemov) [task:376325]
  - mm: call the security_mmap_file() LSM hook in remap_file_pages() (Shu Han) [task:376325] {CVE-2024-47745}
  - mm/mmap.c: don't unlock VMAs in remap_file_pages() (Liam Howlett) [task:376325]
  - net/mlx5: fs, lock FTE when checking if active (Mark Bloch) [task:396807] {CVE-2024-53121}
  - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (Al Viro) [task:363785] {CVE-2024-45025}
  - s390/cio: rename bitmap_size() -> idset_bitmap_size() (Alexander Lobakin) [task:363785]
  - bitmap: introduce generic optimized bitmap_size() (Alexander Lobakin) [task:363785]
  - tools: move alignment-related macros to new <linux/align.h> (Alexander Lobakin) [task:363785]
  - tools headers UAPI: Sync linux/const.h with the kernel headers (Arnaldo Carvalho de Melo) [task:363785]
  - tools headers: Grab copy of linux/const.h, needed by linux/bits.h (Arnaldo Carvalho de Melo) [task:363785]
  - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (Hans de Goede) [task:387555] {CVE-2024-50134}
  - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Shradha Gupta) [task:391031] {CVE-2024-26820}
  - hv_netvsc: Mark VF as slave before exposing it to user-mode (Long Li) [task:391031]
  - hv_netvsc: use netif_is_bond_master() instead of open code (Juhee Kang) [task:391031]
  - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (Pedro Tammela) [task:392639] {CVE-2024-53057}
  - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() (Dmitry Antipov) [task:380475] {CVE-2024-47713}
  - i40e: fix race condition by adding filter's intermediate sync state (Aleksandr Loktionov) [task:390579] {CVE-2024-53088}
  - i40e: fix i40e_count_filters() to count only active/new filters (Aleksandr Loktionov) [task:390579]
  - bcache: remove unused bch_mark_cache_readahead function def in stats.h (Lin Feng) [task:222079]
  - bcache: avoid oversized read request in cache missing code path (Coly Li) [task:222079] {CVE-2021-47275}
  - bcache: remove bcache device self-defined readahead (Coly Li) [task:222079]
  - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Justin Tee) [task:376073] {CVE-2024-49891}
  - scsi: lpfc: Revise ndlp kref handling for dev_loss_tmo_callbk and lpfc_drop_node (Justin Tee) [task:376073]
  - uprobe: avoid out-of-bounds memory access of fetching args (Qiao Ma) [task:380099] {CVE-2024-50067}
  - f2fs: get rid of online repaire on corrupted directory (Chao Yu) [task:375661] {CVE-2024-47690}
  - security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong) [task:390885] {CVE-2024-50301}
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu) [task:391029] {CVE-2024-53066}
  - usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu) [task:390745] {CVE-2024-50269}
  - media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab) [task:391027] {CVE-2024-53061}
  - sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long) [task:390741] {CVE-2024-50299}
  - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (Zicheng Qu) [task:387919] {CVE-2024-50233}
  - staging: iio: ad9832: use clock framework for clock reference (Marcelo Schmitt) [task:387919]
  - staging: iio: ad9832: organize includes (Marcelo Schmitt) [task:387919]
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (Felix Fietkau) [task:390869] {CVE-2024-50237}
  - cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction (Chen Ridong) [task:390867] {CVE-2024-53054}
  - net/tls: Use RCU API to access tls_ctx->netdev (Maxim Mikityanskiy) [task:207215]
  - net/tls: Remove the context from the list in tls_device_down (Maxim Mikityanskiy) [task:207215]
  - tls: Fix context leak on tls_device_down (Maxim Mikityanskiy) [task:207215]
  - net/tls: Fix use-after-free after the TLS device goes down and up (Maxim Mikityanskiy) [task:207215] {CVE-2021-47131}
  - net/tls: Replace TLS_RX_SYNC_RUNNING with RCU (Maxim Mikityanskiy) [task:207215]
  - userfaultfd: fix checks for huge PMDs (Jann Horn) [task:363981] {CVE-2024-46787}
  - media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab) [task:390895] {CVE-2024-53063}
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (Ido Schimmel) [task:390739] {CVE-2024-50304}
  - HID: core: zero-initialize the report buffer (Jiri Kosina) [task:392647] {CVE-2024-50302}
  - media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab) [task:392635] {CVE-2024-50290}
  - media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab) [task:392643] {CVE-2024-50287}
  - dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai) [task:390571] {CVE-2024-50278}
  - dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai) [task:390571]
  - net: arc: fix the device for dma_map_single/dma_unmap_single (Johan Jonker) [task:391803] {CVE-2024-50295}
  - net: hns3: fix kernel crash when uninstalling driver (Peiyang Wang) [task:391805] {CVE-2024-50296}
  - net/sched: accept TCA_STAB only for root qdisc (Eric Dumazet) [task:375649] {CVE-2024-50039}
  - net: sched: refactor grafting Qdiscs with a parent (Jakub Kicinski) [task:375649]
  - nilfs2: propagate directory read errors from nilfs_find_entry() (Ryusuke Konishi) [task:387959] {CVE-2024-50202}
  - btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana) [task:390749] {CVE-2024-50273}
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner) [task:390611] {CVE-2024-50265}
  - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (Edward Adam Davis) [task:390609] {CVE-2024-50218}
  - USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter) [task:390585] {CVE-2024-50267}
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Hyunwoo Kim) [task:390583] {CVE-2024-50264}
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Kuniyuki Iwashima) [task:387777] {CVE-2024-50154}
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai) [task:390581] {CVE-2024-50279}
  - net: fix crash when config small gso_max_size/gso_ipv4_max_size (Wang Liang) [task:387479] {CVE-2024-50258}
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Sean Christopherson) [task:387973] {CVE-2024-50115}
  - bpf: Prevent tail call between progs attached to different hooks (Xu Kuohai) [task:376069] {CVE-2024-50063}
  - bpf: Fix potential race in tail call compatibility check (Toke Høiland-Jørgensen) [task:376069]
  - Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (Luiz Augusto von Dentz) [task:396699] {CVE-2024-8805, CVE-2024-8805}
  - ext4: fix bad checksum after online resize (Baokun Li) [task:402035]
  - ext4: fix timer use-after-free on failed mount (Xiaxi Shen) [task:376211] {CVE-2024-49960}
  - ext4: update orig_path in ext4_find_extent() (Baokun Li) [task:376209] {CVE-2024-49881}
  - ext4: fix slab-use-after-free in ext4_split_extent_at() (Baokun Li) [task:376087] {CVE-2024-49884}
  - ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path (Theodore Ts'o) [task:376087]
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Baokun Li) [task:344489] {CVE-2024-40998}
  - uprobes: fix kernel info leak via "[uprobes]" vma (Oleg Nesterov) [task:375973] {CVE-2024-49975}
  - Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() (Sungwoo Kim) [task:223107] {CVE-2024-36013}
  - Bluetooth: Remove BT_HS (Luiz Augusto von Dentz) [task:223107]
  - Bluetooth: remove redundant assignment to variable icid (Colin Ian King) [task:223107]
  - Bluetooth: Remove unused declaration amp_read_loc_info() (Yue Haibing) [task:353905]
  - Bluetooth: a2mp: Use struct_size() helper (Gustavo A. R. Silva) [task:353905]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 4.19.90-89.20.v2401
changelog:
  - KVM: arm64: vgic-its: Fix irq reference release error (张浩) [task:427908]
  - loongarch/kabi: fix kabi issue for "LoongArch: Add AVEC irqchip support" (wangxuewen) [task:390417]
  - LoongArch: Backport page table code (Huacai Chen) [task:390417]
  - LOONGSON: misc: driver for loongson se sdf (Zhao Qunqin) [task:390417]
  - LOONGSON: soc: driver for loongson se (Zhao Qunqin) [task:390417]
  - LoongArch:LSVZ: Replace set_pte with kvm_set_pte (Bibo Mao) [task:390417]
  - LoongArch: KVM: Select huge page only if secondary mmu supports it (Bibo Mao) [task:390417]
  - LoongArch:LSVZ: disable vcpu preempt detection (Bibo Mao) [task:390417]
  - LoongArch:LSVZ: Delay secondary mmu tlb flush until guest entry (Bibo Mao) [task:390417]
  - LoongArch:LSVZ: Remove SW timer switch when vcpu is halt polling (Bibo Mao) [task:390417]
  - LoongArch: Make KASAN usable for variable cpu_vabits (Kanglong Wang) [task:390417]
  - LoongArch: Add AVEC irqchip support (Tianyang Zhang) [task:390417]
  - LoongArch: Get correct cores_per_package for SMT systems (Chao Li) [task:390417]
  - Loongarch: Revert quicklist (zhangtianyang) [task:390417]
  - LoongArch: fixup for hardware ptw (Yi Jun) [task:390417]
  - fix the script release-stable-kernel don't work well (Jiangshan Yi) [task:426781]


author: jinzhiguang <jinzhiguang@kylinos.cn> - 0.11.0-8.p01
changelog:
  - Type: update
  - ID:   TASK#183701
  - SUG:  NA
  - DESC: rebuild and addpatch:
  	0001-fix-non-trivial-designated-initializers.patch
  	0001-use-btf_dump__new_deprecated.patch


author: lijian1 <lijian1@kylinos.cn> - 0.11.0-8.p02
changelog:
  - Type: Bugfix
  - ID: TASK#218577
  - SUG: NA
  - DESC: fix percpu map without args, c07f23af3507e0b4971ec4343523d976a048b078,
          3f2b438c8b497129f952531375429b1a93e7620d,39f3996d17f88124acc0170b8659e0856555043a
          3fbe73909e009a6741faed1c444daffed478395e;add patch 0005 for so path;add 0006 for tcpdrop.bt.


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-13
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 CVE-2021-42386


author: liuxu <liuxu156@huawei.com> - 1:1.31.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: lutianxiong<lutianxiong@huawei.com> - 1.16.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix invalid read in ares_parse_soa_reply.c found during fuzzing


author: xinghe <xinghe2@h-partners.com> - 1.16.1-7
changelog:
  - Type:cves
  - CVE:CVE-2023-31130 CVE-2023-31124 CVE-2023-31147
  - SUG:NA
  - DESC:fix CVE-2023-31130 CVE-2023-31124 CVE-2023-31147


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p26
changelog:
  - add patch28:caja-1.12.7-kylin-fix-bugzilla-8197-Udisk-file-system-is-inconsistent.patch
  - 修复caja显示U盘文件系统格式与命令行查看不一致问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p27
changelog:
  - Type:fixbug
  - ID  :[bug#8460][bugzilla]
  - SUG :NA
  - DESC:add patch31:caja-1.12.7-kylin-fix-icon-overlap-when-creating-a-new-file.patch
         删除对于桌面图标大小等级SMALLEST,SMALLER的屏蔽，解决等级SMALLEST,SMALLER,SMALL，
         三种模式下新建文件，图标重叠问题然.解决缩放图标时，SMALLER,SMALL两个级别形态相
         同问题.修改图标间距，解决SMALLER,SMALL两个级别，桌面图标与标题重叠问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p28
changelog:
  - Type:fixbug
  - ID  :[bug#113327]
  - SUG :NA
  - DESC:add patch32:caja-1.12.7-kylin-fix-Unable-to-remount-after-Udisk-is-unmounted.patch
         修复当U盘没有UUID时，手动卸载，再挂载caja崩溃问题


author: huayadong <huayadong@kylinos.cn> 01.12.7-1kord0k233.p29
changelog:
  - Type:fixbug
  - ID  :[Task#160363]
  - SUG :NA
  - DESC:add patch33:caja-1.12.7-kylin-change-the-dvd-capacity-display.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p31
changelog:
  - Type: bugfix
  - ID:   [TASK#185827]
  - SUG:  NA
  - DESC: add caja-update-translations-for-hk-and-tw.patch


author: peijiankang <peijiankang@kylinos.cn> - 01.12.7-1kord0k233.p33
changelog:
  - Type: bugfix
  - ID:   [TASK#205172]
  - SUG:  NA
  - DESC: add caja-update-Secure-translations-for-hk-and-tw.patch


author: huayadong <huayadong@kylinos.cn> - 01.12.7-1kord0k233.p35
changelog:
  - Type: bugfix
  - ID:   [BUG#217322]
  - SUG:  NA
  - DESC: delete Requires: redhat-menus ,add Requires: kylin-menu


author: houhongxun <houhongxun@kylinos.cn> - 1.12.7-1kord0k233.p36
changelog:
  - Type: bugfix
  - ID:   [BUG#240575]
  - SUG:  NA
  - DESC: fix an used after free problem which caused disk format failure


author: xuhe <xuhe@kylinos.cn> - 2:12.2.8-24.p01
changelog:
  - Type: bugfix
  - ID: [BUG#194959]
  - SUG: NA
  - DESC: Migrate patch from previous version,
          remove subman because of not support kylinos.


author: caiyinan <caiyinan@kylinos.cn> - 196.3-1.p06
changelog:
  - Type:bugfix
  - ID:[bug#186959]
  - SUG:NA
  - DESC:fix unlinked other OS branding file by excluding from packages


author: peijiankang <peijiankang@kylinos.cn> - 1:2.2.13-21.se.01
changelog:
  - Type: cves
  - ID:   [TASK#344691]
  - SUG:  NA
  - DESC:合入打印机设备管控 Patch6009: kysec-devctl-printer-control-separate.patch
         generic-hardened-ld
         sync from 2.2.13-19.p01.se.01


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dynbuf: provide curlx_ names for reuse by the curl tool
         curl: use curlx_dynbuf for realloc when loading config files
         curl: make file2string use dynbuf
         paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-8
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC: Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-9
changelog:
  - Type:cves
  - ID:CVE-2022-2928, CVE-2022-2929
  - SUG:restart
  - DESC: Fix CVE-2022-2928 and CVE-2022-2929


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-10
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: lijiaan <lijiaan@kylinos.cn> - 1.0.0.rc16-52.p01
changelog:
  - modify spec  after %build  add cp /usr/lib/rpm/kylin/confit.* ./autoconf
  - DESC: config.guess and config.sub ensure the software can be compiled and
    run correctly in a variety of different system env.


author: yanshuai <yanshuai01@kylinos.cn> - 1.0.0.rc16-52.p03
changelog:
  - Type: bugfix
  - ID: [BUG#302327]
  - SUG: NA
  - DESC: fix dmraid help info display incomplete problem'


author: renmingshuai <renmingshuai@huawei.com> - 2.86-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix parsing of IPv6 addresses with peer from netlink
         Fix bad interaction between --address=/#/<ip> and
              --server=/some.domain/#
         Fix --address=/#/...... which was lost in 2.86


author: renmingshuai <renmingshuai@huawei.com> - 2.86-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: gaoyukun <gaoyukun@kylinos.cn> - 1:2.3.15-6.p01
changelog:
  - Type:NA
  - ID:TASK#156265
  - SUG:NA
  - DESC:add patch:0001-dovecot-2.3.15-kylin-remove-sensitive-characters.patch


author: gaoyukun <gaoyukun@kylinos.cn> - 1:2.3.15-6.p02
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:add the dovecot-2.3.10.1-surpport-mips64el.patch[liu feng] to compile smoothly


author: wuchangsheng <wuchangsheng2@huawei.com> - 19.11-15
changelog:
  - backport pathes from community
  - net/softnic fix memory leak as profile is freed
  - net/virtio fix interrupt handle leak
  - vhost fix crash on reconnect
  - net/virtio report maximum MTU in device info
  - bus/dpaa fix freeing in FMAN interface destructor
  - distributor fix 128 bit write alignment


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p01
changelog:
  - Type:updated
  - ID:[BUG#112885]
  - SUG:NA
  - DESC:
  Modify to get the value of the kernel and BuildRequires:kernel-core


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p02
changelog:
  - Type:bugfix
  - ID:[BUG#121835]
  - SUG:NA
  - DESC:
  - add patch kylin-0001-support-dpdk-cross-compile-in-x86-platform.patch
  1) The patch restricts specific instruction sets when compiling dpdk, in order to ensure normal operation on all x86 platforms.
  2) Due to kylin-rpm-config updating, the patch changes python interpreter version to python3.
  3) Openvswitch service starts stably after dpdk is repaired.


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p03
changelog:
  - Type:bugfix
  - ID:[BUG#112885]
  - SUG:NA
  - DESC:
  - 1.The igb_uio.ko and rte_kni.ko modules generated by dpdk reuquire the same kernel version to be compiled and installed, otherwise it cannot be loaded correctly.
    2.The kernel version will be continuously updated. It will be troublesome to rebuild dpdk while kernel updating. Therefore, it is best to decoule dpdk from kernel.
    3.DKMS (Dynamic kernel module system) can automatically compile modules after kernel changes and adpat to the new kenrel. So igb_uio and rte_kni in dpdk can be handed over to DKMS for management, and dpdk.spec is modified according to DKMS specification to generate dpdk-igb-uio and dpdk-rte-kni binary packages.


author: ningjin <ningjin@kylinos.cn> - 19.11-15.p04
changelog:
  - Type:bugfix
  - ID:[BUG#132923]
  - SUG:NA
  - DESC:
  - add patch kylin-0002-support-dpdk-cross-compile-in-hygon-platform.patch
  The patch restricts specific instruction sets when compiling dpdk, in order to ensure normal operation on hygon platforms，reduce dpdk compiling cpu instruction set to corei7.corei7 is the minimum instruction set supported by dpdk.


author: zhangmengxuan <zhangmengxuan@kylinos.cn> - 19.11-15.p05
changelog:
  - Type:task
  - ID:[TASK#118976]
  - SUG:NA
  - DESC:
  - Since there is no ko module in the main rpm package, delete /usr/sbin/depmod from post.


author: wangjiawei <wangjiawei@kylinos.cn> - 19.11-15.p08
changelog:
  - Type:task
  - ID:[TASK#206722]
  - SUG:NA
  - DESC:
  - add dependency of rte-kni and igb-uio on dpdk-devel
  - fix CVE-2021-3839 CVE-2022-0669


author: wangjiawei <wangjiawei@kylinos.cn> - 19.11-15.p09
changelog:
  - Type:task
  - ID:[TASK#344997]
  - SUG:NA
  - DESC:
  - Add network interface card cross die performance optimization support base on Phytium.


author: weishaokun<weishaokun@kylinos.cn> - 202011-12.p03
changelog:
  - Type: update
  - ID:   84913
  - SUG:  NA
  - DESC: KYLIN, ArmVirtPkg, add Kylin-Support-virtual-AHCI-and-NVMe-drives.patch


author: weishaokun <weishaokun@kylinos.cn> - 202011-12.p07
changelog:
  - Type: Update
  - ID:   [TASK#184415]
  - SUG:  NA
  - Desc: Add OvmfPkg/OvmfPkgX64Csv.dsc for Hygon;Add patch 0001-create-fd-file-to-support-CSV.patch


author: lijunwei <lijunwei@kylinos.cn> - 202011-12.p09
changelog:
  - Type: Update
  - ID:   [BUG#202794][BUG#220448]
  - SUG:  NA
  - Desc: Provides unique edk2 firmware for Hygon 3rd cpu CSV use 
          and avoid zhaoxin vm vcpu use host-passthrough reboot crash in install


author: lijunwei <lijunwei@kylinos.cn> - 202011-12.p10
changelog:
  - Type: Update
  - ID:   [BUG#220448]
  - SUG:  NA
  - DESC: Add 0001-bugfix-OvmfPkg-Check-SEV-ES-feature-before-checking-.patch
  	fix Hygon 1# vm crash in install


author: yanjianqing <yanjianqing@kylinos.cn> - 202011-12.p12
changelog:
  - Type: Update
  - ID:   [TASK#363445]
  - SUG:  NA
  - DESC: fix CVE
  - CVE-2023-0464/CVE-2023-0465/CVE-2023-0466/CVE-2023-2650/CVE-2023-3446/CVE-2023-3817
  - CVE-2024-0727/CVE-2022-36763/CVE-2022-36764/CVE-2022-36765
  - CVE-2023-45229/CVE-2023-45230/CVE-2023-45231/CVE-2023-45232/CVE-2023-45233/CVE-2023-45234/CVE-2023-45235
  - CVE-2024-2511
  - CVE-2024-1298/CVE-2024-5535/CVE-2021-3712/CVE-2022-0778


author: lijunwei <lijunwei@kylinos.cn> - 202011-12.p13
changelog:
  - Type: Update
  - ID:   [TASK#361579]
  - SUG:  NA
  - DESC: Add new patches about Hygon CSV and fix baseline for AmdSevX64.dsc


author: lijunwei <lijunwei@kylinos.cn> - 202011-12.p14
changelog:
  - Type: Update
  - ID:   [TASK#388581]
  - SUG:  NA
  - DESC: Fix CVE-2024-38796/CVE-2023-45236/CVE-2023-45237


author: panxiaohe <panxh.life@foxmail.com> - 0.180-9
changelog:
  - change the permission of eu-* to 750
  - add elfutils-extra
  - move eu-objdump, eu-readelf, eu-nm to elfutils-extra


author: fuanan <fuanan3@h-partners.com> - 0.180-11
changelog:
  - Fix "/usr/lib64/libdebuginfod.so.1" not found when uninstall elfutils-debuginfod-client-devel
  - Fix Obsoletes in spec


author: fuanan <fuanan3@h-partners.com> - 0.180-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix segfault in eu-ar -m
         Use upstream patch for Fix error of parsing object file perms


author: wangshuo <wangshuo@kylinos.cn> - 0.180-15.p01
changelog:
  - Type:[update/bugfix]
  - ID:[TASK#186441][BUG#203894]
  - SUG:NA
  - DESC:x86_64/aarch64: The kernel parameter 'kernel.yama.ptrace_scope = 0' has been commented out.
  -      loongarch64: Add Patch1001-1003, support loongarch64


author: wangshuo <wangshuo@kylinos.cn> - 0.180-15.p02
changelog:
  - Type:[update]
  - ID:[TASK#186441]
  - SUG:NA
  - DESC:p01 build already exists at 239 Koji, causing ctdy-build task failure


author: wangqiang <wangqiang1@kylinos.cn> - 0.180-15.p03
changelog:
  - Type:[bugfix]
  - ID:[TASK#351059] 
  - SUG:NA                                                                     
  - DESC:Add buildrequire to support compress


author: houzhiwei <houzhiwei@kylinos.cn> - 0.180-15.p04
changelog:
  - Type:[update]
  - ID:[TASK#414525]
  - SUG:NA
  - DESC:correctly fix libdebuginfod.so requirement，fix CVE-2025-1352 CVE-2025-1372 CVE-2025-1376 CVE-2025-1377


author: lijiaan <lijiaan@kylinos.cn> - 1.12.0-2kord0k41.04
changelog:
  - Add modified-parameters-appear-at-the-same-time.patch
  - modified limit appear -k --keep-newer-files at the same time
  - 03 version number was occupied by zj


author: GuoCe <guoce@kylinos.cn> - 1.12.0-2kord0k41.05
changelog:
  - Add resolve_position_display_chinese_character_garbled_code.patch
  - 使用归档管理器打开一个压缩文件，点击归档文件-属性，当位置信息有汉字时显示乱码
  - Add fix-just-add-file-without-directory.patch
  - 空文件夹压缩后，使用归档文件器打开再另存为时，提示信息一闪而过且没有保存成功


author: huayadong <huayadong@kylinos.cn> - 1.12.0-2kord0k41.p08
changelog:
  - add patch41, engrampa-1.12.0-kylin-fix-bug-failed-to-save-the-file-with-the-same-name.patch.
  - fix chandao bug 46607.


author: peijiankang <peijiankang@kylinos.cn> - 1.12.0-2kord0k41.p09
changelog:
  - Type: bugfix
  - ID:   [TASK#185071]
  - SUG:  NA
  - DESC: add engrampa-add-translation-for-tw-and-hk.patch


author: douyan <douyan@kylinos.cn> - 1.12.0-2kord0k41.p10
changelog:
  - Type: bugfix
  - ID:   [TASK#187126]
  - SUG:  NA
  - DESC: engrampa-1.12.0-kylin-add-zh_HK-translation.patch


author: wangjie <wangjie375@huawei.com> - 2.2.9-4
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.2.9-6
changelog:
  - Type:CVE
  - ID:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p10
changelog:
  - Type:CVE
  - ID:TASK#162235 
  - SUG:NA
  - DESC: Fix fix CVE-2021-45960 CVE-2021-46143
          CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: lipengyu <lipengyu@kylinos.cn> - 79.0-7.p16
changelog:
  - Type: bugfix
  - ID: [BUG#231659]
  - SUG: NA
  - DESC:Change the default search engine in Firefox to Baidu


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p17
changelog:
  - Type: cves
  - ID: CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946 CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406 CVE-2020-15675  
        CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998
  - SUG: restart
  - DESC: fix CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946  CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406   
              CVE-2020-15675  CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p17
changelog:
  - Type: cves
  - ID: CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946 CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406 CVE-2020-15675  
        CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998 CVE-2022-29912
  - SUG: restart
  - DESC: fix CVE-2023-44488  CVE-2020-26950  CVE-2020-26971  CVE-2021-29946  CVE-2022-34481   CVE-2020-26979  CVE-2023-6209  CVE-2022-45406   
              CVE-2020-15675  CVE-2021-23972   CVE-2021-23954 CVE-2021-29984  CVE-2021-29988   CVE-2021-23998 CVE-2022-29912


author: lvfei <lvfei@kylinos.cn> - 79.0-7.p19
changelog:
  - Type: cves
  - ID:CVE-2021-29970.patch  CVE-2021-43539.patch  CVE-2023-1945.patch
  - SUG: restart
  - DESC: patch  CVE-2021-29970.patch  CVE-2021-43539.patch  CVE-2023-1945.patch


author: huayadong <huayadong@kylinos.cn> - 2.13.92-1.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#251085]
  - SUG : NA
  - DESC: add Patch9001:fontconfig-2.13.92-kylin-backport-Report-more-detailed-logs-instead-of-assertion.patch


author: baizhonggui <baizhonggui@huawei.com> - 20200314-5
changelog:
  - Fix building error: Could not open %files file /home/abuild/rpmbuild/BUILD/fontforge-20200314/FontForge.lang:No such file or directory
  - Add glib in BuildRequires


author: wangyue <wangyue92@huawei.com> - 20200314-6
changelog:
  - remove useless glib buildrequire
  - move /usr/lib/rpm/find-lang.sh /builddir/build/BUILDROOT/fontforge-20200314-7.p02.ky10.x86_64 to correct stage


author: Like <like@kylinos.cn> - 20200314-7.p02
changelog:
  - Type:cves
  - ID:CVE-2024-25081 CVE-2024-25082
  - SUG:NA
  - DESC:add patch3 fix CVE-2024-25081 CVE-2024-25082


author: gaoyukun<gaoyukun@kylinos.cn> - 3.0.15-28.p01
changelog:
  - Type: bugfix
  - ID: [BUG#278033、278023]
  - SUG:NA
  - DESC: Add sed -i '/^95$/d' /etc/uid_list,resolve the issue of installation failure after uninstallation.


author: gaoyukun<gaoyukun@kylinos.cn> - 3.0.15-28.p02
changelog:
  - Type: bugfix、compile
  - ID: [BUG#278033、278023]
  - SUG:NA
  - DESC: solve compilation problems,  remove "


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: GuoCe <guoce@kylinos.cn> - 2.66.8-13.p01
changelog:
  - Type: task
  - ID: 186407
  - SUG: NA
  - DESC: Add patch7001 to support zh_HK
          Add BuildRequires: dbus-daemon


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.66.8-13.p02
changelog:
  - Type: cve fix
  - ID: NA
  - SUG: NA
  - DESC: add backport-CVE-2024-52533.patch backport-CVE-2024-34397.patch


author: <majian@kylinos.cn> - 2.28-98.p02
changelog:
  - Type: update
  - ID: [TASK#178011]
  - SUG: NA
  - DESC: Add ZhaoXin patches(Patch101-Patch106).

   * Tue Dec 5 2023 majian <majian@kylinos.cn> - 2.28-98.p01
   - Type: update
   - ID: [TASK#186426]
   - SUG: NA
   - DESC: Init package for Kylin V10 sp4.
     Add kylin patches(Patch9002 - Patch9018).
     Patch9002: 9002-kylin-add-multi-gl-support-for-glibc.patch [from glibc-2.28-49.p01]
     Patch9003: 9003-kylin-dl-fix-error-init-value.patch [from glibc-2.28-49.p02]
     Patch9004: glibc-2.28-optimize-for-Hygon-CPU.patch [TASK#74132]
     Patch9005: 9005-kylin-give-a-chance-to-reload-gl_path-when-dlopen.patch [TASK#101352]
     Patch9015: complete-GB18030-2022-level-2-full-characte.patch [TASK#163840]
     Patch9016: Kylin_fix_localesdata_countryname-2.28-93.patch [BUG#189310]
     Patch9017: glibc-fix-screen-bluring.patch [TASK#198686]
     Patch9018: add-Wl-z-noseparate-code-for-so.patch [TASK#185289]


author: majian <majian@kylinos.cn> - 2.28-98.p03
changelog:
  - Type: update
  - ID: [TASK#206599]
  - SUG: NA
  - DESC: Patch9001: 9001-kylin-glibc-add-mesa_func-in-midr-way.patch.


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.28-98.p04
changelog:
  - Type:cves
  - ID: CVE-2024-2961 CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:fix CVE-2024-2961 CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: lvying <lvying6@huawei.com> - 2.7-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG: NA
  - DESC: peripheral package quality reinforcement: backport bugfix patches from community


author: wangqiang <wangqiang1@kylinos.cn> - 2.8-1.p01
changelog:
  - Type:enhancement
  - ID:[TASK#393475]
  - SUG:NA
  - DESC:Add configure option '--with-tcmalloc-pagesize=64' adopt to aarch64 with 64K pazgesize


author: Like <like@kylinos.cn> - 2.44.0-5.p01
changelog:
  - Type: bugfix
  - ID:   NA
  - SUG:  NA
  - DESC: add patch9000: 0001-Support-loongarch64.patch
          sync from 2.44.0-3.p01


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p08.se.07
changelog:
  - Type:update
  - ID:bug#195608
  - SUG:NA
  - DESC: add kylin-read-nv-with-policy-authorization.patch
  	    kylin-add-kylin_tpm.mod.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p08.se.08
changelog:
  - Type:update
  - ID:bug#195608
  - SUG:NA
  - DESC: add kylin-modify-an-exception-intercept-that-a-file-does-not-exist.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 1:2.04-37.p09.se.08
changelog:
  - Type:update
  - ID:Task#164035
  - SUG:NA
  - DESC: Replace BOOTLOONGARCH*.efi when installing grub2-efi-loongarch64, fix the issue of missing initrd parameter in /proc/cmdline


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p09.se.09
changelog:
  - Type:update
  - ID:Task#202455
  - SUG:NA
  - DESC: add kylin-measurefiles.mod-unblock-the-file-that-does-not-exist.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p10.se.11
changelog:
  - Type:bugfix
  - ID:BUG#218407
  - SUG:trusted boot
  - DESC: add  kylin-example-modify-the-path-of-the-configuration-file.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p10.se.12
changelog:
  - Type:bugfix
  - ID:BUG#220240
  - SUG:trusted boot
  - DESC: add kylin-complete-log-writing-when-bimabase-integrity-is-abnormal.patch


author: liuyang <liuyang01@kylinos.cn> - 1:2.04-37.p12.se.12
changelog:
  - Type:CVE
  - ID:TASK#338411
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity
         kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p12.se.13
changelog:
  - Type:bugfix
  - ID:BUG#242437
  - SUG:trusted boot
  - DESC: add modification-in-kylin-trust-measure-mod-for-http-boot-failure-issue.patch


author: bianxiuning <bianxiuning@kylinos.cn> - 1:2.04-37.p13.se.14
changelog:
  - Type:update
  - ID:task#374821
  - SUG:NA
  - DESC:add bugfix-tpcm-Fixed-the-problem-of-inconsistent-parame.patch


author: Funda Wang <fundawang@yeah.net> - 1.16.2-6
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: peijiankang <peijiankang@kylinos.cn> 2.24.32-11.p01
changelog:
  - Type: cves
  - ID:   [TASK#356995]
  - SUG:  NA
  - DESC: modify spec file enable_immodules_package 1  build gtk2-immodules packages
          add file gtk+-2.24.32-kylin-13336.patch
          add patch 0001-fix-chandao-bug47120.patch
          add patch:0001-add-some-translate.patch
          sync from 2.24.32-7.p03


author: peijiankang <peijiankang@kylinos.cn> - 3.24.21-6.p01
changelog:
  - Type: cves
  - ID:   [TASK#356907]
  - SUG:  NA
  - DESC: add gtk3-update-translations-for-hk.patch
          Handle the mouse block problem of virt-manager virtual machine
          modify gtk3 spec file enable_immodules_package 1
          sync from 3.24.21-1.p03


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p06
changelog:
  - Type:bugfix
  - ID:[Bug#171872]
  - SUG:NA
  - DESC:add patch6:hardinfo-0.6.1-kylin-add-the-name-YMTC-for-oui-id-a428b7.patch


author: huayadong<huayadong@kylinos.cn>-0.6.1-1.p07
changelog:
  - Type:bugfix
  - ID:[Bug#177860]
  - SUG:NA
  - DESC:add patch7:hardinfo-0.6.1-kylin-fix-ft2000-cpu-no-speed.patch


author: wangshuo <wangshuo@kylinos.cn> - 0.6.1-1.p08
changelog:
  - Type:bugfix
  - ID:[BUG#182817]
  - SUG:NA
  - DESC:add patch8, retrieve the motherboard info for arm and loongarch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p09
changelog:
  - Type:bugfix
  - ID:[TASK#178533]
  - SUG:NA
  - DESC:add patch9,hardinfo-0.6.1-kylin-hard-disk-sorting.patch


author: houhongxun <houhongxun@kylinos.cn> - 0.6.1-1.p10
changelog:
  - Type:bugfix
  - ID:[BUG#197180]
  - SUG:NA
  - DESC:add patch10,0001-fix-pci-info-showing-wrong-link-width.patch
         fix that pci info showed wrong current link width


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p11
changelog:
  - Type:bugfix
  - ID:[BUG#197179]
  - SUG:NA
  - DESC:add patch11,hardinfo-0.6.1-kylin-hard-disk-sorting.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p12
changelog:
  - Type:bugfix
  - ID:[BUG#199256]
  - SUG:NA
  - DESC:add patch12,hardinfo-0.6.1-kylin-hide-Firmware.patch


author: houhongxun <houhongxun@kylinos.cn> - 0.6.1-1.p13
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-hardinfo-add-traditional-chinese-translation.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p14
changelog:
  - Type: bugfix
  - ID  : [BUG#208197]
  - SUG : NA
  - DESC: add patch14:hardinfo-0.6.1-kylin-fix-sensors-driver-unknow.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p15
changelog:
  - Type: bugfix
  - ID  : [BUG#225214]
  - SUG : NA
  - DESC: add patch15:hardinfo-0.6.1-kylin-fix-temperature-label-display-error.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.6.1-1.p16
changelog:
  - Type: bugfix
  - ID  : [BUG#234629]
  - SUG : NA
  - DESC: add patch15:hardinfo-0.6.1-kylin-update-HK-translation-of-Server.patch


author: peijiankang <peijiankang@kylinos.cn> - 0.6.1-1.p16
changelog:
  - Type: bugfix
  - ID  : [BUG#234629]
  - SUG : NA
  - DESC: add patch16:hardinfo-0.6.1-kylin-update-HK-translation-of-Server.patch


author: huayadong <huayadong@kylinos.cn> - 0.6.1-1.p17
changelog:
  - Type: bugfix
  - ID  : [BUG#245937][BUG#245949]
  - SUG : NA
  - DESC: add patch17:hardinfo-0.6.1-kylin-change-int-to-long-int-in-memory_usage.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: gongxingliang <gongxingliang@kylinos.cn> - 1.14.5-1.p01
changelog:
  - Type:compile
  - ID:NA
  - SUG:NA
  - DESC:Remove compile options (-fallow-argument-mismatch -fallow-invalid-boz) to fix compilation failure


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-21
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:restart
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.43-24
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-25
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: zhangchaorui <zhangchaorui@kylinos.cn> - 2.4.43-25.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: merge 2.4.43-13.p01 patch 
          Change index.html in SOURCES
          change openEuler to Kylin 
          Change httpd.conf in SOURCES.
          Hide httpd version.
          Turn TraceEnable off.
          add backport-CVE-2019-17567-fix-limit-lengteh-of-domain.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 10.01-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:execute udevadm settle when network starts and network fork to start dhcp process


author: gaoxingwang<gaoxingwang@huawei.com> - 10.04-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon


author: hexiaole <hexiaole@kylinos.cn> - 10.04-3.p01
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC:Patch10:add-check-before-arping.patch:add interface state check before arping from 10.04-1.p02:0001-fix-restart-network-server-fail.patch and 10.04-1.p02:0002-modify-wait-time-to-30s.patch


author: jiangjixiang <jiangjixiang@kylinos.cn> - 10.04-3.p02
changelog:
  - Type:bugfix
  - ID:[task#150862]
  - SUG:NA
  - DESC:Add patch11 to resolve the issue of resolv.conf being cleared.
         this issue is introduced by patch0 and patch5.


author: lifeifei<lifeifei@kylinos.cn> - 10.04-4.p02
changelog:
  - Type:bugfix
  - ID:[task#170327]
  - SUG:NA
  - DESC: Synchronizing upstream community changes:Initscripts no looger care about rc.local


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: xihaochen <xihaochen@huawei.com> - 1.8.18-17
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:move exchange-bmc-os-info,bmc-snmp-proxy to separate subpackages from ipmitool


author: mengkanglai <mengkanglai2@huawei.com> - 1.8.18-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lan channel fix set alert on off and lanplus realloc the msg if the payload_length gets update


author: jiangjixiang <jiangjixiang@kylinos.cn> - 1.8.18-19.p01
changelog:
  - Type:sync
  - ID: task 186413
  - SUG:NA
  - DESC: synchronize loongarch's patch from 1.8.18-15.p02
      sync Patch6028 to solve the problem of malloc invalid next size (unsorted) when typecode=2 size too small
      sync Patch6029 to solve sel list  timestamp and add CST


author: Benshuai5D <benshuai5d@163.com> - 1:1.8.0.402-b06.4
changelog:
  - add 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - add 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
  - add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
  - add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
  - add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
  - add GCC-12-reports-some-compiler-warnings.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.412-b08.0
changelog:
  - del 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - del 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase2.patch
  - modified support-numactl-for-hadoop-yarn.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.412-b08.3
changelog:
  - add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
  - add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.412-b08.4
changelog:
  - fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
  - fix loongson vendor error


author: Xiang Gao <gaoxiang@kylinos.cn> -1:1.8.0.412-b08.5.p02
changelog:
  - Type:update
  - ID:TASK#205860,TASK#218926
  - SUG:NA
  - DESC:1.Add Hygon dhyana processor support
         2.fix atomic operation issus when cpu scaling
         3.Add Zhaoxin processor support


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.422-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8136577_Make_AbortVMOnException_available_in_product_builds.patch
  - modified Dynamic-CDS-Archive.patch
  - modified add-safe-compilation-flags.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified openjdk-1.8.0.spec
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - Add Backport-6956385-URLConnection.getLastModified-leaks-file-han.patch
  - Add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - Add Backport-8068864-C2-failed-modified-node-is-not-on-IGVN._work.patch
  - Add Backport-8151845-Comment-in-globals.hpp-for-MetaspaceSize-is-.patch
  - Add Backport-8209362-sun-security-ssl-SSLSocketImpl-ReuseAddr.jav.patch
  - Add Backport-8210706-G1-may-deadlock-when-starting-a-concurrent-c.patch
  - Add Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - Add Huawei-Add-Aggressive-CDS.patch
  - Add Huawei-Keep-objects-when-remove-unshareable-info.patch
  - Add Huawei-improve-GCTR-performance.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.3.p01
changelog:
  - Type: update
  - ID:   TASK#337667
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Fix atomic operation issus when cpu scaling
          3.Add Zhaoxin processor support


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: gaoxiang <gaoxiang@kylinos.cn> -1:1.8.0.422-b05.6.p02
changelog:
  - JDK8 supports 8074981-Integer-FP-scalar-reduction-optimization
  - backport AVX512 support, disable by default.


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC: 1.JDK8u432 GA release
  	2.Default parameter updates for x86
  	3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
  	4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.432.b06-1.p01
changelog:
  - Type: update
  - ID:   TASK#386911
  - SUG:  NA
  - DESC:	1.JDK8u432 GA release
  	2.Default parameter updates for x86
  	3.Add Hygon, Zhaoxin, Atomic operation and AVX512 patches
  	4.Modify date of 1.8.0.422-b05.6.p02 to solve changelog issue


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.432.b06-2
changelog:
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8253072-XERCES-version-is-displayed-incorrect.patch
  - add 8159461-8288556-getComponentType.patch
  - add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
  - add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.442.b06-0.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-1.8.0.442.b06 GA release with kylin support:
          1.Support Hygon, Zhaoxin, Atomic operation
          2.Default parameter updates for x86


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.22.7-0
changelog:
  - update to 11.0.22+7(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: huangjie <huangjie150@huawei.com> - 1:11.0.23.9-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified delete_expired_certificates.patch


author: songliyang <songliyang@kylinos.cn> - 1.11.0.24.8-3.p01
changelog:
  - Type: update
  - ID:   [TASK#337669]
  - SUG:  NA
  - DESC: 1.Add Hygon dhyana processor support
          2.Add Zhaoxin processor support


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC: 1.openjdk-11.0.25.9 GA release
  	2.add Hygon dhyana processor support
          3.add Zhaoxin processor support
  	4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: songliyang <songiyang@kylinos.cn> - 1:11.0.25.9-3.p01
changelog:
  - Type: update
  - ID:   [TASK#392265]
  - SUG:  NA
  - DESC:	1.openjdk-11.0.25.9 GA release
  	2.add Hygon dhyana processor support
  	3.add Zhaoxin processor support
  	4.modify date of 11.0.24.8-3.p02 release to solve changelog issue


author: songliyang <songiyang@kylinos.cn> - 1:11.0.26.4-1.p01
changelog:
  - Type: update
  - ID:   [TASK#436570]
  - SUG:  NA
  - DESC: openjdk-11.0.26.4 GA release with kylin support:
          1.Support Hygon, Zhaoxin CPU


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p31
changelog:
  - Type:bugfix
  - ID:[BUG#178000] [TASK#176779] [TASK#179475]
  - SUG:NA
  - DESC: add get trial date fuction for dbus
  - DESC: open auto activation for kms privatization
  - DESC: add ipv6 support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.2-1.p33.02
changelog:
  - Type: bugfix
  - ID:[bug#216077]
  - SUG: NA
  - DESC: add tips when inputed activation code is too short


author: yangyan<yangyan@kylinos.cn> -0.1.0-5
changelog:
  - Type:bugfix and task
  - ID:all
  - SUG:Na
  - DESC: The modifications made in the past week have been combined into a patch file


author: yangyan <yangyan@kylinos.cn> -0.1.0-6
changelog:
  - Type:task
  - ID:210047 & 210036
  - SUG:Na
  - DESC: Added archive profile judgment and removed patch_info field check


author: yangyan <yangyan@kylinos.cn> -0.1.0-7
changelog:
  - Type:BUG&Task
  - ID:all
  - SUG:NA
  - DESC:The modifications made in the past week have been combined into a patch file


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.01
changelog:
  - Type: update
  - ID:[TASK#147330]
  - SUG:NA
  - DESC: 1、移植服务器sm补丁: kysec-sync-daemon-add-patch-from-debian-0913.patch
  -          合并桌面补丁，移植授权新方案和及时生效; 添加libkysec-module-authorize-devel编译依赖
  -            add patch: kysec-sync-daemon-add-patch-from-debian-0913.patch
  -	2、移植服务器sm补丁: kysec-sync-daemon-add-patch-from-debian-1019.patch
  -	   合并桌面补丁，开机对需要禁止的hub设备rebind
  -	     add patch: kysec-sync-daemon-add-patch-from-debian-1019.patch
  -	3、移植服务器sm补丁: kysec-sync-daemon-add-patch-from-debian-1026.patch
  -	   合并桌面补丁，sm同步ssid到内核
  -	     add patch: kysec-sync-daemon-add-patch-from-debian-1026.patch
  -	4、移植服务器sm补丁: kysec-sync-daemon-add-patch-from-debian-1105.patch
  -	     add patch: kysec-sync-daemon-add-patch-from-debian-1105.patch
  -	5、移植服务器sm修改: 修改spec文件, 安装依赖zeromq-devel改为zeromq
  -	6、移植服务器sm补丁: kysec-sync-daemon-fix-bugs-1121.patch
  -	   优化设备管控逻辑
  -	     add patch: kysec-sync-daemon-fix-bugs-1121.patch
  -	7、移植服务器sm补丁: kysec-sync-daemon-add-patches-from-sp3-1213.patch
  -	   合入sp3主线版本补丁
  -	     add patch: kysec-sync-daemon-add-patches-from-sp3-1213.patch
  -	8、移植服务器sm补丁: kysec-sync-daemon-fix-core-bug-230131.patch
  -	   解决core问题
  -	     add patch: kysec-sync-daemon-fix-core-bug-230131.patch
  -	9、移植服务器sm补丁: kysec-sync-daemon-adapter-kernel-device-info-file-change.patch
  -	   匹配内核device_info文件格式修改
  -	     add patch: kysec-sync-daemon-adapter-kernel-device-info-file-change.patch
  -	10、移植服务器sm补丁: kysec-sync-daemon-sm-fix-usb-hid-reboot-not-disable.patch
  -	    修复sm hid设备重启后不生效的问题
  -	      add patch: kysec-sync-daemon-sm-fix-usb-hid-reboot-not-disable.patch
  -	11、移植服务器sm补丁: kysec-sync-daemon-sm-fix-more-usb-reboot-not-disable.patch
  -	    修复sm usb设备重启后不生效的问题
  -	      add patch: kysec-sync-daemon-sm-fix-more-usb-reboot-not-disable.patch
  -	12、移植桌面补丁: compare-hash-when-sync-unknown-label-file.patch
  -	    核外更新数据库时，比较哈希值是否相同，不相同时才修改状态为已篡改状态
  -	      add patch: kysec-sync-daemon-compare-hash-when-sync-unknown-label-file.patch
  -	13、移植桌面补丁: add-file-protect-sync-process.patch-
  -	    kysoft标记/parent标记的程序mv只读标记的文件后, readonly标记丢失, 内核没有通知核外程序
  -	      add patch: kysec-sync-daemon-add-file-protect-sync-process.patch
  -	14、移植桌面补丁: update-zmq-bind-ip-to-127.0.0.1.patch
  -	    kysec服务监听指定改为127.0.0.1
  -	      add patch: kysec-sync-daemon-update-zmq-bind-ip-to-127.0.0.1.patch
  -	15、移植桌面补丁: optimize-sync-services-start-oredr.patch
  -	    优化系统启动服务; spec文件中移除kysec-sync.service
  -	      add patch: kysec-sync-daemon-optimize-sync-services-start-oredr.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.02
changelog:
  - Type: update
  - ID:[TASK#151385]
  - SUG:NA
  - DESC: 删除网络控制自动探测的功能
  -	  add patch: kysec-sync-daemon-delete-netctl-auto-add.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 1.1.1-01.se.03
changelog:
  - Type: update
  - ID:[TASK#155338]
  - SUG:NA
  - DESC: sp4 kysec 应用层日志优化
  -       add patch: kysec-sync-daemon-log-enhanced-sp4.patch


author: zhangxiuwen <zhangxiuwen@kylinos.cn> - 1.1.1-01.se.04
changelog:
  - Type: update
  - ID：[162337]
  - SUG:NA
  - DESC:设备管控需求合入
          add patch:kysec-sync-daemon-add-program-blacklist-to-prevent-program-execution.patch
                    kysec-sync-daemon-limit-admin-permission-for-sm.patch
                    kysec-sync-daemon-integration-of-equipment-control-requirements-into-common-use.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.06
changelog:
  - Type: update
  - ID：[任务#171233]
  - SUG:NA
  - DESC: 同步hostos补丁，兼容模式添加内核模块化补丁[Task#163122]
  -	  add patch: kysec-sync-daemon-use-ko-adapt.patch
  -	为hostos可以拉齐sp4版本，升级到se.06


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.08
changelog:
  - Type: update
  - ID: [任务#165232]
  - DESC: kmod使用kdk接口
  -	  add patch: kysec-sync-daemon-modify-kmod-interface-use-kdk.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.09
changelog:
  - Type: bugfix
  - ID: [BUG#218046]
  - DESC: 修复系统重启后kmod的sm策略不生效
  -	  add patch: kysec-sync-daemon-fix-sm-policy-kmod-inoperative-when-reboot.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.10
changelog:
  - Type: bugfix
  - ID: [BUG#218522]
  - DESC: 修复重启后hub管控不生效的问题
  -     add patch: kysec-sync-daemon-fix-hub-policy-not-work-after-reboot.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.11
changelog:
  - Type: bugfix
  - ID: [TASK#217917]
  - DESC: 修复设备管控usb中的段错误
  -     add patch: kysec-sync-daemon-fix-usb-coredump.patch


author: fuanan <fuanan3@huawei.com> - 551-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Minor memory leak.
         Remove unnecessary and incorrectly used variable same_pos_bell.
         Fix erroneous EOF calculation when F command is interrupted.
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: peijiankang <peijiankang@kylinos.cn> - 1.6.9-8.p01
changelog:
  - Type: bugfix
  - Id  : [bug#260937]
  - SUG : NA
  - DESC: add libX11-1.6.9-fix-imDefLkup-coredump.patch


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-13
changelog:
  - 修复切换总开关时pcr策略下发会清理其他策略问题
  - 增强tcm1 兼容性
  - 动态修改pcr时，不再重新加载模块，保证策略连贯性
  - 添加pcie tcm1卡支持
  - 配置pcr策略时，增加pcr设备异常提示信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-14
changelog:
  - 添加tcm1支持兼容选项，以兼容v11系统
  - 修复编译条件变量编写错误导致的编译异常
  - 移除event帮助信息
  - 针对tcm1提示信息添加编译选项
  - 格式话代码格式
  - 修改编译告警
  - 修复三状态切换配置属性不全问题
  - 优化移除无冗余代码


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p51
changelog:
  - Type: bugfix
  - ID:[BUG#178000]
  - SUG:NA
  - DESC: fix get expiration time error and add get trial time fuction


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p52
changelog:
  - Type: upadate
  - ID:[TASK#153883]
  - SUG:NA
  - DESC: change service enable way in postinstall and posttrans


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p53
changelog:
  - Type: upadate
  - ID:[TASK#163840]
  - SUG:NA
  - DESC: add longmai and haitaifangyuan ukey driver support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p64
changelog:
  - Type: Task
  - ID:[TASK#188185]
  - SUG: NA
  - DESC: add debuginfo and delete useless code file
  - DESC: merge main branch to this


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p65
changelog:
  - Type: bugfix
  - ID:[BUG#211902][BUG#212682]
  - SUG: NA
  - DESC: gather together kms cmd
  - DESC: add writable port and decoupling echoip from kms server


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p69
changelog:
  - Type: bugfix
  - ID:[BUG#235198][BUG#235203][TASK#336625][TASK#335500][BUG#242309][BUG#241968]
  - SUG: NA
  - DESC: fix translation errors for bug#235198 and bug#235203
  	fix get activation status error  for task#336625
  	fix get sn code error for task#335500
  	fix kylin_kms delay failed for bug#242309
  	fix kylin_kms -c failed for bug#241968


author: Wolfgang Ulbrich <chat-to-me@raveit.de> - 1.7.90-1
changelog:
  - update to 1.7.90 release
  - use --with-gnome --all-name for find locale
  - enable python bindings, add BR pygtk2-devel


author: huayadong <huayadong@kylinos.cn> 1.12.1-1.p01
changelog:
  - Type:fixbug
  - ID  :[bug#204766]
  - SUG :NA
  - DESC:add patch0:libmateweather-1.12.1-kylin-delete-sensitive-information.patch


author: xinghe <xinghe2@h-partners.com> - 2.71.0-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: yuboyun<yuboyun@huawei.com> - 1.9.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix heap-buffer-overflow in _libssh2_ntohu32 and wild-addr-read in _libssh2_ntohu32


author: gaoyukun <gaoyukun@kylinos.cn> - 4.16.0-3.p01
changelog:
  - Type:compile
  - ID:TASK#414527
  - SUG:NA
  - DESC:Add 'BuildRequires gtk-doc',repair compilation failure.


author: Like <like@kylinos.cn> - 1.2.6-4.p01
changelog:
  - Type:BUGFIX
  - ID:Task#150867,Task#145401
  - SUG:NA
  - DESC:Updated to the latest upstream release
  -- add 0001-__rpc_dtbsize-rlim_cur-instead-of-rlim_max.patch
     add 0003-libtirpc-replace-array-with-list-for-per-fd-locks.patch
     fix oom bug


author: yezengruan <yezengruan@huawei.com> - 0.7.3-7
changelog:
  - tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
  - tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
  - tpm2: Restore original value if unmarsalled value was illegal
  - fix CVE-2021-3623


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0 for fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: lifei <lifei@kylinos.cn> - 6.2.0-16.p07
changelog:
  - Type: update
  - ID: [TASK#159711]
  - SUG: NA
  - DESC: For homology to merge Loongarch64 patches
  -	Add LoongArch CPU host-model support, depends on X86 and ARM CPU.
  - 	Add Kylin add libvirt-6.2.0 loongarch64 support
  - 	Modify spec, add loongarch64 support
      	   loongarch64 define: qemu_kvm_arches, with_storage_zfs 0
      	   add loongarch LOADERS define
      	   add loongson libvirt-6.0.0 configure command as comment, for backup


author: lizhanchun <lizhanchun@kylinos.cn> 6.2.0-16.p11
changelog:
  - Type: update
  - ID:   [TASK:184101]
  - SUG:  NA
  - DESC: Resolve compatibility issues caused by the libtasn1 package upgrade.


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 6.2.0-16.p12
changelog:
  - Type: update
  - ID:   NA
  - SUG:  NA
  - nwfilter: fix crash when counting number of network filters (CVE-2022-0897)
  - qemu: Add missing lock in qemuProcessHandleMonitorEOF (CVE-2021-3975)


author: lijunwei <lijunwei@kylinos.cn> - 6.2.0-16.p13
changelog:
  - Type: update
  - ID:   [Task:185640]
  - SUG:  NA
  - DESC: Add support Phytium cpu TengYun-S5000c in SP4


author: lijunwei <lijunwei@kylinos.cn> - 6.2.0-21.p14
changelog:
  - Type: update
  - ID:   [Task:192206]
  - SUG:  NA
  - DESC: Rebase libvirt for  keep up with OE 20.03 SP4
          Revert build without dtrace
          Patch0055: fix nwfilter translation error; 
  	Patch0056: add domblklist info for vhost disk of SPDK
  	Patch0057: fix loongarch build error


author: weishaokun <weishaokun@kylinos.cn> - 6.2.0-21.p16
changelog:
  - Type: update
  - ID:   [TASK#215600]
  - SUG:  NA
  - DESC: fix hygon bug that can not support model AMD-Rome and AMD-Rome


author: lizhanchun <lizhanchun@kylinos.cn> 6.2.0-21.p17
changelog:
  - Type: bugfix
  - ID:   [BUG#249689]
  - SUG:  NA
  - DESC: Fix the translation problem of libvirtd.policy's prompts.


author: zhangchaorui <zhangchaorui@kylinos.cn> - 1.7.0-11.p01
changelog:
  - Type:update
  - ID:[task#186399]
  - SUG:NA
  - DESC: mv /usr/bin/tools/tiny_ssim to /usr/bin/tiny_ssim required by FHS standard


author: Funda Wang <fundawang@yeah.net> - 2.9.10-43
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 8:2.03.09-15.p01
changelog:
  - Type: updates
  - ID: [Task#186442]
  - SUG: NA
  - DESC: Sync 2.03.09-12.p05 source rpm patches:
  	p01:0018-LD_LIBRARY_PATH-add-extra-dir.patch
  	p03:1000-use-4k-sector-size-when-any-dev-is-4k.patch
  	p04:lvmlockd: add suport for loongarch64


author: baiguo <baiguo@kylinos.cn> - 8:2.03.09-15.p03
changelog:
  - Type: bugfix
  - ID: [Task#346081]
  - SUG: NA
  - DESC: fix an double free in the error path from _stats_creat_group
          because sp4-ha occupies p02,so p03 is used.


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.16.0-2
changelog:
  - fix for https://github.com/mate-desktop/marco/issues/251
  - https://bugzilla.redhat.com/show_bug.cgi?id=1419634


author: huayadong <huayadong@kylin.cn> - 1.16.1-4.p01
changelog:
  - add Patch2:marco-kylin-Fix-bug-60212-the-interface-of-Firefox-browser-and-drag-shadow-appears.patch


author: huayadong <huayadong@kylinos.cn>- 1.16.1-4.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#224312]
  - SUG:  NA
  - DESC: add patch3:marco-1.16.1-kylin-Add-the-_NET_WM_WINDOW_OPACITY-attribute-to-the-root-window.patch


author: huayadong <huayadong@kylinos.cn> -20150918kord0ukui58-10.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#104488]
  - SUG : NA
  - DESC: change %build for add debuginfo,rebuild for loongarch64.


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#197212]
  - SUG : NA
  - DESC: add patch 0001-use-utc-time-to-calculate-date-difference.patch
          to fix calendar display problem for some timezones


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p12
changelog:
  - Type: update
  - ID  : [TASK#187123]
  - SUG : NA
  - DESC: add patch 0001-mate-indicators-add-tranditional-chinese-translation.patch


author: houhongxun <houhongxun@kylinos.cn> -20150918kord0ukui58-10.p13
changelog:
  - Type: bugfix
  - ID  : [BUG#205717]
  - SUG : NA
  - DESC: add patch 0001-mate-indicators-add-some-missing-translations-for-ca.patch


author: peijiankang <peijiankang@kylinos.cn> -20150918kord0ukui58-10.p14
changelog:
  - Type: bugfix
  - ID  : [TASK#394677]
  - SUG : NA
  - DESC: add patch 0001-fix-mate-indicators-memory-leaks.patch


author: peijiankang <peijiankang@kylinos.cn> -20150918kord0ukui58-10.p15
changelog:
  - Type: bugfix
  - ID  : [TASK#394677]
  - SUG : NA
  - DESC: add patch 0002-fix-mate-indicators-memory-leaks.patch


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p05
changelog:
  -Type:bugfix
  -ID:[BUG#194507]
  -SUG:NA
  -DESC:add patch 0001-don-t-show-system-monitor-menu-if-current-user-is-no.patch
        don't show system monitor when not logged in as root


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p08
changelog:
  -Type:update
  -ID:[TASK#185828]
  -SUG:NA
  -DESC:add patch 0001-add-some-missing-traditional-chinese-translations.patch


author: houhongxun <houhongxun@kylinos.cn> -1.12.2-1kord37.p09
changelog:
  -Type:update
  -ID:[TASK#187123]
  -SUG:NA
  -DESC:add patch 0001-mate-panel-add-some-more-missing-traditional-chinese.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#117285]
  - SUG : NA
  - DESC: add Patch07 mate-system-monitor-1.24.0-kylin-adaptive-kysec-process-anti-unloading.patch
          适配kysec进程防杀死机制.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#93745]
  - SUG : NA
  - DESC: add Patch08 mate-system-monitor-1.24.0-fix-bug-93745.patch
          当三权分立开启，非超级用户不可操作系统监视器.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#117553]
  - SUG : NA
  - DESC: add Patch09 mate-system-monitor-1.24.0-fix-firefox-79.0-process-name-as-MainThread.patch
          修复firefox-79.0版本进程名称显示为MainThread.


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#75897]
  - SUG : NA
  - DESC: add Patch10 mate-system-monitor-1.24.0-fix-unable-to-internationalize.patch
          修复系统监视器无法国际化问题.


author: HouHongxun <houhongxun@kylinos.cn> 1.24.0-1.p11
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC: add 0001-modify-traditional-chinese-translation-for-HK-and-TW.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p12
changelog:
  - Type: update
  - ID: [TASK#185077]
  - SUG: NA
  - DESC:add patch12: mate-system-monitor-1.24.0-kylin-HK-po-update.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p13
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch13: mate-system-monitor-1.24.0-kylin-update-zh-HK-po.patch


author: huayadong<huayadong@kylinos.cn> 1.24.0-1.p14
changelog:
  - Type: update
  - ID: [BUG#204596]
  - SUG: NA
  - DESC:add patch14: mate-system-monitor-1.24.0-kylin-change-translate-seat.patch


author: peijiankang<peijiankang@kylinos.cn> 1.24.0-1.p15
changelog:
  - Type: update
  - ID: [TASK#201339]
  - SUG: NA
  - DESC:add patch15: 0001-fix-mate-system-monitor-memory-leaks.patch
         sync mips64el chandao116445:add mate-system-monitor-1.24.0-kylin-fix-stop-process.patch


author: peijiankang <peijiankang@kylinos.cn> - 20.1.4-3.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#186429]
  - SUG:  NA
  - DESC: sync from 20.1.4-1.p08
          Add Patch1001: 0001-meson-provide-a-default-configuration-to-build-vario.patch
          Add Patch1002: 0002-gallium-llvmpipe-pass-MCPU-mips64r2-to-LLVM-on-mips.patch
          Add Patch1003: 0003-gallivm-Return-true-from-arch_rounding_available-if-.patch
          Add Patch1004: 0004-gallivm-fix-coroutines-on-mips64-with-llvm-8.patch
          Add Patch1005: 0005-gallivm-add-more-optlevel-for-debug-purpose-on-mips6.patch
          Add Patch1006: 0006-disable-madd4-on-mips64.patch
          Add Patch1007: 0007-meson-add-mips-asm-flags.patch
          Add Patch1008: 0008-kmsro-Extend-to-include-loongson-drm-support.patch
          Add Patch1009: 0009-meson-add-loongarch64-build-support.patch
          Add Patch1010: 0010-gallivm-temporary-disable-coroutines-on-loongarch64-.patch
          Add Patch1011: 0011-gallivm-detect-loongarch-lsx-and-lasx-instruction-se.patch
          Add Patch1012: 0012-symbols-check-add-mips-platform-specific-symbols.patch
          Add Patch1013: 0013-gallivm-arit-use-LLVMBuildFPToUI-when-the-float-is-n.patch
          Add Patch1014: 0014-gallivm-disable-use-lp_build_round_arch-on-default.patch
          Add Patch1015: 0015-gallivm-add-more-optlevel-for-debuging-perpose-on-mi.patch
          Add Patch1016: 0016-gallivm-enable-lsx-and-lasx-on-loongarch-when-LLVM-e.patch
          Add Patch1017: 0017-llvmpipe-Fix-leak-of-CS-local-memory-with-0-threads.patch
          Add Patch1018: 0018-frontends-va-context-don-t-set-max_references-with-n.patch
          mv  to 2


author: pengfuyuan <pengfuyuan@kylinos.cn> - 20.1.4-3.p02
changelog:
  - Type: bugfix
  - ID:   [TASK#208462]
  - SUG:  NA
  - DESC: Add -D__KYLIN_FT1500A_DISPLAY__ for CFLAGS/CXXFLAGS


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: yaoxin <yao_xin001@hoperun.com> - 2.15.05-1
changelog:
  - Update to 2.15.05
    * fix %ifid with $ and $$
    * Add --reproducible option to suppress NASM version numbers and timestamps in output files


author: openEuler Buildteam <buildteam@openeuler.org> - 6.1-12
changelog:
  - Type:cves
  - ID:CVE-2019-17594  CVE-2019-17595
  - SUG:NA
  - DESC:fix CVE-2019-17594 and CVE-2019-17595


author: liwenchong <liwenchong@kylinos.cn> - 1:2.5.1-6
changelog:
  - set use-gss-proxy to true in nfs.conf to be consistent with the
    description of 0003-nfs-utils-set-use-gss-proxy-1-to-enable-gss-proxy-by.patch


author: xiejing <xiejing@kylinos.cn> - 1:1.21.5-5.p01
changelog:
  - Type:update
  - ID:[Task#168411],[Bug#192329]
  - SUG:NA
  - DESC:Modify Kylin in index.html,404.html,50x.html


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p01
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10sp1 to support loongarch64 platform,
          add patch 0001-node-v12.22.11-add-loong64-support.patch


author: xuhe <xuhe@kylinos.cn> - 1:12.22.11-5.p02
changelog:
  - Type: bugfix
  - ID: [TASK#180493]
  - SUG: NA
  - DESC: migrate patch from v10-2203sp2-hpc to fix sensitive fields,
          add patch Kylin-fix-sensitive-fields-to-prevent-political-ambi.patch


author: zhangchaorui <zhangchaorui@kylinos.cn> - 1:12.22.11-5.p04
changelog:
  - Type: cves
  - ID: NA
  - SUG: NA
  - DESC: Fix CVE-2023-46809,CVE-2024-22019,CVE-2024-22025,CVE-2024-27982 and CVE-2024-27983


author: lvfei <lvfei@kylinos.cn> - 3.54.0-8.p01
changelog:
  - Type: bugfix
  - ID: BUG#126432
  - SUG: NA
  - DESC: fix the bug Untrusted sites cannot be accessed 
  - add Patches:6001 kylinos-nss-fix-chandao-bug-126432.patch


author: songjuntao <songjuntao@kylinos.cn> - 3.54.0-8.p04
changelog:
  - Type:update
  - ID:TASK#181401
  - SUG:NA
  - DESC:add smx algorithm support and fix import pkcs12 file error


author: houzhiwei<houzhiwei@kylinos.cn>- 3.54.0-10.p07
changelog:
  - Type:update
  - ID:TASK#其它
  - SUG:NA
  - DESC: Add PK11_Pub{Wrap, Unwrap}SymkeyWithMechanism r=mt,rrelyea Summary


author: lifeifei <lifeifei@kylinos.cn> -v1.0.2-9.p01
changelog:
  - Type:Task
  - ID:344959
  - SUG:NA
  - DESC:Fix build error:
         1.Adapt for 4.19 kernel:0005-adapt-for-4.19-kernel.patch
         2.Add SOURCE1、SOURCE2 to solve the problem of obtaining source code over the Internet


author: fly_1997 <flylove7@outlook.com> -v1.0.1-6
changelog:
  - fix dependency error and add enable failed logs
  - fix dependency disabled failed and pre-enable illegal plugin


author: fly_1997 <flylove7@outlook.com> -v1.0.2-3
changelog:
  - add automatic startup based on the version
  - fix coredump when process exits
  - modify logger mode to append


author: lifeifei <lifeifei@kylinos.cn> -v1.0.2-3.p01
changelog:
  - Type:compile
  - ID:344959
  - SUG:NA
  - DESC:Refer to the upstream：adapt to cmake and gcc of earlier version


author: liuyumeng <liuyumeng5@huawei.com> - 2.3.1-6
changelog:
  - fix CVE-2020-8112 CVE-2020-6851 CVE-2020-27823 CVE-2020-27824,avoid integer overflow:pre-patch of CVE-2020-27841,fix fuzz


author: changtao <changtao@kylinos.cn> - 2.3.1-15.p01
changelog:
  - Type: complie
  - CVE: NA
  - SUG: NA
  - DESC:fix openjpeg2-help noarch package built differently on different architectures


author: Funda Wang <fundawang@yeah.net> - 0.20.0-15
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: WangShuo <wangshuo@kylinos.cn> - 8.2P1-16.p05
changelog:
  - Type:update
  - ID:[TASK#78310]
  - SUG:NA
  - DESC:Kylin delete configure "--with-sandbox=seccomp_filter" support loongarch64


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p09
changelog:
  - Type:update
  - ID: TASK#184873
  - SUG: NA
  - DESC: fix ssh-agent coredump when ssh-add exec add library


author: yuejiayuan <yuejiayuan@kylinos.cn> - 8.2P1-16.p10
changelog:
  - Type:update
  - ID: TASK#189950
  - SUG: NA
  - DESC: fix CVE-2023-51385
  	add backport-CVE-2023-51385-upstream-ban-user-hostnames-with-most-shell-metachar.patch


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p12
changelog:
  - Type:update
  - ID:TASK#193814
  - SUG:NA
  - DESC:support sm3 hmac feature, update ssh change mode script and 
         and fix memory leak


author: songjuntao <songjuntao@kylinos.cn> - 8.2P1-16.p16
changelog:
  - Type: bugfix
  - ID:[BUG#294265]
  - SUG:NA
  - DESC:fix login error after use the qingyun special config


author: mengchaoming<mengchaoming@kylinos.cn> -1:1.1.1f-31.p20
changelog:
  -Type:Update
  -ID:[Task#186427]
  -SUG:NA
  -DESC:backport patches from upstream patch121->patch140
   null pointer dereference occurs when memory alloca
   Make DH check set some error bits in recently added 
   Fix integer overflow in evp EncryptDecryptUpdate
   Fix Coverity 1201763 uninitialised pointer read
   Fix Coverity 1498611 1498608 uninitialised read
   Fix coverity 1498607 uninitialised value
   Fix OBJ nid2obj doesn t always raise an  issue
   Set protocol in init client
   Fix a crash in ssl security cert chain
   Fix undefined behaviour in EC GROUP new from ecparam
   Fix a memory leak in ec key simple oct2priv
   Fix a crash in asn1 item embed new
   Fix leakage when the cacheline is 32 bytes in CBC MA
   Add test for empty supported groups extension
   Do not send an empty supported groups extension
   x509 use actual issuer name if a CA is used
   Fix a memory leak in crl set issuers
   ASN1 Reset the content dump flag after dumping
   Don t reset the packet pointer in ssl3 setup read bu
   bn produce correct sign for result of BN mod


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-31.p21
changelog:
  - Type: update
  - ID: TASK#193265
  - SUG: NA
  - DESC: port sm2utl command tool code , support default user id,
          and optimize the return code, optimize dgst keyform for PEM,
          support pkeyutl verify function for sm2 cert.


author: yuejiayuan <yuejiayuan@kylinos.cn> - 1:1.1.1f-31.p22
changelog:
  - Type: update
  - ID: TASK#198465
  - SUG: NA
  - DESC: Fix CVE-2024-0727 PKCS12 Decoding crashes
  	add backport-CVE-2024-0727-fix-pkcs12-decoding-crashes.patch


author: songjuntao <songjuntao@kylinos.cn> - 1:1.1.1f-31.p23
changelog:
  - Type: update
  - ID: TASK#199873
  - SUG: NA
  - DESC: revert hygoncpp engine because of hygon gm not support openssl platform


author: anyunhao <anyunhao@kylinos.cn> - 1.5.2-6.p01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:sync from sp2 patch: 0001-pam-13.1-8-loacal-chinese.patch;
  - DESC:resolve "Account temporarily locked due to %d failed logins" chinese local

  - Type:bugfix
  - ID:26337
  - SUG:sync from sp2 patch:Linux-PAM-1.4.0-kylin-fix-bug26337.patch
  - DESC:NA

  - Type:bugfix
  - ID:19898
  - SUG:modify spec
  - DESC:Modify system-auth.pamd to add 'use_first_pass'


author: anyunhao <anyunhao@kylinos.cn> - 1.5.2-6.p02
changelog:
  - Type:bugfix
  - ID:bug#189847
  - SUG:modify patch;
  - DESC:modify Linux-PAM-1.4.0-kylin-fix-bug26337.patch to fix bug26337


author: wanghao <wanghao2@kylinos.cn> - 1.5.2-6.p02.se.02
changelog:
  - Type: update
  - ID:[BUG#199224]
  - SUG:NA
  - DESC: 修复相同UID用户登录时提示信息闪现的问题, 终端登录
  -	提示信息不准确, 在spec文件加入修改system-auth和
  -	password-auth文件的命令, 修改system-auth.pamd和
  -	password-auth.pamd源码文件
  -	  add patch: pam-fix-same-uid-tips-time-short.patch


author: gongxingliang <gongxingliang@kylinos.cn> - 1.5.2-6.p04.se.02
changelog:
  - Type:cves
  - ID:CVE-2024-22365 CVE-2024-10963
  - SUG:NA
  - DESC:add patch 2 to fix CVE-2024-22365,add 3 4 5 to fix CVE-2024-10963


author: Funda Wang <fundawang@yeah.net> - 7.2.34-3
changelog:
  - Fix php BUG#81740 / CVE-2022-31631
  - Fix php BUG#81744 / CVE-2022-0567
  - Fix php BUG#81746 / CVE-2022-0568
  - Fix CVE-2023-0662
  - Fix CVE-2023-3247
  - Fix CVE-2023-3823
  - Fix CVE-2023-3824


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p03
changelog:
  - Type:cves
  - ID:CVE-2024-8925、CVE-2024-8926、CVE-2024-8927、CVE-2024-9026
  - SUG:NA
  - DESC:fix CVE-2024-8925, CVE-2024-8926, CVE-2024-8927, CVE-2024-9026


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p05
changelog:
  - Type:cves
  - ID:CVE-2024-2756,CVE-2024-3096,CVE-2024-5458
  - SUG:NA
  - DESC:fix CVE-2024-2756,CVE-2024-3096,CVE-2024-5458


author: gaoyukun <gaoyukun@kylinos.cn> - 7.2.34-3.p07
changelog:
  - Type:cves
  - ID:CVE-2024-8929,CVE-2024-8932,CVE-2024-11236,CVE-2024-11234,CVE-2024-11233
  - SUG:NA
  - DESC:fix CVE-2024-8929,CVE-2024-8932,CVE-2024-11236,CVE-2024-11234,CVE-2024-11233


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-11
changelog:
  - Type:upgrade
  - ID:NA
  - SUG:NA
  - DESC: upgrade to version 3.3.16 and delete the patch between
          3.3.15 and 3.3.16.


author: MarsChan <chenmingmin@huawei.com> - 3.3.16-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:A kernel change means we cannot trust what sysconf(SC_ARG_MAX)
         returns. We clamp it so its more than 4096 and less than 128*1024
         which is what findutils does.


author: shenyangyang <shenyangyang4@huawei.com> - 12.2-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add provides of pulseaudio-libs-devel(aarch-64) needed by libmikmod-devel


author: wangkai <13474090681@163.com> - 9.0.1-5
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: GuoCe <guoce@kylinos.cn> - 3.7.9-37
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Modify the spec file to synchronize the version information of
         CHANGLOG and VERSION.


author: GuoCe <guoce@kylinos.cn> - 3.7.9-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: add loongarch64 support and disable valgrind-devel for loongarch64


author: GuoCe <guoce@kylinos.cn> - 3.7.9-39.se.01
changelog:
  - Type: bugfix
  - ID: [BUG#193772]
  - SUG: NA
  - DESC: From: @wanghao
          移植kysec执行控制检查补丁
          add patch: python3-7.9-add-kysec-exectl-check.patch


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-40.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2007-4559
  - SUG:NA
  - DESC:Add Patch9007-9008, fix CVE-2007-4559
  -      Add Patch9009, fix test_xml_etree error with expat versions that fix CVE-2023-52425


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-41.se.01
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patches
  -      gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler
  -      gh-99889: Fix directory traversal security flaw in uu.decode()


author: wangshuo <wangshuo@kylinos.cn> - 3.7.9-43.se.01
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
  -      gh-124651: Quote template strings in `venv` activation scripts


author: Feng Jiang <jiangfeng@kylinos.cn> -2:4.1.0-64.p02
changelog:
  - Type: update
  - ID:   [TASK#158763]
  - SUG:  NA
  - DESC: Add support for virtio-gpu hardware video acceleration.


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-64.p03
changelog:
  - Type: Update
  - ID: [TASK#174977][TASK#170640][TASK#166472]
  - SUG: NA
  - DESC: to fix CVE-2023-3354 CVE-2020-24165 CVE-2020-13791 CVE-2023-3180 CVE-2023-0664 and CVE-2023-2861
  - 	accel/tcg: fix race in cpu_exec_step_atomic (CVE-2020-24165)
  - 	pci: assert configuration access is within bounds(CVE-2020-13791)
  - 	io: remove io watch if TLS channel is closed during handshake(CVE-2023-3354)
  -       qga/win32: Use rundll for VSS installation(CVE-2023-0664)
  -       qga/win32: Remove change action from MSI installer(CVE-2023-0664)
  -       9pfs: prevent opening special files (CVE-2023-2861)


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-64.p04
changelog:
  - Type:update
  - ID: [TASK#181011]
  - SUG: NA
  - DESC: Add Hygon patches about encryption
  -       The latest kernel already supports the implementation of the VCPU topology of the Hygon platform, so remove  KYLIN-change-the-apicid-bitmap-for-kernel-to-get-the-socketid.patch.
  -       Fix the compilation issue that the function(kvm_arch_cpu_check_are_resettable) was no defined on the LoongArch architecture.


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-64.p05
changelog:
  - Type: Bug
  - ID: [BUG#206215]
  - SUG: NA
  - DESC: target/arm: fix typo in cpu.h ID_AA64PFR1 field name
  -       change "sbss" to "ssbs" to fix this error.


author: lijunwei <lijunwei@kylinos.cn> - 2:4.1.0-64.p06
changelog:
  - Type: update
  - ID:   [TASK#193495]
  - SUG:  NA
  - DESC: Merge Phytium' Patch to support S5000c host-model


author: weishaokun <weishaokun@kylinos.cn> - 2:4.1.0-64.p07
changelog:
  - Type: update
  - ID:   [BUG#210849]
  - SUG:  NA
  - DESC: fix hygon bug that can not save virtual machines


author: wangguochun <wangguochun@kylinos.cn> - 2:4.1.0-64.p08
changelog:
  - Type: Bug
  - ID: [BUG#186999]
  - SUG: NA
  - DESC: fix unkown virtio-net-nic speed，set speed 10000Mb/s


author: yanjianqing <yanjianqing@kylinos.cn> - 2:4.1.0-64.p10
changelog:
  - Type: update
  - ID: [TASK#224909]
  - SUG: NA
  - DESC: Fixed some issues supported by CSV/CSV2/CSV3
  -       fix the problem of the number of encrypted virtual machines supported by Haiguang No. 2 and No. 3
  -       fix migration-related issues


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 2:4.1.0-64.p12
changelog:
  - Type: Update
  - ID:   [TASK#352309]
  - SUG:  NA
  - DESC: fix CVE-2024-4467 CVE-2024-7409 CVE-2023-5088


author: lizhanchun <lizhanchun@kylinos.cn> - 2:4.1.10-64.p16
changelog:
  - Type: Update
  - ID:   [TASK#352451]
  - SUG:  NA
  - DESC: Supporting inter-series thermal migration in Pythium.


author: lijunwei <lijunwei@kylinos.cn> - 2:4.1.10-64.p19
changelog:
  - Type: Update
  - ID:   [TASK#422831]
  - SUG:  NA
  - DESC: fix CVE-2023-3019/disbale pvrdma(deprecated upstream) to fix CVE-2023-1544


author: liwenchong <liwenchong@kylinos.cn> - 1.39.0-1.p02
changelog:
  - Type:bugfix
  - ID:BUG#131966
  - SUG:NA
  - DESC:fix bug#131966 rebuild in tag v10-sp2-updates
  - for qpid-cpp-client depend libboost_program_options.so.1.73.0


author: lixiaoyong <lixiaoyong@kylinos.cn> - 1.39.0-1.p05
changelog:
  - Type: bugfix
  - ID: [BUG#231575]
  - SUG: NA
  - DESC: Fix typo in server-linearstore summary
          backport Patch01 to fix loongarch file not found error


author: jilin.liu <jilin.liu@cs2c.com.cn> - 1:4.8.7-47.p01
changelog:
  - add diff from 1:4.8.7-46, diff:
  - add qt-everywhere-opensource-src-4.8.7-neokylin-mips.patch
  - add qt-everywhere-opensource-src-4.8.7-atomic-mips64el.patch
  - add qt-everywhere-opensource-src-4.8.7-qmake-mips.patch
  - add qt-everywhere-opensource-src-4.8.7-mips64r2.patch
  - modified:  assistant.desktop designer.desktop linguist.desktop qdbusviewer.desktop
  - (1:4.8.7-46)ori uri: http://10.1.110.123/download/iso/Euler/openeuler_ARM64/openeuler-2020-03-13-01-32-06/Software/aarch64/SRPMS/Packages/qt-4.8.7-46.oe1.src.rpm
  - (1:4.8.7-46)modified: http://10.1.123.237/kojifiles/packages/qt/4.8.7/46.ky10/src/qt-4.8.7-46.ky10.src.rpm


author: jilin.liu <jilin.liu@cs2c.com.cn> - 1:4.8.7-47.p02
changelog:
  - add patch 6009: qt4-loongson3a-progressbar-block-issue.patch;
  - loongson 3a3000,(double) 0/0 = 2147483647 issue.


author: xiehongyu <xiehongyu@kylinos.cn> - 1:4.8.7-47.p05
changelog:
  - Type:cves
  - ID:CVE-2020-0570 CVE-2020-17507
  - SUG:restart
  - DESC: fix CVE-2020-0570 CVE-2020-17507


author: wanglixing <wanglixing@kylinos.cn> - 1:4.8.7-47.p08
changelog:
  - Type:cves
  - ID:CVE-2023-34410,CVE-2023-38197,CVE-2023-37369,CVE-2023-43114
  - SUG:NA
  - DESC:add patch6016,patch6017,patch6018,patch6019.skip the release p07 due to an occupation


author: huayadong <huayadong@kylinos.cn> - 1:4.8.7-47.p11
changelog:
  - Type: bugfix
  - ID:   [TASK#220326]
  - SUG:  NA
  - DESC: add patch45: fix-that-filediolog-cannot-use-input-methods.patch


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: liwei <liwei@kylinos.cn> - 4.15.1-53.p01.se.01
changelog:
  - Type:update
  - ID:[TASK#176491]
  - SUG:NA
  - DESC:add sm software package anti uninstallation
    add patch: rpm-add-sm-software-package-anti-uninstallation.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 4.15.1-53.p01.se.02
changelog:
  - Type:update
  - ID:[TASK#176493]
  - SUG:NA
  - DESC:保持rpm安装文件原安全标记
  -       add patch rpm-remainoldtag-kysec.patch
  -       add patch rpm-fix-install-pkg-bw.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 4.15.1-53.p01.se.03
changelog:
  - Type:update
  - ID:[TASK#192265]
  - SUG:NA
  - DESC:修复rpm包关于bwlist的状态判断不对的问题
  -       add patch rpm-add-check-pkg-bw-sdk-status.patch


author: zhaoyun <zhaoyun@kylinos.cn> - 4.15.1-54.p01.se.04
changelog:
  - Type:bugfix
  - ID:[Bug#210692]
  - SUG:NA
  - DESC:【应用安装控制】同时开启安装黑白名单，安装仅配置黑名单的软件包时提示语错误
  -       add patch: rpm-update-bw-notification.patch


author: litianhao <litianhao@kylinos.cn> - 4.15.1-54.p01.se.05
changelog:
  - Type:bugfix
  - ID:[Task#197801]
  - SUG:NA
  - DESC: 软件防卸载补充中文翻译
  -       add patch: rpm-add-spro-i18n.patch


author: xinghe <xinghe2@h-partners.com> - 4.11.12-31
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: changtao <changtao@kylinos.cn> - 4.11.12-32.p03
changelog:
  - Type:bugfix
  - ID:[BUG#220458]
  - CVE:NA
  - SUG:NA
  - DESC:fix require satisfied libldb version for samba-client


author: yueyuankun <yueyuankun@kylinos.cn> - 1.0.28-11.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:Cancel the noarch attribute of "sane backends help" package


author: songjuntao <songjuntao@kylinos.cn> - 15.6-9.p04
changelog:
  - Type:update
  - ID:TASK#181401
  - SUG:NA
  - DESC:open enable_sm status and add smx algorithm into db check allowlist function


author: yueyuankun <yueyuankun@kylinos.cn> - 15.6-9.p09
changelog:
  - Type:bugfix
  - ID:BUG#216408
  - SUG:secure boot
  - DESC:add BOOTLOONGARCH.EFI/BOOTLOONGARCH64.EFI for loongarch64


author: majianhan <majianhan@kylinos.cn> - 15.6-9.p12
changelog:
  - Type:CVE
  - ID:TASK#423385
  - SUG:NA
  - DESC: 1. Patch52 - Fix issue where second_stage was set to an empty
                       string in parse_load_option.
          2. Patch53 - Always clear SbatLevel when Secure Boot is diabled.
          3. Fix CVEs:
             CVE-2023-2650     CVE-2023-0465
             CVE-2024-0727     CVE-2023-3446
             CVE-2023-5678     CVE-2023-3817
             CVE-2023-0464     CVE-2018-0737
             CVE-2021-23840    CVE-2023-40546
             CVE-2023-40547    CVE-2023-40548
             CVE-2023-40549    CVE-2023-40550
             CVE-2023-40551


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 21.01-6.p01
changelog:
  - Type:compile
  - ID:TASK#170324
  - SUG:NA
  - DESC:Modify spec for kylin dpdk modification and spdk-tools do not need require (x86-64) package for it's noarch


author: yinyongkang <yinyongkang@kylinos.cn> - 21.01.6.p02
changelog:
  - Type:bugfix
  - ID:[Task#338419]
  - SUG:NA
  - DESC: scripts: Do msr existence check only on x86_64 machines


author: lingsheng <lingsheng1@h-partners.com> - 6.04-14
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: huyubiao <huyubiao@huawei.com> - 243-64
changelog:
  - add backport-pstore-fix-use-after-free.patch
        backport-udev-also-logs-file-permission.patch
        backport-core-Fix-setting-StatusUnitFormat-from-config-files.patch
        backport-udevadm-missing-initialization-of-descriptor.patch
        backport-udevadm-use-usec_add.patch
        backport-shared-install-fix-error-codes-returned-by-install_c.patch
        backport-udevadm-trigger-do-not-propagate-EACCES-and-ENODEV.patch
        backport-pstore-rework-memory-handling-for-dmesg.patch
        backport-udev-fix-memleak-caused-by-wrong-cleanup-function.patch
        backport-network-ndisc-do-not-drop-all-prefixes-when-a-prefix.patch
        backport-nspawn-fix-handling-of-console-help.patch
        backport-core-job-fix-breakage-of-ordering-dependencies-by-sy.patch
        backport-sd-device-enumerator-do-not-return-error-when-a-devi.patch
        backport-udev-ignore-ENOENT-when-chmod_and_chown-device-node.patch
        backport-udev-fix-error-code-in-the-log-message.patch
        backport-udev-do-not-append-newline-when-write-attributes.patch
        backport-udevd-wait-for-workers-to-finish-when-exiting.patch
        backport-verify-fix-segmentation-fault.patch
        backport-core-path-serialize-the-previous_exists-state.patch
        backport-core-path-fix-spurious-triggering-of-PathExists-on-r.patch
        backport-udevadm-ignore-EROFS-and-return-earlier.patch
        backport-udevd-don-t-use-monitor-after-manager_exit.patch
        backport-hibernate-resume-generator-wait-infinitely-for-the-r.patch
        backport-sd-event-refuse-running-default-event-loops-in-any-o.patch
        backport-time-util-deal-with-systems-where-userspace-has-64bi.patch
        backport-time-util-also-use-32bit-hack-on-EOVERFLOW.patch
        backport-test-condition-fix-group-check-condition.patch
        backport-udev-do-not-use-exact-match-of-file-permission.patch
        backport-network-udev-use-uint64_t-for-bit-rate.patch
        backport-unit-add-AF_ALG-to-systemd-networkd.service.patch
        backport-Fix-generator-name-in-hibernate-resume-generator-s-d.patch
        backport-udevadm-show-more-error-message-during-exporting-dat.patch


author: huyubiao <huyubiao@huawei.com> - 243-66
changelog:
  - add backport-journalctl-allow-running-vacuum-on-remote-journals-t.patch
        backport-systemctl-skip-non-existent-units-in-the-cat-verb.patch
        backport-journalctl-implement-facility-foo.patch
        backport-journalctl-show-duplicate-entries-if-they-are-from-t.patch
        backport-fix-journal-regression.patch
        backport-fs-util-when-calling-chase_symlinks-with-root-path-l.patch
        backport-test-add-test-for-the-non-resolving-of-chase_symlink.patch
        backport-fs-util-make-sure-we-output-normalized-paths-in-chas.patch
        backport-test-make-sure-chase_symlink-returns-normalized-path.patch
        backport-test-fix-rename_noreplace-test.patch
        backport-logind-check-PolicyKit-before-allowing-VT-switch.patch
        backport-errno-ETIMEDOUT-is-also-a-connection-error.patch
        backport-sd-bus-break-the-loop-in-bus_ensure_running-if-the-b.patch


author: huyubiao <huyubiao@huawei.com> - 243-67
changelog:
  - add backport-core-make-sure-we-don-t-get-confused-when-setting-TE.patch
        backport-mount-setup-change-the-system-mount-propagation-to-s.patch
        backport-core-transition-to-FINAL_SIGTERM-state-after-ExecSto.patch


author: hanjinpeng <hanjinpeng@kylinos.cn> - 243-67.p01
changelog:
  - Type: update
  - ID:   [TASK#186410]
  - SUG:  NA
  - DESC:  1. add Patch10001: 0002-Change-the-NTP-server.patch(import changes from 243-31.se.p06)
              Change NTP server.
           2. add patch10002:systemd-243-kylin-init5-hang.patch(import changes from 243-31.se.p06)
              Modify ctrl+alt+F2 switch to init5 stuck problem
           3. add patch10003:systemd-243-kylin-init1-add-check-console-tty1.patch(import changes from 243-31.se.p06)
              fix bug 1568:Input init1 in the graphical interface, switching to single user is abnormal, the screen is black,
              the cursor in the upper left corner flickers, and the graphical interface cannot be switched
           4. add patch10004: systemd-fix-selinux-denied-error-for-systemctl-when-lsm-stacking-is-enable.patch
              fix selinux denied error for systemctl when lsm stacking is enable
           5. add patch10010: 0001-Prevent-excessive-proc-1-mountinfo-reparsing.patch
              fix create pod container fail and systemd timeout (rhbz #1819868)
           6. add patch10020: vconsole-setup-downgrade-log-message-when-setting-font-fails.patch
              Fix log message error when setting font fails
           7. add patch20001: 0001-Kylin-add-systemd-243-loongarch64-support.patch
              add patch20002: 0002-Kylin-fix-ctrl-alt-F2-switch-to-init5-stuck-problem-.patch
              support loongarch64, Remove gnu-efi check in loongarch64


author: yinyongkang <yinyongkang@kylinos.cn> - 243-67.p02
changelog:
  - Type:bugfix
  - ID:[TASK#192741]
  - SBUG:NA
  - DESC: add patch10030: 0001-network-do-not-drop-foreign-config-if-interface-is-i.patch
          network: do not drop foreign config if interface is in initialized state.


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 243-67.p04
changelog:
  - Type:bugfix
  - ID:[Bug#210134]
  - SUG:NA
  - DESC:add backport-donot-open-CD-rom-use-exclusive-mode.patch，for ejecjt button


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-67.p05
changelog:
  - Type:bugfix
  - ID:[Bug#220276]
  - SUG:NA
  - DESC: Add backport-core-add-possibility-to-not-track-certain-unit-types.patch
          Sync upstream community patches , optimization user login time for too long in some case


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-67.p06
changelog:
  - Type:bugfix
  - ID:[Bug#223633]
  - SUG:NA
  - DESC: Revert backport-udev-make-algorithm-that-selects-highest-priority-de.patch
          Revert patch to fix update device symlinks issue (similar #1942299)


author: wangshuo <wangshuo@kylinos.cn> - 243-67.p07
changelog:
  - Type:bugfix
  - ID:[TASK#329354]
  - SUG:NA
  - DESC:add patch rc-local-order-after-network-online.target.patch
         fix rc-local service start failed


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-67.p09
changelog:
  - Type:bugfix
  - ID:[TASK#375571]
  - SUG:NA
  - DESC: Add pid1-set-SYSTEMD_NSS_DYNAMIC_BYPASS-env-var-for-dbus-daemon.patch
          Fix deadlock between pid1 and dbus-daemon


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 243-67.p10
changelog:
  - Type:update
  - ID:[TASK#400549]
  - SUG:NA
  - DESC: Print the PID and cmdline to the system log when run systemctl command.


author: bianxiuning <bianxiuning@kylinos.cn> - 5.0-5.p01
changelog:
  - Type:update
  - ID:[176526]
  - SUG:NA
  - DESC:
  -       1.add 0001-newfeature-tpm-Add-gm-support.patch, 0002-newfeature-tpm-Add-gm-test-case-for-all-commands.patch provided by HYGON, 0003-newfeature-tpm-Add-gm-adapt-for-kylin-openssl-sm2.patch, 0004-newfeature-tpm-Add-gm-pandoc-configure-modify.patch
  -	2.add 0001-bugfix-tpm-fix-policy-test-case-error.patch provided by HYGON


author: mengchaoming<mengchaoming@kylinos.cn> -5.0-5.p02
changelog:
  -Type:Update
  -ID:[Task#186427]
  -SUG:NA
  -DESC:backport patches from upstream:remove rpath and runpath of exec files


author: zhangfan <zhangfan4@kylinos.cn> - 5.0-5.p04
changelog:
  - Type:update
  - ID:[TASK#374825]
  - SUG:NA
  - DESC: 1.添加TCM测试case
          2.修复test_tcm2_capability.sh测试case的错误


author: Hugel<gengqihu1@huawei.com> - 3.0.3-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 3.0.3
         use proper rundir tmpfilesdir and sysusersdir, so proper directories are used


author: yuejiayuan<yuejiayuan@kylinos.cn> - 3.0.3-2.p01
changelog:
  - Type:update
  - ID:TASK#175727
  - SUG:NA
  - DESC:add 0001-newfeature-tpm-Add-gm-support.patch provided by HYGON


author: openEuler Buildteam <buildteam@openeuler.org> - 2.8.1-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revise the bogus date in changelog and delete the unnecessary subpackage "udisks2-iscsi"


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 2.9.0-5.p01
changelog:
  - Type: updates
  - ID: TASK#186442
  - SUG: NA
  - DESC: Sync 2.9.0-3.p02 patch: fix unsinicized issues of zh_HK and zh_CN


author: yanglu<yanglu72@h-partners.com> - 1.11.0-6
changelog:
  - Type:cves
  - CVE:CVE-2022-30698 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30698 and CVE-2022-30699


author: liudingyao <liudingyao@kylinos.com> - 2.3.7-3.p01
changelog:
  - Type:update
  - ID:[TASK#408427]
  - SUG:NA
  - DESC:Change h1 to p01 to resolve the repository version issue


author: wanfeng <wanfeng@kylinos.cn> - 2.35.2-10.p05
changelog:
  - Type:bugfix
  - ID:[BUG#153935]
  - SUG:NA
  - DESC:add patch:9400 for supporting utf-8 to fix problematic output when
  -      executing below commands at /dev/ttyN(N>1):
  -      systemctl restart rescue.service
  -      systemctl set-default rescue.target and reboot


author: zhangzikang <zhangzikang@kylinos.cn> - 2.35.2-13.p01
changelog:
  - Type:updates
  - ID:[TASK#186460]
  - SUG:NA
  - DESC:sync community patches
         backport-column-segmentation-fault-on-invalid-unicode-input-passed-to-s-option.patch
         backport-su-offer-usernames-rather-than-files.patch
         backport-Fix-memory-leaks-in-the-chcpu.patch
         backport-logger-fix-prio-prefix-doesnot-use-priority-default.patch
         backport-mcookie-fix-infinite-loop-when-use-f.patch
         backport-logger-realloc-buffer-when-header-size-changed.patch
         backport-logger-fix-size-use-for-stdin.patch
         backport-vipw-flush-stdout-before-getting-answer.patch
         backport-chfn-Make-readline-prompt-for-each-field-on-a-separate-line.patch
         backport-chfn-flush-stdout-before-reading-stdin-and-fix-uninitialized-variable.patch
         backport-chsh-fflush-stdout-before-reading-from-stdin.patch
         backport-login-Restore-tty-size-after-calling-vhangup.patch
         backport-lsblk-fix-endless-loop-if-device-specified-more-than-once.patch
         backport-libblkid-avoid-buffer-overflow-in-ocfs-superblock-parsing.patch
         backport-libblkid-use-checksum-for-jmicron.patch
         backport-libblkid-cleanup-indentation.patch
         backport-libblkid-fix-jmicron-checksum-and-LE-to-CPU.patch
         backport-libblkid-nvidia_raid-verify-superblock-size.patch
         backport-libblkid-nvidia_raid-validate-checksum.patch
         backport-prlimit-fix-optional-arguments-parsing.patch
         modify-rescuemode-chinese-error.patch


author: zhangzikang <zhangzikang@kylinos.cn> - 2.35.2-14.p01
changelog:
  - Type:bugfix
  - ID:[BUG#213337]
  - SUG:NA
  - DESC: sync community, fix the problem of abnormal display of model name


author: zhangzikang <zhangzikang@kylinos.cn> - 2.35.2-14.p02
changelog:
  - Type:update
  - ID:[TASK#209796]
  - SUG:NA
  - DESC: Remove ft_part S5000C, CPU model name obtained from the kernel
          remove patch 0001-lscpu-add-ft_part-S5000C.patch
                       0002-lscpu-fix-ft_part-S5000C.patch


author: Yu Peng <yupeng@kylinos.cn> - 2.35.2-14.p04
changelog:
  - Type:bugfix
  - ID:[TASK#360847]
  - SUG:NA
  - DESC:sync community patches
         backport-libfdisk-fix-fdisk_reread_changes-for-extended-partitions.patch


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-15
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-21
changelog:
  - Type:CVE
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
  - SUG:NA
  - DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237


author: xiejing <xiejing@kylinos.cn> - 2:9.0-22.p01
changelog:
  - Type: NA
  - ID: [Task#186447]
  - SUG: NA
  - DESC: 1)移植敏感词修改和zh_HK繁体字支持的补丁
  -	2)移植安全部门修改:修改sepc文件，将python相关的编译参数设置为no,解决vim绕过exectl执行未在白名单内的python脚本的问题


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2:9.0-22.p02
changelog:
  - Type:cves
  - ID:CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802
  - SUG:NA
  - DESC:Fix CVE-2024-41965 CVE-2024-41957 CVE-2024-43374 CVE-2024-43802


author: wangzhishun <wangzhishun1@huawei.com> - 5.1.0-11
changelog:
  - Make sure sample rate is specified and non-zero in DFF files
  - Fix potential out-of-bounds heap read


author: Like<like@kylinos.cn> - 1.51.06-2.p01
changelog:
  - Type:NA
  - Id:NA
  - SUG:NA
  - DESC: Reference  1.51.06-1.p01 modify, splits sub packages client,c++,client++,apps


author: Zhenneng Li <lizhenneng@kylinos.cn> - 19.1.0-2.p02
changelog:
  - Type: update
  - ID:   [TASK#105748]
  - SUG:  NA
  - DESC: Delete -D__KYLIN_FT1500A_DISPLAY__ for CFLAGS/CXXFLAGS


author: peijiankang <peijiankang@kylinos.cn> - 1.20.8-23.p01
changelog:
  - Type: bugfix
  - ID:   [TASK#186429]
  - SUG:  NA
  - DESC: sync from 1.20.8-19.p02
          Add ljmcore driver support
  	modify generic-hardened-ld to kylin/kylin-hardened-ld
  	fix alignment error
  	add multi gl support
  	add sietium driver support
  	add inno and x100 support


author: pengfuyuan <pengfuyuan@kylinos.cn> - 1.20.8-23.p03
changelog:
  - Type:CVE
  - Id:CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886
  - SUG:NA
  - DESC:fix CVE-2023-6816,CVE-2024-0229,CVE-2024-0408,CVE-2024-0409,CVE-2024-21885,CVE-2024-21886


